last executing test programs:

2m32.729030017s ago: executing program 3 (id=3728):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2m32.281660402s ago: executing program 3 (id=3733):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=r2, 0x6, 0x0, 0x973, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x3, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000380)=""/205, 0x0, 0x12}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x9}, 0xfffffffffffffffc, 0x0}, 0x200ce0c0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x4}, 0x4000091)

2m31.18000772s ago: executing program 3 (id=3740):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x29, 0x49, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)=@generic={0xa, "89ccd083e102efdc507261caa4389d8101fc3690a86c49c810221a09d1dc6259e4c7f375b3ae905c714d90d3cb47469313ff14bd2cb8f42b336ca3e70b837b5a25eec11b23c617ad83440d8c9daa12e5165266b1acdb7211b570fdb54e504d61b1840825c5acebe355c7e7bd2a6963a7557dc212dceecfcfc709595b9a21"}, 0x80, 0x0}, 0xe07e872420dfefca)
close(0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

2m30.648475992s ago: executing program 3 (id=3743):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4000900061f2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400b2930c2e6047ed58", 0x30}], 0x1}, 0x800)
r2 = socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0xa, 0x2, 0x0) (async)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}, 0x807) (async)
sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}, 0x807)
sendmsg$kcm(r2, &(0x7f0000006900)={&(0x7f0000006640)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x3}, 0x800)

2m30.284085991s ago: executing program 3 (id=3748):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5}, 0x50)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))

2m29.862977925s ago: executing program 3 (id=3752):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x104046, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(0xffffffffffffffff)
socketpair(0x1, 0x801, 0x0, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000003c0)=0x4000000000001000, 0x12)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000400), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x1000, 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="440000001000"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000006040000000000000000005f79"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28)
perf_event_open(&(0x7f0000000040)={0x2, 0xe3, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe, 0xffffffffffffffff}, 0x828, 0x8000, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)

2m14.691518872s ago: executing program 32 (id=3752):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x104046, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(0xffffffffffffffff)
socketpair(0x1, 0x801, 0x0, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000003c0)=0x4000000000001000, 0x12)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000400), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x1000, 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="440000001000"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000006040000000000000000005f79"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28)
perf_event_open(&(0x7f0000000040)={0x2, 0xe3, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe, 0xffffffffffffffff}, 0x828, 0x8000, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)

4.630615292s ago: executing program 0 (id=4493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="777b76c7c5642479fdd9065d2f539bf67fcb7101d22332418050f421fdba167de429a8bd242af7e64614cfc54d3c2d0cb206b095dcf9e317ec5a9b7f5a80e72aa9c1c4cfd449c1afd795c75833689f6ae0556317e4f2c78413838235f794e5c9c8c34723ba15b9c311146f061b3cc356a58127c91e390fe9c76e3f986c9ef700da1edc46b86e15d53030fcd2e9039dbc9f71dee622e82f85fafc5c700c5916b49f3583a681135a44c96301a8042fd0f320e7a9250e85ec5715bee052c097bef59b0e7742585fcbb491a93191b96ff87d1021", 0xd2}], 0x1, &(0x7f0000000340)=[{0xe0, 0x10b, 0x6, "89fe9a4b48945e70d374ce2ede6a2e552d7869a4c78ab330ea80cca16c48fd7c63cc0c7a5324891d12779ef893f04182c190b5f5eee72610be7d6c75319cd6cf2a70b6c074623a88efc03e8d00228a1d0ab78f3ba57f878d7c07951827f07d1759781712cf35d500f108d2234c0ef84708a834569f7ae433a1ff777182a46154856e4d39e8bbbcc14d0b702ea404f5c7028988745f270b340c252fbf1cbd3f0aa47a50a9059765c742466dd5fac3acf1cd960df2388df7dc55b77e6d1ea085c3fe30eb1179a39fe4ff"}, {0x20, 0x10f, 0x6, "34b675a83a1bd95b048be1a6"}, {0xb0, 0x11, 0x8be, "6ca6b9ad285013ae9a4e50826ffdaff692982a4e5e1db6e71e6e1405c4507875181c63dea9b769bbb0576b345781c043ebb93881f2a7977001eb28d893d89a04fb9b31ec9df1cdf910b0baa28555a1bbce6aba9720d6f3ad2c79e3a244dcf12fd6b0819c4fffa8199af651498d87f1891f0899af6f6bde443b1234aa5c6f7e907cb13b9c7778f237343f175e1f742206f52ec4cabe841ffb1b039e5d"}], 0x1b0}, 0xc0c4)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, 0x0, 0x4014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
socket$kcm(0x15, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)

4.418465179s ago: executing program 5 (id=4494):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x1, 0x3, 0x4, 0x0, 0x3, 0x2080, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff914, 0x4, @perf_config_ext={0x7, 0x101}, 0x0, 0x0, 0xb, 0x9, 0x8, 0x5, 0x4, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xd4)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="200000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d01", 0x12}], 0x2}, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)

4.264462051s ago: executing program 4 (id=4496):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x45, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x15869, 0x0, 0x0, 0x0, 0x8000000000000, 0xea6e, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x1, 0xffffffdf, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r2}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

4.109135563s ago: executing program 2 (id=4497):
socket$kcm(0xa, 0x2, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

3.860274593s ago: executing program 5 (id=4500):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)='%pS    \x00'}, 0x20)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000000c0)=r1, 0xffcc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0x40f, 0xfffff800, 0x40020, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x5421, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r9, 0x0, 0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e)
close(r6)
recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f060001d617381aca90a3c22624f2320417e5f731000000050001"], 0x0, 0x3a}, 0x28)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3e0002"], 0x9a)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x8, r5}, 0x18)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r12, 0x0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback=0x2c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12}, 0x94)

3.539857109s ago: executing program 0 (id=4501):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

3.357715574s ago: executing program 2 (id=4503):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xc, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00128700631177fbac141416e000030a44079f03fc2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1b, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b6b, 0x1, @perf_config_ext={0x407fff, 0x3}, 0xa144, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="61452e8f28a907a374cae903c730e2bf30d1154f2541f1687155a678dd6f67063024785bf1571bcca421374c93f34c3e69c34db3d4677ebe4f7c6f857272ae5cb81bd57a0017139619bb3e0f9719e9e2c9718167619c89889f59559570ecb85468fac63bbab76fd7ad167779d48d7e83c69a4a1caf79580765b19a80ea33741ea42a16992c97f87402dbc0044ca8a84783f1f8765433540f4e6877ab0cc845c639dba6b6352b65", 0xa7}], 0x1}, 0x20000001)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xb)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x70, 0x4, 0x8, 0x80, 0x0, 0xffffffff, 0x42000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x2}, 0xa280, 0x800ffff, 0x7, 0x0, 0x56, 0x1, 0xdb82, 0x0, 0x7, 0x0, 0x57a}, 0xffffffffffffffff, 0xd, r0, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

3.159934669s ago: executing program 1 (id=4504):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x7f, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4)
sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/15, 0xf}, 0x2042)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0, <r8=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x3, 0x6, 0xa, 0x8000, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x28, &(0x7f0000000240)=""/40, 0x40f00, 0x10, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x4, 0x676, 0x5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r3, r8, r0]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000024dd00008af0ff00000000bfa10000000000000701ffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.104138814s ago: executing program 4 (id=4505):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000320091"], 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}], 0x28}, 0x4002)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000008000000010000007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4)
r10 = socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x6bc, 0x9}, 0x0, 0x970f, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x7aec2796}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@local}]}]}}}], 0x20}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback, 0x0, 0x0, 0x2a5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, 0xffffffffffffffff, 0x34, 0x8, 0x0, @void, @value=r8, @void, @void, r11}, 0x20)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

3.075452666s ago: executing program 0 (id=4506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x7, 0xffff, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x805, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
close(0x3)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38)

2.829768756s ago: executing program 2 (id=4507):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={<r0=>0xffffffffffffffff})
socket$kcm(0x11, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4007fef, 0x1086, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x408001, 0xaea}, 0x106084, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r2, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)=r3}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x7, 0x9, 0x0, 0x4, 0x8, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x94}, 0x2808, 0x3, 0x6, 0x8, 0x1, 0x7, 0x9, 0x0, 0x4, 0x0, 0xa780000000000000}, 0x0, 0xa, r2, 0xa)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/142, 0x8e}], 0x1, &(0x7f0000000780)=""/204, 0xcc}, 0x22)
perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x0, 0xec, 0x3, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x15021, 0x100, 0xe, 0x6, 0x1ff, 0x1f, 0x6, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000500)={0x4, 0x80, 0x0, 0x2, 0x62, 0xfd, 0x0, 0x2, 0x60464, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x6}, 0x8000, 0x76, 0x3, 0x3, 0x7, 0x5, 0x2, 0x0, 0x41dd, 0x0, 0x1000})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r6 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x80000000, 0x2}, 0x17, 0x1, 0x4, 0x4, 0x0, 0x4}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x2940, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)

2.672209248s ago: executing program 1 (id=4508):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

2.593873774s ago: executing program 5 (id=4509):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1}, 0x4000010)

2.476822664s ago: executing program 1 (id=4510):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x1, 0x3, 0x4, 0x0, 0x3, 0x2080, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff914, 0x4, @perf_config_ext={0x7, 0x101}, 0x0, 0x0, 0xb, 0x9, 0x8, 0x5, 0x4, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xd4)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="200000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d01", 0x12}], 0x2}, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)

2.468903904s ago: executing program 2 (id=4511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="777b76c7c5642479fdd9065d2f539bf67fcb7101d22332418050f421fdba167de429a8bd242af7e64614cfc54d3c2d0cb206b095dcf9e317ec5a9b7f5a80e72aa9c1c4cfd449c1afd795c75833689f6ae0556317e4f2c78413838235f794e5c9c8c34723ba15b9c311146f061b3cc356a58127c91e390fe9c76e3f986c9ef700da1edc46b86e15d53030fcd2e9039dbc9f71dee622e82f85fafc5c700c5916b49f3583a681135a44c96301a8042fd0f320e7a9250e85ec5715bee052c097bef59b0e7742585fcbb491a93191b96ff87d1021", 0xd2}], 0x1, &(0x7f0000000340)=[{0xe0, 0x10b, 0x6, "89fe9a4b48945e70d374ce2ede6a2e552d7869a4c78ab330ea80cca16c48fd7c63cc0c7a5324891d12779ef893f04182c190b5f5eee72610be7d6c75319cd6cf2a70b6c074623a88efc03e8d00228a1d0ab78f3ba57f878d7c07951827f07d1759781712cf35d500f108d2234c0ef84708a834569f7ae433a1ff777182a46154856e4d39e8bbbcc14d0b702ea404f5c7028988745f270b340c252fbf1cbd3f0aa47a50a9059765c742466dd5fac3acf1cd960df2388df7dc55b77e6d1ea085c3fe30eb1179a39fe4ff"}, {0x20, 0x10f, 0x6, "34b675a83a1bd95b048be1a6"}, {0xb0, 0x11, 0x8be, "6ca6b9ad285013ae9a4e50826ffdaff692982a4e5e1db6e71e6e1405c4507875181c63dea9b769bbb0576b345781c043ebb93881f2a7977001eb28d893d89a04fb9b31ec9df1cdf910b0baa28555a1bbce6aba9720d6f3ad2c79e3a244dcf12fd6b0819c4fffa8199af651498d87f1891f0899af6f6bde443b1234aa5c6f7e907cb13b9c7778f237343f175e1f742206f52ec4cabe841ffb1b039e5d"}], 0x1b0}, 0xc0c4)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, 0x0, 0x4014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x9, @private0, 0x7f, 0x2}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)

2.359886093s ago: executing program 5 (id=4512):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x801, 0x0, 0x2df, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x113}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044)

2.173734517s ago: executing program 2 (id=4513):
socket$kcm(0xa, 0x2, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

1.997460741s ago: executing program 4 (id=4514):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)

1.905225739s ago: executing program 1 (id=4515):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b8eca3ca664f493937afd1ca1391f9094e5ce6e51c7c9b6e0af0ad181e26857abcfea6eaf8212bc85fcbac17d6add9a5e4708c863b51c633279d07e4bf38d55aae7bfc4471364e655e35166b83019d658b", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
socket$kcm(0x2, 0x1, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1180, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
openat$cgroup_procs(r6, &(0x7f0000000340)='tasks\x00', 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNSETLINK(r3, 0x5450, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$cgroup_subtree(r2, 0x0, 0xffbf)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100), 0x120)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)

1.835024895s ago: executing program 0 (id=4516):
socket$kcm(0x2, 0x2, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='bcache_read\x00', r2, 0x0, 0xb}, 0x18)

1.588067004s ago: executing program 4 (id=4517):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

1.281723169s ago: executing program 1 (id=4518):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xc, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1b, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b6b, 0x1, @perf_config_ext={0x407fff, 0x3}, 0xa144, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="61452e8f28a907a374cae903c730e2bf30d1154f2541f1687155a678dd6f67063024785bf1571bcca421374c93f34c3e69c34db3d4677ebe4f7c6f857272ae5cb81bd57a0017139619bb3e0f9719e9e2c9718167619c89889f59559570ecb85468fac63bbab76fd7ad167779d48d7e83c69a4a1caf79580765b19a80ea33741ea42a16992c97f87402dbc0044ca8a84783f1f8765433540f4e6877ab0cc845c639dba6b6352b65", 0xa7}], 0x1}, 0x20000001)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xb)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x70, 0x4, 0x8, 0x80, 0x0, 0xffffffff, 0x42000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x2}, 0xa280, 0x800ffff, 0x7, 0x0, 0x56, 0x1, 0xdb82, 0x0, 0x7, 0x0, 0x57a}, 0xffffffffffffffff, 0xd, r0, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

1.281148128s ago: executing program 5 (id=4519):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0380, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x87, &(0x7f0000000240)=""/135, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10)
r8 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r8, 0x0, 0x240448c4)
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)

1.203679945s ago: executing program 2 (id=4520):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000c8, 0x0, 0x1, 0x8000000000000, 0x2ab5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xe}, 0x3, 0x0, 0x8000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x1)
syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000001b007111a900000000008510000002000000000000002a000000b5000000000000009500a50d00000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
socketpair(0x10, 0x6, 0x7, &(0x7f0000000000))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x80000000}, 0x8114, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01221800000000000000340000003400fbde45000000030000000000000e00000000000000000300828689bc1e0300000000a2e5000000ff0700000a000000070000000600000000002e2e20000000000000000000"], 0x0, 0x52}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="660a00000000000061196e0000000000850000002200000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.148805569s ago: executing program 4 (id=4521):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={<r0=>0xffffffffffffffff})
socket$kcm(0x11, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4007fef, 0x1086, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x408001, 0xaea}, 0x106084, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r2, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)=r3}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x7, 0x9, 0x0, 0x4, 0x8, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x94}, 0x2808, 0x3, 0x6, 0x8, 0x1, 0x7, 0x9, 0x0, 0x4, 0x0, 0xa780000000000000}, 0x0, 0xa, r2, 0xa)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/142, 0x8e}], 0x1, &(0x7f0000000780)=""/204, 0xcc}, 0x22)
perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x0, 0xec, 0x3, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x15021, 0x100, 0xe, 0x6, 0x1ff, 0x1f, 0x6, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000500)={0x4, 0x80, 0x0, 0x2, 0x62, 0xfd, 0x0, 0x2, 0x60464, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x6}, 0x8000, 0x76, 0x3, 0x3, 0x7, 0x5, 0x2, 0x0, 0x41dd, 0x0, 0x1000})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r6 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x80000000, 0x2}, 0x17, 0x1, 0x4, 0x4, 0x0, 0x4}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x2940, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)

659.749608ms ago: executing program 4 (id=4522):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9c2d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbac, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
close(0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x12, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0xa, 0x3, 0xb, 0x8, 0x3}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x2, 0xb, 0x1, 0x46745effdf6a7412, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}]}, &(0x7f00000009c0)='GPL\x00', 0x42, 0x8f, &(0x7f0000000a00)=""/143, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x3, 0x1, 0xe, 0x68c}, 0x10, 0x0, r2, 0x3, &(0x7f0000000b00)=[0xffffffffffffffff, r3], &(0x7f0000000b40)=[{0x1, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c40)={0xffffffffffffffff}, 0x4)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)

658.622058ms ago: executing program 0 (id=4532):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd75f, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a9fe059f317a9dab00000000000340000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

503.10438ms ago: executing program 1 (id=4523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="777b76c7c5642479fdd9065d2f539bf67fcb7101d22332418050f421fdba167de429a8bd242af7e64614cfc54d3c2d0cb206b095dcf9e317ec5a9b7f5a80e72aa9c1c4cfd449c1afd795c75833689f6ae0556317e4f2c78413838235f794e5c9c8c34723ba15b9c311146f061b3cc356a58127c91e390fe9c76e3f986c9ef700da1edc46b86e15d53030fcd2e9039dbc9f71dee622e82f85fafc5c700c5916b49f3583a681135a44c96301a8042fd0f320e7a9250e85ec5715bee052c097bef59b0e7742585fcbb491a93191b96ff87d1021", 0xd2}], 0x1, &(0x7f0000000340)=[{0xe0, 0x10b, 0x6, "89fe9a4b48945e70d374ce2ede6a2e552d7869a4c78ab330ea80cca16c48fd7c63cc0c7a5324891d12779ef893f04182c190b5f5eee72610be7d6c75319cd6cf2a70b6c074623a88efc03e8d00228a1d0ab78f3ba57f878d7c07951827f07d1759781712cf35d500f108d2234c0ef84708a834569f7ae433a1ff777182a46154856e4d39e8bbbcc14d0b702ea404f5c7028988745f270b340c252fbf1cbd3f0aa47a50a9059765c742466dd5fac3acf1cd960df2388df7dc55b77e6d1ea085c3fe30eb1179a39fe4ff"}, {0x20, 0x10f, 0x6, "34b675a83a1bd95b048be1a6"}, {0xb0, 0x11, 0x8be, "6ca6b9ad285013ae9a4e50826ffdaff692982a4e5e1db6e71e6e1405c4507875181c63dea9b769bbb0576b345781c043ebb93881f2a7977001eb28d893d89a04fb9b31ec9df1cdf910b0baa28555a1bbce6aba9720d6f3ad2c79e3a244dcf12fd6b0819c4fffa8199af651498d87f1891f0899af6f6bde443b1234aa5c6f7e907cb13b9c7778f237343f175e1f742206f52ec4cabe841ffb1b039e5d"}], 0x1b0}, 0xc0c4)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, 0x0, 0x4014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x9, @private0, 0x7f, 0x2}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)

114.802032ms ago: executing program 5 (id=4524):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xc, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1b, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b6b, 0x1, @perf_config_ext={0x407fff, 0x3}, 0xa144, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="61452e8f28a907a374cae903c730e2bf30d1154f2541f1687155a678dd6f67063024785bf1571bcca421374c93f34c3e69c34db3d4677ebe4f7c6f857272ae5cb81bd57a0017139619bb3e0f9719e9e2c9718167619c89889f59559570ecb85468fac63bbab76fd7ad167779d48d7e83c69a4a1caf79580765b19a80ea33741ea42a16992c97f87402dbc0044ca8a84783f1f8765433540f4e6877ab0cc845c639dba6b6352b65", 0xa7}], 0x1}, 0x20000001)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xb)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x70, 0x4, 0x8, 0x80, 0x0, 0xffffffff, 0x42000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x2}, 0xa280, 0x800ffff, 0x7, 0x0, 0x56, 0x1, 0xdb82, 0x0, 0x7, 0x0, 0x57a}, 0xffffffffffffffff, 0xd, r0, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

0s ago: executing program 0 (id=4525):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x1, 0x3, 0x4, 0x0, 0x3, 0x2080, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff914, 0x4, @perf_config_ext={0x7, 0x101}, 0x0, 0x0, 0xb, 0x9, 0x8, 0x5, 0x4, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xd4)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="200000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d01", 0x12}], 0x2}, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000005c0), 0x12)

kernel console output (not intermixed with test programs):

9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.467150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  634.475661][T14157] netlink: 'syz.0.3227': attribute type 6 has an invalid length.
[  634.497258][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.501795][T14157] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3227'.
[  634.506729][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.531539][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  634.567487][T14158] netlink: 'syz.2.3226': attribute type 6 has an invalid length.
[  634.585678][T14158] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3226'.
[  634.780342][T14168] netlink: 'syz.3.3119': attribute type 1 has an invalid length.
[  634.827840][T14168] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3119'.
[  634.835298][T14170] netlink: 'syz.1.3228': attribute type 3 has an invalid length.
[  634.855240][T14170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3228'.
[  635.698737][T14194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3237'.
[  636.189721][T14207] netlink: 'syz.3.3242': attribute type 1 has an invalid length.
[  636.236740][T14211] netlink: 'syz.1.3243': attribute type 3 has an invalid length.
[  636.269559][T14207] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3242'.
[  636.293000][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3243'.
[  636.521701][T14215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3245'.
[  636.632710][T14217] netlink: 'syz.2.3246': attribute type 3 has an invalid length.
[  636.661338][T14217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3246'.
[  636.953008][T14217] netlink: 'syz.2.3246': attribute type 27 has an invalid length.
[  637.088528][T14227] netlink: 'syz.3.3250': attribute type 2 has an invalid length.
[  637.127262][T14227] netlink: 'syz.3.3250': attribute type 8 has an invalid length.
[  637.146787][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'.
[  637.168710][T14231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3251'.
[  637.858864][T14238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3254'.
[  637.981595][T14246] netlink: 'syz.3.3257': attribute type 1 has an invalid length.
[  637.989738][T14246] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3257'.
[  638.120888][T14251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3259'.
[  638.398368][T14262] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3262'.
[  638.437598][T14263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3263'.
[  638.669938][T14274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3264'.
[  639.009654][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3269'.
[  639.192880][T14280] device syzkaller0 entered promiscuous mode
[  639.707000][T14302] validate_nla: 7 callbacks suppressed
[  639.707036][T14302] netlink: 'syz.2.3276': attribute type 3 has an invalid length.
[  639.937773][T14302] netlink: 'syz.2.3276': attribute type 27 has an invalid length.
[  640.133342][T14316] netlink: 'syz.3.3280': attribute type 3 has an invalid length.
[  640.302478][T14322] netlink: 'syz.3.3280': attribute type 27 has an invalid length.
[  640.594930][T14324] netlink: 'syz.4.3284': attribute type 1 has an invalid length.
[  640.739767][T14322] bond0: (slave bond_slave_0): Releasing backup interface
[  640.941479][T14330] netlink: 'syz.0.3287': attribute type 2 has an invalid length.
[  641.023004][T14330] netlink: 'syz.0.3287': attribute type 8 has an invalid length.
[  641.968305][T14351] netlink: 'syz.0.3293': attribute type 3 has an invalid length.
[  641.986742][T14351] __nla_validate_parse: 8 callbacks suppressed
[  641.986784][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3293'.
[  642.049750][T14351] netlink: 'syz.0.3293': attribute type 27 has an invalid length.
[  642.407573][T14351] bond0: (slave bond_slave_0): Releasing backup interface
[  642.408091][T14363] netlink: 'syz.4.3298': attribute type 1 has an invalid length.
[  642.509950][T14363] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3298'.
[  643.174703][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3305'.
[  643.626883][T14401] FAULT_INJECTION: forcing a failure.
[  643.626883][T14401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  643.661120][T14401] CPU: 1 PID: 14401 Comm: syz.4.3310 Not tainted 6.1.148-syzkaller #0
[  643.671151][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  643.682743][T14401] Call Trace:
[  643.686573][T14401]  <TASK>
[  643.689824][T14401]  dump_stack_lvl+0x168/0x22e
[  643.694990][T14401]  ? show_regs_print_info+0x12/0x12
[  643.701124][T14401]  ? load_image+0x3b0/0x3b0
[  643.706580][T14401]  ? __lock_acquire+0x7c50/0x7c50
[  643.711851][T14401]  should_fail_ex+0x399/0x4d0
[  643.716881][T14401]  _copy_from_user+0x2c/0x170
[  643.721874][T14401]  ___sys_recvmsg+0x12b/0x510
[  643.726844][T14401]  ? __sys_recvmsg+0x270/0x270
[  643.732369][T14401]  ? common_file_perm+0x171/0x1c0
[  643.737953][T14401]  ? __fget_files+0x44a/0x4d0
[  643.742830][T14401]  ? __fdget+0x17c/0x200
[  643.747261][T14401]  __x64_sys_recvmsg+0x1eb/0x2b0
[  643.752660][T14401]  ? ___sys_recvmsg+0x510/0x510
[  643.757800][T14401]  ? lockdep_hardirqs_on+0x94/0x140
[  643.763197][T14401]  do_syscall_64+0x4c/0xa0
[  643.768118][T14401]  ? clear_bhb_loop+0x60/0xb0
[  643.773274][T14401]  ? clear_bhb_loop+0x60/0xb0
[  643.778063][T14401]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.784101][T14401] RIP: 0033:0x7f612858ebe9
[  643.788804][T14401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  643.826757][T14401] RSP: 002b:00007f61294aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  643.836646][T14401] RAX: ffffffffffffffda RBX: 00007f61287b5fa0 RCX: 00007f612858ebe9
[  643.844759][T14401] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003
[  643.852778][T14401] RBP: 00007f61294aa090 R08: 0000000000000000 R09: 0000000000000000
[  643.861210][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.869758][T14401] R13: 00007f61287b6038 R14: 00007f61287b5fa0 R15: 00007fff08153758
[  643.878941][T14401]  </TASK>
[  644.007472][T14408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3313'.
[  644.028490][T14404] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3311'.
[  644.558005][ T4276] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  644.717763][T14425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  644.826886][T14428] validate_nla: 9 callbacks suppressed
[  644.826911][T14428] netlink: 'syz.1.3319': attribute type 10 has an invalid length.
[  644.866912][T14428] device macvlan0 entered promiscuous mode
[  644.935873][T14428] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  645.033800][T14443] FAULT_INJECTION: forcing a failure.
[  645.033800][T14443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.070306][T14443] CPU: 1 PID: 14443 Comm: syz.0.3326 Not tainted 6.1.148-syzkaller #0
[  645.078982][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  645.089343][T14443] Call Trace:
[  645.092930][T14443]  <TASK>
[  645.095974][T14443]  dump_stack_lvl+0x168/0x22e
[  645.100889][T14443]  ? show_regs_print_info+0x12/0x12
[  645.106222][T14443]  ? load_image+0x3b0/0x3b0
[  645.110873][T14443]  ? __lock_acquire+0x7c50/0x7c50
[  645.116635][T14443]  should_fail_ex+0x399/0x4d0
[  645.121445][T14443]  _copy_from_user+0x2c/0x170
[  645.126585][T14443]  strndup_user+0xb3/0x150
[  645.131195][T14443]  perf_uprobe_init+0x5d/0x190
[  645.136497][T14443]  perf_uprobe_event_init+0xe2/0x170
[  645.141802][T14443]  perf_try_init_event+0x12b/0x3d0
[  645.147382][T14443]  perf_event_alloc+0xf5c/0x21b0
[  645.152890][T14443]  ? perf_event_alloc+0xbe2/0x21b0
[  645.158307][T14443]  ? find_lively_task_by_vpid+0x19/0x290
[  645.164399][T14443]  __se_sys_perf_event_open+0x6cd/0x1e60
[  645.170442][T14443]  ? __fget_files+0x44a/0x4d0
[  645.175802][T14443]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  645.182082][T14443]  ? lockdep_hardirqs_on+0x94/0x140
[  645.188033][T14443]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  645.193769][T14443]  do_syscall_64+0x4c/0xa0
[  645.198451][T14443]  ? clear_bhb_loop+0x60/0xb0
[  645.203400][T14443]  ? clear_bhb_loop+0x60/0xb0
[  645.208727][T14443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  645.214834][T14443] RIP: 0033:0x7f3f41f8ebe9
[  645.219519][T14443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  645.240984][T14443] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  645.249895][T14443] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  645.258241][T14443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080
[  645.266687][T14443] RBP: 00007f3f42dac090 R08: 0000000000000002 R09: 0000000000000000
[  645.275287][T14443] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  645.283886][T14443] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  645.292762][T14443]  </TASK>
[  645.436338][T14447] netlink: 'syz.4.3329': attribute type 3 has an invalid length.
[  645.500172][T14448] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  645.511839][T14448] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3328'.
[  645.519531][T14447] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3329'.
[  645.575234][T14452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3327'.
[  645.718292][T14445] netlink: 'syz.4.3329': attribute type 27 has an invalid length.
[  646.762704][T14484] FAULT_INJECTION: forcing a failure.
[  646.762704][T14484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  646.841287][T14484] CPU: 0 PID: 14484 Comm: syz.3.3338 Not tainted 6.1.148-syzkaller #0
[  646.849965][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  646.860668][T14484] Call Trace:
[  646.864327][T14484]  <TASK>
[  646.867365][T14484]  dump_stack_lvl+0x168/0x22e
[  646.872410][T14484]  ? show_regs_print_info+0x12/0x12
[  646.877656][T14484]  ? load_image+0x3b0/0x3b0
[  646.882815][T14484]  ? __lock_acquire+0x7c50/0x7c50
[  646.888222][T14484]  should_fail_ex+0x399/0x4d0
[  646.892946][T14484]  _copy_from_user+0x2c/0x170
[  646.897891][T14484]  __copy_msghdr+0x3b7/0x580
[  646.902698][T14484]  ___sys_sendmsg+0x1a2/0x290
[  646.907563][T14484]  ? __sys_sendmsg+0x270/0x270
[  646.912640][T14484]  ? __lock_acquire+0x7c50/0x7c50
[  646.917883][T14484]  ? __fdget+0x17c/0x200
[  646.922417][T14484]  __se_sys_sendmsg+0x19e/0x270
[  646.927565][T14484]  ? __x64_sys_sendmsg+0x80/0x80
[  646.932827][T14484]  ? lockdep_hardirqs_on+0x94/0x140
[  646.938669][T14484]  do_syscall_64+0x4c/0xa0
[  646.943403][T14484]  ? clear_bhb_loop+0x60/0xb0
[  646.948130][T14484]  ? clear_bhb_loop+0x60/0xb0
[  646.952952][T14484]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  646.959756][T14484] RIP: 0033:0x7fafbe38ebe9
[  646.964479][T14484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  646.985965][T14484] RSP: 002b:00007fafbf1f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.994776][T14484] RAX: ffffffffffffffda RBX: 00007fafbe5b5fa0 RCX: 00007fafbe38ebe9
[  647.003642][T14484] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003
[  647.011923][T14484] RBP: 00007fafbf1f9090 R08: 0000000000000000 R09: 0000000000000000
[  647.020896][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.029340][T14484] R13: 00007fafbe5b6038 R14: 00007fafbe5b5fa0 R15: 00007ffcddb2a4f8
[  647.037813][T14484]  </TASK>
[  647.049589][T14488] bridge0: port 3(team0) entered blocking state
[  647.089168][T14488] bridge0: port 3(team0) entered disabled state
[  647.167598][T14488] device team0 entered promiscuous mode
[  647.249808][T14488] device team_slave_0 entered promiscuous mode
[  647.317399][T14488] device team_slave_1 entered promiscuous mode
[  647.338887][T14488] bridge0: port 3(team0) entered blocking state
[  647.346441][T14488] bridge0: port 3(team0) entered forwarding state
[  647.757720][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3342'.
[  647.796207][T14499] netlink: 'syz.3.3343': attribute type 1 has an invalid length.
[  647.829950][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3342'.
[  647.859740][T14499] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3343'.
[  647.910947][T14501] netlink: 'syz.0.3344': attribute type 3 has an invalid length.
[  647.939448][T14502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3342'.
[  647.982946][T14501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3344'.
[  648.167953][T14504] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3345'.
[  648.843394][T14501] netlink: 'syz.0.3344': attribute type 27 has an invalid length.
[  649.259346][T14522] FAULT_INJECTION: forcing a failure.
[  649.259346][T14522] name failslab, interval 1, probability 0, space 0, times 0
[  649.381226][T14522] CPU: 1 PID: 14522 Comm: syz.1.3350 Not tainted 6.1.148-syzkaller #0
[  649.389732][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  649.400615][T14522] Call Trace:
[  649.403928][T14522]  <TASK>
[  649.406901][T14522]  dump_stack_lvl+0x168/0x22e
[  649.411873][T14522]  ? show_regs_print_info+0x12/0x12
[  649.417106][T14522]  ? load_image+0x3b0/0x3b0
[  649.421923][T14522]  ? __might_sleep+0xd0/0xd0
[  649.426737][T14522]  ? __lock_acquire+0x7c50/0x7c50
[  649.431888][T14522]  should_fail_ex+0x399/0x4d0
[  649.436722][T14522]  should_failslab+0x5/0x20
[  649.441592][T14522]  slab_pre_alloc_hook+0x59/0x310
[  649.446761][T14522]  ? apparmor_sk_alloc_security+0x74/0x100
[  649.452956][T14522]  __kmem_cache_alloc_node+0x4f/0x260
[  649.458706][T14522]  ? apparmor_sk_alloc_security+0x74/0x100
[  649.464931][T14522]  kmalloc_trace+0x26/0xe0
[  649.470030][T14522]  apparmor_sk_alloc_security+0x74/0x100
[  649.476008][T14522]  security_sk_alloc+0x6a/0xa0
[  649.481360][T14522]  sk_prot_alloc+0x101/0x210
[  649.486280][T14522]  ? sk_alloc+0x20/0x340
[  649.490605][T14522]  sk_alloc+0x36/0x340
[  649.494922][T14522]  ? bpf_ctx_init+0x163/0x1a0
[  649.500132][T14522]  ? bpf_prog_test_run_skb+0x267/0x11b0
[  649.505821][T14522]  bpf_prog_test_run_skb+0x350/0x11b0
[  649.512378][T14522]  ? __fget_files+0x28/0x4d0
[  649.517258][T14522]  ? __fget_files+0x44a/0x4d0
[  649.522157][T14522]  ? cpu_online+0xa0/0xa0
[  649.526621][T14522]  bpf_prog_test_run+0x31e/0x390
[  649.531797][T14522]  __sys_bpf+0x593/0x6d0
[  649.536182][T14522]  ? bpf_link_show_fdinfo+0x340/0x340
[  649.542425][T14522]  ? lock_chain_count+0x20/0x20
[  649.547465][T14522]  __x64_sys_bpf+0x78/0x90
[  649.552124][T14522]  do_syscall_64+0x4c/0xa0
[  649.556625][T14522]  ? clear_bhb_loop+0x60/0xb0
[  649.561840][T14522]  ? clear_bhb_loop+0x60/0xb0
[  649.566749][T14522]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  649.573134][T14522] RIP: 0033:0x7fd628b8ebe9
[  649.577880][T14522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  649.598519][T14522] RSP: 002b:00007fd62993e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  649.607381][T14522] RAX: ffffffffffffffda RBX: 00007fd628db5fa0 RCX: 00007fd628b8ebe9
[  649.615643][T14522] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  649.623982][T14522] RBP: 00007fd62993e090 R08: 0000000000000000 R09: 0000000000000000
[  649.632063][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.640253][T14522] R13: 00007fd628db6038 R14: 00007fd628db5fa0 R15: 00007ffc55f51248
[  649.648451][T14522]  </TASK>
[  649.684348][T14519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3348'.
[  651.262136][T14549] netlink: 'syz.4.3356': attribute type 1 has an invalid length.
[  651.319581][T14549] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3356'.
[  652.157513][T14559] netlink: 'syz.1.3361': attribute type 3 has an invalid length.
[  652.200098][T14559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3361'.
[  652.263032][T14562] dvmrp1: tun_chr_ioctl cmd 1074025677
[  652.268981][T14562] dvmrp1: linktype set to 805
[  652.292713][T14564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3364'.
[  652.376796][T14564] FAULT_INJECTION: forcing a failure.
[  652.376796][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.519832][T14564] CPU: 0 PID: 14564 Comm: syz.4.3364 Not tainted 6.1.148-syzkaller #0
[  652.528509][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  652.539226][T14564] Call Trace:
[  652.542750][T14564]  <TASK>
[  652.545978][T14564]  dump_stack_lvl+0x168/0x22e
[  652.551190][T14564]  ? show_regs_print_info+0x12/0x12
[  652.556714][T14564]  ? load_image+0x3b0/0x3b0
[  652.562009][T14564]  ? __lock_acquire+0x7c50/0x7c50
[  652.567618][T14564]  ? snprintf+0xd7/0x120
[  652.572076][T14564]  should_fail_ex+0x399/0x4d0
[  652.577218][T14564]  _copy_to_user+0x2c/0x130
[  652.581753][T14564]  simple_read_from_buffer+0xe3/0x150
[  652.587275][T14564]  proc_fail_nth_read+0x19a/0x210
[  652.592589][T14564]  ? proc_fault_inject_write+0x2f0/0x2f0
[  652.598688][T14564]  ? fsnotify_perm+0x248/0x550
[  652.604003][T14564]  ? proc_fault_inject_write+0x2f0/0x2f0
[  652.610196][T14564]  vfs_read+0x2c0/0x920
[  652.614911][T14564]  ? kernel_read+0x1e0/0x1e0
[  652.619970][T14564]  ? __fget_files+0x28/0x4d0
[  652.624706][T14564]  ? __fget_files+0x44a/0x4d0
[  652.629593][T14564]  ? __fdget_pos+0x2ae/0x360
[  652.634304][T14564]  ? ksys_read+0x71/0x240
[  652.638994][T14564]  ksys_read+0x143/0x240
[  652.643548][T14564]  ? vfs_write+0x960/0x960
[  652.647994][T14564]  ? lockdep_hardirqs_on+0x94/0x140
[  652.653491][T14564]  do_syscall_64+0x4c/0xa0
[  652.657932][T14564]  ? clear_bhb_loop+0x60/0xb0
[  652.662906][T14564]  ? clear_bhb_loop+0x60/0xb0
[  652.667957][T14564]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  652.673971][T14564] RIP: 0033:0x7f612858d5fc
[  652.678854][T14564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  652.699275][T14564] RSP: 002b:00007f61294aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  652.708277][T14564] RAX: ffffffffffffffda RBX: 00007f61287b5fa0 RCX: 00007f612858d5fc
[  652.716630][T14564] RDX: 000000000000000f RSI: 00007f61294aa0a0 RDI: 0000000000000004
[  652.725066][T14564] RBP: 00007f61294aa090 R08: 0000000000000000 R09: 0000000000000000
[  652.733355][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.741449][T14564] R13: 00007f61287b6038 R14: 00007f61287b5fa0 R15: 00007fff08153758
[  652.749818][T14564]  </TASK>
[  652.998711][T14559] netlink: 'syz.1.3361': attribute type 27 has an invalid length.
[  654.836622][T14589] netlink: 'syz.2.3370': attribute type 1 has an invalid length.
[  654.927330][T14589] __nla_validate_parse: 3 callbacks suppressed
[  654.927349][T14589] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3370'.
[  655.086930][T14596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3372'.
[  655.248806][T14600] netlink: 'syz.2.3376': attribute type 3 has an invalid length.
[  655.292977][T14600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3376'.
[  655.777038][T14600] netlink: 'syz.2.3376': attribute type 27 has an invalid length.
[  656.223377][T14630] netlink: 'syz.2.3383': attribute type 3 has an invalid length.
[  656.263241][T14630] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3383'.
[  656.332974][T14630] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3383'.
[  656.697819][T14640] netlink: 'syz.1.3386': attribute type 1 has an invalid length.
[  656.734356][T14640] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3386'.
[  656.920366][T14643] netlink: 'syz.4.3388': attribute type 10 has an invalid length.
[  657.238573][T14643] team0: Device ipvlan1 failed to register rx_handler
[  657.243938][T14652] FAULT_INJECTION: forcing a failure.
[  657.243938][T14652] name failslab, interval 1, probability 0, space 0, times 0
[  657.335117][T14652] CPU: 1 PID: 14652 Comm: syz.3.3392 Not tainted 6.1.148-syzkaller #0
[  657.343587][T14654] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  657.351858][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  657.351878][T14652] Call Trace:
[  657.351887][T14652]  <TASK>
[  657.351896][T14652]  dump_stack_lvl+0x168/0x22e
[  657.351927][T14652]  ? show_regs_print_info+0x12/0x12
[  657.351947][T14652]  ? load_image+0x3b0/0x3b0
[  657.351972][T14652]  ? __might_sleep+0xd0/0xd0
[  657.351998][T14652]  ? __lock_acquire+0x7c50/0x7c50
[  657.352019][T14652]  ? mark_lock+0x94/0x320
[  657.352047][T14652]  should_fail_ex+0x399/0x4d0
[  657.352076][T14652]  should_failslab+0x5/0x20
[  657.352099][T14652]  slab_pre_alloc_hook+0x59/0x310
[  657.352120][T14652]  ? __get_vm_area_node+0x122/0x330
[  657.352142][T14652]  __kmem_cache_alloc_node+0x4f/0x260
[  657.352161][T14652]  ? __get_vm_area_node+0x122/0x330
[  657.352182][T14652]  kmalloc_node_trace+0x22/0xe0
[  657.352209][T14652]  __get_vm_area_node+0x122/0x330
[  657.352235][T14652]  __vmalloc_node_range+0x357/0x1390
[  657.352255][T14652]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.352291][T14652]  ? perf_trace_preemptirq_template+0x287/0x330
[  657.352322][T14652]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  657.352348][T14652]  ? free_vm_area+0x50/0x50
[  657.352368][T14652]  ? end_current_label_crit_section+0x170/0x170
[  657.352410][T14652]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.352434][T14652]  __vmalloc+0x76/0x80
[  657.352453][T14652]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.352477][T14652]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.352500][T14652]  ? bpf_lsm_capable+0x5/0x10
[  657.352523][T14652]  bpf_prog_alloc+0x1c/0x1b0
[  657.352548][T14652]  bpf_prog_load+0x7b6/0x15a0
[  657.352581][T14652]  ? map_freeze+0x390/0x390
[  657.352603][T14652]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  657.352630][T14652]  ? lockdep_hardirqs_on+0x94/0x140
[  657.352667][T14652]  ? copy_user_enhanced_fast_string+0xc/0x40
[  657.352686][T14652]  ? bpf_lsm_bpf+0x5/0x10
[  657.352702][T14652]  ? security_bpf+0x7a/0xa0
[  657.352730][T14652]  __sys_bpf+0x520/0x6d0
[  657.352754][T14652]  ? bpf_link_show_fdinfo+0x340/0x340
[  657.573081][T14652]  ? lock_chain_count+0x20/0x20
[  657.578220][T14652]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  657.584514][T14652]  __x64_sys_bpf+0x78/0x90
[  657.589317][T14652]  do_syscall_64+0x4c/0xa0
[  657.593996][T14652]  ? clear_bhb_loop+0x60/0xb0
[  657.598794][T14652]  ? clear_bhb_loop+0x60/0xb0
[  657.603790][T14652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.609808][T14652] RIP: 0033:0x7fafbe38ebe9
[  657.614418][T14652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.634926][T14652] RSP: 002b:00007fafbf1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  657.644137][T14652] RAX: ffffffffffffffda RBX: 00007fafbe5b5fa0 RCX: 00007fafbe38ebe9
[  657.652406][T14652] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[  657.660928][T14652] RBP: 00007fafbf1f9090 R08: 0000000000000000 R09: 0000000000000000
[  657.669616][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.677974][T14652] R13: 00007fafbe5b6038 R14: 00007fafbe5b5fa0 R15: 00007ffcddb2a4f8
[  657.686416][T14652]  </TASK>
[  657.732573][T14654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3393'.
[  657.773704][T14652] syz.3.3392: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  657.817163][T14652] CPU: 0 PID: 14652 Comm: syz.3.3392 Not tainted 6.1.148-syzkaller #0
[  657.825582][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  657.835769][T14652] Call Trace:
[  657.839250][T14652]  <TASK>
[  657.842474][T14652]  dump_stack_lvl+0x168/0x22e
[  657.847460][T14652]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  657.854100][T14652]  ? show_regs_print_info+0x12/0x12
[  657.859571][T14652]  ? load_image+0x3b0/0x3b0
[  657.864221][T14652]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  657.870880][T14652]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  657.878254][T14652]  warn_alloc+0x20c/0x300
[  657.882727][T14652]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  657.889154][T14652]  ? zone_watermark_ok_safe+0x270/0x270
[  657.894939][T14652]  ? __get_vm_area_node+0x318/0x330
[  657.900585][T14652]  __vmalloc_node_range+0x37c/0x1390
[  657.906135][T14652]  ? perf_trace_preemptirq_template+0x287/0x330
[  657.912472][T14652]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  657.918585][T14652]  ? free_vm_area+0x50/0x50
[  657.924252][T14652]  ? end_current_label_crit_section+0x170/0x170
[  657.930880][T14652]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.936680][T14652]  __vmalloc+0x76/0x80
[  657.940884][T14652]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.946547][T14652]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  657.952033][T14652]  ? bpf_lsm_capable+0x5/0x10
[  657.956914][T14652]  bpf_prog_alloc+0x1c/0x1b0
[  657.961716][T14652]  bpf_prog_load+0x7b6/0x15a0
[  657.966475][T14652]  ? map_freeze+0x390/0x390
[  657.971297][T14652]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  657.977848][T14652]  ? lockdep_hardirqs_on+0x94/0x140
[  657.983353][T14652]  ? copy_user_enhanced_fast_string+0xc/0x40
[  657.989913][T14652]  ? bpf_lsm_bpf+0x5/0x10
[  657.994535][T14652]  ? security_bpf+0x7a/0xa0
[  657.999524][T14652]  __sys_bpf+0x520/0x6d0
[  658.004287][T14652]  ? bpf_link_show_fdinfo+0x340/0x340
[  658.010151][T14652]  ? lock_chain_count+0x20/0x20
[  658.015326][T14652]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  658.021958][T14652]  __x64_sys_bpf+0x78/0x90
[  658.026609][T14652]  do_syscall_64+0x4c/0xa0
[  658.031412][T14652]  ? clear_bhb_loop+0x60/0xb0
[  658.036568][T14652]  ? clear_bhb_loop+0x60/0xb0
[  658.041882][T14652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.047921][T14652] RIP: 0033:0x7fafbe38ebe9
[  658.052548][T14652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  658.073758][T14652] RSP: 002b:00007fafbf1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  658.082658][T14652] RAX: ffffffffffffffda RBX: 00007fafbe5b5fa0 RCX: 00007fafbe38ebe9
[  658.090865][T14652] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[  658.098968][T14652] RBP: 00007fafbf1f9090 R08: 0000000000000000 R09: 0000000000000000
[  658.107245][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.116021][T14652] R13: 00007fafbe5b6038 R14: 00007fafbe5b5fa0 R15: 00007ffcddb2a4f8
[  658.124328][T14652]  </TASK>
[  658.157864][T14660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3394'.
[  658.386973][T14652] Mem-Info:
[  658.390390][T14652] active_anon:5150 inactive_anon:0 isolated_anon:0
[  658.390390][T14652]  active_file:21957 inactive_file:40066 isolated_file:0
[  658.390390][T14652]  unevictable:768 dirty:128 writeback:0
[  658.390390][T14652]  slab_reclaimable:21028 slab_unreclaimable:97462
[  658.390390][T14652]  mapped:30156 shmem:1361 pagetables:566
[  658.390390][T14652]  sec_pagetables:0 bounce:0
[  658.390390][T14652]  kernel_misc_reclaimable:0
[  658.390390][T14652]  free:1316802 free_pcp:10198 free_cma:0
[  658.471830][T14654] netlink: 'syz.0.3393': attribute type 27 has an invalid length.
[  658.511394][T14667] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  658.541977][T14652] Node 0 active_anon:21000kB inactive_anon:0kB active_file:87828kB inactive_file:160064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120624kB dirty:508kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:2464kB sec_pagetables:0kB all_unreclaimable? no
[  658.707361][T14662] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3395'.
[  658.726561][T14662] device bond_slave_1 entered promiscuous mode
[  658.733870][T14652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  658.776112][T14668] tc_dump_action: action bad kind
[  658.791273][T14652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  658.876673][T14652] lowmem_reserve[]: 0 2527 2528 2528 2528
[  658.888530][T14652] Node 0 DMA32 free:1343732kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:20900kB inactive_anon:0kB active_file:87828kB inactive_file:160064kB unevictable:1536kB writepending:508kB present:3129332kB managed:2593356kB mlocked:0kB bounce:0kB free_pcp:26764kB local_pcp:19520kB free_cma:0kB
[  659.014433][T14652] lowmem_reserve[]: 0 0 1 1 1
[  659.020723][T14652] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  659.139269][T14652] lowmem_reserve[]: 0 0 0 0 0
[  659.157822][T14652] Node 1 Normal free:3908116kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:13248kB local_pcp:10528kB free_cma:0kB
[  659.202794][T14652] lowmem_reserve[]: 0 0 0 0 0
[  659.219682][T14678] netlink: 'syz.2.3400': attribute type 1 has an invalid length.
[  659.273676][T14678] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3400'.
[  659.279527][T14652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  659.321536][T14652] Node 0 DMA32: 407*4kB (UME) 1727*8kB (UME) 1308*16kB (UME) 755*32kB (ME) 438*64kB (UME) 758*128kB (UME) 169*256kB (UME) 87*512kB (UM) 51*1024kB (UME) 17*2048kB (ME) 240*4096kB (UM) = 1343476kB
[  659.343293][T14652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  659.356038][T14652] Node 1 Normal: 217*4kB (UME) 64*8kB (UME) 33*16kB (UE) 143*32kB (UME) 49*64kB (UME) 21*128kB (UME) 8*256kB (UME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3908116kB
[  659.377037][T14652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  659.389795][T14652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  659.410001][T14652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  659.424403][T14652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  659.442830][T14652] 63384 total pagecache pages
[  659.448255][T14652] 0 pages in swap cache
[  659.458293][T14652] Free swap  = 124996kB
[  659.512681][T14652] Total swap = 124996kB
[  659.541959][T14652] 2097051 pages RAM
[  659.561230][T14652] 0 pages HighMem/MovableOnly
[  659.596108][T14652] 415111 pages reserved
[  659.629518][T14652] 0 pages cma reserved
[  659.956615][T14693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3403'.
[  660.545601][T14701] netlink: 'syz.1.3408': attribute type 3 has an invalid length.
[  660.565382][T14701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3408'.
[  660.835652][T14702] netlink: 'syz.1.3408': attribute type 27 has an invalid length.
[  661.091770][   T41] wlan1: Trigger new scan to find an IBSS to join
[  661.129108][T14722] netlink: 'syz.4.3414': attribute type 1 has an invalid length.
[  661.150898][T14722] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3414'.
[  661.373251][T14732] netlink: 'syz.3.3420': attribute type 10 has an invalid length.
[  661.438098][T14732] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3420'.
[  661.478697][T14732] device bond0 entered promiscuous mode
[  661.515284][T14732] device bond_slave_1 entered promiscuous mode
[  661.533969][T14732] bridge0: port 3(bond0) entered blocking state
[  661.570890][T14732] bridge0: port 3(bond0) entered disabled state
[  661.606761][T14732] bridge0: port 3(bond0) entered blocking state
[  661.614982][T14732] bridge0: port 3(bond0) entered forwarding state
[  661.664232][T14750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3424'.
[  661.866152][T14756] netlink: 'syz.1.3426': attribute type 3 has an invalid length.
[  661.924769][T14756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3426'.
[  662.048134][T14752] netlink: 'syz.1.3426': attribute type 27 has an invalid length.
[  662.733158][T14766] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3430'.
[  663.057489][T14771] netlink: 'syz.0.3432': attribute type 1 has an invalid length.
[  663.081409][T14771] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3432'.
[  663.571289][T14787] netlink: 'syz.4.3436': attribute type 10 has an invalid length.
[  663.641850][T14787] team0: Device ipvlan1 failed to register rx_handler
[  663.803602][T14791] netlink: 'syz.2.3440': attribute type 3 has an invalid length.
[  663.825210][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3440'.
[  663.918736][T14791] netlink: 'syz.2.3440': attribute type 27 has an invalid length.
[  664.036460][T14806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3442'.
[  664.142724][ T4358] wlan1: Trigger new scan to find an IBSS to join
[  664.497657][T14820] netlink: 'syz.2.3449': attribute type 1 has an invalid length.
[  664.749380][T14828] FAULT_INJECTION: forcing a failure.
[  664.749380][T14828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.787444][T14828] CPU: 0 PID: 14828 Comm: syz.0.3452 Not tainted 6.1.148-syzkaller #0
[  664.796194][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  664.806555][T14828] Call Trace:
[  664.810178][T14828]  <TASK>
[  664.813226][T14828]  dump_stack_lvl+0x168/0x22e
[  664.818284][T14828]  ? show_regs_print_info+0x12/0x12
[  664.823856][T14828]  ? load_image+0x3b0/0x3b0
[  664.828579][T14828]  ? __lock_acquire+0x7c50/0x7c50
[  664.833641][T14828]  should_fail_ex+0x399/0x4d0
[  664.838616][T14828]  _copy_from_user+0x2c/0x170
[  664.843424][T14828]  strndup_user+0xb3/0x150
[  664.848232][T14828]  perf_uprobe_init+0x5d/0x190
[  664.853297][T14828]  perf_uprobe_event_init+0xe2/0x170
[  664.858718][T14828]  perf_try_init_event+0x12b/0x3d0
[  664.864299][T14828]  perf_event_alloc+0xf5c/0x21b0
[  664.869744][T14828]  ? perf_event_alloc+0xbe2/0x21b0
[  664.875022][T14828]  ? find_lively_task_by_vpid+0x19/0x290
[  664.880945][T14828]  __se_sys_perf_event_open+0x6cd/0x1e60
[  664.886873][T14828]  ? __fget_files+0x44a/0x4d0
[  664.891765][T14828]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  664.897625][T14828]  ? lockdep_hardirqs_on+0x94/0x140
[  664.902944][T14828]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  664.908801][T14828]  do_syscall_64+0x4c/0xa0
[  664.913679][T14828]  ? clear_bhb_loop+0x60/0xb0
[  664.918652][T14828]  ? clear_bhb_loop+0x60/0xb0
[  664.923968][T14828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.930250][T14828] RIP: 0033:0x7f3f41f8ebe9
[  664.934780][T14828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.954946][T14828] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  664.963684][T14828] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  664.972222][T14828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080
[  664.980398][T14828] RBP: 00007f3f42dac090 R08: 0000000000000002 R09: 0000000000000000
[  664.988588][T14828] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  664.997825][T14828] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  665.006643][T14828]  </TASK>
[  665.423809][T14838] netlink: 'syz.2.3455': attribute type 3 has an invalid length.
[  665.456844][T14838] __nla_validate_parse: 1 callbacks suppressed
[  665.456885][T14838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3455'.
[  665.614393][T14841] netlink: 'syz.4.3458': attribute type 3 has an invalid length.
[  665.708190][T14841] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3458'.
[  665.862341][T14853] netlink: 'syz.3.3461': attribute type 1 has an invalid length.
[  665.870883][T14853] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3461'.
[  666.307524][T14862] FAULT_INJECTION: forcing a failure.
[  666.307524][T14862] name failslab, interval 1, probability 0, space 0, times 0
[  666.428537][T14862] CPU: 1 PID: 14862 Comm: syz.2.3465 Not tainted 6.1.148-syzkaller #0
[  666.436948][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  666.447837][T14862] Call Trace:
[  666.451245][T14862]  <TASK>
[  666.454365][T14862]  dump_stack_lvl+0x168/0x22e
[  666.459584][T14862]  ? show_regs_print_info+0x12/0x12
[  666.465113][T14862]  ? load_image+0x3b0/0x3b0
[  666.469918][T14862]  should_fail_ex+0x399/0x4d0
[  666.474798][T14862]  should_failslab+0x5/0x20
[  666.479653][T14862]  slab_pre_alloc_hook+0x59/0x310
[  666.484871][T14862]  ? lockdep_hardirqs_on+0x94/0x140
[  666.490170][T14862]  ? __get_vm_area_node+0x122/0x330
[  666.495729][T14862]  __kmem_cache_alloc_node+0x4f/0x260
[  666.501479][T14862]  ? __get_vm_area_node+0x122/0x330
[  666.507506][T14862]  kmalloc_node_trace+0x22/0xe0
[  666.512833][T14862]  __get_vm_area_node+0x122/0x330
[  666.518226][T14862]  __vmalloc_node_range+0x357/0x1390
[  666.523537][T14862]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  666.529365][T14862]  ? ct_irq_exit_irqson+0xfa/0x160
[  666.534762][T14862]  ? free_vm_area+0x50/0x50
[  666.539290][T14862]  ? lockdep_hardirqs_on+0x94/0x140
[  666.545076][T14862]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  666.551026][T14862]  __vmalloc+0x76/0x80
[  666.555393][T14862]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  666.561880][T14862]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  666.567746][T14862]  bpf_prog_alloc+0x1c/0x1b0
[  666.572747][T14862]  bpf_prog_load+0x7b6/0x15a0
[  666.577836][T14862]  ? map_freeze+0x390/0x390
[  666.582549][T14862]  ? __might_fault+0xa6/0x120
[  666.587522][T14862]  ? lockdep_hardirqs_on+0x94/0x140
[  666.593005][T14862]  ? __might_fault+0xa6/0x120
[  666.597901][T14862]  ? __might_fault+0xc2/0x120
[  666.602675][T14862]  ? __might_fault+0xa6/0x120
[  666.608066][T14862]  ? bpf_lsm_bpf+0x5/0x10
[  666.612613][T14862]  ? security_bpf+0x7a/0xa0
[  666.617445][T14862]  __sys_bpf+0x520/0x6d0
[  666.622068][T14862]  ? bpf_link_show_fdinfo+0x340/0x340
[  666.627554][T14862]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  666.634092][T14862]  __x64_sys_bpf+0x78/0x90
[  666.638736][T14862]  do_syscall_64+0x4c/0xa0
[  666.643476][T14862]  ? clear_bhb_loop+0x60/0xb0
[  666.648473][T14862]  ? clear_bhb_loop+0x60/0xb0
[  666.653354][T14862]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  666.659812][T14862] RIP: 0033:0x7f279078ebe9
[  666.664262][T14862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  666.685654][T14862] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  666.695597][T14862] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  666.705089][T14862] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  666.713445][T14862] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  666.721858][T14862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.730014][T14862] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  666.738371][T14862]  </TASK>
[  667.009973][T14879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3469'.
[  667.091284][   T41] wlan1: Creating new IBSS network, BSSID 26:c3:f0:17:c0:83
[  667.298132][T14895] validate_nla: 1 callbacks suppressed
[  667.298153][T14895] netlink: 'syz.3.3474': attribute type 1 has an invalid length.
[  667.317723][T14895] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3474'.
[  667.323255][T14891] netlink: 'syz.4.3473': attribute type 10 has an invalid length.
[  667.548924][T14898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3475'.
[  667.653616][T14903] FAULT_INJECTION: forcing a failure.
[  667.653616][T14903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.731280][T14903] CPU: 0 PID: 14903 Comm: syz.1.3475 Not tainted 6.1.148-syzkaller #0
[  667.739692][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  667.749999][T14903] Call Trace:
[  667.753497][T14903]  <TASK>
[  667.756460][T14903]  dump_stack_lvl+0x168/0x22e
[  667.761613][T14903]  ? show_regs_print_info+0x12/0x12
[  667.767117][T14903]  ? load_image+0x3b0/0x3b0
[  667.771929][T14903]  ? __lock_acquire+0x7c50/0x7c50
[  667.777081][T14903]  should_fail_ex+0x399/0x4d0
[  667.781901][T14903]  _copy_from_user+0x2c/0x170
[  667.786705][T14903]  ___sys_recvmsg+0x12b/0x510
[  667.791799][T14903]  ? __sys_recvmsg+0x270/0x270
[  667.796171][T14891] team0: Device hsr_slave_0 failed to register rx_handler
[  667.796782][T14903]  ? common_file_perm+0x171/0x1c0
[  667.796835][T14903]  ? __fget_files+0x44a/0x4d0
[  667.796869][T14903]  ? __fdget+0x17c/0x200
[  667.796896][T14903]  __x64_sys_recvmsg+0x1eb/0x2b0
[  667.796919][T14903]  ? ct_nmi_exit+0x145/0x1c0
[  667.796945][T14903]  ? ___sys_recvmsg+0x510/0x510
[  667.796984][T14903]  ? lockdep_hardirqs_on+0x94/0x140
[  667.797011][T14903]  do_syscall_64+0x4c/0xa0
[  667.797028][T14903]  ? clear_bhb_loop+0x60/0xb0
[  667.797046][T14903]  ? clear_bhb_loop+0x60/0xb0
[  667.797065][T14903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.797100][T14903] RIP: 0033:0x7fd628b8ebe9
[  667.797119][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.797136][T14903] RSP: 002b:00007fd626df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  667.797160][T14903] RAX: ffffffffffffffda RBX: 00007fd628db6180 RCX: 00007fd628b8ebe9
[  667.797175][T14903] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  667.797189][T14903] RBP: 00007fd626df6090 R08: 0000000000000000 R09: 0000000000000000
[  667.797201][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.797214][T14903] R13: 00007fd628db6218 R14: 00007fd628db6180 R15: 00007ffc55f51248
[  667.797245][T14903]  </TASK>
[  667.825229][T14905] netlink: 'syz.2.3476': attribute type 3 has an invalid length.
[  667.979979][T14905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3476'.
[  668.065789][T14898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3475'.
[  668.091587][T14901] netlink: 'syz.2.3476': attribute type 27 has an invalid length.
[  668.109638][T14902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3475'.
[  668.340433][T14915] netlink: 'syz.4.3479': attribute type 10 has an invalid length.
[  668.422725][T14915] team0: Device ipvlan1 failed to register rx_handler
[  668.612157][T14917] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3481'.
[  668.808458][T14931] netlink: 'syz.1.3487': attribute type 1 has an invalid length.
[  668.813939][T14930] netlink: 'syz.0.3486': attribute type 1 has an invalid length.
[  669.773192][T14956] netlink: 'syz.0.3491': attribute type 3 has an invalid length.
[  669.899433][T14954] netlink: 'syz.0.3491': attribute type 27 has an invalid length.
[  670.759930][T14977] netlink: 'syz.3.3499': attribute type 1 has an invalid length.
[  670.816651][T14977] __nla_validate_parse: 4 callbacks suppressed
[  670.816672][T14977] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3499'.
[  670.858688][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3501'.
[  670.869586][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3501'.
[  670.971893][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3501'.
[  671.393216][T14998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3504'.
[  671.934734][T15010] device bond_slave_1 entered promiscuous mode
[  672.154550][T15016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3508'.
[  672.436490][T15014] validate_nla: 1 callbacks suppressed
[  672.436529][T15014] netlink: 'syz.4.3508': attribute type 27 has an invalid length.
[  674.226274][T15032] netlink: 'syz.2.3513': attribute type 1 has an invalid length.
[  674.401210][T15032] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3513'.
[  675.387487][T15043] netlink: 'syz.2.3516': attribute type 10 has an invalid length.
[  675.417388][T15043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'.
[  675.516844][T15043] device team0 entered promiscuous mode
[  675.588774][T15043] device team_slave_0 entered promiscuous mode
[  675.631654][T15043] device team_slave_1 entered promiscuous mode
[  675.689462][T15043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  676.067896][T15045] device syzkaller0 entered promiscuous mode
[  676.486811][T15052] netlink: 'syz.4.3520': attribute type 3 has an invalid length.
[  676.528639][T15052] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3520'.
[  677.310599][T15070] netlink: 'syz.2.3523': attribute type 3 has an invalid length.
[  677.329398][T15070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3523'.
[  679.442400][T15061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3521'.
[  679.466999][T15066] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  679.485102][T15070] netlink: 'syz.2.3523': attribute type 27 has an invalid length.
[  679.867612][T15082] netlink: 'syz.4.3526': attribute type 1 has an invalid length.
[  679.886191][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3525'.
[  679.931214][T15082] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3526'.
[  680.957901][T15106] netlink: 'syz.3.3535': attribute type 3 has an invalid length.
[  681.012910][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3535'.
[  681.681836][T15106] netlink: 'syz.3.3535': attribute type 27 has an invalid length.
[  681.741092][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3540'.
[  682.037717][T15129] netlink: 'syz.3.3542': attribute type 1 has an invalid length.
[  682.078861][T15129] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3542'.
[  682.102031][T15123] FAULT_INJECTION: forcing a failure.
[  682.102031][T15123] name failslab, interval 1, probability 0, space 0, times 0
[  682.207800][T15123] CPU: 1 PID: 15123 Comm: syz.0.3541 Not tainted 6.1.148-syzkaller #0
[  682.216407][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  682.226950][T15123] Call Trace:
[  682.230365][T15123]  <TASK>
[  682.233500][T15123]  dump_stack_lvl+0x168/0x22e
[  682.238328][T15123]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  682.244999][T15123]  ? show_regs_print_info+0x12/0x12
[  682.250524][T15123]  ? load_image+0x3b0/0x3b0
[  682.255302][T15123]  should_fail_ex+0x399/0x4d0
[  682.260480][T15123]  should_failslab+0x5/0x20
[  682.265294][T15123]  slab_pre_alloc_hook+0x59/0x310
[  682.271242][T15123]  ? lockdep_hardirqs_on+0x94/0x140
[  682.277000][T15123]  kmem_cache_alloc+0x56/0x2f0
[  682.282604][T15123]  ? dst_alloc+0x101/0x160
[  682.287239][T15123]  dst_alloc+0x101/0x160
[  682.291522][T15123]  ip_route_output_key_hash_rcu+0x1054/0x23a0
[  682.298083][T15123]  ? ip_route_output_key_hash+0x12b/0x340
[  682.303867][T15123]  ip_route_output_key_hash+0x207/0x340
[  682.309730][T15123]  ? rcu_is_watching+0x11/0xa0
[  682.314805][T15123]  ? ip_route_input_rcu+0x30a0/0x30a0
[  682.320671][T15123]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  682.327269][T15123]  ip_route_output_flow+0x26/0x150
[  682.332496][T15123]  ? security_sk_classify_flow+0x77/0x90
[  682.338153][T15123]  udp_sendmsg+0x15fb/0x2390
[  682.342945][T15123]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  682.347847][T15123]  ? udp_cmsg_send+0x350/0x350
[  682.353346][T15123]  ? lockdep_hardirqs_on+0x94/0x140
[  682.358836][T15123]  ? inet_sendmsg+0x147/0x2f0
[  682.363541][T15123]  ? _local_bh_enable+0xa0/0xa0
[  682.368627][T15123]  ? do_raw_spin_unlock+0x11d/0x230
[  682.374223][T15123]  ? inet_sendmsg+0x147/0x2f0
[  682.379208][T15123]  ? inet_sendmsg+0x147/0x2f0
[  682.384091][T15123]  ? inet_send_prepare+0x260/0x260
[  682.389313][T15123]  ____sys_sendmsg+0x59b/0x970
[  682.394381][T15123]  ? __sys_sendmsg_sock+0x30/0x30
[  682.400047][T15123]  ? import_iovec+0x6f/0xa0
[  682.404927][T15123]  ___sys_sendmsg+0x21c/0x290
[  682.409893][T15123]  ? __sys_sendmsg+0x270/0x270
[  682.414847][T15123]  ? irqentry_enter+0x33/0x50
[  682.420363][T15123]  __se_sys_sendmsg+0x19e/0x270
[  682.425692][T15123]  ? __x64_sys_sendmsg+0x80/0x80
[  682.430745][T15123]  ? syscall_enter_from_user_mode+0x2a/0x80
[  682.436846][T15123]  do_syscall_64+0x4c/0xa0
[  682.441735][T15123]  ? clear_bhb_loop+0x60/0xb0
[  682.447054][T15123]  ? clear_bhb_loop+0x60/0xb0
[  682.452281][T15123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.458389][T15123] RIP: 0033:0x7f3f41f8ebe9
[  682.463172][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.483839][T15123] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  682.492814][T15123] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  682.501758][T15123] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000015
[  682.510724][T15123] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  682.519063][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.527570][T15123] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  682.536821][T15123]  </TASK>
[  683.011642][ T4267] Bluetooth: hci4: command 0x0406 tx timeout
[  684.344771][T15153] FAULT_INJECTION: forcing a failure.
[  684.344771][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  684.409281][T15158] netlink: 'syz.4.3552': attribute type 3 has an invalid length.
[  684.443549][T15158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3552'.
[  684.466146][T15153] CPU: 1 PID: 15153 Comm: syz.2.3551 Not tainted 6.1.148-syzkaller #0
[  684.474903][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  684.485511][T15153] Call Trace:
[  684.488978][T15153]  <TASK>
[  684.491981][T15153]  dump_stack_lvl+0x168/0x22e
[  684.496833][T15153]  ? show_regs_print_info+0x12/0x12
[  684.502434][T15153]  ? load_image+0x3b0/0x3b0
[  684.507252][T15153]  ? _printk+0xd/0x110
[  684.511785][T15153]  ? __virt_addr_valid+0x188/0x540
[  684.517194][T15153]  should_fail_ex+0x399/0x4d0
[  684.522199][T15153]  _copy_from_user+0x2c/0x170
[  684.527235][T15153]  map_update_elem+0x454/0x680
[  684.532134][T15153]  __sys_bpf+0x454/0x6d0
[  684.536584][T15153]  ? bpf_link_show_fdinfo+0x340/0x340
[  684.542186][T15153]  ? lock_chain_count+0x20/0x20
[  684.547155][T15153]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  684.553807][T15153]  __x64_sys_bpf+0x78/0x90
[  684.558669][T15153]  do_syscall_64+0x4c/0xa0
[  684.563640][T15153]  ? clear_bhb_loop+0x60/0xb0
[  684.568524][T15153]  ? clear_bhb_loop+0x60/0xb0
[  684.573663][T15153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  684.580105][T15153] RIP: 0033:0x7f279078ebe9
[  684.584727][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  684.606909][T15153] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  684.615898][T15153] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  684.624751][T15153] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002
[  684.633546][T15153] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  684.642107][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  684.650644][T15153] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  684.658673][T15153]  </TASK>
[  684.682795][T15166] netlink: 'syz.1.3553': attribute type 1 has an invalid length.
[  684.738858][T15158] netlink: 'syz.4.3552': attribute type 27 has an invalid length.
[  684.773257][T15168] netlink: 'syz.2.3551': attribute type 15 has an invalid length.
[  684.858590][T15169] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3553'.
[  685.035369][T15176] netlink: 'syz.3.3555': attribute type 1 has an invalid length.
[  685.069770][T15176] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3555'.
[  686.118166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  686.125117][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.229354][T15197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3561'.
[  686.644367][T15212] netlink: 'syz.1.3567': attribute type 3 has an invalid length.
[  686.704955][T15212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3567'.
[  686.747670][T15203] netlink: 'syz.2.3565': attribute type 15 has an invalid length.
[  686.802136][T15215] netlink: 'syz.3.3568': attribute type 1 has an invalid length.
[  686.812929][T15215] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3568'.
[  687.093815][T15210] netlink: 'syz.1.3567': attribute type 27 has an invalid length.
[  687.179552][T15222] netlink: 'syz.4.3571': attribute type 21 has an invalid length.
[  687.189910][T15222] netlink: 'syz.4.3571': attribute type 1 has an invalid length.
[  687.574007][T15234] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3575'.
[  688.186695][T15246] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3579'.
[  688.238173][T15249] FAULT_INJECTION: forcing a failure.
[  688.238173][T15249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.273737][T15249] CPU: 1 PID: 15249 Comm: syz.2.3580 Not tainted 6.1.148-syzkaller #0
[  688.283191][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  688.294767][T15249] Call Trace:
[  688.298351][T15249]  <TASK>
[  688.301567][T15249]  dump_stack_lvl+0x168/0x22e
[  688.306551][T15249]  ? show_regs_print_info+0x12/0x12
[  688.312225][T15249]  ? load_image+0x3b0/0x3b0
[  688.317112][T15249]  ? __lock_acquire+0x7c50/0x7c50
[  688.322422][T15249]  ? snprintf+0xd7/0x120
[  688.326851][T15249]  should_fail_ex+0x399/0x4d0
[  688.331750][T15249]  _copy_to_user+0x2c/0x130
[  688.336372][T15249]  simple_read_from_buffer+0xe3/0x150
[  688.342307][T15249]  proc_fail_nth_read+0x19a/0x210
[  688.347811][T15249]  ? proc_fault_inject_write+0x2f0/0x2f0
[  688.353578][T15249]  ? fsnotify_perm+0x248/0x550
[  688.358779][T15249]  ? proc_fault_inject_write+0x2f0/0x2f0
[  688.364641][T15249]  vfs_read+0x2c0/0x920
[  688.369438][T15249]  ? kernel_read+0x1e0/0x1e0
[  688.374790][T15249]  ? __fget_files+0x28/0x4d0
[  688.380213][T15249]  ? __fget_files+0x44a/0x4d0
[  688.385168][T15249]  ? __fdget_pos+0x2ae/0x360
[  688.391010][T15249]  ? ksys_read+0x71/0x240
[  688.399341][T15249]  ksys_read+0x143/0x240
[  688.404447][T15249]  ? vfs_write+0x960/0x960
[  688.409682][T15249]  ? lockdep_hardirqs_on+0x94/0x140
[  688.415687][T15249]  do_syscall_64+0x4c/0xa0
[  688.421599][T15249]  ? clear_bhb_loop+0x60/0xb0
[  688.426675][T15249]  ? clear_bhb_loop+0x60/0xb0
[  688.431675][T15249]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  688.438123][T15249] RIP: 0033:0x7f279078d5fc
[  688.443631][T15249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  688.465720][T15249] RSP: 002b:00007f279164a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  688.475612][T15249] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078d5fc
[  688.485094][T15249] RDX: 000000000000000f RSI: 00007f279164a0a0 RDI: 0000000000000005
[  688.494736][T15249] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  688.504686][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.513383][T15249] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  688.522313][T15249]  </TASK>
[  688.667512][T15254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3582'.
[  688.761868][T15256] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3581'.
[  688.884903][T15263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3583'.
[  689.078082][T15264] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3585'.
[  689.120170][T15268] FAULT_INJECTION: forcing a failure.
[  689.120170][T15268] name failslab, interval 1, probability 0, space 0, times 0
[  689.134662][T15268] CPU: 0 PID: 15268 Comm: syz.4.3586 Not tainted 6.1.148-syzkaller #0
[  689.143245][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  689.153801][T15268] Call Trace:
[  689.157143][T15268]  <TASK>
[  689.160487][T15268]  dump_stack_lvl+0x168/0x22e
[  689.164950][T15270] sock: sock_timestamping_bind_phc: sock not bind to device
[  689.165398][T15268]  ? show_regs_print_info+0x12/0x12
[  689.178827][T15268]  ? load_image+0x3b0/0x3b0
[  689.184163][T15268]  ? __rt6_find_exception_rcu+0x124/0x4b0
[  689.190414][T15268]  should_fail_ex+0x399/0x4d0
[  689.195647][T15268]  should_failslab+0x5/0x20
[  689.200998][T15268]  slab_pre_alloc_hook+0x59/0x310
[  689.206479][T15268]  kmem_cache_alloc+0x56/0x2f0
[  689.211830][T15268]  ? dst_alloc+0x101/0x160
[  689.216413][T15268]  ? ipv6_sysctl_rtcache_flush+0xf0/0xf0
[  689.222504][T15268]  dst_alloc+0x101/0x160
[  689.227198][T15268]  ip6_pol_route+0x94d/0x1260
[  689.231962][T15268]  ? ip6_pol_route+0x162/0x1260
[  689.237076][T15268]  ? trace_fib6_table_lookup+0x250/0x250
[  689.243169][T15268]  ? trace_call_bpf+0xbf/0x680
[  689.248365][T15268]  ? trace_call_bpf+0xbf/0x680
[  689.253284][T15268]  ? trace_call_bpf+0x5a7/0x680
[  689.258648][T15268]  fib6_rule_lookup+0x1d3/0x570
[  689.264311][T15268]  ? ip6_route_input_lookup+0xc0/0xc0
[  689.270109][T15268]  ? fib6_lookup+0x2c0/0x2c0
[  689.275077][T15268]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  689.281367][T15268]  ip6_route_input+0x6bf/0xa40
[  689.286668][T15268]  ? ip6_multipath_l3_keys+0x700/0x700
[  689.292473][T15268]  ? __lock_acquire+0x7c50/0x7c50
[  689.297673][T15268]  ? ip6_rcv_finish_core+0x21d/0x420
[  689.303499][T15268]  ip6_rcv_finish+0x13f/0x230
[  689.308454][T15268]  NF_HOOK+0x2ff/0x390
[  689.313608][T15268]  ? sk_setup_caps+0xaa0/0xaa0
[  689.318890][T15268]  ? net_zcopy_put_abort+0x90/0x90
[  689.324443][T15268]  ? NF_HOOK+0x97/0x390
[  689.328936][T15268]  ? ip6_rcv_core+0x1750/0x1750
[  689.333874][T15268]  ? net_zcopy_put_abort+0x90/0x90
[  689.339236][T15268]  ? ip6_rcv_finish_core+0x420/0x420
[  689.344876][T15268]  __netif_receive_skb+0xcc/0x290
[  689.351146][T15268]  ? netif_receive_skb+0x11e/0x7e0
[  689.357151][T15268]  netif_receive_skb+0x1d4/0x7e0
[  689.362615][T15268]  ? enqueue_to_backlog+0xd30/0xd30
[  689.368557][T15268]  ? sock_alloc_send_pskb+0x871/0x980
[  689.374441][T15268]  ? tun_rx_batched+0x15d/0x720
[  689.379629][T15268]  tun_rx_batched+0x1b6/0x720
[  689.385514][T15268]  ? pskb_may_pull+0xf0/0xf0
[  689.390402][T15268]  ? __local_bh_enable_ip+0x12a/0x1b0
[  689.397100][T15268]  ? lockdep_hardirqs_on+0x94/0x140
[  689.402647][T15268]  ? read_lock_is_recursive+0x10/0x10
[  689.408398][T15268]  ? __local_bh_enable_ip+0x12a/0x1b0
[  689.414645][T15268]  ? _local_bh_enable+0xa0/0xa0
[  689.419940][T15268]  ? skb_copy_datagram_from_iter+0x5a8/0x690
[  689.427538][T15268]  tun_get_user+0x2769/0x3b90
[  689.432565][T15268]  ? tun_get_user+0x2395/0x3b90
[  689.437896][T15268]  ? rcu_read_unlock+0xa0/0xa0
[  689.443076][T15268]  ? tun_get+0x1c/0x2e0
[  689.447502][T15268]  ? __lock_acquire+0x7c50/0x7c50
[  689.452807][T15268]  ? tun_get+0x1c/0x2e0
[  689.457217][T15268]  tun_chr_write_iter+0x112/0x1f0
[  689.462632][T15268]  vfs_write+0x44c/0x960
[  689.467259][T15268]  ? file_end_write+0x250/0x250
[  689.472860][T15268]  ? __fget_files+0x44a/0x4d0
[  689.478043][T15268]  ? __fdget_pos+0x1d4/0x360
[  689.483516][T15268]  ? ksys_write+0x71/0x240
[  689.488487][T15268]  ksys_write+0x143/0x240
[  689.494316][T15268]  ? __ia32_sys_read+0x80/0x80
[  689.500493][T15268]  ? lockdep_hardirqs_on+0x94/0x140
[  689.507327][T15268]  do_syscall_64+0x4c/0xa0
[  689.512295][T15268]  ? clear_bhb_loop+0x60/0xb0
[  689.517848][T15268]  ? clear_bhb_loop+0x60/0xb0
[  689.522939][T15268]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  689.529497][T15268] RIP: 0033:0x7f612858ebe9
[  689.533978][T15268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  689.556041][T15268] RSP: 002b:00007f61294aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  689.565681][T15268] RAX: ffffffffffffffda RBX: 00007f61287b5fa0 RCX: 00007f612858ebe9
[  689.574590][T15268] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  689.582996][T15268] RBP: 00007f61294aa090 R08: 0000000000000000 R09: 0000000000000000
[  689.591470][T15268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.599916][T15268] R13: 00007f61287b6038 R14: 00007f61287b5fa0 R15: 00007fff08153758
[  689.608218][T15268]  </TASK>
[  690.062717][T15285] validate_nla: 5 callbacks suppressed
[  690.062778][T15285] netlink: 'syz.0.3593': attribute type 3 has an invalid length.
[  690.091297][T15285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3593'.
[  690.309416][T15293] netlink: 'syz.2.3595': attribute type 1 has an invalid length.
[  690.324833][T15293] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3595'.
[  690.612775][T15306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3599'.
[  690.658807][T15303] netlink: 'syz.0.3598': attribute type 3 has an invalid length.
[  690.661894][T15305] netlink: 'syz.2.3600': attribute type 3 has an invalid length.
[  690.781561][T15305] netlink: 'syz.2.3600': attribute type 27 has an invalid length.
[  690.996291][T15303] netlink: 'syz.0.3598': attribute type 27 has an invalid length.
[  691.067726][T15310] netlink: 'syz.1.3601': attribute type 10 has an invalid length.
[  691.592075][T15310] team0: Device hsr_slave_0 failed to register rx_handler
[  692.384304][T15329] netlink: 'syz.0.3608': attribute type 3 has an invalid length.
[  692.416286][T15329] __nla_validate_parse: 2 callbacks suppressed
[  692.416328][T15329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3608'.
[  692.434431][T15332] netlink: 'syz.1.3610': attribute type 1 has an invalid length.
[  692.551340][T15332] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3610'.
[  692.910621][T15341] netlink: 'syz.1.3612': attribute type 3 has an invalid length.
[  692.927892][T15341] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3612'.
[  693.155238][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3624'.
[  693.161558][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3614'.
[  694.148155][T15373] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3621'.
[  694.235407][T15375] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3622'.
[  694.374439][T15377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3625'.
[  694.935646][T15387] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3639'.
[  695.077908][T15393] validate_nla: 6 callbacks suppressed
[  695.077930][T15393] netlink: 'syz.2.3629': attribute type 10 has an invalid length.
[  695.159973][T15382] netlink: 'syz.0.3628': attribute type 3 has an invalid length.
[  695.185102][T15382] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3628'.
[  695.223027][   T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  695.358607][T15393] team0: Device hsr_slave_0 failed to register rx_handler
[  696.257433][T15422] netlink: 'syz.1.3641': attribute type 3 has an invalid length.
[  697.053471][T15439] netlink: 'syz.1.3643': attribute type 1 has an invalid length.
[  697.455537][T15448] netlink: 'syz.1.3656': attribute type 1 has an invalid length.
[  697.505762][T15448] __nla_validate_parse: 3 callbacks suppressed
[  697.505783][T15448] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3656'.
[  697.928316][T15466] netlink: 'syz.3.3650': attribute type 3 has an invalid length.
[  698.042408][T15468] netlink: 'syz.1.3651': attribute type 10 has an invalid length.
[  698.050618][T15468] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  698.121358][T15466] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3650'.
[  698.142779][T15473] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3650'.
[  698.180281][T15469] netlink: 'syz.0.3652': attribute type 3 has an invalid length.
[  698.341233][T15469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3652'.
[  698.352072][T15477] netlink: 'syz.2.3654': attribute type 3 has an invalid length.
[  698.396630][T15477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3654'.
[  698.611194][ T4267] Bluetooth: hci5: command 0x0406 tx timeout
[  698.766672][T15469] netlink: 'syz.0.3652': attribute type 27 has an invalid length.
[  699.395112][T15495] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3664'.
[  700.094415][T15504] validate_nla: 1 callbacks suppressed
[  700.094437][T15504] netlink: 'syz.1.3668': attribute type 27 has an invalid length.
[  700.187632][T15507] netlink: 'syz.3.3669': attribute type 3 has an invalid length.
[  700.201736][T15507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3669'.
[  700.362784][T15509] netlink: 'syz.4.3670': attribute type 10 has an invalid length.
[  700.528338][T15519] sock: sock_timestamping_bind_phc: sock not bind to device
[  700.537675][T15509] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  700.576425][T15515] netlink: 'syz.4.3670': attribute type 10 has an invalid length.
[  700.624242][T15515] device macvlan0 entered promiscuous mode
[  700.703336][T15515] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  700.740263][T15517] netlink: 'syz.2.3673': attribute type 10 has an invalid length.
[  701.010893][T15517] team0: Device ipvlan1 failed to register rx_handler
[  701.119353][T15530] netlink: 'syz.4.3678': attribute type 1 has an invalid length.
[  701.191859][T15530] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3678'.
[  701.650443][T15542] netlink: 'syz.1.3679': attribute type 1 has an invalid length.
[  701.739626][T15542] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3679'.
[  701.740510][T15544] netlink: 'syz.0.3681': attribute type 3 has an invalid length.
[  701.809326][T15544] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3681'.
[  701.984977][T15547] netlink: 'syz.2.3682': attribute type 27 has an invalid length.
[  702.083057][T15551] netlink: 'syz.1.3684': attribute type 3 has an invalid length.
[  703.263650][T15579] __nla_validate_parse: 3 callbacks suppressed
[  703.263670][T15579] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3695'.
[  703.600719][T15591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3699'.
[  704.530724][T15611] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3707'.
[  704.712819][T15617] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3709'.
[  713.097628][T15657] validate_nla: 6 callbacks suppressed
[  713.097652][T15657] netlink: 'syz.1.3722': attribute type 3 has an invalid length.
[  713.181261][T15657] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3722'.
[  713.390873][T15660] netlink: 'syz.3.3725': attribute type 27 has an invalid length.
[  713.496202][T15665] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3726'.
[  713.675550][T15669] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3727'.
[  713.948815][T15677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.971270][T15677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.036522][T15677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.085430][T15677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.884086][T15699] netlink: 'syz.2.3736': attribute type 3 has an invalid length.
[  714.988847][T15699] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3736'.
[  715.046594][T15701] FAULT_INJECTION: forcing a failure.
[  715.046594][T15701] name failslab, interval 1, probability 0, space 0, times 0
[  715.115242][T15700] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3737'.
[  715.172708][T15701] CPU: 1 PID: 15701 Comm: syz.1.3737 Not tainted 6.1.148-syzkaller #0
[  715.181202][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  715.191579][T15701] Call Trace:
[  715.194908][T15701]  <TASK>
[  715.197945][T15701]  dump_stack_lvl+0x168/0x22e
[  715.202743][T15701]  ? show_regs_print_info+0x12/0x12
[  715.208094][T15701]  ? load_image+0x3b0/0x3b0
[  715.212795][T15701]  ? __might_sleep+0xd0/0xd0
[  715.217522][T15701]  ? __lock_acquire+0x7c50/0x7c50
[  715.222587][T15701]  should_fail_ex+0x399/0x4d0
[  715.227546][T15701]  should_failslab+0x5/0x20
[  715.232152][T15701]  slab_pre_alloc_hook+0x59/0x310
[  715.237194][T15701]  kmem_cache_alloc_node+0x5a/0x320
[  715.242484][T15701]  ? __alloc_skb+0xfc/0x7e0
[  715.247533][T15701]  __alloc_skb+0xfc/0x7e0
[  715.252056][T15701]  ? netlink_autobind+0xda/0x300
[  715.257042][T15701]  netlink_sendmsg+0x645/0xbc0
[  715.262028][T15701]  ? netlink_getsockopt+0x540/0x540
[  715.267342][T15701]  ? aa_sock_msg_perm+0x94/0x150
[  715.272473][T15701]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  715.277834][T15701]  ? security_socket_sendmsg+0x7c/0xa0
[  715.284042][T15701]  ? netlink_getsockopt+0x540/0x540
[  715.289379][T15701]  ____sys_sendmsg+0x59b/0x970
[  715.294351][T15701]  ? __sys_sendmsg_sock+0x30/0x30
[  715.299572][T15701]  ? __import_iovec+0x315/0x500
[  715.304632][T15701]  ? import_iovec+0x6f/0xa0
[  715.309421][T15701]  ___sys_sendmsg+0x21c/0x290
[  715.314201][T15701]  ? __sys_sendmsg+0x270/0x270
[  715.319126][T15701]  ? __lock_acquire+0x7c50/0x7c50
[  715.324456][T15701]  ? __fdget+0x17c/0x200
[  715.328838][T15701]  __se_sys_sendmsg+0x19e/0x270
[  715.333910][T15701]  ? __x64_sys_sendmsg+0x80/0x80
[  715.338889][T15701]  ? lockdep_hardirqs_on+0x94/0x140
[  715.344372][T15701]  do_syscall_64+0x4c/0xa0
[  715.349087][T15701]  ? clear_bhb_loop+0x60/0xb0
[  715.353955][T15701]  ? clear_bhb_loop+0x60/0xb0
[  715.359009][T15701]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  715.364963][T15701] RIP: 0033:0x7fd628b8ebe9
[  715.369474][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  715.389634][T15701] RSP: 002b:00007fd62991d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  715.398333][T15701] RAX: ffffffffffffffda RBX: 00007fd628db6090 RCX: 00007fd628b8ebe9
[  715.406587][T15701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  715.415009][T15701] RBP: 00007fd62991d090 R08: 0000000000000000 R09: 0000000000000000
[  715.423170][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.431412][T15701] R13: 00007fd628db6128 R14: 00007fd628db6090 R15: 00007ffc55f51248
[  715.439591][T15701]  </TASK>
[  715.578761][T15703] netlink: 'syz.4.3738': attribute type 27 has an invalid length.
[  715.618615][T15709] netlink: 'syz.0.3739': attribute type 1 has an invalid length.
[  715.641232][T15709] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3739'.
[  715.946931][T15724] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3745'.
[  716.360485][T15738] netlink: 'syz.2.3749': attribute type 3 has an invalid length.
[  716.392777][T15738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3749'.
[  716.514317][T15744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3751'.
[  717.504263][T15756] netlink: 'syz.1.3754': attribute type 27 has an invalid length.
[  717.589814][T15766] netlink: 'syz.0.3756': attribute type 1 has an invalid length.
[  717.608272][T15765] FAULT_INJECTION: forcing a failure.
[  717.608272][T15765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  717.637950][T15766] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3756'.
[  717.690214][T15765] CPU: 1 PID: 15765 Comm: syz.4.3757 Not tainted 6.1.148-syzkaller #0
[  717.698463][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  717.709511][T15765] Call Trace:
[  717.712901][T15765]  <TASK>
[  717.715853][T15765]  dump_stack_lvl+0x168/0x22e
[  717.720660][T15765]  ? show_regs_print_info+0x12/0x12
[  717.725923][T15765]  ? load_image+0x3b0/0x3b0
[  717.730851][T15765]  ? __lock_acquire+0x7c50/0x7c50
[  717.735973][T15765]  ? __virt_addr_valid+0x188/0x540
[  717.741206][T15765]  should_fail_ex+0x399/0x4d0
[  717.746005][T15765]  _copy_from_user+0x2c/0x170
[  717.750961][T15765]  bpf_test_init+0xf9/0x150
[  717.755656][T15765]  bpf_prog_test_run_xdp+0x359/0xe50
[  717.761151][T15765]  ? dev_put+0x80/0x80
[  717.765342][T15765]  ? dev_put+0x80/0x80
[  717.769682][T15765]  bpf_prog_test_run+0x31e/0x390
[  717.774635][T15765]  __sys_bpf+0x593/0x6d0
[  717.779327][T15765]  ? bpf_link_show_fdinfo+0x340/0x340
[  717.785156][T15765]  ? lock_chain_count+0x20/0x20
[  717.790297][T15765]  __x64_sys_bpf+0x78/0x90
[  717.794996][T15765]  do_syscall_64+0x4c/0xa0
[  717.799944][T15765]  ? clear_bhb_loop+0x60/0xb0
[  717.805284][T15765]  ? clear_bhb_loop+0x60/0xb0
[  717.810424][T15765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  717.816622][T15765] RIP: 0033:0x7f612858ebe9
[  717.821252][T15765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  717.842196][T15765] RSP: 002b:00007f61294aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  717.851085][T15765] RAX: ffffffffffffffda RBX: 00007f61287b5fa0 RCX: 00007f612858ebe9
[  717.859253][T15765] RDX: 000000000000001f RSI: 0000200000000040 RDI: 000000000000000a
[  717.867322][T15765] RBP: 00007f61294aa090 R08: 0000000000000000 R09: 0000000000000000
[  717.875575][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.885822][T15765] R13: 00007f61287b6038 R14: 00007f61287b5fa0 R15: 00007fff08153758
[  717.894282][T15765]  </TASK>
[  718.201589][T15769] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3758'.
[  718.539775][T15775] FAULT_INJECTION: forcing a failure.
[  718.539775][T15775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  718.663167][T15769] bond0: (slave macvlan0): Releasing backup interface
[  718.692901][T15775] CPU: 0 PID: 15775 Comm: syz.1.3760 Not tainted 6.1.148-syzkaller #0
[  718.701943][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  718.712735][T15775] Call Trace:
[  718.716231][T15775]  <TASK>
[  718.719275][T15775]  dump_stack_lvl+0x168/0x22e
[  718.724071][T15775]  ? show_regs_print_info+0x12/0x12
[  718.729487][T15775]  ? load_image+0x3b0/0x3b0
[  718.734328][T15775]  ? __lock_acquire+0x7c50/0x7c50
[  718.739953][T15775]  should_fail_ex+0x399/0x4d0
[  718.744933][T15775]  _copy_from_user+0x2c/0x170
[  718.749839][T15775]  iovec_from_user+0x143/0x360
[  718.754923][T15775]  __import_iovec+0x6d/0x500
[  718.759645][T15775]  ? __might_fault+0xa6/0x120
[  718.764617][T15775]  import_iovec+0x6f/0xa0
[  718.769196][T15775]  ___sys_recvmsg+0x433/0x510
[  718.774329][T15775]  ? __sys_recvmsg+0x270/0x270
[  718.779410][T15775]  ? seqcount_lockdep_reader_access+0x15c/0x1c0
[  718.786230][T15775]  ? __fget_files+0x44a/0x4d0
[  718.791184][T15775]  ? __fdget+0x17c/0x200
[  718.795918][T15775]  __x64_sys_recvmsg+0x1eb/0x2b0
[  718.800997][T15775]  ? ___sys_recvmsg+0x510/0x510
[  718.806086][T15775]  ? syscall_enter_from_user_mode+0x2a/0x80
[  718.812553][T15775]  do_syscall_64+0x4c/0xa0
[  718.817615][T15775]  ? clear_bhb_loop+0x60/0xb0
[  718.822325][T15775]  ? clear_bhb_loop+0x60/0xb0
[  718.827045][T15775]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.832990][T15775] RIP: 0033:0x7fd628b8ebe9
[  718.837522][T15775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.858323][T15775] RSP: 002b:00007fd62993e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  718.867398][T15775] RAX: ffffffffffffffda RBX: 00007fd628db5fa0 RCX: 00007fd628b8ebe9
[  718.875780][T15775] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000007
[  718.884249][T15775] RBP: 00007fd62993e090 R08: 0000000000000000 R09: 0000000000000000
[  718.894980][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.904408][T15775] R13: 00007fd628db6038 R14: 00007fd628db5fa0 R15: 00007ffc55f51248
[  718.912818][T15775]  </TASK>
[  718.920034][ T4267] Bluetooth: hci1: command 0x0406 tx timeout
[  719.707311][T15790] netlink: 'syz.0.3763': attribute type 3 has an invalid length.
[  719.756947][T15790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3763'.
[  720.308667][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3767'.
[  720.519127][T15808] netlink: 'syz.1.3769': attribute type 21 has an invalid length.
[  721.238985][T15815] netlink: 'syz.4.3771': attribute type 1 has an invalid length.
[  721.294975][T15815] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3771'.
[  722.414435][T15820] netlink: 'syz.0.3772': attribute type 27 has an invalid length.
[  722.937624][T15835] netlink: 'syz.2.3777': attribute type 3 has an invalid length.
[  723.028336][T15835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3777'.
[  723.555437][T15845] netlink: 'syz.4.3779': attribute type 3 has an invalid length.
[  723.715224][T15845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3779'.
[  724.577010][T15855] netlink: 'syz.1.3784': attribute type 1 has an invalid length.
[  724.597271][T15855] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3784'.
[  725.627685][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3782'.
[  725.673615][T15861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3785'.
[  726.242274][T15445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  726.691351][T15873] netlink: 'syz.0.3789': attribute type 27 has an invalid length.
[  727.484324][T15883] netlink: 'syz.0.3792': attribute type 3 has an invalid length.
[  727.538968][T15883] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3792'.
[  728.340159][T15894] netlink: 'syz.2.3794': attribute type 3 has an invalid length.
[  728.382677][T15894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3794'.
[  728.654382][T15897] netlink: 'syz.1.3796': attribute type 1 has an invalid length.
[  728.699011][T15897] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3796'.
[  729.008948][T15899] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3797'.
[  730.694688][T15915] netlink: 'syz.2.3802': attribute type 27 has an invalid length.
[  730.724844][T15920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3803'.
[  730.785091][T15920] bond0: (slave macvlan0): Releasing backup interface
[  731.387996][T15924] netlink: 'syz.0.3814': attribute type 27 has an invalid length.
[  731.422804][T15927] netlink: 'syz.2.3804': attribute type 3 has an invalid length.
[  731.432475][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3804'.
[  731.860414][T15935] netlink: 'syz.2.3809': attribute type 1 has an invalid length.
[  731.908065][T15935] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3809'.
[  731.948702][T15937] netlink: 'syz.0.3808': attribute type 3 has an invalid length.
[  732.033387][T15937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3808'.
[  732.276911][T15944] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3811'.
[  734.071960][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  734.082123][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  734.091354][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  734.100222][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  734.108423][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  734.116885][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  735.244730][T15975] netlink: 'syz.1.3819': attribute type 27 has an invalid length.
[  735.331807][T15960] chnl_net:caif_netlink_parms(): no params data found
[  735.581319][T15977] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3818'.
[  736.164993][T15987] netlink: 'syz.1.3821': attribute type 3 has an invalid length.
[  736.211127][ T4267] Bluetooth: hci2: command 0x0409 tx timeout
[  736.216249][T15987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3821'.
[  736.828697][T15996] netlink: 'syz.2.3826': attribute type 3 has an invalid length.
[  736.845554][T15996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3826'.
[  736.881961][T15960] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.926612][T15960] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.081801][T15960] device bridge_slave_0 entered promiscuous mode
[  737.191245][T15960] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.299059][T15960] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.396280][T15960] device bridge_slave_1 entered promiscuous mode
[  737.410123][T16003] FAULT_INJECTION: forcing a failure.
[  737.410123][T16003] name failslab, interval 1, probability 0, space 0, times 0
[  737.508254][T16003] CPU: 1 PID: 16003 Comm: syz.0.3828 Not tainted 6.1.148-syzkaller #0
[  737.517020][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  737.527533][T16003] Call Trace:
[  737.531465][T16003]  <TASK>
[  737.534514][T16003]  dump_stack_lvl+0x168/0x22e
[  737.539517][T16003]  ? show_regs_print_info+0x12/0x12
[  737.545062][T16003]  ? load_image+0x3b0/0x3b0
[  737.550033][T16003]  ? __might_sleep+0xd0/0xd0
[  737.554917][T16003]  ? __lock_acquire+0x7c50/0x7c50
[  737.560857][T16003]  should_fail_ex+0x399/0x4d0
[  737.565693][T16003]  should_failslab+0x5/0x20
[  737.570953][T16003]  slab_pre_alloc_hook+0x59/0x310
[  737.576523][T16003]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  737.582283][T16003]  kmem_cache_alloc_node+0x5a/0x320
[  737.587942][T16003]  ? pfkey_broadcast+0x3c0/0x3e0
[  737.592922][T16003]  ? __alloc_skb+0xfc/0x7e0
[  737.597646][T16003]  __alloc_skb+0xfc/0x7e0
[  737.602276][T16003]  ? pfkey_broadcast+0x3c0/0x3e0
[  737.607340][T16003]  pfkey_sendmsg+0xc71/0xff0
[  737.612152][T16003]  ? pfkey_release+0x310/0x310
[  737.617412][T16003]  ? aa_sock_msg_perm+0x94/0x150
[  737.622829][T16003]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  737.628401][T16003]  ? security_socket_sendmsg+0x7c/0xa0
[  737.634311][T16003]  ? pfkey_release+0x310/0x310
[  737.639625][T16003]  ____sys_sendmsg+0x59b/0x970
[  737.645487][T16003]  ? __sys_sendmsg_sock+0x30/0x30
[  737.650739][T16003]  ? __import_iovec+0x315/0x500
[  737.656084][T16003]  ? import_iovec+0x6f/0xa0
[  737.660811][T16003]  ___sys_sendmsg+0x21c/0x290
[  737.665701][T16003]  ? __sys_sendmsg+0x270/0x270
[  737.670602][T16003]  ? __lock_acquire+0x7c50/0x7c50
[  737.676061][T16003]  ? __fdget+0x17c/0x200
[  737.680816][T16003]  __se_sys_sendmsg+0x19e/0x270
[  737.685707][T16003]  ? ct_nmi_exit+0x145/0x1c0
[  737.690864][T16003]  ? __x64_sys_sendmsg+0x80/0x80
[  737.696231][T16003]  ? lockdep_hardirqs_on+0x94/0x140
[  737.702053][T16003]  do_syscall_64+0x4c/0xa0
[  737.707901][T16003]  ? clear_bhb_loop+0x60/0xb0
[  737.712983][T16003]  ? clear_bhb_loop+0x60/0xb0
[  737.717789][T16003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.724193][T16003] RIP: 0033:0x7f3f41f8ebe9
[  737.729070][T16003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  737.750364][T16003] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  737.758804][T16003] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  737.766973][T16003] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003
[  737.775509][T16003] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  737.784067][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.792445][T16003] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  737.801458][T16003]  </TASK>
[  737.937307][T16005] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3829'.
[  737.938793][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  737.975307][T15960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  738.268051][T15960] team0: Port device team_slave_0 added
[  738.291081][ T4267] Bluetooth: hci2: command 0x041b tx timeout
[  738.344925][T15960] team0: Port device team_slave_1 added
[  738.370350][T16011] netlink: 'syz.1.3831': attribute type 27 has an invalid length.
[  738.396126][T16017] netlink: 'syz.4.3833': attribute type 3 has an invalid length.
[  738.460033][T16017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3833'.
[  738.562057][T15960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.621652][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.872448][T15960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.985437][T15960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.021013][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.095112][T15960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.454805][T15960] device hsr_slave_0 entered promiscuous mode
[  739.518929][T15960] device hsr_slave_1 entered promiscuous mode
[  739.546881][T15960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.569639][T15960] Cannot create hsr debugfs directory
[  739.704680][T16041] netlink: 'syz.1.3841': attribute type 1 has an invalid length.
[  739.736719][ T4352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.755052][T16041] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3841'.
[  739.818362][T16043] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3842'.
[  739.935459][ T4352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.094243][ T4352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.293142][ T4352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.372547][ T4267] Bluetooth: hci2: command 0x040f tx timeout
[  741.038488][T15960] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  741.133814][T15960] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  741.198771][T15960] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  741.260450][T15960] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  741.278609][T16062] netlink: 'syz.2.3848': attribute type 3 has an invalid length.
[  741.319161][T16062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3848'.
[  742.107285][T15960] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.220672][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  742.268364][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  742.332721][T15960] 8021q: adding VLAN 0 to HW filter on device team0
[  742.442628][T16099] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3857'.
[  742.462566][ T4267] Bluetooth: hci2: command 0x0419 tx timeout
[  742.803933][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  742.855602][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  742.912382][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.920595][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.060660][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  743.102039][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  743.153563][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.161079][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.213136][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  743.235172][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  743.332418][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  743.374792][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  743.404107][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  743.462159][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  743.566449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  743.602178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  743.857051][T15960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  743.947762][T15960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  744.010175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  744.036182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  744.062859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  744.083945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  744.110443][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  744.677853][T16147] netlink: 'syz.1.3865': attribute type 3 has an invalid length.
[  744.725304][T16147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3865'.
[  745.128355][T16158] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3871'.
[  745.261592][ T4352] device hsr_slave_0 left promiscuous mode
[  745.291743][ T4352] device hsr_slave_1 left promiscuous mode
[  745.321734][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  745.329423][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  745.401898][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  745.421940][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  745.447707][ T4352] bridge0: port 3(bond0) entered disabled state
[  745.519208][ T4352] device bridge_slave_1 left promiscuous mode
[  745.533741][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.605756][ T4352] device bridge_slave_0 left promiscuous mode
[  745.642437][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.783238][ T4352] device veth1_macvtap left promiscuous mode
[  745.808443][ T4352] device veth0_macvtap left promiscuous mode
[  745.831801][ T4352] device veth1_vlan left promiscuous mode
[  745.857178][ T4352] device veth0_vlan left promiscuous mode
[  746.978893][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  747.043980][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  747.099298][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.109471][ T4352] device bond_slave_1 left promiscuous mode
[  747.494963][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.504950][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.752576][ T4352] bond0 (unregistering): Released all slaves
[  747.855021][T16186] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3879'.
[  747.905324][T15960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.922875][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  748.004663][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  748.456328][T16212] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3887'.
[  749.251855][T16240] FAULT_INJECTION: forcing a failure.
[  749.251855][T16240] name failslab, interval 1, probability 0, space 0, times 0
[  749.341071][T16240] CPU: 1 PID: 16240 Comm: syz.0.3893 Not tainted 6.1.148-syzkaller #0
[  749.350448][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  749.361239][T16240] Call Trace:
[  749.364752][T16240]  <TASK>
[  749.367897][T16240]  dump_stack_lvl+0x168/0x22e
[  749.372629][T16240]  ? show_regs_print_info+0x12/0x12
[  749.378877][T16240]  ? load_image+0x3b0/0x3b0
[  749.383702][T16240]  ? perf_trace_lock+0xf3/0x370
[  749.388886][T16240]  ? verify_lock_unused+0x140/0x140
[  749.394481][T16240]  ? perf_trace_lock+0xf3/0x370
[  749.399682][T16240]  should_fail_ex+0x399/0x4d0
[  749.404749][T16240]  should_failslab+0x5/0x20
[  749.409614][T16240]  slab_pre_alloc_hook+0x59/0x310
[  749.414941][T16240]  kmem_cache_alloc+0x56/0x2f0
[  749.419746][T16240]  ? skb_clone+0x1e7/0x370
[  749.424486][T16240]  skb_clone+0x1e7/0x370
[  749.429217][T16240]  __netlink_deliver_tap+0x3ed/0x800
[  749.434664][T16240]  ? netlink_deliver_tap+0x2e/0x1b0
[  749.440364][T16240]  netlink_deliver_tap+0x19c/0x1b0
[  749.446052][T16240]  netlink_unicast+0x728/0x8d0
[  749.450846][T16240]  netlink_sendmsg+0x89e/0xbc0
[  749.456092][T16240]  ? netlink_getsockopt+0x540/0x540
[  749.461965][T16240]  ? aa_sock_msg_perm+0x94/0x150
[  749.467416][T16240]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  749.473542][T16240]  ? security_socket_sendmsg+0x7c/0xa0
[  749.479297][T16240]  ? netlink_getsockopt+0x540/0x540
[  749.484866][T16240]  ____sys_sendmsg+0x59b/0x970
[  749.489743][T16240]  ? __sys_sendmsg_sock+0x30/0x30
[  749.495055][T16240]  ? __import_iovec+0x315/0x500
[  749.536421][T16240]  ? import_iovec+0x6f/0xa0
[  749.543323][T16240]  ___sys_sendmsg+0x21c/0x290
[  749.548927][T16240]  ? __sys_sendmsg+0x270/0x270
[  749.553841][T16240]  ? __lock_acquire+0x7c50/0x7c50
[  749.559248][T16240]  ? __fdget+0x17c/0x200
[  749.564639][T16240]  __se_sys_sendmsg+0x19e/0x270
[  749.569696][T16240]  ? __x64_sys_sendmsg+0x80/0x80
[  749.574949][T16240]  ? lockdep_hardirqs_on+0x94/0x140
[  749.582044][T16240]  do_syscall_64+0x4c/0xa0
[  749.586911][T16240]  ? clear_bhb_loop+0x60/0xb0
[  749.591684][T16240]  ? clear_bhb_loop+0x60/0xb0
[  749.596737][T16240]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  749.602910][T16240] RIP: 0033:0x7f3f41f8ebe9
[  749.607508][T16240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  749.628010][T16240] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  749.636624][T16240] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  749.644815][T16240] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000004
[  749.653368][T16240] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  749.661648][T16240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.670249][T16240] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  749.679035][T16240]  </TASK>
[  749.685665][T16240] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3893'.
[  749.776619][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  749.822325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  749.897025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  749.929645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  749.980080][T15960] device veth0_vlan entered promiscuous mode
[  749.991983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  749.996419][T16252] netlink: 'syz.4.3896': attribute type 3 has an invalid length.
[  750.029384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  750.030047][T16252] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3896'.
[  750.093899][T15960] device veth1_vlan entered promiscuous mode
[  750.198986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  750.230131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  750.276781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  750.317422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  750.358670][T15960] device veth0_macvtap entered promiscuous mode
[  750.383100][T16259] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3897'.
[  750.424237][T15960] device veth1_macvtap entered promiscuous mode
[  750.513159][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  750.566833][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.617962][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  750.669182][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.724863][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  750.797591][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.856957][T15960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  750.907046][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  750.927803][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  750.997865][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  751.044154][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  751.109408][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.121758][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.141032][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.176777][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.203362][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.239481][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.250727][T16277] FAULT_INJECTION: forcing a failure.
[  751.250727][T16277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  751.278215][T15960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  751.319476][T16263] device team_slave_0 left promiscuous mode
[  751.329884][T16277] CPU: 1 PID: 16277 Comm: syz.0.3901 Not tainted 6.1.148-syzkaller #0
[  751.338828][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  751.349303][T16277] Call Trace:
[  751.353060][T16277]  <TASK>
[  751.356381][T16277]  dump_stack_lvl+0x168/0x22e
[  751.361354][T16277]  ? show_regs_print_info+0x12/0x12
[  751.367029][T16277]  ? load_image+0x3b0/0x3b0
[  751.372371][T16277]  ? __lock_acquire+0x7c50/0x7c50
[  751.377900][T16277]  should_fail_ex+0x399/0x4d0
[  751.382845][T16277]  _copy_to_user+0x2c/0x130
[  751.387793][T16277]  bpf_verifier_vlog+0x172/0x390
[  751.392857][T16277]  __btf_verifier_log+0xd1/0x120
[  751.398439][T16277]  ? btf_check_sec_info+0x330/0x330
[  751.403929][T16277]  ? __virt_addr_valid+0x188/0x540
[  751.409253][T16277]  btf_parse_hdr+0x48d/0x7e0
[  751.413964][T16277]  btf_new_fd+0x3c6/0x780
[  751.418605][T16277]  __sys_bpf+0x57a/0x6d0
[  751.423200][T16277]  ? bpf_link_show_fdinfo+0x340/0x340
[  751.429763][T16277]  ? lock_chain_count+0x20/0x20
[  751.435105][T16277]  __x64_sys_bpf+0x78/0x90
[  751.440104][T16277]  do_syscall_64+0x4c/0xa0
[  751.445347][T16277]  ? clear_bhb_loop+0x60/0xb0
[  751.450793][T16277]  ? clear_bhb_loop+0x60/0xb0
[  751.456399][T16277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  751.462950][T16277] RIP: 0033:0x7f3f41f8ebe9
[  751.469064][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  751.492024][T16277] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  751.501185][T16277] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  751.509908][T16277] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  751.518624][T16277] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  751.527006][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  751.536240][T16277] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  751.545524][T16277]  </TASK>
[  751.708126][T16263] team0: Port device team_slave_0 removed
[  751.754691][T16263] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  751.851276][T16265] netlink: 'syz.4.3898': attribute type 1 has an invalid length.
[  751.860034][T16265] netlink: 'syz.4.3898': attribute type 4 has an invalid length.
[  751.891267][T16265] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3898'.
[  751.912726][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  751.928779][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  751.940457][T16271] netlink: 'syz.4.3898': attribute type 10 has an invalid length.
[  751.955284][T16271] team0: Device ipvlan1 failed to register rx_handler
[  751.998883][T15960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.020890][T15960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.040203][T15960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.061504][T15960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.077434][T16284] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3904'.
[  752.359352][T15445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.393671][T15445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.461213][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  752.503687][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.519310][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.550452][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  752.892270][T16306] FAULT_INJECTION: forcing a failure.
[  752.892270][T16306] name failslab, interval 1, probability 0, space 0, times 0
[  752.950046][T16306] CPU: 1 PID: 16306 Comm: syz.2.3909 Not tainted 6.1.148-syzkaller #0
[  752.959084][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  752.969880][T16306] Call Trace:
[  752.973203][T16306]  <TASK>
[  752.976350][T16306]  dump_stack_lvl+0x168/0x22e
[  752.981252][T16306]  ? show_regs_print_info+0x12/0x12
[  752.986883][T16306]  ? load_image+0x3b0/0x3b0
[  752.991544][T16306]  ? __might_sleep+0xd0/0xd0
[  752.996512][T16306]  ? __lock_acquire+0x7c50/0x7c50
[  753.002130][T16306]  should_fail_ex+0x399/0x4d0
[  753.007538][T16306]  should_failslab+0x5/0x20
[  753.012937][T16306]  slab_pre_alloc_hook+0x59/0x310
[  753.018811][T16306]  ? __get_vm_area_node+0x122/0x330
[  753.024758][T16306]  __kmem_cache_alloc_node+0x4f/0x260
[  753.030670][T16306]  ? __get_vm_area_node+0x122/0x330
[  753.036101][T16306]  kmalloc_node_trace+0x22/0xe0
[  753.042060][T16306]  __get_vm_area_node+0x122/0x330
[  753.048771][T16306]  __vmalloc_node_range+0x357/0x1390
[  753.054379][T16306]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.061557][T16306]  ? perf_trace_preemptirq_template+0x287/0x330
[  753.069655][T16306]  ? free_vm_area+0x50/0x50
[  753.076652][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.083662][T16306]  ? lockdep_hardirqs_on+0x94/0x140
[  753.089881][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.097859][T16306]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.104622][T16306]  __vmalloc+0x76/0x80
[  753.109016][T16306]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.114885][T16306]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.121633][T16306]  ? __sanitizer_cov_trace_switch+0x4/0xe0
[  753.128450][T16306]  bpf_prog_alloc+0x1c/0x1b0
[  753.133811][T16306]  bpf_prog_load+0x7b6/0x15a0
[  753.138905][T16306]  ? map_freeze+0x390/0x390
[  753.143454][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.150052][T16306]  ? lockdep_hardirqs_on+0x94/0x140
[  753.155835][T16306]  ? bpf_lsm_audit_rule_free+0x10/0x10
[  753.162047][T16306]  ? bpf_lsm_bpf+0x5/0x10
[  753.166833][T16306]  ? security_bpf+0x7a/0xa0
[  753.172270][T16306]  __sys_bpf+0x520/0x6d0
[  753.177005][T16306]  ? bpf_link_show_fdinfo+0x340/0x340
[  753.184016][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.190913][T16306]  __x64_sys_bpf+0x78/0x90
[  753.196019][T16306]  do_syscall_64+0x4c/0xa0
[  753.200612][T16306]  ? clear_bhb_loop+0x60/0xb0
[  753.205486][T16306]  ? clear_bhb_loop+0x60/0xb0
[  753.210283][T16306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  753.216277][T16306] RIP: 0033:0x7f279078ebe9
[  753.220818][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.241943][T16306] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  753.251271][T16306] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  753.260063][T16306] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  753.269215][T16306] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  753.278183][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.286702][T16306] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  753.295952][T16306]  </TASK>
[  753.353414][T16306] warn_alloc: 1 callbacks suppressed
[  753.353456][T16306] syz.2.3909: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  753.416099][T16306] CPU: 0 PID: 16306 Comm: syz.2.3909 Not tainted 6.1.148-syzkaller #0
[  753.425152][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  753.436625][T16306] Call Trace:
[  753.440127][T16306]  <TASK>
[  753.443451][T16306]  dump_stack_lvl+0x168/0x22e
[  753.448722][T16306]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  753.457128][T16306]  ? show_regs_print_info+0x12/0x12
[  753.463317][T16306]  ? load_image+0x3b0/0x3b0
[  753.468058][T16306]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  753.474937][T16306]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  753.482071][T16306]  warn_alloc+0x20c/0x300
[  753.488341][T16306]  ? __get_vm_area_node+0x122/0x330
[  753.494471][T16306]  ? zone_watermark_ok_safe+0x270/0x270
[  753.501016][T16306]  ? rcu_is_watching+0x11/0xa0
[  753.506354][T16306]  ? __get_vm_area_node+0x318/0x330
[  753.512748][T16306]  __vmalloc_node_range+0x37c/0x1390
[  753.518609][T16306]  ? perf_trace_preemptirq_template+0x287/0x330
[  753.526583][T16306]  ? free_vm_area+0x50/0x50
[  753.534054][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.542678][T16306]  ? lockdep_hardirqs_on+0x94/0x140
[  753.550280][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.559177][T16306]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.567941][T16306]  __vmalloc+0x76/0x80
[  753.573250][T16306]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.580247][T16306]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  753.586492][T16306]  ? __sanitizer_cov_trace_switch+0x4/0xe0
[  753.593236][T16306]  bpf_prog_alloc+0x1c/0x1b0
[  753.598067][T16306]  bpf_prog_load+0x7b6/0x15a0
[  753.603032][T16306]  ? map_freeze+0x390/0x390
[  753.607896][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.616442][T16306]  ? lockdep_hardirqs_on+0x94/0x140
[  753.622348][T16306]  ? bpf_lsm_audit_rule_free+0x10/0x10
[  753.629086][T16306]  ? bpf_lsm_bpf+0x5/0x10
[  753.633919][T16306]  ? security_bpf+0x7a/0xa0
[  753.639215][T16306]  __sys_bpf+0x520/0x6d0
[  753.643872][T16306]  ? bpf_link_show_fdinfo+0x340/0x340
[  753.649526][T16306]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  753.656238][T16306]  __x64_sys_bpf+0x78/0x90
[  753.661384][T16306]  do_syscall_64+0x4c/0xa0
[  753.667328][T16306]  ? clear_bhb_loop+0x60/0xb0
[  753.672217][T16306]  ? clear_bhb_loop+0x60/0xb0
[  753.677385][T16306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  753.683598][T16306] RIP: 0033:0x7f279078ebe9
[  753.688335][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.710243][T16306] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  753.719725][T16306] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  753.728023][T16306] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  753.736558][T16306] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  753.745385][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.754173][T16306] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  753.762966][T16306]  </TASK>
[  754.070826][T16306] Mem-Info:
[  754.080735][T16306] active_anon:5855 inactive_anon:0 isolated_anon:0
[  754.080735][T16306]  active_file:22062 inactive_file:40104 isolated_file:0
[  754.080735][T16306]  unevictable:768 dirty:158 writeback:0
[  754.080735][T16306]  slab_reclaimable:21226 slab_unreclaimable:97110
[  754.080735][T16306]  mapped:31366 shmem:1371 pagetables:693
[  754.080735][T16306]  sec_pagetables:0 bounce:0
[  754.080735][T16306]  kernel_misc_reclaimable:0
[  754.080735][T16306]  free:1319313 free_pcp:7485 free_cma:0
[  754.248682][T16306] Node 0 active_anon:23580kB inactive_anon:0kB active_file:88248kB inactive_file:160216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125444kB dirty:628kB writeback:0kB shmem:3948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:2740kB sec_pagetables:0kB all_unreclaimable? no
[  754.345930][T16306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  754.447060][T16306] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  754.601802][T16306] lowmem_reserve[]: 0 2527 2528 2528 2528
[  754.634496][T16306] Node 0 DMA32 free:1352624kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23180kB inactive_anon:0kB active_file:88248kB inactive_file:160216kB unevictable:1536kB writepending:628kB present:3129332kB managed:2593356kB mlocked:0kB bounce:0kB free_pcp:17940kB local_pcp:12916kB free_cma:0kB
[  754.691204][T16306] lowmem_reserve[]: 0 0 1 1 1
[  754.696286][T16306] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  754.791102][T16306] lowmem_reserve[]: 0 0 0 0 0
[  754.884435][T16306] Node 1 Normal free:3909144kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:12224kB local_pcp:2464kB free_cma:0kB
[  754.991198][T16306] lowmem_reserve[]: 0 0 0 0 0
[  754.997500][T16306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  755.016794][T16306] Node 0 DMA32: 1060*4kB (UME) 1272*8kB (M) 936*16kB (UM) 1099*32kB (UME) 669*64kB (UM) 611*128kB (UME) 179*256kB (UME) 90*512kB (UM) 50*1024kB (UME) 18*2048kB (UME) 241*4096kB (UM) = 1352688kB
[  755.068208][T16306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  755.107548][T16306] Node 1 Normal: 218*4kB (UME) 64*8kB (UME) 33*16kB (UE) 159*32kB (UME) 51*64kB (UME) 24*128kB (UME) 8*256kB (UME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3909144kB
[  755.136142][T16306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  755.157502][T16306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  755.232099][T16306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  755.291105][T16306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  755.332524][T16306] 63540 total pagecache pages
[  755.337867][T16306] 0 pages in swap cache
[  755.358169][T16306] Free swap  = 124996kB
[  755.365387][T16361] FAULT_INJECTION: forcing a failure.
[  755.365387][T16361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.397455][T16306] Total swap = 124996kB
[  755.421309][T16306] 2097051 pages RAM
[  755.426249][T16306] 0 pages HighMem/MovableOnly
[  755.475671][T16361] CPU: 0 PID: 16361 Comm: syz.0.3919 Not tainted 6.1.148-syzkaller #0
[  755.485654][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  755.497333][T16361] Call Trace:
[  755.500765][T16361]  <TASK>
[  755.503936][T16361]  dump_stack_lvl+0x168/0x22e
[  755.509208][T16361]  ? show_regs_print_info+0x12/0x12
[  755.515244][T16361]  ? load_image+0x3b0/0x3b0
[  755.520333][T16361]  ? __lock_acquire+0x7c50/0x7c50
[  755.525781][T16361]  should_fail_ex+0x399/0x4d0
[  755.531141][T16361]  _copy_from_user+0x2c/0x170
[  755.536132][T16361]  kstrtouint_from_user+0xbe/0x150
[  755.541814][T16361]  ? kstrtol_from_user+0x150/0x150
[  755.547782][T16361]  proc_fail_nth_write+0x85/0x1f0
[  755.554523][T16361]  ? proc_fail_nth_read+0x210/0x210
[  755.560000][T16361]  ? common_file_perm+0x171/0x1c0
[  755.567251][T16361]  ? proc_fail_nth_read+0x210/0x210
[  755.574255][T16361]  vfs_write+0x2c4/0x960
[  755.579239][T16361]  ? file_end_write+0x250/0x250
[  755.585593][T16361]  ? __fget_files+0x28/0x4d0
[  755.590414][T16361]  ? __fget_files+0x44a/0x4d0
[  755.596628][T16361]  ? __fdget_pos+0x2ae/0x360
[  755.601329][T16361]  ? ksys_write+0x71/0x240
[  755.606308][T16361]  ksys_write+0x143/0x240
[  755.611128][T16361]  ? __ia32_sys_read+0x80/0x80
[  755.616906][T16361]  ? lockdep_hardirqs_on+0x94/0x140
[  755.622445][T16361]  do_syscall_64+0x4c/0xa0
[  755.626990][T16361]  ? clear_bhb_loop+0x60/0xb0
[  755.631880][T16361]  ? clear_bhb_loop+0x60/0xb0
[  755.636914][T16361]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  755.643108][T16361] RIP: 0033:0x7f3f41f8d69f
[  755.647884][T16361] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  755.669017][T16361] RSP: 002b:00007f3f42dac030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  755.678606][T16361] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f41f8d69f
[  755.687145][T16361] RDX: 0000000000000001 RSI: 00007f3f42dac0a0 RDI: 0000000000000004
[  755.696973][T16361] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  755.705414][T16361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  755.713610][T16361] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  755.722244][T16361]  </TASK>
[  755.780316][T16306] 415111 pages reserved
[  755.816993][T16306] 0 pages cma reserved
[  756.368884][T16382] netlink: 'syz.4.3925': attribute type 27 has an invalid length.
[  757.491541][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  768.818986][T16432] netlink: 'syz.5.3938': attribute type 25 has an invalid length.
[  768.833745][T16432] netlink: 'syz.5.3938': attribute type 28 has an invalid length.
[  768.885846][T16432] netlink: 'syz.5.3938': attribute type 1 has an invalid length.
[  768.925193][T16432] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.3938'.
[  769.183563][T16454] netlink: 'syz.4.3943': attribute type 4 has an invalid length.
[  769.221101][T16454] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.3943'.
[  769.275197][T16454] netlink: 64791 bytes leftover after parsing attributes in process `syz.4.3943'.
[  769.549394][T16459] device pim6reg1 entered promiscuous mode
[  770.702022][T16480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3950'.
[  771.385653][T16502] netlink: 'syz.2.3954': attribute type 4 has an invalid length.
[  771.547693][T16502] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3954'.
[  771.721963][T16499] netlink: 'syz.5.3955': attribute type 27 has an invalid length.
[  771.824577][T16510] netlink: 64791 bytes leftover after parsing attributes in process `syz.0.3957'.
[  772.097771][T16499] bond0: (slave bond_slave_0): Releasing backup interface
[  772.217681][T16506] netlink: 'syz.0.3957': attribute type 4 has an invalid length.
[  772.230613][T16506] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.3957'.
[  774.804515][T16557] pimreg: tun_chr_ioctl cmd 1074812117
[  774.811572][T16558] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3970'.
[  774.891461][T16561] netlink: 'syz.1.3971': attribute type 27 has an invalid length.
[  775.237177][T16576] netlink: 'syz.2.3972': attribute type 4 has an invalid length.
[  775.261054][T16576] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.3972'.
[  775.311878][T16576] netlink: 64791 bytes leftover after parsing attributes in process `syz.2.3972'.
[  775.998209][T16602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3988'.
[  776.924611][T16609] device pim6reg1 entered promiscuous mode
[  778.484735][T16639] netlink: 64791 bytes leftover after parsing attributes in process `syz.5.3989'.
[  779.129978][T16634] netlink: 'syz.5.3989': attribute type 4 has an invalid length.
[  779.156668][T16634] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.3989'.
[  779.228278][T16638] pimreg: tun_chr_ioctl cmd 1074812117
[  779.397699][T16644] netlink: 'syz.1.3987': attribute type 4 has an invalid length.
[  779.415430][T16644] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3987'.
[  779.843233][T16666] netlink: 'syz.0.4007': attribute type 4 has an invalid length.
[  779.879758][T16666] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.4007'.
[  779.946912][T16671] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3997'.
[  781.641100][T16716] FAULT_INJECTION: forcing a failure.
[  781.641100][T16716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  781.651144][T16714] netlink: 'syz.0.4010': attribute type 10 has an invalid length.
[  781.675207][T16716] CPU: 0 PID: 16716 Comm: syz.5.4008 Not tainted 6.1.148-syzkaller #0
[  781.683620][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  781.694249][T16716] Call Trace:
[  781.697845][T16716]  <TASK>
[  781.700818][T16716]  dump_stack_lvl+0x168/0x22e
[  781.705981][T16716]  ? show_regs_print_info+0x12/0x12
[  781.706722][T16714] netlink: 'syz.0.4010': attribute type 19 has an invalid length.
[  781.711465][T16716]  ? load_image+0x3b0/0x3b0
[  781.711503][T16716]  ? __lock_acquire+0x7c50/0x7c50
[  781.711534][T16716]  should_fail_ex+0x399/0x4d0
[  781.734874][T16716]  _copy_from_user+0x2c/0x170
[  781.739576][T16716]  __sys_bpf+0x265/0x6d0
[  781.744256][T16716]  ? bpf_link_show_fdinfo+0x340/0x340
[  781.750010][T16716]  ? lock_chain_count+0x20/0x20
[  781.755059][T16716]  __x64_sys_bpf+0x78/0x90
[  781.759582][T16716]  do_syscall_64+0x4c/0xa0
[  781.764321][T16716]  ? clear_bhb_loop+0x60/0xb0
[  781.769206][T16716]  ? clear_bhb_loop+0x60/0xb0
[  781.774269][T16716]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  781.780633][T16716] RIP: 0033:0x7fbcbd98ebe9
[  781.785504][T16716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  781.807645][T16716] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  781.817136][T16716] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  781.825524][T16716] RDX: 0000000000000050 RSI: 0000200000001700 RDI: 000000000000000a
[  781.833641][T16716] RBP: 00007fbcbe8b9090 R08: 0000000000000000 R09: 0000000000000000
[  781.841917][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  781.850185][T16716] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  781.858508][T16716]  </TASK>
[  781.885263][T16714] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4010'.
[  782.519411][T16736] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.4013'.
[  782.720204][T16738] netlink: 'syz.2.4015': attribute type 21 has an invalid length.
[  782.749241][T16738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4015'.
[  782.798801][T16738] netlink: 'syz.2.4015': attribute type 1 has an invalid length.
[  782.922569][T16738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4015'.
[  783.025881][T16746] netlink: 67792 bytes leftover after parsing attributes in process `syz.2.4015'.
[  784.121654][T16783] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.4027'.
[  784.173887][T16778] can: request_module (can-proto-0) failed.
[  785.528405][T16813] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4035'.
[  785.610075][T16813] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  786.063297][T16825] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4040'.
[  786.568897][T16841] FAULT_INJECTION: forcing a failure.
[  786.568897][T16841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.629914][T16841] CPU: 0 PID: 16841 Comm: syz.5.4044 Not tainted 6.1.148-syzkaller #0
[  786.638718][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  786.651093][T16841] Call Trace:
[  786.655104][T16841]  <TASK>
[  786.658531][T16841]  dump_stack_lvl+0x168/0x22e
[  786.663470][T16841]  ? show_regs_print_info+0x12/0x12
[  786.669629][T16841]  ? load_image+0x3b0/0x3b0
[  786.674926][T16841]  ? __lock_acquire+0x7c50/0x7c50
[  786.680908][T16841]  should_fail_ex+0x399/0x4d0
[  786.686017][T16841]  _copy_from_user+0x2c/0x170
[  786.690933][T16841]  iovec_from_user+0x143/0x360
[  786.696144][T16841]  __import_iovec+0x6d/0x500
[  786.699357][ T4276] Bluetooth: hci4: ISO packet for unknown connection handle 2366
[  786.701055][T16841]  ? __might_fault+0xa6/0x120
[  786.701102][T16841]  import_iovec+0x6f/0xa0
[  786.719448][T16841]  ___sys_sendmsg+0x1e4/0x290
[  786.724384][T16841]  ? __sys_sendmsg+0x270/0x270
[  786.729760][T16841]  ? __lock_acquire+0x7c50/0x7c50
[  786.735145][T16841]  ? __fdget+0x17c/0x200
[  786.739532][T16841]  __se_sys_sendmsg+0x19e/0x270
[  786.744443][T16841]  ? __x64_sys_sendmsg+0x80/0x80
[  786.749561][T16841]  ? lockdep_hardirqs_on+0x94/0x140
[  786.755162][T16841]  do_syscall_64+0x4c/0xa0
[  786.759686][T16841]  ? clear_bhb_loop+0x60/0xb0
[  786.764376][T16841]  ? clear_bhb_loop+0x60/0xb0
[  786.769082][T16841]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.775367][T16841] RIP: 0033:0x7fbcbd98ebe9
[  786.780475][T16841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  786.802559][T16841] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  786.812047][T16841] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  786.821380][T16841] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  786.829984][T16841] RBP: 00007fbcbe8b9090 R08: 0000000000000000 R09: 0000000000000000
[  786.838938][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.848084][T16841] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  786.856748][T16841]  </TASK>
[  786.976494][T16854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4045'.
[  787.038391][T16859] FAULT_INJECTION: forcing a failure.
[  787.038391][T16859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  787.053283][T16859] CPU: 0 PID: 16859 Comm: syz.1.4048 Not tainted 6.1.148-syzkaller #0
[  787.062153][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  787.073134][T16859] Call Trace:
[  787.076531][T16859]  <TASK>
[  787.079581][T16859]  dump_stack_lvl+0x168/0x22e
[  787.084688][T16859]  ? show_regs_print_info+0x12/0x12
[  787.090369][T16859]  ? load_image+0x3b0/0x3b0
[  787.095088][T16859]  ? __lock_acquire+0x7c50/0x7c50
[  787.100417][T16859]  ? snprintf+0xd7/0x120
[  787.104900][T16859]  should_fail_ex+0x399/0x4d0
[  787.110649][T16859]  _copy_to_user+0x2c/0x130
[  787.115754][T16859]  simple_read_from_buffer+0xe3/0x150
[  787.121827][T16859]  proc_fail_nth_read+0x19a/0x210
[  787.127962][T16859]  ? proc_fault_inject_write+0x2f0/0x2f0
[  787.134551][T16859]  ? fsnotify_perm+0x248/0x550
[  787.139794][T16859]  ? proc_fault_inject_write+0x2f0/0x2f0
[  787.146493][T16859]  vfs_read+0x2c0/0x920
[  787.151121][T16859]  ? kernel_read+0x1e0/0x1e0
[  787.155954][T16859]  ? __fget_files+0x28/0x4d0
[  787.161532][T16859]  ? __fget_files+0x44a/0x4d0
[  787.166439][T16859]  ? __fdget_pos+0x2ae/0x360
[  787.171414][T16859]  ? ksys_read+0x71/0x240
[  787.176201][T16859]  ksys_read+0x143/0x240
[  787.180813][T16859]  ? vfs_write+0x960/0x960
[  787.185641][T16859]  ? lockdep_hardirqs_on+0x94/0x140
[  787.191314][T16859]  do_syscall_64+0x4c/0xa0
[  787.196346][T16859]  ? clear_bhb_loop+0x60/0xb0
[  787.201954][T16859]  ? clear_bhb_loop+0x60/0xb0
[  787.207189][T16859]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.215775][T16859] RIP: 0033:0x7fd628b8d5fc
[  787.220756][T16859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  787.242645][T16859] RSP: 002b:00007fd62991d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  787.253424][T16859] RAX: ffffffffffffffda RBX: 00007fd628db6090 RCX: 00007fd628b8d5fc
[  787.261871][T16859] RDX: 000000000000000f RSI: 00007fd62991d0a0 RDI: 0000000000000005
[  787.270592][T16859] RBP: 00007fd62991d090 R08: 0000000000000000 R09: 0000000000000000
[  787.279864][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  787.288143][T16859] R13: 00007fd628db6128 R14: 00007fd628db6090 R15: 00007ffc55f51248
[  787.296548][T16859]  </TASK>
[  788.093269][T16881] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4053'.
[  788.162131][T16885] netlink: 'syz.0.4053': attribute type 10 has an invalid length.
[  788.572571][T16899] FAULT_INJECTION: forcing a failure.
[  788.572571][T16899] name failslab, interval 1, probability 0, space 0, times 0
[  788.610246][ T4276] Bluetooth: hci2: ISO packet for unknown connection handle 7
[  788.640484][T16899] CPU: 1 PID: 16899 Comm: syz.1.4057 Not tainted 6.1.148-syzkaller #0
[  788.649372][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  788.659813][T16899] Call Trace:
[  788.663308][T16899]  <TASK>
[  788.666542][T16899]  dump_stack_lvl+0x168/0x22e
[  788.671361][T16899]  ? show_regs_print_info+0x12/0x12
[  788.676786][T16899]  ? load_image+0x3b0/0x3b0
[  788.681562][T16899]  ? __might_sleep+0xd0/0xd0
[  788.686554][T16899]  ? __lock_acquire+0x7c50/0x7c50
[  788.691895][T16899]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  788.698630][T16899]  should_fail_ex+0x399/0x4d0
[  788.703542][T16899]  should_failslab+0x5/0x20
[  788.708268][T16899]  slab_pre_alloc_hook+0x59/0x310
[  788.713349][T16899]  ? lockdep_hardirqs_on+0x94/0x140
[  788.718891][T16899]  ? bpf_prog_test_run_skb+0x22b/0x11b0
[  788.724665][T16899]  __kmem_cache_alloc_node+0x4f/0x260
[  788.730362][T16899]  ? bpf_prog_test_run_skb+0x22b/0x11b0
[  788.736148][T16899]  __kmalloc+0xa0/0x240
[  788.740535][T16899]  bpf_prog_test_run_skb+0x22b/0x11b0
[  788.746311][T16899]  ? __fget_files+0x28/0x4d0
[  788.751045][T16899]  ? __fget_files+0x44a/0x4d0
[  788.755878][T16899]  ? cpu_online+0xa0/0xa0
[  788.760434][T16899]  bpf_prog_test_run+0x31e/0x390
[  788.765775][T16899]  __sys_bpf+0x593/0x6d0
[  788.770262][T16899]  ? bpf_link_show_fdinfo+0x340/0x340
[  788.775893][T16899]  ? lock_chain_count+0x20/0x20
[  788.781093][T16899]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  788.787510][T16899]  __x64_sys_bpf+0x78/0x90
[  788.792069][T16899]  do_syscall_64+0x4c/0xa0
[  788.796712][T16899]  ? clear_bhb_loop+0x60/0xb0
[  788.801709][T16899]  ? clear_bhb_loop+0x60/0xb0
[  788.806539][T16899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  788.812569][T16899] RIP: 0033:0x7fd628b8ebe9
[  788.817209][T16899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  788.838519][T16899] RSP: 002b:00007fd62991d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  788.847340][T16899] RAX: ffffffffffffffda RBX: 00007fd628db6090 RCX: 00007fd628b8ebe9
[  788.855618][T16899] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  788.863633][T16899] RBP: 00007fd62991d090 R08: 0000000000000000 R09: 0000000000000000
[  788.872423][T16899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  788.880811][T16899] R13: 00007fd628db6128 R14: 00007fd628db6090 R15: 00007ffc55f51248
[  788.890174][T16899]  </TASK>
[  788.906938][ T4351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  789.486530][T16916] device syzkaller0 entered promiscuous mode
[  789.945843][ T4352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  790.187315][T16919] netlink: 'syz.2.4063': attribute type 41 has an invalid length.
[  790.208653][T16919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4063'.
[  790.250735][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  790.650862][T16949] FAULT_INJECTION: forcing a failure.
[  790.650862][T16949] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  790.820099][T16949] CPU: 1 PID: 16949 Comm: syz.4.4068 Not tainted 6.1.148-syzkaller #0
[  790.828608][T16949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  790.839584][T16949] Call Trace:
[  790.843086][T16949]  <TASK>
[  790.846049][T16949]  dump_stack_lvl+0x168/0x22e
[  790.850870][T16949]  ? show_regs_print_info+0x12/0x12
[  790.856436][T16949]  ? load_image+0x3b0/0x3b0
[  790.861491][T16949]  ? __lock_acquire+0x7c50/0x7c50
[  790.867163][T16949]  ? snprintf+0xd7/0x120
[  790.871613][T16949]  should_fail_ex+0x399/0x4d0
[  790.876496][T16949]  _copy_to_user+0x2c/0x130
[  790.881125][T16949]  simple_read_from_buffer+0xe3/0x150
[  790.887061][T16949]  proc_fail_nth_read+0x19a/0x210
[  790.893657][T16949]  ? proc_fault_inject_write+0x2f0/0x2f0
[  790.900879][T16949]  ? fsnotify_perm+0x248/0x550
[  790.906493][T16949]  ? proc_fault_inject_write+0x2f0/0x2f0
[  790.912702][T16949]  vfs_read+0x2c0/0x920
[  790.916978][T16949]  ? kernel_read+0x1e0/0x1e0
[  790.922217][T16949]  ? __fget_files+0x28/0x4d0
[  790.926847][T16949]  ? __fget_files+0x44a/0x4d0
[  790.931896][T16949]  ? __fdget_pos+0x2ae/0x360
[  790.938035][T16949]  ? ksys_read+0x71/0x240
[  790.942922][T16949]  ksys_read+0x143/0x240
[  790.948292][T16949]  ? vfs_write+0x960/0x960
[  790.953202][T16949]  ? lockdep_hardirqs_on+0x94/0x140
[  790.958459][T16949]  do_syscall_64+0x4c/0xa0
[  790.964978][T16949]  ? clear_bhb_loop+0x60/0xb0
[  790.970209][T16949]  ? clear_bhb_loop+0x60/0xb0
[  790.975862][T16949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  790.982231][T16949] RIP: 0033:0x7f612858d5fc
[  790.986930][T16949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  791.007793][T16949] RSP: 002b:00007f6129489030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  791.016668][T16949] RAX: ffffffffffffffda RBX: 00007f61287b6090 RCX: 00007f612858d5fc
[  791.024929][T16949] RDX: 000000000000000f RSI: 00007f61294890a0 RDI: 0000000000000006
[  791.033449][T16949] RBP: 00007f6129489090 R08: 0000000000000000 R09: 0000000000000000
[  791.041725][T16949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.050674][T16949] R13: 00007f61287b6128 R14: 00007f61287b6090 R15: 00007fff08153758
[  791.058972][T16949]  </TASK>
[  791.676959][T16977] FAULT_INJECTION: forcing a failure.
[  791.676959][T16977] name failslab, interval 1, probability 0, space 0, times 0
[  791.730391][T16977] CPU: 0 PID: 16977 Comm: syz.5.4079 Not tainted 6.1.148-syzkaller #0
[  791.738958][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  791.749170][T16977] Call Trace:
[  791.752549][T16977]  <TASK>
[  791.755586][T16977]  dump_stack_lvl+0x168/0x22e
[  791.760562][T16977]  ? show_regs_print_info+0x12/0x12
[  791.766531][T16977]  ? load_image+0x3b0/0x3b0
[  791.771147][T16977]  ? __might_sleep+0xd0/0xd0
[  791.775933][T16977]  ? __lock_acquire+0x7c50/0x7c50
[  791.781588][T16977]  should_fail_ex+0x399/0x4d0
[  791.786636][T16977]  should_failslab+0x5/0x20
[  791.791416][T16977]  slab_pre_alloc_hook+0x59/0x310
[  791.796847][T16977]  ? prepend_path+0xa6b/0xc20
[  791.801659][T16977]  ? tomoyo_encode+0x27e/0x540
[  791.806723][T16977]  __kmem_cache_alloc_node+0x4f/0x260
[  791.812294][T16977]  ? tomoyo_encode+0x27e/0x540
[  791.817621][T16977]  __kmalloc+0xa0/0x240
[  791.821852][T16977]  tomoyo_encode+0x27e/0x540
[  791.826513][T16977]  tomoyo_realpath_from_path+0x58e/0x5d0
[  791.832757][T16977]  tomoyo_path_number_perm+0x1e3/0x600
[  791.838764][T16977]  ? tomoyo_path_number_perm+0x1b6/0x600
[  791.844709][T16977]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  791.850217][T16977]  ? common_file_perm+0x171/0x1c0
[  791.855647][T16977]  ? __fget_files+0x28/0x4d0
[  791.860984][T16977]  security_file_ioctl+0x6c/0xa0
[  791.866150][T16977]  __se_sys_ioctl+0x48/0x170
[  791.871595][T16977]  do_syscall_64+0x4c/0xa0
[  791.876520][T16977]  ? clear_bhb_loop+0x60/0xb0
[  791.882085][T16977]  ? clear_bhb_loop+0x60/0xb0
[  791.887260][T16977]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.893796][T16977] RIP: 0033:0x7fbcbd98ebe9
[  791.899355][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  791.920811][T16977] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  791.929861][T16977] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  791.938394][T16977] RDX: 0000000000000000 RSI: 0000000040047459 RDI: 0000000000000004
[  791.947113][T16977] RBP: 00007fbcbe8b9090 R08: 0000000000000000 R09: 0000000000000000
[  791.955279][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.963803][T16977] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  791.972156][T16977]  </TASK>
[  792.201460][T16977] ERROR: Out of memory at tomoyo_realpath_from_path.
[  792.277058][T16992] FAULT_INJECTION: forcing a failure.
[  792.277058][T16992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  792.293092][T16992] CPU: 1 PID: 16992 Comm: syz.2.4084 Not tainted 6.1.148-syzkaller #0
[  792.302704][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  792.313193][T16992] Call Trace:
[  792.317022][T16992]  <TASK>
[  792.320248][T16992]  dump_stack_lvl+0x168/0x22e
[  792.325236][T16992]  ? show_regs_print_info+0x12/0x12
[  792.330833][T16992]  ? load_image+0x3b0/0x3b0
[  792.335986][T16992]  ? __lock_acquire+0x7c50/0x7c50
[  792.341152][T16992]  ? snprintf+0xd7/0x120
[  792.345700][T16992]  should_fail_ex+0x399/0x4d0
[  792.350820][T16992]  _copy_to_user+0x2c/0x130
[  792.355893][T16992]  simple_read_from_buffer+0xe3/0x150
[  792.361550][T16992]  proc_fail_nth_read+0x19a/0x210
[  792.366782][T16992]  ? proc_fault_inject_write+0x2f0/0x2f0
[  792.372869][T16992]  ? fsnotify_perm+0x248/0x550
[  792.378098][T16992]  ? proc_fault_inject_write+0x2f0/0x2f0
[  792.384026][T16992]  vfs_read+0x2c0/0x920
[  792.388540][T16992]  ? kernel_read+0x1e0/0x1e0
[  792.393415][T16992]  ? __fget_files+0x28/0x4d0
[  792.398473][T16992]  ? __fget_files+0x44a/0x4d0
[  792.403691][T16992]  ? __fdget_pos+0x2ae/0x360
[  792.408818][T16992]  ? ksys_read+0x71/0x240
[  792.413363][T16992]  ksys_read+0x143/0x240
[  792.418014][T16992]  ? vfs_write+0x960/0x960
[  792.422983][T16992]  ? lockdep_hardirqs_on+0x94/0x140
[  792.428718][T16992]  do_syscall_64+0x4c/0xa0
[  792.433426][T16992]  ? clear_bhb_loop+0x60/0xb0
[  792.438671][T16992]  ? clear_bhb_loop+0x60/0xb0
[  792.443655][T16992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  792.451058][T16992] RIP: 0033:0x7f279078d5fc
[  792.455757][T16992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  792.477490][T16992] RSP: 002b:00007f279164a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  792.486809][T16992] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078d5fc
[  792.495142][T16992] RDX: 000000000000000f RSI: 00007f279164a0a0 RDI: 0000000000000004
[  792.503398][T16992] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  792.512278][T16992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  792.520372][T16992] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  792.528908][T16992]  </TASK>
[  793.459486][T17022] FAULT_INJECTION: forcing a failure.
[  793.459486][T17022] name failslab, interval 1, probability 0, space 0, times 0
[  793.501157][T17022] CPU: 1 PID: 17022 Comm: syz.0.4093 Not tainted 6.1.148-syzkaller #0
[  793.510125][T17022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  793.521018][T17022] Call Trace:
[  793.525037][T17022]  <TASK>
[  793.528316][T17022]  dump_stack_lvl+0x168/0x22e
[  793.533297][T17022]  ? trace_event_raw_event_lock+0x230/0x230
[  793.539943][T17022]  ? show_regs_print_info+0x12/0x12
[  793.545629][T17022]  ? load_image+0x3b0/0x3b0
[  793.551052][T17022]  should_fail_ex+0x399/0x4d0
[  793.556083][T17022]  should_failslab+0x5/0x20
[  793.561985][T17022]  slab_pre_alloc_hook+0x59/0x310
[  793.567863][T17022]  kmem_cache_alloc+0x56/0x2f0
[  793.573803][T17022]  ? dst_alloc+0x101/0x160
[  793.578645][T17022]  dst_alloc+0x101/0x160
[  793.583298][T17022]  ip_route_output_key_hash_rcu+0x1054/0x23a0
[  793.590438][T17022]  ? trace_event_raw_event_lock+0x230/0x230
[  793.596975][T17022]  ? ip_route_output_key_hash+0x12b/0x340
[  793.603262][T17022]  ip_route_output_key_hash+0x207/0x340
[  793.609888][T17022]  ? ip_route_input_rcu+0x30a0/0x30a0
[  793.615664][T17022]  ? __lock_acquire+0x7c50/0x7c50
[  793.621693][T17022]  ? __lock_acquire+0x7c50/0x7c50
[  793.627176][T17022]  ? trace_event_raw_event_lock+0x230/0x230
[  793.633266][T17022]  ip_route_output_flow+0x26/0x150
[  793.638674][T17022]  ? security_sk_classify_flow+0x77/0x90
[  793.644696][T17022]  udp_sendmsg+0x15fb/0x2390
[  793.649749][T17022]  ? perf_trace_lock+0x2ec/0x370
[  793.655061][T17022]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  793.660369][T17022]  ? udp_cmsg_send+0x350/0x350
[  793.665864][T17022]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  793.672370][T17022]  ? lock_chain_count+0x20/0x20
[  793.678292][T17022]  ? __local_bh_enable_ip+0x12a/0x1b0
[  793.684733][T17022]  ? _local_bh_enable+0xa0/0xa0
[  793.689890][T17022]  ? do_raw_spin_unlock+0x11d/0x230
[  793.695514][T17022]  ? inet_sendmsg+0x147/0x2f0
[  793.700876][T17022]  ? inet_sendmsg+0x147/0x2f0
[  793.706443][T17022]  ? inet_send_prepare+0x260/0x260
[  793.711925][T17022]  ____sys_sendmsg+0x59b/0x970
[  793.716881][T17022]  ? __lock_acquire+0x7c50/0x7c50
[  793.722109][T17022]  ? __sys_sendmsg_sock+0x30/0x30
[  793.727253][T17022]  ? __import_iovec+0x315/0x500
[  793.732229][T17022]  ? import_iovec+0x6f/0xa0
[  793.736941][T17022]  ___sys_sendmsg+0x21c/0x290
[  793.742159][T17022]  ? __sys_sendmsg+0x270/0x270
[  793.747132][T17022]  ? __lock_acquire+0x7c50/0x7c50
[  793.752543][T17022]  ? __fdget+0x17c/0x200
[  793.757072][T17022]  __se_sys_sendmsg+0x19e/0x270
[  793.762023][T17022]  ? __x64_sys_sendmsg+0x80/0x80
[  793.767556][T17022]  ? lockdep_hardirqs_on+0x94/0x140
[  793.773511][T17022]  do_syscall_64+0x4c/0xa0
[  793.778556][T17022]  ? clear_bhb_loop+0x60/0xb0
[  793.783956][T17022]  ? clear_bhb_loop+0x60/0xb0
[  793.789109][T17022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  793.796078][T17022] RIP: 0033:0x7f3f41f8ebe9
[  793.800856][T17022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  793.821435][T17022] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  793.830140][T17022] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  793.838136][T17022] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  793.846482][T17022] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  793.855121][T17022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.863903][T17022] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  793.872549][T17022]  </TASK>
[  793.962828][T17027] netlink: 'syz.2.4094': attribute type 21 has an invalid length.
[  793.981725][T17027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  793.989845][T17027] IPv6: NLM_F_CREATE should be set when creating new route
[  793.998034][T17027] IPv6: NLM_F_CREATE should be set when creating new route
[  794.005873][T17027] IPv6: NLM_F_CREATE should be set when creating new route
[  794.187013][T17036] netlink: 'syz.5.4097': attribute type 10 has an invalid length.
[  794.219048][T17036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  794.255159][T17036] batman_adv: batadv0: Removing interface: batadv_slave_0
[  794.514205][T17036] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  794.591876][T17049] netlink: 'syz.1.4098': attribute type 4 has an invalid length.
[  794.606080][T17049] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.4098'.
[  795.244230][T17072] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4103'.
[  795.837145][T17086] netlink: 'syz.5.4107': attribute type 2 has an invalid length.
[  795.899104][T17087] netlink: 'syz.4.4108': attribute type 1 has an invalid length.
[  795.959748][T17087] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4108'.
[  796.027216][T17086] device 0 entered promiscuous mode
[  796.242039][T17093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  796.437169][T17101] netlink: 'syz.1.4112': attribute type 4 has an invalid length.
[  796.542870][T17101] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.4112'.
[  796.649225][T17105] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4113'.
[  797.248797][T17126] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4116'.
[  797.738747][T17136] FAULT_INJECTION: forcing a failure.
[  797.738747][T17136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.935173][T17136] CPU: 0 PID: 17136 Comm: syz.4.4120 Not tainted 6.1.148-syzkaller #0
[  797.943514][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  797.953938][T17136] Call Trace:
[  797.957225][T17136]  <TASK>
[  797.960166][T17136]  dump_stack_lvl+0x168/0x22e
[  797.965067][T17136]  ? show_regs_print_info+0x12/0x12
[  797.970742][T17136]  ? load_image+0x3b0/0x3b0
[  797.975470][T17136]  ? __lock_acquire+0x7c50/0x7c50
[  797.980768][T17136]  ? snprintf+0xd7/0x120
[  797.985197][T17136]  should_fail_ex+0x399/0x4d0
[  797.989995][T17136]  _copy_to_user+0x2c/0x130
[  797.994876][T17136]  simple_read_from_buffer+0xe3/0x150
[  798.000674][T17136]  proc_fail_nth_read+0x19a/0x210
[  798.005906][T17136]  ? proc_fault_inject_write+0x2f0/0x2f0
[  798.011808][T17136]  ? fsnotify_perm+0x248/0x550
[  798.017023][T17136]  ? proc_fault_inject_write+0x2f0/0x2f0
[  798.023018][T17136]  vfs_read+0x2c0/0x920
[  798.027417][T17136]  ? kernel_read+0x1e0/0x1e0
[  798.032212][T17136]  ? __fget_files+0x28/0x4d0
[  798.036997][T17136]  ? __fget_files+0x44a/0x4d0
[  798.042109][T17136]  ? __fdget_pos+0x2ae/0x360
[  798.046980][T17136]  ? ksys_read+0x71/0x240
[  798.051434][T17136]  ksys_read+0x143/0x240
[  798.055960][T17136]  ? vfs_write+0x960/0x960
[  798.060511][T17136]  ? lockdep_hardirqs_on+0x94/0x140
[  798.065815][T17136]  do_syscall_64+0x4c/0xa0
[  798.070337][T17136]  ? clear_bhb_loop+0x60/0xb0
[  798.075206][T17136]  ? clear_bhb_loop+0x60/0xb0
[  798.080238][T17136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.086442][T17136] RIP: 0033:0x7f612858d5fc
[  798.091069][T17136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  798.111329][T17136] RSP: 002b:00007f6129489030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  798.120121][T17136] RAX: ffffffffffffffda RBX: 00007f61287b6090 RCX: 00007f612858d5fc
[  798.128104][T17136] RDX: 000000000000000f RSI: 00007f61294890a0 RDI: 0000000000000007
[  798.136561][T17136] RBP: 00007f6129489090 R08: 0000000000000000 R09: 0000000000000000
[  798.144746][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.153406][T17136] R13: 00007f61287b6128 R14: 00007f61287b6090 R15: 00007fff08153758
[  798.161955][T17136]  </TASK>
[  798.913608][T17150] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4122'.
[  799.873253][T17165] netlink: 'syz.5.4126': attribute type 4 has an invalid length.
[  799.893591][T17165] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.4126'.
[  801.345143][T17201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4140'.
[  801.749718][T17212] netlink: 'syz.0.4142': attribute type 21 has an invalid length.
[  801.866552][T17212] netlink: 14413 bytes leftover after parsing attributes in process `syz.0.4142'.
[  802.276419][T17225] FAULT_INJECTION: forcing a failure.
[  802.276419][T17225] name failslab, interval 1, probability 0, space 0, times 0
[  802.357679][T17225] CPU: 1 PID: 17225 Comm: syz.2.4145 Not tainted 6.1.148-syzkaller #0
[  802.366629][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  802.379694][T17225] Call Trace:
[  802.384191][T17225]  <TASK>
[  802.387252][T17225]  dump_stack_lvl+0x168/0x22e
[  802.392895][T17225]  ? show_regs_print_info+0x12/0x12
[  802.398946][T17225]  ? load_image+0x3b0/0x3b0
[  802.403948][T17225]  ? __might_sleep+0xd0/0xd0
[  802.409476][T17225]  ? __lock_acquire+0x7c50/0x7c50
[  802.415191][T17225]  should_fail_ex+0x399/0x4d0
[  802.421502][T17225]  should_failslab+0x5/0x20
[  802.426337][T17225]  slab_pre_alloc_hook+0x59/0x310
[  802.431782][T17225]  ? do_syscall_64+0x4c/0xa0
[  802.437023][T17225]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.445325][T17225]  kmem_cache_alloc_node+0x5a/0x320
[  802.450711][T17225]  ? __alloc_skb+0xfc/0x7e0
[  802.455802][T17225]  __alloc_skb+0xfc/0x7e0
[  802.460728][T17225]  netlink_dump+0x1d1/0xcd0
[  802.465415][T17225]  ? apparmor_capable+0x12c/0x190
[  802.470734][T17225]  ? bpf_lsm_capable+0x5/0x10
[  802.475432][T17225]  ? netlink_lookup+0x200/0x200
[  802.480652][T17225]  ? __inet_diag_dump_start+0x805/0x970
[  802.486568][T17225]  __netlink_dump_start+0x537/0x6f0
[  802.492277][T17225]  inet_diag_rcv_msg_compat+0x1e9/0x3c0
[  802.498398][T17225]  ? __inet_diag_dump+0x380/0x380
[  802.504005][T17225]  ? sock_diag_rcv_msg+0x142/0x5f0
[  802.509410][T17225]  ? inet_diag_rcv_msg_compat+0x3c0/0x3c0
[  802.515672][T17225]  ? inet_diag_dump_start_compat+0x20/0x20
[  802.521832][T17225]  ? inet_diag_dump+0x50/0x50
[  802.526841][T17225]  ? __inet_diag_dump+0x380/0x380
[  802.532504][T17225]  sock_diag_rcv_msg+0x3cc/0x5f0
[  802.538434][T17225]  ? __mutex_lock+0x19e/0xaf0
[  802.543878][T17225]  netlink_rcv_skb+0x1de/0x420
[  802.549349][T17225]  ? sock_diag_bind+0xa0/0xa0
[  802.554385][T17225]  ? netlink_ack+0x1100/0x1100
[  802.559622][T17225]  ? netlink_deliver_tap+0x2e/0x1b0
[  802.565359][T17225]  sock_diag_rcv+0x26/0x40
[  802.569896][T17225]  netlink_unicast+0x74d/0x8d0
[  802.575381][T17225]  netlink_sendmsg+0x89e/0xbc0
[  802.580607][T17225]  ? netlink_getsockopt+0x540/0x540
[  802.586179][T17225]  ? aa_sock_msg_perm+0x94/0x150
[  802.591404][T17225]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  802.596792][T17225]  ? security_socket_sendmsg+0x7c/0xa0
[  802.602610][T17225]  ? netlink_getsockopt+0x540/0x540
[  802.608272][T17225]  ____sys_sendmsg+0x59b/0x970
[  802.613217][T17225]  ? __sys_sendmsg_sock+0x30/0x30
[  802.618994][T17225]  ? __import_iovec+0x315/0x500
[  802.624442][T17225]  ? import_iovec+0x6f/0xa0
[  802.629159][T17225]  ___sys_sendmsg+0x21c/0x290
[  802.634138][T17225]  ? __sys_sendmsg+0x270/0x270
[  802.639272][T17225]  ? __lock_acquire+0x7c50/0x7c50
[  802.644842][T17225]  ? __fdget+0x17c/0x200
[  802.650034][T17225]  __se_sys_sendmsg+0x19e/0x270
[  802.655754][T17225]  ? __x64_sys_sendmsg+0x80/0x80
[  802.660820][T17225]  ? lockdep_hardirqs_on+0x94/0x140
[  802.666971][T17225]  do_syscall_64+0x4c/0xa0
[  802.671797][T17225]  ? clear_bhb_loop+0x60/0xb0
[  802.676981][T17225]  ? clear_bhb_loop+0x60/0xb0
[  802.682139][T17225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.688292][T17225] RIP: 0033:0x7f279078ebe9
[  802.692827][T17225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  802.714127][T17225] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  802.723042][T17225] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  802.731563][T17225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  802.740509][T17225] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  802.749338][T17225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  802.758596][T17225] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  802.767225][T17225]  </TASK>
[  802.801200][T17229] syz.5.4147 (17229) used obsolete PPPIOCDETACH ioctl
[  802.913242][T17238] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4149'.
[  802.940860][T17238] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  803.489614][T17253] netlink: 'syz.5.4152': attribute type 1 has an invalid length.
[  803.559130][T17258] netlink: 'syz.1.4155': attribute type 21 has an invalid length.
[  803.561109][T17253] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.4152'.
[  803.591261][T17258] netlink: 14413 bytes leftover after parsing attributes in process `syz.1.4155'.
[  803.959744][T17268] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4157'.
[  803.979379][T17269] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4158'.
[  804.000522][T17269] device bond_slave_1 entered promiscuous mode
[  804.024907][T17268] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  804.054435][T17268] CPU: 0 PID: 17268 Comm: syz.2.4157 Not tainted 6.1.148-syzkaller #0
[  804.063326][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  804.074072][T17268] Call Trace:
[  804.077541][T17268]  <TASK>
[  804.080709][T17268]  dump_stack_lvl+0x168/0x22e
[  804.085656][T17268]  ? show_regs_print_info+0x12/0x12
[  804.091371][T17268]  ? load_image+0x3b0/0x3b0
[  804.096106][T17268]  sysfs_warn_dup+0x8a/0xa0
[  804.100913][T17268]  sysfs_do_create_link_sd+0xc0/0x110
[  804.106806][T17268]  device_add+0x7ed/0xfb0
[  804.111439][T17268]  wiphy_register+0x1e68/0x2bd0
[  804.116718][T17268]  ? cfg80211_event_work+0x40/0x40
[  804.121906][T17268]  ? minstrel_ht_alloc+0x894/0xa20
[  804.127535][T17268]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  804.134087][T17268]  ieee80211_register_hw+0x2c29/0x38c0
[  804.139955][T17268]  ? ieee80211_register_hw+0xe91/0x38c0
[  804.145674][T17268]  ? ieee80211_register_hw+0xe91/0x38c0
[  804.151513][T17268]  ? ieee80211_tasklet_handler+0x20/0x20
[  804.157445][T17268]  ? memset+0x1e/0x40
[  804.161701][T17268]  ? __hrtimer_init+0x186/0x270
[  804.166917][T17268]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  804.172996][T17268]  hwsim_new_radio_nl+0xafa/0xce0
[  804.178696][T17268]  genl_family_rcv_msg_doit+0x22e/0x320
[  804.185037][T17268]  ? end_current_label_crit_section+0x170/0x170
[  804.191385][T17268]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  804.197831][T17268]  ? bpf_lsm_capable+0x5/0x10
[  804.202771][T17268]  ? security_capable+0x85/0xb0
[  804.208095][T17268]  genl_rcv_msg+0x5f2/0x780
[  804.212809][T17268]  ? genl_bind+0x350/0x350
[  804.217569][T17268]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  804.224404][T17268]  netlink_rcv_skb+0x1de/0x420
[  804.229260][T17268]  ? genl_bind+0x350/0x350
[  804.234249][T17268]  ? netlink_ack+0x1100/0x1100
[  804.239400][T17268]  ? down_read+0x1a8/0x2d0
[  804.244783][T17268]  genl_rcv+0x24/0x40
[  804.249129][T17268]  netlink_unicast+0x74d/0x8d0
[  804.254223][T17268]  netlink_sendmsg+0x89e/0xbc0
[  804.259475][T17268]  ? netlink_getsockopt+0x540/0x540
[  804.265052][T17268]  ? aa_sock_msg_perm+0x94/0x150
[  804.270177][T17268]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  804.275792][T17268]  ? security_socket_sendmsg+0x7c/0xa0
[  804.281347][T17268]  ? netlink_getsockopt+0x540/0x540
[  804.286979][T17268]  ____sys_sendmsg+0x59b/0x970
[  804.292029][T17268]  ? __sys_sendmsg_sock+0x30/0x30
[  804.297403][T17268]  ? __import_iovec+0x315/0x500
[  804.302761][T17268]  ? import_iovec+0x6f/0xa0
[  804.307885][T17268]  ___sys_sendmsg+0x21c/0x290
[  804.312740][T17268]  ? __sys_sendmsg+0x270/0x270
[  804.318027][T17268]  ? __fdget+0x17c/0x200
[  804.322388][T17268]  __se_sys_sendmsg+0x19e/0x270
[  804.327523][T17268]  ? __x64_sys_sendmsg+0x80/0x80
[  804.335649][T17268]  ? lockdep_hardirqs_on+0x94/0x140
[  804.341214][T17268]  do_syscall_64+0x4c/0xa0
[  804.346978][T17268]  ? clear_bhb_loop+0x60/0xb0
[  804.352435][T17268]  ? clear_bhb_loop+0x60/0xb0
[  804.357342][T17268]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  804.363752][T17268] RIP: 0033:0x7f279078ebe9
[  804.368605][T17268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  804.390026][T17268] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  804.399007][T17268] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  804.407404][T17268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  804.415631][T17268] RBP: 00007f2790811e19 R08: 0000000000000000 R09: 0000000000000000
[  804.423754][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  804.432125][T17268] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  804.440875][T17268]  </TASK>
[  804.811384][T17279] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4160'.
[  805.050142][T17287] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.4162'.
[  805.385580][T17293] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.4163'.
[  805.455029][T17293] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  805.820473][T17314] netlink: 'syz.2.4170': attribute type 21 has an invalid length.
[  805.960879][T17314] netlink: 14413 bytes leftover after parsing attributes in process `syz.2.4170'.
[  806.211705][T17323] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4173'.
[  807.227830][T17356] netlink: 'syz.0.4182': attribute type 2 has an invalid length.
[  807.273106][T17356] netlink: 'syz.0.4182': attribute type 1 has an invalid length.
[  807.292460][T17356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4182'.
[  807.761736][T17375] netlink: 'syz.1.4186': attribute type 29 has an invalid length.
[  808.091268][T17363] netlink: 'syz.5.4185': attribute type 4 has an invalid length.
[  808.099705][T17363] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.4185'.
[  808.161327][T17375] netlink: 'syz.1.4186': attribute type 29 has an invalid length.
[  808.201452][T17377] netlink: 'syz.1.4186': attribute type 29 has an invalid length.
[  808.224775][T17376] netlink: 'syz.2.4183': attribute type 10 has an invalid length.
[  808.373100][T17382] device syzkaller0 entered promiscuous mode
[  808.394859][T17379] netlink: 'syz.1.4186': attribute type 29 has an invalid length.
[  808.544858][T17392] netlink: 'syz.5.4189': attribute type 21 has an invalid length.
[  808.556931][T17392] FAULT_INJECTION: forcing a failure.
[  808.556931][T17392] name failslab, interval 1, probability 0, space 0, times 0
[  808.593139][T17392] CPU: 0 PID: 17392 Comm: syz.5.4189 Not tainted 6.1.148-syzkaller #0
[  808.601745][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  808.613204][T17392] Call Trace:
[  808.616866][T17392]  <TASK>
[  808.620264][T17392]  dump_stack_lvl+0x168/0x22e
[  808.625171][T17392]  ? show_regs_print_info+0x12/0x12
[  808.630498][T17392]  ? load_image+0x3b0/0x3b0
[  808.635295][T17392]  ? __might_sleep+0xd0/0xd0
[  808.640079][T17392]  ? __lock_acquire+0x7c50/0x7c50
[  808.645292][T17392]  should_fail_ex+0x399/0x4d0
[  808.650161][T17392]  should_failslab+0x5/0x20
[  808.654860][T17392]  slab_pre_alloc_hook+0x59/0x310
[  808.659902][T17392]  ? fib_trie_table+0x2f/0x1c0
[  808.665379][T17392]  __kmem_cache_alloc_node+0x4f/0x260
[  808.671244][T17392]  ? fib_trie_table+0x2f/0x1c0
[  808.676216][T17392]  __kmalloc+0xa0/0x240
[  808.680412][T17392]  fib_trie_table+0x2f/0x1c0
[  808.685305][T17392]  fib_new_table+0x131/0x2d0
[  808.690529][T17392]  inet_rtm_newroute+0x10d/0x200
[  808.695859][T17392]  ? __mutex_lock+0x3a5/0xaf0
[  808.700739][T17392]  ? rcu_read_unlock+0xa0/0xa0
[  808.705825][T17392]  ? rcu_read_unlock+0xa0/0xa0
[  808.710639][T17392]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  808.716179][T17392]  rtnetlink_rcv_msg+0x79b/0xed0
[  808.721311][T17392]  ? rtnetlink_bind+0x80/0x80
[  808.726177][T17392]  ? __local_bh_enable_ip+0x12a/0x1b0
[  808.731738][T17392]  ? lockdep_hardirqs_on+0x94/0x140
[  808.737225][T17392]  ? __local_bh_enable_ip+0x12a/0x1b0
[  808.742708][T17392]  ? _local_bh_enable+0xa0/0xa0
[  808.747846][T17392]  ? __dev_queue_xmit+0x26f/0x3760
[  808.753460][T17392]  ? __dev_queue_xmit+0x26f/0x3760
[  808.758709][T17392]  ? __dev_queue_xmit+0x15c9/0x3760
[  808.764336][T17392]  ? __dev_queue_xmit+0x26f/0x3760
[  808.769765][T17392]  ? netdev_core_pick_tx+0x340/0x340
[  808.775256][T17392]  ? ref_tracker_free+0x630/0x7c0
[  808.780820][T17392]  ? refcount_inc+0x70/0x70
[  808.785431][T17392]  ? __copy_skb_header+0x417/0x5a0
[  808.790910][T17392]  ? __skb_clone+0x480/0x790
[  808.795713][T17392]  netlink_rcv_skb+0x1de/0x420
[  808.800593][T17392]  ? rtnetlink_bind+0x80/0x80
[  808.805575][T17392]  ? netlink_ack+0x1100/0x1100
[  808.810978][T17392]  ? netlink_deliver_tap+0x2e/0x1b0
[  808.816490][T17392]  netlink_unicast+0x74d/0x8d0
[  808.821652][T17392]  netlink_sendmsg+0x89e/0xbc0
[  808.826991][T17392]  ? netlink_getsockopt+0x540/0x540
[  808.832480][T17392]  ? aa_sock_msg_perm+0x94/0x150
[  808.837633][T17392]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  808.843188][T17392]  ? security_socket_sendmsg+0x7c/0xa0
[  808.848790][T17392]  ? netlink_getsockopt+0x540/0x540
[  808.855510][T17392]  ____sys_sendmsg+0x59b/0x970
[  808.860558][T17392]  ? __sys_sendmsg_sock+0x30/0x30
[  808.865794][T17392]  ? __import_iovec+0x315/0x500
[  808.870843][T17392]  ? import_iovec+0x6f/0xa0
[  808.875664][T17392]  ___sys_sendmsg+0x21c/0x290
[  808.880668][T17392]  ? __sys_sendmsg+0x270/0x270
[  808.886003][T17392]  ? __lock_acquire+0x7c50/0x7c50
[  808.891252][T17392]  ? __fdget+0x17c/0x200
[  808.895684][T17392]  __se_sys_sendmsg+0x19e/0x270
[  808.901107][T17392]  ? __x64_sys_sendmsg+0x80/0x80
[  808.906332][T17392]  ? lockdep_hardirqs_on+0x94/0x140
[  808.912109][T17392]  do_syscall_64+0x4c/0xa0
[  808.916967][T17392]  ? clear_bhb_loop+0x60/0xb0
[  808.921757][T17392]  ? clear_bhb_loop+0x60/0xb0
[  808.926818][T17392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  808.933027][T17392] RIP: 0033:0x7fbcbd98ebe9
[  808.937826][T17392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  808.958498][T17392] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  808.967370][T17392] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  808.975887][T17392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  808.984406][T17392] RBP: 00007fbcbe8b9090 R08: 0000000000000000 R09: 0000000000000000
[  808.993089][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.001694][T17392] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  809.010811][T17392]  </TASK>
[  809.018224][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  809.026177][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  812.225466][T17395] netlink: 'syz.1.4190': attribute type 21 has an invalid length.
[  812.233953][T17395] netlink: 'syz.1.4190': attribute type 15 has an invalid length.
[  812.246997][T17408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4195'.
[  812.323975][T17417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  812.552865][T17424] device syzkaller0 entered promiscuous mode
[  812.717209][T17443] FAULT_INJECTION: forcing a failure.
[  812.717209][T17443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.745844][T17443] CPU: 1 PID: 17443 Comm: syz.2.4202 Not tainted 6.1.148-syzkaller #0
[  812.754443][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  812.764913][T17443] Call Trace:
[  812.768377][T17443]  <TASK>
[  812.771429][T17443]  dump_stack_lvl+0x168/0x22e
[  812.776160][T17443]  ? show_regs_print_info+0x12/0x12
[  812.781754][T17443]  ? load_image+0x3b0/0x3b0
[  812.786737][T17443]  ? __might_fault+0xa6/0x120
[  812.791839][T17443]  should_fail_ex+0x399/0x4d0
[  812.796767][T17443]  copyin+0x1b/0x120
[  812.800812][T17443]  _copy_from_iter+0x55c/0x10c0
[  812.805987][T17443]  ? copyout_mc+0x110/0x110
[  812.810553][T17443]  ? __virt_addr_valid+0x188/0x540
[  812.815719][T17443]  ? __virt_addr_valid+0x188/0x540
[  812.821097][T17443]  ? __virt_addr_valid+0x465/0x540
[  812.826570][T17443]  ? __check_object_size+0x500/0xa40
[  812.831980][T17443]  skb_copy_datagram_from_iter+0xef/0x690
[  812.838110][T17443]  ? skb_put+0x117/0x210
[  812.842437][T17443]  packet_sendmsg+0x375e/0x4ea0
[  812.847645][T17443]  ? __might_sleep+0xd0/0xd0
[  812.852762][T17443]  ? trace_event_raw_event_lock+0x230/0x230
[  812.859175][T17443]  ? aa_sk_perm+0x7e5/0x920
[  812.863840][T17443]  ? packet_getsockopt+0x950/0x950
[  812.870067][T17443]  ? aa_sock_msg_perm+0x94/0x150
[  812.875244][T17443]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  812.881100][T17443]  ? security_socket_sendmsg+0x7c/0xa0
[  812.886966][T17443]  ? packet_getsockopt+0x950/0x950
[  812.892309][T17443]  ____sys_sendmsg+0x59b/0x970
[  812.897146][T17443]  ? __sys_sendmsg_sock+0x30/0x30
[  812.902855][T17443]  ? __import_iovec+0x315/0x500
[  812.908248][T17443]  ? import_iovec+0x6f/0xa0
[  812.913280][T17443]  ___sys_sendmsg+0x21c/0x290
[  812.918290][T17443]  ? __sys_sendmsg+0x270/0x270
[  812.923352][T17443]  ? __lock_acquire+0x7c50/0x7c50
[  812.929172][T17443]  ? __fdget+0x17c/0x200
[  812.933767][T17443]  __se_sys_sendmsg+0x19e/0x270
[  812.939037][T17443]  ? __x64_sys_sendmsg+0x80/0x80
[  812.944535][T17443]  ? lockdep_hardirqs_on+0x94/0x140
[  812.950249][T17443]  do_syscall_64+0x4c/0xa0
[  812.954872][T17443]  ? clear_bhb_loop+0x60/0xb0
[  812.959746][T17443]  ? clear_bhb_loop+0x60/0xb0
[  812.964663][T17443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  812.971222][T17443] RIP: 0033:0x7f279078ebe9
[  812.976141][T17443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  812.996414][T17443] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.005493][T17443] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  813.014340][T17443] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  813.022884][T17443] RBP: 00007f279164a090 R08: 0000000000000000 R09: 0000000000000000
[  813.032120][T17443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.040494][T17443] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  813.049059][T17443]  </TASK>
[  813.799379][T17465] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.4207'.
[  814.894893][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4208'.
[  816.366761][T17432] netlink: 'syz.1.4200': attribute type 4 has an invalid length.
[  816.375985][T17432] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.4200'.
[  816.391069][T17459] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4205'.
[  816.423655][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4208'.
[  816.835215][T17482] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4213'.
[  817.094281][T17485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4212'.
[  817.189798][T17492] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4214'.
[  817.837130][T17507] netlink: 'syz.2.4219': attribute type 4 has an invalid length.
[  817.873823][T17507] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.4219'.
[  818.345641][T17525] netlink: 'syz.0.4223': attribute type 1 has an invalid length.
[  818.479091][T17525] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.4223'.
[  819.777159][T17544] netlink: 'syz.0.4232': attribute type 1 has an invalid length.
[  819.805063][T17544] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.4232'.
[  819.851528][T17545] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4231'.
[  819.871729][T17547] netlink: 'syz.2.4233': attribute type 3 has an invalid length.
[  819.910680][T17547] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4233'.
[  820.704648][T17559] netlink: 'syz.4.4237': attribute type 4 has an invalid length.
[  820.856323][T17559] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.4237'.
[  821.013438][T17564] FAULT_INJECTION: forcing a failure.
[  821.013438][T17564] name failslab, interval 1, probability 0, space 0, times 0
[  821.027619][T17564] CPU: 1 PID: 17564 Comm: syz.5.4240 Not tainted 6.1.148-syzkaller #0
[  821.036154][T17564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  821.046598][T17564] Call Trace:
[  821.049995][T17564]  <TASK>
[  821.053411][T17564]  dump_stack_lvl+0x168/0x22e
[  821.058583][T17564]  ? show_regs_print_info+0x12/0x12
[  821.064232][T17564]  ? load_image+0x3b0/0x3b0
[  821.068987][T17564]  should_fail_ex+0x399/0x4d0
[  821.073978][T17564]  should_failslab+0x5/0x20
[  821.078778][T17564]  slab_pre_alloc_hook+0x59/0x310
[  821.083943][T17564]  kmem_cache_alloc+0x56/0x2f0
[  821.088843][T17564]  ? radix_tree_node_alloc+0x7e/0x3a0
[  821.094533][T17564]  radix_tree_node_alloc+0x7e/0x3a0
[  821.099970][T17564]  idr_get_free+0x2af/0xa60
[  821.105069][T17564]  idr_alloc+0x17b/0x2b0
[  821.109375][T17564]  ? idr_alloc_u32+0x2c0/0x2c0
[  821.114482][T17564]  ? __debug_object_init+0xe5/0x420
[  821.119884][T17564]  ? tipc_conn_alloc+0x2ed/0x4a0
[  821.125400][T17564]  tipc_conn_alloc+0x302/0x4a0
[  821.130422][T17564]  tipc_topsrv_kern_subscr+0xed/0x230
[  821.135946][T17564]  ? conn_put+0x310/0x310
[  821.140774][T17564]  ? tipc_own_addr+0x45/0x2a0
[  821.145685][T17564]  ? tipc_own_addr+0x45/0x2a0
[  821.150788][T17564]  tipc_group_create+0x360/0x4f0
[  821.156222][T17564]  tipc_sk_join+0x246/0x6b0
[  821.161018][T17564]  ? lockdep_hardirqs_on+0x94/0x140
[  821.166769][T17564]  ? __tipc_sendstream+0x1340/0x1340
[  821.172543][T17564]  ? lock_sock_nested+0x66/0x100
[  821.178354][T17564]  tipc_setsockopt+0x684/0x900
[  821.184396][T17564]  ? tipc_shutdown+0x560/0x560
[  821.189779][T17564]  ? aa_sock_opt_perm+0x74/0x100
[  821.195758][T17564]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  821.201607][T17564]  ? security_socket_setsockopt+0x7a/0xa0
[  821.207441][T17564]  ? tipc_shutdown+0x560/0x560
[  821.212417][T17564]  __sys_setsockopt+0x2bf/0x3d0
[  821.217565][T17564]  __x64_sys_setsockopt+0xb1/0xc0
[  821.222627][T17564]  do_syscall_64+0x4c/0xa0
[  821.227163][T17564]  ? clear_bhb_loop+0x60/0xb0
[  821.232127][T17564]  ? clear_bhb_loop+0x60/0xb0
[  821.236833][T17564]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  821.243227][T17564] RIP: 0033:0x7fbcbd98ebe9
[  821.248045][T17564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  821.268966][T17564] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  821.277894][T17564] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  821.286251][T17564] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007
[  821.294651][T17564] RBP: 00007fbcbe8b9090 R08: 00000000000004bd R09: 0000000000000000
[  821.303008][T17564] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  821.311378][T17564] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  821.319570][T17564]  </TASK>
[  821.334710][ T4352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  821.721965][T17573] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4242'.
[  821.857493][T17573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4242'.
[  822.562730][T17586] netlink: 'syz.1.4246': attribute type 3 has an invalid length.
[  822.634808][T17586] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4246'.
[  823.179433][T17580] netlink: 'syz.5.4244': attribute type 27 has an invalid length.
[  823.204326][T17597] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4250'.
[  823.487929][T17604] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4252'.
[  823.617893][T17607] netlink: 'syz.2.4253': attribute type 4 has an invalid length.
[  823.671050][T17607] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.4253'.
[  823.769660][T17606] netlink: 'syz.0.4254': attribute type 1 has an invalid length.
[  823.804060][T17606] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4254'.
[  824.933979][T17630] netlink: 'syz.5.4261': attribute type 3 has an invalid length.
[  825.011232][T17630] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4261'.
[  825.879714][T17634] netlink: 'syz.4.4262': attribute type 27 has an invalid length.
[  826.012250][T17644] netlink: 'syz.5.4266': attribute type 4 has an invalid length.
[  826.020366][T17644] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.4266'.
[  826.341085][T17657] netlink: 'syz.4.4269': attribute type 25 has an invalid length.
[  826.411151][T17657] netlink: 'syz.4.4269': attribute type 28 has an invalid length.
[  826.458966][T17665] netlink: 'syz.4.4269': attribute type 1 has an invalid length.
[  826.496885][T17655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4271'.
[  826.528348][T17665] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4269'.
[  826.539928][T17659] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4270'.
[  826.571648][T17660] netlink: 'syz.5.4272': attribute type 4 has an invalid length.
[  826.592707][T17660] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.4272'.
[  826.604542][T17652] can: request_module (can-proto-0) failed.
[  828.616940][T17697] __nla_validate_parse: 1 callbacks suppressed
[  828.616962][T17697] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4283'.
[  828.999291][T17696] validate_nla: 1 callbacks suppressed
[  828.999314][T17696] netlink: 'syz.5.4282': attribute type 4 has an invalid length.
[  829.021462][T17696] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.4282'.
[  829.054630][T17697] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  829.091273][T17697] CPU: 0 PID: 17697 Comm: syz.2.4283 Not tainted 6.1.148-syzkaller #0
[  829.099794][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  829.110434][T17697] Call Trace:
[  829.113929][T17697]  <TASK>
[  829.117008][T17697]  dump_stack_lvl+0x168/0x22e
[  829.122116][T17697]  ? show_regs_print_info+0x12/0x12
[  829.127718][T17697]  ? load_image+0x3b0/0x3b0
[  829.132571][T17697]  sysfs_warn_dup+0x8a/0xa0
[  829.137308][T17697]  sysfs_do_create_link_sd+0xc0/0x110
[  829.142929][T17697]  device_add+0x7ed/0xfb0
[  829.147448][T17697]  wiphy_register+0x1e68/0x2bd0
[  829.152577][T17697]  ? cfg80211_event_work+0x40/0x40
[  829.158040][T17697]  ? minstrel_ht_alloc+0x894/0xa20
[  829.163392][T17697]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  829.169989][T17697]  ieee80211_register_hw+0x2c29/0x38c0
[  829.175882][T17697]  ? ieee80211_register_hw+0xe91/0x38c0
[  829.181922][T17697]  ? ieee80211_register_hw+0xe91/0x38c0
[  829.187966][T17697]  ? ieee80211_tasklet_handler+0x20/0x20
[  829.194048][T17697]  ? memset+0x1e/0x40
[  829.199152][T17697]  ? __hrtimer_init+0x186/0x270
[  829.204194][T17697]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  829.210199][T17697]  hwsim_new_radio_nl+0xafa/0xce0
[  829.215591][T17697]  genl_family_rcv_msg_doit+0x22e/0x320
[  829.221456][T17697]  ? end_current_label_crit_section+0x170/0x170
[  829.229259][T17697]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  829.235678][T17697]  ? bpf_lsm_capable+0x5/0x10
[  829.240588][T17697]  ? security_capable+0x85/0xb0
[  829.245841][T17697]  genl_rcv_msg+0x5f2/0x780
[  829.250677][T17697]  ? genl_bind+0x350/0x350
[  829.255572][T17697]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  829.262198][T17697]  netlink_rcv_skb+0x1de/0x420
[  829.267456][T17697]  ? genl_bind+0x350/0x350
[  829.282850][T17697]  ? netlink_ack+0x1100/0x1100
[  829.288029][T17697]  ? down_read+0x1a8/0x2d0
[  829.293002][T17697]  genl_rcv+0x24/0x40
[  829.297844][T17697]  netlink_unicast+0x74d/0x8d0
[  829.302967][T17697]  netlink_sendmsg+0x89e/0xbc0
[  829.308249][T17697]  ? netlink_getsockopt+0x540/0x540
[  829.315012][T17697]  ? aa_sock_msg_perm+0x94/0x150
[  829.320384][T17697]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  829.326521][T17697]  ? security_socket_sendmsg+0x7c/0xa0
[  829.332508][T17697]  ? netlink_getsockopt+0x540/0x540
[  829.338010][T17697]  ____sys_sendmsg+0x59b/0x970
[  829.343182][T17697]  ? __sys_sendmsg_sock+0x30/0x30
[  829.348362][T17697]  ? __import_iovec+0x315/0x500
[  829.353491][T17697]  ? import_iovec+0x6f/0xa0
[  829.358128][T17697]  ___sys_sendmsg+0x21c/0x290
[  829.363242][T17697]  ? __sys_sendmsg+0x270/0x270
[  829.368267][T17697]  ? __fdget+0x17c/0x200
[  829.372680][T17697]  __se_sys_sendmsg+0x19e/0x270
[  829.377628][T17697]  ? __x64_sys_sendmsg+0x80/0x80
[  829.383469][T17697]  ? lockdep_hardirqs_on+0x94/0x140
[  829.389649][T17697]  do_syscall_64+0x4c/0xa0
[  829.394322][T17697]  ? clear_bhb_loop+0x60/0xb0
[  829.399224][T17697]  ? clear_bhb_loop+0x60/0xb0
[  829.404057][T17697]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  829.410461][T17697] RIP: 0033:0x7f279078ebe9
[  829.415204][T17697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  829.437281][T17697] RSP: 002b:00007f279164a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  829.446127][T17697] RAX: ffffffffffffffda RBX: 00007f27909b5fa0 RCX: 00007f279078ebe9
[  829.454671][T17697] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  829.463224][T17697] RBP: 00007f2790811e19 R08: 0000000000000000 R09: 0000000000000000
[  829.471429][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  829.479883][T17697] R13: 00007f27909b6038 R14: 00007f27909b5fa0 R15: 00007ffc68f54c68
[  829.488293][T17697]  </TASK>
[  829.834572][T17715] netlink: 'syz.4.4289': attribute type 3 has an invalid length.
[  829.848564][T17715] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4289'.
[  829.859246][T17708] netlink: 'syz.5.4286': attribute type 25 has an invalid length.
[  829.879458][T17708] netlink: 'syz.5.4286': attribute type 28 has an invalid length.
[  829.902011][T17710] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4287'.
[  830.306888][T17717] can: request_module (can-proto-0) failed.
[  830.896548][T17747] netlink: 'syz.0.4297': attribute type 4 has an invalid length.
[  830.938141][T17747] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.4297'.
[  830.952453][T17745] netlink: 'syz.2.4300': attribute type 27 has an invalid length.
[  831.048313][T17752] netlink: 'syz.5.4302': attribute type 3 has an invalid length.
[  831.071381][T17752] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4302'.
[  831.174426][T17756] netlink: 'syz.1.4301': attribute type 25 has an invalid length.
[  831.240671][T17756] netlink: 'syz.1.4301': attribute type 28 has an invalid length.
[  831.787189][T17769] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4308'.
[  831.836786][T17769] device bond_slave_1 entered promiscuous mode
[  831.843788][T17769] device batadv_slave_0 entered promiscuous mode
[  832.485767][T17789] netlink: 'syz.2.4313': attribute type 27 has an invalid length.
[  832.735461][T17787] can: request_module (can-proto-0) failed.
[  832.842727][T17799] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.4316'.
[  833.243340][T17811] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.4322'.
[  833.906204][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  833.917275][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  833.927816][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  833.937878][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  833.946203][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  833.955562][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  834.118641][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.246137][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.468730][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.592540][T17828] validate_nla: 2 callbacks suppressed
[  834.592577][T17828] netlink: 'syz.2.4327': attribute type 4 has an invalid length.
[  834.617877][T17828] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4327'.
[  834.875362][T17828] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4327'.
[  834.886490][T17828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  834.909931][T17822] chnl_net:caif_netlink_parms(): no params data found
[  834.947769][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.965014][T17829] netlink: 'syz.5.4328': attribute type 27 has an invalid length.
[  834.981910][T17833] netlink: 'syz.4.4329': attribute type 4 has an invalid length.
[  835.007671][T17833] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.4329'.
[  835.051396][T17836] netlink: 'syz.0.4330': attribute type 27 has an invalid length.
[  835.428899][T17822] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.438439][T17822] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.509787][T17822] device bridge_slave_0 entered promiscuous mode
[  835.543879][T17822] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.557494][T17822] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.566831][T17822] device bridge_slave_1 entered promiscuous mode
[  835.610206][T17846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4333'.
[  835.959154][T17857] netlink: 'syz.4.4336': attribute type 21 has an invalid length.
[  835.971912][T17857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4336'.
[  835.981522][T17857] netlink: 'syz.4.4336': attribute type 1 has an invalid length.
[  835.989573][T17858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4336'.
[  836.033251][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  836.058227][ T4267] Bluetooth: hci0: command 0x0409 tx timeout
[  836.061335][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.337849][T17822] team0: Port device team_slave_0 added
[  836.458549][T17822] team0: Port device team_slave_1 added
[  836.821990][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  836.830046][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  836.955888][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  837.069419][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  837.083935][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  837.120194][T17882] delete_channel: no stack
[  837.175114][T17882] delete_channel: no stack
[  837.282844][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  837.384213][T17875] netlink: 'syz.4.4341': attribute type 27 has an invalid length.
[  837.401956][T17879] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4351'.
[  837.470414][T17887] netlink: 'syz.5.4343': attribute type 27 has an invalid length.
[  837.778479][T17822] device hsr_slave_0 entered promiscuous mode
[  837.793747][T17822] device hsr_slave_1 entered promiscuous mode
[  837.805188][T17822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  837.832312][T17822] Cannot create hsr debugfs directory
[  837.844964][T17897] netlink: 'syz.0.4347': attribute type 4 has an invalid length.
[  837.858311][T17897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4347'.
[  838.081834][T17897] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4347'.
[  838.096962][T17897] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  838.131145][ T4276] Bluetooth: hci0: command 0x041b tx timeout
[  838.148294][T17909] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4350'.
[  838.444884][T17918] netlink: 'syz.2.4353': attribute type 39 has an invalid length.
[  839.437265][T17937] device bridge_slave_1 left promiscuous mode
[  839.461504][T17937] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.515707][T17937] device bridge_slave_0 left promiscuous mode
[  839.546039][T17937] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.595953][T17947] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  840.221158][ T4276] Bluetooth: hci0: command 0x040f tx timeout
[  840.244234][T17948] validate_nla: 3 callbacks suppressed
[  840.244277][T17948] netlink: 'syz.4.4360': attribute type 27 has an invalid length.
[  840.759251][T17957] device sit0 entered promiscuous mode
[  841.252371][   T41] device hsr_slave_0 left promiscuous mode
[  841.296147][   T41] device hsr_slave_1 left promiscuous mode
[  841.318963][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.350704][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.371928][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  841.390263][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  841.453148][   T41] batman_adv: batadv0: Interface deactivated: vlan1
[  841.460288][   T41] batman_adv: batadv0: Removing interface: vlan1
[  841.480254][T17983] netlink: 'syz.0.4370': attribute type 3 has an invalid length.
[  841.516185][T17983] __nla_validate_parse: 2 callbacks suppressed
[  841.516233][T17983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4370'.
[  841.550502][   T41] bridge0: port 3(team0) entered disabled state
[  841.566812][   T41] device bridge_slave_1 left promiscuous mode
[  841.598054][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.771449][   T41] device bridge_slave_0 left promiscuous mode
[  841.789335][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.896424][   T41] device veth0_macvtap left promiscuous mode
[  841.918615][   T41] device veth1_vlan left promiscuous mode
[  841.936593][   T41] device veth0_vlan left promiscuous mode
[  842.291162][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[  843.858331][   T41] device team_slave_1 left promiscuous mode
[  843.876342][   T41] team0 (unregistering): Port device team_slave_1 removed
[  843.983326][   T41] device team_slave_0 left promiscuous mode
[  843.992124][   T41] team0 (unregistering): Port device team_slave_0 removed
[  844.064288][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.026913][   T41] bond0 (unregistering): Released all slaves
[  845.131462][T17982] netlink: 'syz.4.4369': attribute type 4 has an invalid length.
[  845.141055][T17982] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.4369'.
[  845.151835][T17985] netlink: 'syz.0.4370': attribute type 27 has an invalid length.
[  845.519750][T17822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  845.574601][T17822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  845.623090][T17822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  845.702847][T17822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  845.939108][T18027] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4383'.
[  846.133579][T18038] netlink: 'syz.5.4384': attribute type 29 has an invalid length.
[  846.192067][T17822] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.209032][T18038] netlink: 'syz.5.4384': attribute type 29 has an invalid length.
[  846.247865][T18039] netlink: 'syz.5.4384': attribute type 29 has an invalid length.
[  846.299655][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  846.318974][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  846.374728][T17822] 8021q: adding VLAN 0 to HW filter on device team0
[  846.414969][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  846.438980][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  846.525159][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.532661][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.604024][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  846.654930][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  846.696546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  846.736406][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.743968][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.802753][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  846.879391][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  846.910572][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  846.960745][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  847.024755][T18055] netlink: 'syz.2.4388': attribute type 4 has an invalid length.
[  847.038901][T18055] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.4388'.
[  847.081025][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  847.089451][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  847.115773][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  847.125874][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  847.135808][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  847.156173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  847.179933][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  847.212032][T17822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  847.362012][T18059] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4389'.
[  847.777801][T18070] netlink: 'syz.0.4392': attribute type 3 has an invalid length.
[  847.831451][T18070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4392'.
[  847.973160][T18074] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.4393'.
[  848.129822][T18070] netlink: 'syz.0.4392': attribute type 27 has an invalid length.
[  848.598996][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  848.614732][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  848.646230][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.720056][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  848.747450][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  848.817236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  848.837712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  848.880125][T17822] device veth0_vlan entered promiscuous mode
[  848.945166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  848.960383][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  849.008392][T17822] device veth1_vlan entered promiscuous mode
[  849.059860][T18100] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4398'.
[  849.138936][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  849.166580][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  849.212292][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  849.260490][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  849.299836][T17822] device veth0_macvtap entered promiscuous mode
[  849.324496][T18109] netlink: 'syz.2.4400': attribute type 4 has an invalid length.
[  849.359249][T18109] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.4400'.
[  849.382943][T17822] device veth1_macvtap entered promiscuous mode
[  849.481283][T17822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  849.548233][T17822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  849.599974][T17822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  849.657697][T17822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  849.695873][T17822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.753192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  849.764208][T18120] netlink: 'syz.2.4403': attribute type 3 has an invalid length.
[  849.774464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  849.784260][T18120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4403'.
[  849.810519][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  849.840030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  849.876924][T18115] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4401'.
[  849.915297][T17822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  849.965384][T17822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  849.986042][T17822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.015101][T17822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.048628][T17822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.110942][T17822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.142607][T17822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  850.162270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  850.201504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  850.241856][T18120] netlink: 'syz.2.4403': attribute type 27 has an invalid length.
[  850.278456][T17822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.296862][T17822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.306712][T17822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.316030][T17822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.336246][T18128] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4405'.
[  850.527565][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.583435][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.622090][T18137] FAULT_INJECTION: forcing a failure.
[  850.622090][T18137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  850.647053][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  850.667646][T18137] CPU: 1 PID: 18137 Comm: syz.0.4407 Not tainted 6.1.148-syzkaller #0
[  850.668204][T18138] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4408'.
[  850.676223][T18137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  850.676267][T18137] Call Trace:
[  850.676279][T18137]  <TASK>
[  850.676289][T18137]  dump_stack_lvl+0x168/0x22e
[  850.676322][T18137]  ? show_regs_print_info+0x12/0x12
[  850.676345][T18137]  ? load_image+0x3b0/0x3b0
[  850.676374][T18137]  ? __lock_acquire+0x7c50/0x7c50
[  850.676400][T18137]  ? snprintf+0xd7/0x120
[  850.676428][T18137]  should_fail_ex+0x399/0x4d0
[  850.676461][T18137]  _copy_to_user+0x2c/0x130
[  850.737249][T18137]  simple_read_from_buffer+0xe3/0x150
[  850.742828][T18137]  proc_fail_nth_read+0x19a/0x210
[  850.748222][T18137]  ? proc_fault_inject_write+0x2f0/0x2f0
[  850.754225][T18137]  ? fsnotify_perm+0x248/0x550
[  850.759269][T18137]  ? proc_fault_inject_write+0x2f0/0x2f0
[  850.765116][T18137]  vfs_read+0x2c0/0x920
[  850.769839][T18137]  ? kernel_read+0x1e0/0x1e0
[  850.774541][T18137]  ? __fget_files+0x28/0x4d0
[  850.779453][T18137]  ? __fget_files+0x44a/0x4d0
[  850.784325][T18137]  ? __fdget_pos+0x2ae/0x360
[  850.789013][T18137]  ? ksys_read+0x71/0x240
[  850.793399][T18137]  ksys_read+0x143/0x240
[  850.797756][T18137]  ? vfs_write+0x960/0x960
[  850.802361][T18137]  ? lockdep_hardirqs_on+0x94/0x140
[  850.807693][T18137]  do_syscall_64+0x4c/0xa0
[  850.812381][T18137]  ? clear_bhb_loop+0x60/0xb0
[  850.817409][T18137]  ? clear_bhb_loop+0x60/0xb0
[  850.822276][T18137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  850.828300][T18137] RIP: 0033:0x7f3f41f8d5fc
[  850.832917][T18137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  850.853197][T18137] RSP: 002b:00007f3f42dac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  850.862166][T18137] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8d5fc
[  850.870431][T18137] RDX: 000000000000000f RSI: 00007f3f42dac0a0 RDI: 0000000000000005
[  850.878533][T18137] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  850.886795][T18137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.895596][T18137] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  850.903983][T18137]  </TASK>
[  850.925274][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.953394][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.021690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  851.934734][T18175] netlink: 'syz.0.4417': attribute type 3 has an invalid length.
[  852.070118][T18172] netlink: 'syz.0.4417': attribute type 27 has an invalid length.
[  852.393265][T18185] FAULT_INJECTION: forcing a failure.
[  852.393265][T18185] name failslab, interval 1, probability 0, space 0, times 0
[  852.441060][T18185] CPU: 1 PID: 18185 Comm: syz.0.4419 Not tainted 6.1.148-syzkaller #0
[  852.450275][T18185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  852.460967][T18185] Call Trace:
[  852.464464][T18185]  <TASK>
[  852.467437][T18185]  dump_stack_lvl+0x168/0x22e
[  852.472331][T18185]  ? show_regs_print_info+0x12/0x12
[  852.477548][T18185]  ? load_image+0x3b0/0x3b0
[  852.482356][T18185]  ? __lock_acquire+0x7c50/0x7c50
[  852.487763][T18185]  should_fail_ex+0x399/0x4d0
[  852.492805][T18185]  should_failslab+0x5/0x20
[  852.497334][T18185]  slab_pre_alloc_hook+0x59/0x310
[  852.502383][T18185]  ? bpf_test_init+0xc0/0x150
[  852.507173][T18185]  __kmem_cache_alloc_node+0x4f/0x260
[  852.512823][T18185]  ? bpf_test_init+0xc0/0x150
[  852.517613][T18185]  __kmalloc+0xa0/0x240
[  852.522056][T18185]  bpf_test_init+0xc0/0x150
[  852.526675][T18185]  bpf_prog_test_run_xdp+0x359/0xe50
[  852.532420][T18185]  ? dev_put+0x80/0x80
[  852.536609][T18185]  ? dev_put+0x80/0x80
[  852.540946][T18185]  bpf_prog_test_run+0x31e/0x390
[  852.546181][T18185]  __sys_bpf+0x593/0x6d0
[  852.551027][T18185]  ? bpf_link_show_fdinfo+0x340/0x340
[  852.556707][T18185]  ? lock_chain_count+0x20/0x20
[  852.562206][T18185]  __x64_sys_bpf+0x78/0x90
[  852.566731][T18185]  do_syscall_64+0x4c/0xa0
[  852.571330][T18185]  ? clear_bhb_loop+0x60/0xb0
[  852.576126][T18185]  ? clear_bhb_loop+0x60/0xb0
[  852.581001][T18185]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.587089][T18185] RIP: 0033:0x7f3f41f8ebe9
[  852.591692][T18185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  852.612460][T18185] RSP: 002b:00007f3f42dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  852.621505][T18185] RAX: ffffffffffffffda RBX: 00007f3f421b5fa0 RCX: 00007f3f41f8ebe9
[  852.630202][T18185] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[  852.639054][T18185] RBP: 00007f3f42dac090 R08: 0000000000000000 R09: 0000000000000000
[  852.647495][T18185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.656037][T18185] R13: 00007f3f421b6038 R14: 00007f3f421b5fa0 R15: 00007ffe9730f498
[  852.664567][T18185]  </TASK>
[  852.683941][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  853.010077][T18196] FAULT_INJECTION: forcing a failure.
[  853.010077][T18196] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  853.024299][T18196] CPU: 0 PID: 18196 Comm: syz.5.4423 Not tainted 6.1.148-syzkaller #0
[  853.033543][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  853.045045][T18196] Call Trace:
[  853.048443][T18196]  <TASK>
[  853.051386][T18196]  dump_stack_lvl+0x168/0x22e
[  853.056259][T18196]  ? show_regs_print_info+0x12/0x12
[  853.061943][T18196]  ? load_image+0x3b0/0x3b0
[  853.066938][T18196]  should_fail_ex+0x399/0x4d0
[  853.072265][T18196]  prepare_alloc_pages+0x1e2/0x5f0
[  853.077835][T18196]  __alloc_pages+0x123/0x4e0
[  853.083055][T18196]  ? zone_statistics+0x170/0x170
[  853.088642][T18196]  alloc_pages_node+0xf5/0x150
[  853.093749][T18196]  ? skb_attempt_defer_free+0x410/0x410
[  853.099484][T18196]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  853.105994][T18196]  ? __local_bh_disable_ip+0xee/0x190
[  853.111571][T18196]  __napi_alloc_skb+0x351/0x530
[  853.116876][T18196]  napi_get_frags+0x68/0x140
[  853.123016][T18196]  ? napi_get_frags_check+0x20/0x90
[  853.128787][T18196]  napi_get_frags_check+0x35/0x90
[  853.133955][T18196]  netif_napi_add_weight+0x9c0/0xdb0
[  853.139452][T18196]  gro_cells_init+0x199/0x250
[  853.144840][T18196]  ip6gre_tunnel_init_common+0x2a8/0x900
[  853.150752][T18196]  ip6gre_tunnel_init+0x19/0x140
[  853.155965][T18196]  register_netdevice+0x65b/0x1aa0
[  853.161567][T18196]  ? __kmem_cache_alloc_node+0x140/0x260
[  853.168121][T18196]  ? kvmalloc_node+0x6c/0x180
[  853.173366][T18196]  ? netif_stacked_transfer_operstate+0x200/0x200
[  853.180226][T18196]  ? memset+0x1e/0x40
[  853.184249][T18196]  ? memcpy+0x3c/0x60
[  853.188338][T18196]  ip6gre_tunnel_locate+0x301/0x5c0
[  853.194085][T18196]  ? ip6gre_tnl_change+0x920/0x920
[  853.199827][T18196]  ? memcpy+0x3c/0x60
[  853.203854][T18196]  ? ip6gre_tnl_parm_from_user+0x30c/0x520
[  853.210265][T18196]  ip6gre_tunnel_siocdevprivate+0x541/0x6a0
[  853.216222][T18196]  ? ip6gre_tunnel_init+0x140/0x140
[  853.221763][T18196]  ? full_name_hash+0x8e/0xe0
[  853.227047][T18196]  dev_ifsioc+0xb92/0xe90
[  853.231505][T18196]  ? dev_ioctl+0xea0/0xea0
[  853.236205][T18196]  ? mutex_lock_nested+0x10/0x10
[  853.241506][T18196]  ? __lock_acquire+0x7c50/0x7c50
[  853.246717][T18196]  ? full_name_hash+0x8e/0xe0
[  853.251826][T18196]  ? dev_load+0x1d/0x1e0
[  853.256259][T18196]  ? dev_load+0x1d/0x1e0
[  853.260522][T18196]  dev_ioctl+0x612/0xea0
[  853.265136][T18196]  ? get_user_ifreq+0xc7/0x170
[  853.270097][T18196]  sock_ioctl+0x67b/0x6e0
[  853.274717][T18196]  ? sock_poll+0x3f0/0x3f0
[  853.279492][T18196]  ? bpf_lsm_file_ioctl+0x5/0x10
[  853.286201][T18196]  ? security_file_ioctl+0x7c/0xa0
[  853.291959][T18196]  ? sock_poll+0x3f0/0x3f0
[  853.296685][T18196]  __se_sys_ioctl+0xfa/0x170
[  853.301792][T18196]  do_syscall_64+0x4c/0xa0
[  853.306439][T18196]  ? clear_bhb_loop+0x60/0xb0
[  853.311482][T18196]  ? clear_bhb_loop+0x60/0xb0
[  853.316272][T18196]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  853.322738][T18196] RIP: 0033:0x7fbcbd98ebe9
[  853.327354][T18196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  853.347325][T18196] RSP: 002b:00007fbcbe8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  853.356553][T18196] RAX: ffffffffffffffda RBX: 00007fbcbdbb5fa0 RCX: 00007fbcbd98ebe9
[  853.364818][T18196] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  853.373052][T18196] RBP: 00007fbcbe8b9090 R08: 0000000000000000 R09: 0000000000000000
[  853.381333][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  853.389746][T18196] R13: 00007fbcbdbb6038 R14: 00007fbcbdbb5fa0 R15: 00007ffc49477a78
[  853.398358][T18196]  </TASK>
[  853.611930][T18209] __nla_validate_parse: 3 callbacks suppressed
[  853.611970][T18209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4426'.
[  854.009810][T18221] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4427'.
[  854.031395][T18217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4437'.
[  855.111815][T18238] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4432'.
[  855.190777][T18245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4433'.
[  855.653566][T18255] netlink: 'syz.5.4439': attribute type 28 has an invalid length.
[  855.664986][T18255] netlink: 'syz.5.4439': attribute type 3 has an invalid length.
[  855.686998][T18255] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4439'.
[  855.724447][T18258] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.4439'.
[  855.775857][T18255] sock: sock_set_timeout: `syz.5.4439' (pid 18255) tries to set negative timeout
[  856.111933][T18268] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4454'.
[  856.233841][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4445'.
[  856.254410][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4445'.
[  857.091684][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  857.273436][T18296] netlink: 'syz.2.4451': attribute type 3 has an invalid length.
[  857.425075][T18296] netlink: 'syz.2.4451': attribute type 27 has an invalid length.
[  857.684446][T18313] FAULT_INJECTION: forcing a failure.
[  857.684446][T18313] name failslab, interval 1, probability 0, space 0, times 0
[  857.697853][T18313] CPU: 1 PID: 18313 Comm: syz.1.4459 Not tainted 6.1.148-syzkaller #0
[  857.706308][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  857.716551][T18313] Call Trace:
[  857.719852][T18313]  <TASK>
[  857.722880][T18313]  dump_stack_lvl+0x168/0x22e
[  857.727845][T18313]  ? show_regs_print_info+0x12/0x12
[  857.733056][T18313]  ? load_image+0x3b0/0x3b0
[  857.737670][T18313]  should_fail_ex+0x399/0x4d0
[  857.742451][T18313]  should_failslab+0x5/0x20
[  857.746973][T18313]  slab_pre_alloc_hook+0x59/0x310
[  857.752094][T18313]  ? hsr_add_node+0x66/0x760
[  857.772520][T18313]  __kmem_cache_alloc_node+0x4f/0x260
[  857.778022][T18313]  ? hsr_add_node+0x66/0x760
[  857.782727][T18313]  kmalloc_trace+0x26/0xe0
[  857.787447][T18313]  hsr_add_node+0x66/0x760
[  857.791991][T18313]  hsr_forward_skb+0x34a/0x20d0
[  857.797483][T18313]  ? hsr_forward_skb+0x98/0x20d0
[  857.802526][T18313]  ? prp_fill_frame_info+0x6f0/0x6f0
[  857.808085][T18313]  ? do_raw_spin_lock+0x11d/0x280
[  857.813302][T18313]  ? __rwlock_init+0x140/0x140
[  857.818439][T18313]  ? __lock_acquire+0x7c50/0x7c50
[  857.823490][T18313]  ? hsr_dev_xmit+0x12e/0x200
[  857.828442][T18313]  hsr_dev_xmit+0x139/0x200
[  857.833417][T18313]  dev_hard_start_xmit+0x262/0x870
[  857.838678][T18313]  __dev_queue_xmit+0x1bf1/0x3760
[  857.843746][T18313]  ? __dev_queue_xmit+0x26f/0x3760
[  857.848880][T18313]  ? netdev_core_pick_tx+0x340/0x340
[  857.854276][T18313]  ? packet_parse_headers+0x7b5/0xac0
[  857.859674][T18313]  ? packet_parse_headers+0x855/0xac0
[  857.865243][T18313]  ? __virt_addr_valid+0x188/0x540
[  857.870653][T18313]  ? __check_object_size+0x500/0xa40
[  857.876149][T18313]  ? skb_setup_tx_timestamp+0x1e0/0x1e0
[  857.881739][T18313]  ? skb_copy_datagram_from_iter+0x5a8/0x690
[  857.887914][T18313]  ? skb_put+0x117/0x210
[  857.892351][T18313]  packet_sendmsg+0x3be8/0x4ea0
[  857.897479][T18313]  ? __might_sleep+0xd0/0xd0
[  857.902211][T18313]  ? aa_sk_perm+0x7e5/0x920
[  857.906853][T18313]  ? packet_getsockopt+0x950/0x950
[  857.912171][T18313]  ? aa_sock_msg_perm+0x94/0x150
[  857.917310][T18313]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  857.922600][T18313]  ? security_socket_sendmsg+0x7c/0xa0
[  857.928857][T18313]  ? packet_getsockopt+0x950/0x950
[  857.933998][T18313]  ____sys_sendmsg+0x59b/0x970
[  857.939040][T18313]  ? __sys_sendmsg_sock+0x30/0x30
[  857.944275][T18313]  ? __import_iovec+0x315/0x500
[  857.949494][T18313]  ? import_iovec+0x6f/0xa0
[  857.954102][T18313]  ___sys_sendmsg+0x21c/0x290
[  857.958821][T18313]  ? __sys_sendmsg+0x270/0x270
[  857.963968][T18313]  ? __lock_acquire+0x7c50/0x7c50
[  857.969370][T18313]  ? __fdget+0x17c/0x200
[  857.973978][T18313]  __se_sys_sendmsg+0x19e/0x270
[  857.979309][T18313]  ? __x64_sys_sendmsg+0x80/0x80
[  857.984409][T18313]  ? lockdep_hardirqs_on+0x94/0x140
[  857.989812][T18313]  do_syscall_64+0x4c/0xa0
[  857.995032][T18313]  ? clear_bhb_loop+0x60/0xb0
[  857.999890][T18313]  ? clear_bhb_loop+0x60/0xb0
[  858.004671][T18313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  858.010968][T18313] RIP: 0033:0x7fa1c3f8ebe9
[  858.015480][T18313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  858.036401][T18313] RSP: 002b:00007fa1c21f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  858.045709][T18313] RAX: ffffffffffffffda RBX: 00007fa1c41b5fa0 RCX: 00007fa1c3f8ebe9
[  858.053874][T18313] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004
[  858.062396][T18313] RBP: 00007fa1c21f6090 R08: 0000000000000000 R09: 0000000000000000
[  858.070659][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  858.079716][T18313] R13: 00007fa1c41b6038 R14: 00007fa1c41b5fa0 R15: 00007fff5d7e16f8
[  858.087984][T18313]  </TASK>
[  858.752953][T18328] __nla_validate_parse: 6 callbacks suppressed
[  858.752976][T18328] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4463'.
[  859.260414][T18344] netlink: 'syz.4.4468': attribute type 3 has an invalid length.
[  859.289118][T18344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4468'.
[  859.407578][T18346] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4469'.
[  859.456941][T18344] netlink: 'syz.4.4468': attribute type 27 has an invalid length.
[  859.706923][T18351] netlink: 'syz.0.4471': attribute type 28 has an invalid length.
[  859.732188][T18351] netlink: 'syz.0.4471': attribute type 3 has an invalid length.
[  859.770049][T18351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4471'.
[  859.846323][T18353] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4471'.
[  859.892086][T18362] FAULT_INJECTION: forcing a failure.
[  859.892086][T18362] name failslab, interval 1, probability 0, space 0, times 0
[  859.905675][T18360] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4474'.
[  859.958669][T18362] CPU: 1 PID: 18362 Comm: syz.5.4472 Not tainted 6.1.148-syzkaller #0
[  859.967170][T18362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  859.977790][T18362] Call Trace:
[  859.981359][T18362]  <TASK>
[  859.984897][T18362]  dump_stack_lvl+0x168/0x22e
[  859.989890][T18362]  ? show_regs_print_info+0x12/0x12
[  859.995648][T18362]  ? load_image+0x3b0/0x3b0
[  860.000467][T18362]  ? __might_sleep+0xd0/0xd0
[  860.005706][T18362]  ? __lock_acquire+0x7c50/0x7c50
[  860.011131][T18362]  should_fail_ex+0x399/0x4d0
[  860.016121][T18362]  should_failslab+0x5/0x20
[  860.021286][T18362]  slab_pre_alloc_hook+0x59/0x310
[  860.027145][T18362]  kmem_cache_alloc+0x56/0x2f0
[  860.032574][T18362]  ? getname_flags+0xb7/0x500
[  860.037574][T18362]  getname_flags+0xb7/0x500
[  860.042478][T18362]  do_sys_openat2+0xcf/0x490
[  860.047383][T18362]  ? perf_trace_preemptirq_template+0x287/0x330
[  860.054087][T18362]  ? do_sys_open+0xe0/0xe0
[  860.058970][T18362]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  860.065543][T18362]  ? lock_chain_count+0x20/0x20
[  860.070703][T18362]  __x64_sys_openat+0x135/0x160
[  860.075826][T18362]  do_syscall_64+0x4c/0xa0
[  860.080723][T18362]  ? clear_bhb_loop+0x60/0xb0
[  860.085758][T18362]  ? clear_bhb_loop+0x60/0xb0
[  860.090646][T18362]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  860.096670][T18362] RIP: 0033:0x7fbcbd98ebe9
[  860.101214][T18362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  860.121213][T18362] RSP: 002b:00007fbcbe898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  860.130011][T18362] RAX: ffffffffffffffda RBX: 00007fbcbdbb6090 RCX: 00007fbcbd98ebe9
[  860.138357][T18362] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  860.146788][T18362] RBP: 00007fbcbe898090 R08: 0000000000000000 R09: 0000000000000000
[  860.155218][T18362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  860.163555][T18362] R13: 00007fbcbdbb6128 R14: 00007fbcbdbb6090 R15: 00007ffc49477a78
[  860.172195][T18362]  </TASK>
[  860.231334][T18353] sock: sock_set_timeout: `syz.0.4471' (pid 18353) tries to set negative timeout
[  860.676973][T18372] netlink: 'syz.1.4478': attribute type 21 has an invalid length.
[  860.754454][T18372] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4478'.
[  861.053955][T18385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4483'.
[  861.169816][T18391] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4485'.
[  861.896851][T18410] netlink: 'syz.2.4491': attribute type 28 has an invalid length.
[  861.941046][T18410] netlink: 'syz.2.4491': attribute type 3 has an invalid length.
[  861.962944][T18410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4491'.
[  862.102278][T18410] sock: sock_set_timeout: `syz.2.4491' (pid 18410) tries to set negative timeout
[  864.318678][T18464] netlink: 'syz.5.4512': attribute type 3 has an invalid length.
[  864.411056][T18464] __nla_validate_parse: 3 callbacks suppressed
[  864.411141][T18464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4512'.
[  864.791381][T18478] netlink: 'syz.0.4516': attribute type 1 has an invalid length.
[  864.868118][T18464] netlink: 'syz.5.4512': attribute type 27 has an invalid length.
[  864.894821][T18478] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4516'.
[  866.214106][T18510] device bridge_slave_1 left promiscuous mode
[  866.251478][T18510] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.323515][T18510] device bridge_slave_0 left promiscuous mode
[  866.380029][T18510] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.394326][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.581570][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.673266][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.777615][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.297198][    T9] device hsr_slave_0 left promiscuous mode
[  869.309514][    T9] device hsr_slave_1 left promiscuous mode
[  869.317824][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  869.332218][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  869.341263][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  869.350305][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.366978][    T9] device team0 left promiscuous mode
[  869.374132][    T9] device team_slave_1 left promiscuous mode
[  869.381660][    T9] bridge0: port 3(team0) entered disabled state
[  869.390440][    T9] device bridge_slave_1 left promiscuous mode
[  869.398021][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.414811][    T9] device bridge_slave_0 left promiscuous mode
[  869.421673][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.442827][    T9] device veth1_macvtap left promiscuous mode
[  869.449355][    T9] device veth0_macvtap left promiscuous mode
[  869.456072][    T9] device veth1_vlan left promiscuous mode
[  869.462991][    T9] device veth0_vlan left promiscuous mode
[  869.967347][    T9] team0 (unregistering): Port device team_slave_1 removed
[  870.064925][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.378681][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.387328][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.661804][    T9] bond0 (unregistering): Released all slaves
[  871.274501][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.354477][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.428247][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.501738][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.695709][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.814186][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.897790][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.962267][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.145153][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.244866][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.335477][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.418194][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.590661][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.666246][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.756064][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.805844][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.960819][    T9] device 0 left promiscuous mode
[  875.837153][    T9] device hsr_slave_0 left promiscuous mode
[  875.848241][    T9] device hsr_slave_1 left promiscuous mode
[  875.860490][    T9] device hsr_slave_0 left promiscuous mode
[  875.874471][    T9] device hsr_slave_1 left promiscuous mode
[  875.881865][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  875.889942][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.914524][    T9] device hsr_slave_0 left promiscuous mode
[  875.931368][    T9] device hsr_slave_1 left promiscuous mode
[  875.941703][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  875.949946][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  875.971370][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  875.979383][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.994287][    T9] device hsr_slave_0 left promiscuous mode
[  876.004406][    T9] device hsr_slave_1 left promiscuous mode
[  876.012541][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  876.020723][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  876.029704][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  876.038599][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.106660][    T9] device veth1_macvtap left promiscuous mode
[  876.113453][    T9] device veth0_macvtap left promiscuous mode
[  876.120048][    T9] device veth1_vlan left promiscuous mode
[  876.126683][    T9] device veth0_vlan left promiscuous mode
[  876.136262][    T9] device veth1_macvtap left promiscuous mode
[  876.144541][    T9] device veth0_macvtap left promiscuous mode
[  876.151586][    T9] device veth1_vlan left promiscuous mode
[  876.158185][    T9] device veth0_vlan left promiscuous mode
[  876.167261][    T9] device veth1_macvtap left promiscuous mode
[  876.177350][    T9] device veth0_macvtap left promiscuous mode
[  876.186300][    T9] device veth1_vlan left promiscuous mode
[  876.195906][    T9] device veth0_vlan left promiscuous mode
[  876.205274][    T9] device veth1_macvtap left promiscuous mode
[  876.214569][    T9] device veth0_macvtap left promiscuous mode
[  876.222304][    T9] device veth1_vlan left promiscuous mode
[  876.228632][    T9] device veth0_vlan left promiscuous mode