last executing test programs:

18m56.530660094s ago: executing program 2 (id=134):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
perf_event_open(&(0x7f00000001c0)={0xbf8b61c887ccd161, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0xffffffff, 0x1, 0x0, 0x5, 0x3, 0xffff, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000ce90553866c2dfec1511bd9733c3e895360418e34b988577721e285924250b21499c278e01c58f79d8a2c1c53bb617387becba832a3486cccf0626675151fd4c7a37b585d8191bf6a75a782c1be9f15a9c549b7c3e6cbb6a2693538e1309fc40f26303232cb8284ab5cce727ce6dbc6292f440ce8845ea4db3b19b7ac7f576879027443b0146cdf55755e865c4092de1cd3eadbf9569ddc743b75886893a825378a086ea0960197000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x50)
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/cgroup\x00')
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc)
close(r4)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18m56.376448364s ago: executing program 2 (id=136):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x200040c4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffdfffffffffff, r1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080))
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x2a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x19a50, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x100000000, 0x8000}, 0x9429, 0x0, 0x0, 0x8, 0x3fa, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000700))
r7 = socket$kcm(0x10, 0x3, 0x10)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff)

18m56.193728874s ago: executing program 2 (id=140):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x20000000000000a, 0x300)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='N-N:', @ANYBLOB='N'], 0x6a)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)

18m53.077262314s ago: executing program 2 (id=142):
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000}, 0x12100, 0xc8, 0x2, 0x6, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], 0x48)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40484, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcd4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"})
r1 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x1080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100c, 0x1, 0x0, 0x0, 0x748, 0x4, 0xb, 0x0, 0xffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)}, 0x8080)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

18m52.810353969s ago: executing program 2 (id=147):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="27011c00160014000000002f1eafbcf706e10500000089f7000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90187ce", 0x32}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x29, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open$cgroup(&(0x7f0000000640)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
close(r1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)

18m52.517082917s ago: executing program 2 (id=160):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@remote, @empty, @broadcast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0)

18m37.145955386s ago: executing program 32 (id=160):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@remote, @empty, @broadcast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0)

1.648549225s ago: executing program 3 (id=11038):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x8504, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x2, 0x5, 0x71, 0x0, 0x51, 0x4000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x12020, 0x7, 0xffff0000, 0x6, 0x0, 0x80000001, 0x80, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, r1, 0x6, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x216, 0x0, 0xff, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x1000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x2, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffdc1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r10, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87", 0x1}, {&(0x7f0000001580)="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", 0x978}], 0x8}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x101a0)

1.582440729s ago: executing program 0 (id=11041):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

1.39706341s ago: executing program 0 (id=11043):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0200001000000"], 0x30}, 0x0)

1.297557635s ago: executing program 1 (id=11045):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2})
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
close(r0)
r4 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88934c47a7539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.280500276s ago: executing program 0 (id=11046):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = gettid()
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xe, r2, 0x8)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xdf, 0x0, 0x59, 0x0, 0x7, 0x20, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0xf7}, 0x0, 0x6, 0x51d, 0x0, 0x9, 0xe8c, 0x4, 0x0, 0x4, 0x0, 0x7}, r1, 0x1, r2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000840), 0x2, 0x0)
close(0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

1.21770078s ago: executing program 3 (id=11050):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

1.084865477s ago: executing program 3 (id=11051):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
perf_event_open(&(0x7f00000001c0)={0xbf8b61c887ccd161, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0xffffffff, 0x1, 0x0, 0x5, 0x3, 0xffff, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000ce90553866c2dfec1511bd9733c3e895360418e34b988577721e285924250b21499c278e01c58f79d8a2c1c53bb617387becba832a3486cccf0626675151fd4c7a37b585d8191bf6a75a782c1be9f15a9c549b7c3e6cbb6a2693538e1309fc40f26303232cb8284ab5cce727ce6dbc6292f440ce8845ea4db3b19b7ac7f576879027443b0146cdf55755e865c4092de1cd3eadbf9569ddc743b75886893a825378a086ea0960197000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x50)
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/cgroup\x00')
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc)
close(r4)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087", @ANYRES32=r3], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.014559192s ago: executing program 1 (id=11053):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r1}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0600000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0000000003002000"/28], 0x50)
close(0x3)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xa, 0x4, &(0x7f0000001600)=ANY=[@ANYRES16=r0, @ANYBLOB="8c8aac7755aa4aeaf7d9a567dd1305"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000014c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x645bb7ec, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
r5 = perf_event_open(0x0, 0xffffffffffffffff, 0xa, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, &(0x7f00000002c0)=""/4096, 0x3d, 0x1000, 0x1}, 0x28)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
perf_event_open$cgroup(&(0x7f00000013c0)={0x2, 0x80, 0x9, 0x8b, 0x57, 0x80, 0x0, 0x1, 0x8000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xe76, 0x80000000}, 0x1220, 0xc, 0x401, 0x7, 0xffff, 0x3ff, 0xdf, 0x0, 0x7f, 0x0, 0xd43}, r7, 0xc, 0xffffffffffffffff, 0x5)
ioctl$SIOCSIFHWADDR(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"})
socket$kcm(0x11, 0x200000000000002, 0x300)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="39000000140081ae50003c00fbff008311001f9f660fcf066305acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8", 0x32}], 0x1}, 0x0)

891.863449ms ago: executing program 1 (id=11054):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018"], 0xa0}, 0x8800)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0xc0, 0x1, 0xfffffffd, 0x6, 0x5, 0x20a, 0x8003, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x40008d4)

810.804514ms ago: executing program 3 (id=11055):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0)
perf_event_open(0x0, 0x0, 0x400010, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000340)="3881d3a045f2614d9ac6095ff1314cd76e1b23bbb718854f7e13eed6f4bcd9af9de21e00"/49, 0x0}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

810.490413ms ago: executing program 4 (id=11056):
r0 = socket$kcm(0x1e, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, 0x0, 0xfe72)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00')
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xb702, 0x80000000001)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x2a, 0x2, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

684.860511ms ago: executing program 0 (id=11058):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0200001000000"], 0x30}, 0x0)

653.825122ms ago: executing program 4 (id=11059):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0xc0fe}, 0x80d1)

623.967525ms ago: executing program 5 (id=11060):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0200001000000"], 0x30}, 0x0)

572.371417ms ago: executing program 4 (id=11061):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0)
perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000340)="3881d3a045f2614d9ac6095ff1314cd76e1b23bbb718854f7e13eed6f4bcd9af9de21e00"/49, 0x0}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

564.391748ms ago: executing program 1 (id=11062):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

510.949181ms ago: executing program 3 (id=11063):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2})
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
close(r0)
r4 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88934c47a7539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

491.399592ms ago: executing program 0 (id=11064):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = gettid()
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xe, r2, 0x8)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xdf, 0x0, 0x59, 0x0, 0x7, 0x20, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0xf7}, 0x0, 0x6, 0x51d, 0x0, 0x9, 0xe8c, 0x4, 0x0, 0x4, 0x0, 0x7}, r1, 0x1, r2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000840), 0x2, 0x0)
close(0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

468.641893ms ago: executing program 5 (id=11065):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

465.721304ms ago: executing program 1 (id=11066):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0x203, 0x31}, 0x80}, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000000200010000000035eed7f70000200000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/27], 0x50)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080))

385.592128ms ago: executing program 5 (id=11067):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0)
perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000340)="3881d3a045f2614d9ac6095ff1314cd76e1b23bbb718854f7e13eed6f4bcd9af9de21e00"/49, 0x0}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

384.898348ms ago: executing program 4 (id=11068):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000001480)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000700850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

361.10885ms ago: executing program 1 (id=11069):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = gettid()
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xe, r2, 0x8)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xdf, 0x0, 0x59, 0x0, 0x7, 0x20, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0xf7}, 0x0, 0x6, 0x51d, 0x0, 0x9, 0xe8c, 0x4, 0x0, 0x4, 0x0, 0x7}, r1, 0x1, r2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000840), 0x2, 0x0)
close(0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

310.562682ms ago: executing program 3 (id=11070):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0xc0, 0x1, 0xfffffffd, 0x6, 0x5, 0x20a, 0x8003, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x40008d4)

271.080845ms ago: executing program 4 (id=11071):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2})
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
close(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88934c47a7539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

177.85804ms ago: executing program 5 (id=11072):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018"], 0xa0}, 0x8800)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0xc0, 0x1, 0xfffffffd, 0x6, 0x5, 0x20a, 0x8003, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x40008d4)

138.550352ms ago: executing program 4 (id=11073):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0xc0, 0x1, 0xfffffffd, 0x6, 0x5, 0x20a, 0x8003, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x40008d4)

85.553196ms ago: executing program 5 (id=11074):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x140, &(0x7f0000000100)=[{&(0x7f0000000040)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007eb50860160af36504000100080ec000000000009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5e168b7ed9c232d786c35000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800c080)

33.860058ms ago: executing program 0 (id=11075):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x28, 0x7f, 0x86, 0xfffff010}, {0x6, 0xfd}]})
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

0s ago: executing program 5 (id=11076):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0x203, 0x31}, 0x80}, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000000200010000000035eed7f70000200000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/27], 0x50)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1102.608139][T31021] RSP: 002b:00007fb32741a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1102.616549][T31021] RAX: ffffffffffffffda RBX: 00007fb329439fa0 RCX: 00007fb3291beeb9
[ 1102.624508][T31021] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1102.632462][T31021] RBP: 00007fb32741a090 R08: 0000000000000000 R09: 0000000000000000
[ 1102.640416][T31021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1102.648371][T31021] R13: 00007fb32943a038 R14: 00007fb329439fa0 R15: 00007ffe69df1688
[ 1102.656347][T31021]  </TASK>
[ 1102.866489][T31032] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9231'.
[ 1103.551937][T19202] device wlan1 left promiscuous mode
[ 1103.586656][T19202] team0: Port device wlan1 removed
[ 1103.843462][T19202] device hsr_slave_0 left promiscuous mode
[ 1103.850548][ T4227] Bluetooth: hci3: command 0x041b tx timeout
[ 1103.859924][T19202] device hsr_slave_1 left promiscuous mode
[ 1103.880584][T19202] device bridge_slave_1 left promiscuous mode
[ 1103.905258][T19202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.015710][T31066] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9237'.
[ 1104.208624][T19202] device veth1_macvtap left promiscuous mode
[ 1104.224199][T19202] device veth0_macvtap left promiscuous mode
[ 1104.237753][T19202] device veth1_vlan left promiscuous mode
[ 1104.260473][T19202] device veth0_vlan left promiscuous mode
[ 1104.380782][T31079] validate_nla: 14 callbacks suppressed
[ 1104.380820][T31079] netlink: 'syz.1.9239': attribute type 29 has an invalid length.
[ 1104.514234][T31085] netlink: 'syz.1.9239': attribute type 3 has an invalid length.
[ 1104.526376][T19202] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1104.672059][T19202] device team_slave_1 left promiscuous mode
[ 1104.679367][T19202] team0 (unregistering): Port device team_slave_1 removed
[ 1104.707371][T19202] device team_slave_0 left promiscuous mode
[ 1104.718830][T19202] team0 (unregistering): Port device team_slave_0 removed
[ 1104.758018][T19202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1104.774879][T19202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1104.866453][T19202] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1104.877917][T19202] bond0 (unregistering): Released all slaves
[ 1104.930450][T31064] __nla_validate_parse: 2 callbacks suppressed
[ 1104.930465][T31064] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.9237'.
[ 1104.964547][T31079] netlink: 'syz.1.9239': attribute type 29 has an invalid length.
[ 1104.982711][T31081] netlink: 'syz.1.9239': attribute type 29 has an invalid length.
[ 1105.084742][T31083] netlink: 'syz.1.9239': attribute type 29 has an invalid length.
[ 1105.121883][T30966] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1105.140451][T31086] netlink: 'syz.1.9239': attribute type 29 has an invalid length.
[ 1105.149187][T30966] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1105.167502][T30966] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1105.216821][T30966] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1105.246264][T31089] netlink: 'syz.4.9242': attribute type 29 has an invalid length.
[ 1105.346540][T31099] netlink: 'syz.3.9245': attribute type 16 has an invalid length.
[ 1105.365412][T31099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9245'.
[ 1105.408816][T31104] netlink: 'syz.1.9246': attribute type 3 has an invalid length.
[ 1105.417359][T31089] netlink: 'syz.4.9242': attribute type 29 has an invalid length.
[ 1105.470579][T31104] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9246'.
[ 1105.526261][T31092] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9242'.
[ 1105.615654][T30966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1105.663870][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1105.692864][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1105.753609][T31110] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.9248'.
[ 1105.807489][T31113] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9248'.
[ 1105.860674][T30966] 8021q: adding VLAN 0 to HW filter on device team0
[ 1105.867798][T31116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9250'.
[ 1105.911674][T31120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9250'.
[ 1105.930533][ T4227] Bluetooth: hci3: command 0x040f tx timeout
[ 1105.939307][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1105.960697][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1105.972575][T19204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.979681][T19204] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1106.007920][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1106.047727][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1106.075664][T31125] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9252'.
[ 1106.077362][T19204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.092101][T19204] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1106.176380][T31123] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9252'.
[ 1106.194010][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1106.222717][T19204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1106.296012][T19189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1106.361658][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1106.381103][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1106.450202][T30966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1106.453920][T31142] FAULT_INJECTION: forcing a failure.
[ 1106.453920][T31142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1106.482384][T30966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1106.523693][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1106.533963][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1106.570536][T31142] CPU: 1 PID: 31142 Comm: syz.3.9259 Not tainted syzkaller #0
[ 1106.575249][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1106.578005][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1106.595823][T31142] Call Trace:
[ 1106.599101][T31142]  <TASK>
[ 1106.600886][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1106.602023][T31142]  dump_stack_lvl+0x188/0x250
[ 1106.614462][T31142]  ? show_regs_print_info+0x20/0x20
[ 1106.619673][T31142]  ? load_image+0x400/0x400
[ 1106.624188][T31142]  ? __lock_acquire+0x7d10/0x7d10
[ 1106.629214][T31142]  ? vfs_write+0x8b2/0xd60
[ 1106.631187][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1106.633624][T31142]  should_fail+0x38c/0x4c0
[ 1106.645709][T31142]  _copy_from_user+0x2e/0x170
[ 1106.650391][T31142]  __sys_bpf+0x26d/0x6f0
[ 1106.654636][T31142]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1106.660018][T31142]  ? vtime_user_exit+0x2c8/0x3e0
[ 1106.661131][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1106.664956][T31142]  __x64_sys_bpf+0x78/0x90
[ 1106.664981][T31142]  do_syscall_64+0x4c/0xa0
[ 1106.681547][T31142]  ? clear_bhb_loop+0x30/0x80
[ 1106.686224][T31142]  ? clear_bhb_loop+0x30/0x80
[ 1106.690899][T31142]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1106.694120][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1106.696938][T31142] RIP: 0033:0x7fb3291beeb9
[ 1106.709026][T31142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1106.723727][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1106.728624][T31142] RSP: 002b:00007fb32741a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1106.728646][T31142] RAX: ffffffffffffffda RBX: 00007fb329439fa0 RCX: 00007fb3291beeb9
[ 1106.728659][T31142] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000
[ 1106.760007][T31142] RBP: 00007fb32741a090 R08: 0000000000000000 R09: 0000000000000000
[ 1106.767963][T31142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1106.775919][T31142] R13: 00007fb32943a038 R14: 00007fb329439fa0 R15: 00007ffe69df1688
[ 1106.783892][T31142]  </TASK>
[ 1107.134969][T19189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1107.182511][T19189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1107.216191][T30966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1107.673380][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1107.690914][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1107.790575][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1107.801126][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1107.816819][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1107.847708][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1107.874969][T30966] device veth0_vlan entered promiscuous mode
[ 1107.901365][T30966] device veth1_vlan entered promiscuous mode
[ 1107.981955][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1108.009415][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1108.020493][ T4227] Bluetooth: hci3: command 0x0419 tx timeout
[ 1108.040675][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1108.065563][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1108.079713][T30966] device veth0_macvtap entered promiscuous mode
[ 1108.106499][T30966] device veth1_macvtap entered promiscuous mode
[ 1108.157602][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.188321][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.218226][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.234836][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.244900][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.255722][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.265767][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.276917][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.297505][T30966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1108.328811][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.360073][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.400783][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.427983][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.460341][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.490777][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.506364][T30966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1108.516886][T30966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.534794][T30966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.562228][T30966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.578009][T30966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.587811][T30966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.602623][T30966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.617811][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1108.630764][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1108.657212][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1108.688303][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1108.715720][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1108.755963][T19211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1109.065253][T31222] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1109.094383][T19189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.108741][T19204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.131337][T19189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.131523][T19204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.166263][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1109.231106][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1109.413290][T31232] validate_nla: 37 callbacks suppressed
[ 1109.413328][T31232] netlink: 'syz.3.9288': attribute type 3 has an invalid length.
[ 1109.433416][T31236] netlink: 'syz.5.9209': attribute type 29 has an invalid length.
[ 1109.436003][T31232] netlink: 'syz.3.9288': attribute type 29 has an invalid length.
[ 1109.454069][T31236] netlink: 'syz.5.9209': attribute type 29 has an invalid length.
[ 1109.468066][T31236] netlink: 'syz.5.9209': attribute type 29 has an invalid length.
[ 1109.477612][T31236] netlink: 'syz.5.9209': attribute type 29 has an invalid length.
[ 1109.498678][T31236] netlink: 'syz.5.9209': attribute type 29 has an invalid length.
[ 1109.937416][T31253] netlink: 'syz.0.9296': attribute type 21 has an invalid length.
[ 1109.980663][T31253] __nla_validate_parse: 11 callbacks suppressed
[ 1109.980696][T31253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9296'.
[ 1110.023597][T31262] netlink: 'syz.3.9300': attribute type 29 has an invalid length.
[ 1110.050585][T31262] netlink: 'syz.3.9300': attribute type 29 has an invalid length.
[ 1110.178033][T31271] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.9304'.
[ 1110.202398][T31273] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9302'.
[ 1110.288195][T31265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9301'.
[ 1110.343818][T31275] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.9305'.
[ 1110.427932][T31279] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9307'.
[ 1110.609460][T31286] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9307'.
[ 1110.684907][T31295] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.9312'.
[ 1110.767986][T31295] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9312'.
[ 1110.803266][T31301] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9315'.
[ 1111.176063][T31319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.507775][T31334] FAULT_INJECTION: forcing a failure.
[ 1111.507775][T31334] name failslab, interval 1, probability 0, space 0, times 0
[ 1111.550400][T31334] CPU: 0 PID: 31334 Comm: syz.1.9329 Not tainted syzkaller #0
[ 1111.557889][T31334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1111.567945][T31334] Call Trace:
[ 1111.571224][T31334]  <TASK>
[ 1111.574153][T31334]  dump_stack_lvl+0x188/0x250
[ 1111.578841][T31334]  ? show_regs_print_info+0x20/0x20
[ 1111.584040][T31334]  ? load_image+0x400/0x400
[ 1111.588553][T31334]  ? __might_sleep+0xf0/0xf0
[ 1111.593149][T31334]  ? __lock_acquire+0x7d10/0x7d10
[ 1111.598177][T31334]  should_fail+0x38c/0x4c0
[ 1111.602598][T31334]  should_failslab+0x5/0x20
[ 1111.607096][T31334]  slab_pre_alloc_hook+0x51/0xc0
[ 1111.612035][T31334]  __kmalloc_node_track_caller+0x68/0x3a0
[ 1111.617756][T31334]  ? alloc_skb_with_frags+0xa7/0x730
[ 1111.623044][T31334]  ? kmem_cache_alloc_node+0x162/0x2d0
[ 1111.628504][T31334]  ? __alloc_skb+0xf4/0x750
[ 1111.633012][T31334]  ? alloc_skb_with_frags+0xa7/0x730
[ 1111.638303][T31334]  __alloc_skb+0x22c/0x750
[ 1111.642726][T31334]  alloc_skb_with_frags+0xa7/0x730
[ 1111.647844][T31334]  ? __lock_acquire+0x7d10/0x7d10
[ 1111.652872][T31334]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1111.658071][T31334]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[ 1111.664059][T31334]  ? sock_kzfree_s+0x50/0x50
[ 1111.668645][T31334]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1111.674024][T31334]  ? _local_bh_enable+0xa0/0xa0
[ 1111.678873][T31334]  ? ip6_dst_lookup_tail+0x770/0x1280
[ 1111.684255][T31334]  rawv6_send_hdrinc+0x302/0x1690
[ 1111.689289][T31334]  ? rawv6_probe_proto_opt+0x300/0x300
[ 1111.694753][T31334]  ? txopt_get+0x303/0x3c0
[ 1111.699168][T31334]  ? fl6_sock_lookup+0xc0/0xc0
[ 1111.703936][T31334]  rawv6_sendmsg+0x11b1/0x1700
[ 1111.708714][T31334]  ? compat_rawv6_ioctl+0x60/0x60
[ 1111.713758][T31334]  ? aa_af_perm+0x340/0x340
[ 1111.718259][T31334]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1111.724677][T31334]  ? sock_rps_record_flow+0x17/0x3b0
[ 1111.729971][T31334]  ? inet_sendmsg+0x78/0x2f0
[ 1111.734562][T31334]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1111.739846][T31334]  ? security_socket_sendmsg+0x7c/0xa0
[ 1111.745303][T31334]  ? inet_send_prepare+0x260/0x260
[ 1111.750413][T31334]  ____sys_sendmsg+0x5b7/0x8f0
[ 1111.755186][T31334]  ? __sys_sendmsg_sock+0x30/0x30
[ 1111.760214][T31334]  ? import_iovec+0x6f/0xa0
[ 1111.764721][T31334]  ___sys_sendmsg+0x236/0x2e0
[ 1111.769420][T31334]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1111.774198][T31334]  ? vfs_write+0x8b2/0xd60
[ 1111.778636][T31334]  __se_sys_sendmsg+0x1af/0x290
[ 1111.783493][T31334]  ? __x64_sys_sendmsg+0x80/0x80
[ 1111.788450][T31334]  ? syscall_enter_from_user_mode+0x2a/0x70
[ 1111.794351][T31334]  do_syscall_64+0x4c/0xa0
[ 1111.798766][T31334]  ? clear_bhb_loop+0x30/0x80
[ 1111.803439][T31334]  ? clear_bhb_loop+0x30/0x80
[ 1111.808116][T31334]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1111.814009][T31334] RIP: 0033:0x7f5cc0929eb9
[ 1111.818425][T31334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1111.838024][T31334] RSP: 002b:00007f5cbeb85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1111.846438][T31334] RAX: ffffffffffffffda RBX: 00007f5cc0ba4fa0 RCX: 00007f5cc0929eb9
[ 1111.854407][T31334] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1111.862374][T31334] RBP: 00007f5cbeb85090 R08: 0000000000000000 R09: 0000000000000000
[ 1111.870339][T31334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1111.878305][T31334] R13: 00007f5cc0ba5038 R14: 00007f5cc0ba4fa0 R15: 00007fffb97b09f8
[ 1111.886287][T31334]  </TASK>
[ 1111.968057][T19193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.047638][T19193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.131593][T19193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.207259][T19193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.323777][T31355] chnl_net:caif_netlink_parms(): no params data found
[ 1112.612415][T31355] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.665833][T31355] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.787635][T31355] device bridge_slave_0 entered promiscuous mode
[ 1112.824702][T31355] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.862401][T31355] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1112.919364][T31355] device bridge_slave_1 entered promiscuous mode
[ 1113.124783][T31355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1113.796162][T31355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.874770][T31355] team0: Port device team_slave_0 added
[ 1113.887749][T31355] team0: Port device team_slave_1 added
[ 1113.918458][T31355] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.935284][T31355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1113.981527][T31355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1114.034259][T31355] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1114.047255][T31355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1114.067129][T31420] FAULT_INJECTION: forcing a failure.
[ 1114.067129][T31420] name failslab, interval 1, probability 0, space 0, times 0
[ 1114.090220][T31355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1114.130406][T31420] CPU: 1 PID: 31420 Comm: syz.0.9349 Not tainted syzkaller #0
[ 1114.137881][T31420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1114.147935][T31420] Call Trace:
[ 1114.151205][T31420]  <TASK>
[ 1114.154124][T31420]  dump_stack_lvl+0x188/0x250
[ 1114.158794][T31420]  ? show_regs_print_info+0x20/0x20
[ 1114.163981][T31420]  ? load_image+0x400/0x400
[ 1114.168478][T31420]  should_fail+0x38c/0x4c0
[ 1114.172884][T31420]  should_failslab+0x5/0x20
[ 1114.177368][T31420]  slab_pre_alloc_hook+0x51/0xc0
[ 1114.182289][T31420]  kmem_cache_alloc_trace+0x47/0x2a0
[ 1114.187557][T31420]  ? sctp_add_bind_addr+0x89/0x350
[ 1114.192655][T31420]  sctp_add_bind_addr+0x89/0x350
[ 1114.197578][T31420]  sctp_copy_local_addr_list+0x2dd/0x4a0
[ 1114.203196][T31420]  ? sctp_do_8_2_transport_strike+0x840/0x840
[ 1114.209248][T31420]  ? sctp_v6_is_any+0x60/0x70
[ 1114.213908][T31420]  ? sctp_copy_one_addr+0x93/0x660
[ 1114.219006][T31420]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1114.224127][T31420]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1114.230578][T31420]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1114.235858][T31420]  ? __sctp_connect+0xd80/0xd80
[ 1114.240690][T31420]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1114.246048][T31420]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1114.251576][T31420]  ? security_sctp_bind_connect+0x85/0xb0
[ 1114.257281][T31420]  sctp_sendmsg+0x158d/0x2900
[ 1114.261952][T31420]  ? aa_sk_perm+0x7dc/0x910
[ 1114.266446][T31420]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1114.271368][T31420]  ? aa_af_perm+0x340/0x340
[ 1114.275851][T31420]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1114.282255][T31420]  ? sock_rps_record_flow+0x17/0x3b0
[ 1114.287526][T31420]  ? inet_sendmsg+0xe5/0x2f0
[ 1114.292104][T31420]  ? inet_send_prepare+0x260/0x260
[ 1114.297197][T31420]  ____sys_sendmsg+0x5b7/0x8f0
[ 1114.301953][T31420]  ? __sys_sendmsg_sock+0x30/0x30
[ 1114.306966][T31420]  ? import_iovec+0x6f/0xa0
[ 1114.311455][T31420]  ___sys_sendmsg+0x236/0x2e0
[ 1114.316124][T31420]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1114.320879][T31420]  ? vfs_write+0x8b2/0xd60
[ 1114.325294][T31420]  __se_sys_sendmsg+0x1af/0x290
[ 1114.330130][T31420]  ? __x64_sys_sendmsg+0x80/0x80
[ 1114.335051][T31420]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1114.341027][T31420]  ? lockdep_hardirqs_on+0x94/0x140
[ 1114.346216][T31420]  do_syscall_64+0x4c/0xa0
[ 1114.350617][T31420]  ? clear_bhb_loop+0x30/0x80
[ 1114.355279][T31420]  ? clear_bhb_loop+0x30/0x80
[ 1114.359941][T31420]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1114.365817][T31420] RIP: 0033:0x7f2b131bceb9
[ 1114.370220][T31420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1114.389811][T31420] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1114.398209][T31420] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1114.406162][T31420] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003
[ 1114.414117][T31420] RBP: 00007f2b11418090 R08: 0000000000000000 R09: 0000000000000000
[ 1114.422068][T31420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1114.430020][T31420] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1114.437988][T31420]  </TASK>
[ 1114.443891][T17758] Bluetooth: hci0: command 0x0409 tx timeout
[ 1114.491326][T31416] validate_nla: 37 callbacks suppressed
[ 1114.491341][T31416] netlink: 'syz.1.9348': attribute type 16 has an invalid length.
[ 1114.516472][T31422] device bridge0 entered promiscuous mode
[ 1114.546247][T31355] device hsr_slave_0 entered promiscuous mode
[ 1114.591987][T31355] device hsr_slave_1 entered promiscuous mode
[ 1114.619683][T31355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1114.624237][T31433] netlink: 'syz.5.9352': attribute type 29 has an invalid length.
[ 1114.663093][T31355] Cannot create hsr debugfs directory
[ 1114.692308][T31433] netlink: 'syz.5.9352': attribute type 29 has an invalid length.
[ 1114.709184][T31436] netlink: 'syz.5.9352': attribute type 29 has an invalid length.
[ 1114.786027][T31439] netlink: 'syz.5.9352': attribute type 29 has an invalid length.
[ 1114.809389][T31433] netlink: 'syz.5.9352': attribute type 3 has an invalid length.
[ 1114.839818][T31436] netlink: 'syz.5.9352': attribute type 29 has an invalid length.
[ 1115.037953][T31450] netlink: 'syz.3.9355': attribute type 3 has an invalid length.
[ 1115.065437][T31450] netlink: 'syz.3.9355': attribute type 1 has an invalid length.
[ 1115.096320][T31450] __nla_validate_parse: 17 callbacks suppressed
[ 1115.096355][T31450] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9355'.
[ 1115.114443][T31453] netlink: 'syz.5.9356': attribute type 2 has an invalid length.
[ 1115.157422][T31453] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9356'.
[ 1115.216939][T31456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9357'.
[ 1115.297318][T31453] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9356'.
[ 1115.447685][T31468] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9360'.
[ 1115.470011][T31466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9359'.
[ 1115.642980][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.649322][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.748973][T31355] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1115.759488][T31476] FAULT_INJECTION: forcing a failure.
[ 1115.759488][T31476] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1115.803404][T31476] CPU: 0 PID: 31476 Comm: syz.1.9362 Not tainted syzkaller #0
[ 1115.810873][T31476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1115.820925][T31476] Call Trace:
[ 1115.824197][T31476]  <TASK>
[ 1115.827107][T31476]  dump_stack_lvl+0x188/0x250
[ 1115.831773][T31476]  ? show_regs_print_info+0x20/0x20
[ 1115.836971][T31476]  ? load_image+0x400/0x400
[ 1115.841464][T31476]  ? __lock_acquire+0x7d10/0x7d10
[ 1115.846481][T31476]  ? perf_trace_lock+0xe4/0x390
[ 1115.851322][T31476]  should_fail+0x38c/0x4c0
[ 1115.855749][T31476]  prepare_alloc_pages+0x1e4/0x5f0
[ 1115.860875][T31476]  __alloc_pages+0x11b/0x480
[ 1115.865465][T31476]  ? zone_statistics+0x170/0x170
[ 1115.870405][T31476]  pcpu_populate_chunk+0x15d/0xc80
[ 1115.875523][T31476]  ? _find_next_bit+0x1a9/0x200
[ 1115.880388][T31476]  pcpu_alloc+0xbf0/0x1770
[ 1115.884810][T31476]  bpf_map_alloc_percpu+0xc5/0x150
[ 1115.889902][T31476]  array_map_alloc+0x370/0x6f0
[ 1115.894656][T31476]  map_create+0x485/0x2350
[ 1115.899072][T31476]  __sys_bpf+0x30a/0x6f0
[ 1115.903303][T31476]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1115.908686][T31476]  ? vtime_user_exit+0x2c8/0x3e0
[ 1115.913636][T31476]  __x64_sys_bpf+0x78/0x90
[ 1115.918059][T31476]  do_syscall_64+0x4c/0xa0
[ 1115.922475][T31476]  ? clear_bhb_loop+0x30/0x80
[ 1115.927148][T31476]  ? clear_bhb_loop+0x30/0x80
[ 1115.931823][T31476]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1115.937714][T31476] RIP: 0033:0x7f5cc0929eb9
[ 1115.942128][T31476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1115.961716][T31476] RSP: 002b:00007f5cbeb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1115.970115][T31476] RAX: ffffffffffffffda RBX: 00007f5cc0ba4fa0 RCX: 00007f5cc0929eb9
[ 1115.978067][T31476] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000
[ 1115.986032][T31476] RBP: 00007f5cbeb85090 R08: 0000000000000000 R09: 0000000000000000
[ 1115.993989][T31476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1116.001956][T31476] R13: 00007f5cc0ba5038 R14: 00007f5cc0ba4fa0 R15: 00007fffb97b09f8
[ 1116.009923][T31476]  </TASK>
[ 1116.267273][T31355] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1116.327729][T31355] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1116.358155][T31355] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1116.379369][T31488] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9365'.
[ 1116.385487][T31490] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9366'.
[ 1116.409376][T19193] device team0 left promiscuous mode
[ 1116.419514][T19193] device team_slave_0 left promiscuous mode
[ 1116.436608][T19193] device team_slave_1 left promiscuous mode
[ 1116.457003][T19193] æV¦ôge0: port 1(team0) entered disabled state
[ 1116.501616][ T4227] Bluetooth: hci0: command 0x041b tx timeout
[ 1116.571531][T19193] device hsr_slave_0 left promiscuous mode
[ 1116.593353][T31496] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9368'.
[ 1116.660552][T19193] device hsr_slave_1 left promiscuous mode
[ 1116.668506][T19193] device bridge_slave_1 left promiscuous mode
[ 1116.681017][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.698728][T19193] device bridge_slave_0 left promiscuous mode
[ 1116.705091][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.718039][T19193] device veth1_macvtap left promiscuous mode
[ 1116.724727][T19193] device veth0_macvtap left promiscuous mode
[ 1116.731201][T19193] device veth1_vlan left promiscuous mode
[ 1116.736992][T19193] device veth0_vlan left promiscuous mode
[ 1116.943671][T19193] team0 (unregistering): Port device team_slave_1 removed
[ 1116.957498][T19193] team0 (unregistering): Port device team_slave_0 removed
[ 1116.972247][T19193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1116.985568][T19193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1117.048581][T19193] bond0 (unregistering): Released all slaves
[ 1117.103171][T31494] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9368'.
[ 1117.344293][T31355] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1117.458401][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1117.484191][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1117.549574][T31355] 8021q: adding VLAN 0 to HW filter on device team0
[ 1117.633832][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1117.664873][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1117.687668][T19208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.694776][T19208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1117.751464][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1117.771755][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1117.800028][T19208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.807175][T19208] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1117.822242][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1118.571028][ T4194] Bluetooth: hci0: command 0x040f tx timeout
[ 1118.721896][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1118.737256][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1118.835504][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1118.857674][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1118.881093][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1118.929817][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1118.945877][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1118.976493][T31355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1118.994032][T31355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1119.019297][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1119.039082][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1119.073702][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1119.109311][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1119.145470][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1119.599637][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1119.619586][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1119.661731][T31355] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1120.120661][T31615] __nla_validate_parse: 17 callbacks suppressed
[ 1120.120678][T31615] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.9393'.
[ 1120.262977][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1120.281334][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1120.309324][T31621] validate_nla: 33 callbacks suppressed
[ 1120.309338][T31621] netlink: 'syz.3.9393': attribute type 3 has an invalid length.
[ 1120.320092][T31355] device veth0_vlan entered promiscuous mode
[ 1120.350561][T31621] netlink: 'syz.3.9393': attribute type 1 has an invalid length.
[ 1120.358307][T31621] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9393'.
[ 1120.368871][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1120.384028][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1120.414632][T31355] device veth1_vlan entered promiscuous mode
[ 1120.429440][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1120.439439][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1120.461417][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1120.504996][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1120.527248][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1120.630707][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1120.652229][ T4227] Bluetooth: hci0: command 0x0419 tx timeout
[ 1120.691227][T31355] device veth0_macvtap entered promiscuous mode
[ 1120.717853][T31632] netlink: 'syz.1.9396': attribute type 2 has an invalid length.
[ 1120.790342][T31632] netlink: 'syz.1.9396': attribute type 8 has an invalid length.
[ 1120.798102][T31632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9396'.
[ 1120.939790][T31635] netlink: 'syz.1.9396': attribute type 21 has an invalid length.
[ 1120.978625][T31635] netlink: 'syz.1.9396': attribute type 20 has an invalid length.
[ 1121.094107][T31637] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9396'.
[ 1121.171945][T31355] device veth1_macvtap entered promiscuous mode
[ 1121.191214][T31639] netlink: 'syz.5.9398': attribute type 21 has an invalid length.
[ 1121.215746][T31639] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9398'.
[ 1121.297537][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1121.331700][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1121.383627][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1121.441937][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1121.483310][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1121.522876][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1121.553813][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1121.594654][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1121.629572][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1121.664429][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1121.716722][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1121.756154][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1121.814402][T31355] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1121.842855][T31647] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9399'.
[ 1121.866153][T31650] netlink: 'syz.3.9400': attribute type 21 has an invalid length.
[ 1121.885524][T31650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9400'.
[ 1121.915091][T31653] device bridge0 entered promiscuous mode
[ 1121.932535][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1121.949068][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1121.965204][T31658] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9402'.
[ 1121.972147][T31659] netlink: 'syz.0.9402': attribute type 3 has an invalid length.
[ 1121.980685][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.009156][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.010969][T31659] netlink: 'syz.0.9402': attribute type 1 has an invalid length.
[ 1122.020243][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.038102][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.055690][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.068897][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.071851][T31659] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9402'.
[ 1122.079486][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.099397][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.114420][T31355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1122.126804][T31355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1122.146744][T31355] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1122.169593][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1122.189281][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1122.240003][T31355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.252696][T31355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.271964][T31355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.281050][T31355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.292211][T31665] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.9404'.
[ 1122.494652][T19213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.510330][T19213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.539613][T19189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.558127][T19189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.576602][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1122.620977][T19202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1124.176183][T31738] FAULT_INJECTION: forcing a failure.
[ 1124.176183][T31738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1124.195638][T31738] CPU: 1 PID: 31738 Comm: syz.0.9430 Not tainted syzkaller #0
[ 1124.203108][T31738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1124.213162][T31738] Call Trace:
[ 1124.216439][T31738]  <TASK>
[ 1124.219456][T31738]  dump_stack_lvl+0x188/0x250
[ 1124.224142][T31738]  ? show_regs_print_info+0x20/0x20
[ 1124.229339][T31738]  ? load_image+0x400/0x400
[ 1124.234181][T31738]  ? __lock_acquire+0x7d10/0x7d10
[ 1124.239211][T31738]  ? perf_trace_lock_acquire+0xed/0x3e0
[ 1124.244765][T31738]  should_fail+0x38c/0x4c0
[ 1124.249187][T31738]  _copy_from_user+0x2e/0x170
[ 1124.253868][T31738]  __copy_msghdr_from_user+0xc9/0x630
[ 1124.259246][T31738]  ? verify_lock_unused+0x140/0x140
[ 1124.264452][T31738]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[ 1124.269759][T31738]  ___sys_sendmsg+0x19a/0x2e0
[ 1124.274454][T31738]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1124.279232][T31738]  ? trace_event_raw_event_lock+0x270/0x270
[ 1124.285127][T31738]  ? vfs_write+0x8b2/0xd60
[ 1124.289572][T31738]  __se_sys_sendmsg+0x1af/0x290
[ 1124.294426][T31738]  ? __x64_sys_sendmsg+0x80/0x80
[ 1124.299360][T31738]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1124.305359][T31738]  ? lockdep_hardirqs_on+0x94/0x140
[ 1124.310573][T31738]  do_syscall_64+0x4c/0xa0
[ 1124.314992][T31738]  ? clear_bhb_loop+0x30/0x80
[ 1124.319672][T31738]  ? clear_bhb_loop+0x30/0x80
[ 1124.324349][T31738]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1124.330233][T31738] RIP: 0033:0x7f2b131bceb9
[ 1124.334647][T31738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1124.354250][T31738] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1124.362662][T31738] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1124.370612][T31738] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003
[ 1124.378561][T31738] RBP: 00007f2b11418090 R08: 0000000000000000 R09: 0000000000000000
[ 1124.386511][T31738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1124.394468][T31738] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1124.402439][T31738]  </TASK>
[ 1124.759652][T31750] netlink: zone id is out of range
[ 1124.877416][T31750] netlink: zone id is out of range
[ 1124.958132][T31750] netlink: zone id is out of range
[ 1125.026289][T31750] netlink: zone id is out of range
[ 1125.094985][T31750] netlink: zone id is out of range
[ 1125.146131][T31750] netlink: zone id is out of range
[ 1125.173253][T31750] netlink: zone id is out of range
[ 1125.194476][T31750] netlink: zone id is out of range
[ 1125.209875][T31750] netlink: zone id is out of range
[ 1125.228546][T31750] netlink: zone id is out of range
[ 1125.914589][T31776] validate_nla: 32 callbacks suppressed
[ 1125.914604][T31776] netlink: 'syz.4.9439': attribute type 3 has an invalid length.
[ 1126.069463][T31776] __nla_validate_parse: 20 callbacks suppressed
[ 1126.069480][T31776] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9439'.
[ 1126.325168][T31787] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9445'.
[ 1126.359111][T31790] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9447'.
[ 1126.407794][T31787] netlink: 'syz.1.9445': attribute type 3 has an invalid length.
[ 1126.415912][T31791] netlink: 'syz.3.9448': attribute type 16 has an invalid length.
[ 1126.415937][T31791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9448'.
[ 1126.442593][T31787] netlink: 'syz.1.9445': attribute type 1 has an invalid length.
[ 1126.456819][T31787] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9445'.
[ 1126.480189][T31790] netlink: 'syz.5.9447': attribute type 3 has an invalid length.
[ 1126.510718][T31797] netlink: 'syz.0.9451': attribute type 21 has an invalid length.
[ 1126.518635][T31797] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9451'.
[ 1126.521904][T31790] netlink: 'syz.5.9447': attribute type 1 has an invalid length.
[ 1126.590733][T31790] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9447'.
[ 1126.656762][T31805] netlink: 'syz.4.9453': attribute type 3 has an invalid length.
[ 1126.665678][T31808] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9455'.
[ 1126.716530][T31805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9453'.
[ 1126.855271][T31808] netlink: 'syz.1.9455': attribute type 3 has an invalid length.
[ 1126.877522][T31808] netlink: 'syz.1.9455': attribute type 1 has an invalid length.
[ 1126.900610][T31808] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9455'.
[ 1130.096802][T31914] FAULT_INJECTION: forcing a failure.
[ 1130.096802][T31914] name failslab, interval 1, probability 0, space 0, times 0
[ 1130.180850][T31914] CPU: 1 PID: 31914 Comm: syz.1.9498 Not tainted syzkaller #0
[ 1130.188358][T31914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1130.198427][T31914] Call Trace:
[ 1130.201719][T31914]  <TASK>
[ 1130.204661][T31914]  dump_stack_lvl+0x188/0x250
[ 1130.209373][T31914]  ? show_regs_print_info+0x20/0x20
[ 1130.214587][T31914]  ? load_image+0x400/0x400
[ 1130.219148][T31914]  should_fail+0x38c/0x4c0
[ 1130.223594][T31914]  should_failslab+0x5/0x20
[ 1130.228109][T31914]  slab_pre_alloc_hook+0x51/0xc0
[ 1130.233080][T31914]  kmem_cache_alloc_trace+0x47/0x2a0
[ 1130.238375][T31914]  ? sctp_add_bind_addr+0x89/0x350
[ 1130.243510][T31914]  sctp_add_bind_addr+0x89/0x350
[ 1130.248474][T31914]  sctp_copy_local_addr_list+0x2dd/0x4a0
[ 1130.254140][T31914]  ? sctp_do_8_2_transport_strike+0x840/0x840
[ 1130.260224][T31914]  ? sctp_v6_is_any+0x60/0x70
[ 1130.264912][T31914]  ? sctp_copy_one_addr+0x93/0x660
[ 1130.270048][T31914]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1130.275088][T31914]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1130.281439][T31914]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1130.286743][T31914]  ? __sctp_connect+0xd80/0xd80
[ 1130.291601][T31914]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1130.297005][T31914]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1130.302560][T31914]  ? security_sctp_bind_connect+0x85/0xb0
[ 1130.308303][T31914]  sctp_sendmsg+0x158d/0x2900
[ 1130.313046][T31914]  ? aa_sk_perm+0x7dc/0x910
[ 1130.317563][T31914]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1130.322522][T31914]  ? aa_af_perm+0x340/0x340
[ 1130.327034][T31914]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1130.333482][T31914]  ? sock_rps_record_flow+0x17/0x3b0
[ 1130.338795][T31914]  ? inet_sendmsg+0xe5/0x2f0
[ 1130.343417][T31914]  ? inet_send_prepare+0x260/0x260
[ 1130.348547][T31914]  ____sys_sendmsg+0x5b7/0x8f0
[ 1130.353367][T31914]  ? __sys_sendmsg_sock+0x30/0x30
[ 1130.358440][T31914]  ? import_iovec+0x6f/0xa0
[ 1130.362981][T31914]  ___sys_sendmsg+0x236/0x2e0
[ 1130.367706][T31914]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1130.372611][T31914]  __se_sys_sendmsg+0x1af/0x290
[ 1130.377491][T31914]  ? __x64_sys_sendmsg+0x80/0x80
[ 1130.382447][T31914]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1130.388487][T31914]  ? lockdep_hardirqs_on+0x94/0x140
[ 1130.393717][T31914]  do_syscall_64+0x4c/0xa0
[ 1130.398146][T31914]  ? clear_bhb_loop+0x30/0x80
[ 1130.402837][T31914]  ? clear_bhb_loop+0x30/0x80
[ 1130.407533][T31914]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1130.413440][T31914] RIP: 0033:0x7f5cc0929eb9
[ 1130.417872][T31914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1130.437492][T31914] RSP: 002b:00007f5cbeb85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1130.445928][T31914] RAX: ffffffffffffffda RBX: 00007f5cc0ba4fa0 RCX: 00007f5cc0929eb9
[ 1130.453912][T31914] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[ 1130.461900][T31914] RBP: 00007f5cbeb85090 R08: 0000000000000000 R09: 0000000000000000
[ 1130.469885][T31914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1130.477870][T31914] R13: 00007f5cc0ba5038 R14: 00007f5cc0ba4fa0 R15: 00007fffb97b09f8
[ 1130.485908][T31914]  </TASK>
[ 1131.578599][T31941] validate_nla: 42 callbacks suppressed
[ 1131.578631][T31941] netlink: 'syz.1.9507': attribute type 3 has an invalid length.
[ 1131.659216][T31945] netlink: 'syz.4.9509': attribute type 3 has an invalid length.
[ 1131.689498][T31945] netlink: 'syz.4.9509': attribute type 1 has an invalid length.
[ 1131.699263][T31932] netlink: 'syz.0.9504': attribute type 29 has an invalid length.
[ 1131.712410][T31945] __nla_validate_parse: 24 callbacks suppressed
[ 1131.712440][T31945] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.9509'.
[ 1131.736944][T31932] netlink: 'syz.0.9504': attribute type 29 has an invalid length.
[ 1131.752733][T31946] netlink: 'syz.0.9504': attribute type 29 has an invalid length.
[ 1131.771489][T31944] netlink: 'syz.0.9504': attribute type 29 has an invalid length.
[ 1131.846564][T31941] netlink: 'syz.1.9507': attribute type 1 has an invalid length.
[ 1131.868313][T31951] netlink: 'syz.5.9511': attribute type 16 has an invalid length.
[ 1131.879555][T31941] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9507'.
[ 1131.885335][T31951] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9511'.
[ 1132.037933][T31963] device bridge0 entered promiscuous mode
[ 1132.498226][T31971] netlink: 'syz.5.9518': attribute type 21 has an invalid length.
[ 1132.533567][T31971] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9518'.
[ 1133.103342][T31979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9522'.
[ 1133.170528][T31985] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9523'.
[ 1133.183352][T31983] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9524'.
[ 1133.228840][T31983] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9524'.
[ 1133.304954][T31985] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9523'.
[ 1133.455708][T31987] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9525'.
[ 1133.644037][T32003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1133.692704][T32003] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1133.752678][T32003] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1134.433602][T19193] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1136.591849][T32077] validate_nla: 35 callbacks suppressed
[ 1136.591860][T32077] netlink: 'syz.1.9559': attribute type 3 has an invalid length.
[ 1136.605721][T32077] netlink: 'syz.1.9559': attribute type 1 has an invalid length.
[ 1136.626558][T32084] netlink: 'syz.5.9561': attribute type 3 has an invalid length.
[ 1136.643138][T32087] netlink: 'syz.0.9562': attribute type 3 has an invalid length.
[ 1136.675509][T32084] netlink: 'syz.5.9561': attribute type 1 has an invalid length.
[ 1136.692889][T32087] netlink: 'syz.0.9562': attribute type 1 has an invalid length.
[ 1136.720764][T32084] __nla_validate_parse: 20 callbacks suppressed
[ 1136.720801][T32084] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.9561'.
[ 1136.927040][T32095] netlink: 'syz.1.9565': attribute type 21 has an invalid length.
[ 1136.952279][T32095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9565'.
[ 1137.613008][T32101] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9567'.
[ 1137.626541][T32103] netlink: 'syz.5.9568': attribute type 16 has an invalid length.
[ 1137.690609][T32103] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9568'.
[ 1137.894032][T32101] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.9567'.
[ 1137.941970][T32117] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.9575'.
[ 1138.023322][T32117] netlink: 'syz.1.9575': attribute type 3 has an invalid length.
[ 1138.044017][T32125] netlink: 'syz.3.9574': attribute type 21 has an invalid length.
[ 1138.053369][T32117] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.9575'.
[ 1138.103019][T32125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9574'.
[ 1138.156229][T32134] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9577'.
[ 1138.179657][T32137] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9579'.
[ 1139.488947][T32154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1141.686669][T32225] FAULT_INJECTION: forcing a failure.
[ 1141.686669][T32225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1141.781387][T32225] CPU: 1 PID: 32225 Comm: syz.0.9611 Not tainted syzkaller #0
[ 1141.788973][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1141.799161][T32225] Call Trace:
[ 1141.802445][T32225]  <TASK>
[ 1141.805376][T32225]  dump_stack_lvl+0x188/0x250
[ 1141.810065][T32225]  ? show_regs_print_info+0x20/0x20
[ 1141.815269][T32225]  ? load_image+0x400/0x400
[ 1141.819781][T32225]  ? __lock_acquire+0x7d10/0x7d10
[ 1141.824810][T32225]  ? perf_trace_lock_acquire+0xed/0x3e0
[ 1141.830365][T32225]  should_fail+0x38c/0x4c0
[ 1141.834790][T32225]  _copy_from_user+0x2e/0x170
[ 1141.839475][T32225]  iovec_from_user+0x142/0x370
[ 1141.844251][T32225]  __import_iovec+0x70/0x490
[ 1141.848852][T32225]  import_iovec+0x6f/0xa0
[ 1141.853188][T32225]  ___sys_sendmsg+0x1fd/0x2e0
[ 1141.857879][T32225]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1141.862663][T32225]  ? vfs_write+0x8b2/0xd60
[ 1141.867105][T32225]  __se_sys_sendmsg+0x1af/0x290
[ 1141.871965][T32225]  ? __x64_sys_sendmsg+0x80/0x80
[ 1141.876905][T32225]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1141.882900][T32225]  ? lockdep_hardirqs_on+0x94/0x140
[ 1141.888102][T32225]  do_syscall_64+0x4c/0xa0
[ 1141.892522][T32225]  ? clear_bhb_loop+0x30/0x80
[ 1141.897202][T32225]  ? clear_bhb_loop+0x30/0x80
[ 1141.901880][T32225]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1141.907776][T32225] RIP: 0033:0x7f2b131bceb9
[ 1141.912192][T32225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.931798][T32225] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1141.940213][T32225] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1141.948179][T32225] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1141.956136][T32225] RBP: 00007f2b11418090 R08: 0000000000000000 R09: 0000000000000000
[ 1141.964091][T32225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1141.972043][T32225] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1141.980011][T32225]  </TASK>
[ 1142.310119][T32242] validate_nla: 14 callbacks suppressed
[ 1142.310159][T32242] netlink: 'syz.1.9619': attribute type 21 has an invalid length.
[ 1142.412136][T32242] __nla_validate_parse: 11 callbacks suppressed
[ 1142.412189][T32242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9619'.
[ 1142.476311][T32243] netlink: 'syz.4.9618': attribute type 16 has an invalid length.
[ 1142.496537][T32243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9618'.
[ 1142.510533][T32251] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9621'.
[ 1142.527861][T32253] netlink: 'syz.0.9621': attribute type 3 has an invalid length.
[ 1142.599692][T32253] netlink: 'syz.0.9621': attribute type 1 has an invalid length.
[ 1142.617551][T32255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9622'.
[ 1142.629610][T32257] FAULT_INJECTION: forcing a failure.
[ 1142.629610][T32257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1142.649458][T32253] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9621'.
[ 1142.671396][T32255] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.696982][T32257] CPU: 0 PID: 32257 Comm: syz.3.9623 Not tainted syzkaller #0
[ 1142.704453][T32257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1142.714504][T32257] Call Trace:
[ 1142.717779][T32257]  <TASK>
[ 1142.720709][T32257]  dump_stack_lvl+0x188/0x250
[ 1142.725394][T32257]  ? show_regs_print_info+0x20/0x20
[ 1142.730594][T32257]  ? load_image+0x400/0x400
[ 1142.735103][T32257]  ? __lock_acquire+0x7d10/0x7d10
[ 1142.740134][T32257]  should_fail+0x38c/0x4c0
[ 1142.744552][T32257]  _copy_from_iter+0x22e/0x1170
[ 1142.749401][T32257]  ? __lock_acquire+0x7d10/0x7d10
[ 1142.754430][T32257]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[ 1142.759805][T32257]  ? __virt_addr_valid+0x3c6/0x470
[ 1142.764910][T32257]  ? __phys_addr_symbol+0x2b/0x70
[ 1142.769930][T32257]  ? __check_object_size+0x30c/0x410
[ 1142.775214][T32257]  kcm_sendmsg+0xc47/0x2240
[ 1142.779758][T32257]  ? kcm_getsockopt+0x280/0x280
[ 1142.784604][T32257]  ? aa_sock_msg_perm+0x94/0x150
[ 1142.789539][T32257]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1142.794823][T32257]  ? security_socket_sendmsg+0x7c/0xa0
[ 1142.800279][T32257]  ? kcm_getsockopt+0x280/0x280
[ 1142.805126][T32257]  ____sys_sendmsg+0x5b7/0x8f0
[ 1142.809908][T32257]  ? __sys_sendmsg_sock+0x30/0x30
[ 1142.814943][T32257]  ? import_iovec+0x6f/0xa0
[ 1142.819452][T32257]  ___sys_sendmsg+0x236/0x2e0
[ 1142.824141][T32257]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1142.828943][T32257]  __se_sys_sendmsg+0x1af/0x290
[ 1142.833795][T32257]  ? __x64_sys_sendmsg+0x80/0x80
[ 1142.838727][T32257]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1142.844718][T32257]  ? lockdep_hardirqs_on+0x94/0x140
[ 1142.849917][T32257]  do_syscall_64+0x4c/0xa0
[ 1142.854328][T32257]  ? clear_bhb_loop+0x30/0x80
[ 1142.859002][T32257]  ? clear_bhb_loop+0x30/0x80
[ 1142.863679][T32257]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1142.869566][T32257] RIP: 0033:0x7fb3291beeb9
[ 1142.873977][T32257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.893576][T32257] RSP: 002b:00007fb32741a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1142.901986][T32257] RAX: ffffffffffffffda RBX: 00007fb329439fa0 RCX: 00007fb3291beeb9
[ 1142.909954][T32257] RDX: 0000000020000000 RSI: 0000200000000940 RDI: 0000000000000003
[ 1142.917922][T32257] RBP: 00007fb32741a090 R08: 0000000000000000 R09: 0000000000000000
[ 1142.925888][T32257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1142.933853][T32257] R13: 00007fb32943a038 R14: 00007fb329439fa0 R15: 00007ffe69df1688
[ 1142.941841][T32257]  </TASK>
[ 1142.970713][T32255] device bridge_slave_0 left promiscuous mode
[ 1143.000775][T32255] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1143.072504][T32260] netlink: 'syz.1.9622': attribute type 10 has an invalid length.
[ 1143.101538][T32260] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9622'.
[ 1143.580208][T32282] netlink: 'syz.1.9630': attribute type 3 has an invalid length.
[ 1143.595118][T32282] netlink: 'syz.1.9630': attribute type 1 has an invalid length.
[ 1143.618689][T32282] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9630'.
[ 1143.714389][T32287] netlink: 'syz.5.9633': attribute type 21 has an invalid length.
[ 1143.734236][T32287] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9633'.
[ 1143.765394][T32290] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9632'.
[ 1143.898458][T32293] netlink: 'syz.0.9634': attribute type 16 has an invalid length.
[ 1143.967268][T32293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9634'.
[ 1143.984039][T32298] netlink: 'syz.5.9646': attribute type 3 has an invalid length.
[ 1144.201372][T32301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1146.766820][T32431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.830987][T32431] device bridge_slave_0 left promiscuous mode
[ 1146.842958][T32431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.667094][T32451] validate_nla: 56 callbacks suppressed
[ 1147.667132][T32451] netlink: 'syz.4.9702': attribute type 29 has an invalid length.
[ 1147.730764][T32435] netlink: 'syz.5.9697': attribute type 2 has an invalid length.
[ 1147.749541][T32435] netlink: 'syz.5.9697': attribute type 8 has an invalid length.
[ 1147.759498][T32435] __nla_validate_parse: 30 callbacks suppressed
[ 1147.759510][T32435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9697'.
[ 1147.784777][T32436] netlink: 'syz.3.9696': attribute type 10 has an invalid length.
[ 1147.797440][T32436] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9696'.
[ 1148.048088][T32439] netlink: 'syz.5.9697': attribute type 21 has an invalid length.
[ 1148.060468][T32439] netlink: 'syz.5.9697': attribute type 20 has an invalid length.
[ 1148.071972][T32442] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9697'.
[ 1148.091343][T32446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9701'.
[ 1148.131685][T32451] netlink: 'syz.4.9702': attribute type 29 has an invalid length.
[ 1148.271860][T32461] netlink: 'syz.1.9705': attribute type 2 has an invalid length.
[ 1148.335415][T32461] netlink: 'syz.1.9705': attribute type 8 has an invalid length.
[ 1148.366955][T32469] netlink: 'syz.4.9708': attribute type 3 has an invalid length.
[ 1148.383872][T32469] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.9708'.
[ 1148.390389][T32461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9705'.
[ 1148.421096][T32459] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9704'.
[ 1148.440212][T32463] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.9707'.
[ 1148.465275][T32465] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.9708'.
[ 1148.700618][T32473] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9709'.
[ 1149.587921][T32520] FAULT_INJECTION: forcing a failure.
[ 1149.587921][T32520] name failslab, interval 1, probability 0, space 0, times 0
[ 1149.602233][T32520] CPU: 0 PID: 32520 Comm: syz.3.9730 Not tainted syzkaller #0
[ 1149.609708][T32520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1149.619771][T32520] Call Trace:
[ 1149.623052][T32520]  <TASK>
[ 1149.625984][T32520]  dump_stack_lvl+0x188/0x250
[ 1149.630679][T32520]  ? show_regs_print_info+0x20/0x20
[ 1149.635889][T32520]  ? load_image+0x400/0x400
[ 1149.640411][T32520]  ? __might_sleep+0xf0/0xf0
[ 1149.645011][T32520]  ? __lock_acquire+0x7d10/0x7d10
[ 1149.650052][T32520]  should_fail+0x38c/0x4c0
[ 1149.654484][T32520]  should_failslab+0x5/0x20
[ 1149.658994][T32520]  slab_pre_alloc_hook+0x51/0xc0
[ 1149.663943][T32520]  kmem_cache_alloc_node+0x47/0x2d0
[ 1149.669142][T32520]  ? __alloc_skb+0xf4/0x750
[ 1149.673664][T32520]  __alloc_skb+0xf4/0x750
[ 1149.678013][T32520]  __ip6_append_data+0x266c/0x38c0
[ 1149.683195][T32520]  ? ip6_setup_cork+0x11e0/0x11e0
[ 1149.688236][T32520]  ? ip6_setup_cork+0xc63/0x11e0
[ 1149.693194][T32520]  ip6_append_data+0x1d4/0x310
[ 1149.697963][T32520]  ? inet6_sk+0xe0/0xe0
[ 1149.702136][T32520]  ? inet6_sk+0xe0/0xe0
[ 1149.706309][T32520]  ping_v6_sendmsg+0xa95/0x1030
[ 1149.711183][T32520]  ? tcpv6_net_exit_batch+0x20/0x20
[ 1149.716390][T32520]  ? lock_chain_count+0x20/0x20
[ 1149.721261][T32520]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.726639][T32520]  ? lockdep_hardirqs_on+0x94/0x140
[ 1149.731848][T32520]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1149.737225][T32520]  ? _local_bh_enable+0xa0/0xa0
[ 1149.742090][T32520]  ? inet_sendmsg+0x147/0x2f0
[ 1149.746776][T32520]  ? inet_sendmsg+0x147/0x2f0
[ 1149.751466][T32520]  ? inet_send_prepare+0x260/0x260
[ 1149.756583][T32520]  ____sys_sendmsg+0x5b7/0x8f0
[ 1149.761370][T32520]  ? __sys_sendmsg_sock+0x30/0x30
[ 1149.766417][T32520]  ? import_iovec+0x6f/0xa0
[ 1149.770932][T32520]  ___sys_sendmsg+0x236/0x2e0
[ 1149.775634][T32520]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1149.780478][T32520]  __se_sys_sendmsg+0x1af/0x290
[ 1149.785339][T32520]  ? __x64_sys_sendmsg+0x80/0x80
[ 1149.790277][T32520]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1149.796288][T32520]  ? lockdep_hardirqs_on+0x94/0x140
[ 1149.801503][T32520]  do_syscall_64+0x4c/0xa0
[ 1149.805924][T32520]  ? clear_bhb_loop+0x30/0x80
[ 1149.810603][T32520]  ? clear_bhb_loop+0x30/0x80
[ 1149.815284][T32520]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1149.821179][T32520] RIP: 0033:0x7fb3291beeb9
[ 1149.825602][T32520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.845209][T32520] RSP: 002b:00007fb32741a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1149.853633][T32520] RAX: ffffffffffffffda RBX: 00007fb329439fa0 RCX: 00007fb3291beeb9
[ 1149.861606][T32520] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[ 1149.869595][T32520] RBP: 00007fb32741a090 R08: 0000000000000000 R09: 0000000000000000
[ 1149.877571][T32520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1149.885543][T32520] R13: 00007fb32943a038 R14: 00007fb329439fa0 R15: 00007ffe69df1688
[ 1149.893521][T32520]  </TASK>
[ 1151.634075][T32576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.673140][T32576] device bridge_slave_0 left promiscuous mode
[ 1151.685538][T32576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1152.193227][T19189] syzkaller: port 1(erspan0) entered disabled state
[ 1152.210355][T19189] device erspan0 left promiscuous mode
[ 1152.229210][T19189] syzkaller: port 1(erspan0) entered disabled state
[ 1152.778055][T32644] __nla_validate_parse: 39 callbacks suppressed
[ 1152.778069][T32644] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9779'.
[ 1152.807863][T19189] device team0 left promiscuous mode
[ 1152.814624][T19189] device team_slave_0 left promiscuous mode
[ 1152.827282][T19189] device team_slave_1 left promiscuous mode
[ 1152.840381][T19189] æV¦ôge0: port 1(team0) entered disabled state
[ 1152.872435][T32644] validate_nla: 74 callbacks suppressed
[ 1152.872471][T32644] netlink: 'syz.0.9779': attribute type 3 has an invalid length.
[ 1152.888986][T32644] netlink: 'syz.0.9779': attribute type 1 has an invalid length.
[ 1152.897165][T19189] device hsr_slave_0 left promiscuous mode
[ 1152.897804][T32644] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9779'.
[ 1152.915113][T19189] device hsr_slave_1 left promiscuous mode
[ 1152.962678][T19189] device bridge_slave_1 left promiscuous mode
[ 1152.980089][T19189] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.009073][T19189] device bridge_slave_0 left promiscuous mode
[ 1153.015293][T19189] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.034093][T19189] device veth1_macvtap left promiscuous mode
[ 1153.040131][T19189] device veth0_macvtap left promiscuous mode
[ 1153.059734][T19189] device veth1_vlan left promiscuous mode
[ 1153.071092][T19189] device veth0_vlan left promiscuous mode
[ 1153.159007][T32666] netlink: 'syz.0.9786': attribute type 3 has an invalid length.
[ 1153.170236][T32666] netlink: 'syz.0.9786': attribute type 1 has an invalid length.
[ 1153.184304][T32666] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9786'.
[ 1153.316938][T19189] team0 (unregistering): Port device team_slave_1 removed
[ 1153.333635][T19189] team0 (unregistering): Port device team_slave_0 removed
[ 1153.348321][T19189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1153.364424][T19189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1153.419039][T19189] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1153.428087][T19189] bond0 (unregistering): Released all slaves
[ 1153.489158][T32646] netlink: 'syz.4.9780': attribute type 2 has an invalid length.
[ 1153.497145][T32646] netlink: 'syz.4.9780': attribute type 8 has an invalid length.
[ 1153.505439][T32646] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9780'.
[ 1153.515074][T32650] netlink: 'syz.4.9780': attribute type 21 has an invalid length.
[ 1153.523507][T32650] netlink: 'syz.4.9780': attribute type 20 has an invalid length.
[ 1153.532122][T32651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9780'.
[ 1153.542660][T32649] netlink: 'syz.5.9781': attribute type 25 has an invalid length.
[ 1153.553286][T32665] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9786'.
[ 1153.660209][T32671] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.9790'.
[ 1153.740953][T32676] netlink: 'syz.0.9791': attribute type 25 has an invalid length.
[ 1153.760634][T32678] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9790'.
[ 1153.858405][T32685] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9794'.
[ 1154.102908][T32691] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9794'.
[ 1154.180909][T32699] FAULT_INJECTION: forcing a failure.
[ 1154.180909][T32699] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.210727][T32699] CPU: 1 PID: 32699 Comm: syz.5.9799 Not tainted syzkaller #0
[ 1154.218201][T32699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1154.228256][T32699] Call Trace:
[ 1154.231524][T32699]  <TASK>
[ 1154.234441][T32699]  dump_stack_lvl+0x188/0x250
[ 1154.239107][T32699]  ? show_regs_print_info+0x20/0x20
[ 1154.244286][T32699]  ? load_image+0x400/0x400
[ 1154.248774][T32699]  ? __might_sleep+0xf0/0xf0
[ 1154.253342][T32699]  ? __lock_acquire+0x7d10/0x7d10
[ 1154.258358][T32699]  should_fail+0x38c/0x4c0
[ 1154.262766][T32699]  should_failslab+0x5/0x20
[ 1154.267250][T32699]  slab_pre_alloc_hook+0x51/0xc0
[ 1154.272178][T32699]  __kmalloc+0x6b/0x330
[ 1154.276323][T32699]  ? tomoyo_encode+0x27e/0x540
[ 1154.281075][T32699]  tomoyo_encode+0x27e/0x540
[ 1154.285659][T32699]  tomoyo_realpath_from_path+0x5cd/0x610
[ 1154.291286][T32699]  tomoyo_path_number_perm+0x242/0x660
[ 1154.296736][T32699]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1154.302177][T32699]  ? perf_trace_lock+0xe4/0x390
[ 1154.307054][T32699]  security_file_ioctl+0x6c/0xa0
[ 1154.311978][T32699]  __se_sys_ioctl+0x48/0x170
[ 1154.316555][T32699]  do_syscall_64+0x4c/0xa0
[ 1154.320955][T32699]  ? clear_bhb_loop+0x30/0x80
[ 1154.325615][T32699]  ? clear_bhb_loop+0x30/0x80
[ 1154.330273][T32699]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1154.336147][T32699] RIP: 0033:0x7f328df91eb9
[ 1154.340549][T32699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1154.360134][T32699] RSP: 002b:00007f328c1ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1154.368531][T32699] RAX: ffffffffffffffda RBX: 00007f328e20cfa0 RCX: 00007f328df91eb9
[ 1154.376486][T32699] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 0000000000000004
[ 1154.384446][T32699] RBP: 00007f328c1ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1154.392399][T32699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1154.400351][T32699] R13: 00007f328e20d038 R14: 00007f328e20cfa0 R15: 00007ffd41f79938
[ 1154.408321][T32699]  </TASK>
[ 1154.472200][T32699] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1154.544172][T32703] FAULT_INJECTION: forcing a failure.
[ 1154.544172][T32703] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.557634][T32703] CPU: 1 PID: 32703 Comm: syz.4.9801 Not tainted syzkaller #0
[ 1154.565097][T32703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1154.575149][T32703] Call Trace:
[ 1154.578428][T32703]  <TASK>
[ 1154.581358][T32703]  dump_stack_lvl+0x188/0x250
[ 1154.586038][T32703]  ? show_regs_print_info+0x20/0x20
[ 1154.591236][T32703]  ? load_image+0x400/0x400
[ 1154.595749][T32703]  ? __might_sleep+0xf0/0xf0
[ 1154.600341][T32703]  ? __lock_acquire+0x7d10/0x7d10
[ 1154.605381][T32703]  should_fail+0x38c/0x4c0
[ 1154.609807][T32703]  should_failslab+0x5/0x20
[ 1154.614311][T32703]  slab_pre_alloc_hook+0x51/0xc0
[ 1154.619249][T32703]  ? __d_alloc+0x2a/0x6f0
[ 1154.623579][T32703]  kmem_cache_alloc+0x3d/0x290
[ 1154.628346][T32703]  __d_alloc+0x2a/0x6f0
[ 1154.632506][T32703]  d_alloc_parallel+0x7b/0x1330
[ 1154.637358][T32703]  ? __d_lookup+0x6a6/0x760
[ 1154.641870][T32703]  path_openat+0x95e/0x2fa0
[ 1154.646393][T32703]  ? verify_lock_unused+0x140/0x140
[ 1154.651595][T32703]  ? slab_post_alloc_hook+0x4c/0x380
[ 1154.656890][T32703]  ? do_filp_open+0x410/0x410
[ 1154.661588][T32703]  do_filp_open+0x1e2/0x410
[ 1154.666098][T32703]  ? vfs_tmpfile+0x300/0x300
[ 1154.670699][T32703]  ? noop_direct_IO+0x10/0x10
[ 1154.675385][T32703]  ? _raw_spin_unlock+0x24/0x40
[ 1154.680237][T32703]  ? alloc_fd+0x598/0x630
[ 1154.684568][T32703]  do_sys_openat2+0x150/0x4b0
[ 1154.689264][T32703]  ? __lock_acquire+0x7d10/0x7d10
[ 1154.694290][T32703]  ? do_sys_open+0xe0/0xe0
[ 1154.698702][T32703]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1154.704683][T32703]  ? lock_chain_count+0x20/0x20
[ 1154.709535][T32703]  ? vtime_user_exit+0x2c8/0x3e0
[ 1154.714475][T32703]  __x64_sys_openat+0x135/0x160
[ 1154.719337][T32703]  do_syscall_64+0x4c/0xa0
[ 1154.723748][T32703]  ? clear_bhb_loop+0x30/0x80
[ 1154.728419][T32703]  ? clear_bhb_loop+0x30/0x80
[ 1154.733095][T32703]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1154.738982][T32703] RIP: 0033:0x7fdcf774078e
[ 1154.743391][T32703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1154.762992][T32703] RSP: 002b:00007fdcf59daec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1154.771406][T32703] RAX: ffffffffffffffda RBX: 00007fdcf59db6c0 RCX: 00007fdcf774078e
[ 1154.779373][T32703] RDX: 0000000000000000 RSI: 00007fdcf59daf90 RDI: ffffffffffffff9c
[ 1154.787343][T32703] RBP: 00007fdcf59db090 R08: 0000000000000000 R09: 0000000000000000
[ 1154.795318][T32703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1154.803289][T32703] R13: 00007fdcf79fb038 R14: 00007fdcf79fafa0 R15: 00007fff21004668
[ 1154.811273][T32703]  </TASK>
[ 1155.102358][T32726] FAULT_INJECTION: forcing a failure.
[ 1155.102358][T32726] name failslab, interval 1, probability 0, space 0, times 0
[ 1155.151503][T32726] CPU: 1 PID: 32726 Comm: syz.0.9811 Not tainted syzkaller #0
[ 1155.158996][T32726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1155.169053][T32726] Call Trace:
[ 1155.172333][T32726]  <TASK>
[ 1155.175270][T32726]  dump_stack_lvl+0x188/0x250
[ 1155.179955][T32726]  ? show_regs_print_info+0x20/0x20
[ 1155.185161][T32726]  ? load_image+0x400/0x400
[ 1155.189671][T32726]  ? __might_sleep+0xf0/0xf0
[ 1155.194265][T32726]  ? __lock_acquire+0x7d10/0x7d10
[ 1155.199298][T32726]  should_fail+0x38c/0x4c0
[ 1155.203724][T32726]  should_failslab+0x5/0x20
[ 1155.208222][T32726]  slab_pre_alloc_hook+0x51/0xc0
[ 1155.213157][T32726]  kmem_cache_alloc_node+0x47/0x2d0
[ 1155.218362][T32726]  ? __alloc_skb+0xf4/0x750
[ 1155.222881][T32726]  __alloc_skb+0xf4/0x750
[ 1155.227219][T32726]  alloc_skb_with_frags+0xa7/0x730
[ 1155.232327][T32726]  ? mark_lock+0x94/0x320
[ 1155.236664][T32726]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1155.241880][T32726]  ? sock_kzfree_s+0x50/0x50
[ 1155.246484][T32726]  tun_get_user+0x7c8/0x3a70
[ 1155.251094][T32726]  ? tun_ring_recv+0xc40/0xc40
[ 1155.255865][T32726]  ? rcu_lock_release+0x5/0x20
[ 1155.260627][T32726]  ? __lock_acquire+0x7d10/0x7d10
[ 1155.265667][T32726]  tun_chr_write_iter+0x112/0x1e0
[ 1155.270693][T32726]  vfs_write+0x745/0xd60
[ 1155.274937][T32726]  ? file_end_write+0x250/0x250
[ 1155.279795][T32726]  ? __fget_files+0x40f/0x480
[ 1155.284483][T32726]  ? __fdget_pos+0x1e2/0x370
[ 1155.289072][T32726]  ? ksys_write+0x71/0x260
[ 1155.293487][T32726]  ksys_write+0x152/0x260
[ 1155.297819][T32726]  ? __ia32_sys_read+0x80/0x80
[ 1155.302589][T32726]  ? lockdep_hardirqs_on+0x94/0x140
[ 1155.307789][T32726]  do_syscall_64+0x4c/0xa0
[ 1155.312202][T32726]  ? clear_bhb_loop+0x30/0x80
[ 1155.316877][T32726]  ? clear_bhb_loop+0x30/0x80
[ 1155.321553][T32726]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1155.327447][T32726] RIP: 0033:0x7f2b131bceb9
[ 1155.331863][T32726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1155.351464][T32726] RSP: 002b:00007f2b113f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1155.359877][T32726] RAX: ffffffffffffffda RBX: 00007f2b13438090 RCX: 00007f2b131bceb9
[ 1155.367848][T32726] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8
[ 1155.375818][T32726] RBP: 00007f2b113f7090 R08: 0000000000000000 R09: 0000000000000000
[ 1155.383784][T32726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1155.391749][T32726] R13: 00007f2b13438128 R14: 00007f2b13438090 R15: 00007fff227d7928
[ 1155.399716][T32726]  </TASK>
[ 1155.818103][T32757] sctp: [Deprecated]: syz.1.9820 (pid 32757) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1155.818103][T32757] Use struct sctp_sack_info instead
[ 1157.839841][  T366] net_ratelimit: 22 callbacks suppressed
[ 1157.839858][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.879396][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.893232][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.906015][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.918186][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.931973][  T369] validate_nla: 63 callbacks suppressed
[ 1157.932019][  T369] netlink: 'syz.5.9854': attribute type 21 has an invalid length.
[ 1157.952463][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.963761][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.974348][  T369] netlink: 'syz.5.9854': attribute type 20 has an invalid length.
[ 1157.983039][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1157.994357][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1158.014440][  T366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1158.019205][  T371] __nla_validate_parse: 25 callbacks suppressed
[ 1158.019218][  T371] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9854'.
[ 1158.766126][  T377] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.9857'.
[ 1158.802542][  T379] netlink: 'syz.4.9860': attribute type 3 has an invalid length.
[ 1158.824381][  T375] netlink: 'syz.5.9858': attribute type 21 has an invalid length.
[ 1158.841032][  T379] netlink: 'syz.4.9860': attribute type 1 has an invalid length.
[ 1158.849206][  T379] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9860'.
[ 1158.863523][  T375] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9858'.
[ 1158.885971][  T377] netlink: 'syz.0.9857': attribute type 3 has an invalid length.
[ 1158.943789][  T377] netlink: 'syz.0.9857': attribute type 1 has an invalid length.
[ 1158.963307][  T377] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9857'.
[ 1159.005452][  T390] netlink: 'syz.4.9862': attribute type 16 has an invalid length.
[ 1159.016720][  T390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9862'.
[ 1159.068762][  T392] netlink: 'syz.5.9863': attribute type 25 has an invalid length.
[ 1159.169046][  T394] netlink: 'syz.0.9864': attribute type 29 has an invalid length.
[ 1159.403337][  T394] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9864'.
[ 1159.505870][  T405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9868'.
[ 1159.527055][  T408] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9869'.
[ 1159.610204][  T408] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9869'.
[ 1159.872307][  T415] team0: Port device wlan1 added
[ 1159.904340][  T413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1162.277409][  T504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1162.629647][  T513] team0: Port device wlan1 added
[ 1162.718273][  T512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1163.016907][  T544] validate_nla: 63 callbacks suppressed
[ 1163.016939][  T544] netlink: 'syz.1.9927': attribute type 3 has an invalid length.
[ 1163.082700][  T544] netlink: 'syz.1.9927': attribute type 1 has an invalid length.
[ 1163.111948][  T544] __nla_validate_parse: 25 callbacks suppressed
[ 1163.111995][  T544] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9927'.
[ 1163.209163][  T555] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.9932'.
[ 1163.260615][  T553] netlink: 'syz.3.9930': attribute type 21 has an invalid length.
[ 1163.304061][  T555] netlink: 'syz.5.9932': attribute type 3 has an invalid length.
[ 1163.310106][  T553] netlink: 'syz.3.9930': attribute type 20 has an invalid length.
[ 1163.313837][  T555] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.9932'.
[ 1163.376009][  T556] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9930'.
[ 1163.512932][  T560] netlink: 'syz.5.9935': attribute type 3 has an invalid length.
[ 1163.536251][  T560] netlink: 'syz.5.9935': attribute type 1 has an invalid length.
[ 1163.550141][  T562] netlink: 'syz.3.9934': attribute type 21 has an invalid length.
[ 1163.559806][  T562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9934'.
[ 1163.570453][  T560] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9935'.
[ 1163.679778][  T564] netlink: 'syz.5.9936': attribute type 10 has an invalid length.
[ 1163.774385][  T564] team0: Port device wlan1 added
[ 1163.784593][  T566] netlink: 'syz.3.9937': attribute type 21 has an invalid length.
[ 1163.807357][  T566] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9937'.
[ 1163.839424][  T563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1164.013445][  T569] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9938'.
[ 1164.261191][  T584] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.9944'.
[ 1164.290058][  T589] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.9946'.
[ 1164.330145][  T595] FAULT_INJECTION: forcing a failure.
[ 1164.330145][  T595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1164.344871][  T595] CPU: 1 PID: 595 Comm: syz.0.9949 Not tainted syzkaller #0
[ 1164.352169][  T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1164.362230][  T595] Call Trace:
[ 1164.365507][  T595]  <TASK>
[ 1164.368437][  T595]  dump_stack_lvl+0x188/0x250
[ 1164.373120][  T595]  ? show_regs_print_info+0x20/0x20
[ 1164.378301][  T595]  ? load_image+0x400/0x400
[ 1164.382793][  T595]  ? __lock_acquire+0x7d10/0x7d10
[ 1164.387820][  T595]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[ 1164.394391][  T595]  should_fail+0x38c/0x4c0
[ 1164.398793][  T595]  _copy_from_user+0x2e/0x170
[ 1164.403455][  T595]  ___sys_recvmsg+0x173/0x5c0
[ 1164.408132][  T595]  ? __sys_recvmsg+0x280/0x280
[ 1164.412887][  T595]  ? __lock_acquire+0x7d10/0x7d10
[ 1164.417904][  T595]  __x64_sys_recvmsg+0x1f9/0x2c0
[ 1164.422828][  T595]  ? ___sys_recvmsg+0x5c0/0x5c0
[ 1164.427677][  T595]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1164.433731][  T595]  ? lockdep_hardirqs_on+0x94/0x140
[ 1164.438919][  T595]  do_syscall_64+0x4c/0xa0
[ 1164.443316][  T595]  ? clear_bhb_loop+0x30/0x80
[ 1164.447993][  T595]  ? clear_bhb_loop+0x30/0x80
[ 1164.452663][  T595]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1164.458541][  T595] RIP: 0033:0x7f2b131bceb9
[ 1164.462939][  T595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1164.482541][  T595] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1164.490952][  T595] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1164.498920][  T595] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003
[ 1164.506870][  T595] RBP: 00007f2b11418090 R08: 0000000000000000 R09: 0000000000000000
[ 1164.514821][  T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1164.522780][  T595] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1164.530765][  T595]  </TASK>
[ 1165.353333][  T640] net_ratelimit: 6816 callbacks suppressed
[ 1165.353348][  T640] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1165.380302][  T640] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1165.558990][  T642] device aaaaaaaaaaaaaaa entered promiscuous mode
[ 1166.428943][  T683] device aaaaaaaaaaaaaaa entered promiscuous mode
[ 1167.599331][  T726] device aaaaaaaaaaaaaaa entered promiscuous mode
[ 1167.625250][  T730] nr0: port 1(hsr0) entered blocking state
[ 1167.632812][  T730] nr0: port 1(hsr0) entered disabled state
[ 1167.650112][  T730] device hsr0 entered promiscuous mode
[ 1167.791167][  T737] FAULT_INJECTION: forcing a failure.
[ 1167.791167][  T737] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1167.806088][  T737] CPU: 1 PID: 737 Comm: syz.0.10010 Not tainted syzkaller #0
[ 1167.813478][  T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1167.823607][  T737] Call Trace:
[ 1167.826878][  T737]  <TASK>
[ 1167.829793][  T737]  dump_stack_lvl+0x188/0x250
[ 1167.834460][  T737]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1167.840600][  T737]  ? show_regs_print_info+0x20/0x20
[ 1167.845779][  T737]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1167.851921][  T737]  should_fail+0x38c/0x4c0
[ 1167.856325][  T737]  prepare_alloc_pages+0x1e4/0x5f0
[ 1167.861423][  T737]  __alloc_pages+0x11b/0x480
[ 1167.865997][  T737]  ? zone_statistics+0x170/0x170
[ 1167.870922][  T737]  ? alloc_pages+0x438/0x550
[ 1167.875497][  T737]  alloc_skb_with_frags+0x215/0x730
[ 1167.880684][  T737]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1167.885862][  T737]  ? __might_fault+0xb3/0x110
[ 1167.890531][  T737]  ? sock_kzfree_s+0x50/0x50
[ 1167.895105][  T737]  ? iov_iter_advance+0x202/0x390
[ 1167.900131][  T737]  tun_get_user+0x7c8/0x3a70
[ 1167.904738][  T737]  ? tun_ring_recv+0xc40/0xc40
[ 1167.909495][  T737]  ? rcu_lock_release+0x5/0x20
[ 1167.914247][  T737]  ? __lock_acquire+0x7d10/0x7d10
[ 1167.919270][  T737]  tun_chr_write_iter+0x112/0x1e0
[ 1167.924283][  T737]  vfs_write+0x745/0xd60
[ 1167.928518][  T737]  ? file_end_write+0x250/0x250
[ 1167.933360][  T737]  ? __fget_files+0x40f/0x480
[ 1167.938031][  T737]  ? __fdget_pos+0x1e2/0x370
[ 1167.942603][  T737]  ? ksys_write+0x71/0x260
[ 1167.947004][  T737]  ksys_write+0x152/0x260
[ 1167.951318][  T737]  ? __ia32_sys_read+0x80/0x80
[ 1167.956072][  T737]  ? lockdep_hardirqs_on+0x94/0x140
[ 1167.961260][  T737]  do_syscall_64+0x4c/0xa0
[ 1167.965663][  T737]  ? clear_bhb_loop+0x30/0x80
[ 1167.970327][  T737]  ? clear_bhb_loop+0x30/0x80
[ 1167.974994][  T737]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1167.980877][  T737] RIP: 0033:0x7f2b131bceb9
[ 1167.985289][  T737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1168.004884][  T737] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1168.013285][  T737] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1168.021240][  T737] RDX: 000000000000ffe7 RSI: 0000200000000500 RDI: 0000000000000003
[ 1168.029194][  T737] RBP: 00007f2b11418090 R08: 0000000000000000 R09: 0000000000000000
[ 1168.037151][  T737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1168.045103][  T737] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1168.053074][  T737]  </TASK>
[ 1168.261331][  T748] __nla_validate_parse: 28 callbacks suppressed
[ 1168.261346][  T748] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.10015'.
[ 1168.289502][  T746] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10014'.
[ 1168.349889][  T755] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.10018'.
[ 1168.506135][  T759] validate_nla: 47 callbacks suppressed
[ 1168.506173][  T759] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.561458][  T759] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.624920][  T762] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.655828][  T764] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.707440][  T762] netlink: 'syz.5.10019': attribute type 3 has an invalid length.
[ 1168.724997][  T759] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.749299][  T762] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10019'.
[ 1168.765306][  T773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10024'.
[ 1168.775881][  T773] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10024'.
[ 1168.788109][  T765] device aaaaaaaaaaaaaaa entered promiscuous mode
[ 1168.797142][  T759] netlink: 'syz.5.10019': attribute type 29 has an invalid length.
[ 1168.902754][  T783] netlink: 'syz.0.10027': attribute type 28 has an invalid length.
[ 1168.927901][  T783] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10027'.
[ 1168.944079][  T780] netlink: 'syz.3.10025': attribute type 3 has an invalid length.
[ 1168.978172][  T790] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.10030'.
[ 1168.986635][  T791] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.10031'.
[ 1168.987814][  T780] netlink: 'syz.3.10025': attribute type 1 has an invalid length.
[ 1169.034393][  T791] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10031'.
[ 1169.351451][  T805] FAULT_INJECTION: forcing a failure.
[ 1169.351451][  T805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1169.372383][  T805] CPU: 1 PID: 805 Comm: syz.5.10038 Not tainted syzkaller #0
[ 1169.379777][  T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1169.389834][  T805] Call Trace:
[ 1169.393120][  T805]  <TASK>
[ 1169.396056][  T805]  dump_stack_lvl+0x188/0x250
[ 1169.400748][  T805]  ? show_regs_print_info+0x20/0x20
[ 1169.405957][  T805]  ? load_image+0x400/0x400
[ 1169.410478][  T805]  ? __lock_acquire+0x7d10/0x7d10
[ 1169.415518][  T805]  should_fail+0x38c/0x4c0
[ 1169.419948][  T805]  _copy_to_user+0x2e/0x130
[ 1169.424462][  T805]  simple_read_from_buffer+0xe3/0x150
[ 1169.429843][  T805]  proc_fail_nth_read+0x1a6/0x220
[ 1169.434878][  T805]  ? proc_fault_inject_write+0x310/0x310
[ 1169.440519][  T805]  ? fsnotify_perm+0x254/0x560
[ 1169.445279][  T805]  ? proc_fault_inject_write+0x310/0x310
[ 1169.450903][  T805]  vfs_read+0x301/0xd60
[ 1169.455060][  T805]  ? kernel_read+0x1e0/0x1e0
[ 1169.459641][  T805]  ? __fget_files+0x40f/0x480
[ 1169.464307][  T805]  ? mutex_lock_nested+0x17/0x20
[ 1169.469231][  T805]  ? __fdget_pos+0x2bf/0x370
[ 1169.473804][  T805]  ? ksys_read+0x71/0x260
[ 1169.478117][  T805]  ksys_read+0x152/0x260
[ 1169.482364][  T805]  ? vfs_write+0xd60/0xd60
[ 1169.486768][  T805]  ? lockdep_hardirqs_on+0x94/0x140
[ 1169.491985][  T805]  do_syscall_64+0x4c/0xa0
[ 1169.496385][  T805]  ? clear_bhb_loop+0x30/0x80
[ 1169.501044][  T805]  ? clear_bhb_loop+0x30/0x80
[ 1169.505705][  T805]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1169.511582][  T805] RIP: 0033:0x7f328df5278e
[ 1169.515987][  T805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1169.535576][  T805] RSP: 002b:00007f328c1ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1169.543978][  T805] RAX: ffffffffffffffda RBX: 00007f328c1ed6c0 RCX: 00007f328df5278e
[ 1169.551936][  T805] RDX: 000000000000000f RSI: 00007f328c1ed0a0 RDI: 0000000000000004
[ 1169.559890][  T805] RBP: 00007f328c1ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1169.567846][  T805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1169.575801][  T805] R13: 00007f328e20d038 R14: 00007f328e20cfa0 R15: 00007ffd41f79938
[ 1169.583772][  T805]  </TASK>
[ 1170.167851][  T826] nr0: port 1(hsr0) entered blocking state
[ 1170.196590][  T826] nr0: port 1(hsr0) entered disabled state
[ 1170.216898][  T826] device hsr0 entered promiscuous mode
[ 1170.805353][  T868] FAULT_INJECTION: forcing a failure.
[ 1170.805353][  T868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1170.849175][  T868] CPU: 0 PID: 868 Comm: syz.1.10062 Not tainted syzkaller #0
[ 1170.856578][  T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1170.866643][  T868] Call Trace:
[ 1170.869939][  T868]  <TASK>
[ 1170.872882][  T868]  dump_stack_lvl+0x188/0x250
[ 1170.877586][  T868]  ? show_regs_print_info+0x20/0x20
[ 1170.882802][  T868]  ? load_image+0x400/0x400
[ 1170.887338][  T868]  ? __lock_acquire+0x7d10/0x7d10
[ 1170.892380][  T868]  ? tomoyo_path_number_perm+0x5b4/0x660
[ 1170.898031][  T868]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[ 1170.904636][  T868]  should_fail+0x38c/0x4c0
[ 1170.909049][  T868]  _copy_from_user+0x2e/0x170
[ 1170.913719][  T868]  wext_handle_ioctl+0xc4/0x1d0
[ 1170.918564][  T868]  ? call_commit_handler+0xf0/0xf0
[ 1170.923692][  T868]  sock_ioctl+0x143/0x710
[ 1170.928015][  T868]  ? sock_poll+0x410/0x410
[ 1170.932428][  T868]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1170.937348][  T868]  ? security_file_ioctl+0x7c/0xa0
[ 1170.942448][  T868]  ? sock_poll+0x410/0x410
[ 1170.946850][  T868]  __se_sys_ioctl+0xfa/0x170
[ 1170.951462][  T868]  do_syscall_64+0x4c/0xa0
[ 1170.955891][  T868]  ? clear_bhb_loop+0x30/0x80
[ 1170.960562][  T868]  ? clear_bhb_loop+0x30/0x80
[ 1170.965240][  T868]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1170.971125][  T868] RIP: 0033:0x7f5cc0929eb9
[ 1170.975534][  T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.995144][  T868] RSP: 002b:00007f5cbeb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1171.003550][  T868] RAX: ffffffffffffffda RBX: 00007f5cc0ba4fa0 RCX: 00007f5cc0929eb9
[ 1171.011515][  T868] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005
[ 1171.019474][  T868] RBP: 00007f5cbeb85090 R08: 0000000000000000 R09: 0000000000000000
[ 1171.027433][  T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1171.035391][  T868] R13: 00007f5cc0ba5038 R14: 00007f5cc0ba4fa0 R15: 00007fffb97b09f8
[ 1171.043376][  T868]  </TASK>
[ 1171.147826][  T880] nr0: port 1(hsr0) entered blocking state
[ 1171.165021][  T880] nr0: port 1(hsr0) entered disabled state
[ 1171.195202][  T880] device hsr0 entered promiscuous mode
[ 1173.478350][ T1005] __nla_validate_parse: 23 callbacks suppressed
[ 1173.478365][ T1005] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.10118'.
[ 1173.478778][ T1004] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10117'.
[ 1173.570123][ T1007] validate_nla: 53 callbacks suppressed
[ 1173.570138][ T1007] netlink: 'syz.3.10119': attribute type 16 has an invalid length.
[ 1173.603820][ T1007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10119'.
[ 1173.617595][ T1010] FAULT_INJECTION: forcing a failure.
[ 1173.617595][ T1010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1173.656795][ T1010] CPU: 1 PID: 1010 Comm: syz.4.10120 Not tainted syzkaller #0
[ 1173.664285][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1173.674343][ T1010] Call Trace:
[ 1173.677621][ T1010]  <TASK>
[ 1173.680554][ T1010]  dump_stack_lvl+0x188/0x250
[ 1173.685247][ T1010]  ? show_regs_print_info+0x20/0x20
[ 1173.690436][ T1010]  ? load_image+0x400/0x400
[ 1173.694938][ T1010]  ? __lock_acquire+0x7d10/0x7d10
[ 1173.699952][ T1010]  ? vfs_write+0x8b2/0xd60
[ 1173.704360][ T1010]  should_fail+0x38c/0x4c0
[ 1173.708771][ T1010]  _copy_from_user+0x2e/0x170
[ 1173.713465][ T1010]  __sys_bpf+0x26d/0x6f0
[ 1173.717699][ T1010]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1173.723063][ T1010]  ? vtime_user_exit+0x2c8/0x3e0
[ 1173.727992][ T1010]  __x64_sys_bpf+0x78/0x90
[ 1173.732388][ T1010]  do_syscall_64+0x4c/0xa0
[ 1173.736785][ T1010]  ? clear_bhb_loop+0x30/0x80
[ 1173.741442][ T1010]  ? clear_bhb_loop+0x30/0x80
[ 1173.746100][ T1010]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1173.751973][ T1010] RIP: 0033:0x7fdcf777feb9
[ 1173.756366][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1173.776212][ T1010] RSP: 002b:00007fdcf59db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1173.784610][ T1010] RAX: ffffffffffffffda RBX: 00007fdcf79fafa0 RCX: 00007fdcf777feb9
[ 1173.787431][ T1017] netlink: 'syz.3.10123': attribute type 3 has an invalid length.
[ 1173.792576][ T1010] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000004
[ 1173.792592][ T1010] RBP: 00007fdcf59db090 R08: 0000000000000000 R09: 0000000000000000
[ 1173.792602][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1173.792612][ T1010] R13: 00007fdcf79fb038 R14: 00007fdcf79fafa0 R15: 00007fff21004668
[ 1173.792637][ T1010]  </TASK>
[ 1173.875372][ T1017] netlink: 'syz.3.10123': attribute type 1 has an invalid length.
[ 1173.930863][ T1017] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10123'.
[ 1174.029582][ T1025] netlink: 'syz.4.10127': attribute type 29 has an invalid length.
[ 1174.072066][ T1030] netlink: 'syz.3.10129': attribute type 1 has an invalid length.
[ 1174.080145][ T1030] netlink: 'syz.3.10129': attribute type 3 has an invalid length.
[ 1174.086741][ T1025] netlink: 'syz.4.10127': attribute type 29 has an invalid length.
[ 1174.089027][ T1030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10129'.
[ 1174.122506][ T1032] netlink: 'syz.4.10127': attribute type 29 has an invalid length.
[ 1174.156115][ T1028] netlink: 'syz.1.10128': attribute type 29 has an invalid length.
[ 1174.163783][ T1025] netlink: 'syz.4.10127': attribute type 29 has an invalid length.
[ 1174.180102][ T1036] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.10131'.
[ 1174.306063][ T1028] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10128'.
[ 1174.306597][ T1025] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10127'.
[ 1174.376702][ T1042] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10132'.
[ 1174.697045][ T1067] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10138'.
[ 1177.057689][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.064090][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.952921][ T1198] IPv6: Can't replace route, no match found
[ 1177.987096][ T1198] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1178.699457][ T1240] __nla_validate_parse: 15 callbacks suppressed
[ 1178.699474][ T1240] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.10199'.
[ 1178.808705][ T1244] IPv6: Can't replace route, no match found
[ 1178.855725][ T1244] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1178.940556][ T1247] validate_nla: 44 callbacks suppressed
[ 1178.940571][ T1247] netlink: 'syz.5.10202': attribute type 21 has an invalid length.
[ 1178.958838][ T1247] netlink: 'syz.5.10202': attribute type 20 has an invalid length.
[ 1178.989742][ T1250] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10202'.
[ 1179.127859][ T1255] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10207'.
[ 1179.205649][ T1264] netlink: 'syz.5.10210': attribute type 16 has an invalid length.
[ 1179.209516][ T1267] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.10211'.
[ 1179.218579][ T1264] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10210'.
[ 1179.240383][ T1267] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.10211'.
[ 1179.712258][ T1294] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.10222'.
[ 1179.907804][ T1301] netlink: 'syz.5.10225': attribute type 16 has an invalid length.
[ 1179.931588][ T1301] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10225'.
[ 1180.075115][ T1314] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.10230'.
[ 1180.124625][ T1312] netlink: 'syz.5.10231': attribute type 3 has an invalid length.
[ 1180.139884][ T1312] netlink: 'syz.5.10231': attribute type 1 has an invalid length.
[ 1180.158461][ T1312] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.10231'.
[ 1180.313061][ T1326] netlink: 'syz.3.10237': attribute type 21 has an invalid length.
[ 1180.328155][ T1324] IPv6: Can't replace route, no match found
[ 1180.366345][ T1324] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1180.473485][ T1339] netlink: 'syz.5.10241': attribute type 21 has an invalid length.
[ 1180.490077][ T1339] netlink: 'syz.5.10241': attribute type 20 has an invalid length.
[ 1180.651614][T19193] wlan1: Trigger new scan to find an IBSS to join
[ 1181.041619][ T1365] netlink: 'syz.1.10250': attribute type 3 has an invalid length.
[ 1181.610489][T19189] wlan1: Trigger new scan to find an IBSS to join
[ 1182.650445][T19189] wlan1: Trigger new scan to find an IBSS to join
[ 1183.744075][ T1488] __nla_validate_parse: 18 callbacks suppressed
[ 1183.744109][ T1488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10302'.
[ 1183.967741][ T1500] validate_nla: 38 callbacks suppressed
[ 1183.967774][ T1500] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.019191][ T1500] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.045281][ T1504] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.058674][ T1500] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.092799][ T1507] netlink: 'syz.3.10308': attribute type 3 has an invalid length.
[ 1184.131598][ T1504] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.154972][ T1507] netlink: 'syz.3.10308': attribute type 1 has an invalid length.
[ 1184.200461][ T1507] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10308'.
[ 1184.215818][ T1500] netlink: 'syz.4.10307': attribute type 3 has an invalid length.
[ 1184.240726][ T1500] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10307'.
[ 1184.250880][T17752] Bluetooth: hci4: command 0x0406 tx timeout
[ 1184.280545][ T1504] netlink: 'syz.4.10307': attribute type 29 has an invalid length.
[ 1184.489758][ T1525] netlink: 'syz.1.10317': attribute type 1 has an invalid length.
[ 1184.514623][ T1525] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.10317'.
[ 1184.650483][T19189] wlan1: Trigger new scan to find an IBSS to join
[ 1184.668205][ T1533] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.10321'.
[ 1185.019356][ T1545] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10326'.
[ 1185.328035][ T1557] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10331'.
[ 1185.360820][ T1555] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10330'.
[ 1185.469801][ T1566] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.10336'.
[ 1185.620652][T19204] wlan1: Trigger new scan to find an IBSS to join
[ 1186.180920][ T1592] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10343'.
[ 1186.652013][T19193] wlan1: Creating new IBSS network, BSSID 22:76:d5:e8:6f:fb
[ 1186.656081][T19202] wlan1: Trigger new scan to find an IBSS to join
[ 1186.679593][T19208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1187.624203][T19202] wlan1: Creating new IBSS network, BSSID 66:45:e2:46:d2:a0
[ 1188.802589][ T1704] __nla_validate_parse: 16 callbacks suppressed
[ 1188.802604][ T1704] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10391'.
[ 1188.830696][ T1704] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1188.839107][ T1704] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1188.859040][ T1710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10394'.
[ 1188.936675][ T1713] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10393'.
[ 1188.958522][ T1715] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10397'.
[ 1189.125137][ T1725] validate_nla: 49 callbacks suppressed
[ 1189.125149][ T1725] netlink: 'syz.5.10400': attribute type 3 has an invalid length.
[ 1189.181631][ T1725] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.10400'.
[ 1189.561856][ T1731] netlink: 'syz.4.10403': attribute type 3 has an invalid length.
[ 1189.598499][ T1731] netlink: 'syz.4.10403': attribute type 1 has an invalid length.
[ 1189.628386][T19189] wlan1: Trigger new scan to find an IBSS to join
[ 1189.660213][ T1731] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10403'.
[ 1189.724620][T19213] wlan1: Creating new IBSS network, BSSID 06:02:9b:df:4d:c0
[ 1189.733871][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1189.868121][ T1749] netlink: 'syz.3.10408': attribute type 1 has an invalid length.
[ 1189.906747][ T1751] netlink: 'syz.1.10410': attribute type 16 has an invalid length.
[ 1189.915116][ T1749] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10408'.
[ 1189.946068][ T1751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10410'.
[ 1189.967556][ T1752] netlink: 'syz.5.10411': attribute type 21 has an invalid length.
[ 1189.977521][ T1752] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10411'.
[ 1190.035621][ T1749] netlink: 'syz.3.10408': attribute type 9 has an invalid length.
[ 1190.050841][ T1749] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10408'.
[ 1190.129027][ T1753] netlink: 'syz.3.10408': attribute type 9 has an invalid length.
[ 1190.156630][ T1760] netlink: 'syz.0.10414': attribute type 3 has an invalid length.
[ 1190.383440][ T1775] netlink: 'syz.0.10420': attribute type 3 has an invalid length.
[ 1193.826395][ T1948] __nla_validate_parse: 33 callbacks suppressed
[ 1193.826411][ T1948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10497'.
[ 1193.916543][ T1948] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10497'.
[ 1194.066843][ T1964] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.10504'.
[ 1194.085077][ T1960] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10503'.
[ 1194.121090][ T1965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10505'.
[ 1194.187277][ T1968] validate_nla: 86 callbacks suppressed
[ 1194.187307][ T1968] netlink: 'syz.0.10507': attribute type 21 has an invalid length.
[ 1194.227861][ T1968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10507'.
[ 1194.418334][ T1985] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[ 1194.479411][ T1992] netlink: 'syz.3.10514': attribute type 2 has an invalid length.
[ 1194.487511][ T1992] netlink: 'syz.3.10514': attribute type 8 has an invalid length.
[ 1194.496498][ T1992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10514'.
[ 1194.522060][ T1992] netlink: 'syz.3.10514': attribute type 21 has an invalid length.
[ 1194.545988][ T1992] netlink: 'syz.3.10514': attribute type 20 has an invalid length.
[ 1194.587972][ T1994] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10514'.
[ 1194.596864][ T1997] netlink: 'syz.5.10518': attribute type 3 has an invalid length.
[ 1194.605086][ T1997] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.10518'.
[ 1194.698440][ T2001] netlink: 'syz.3.10519': attribute type 16 has an invalid length.
[ 1194.707061][ T2001] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10519'.
[ 1194.720018][ T1995] netlink: 'syz.0.10516': attribute type 29 has an invalid length.
[ 1194.806091][ T1995] netlink: 'syz.0.10516': attribute type 29 has an invalid length.
[ 1194.841423][ T2004] netlink: 'syz.0.10516': attribute type 29 has an invalid length.
[ 1198.968521][ T2215] __nla_validate_parse: 55 callbacks suppressed
[ 1198.968563][ T2215] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10611'.
[ 1199.017370][ T2221] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.10613'.
[ 1199.328980][ T2235] validate_nla: 104 callbacks suppressed
[ 1199.329017][ T2235] netlink: 'syz.4.10619': attribute type 29 has an invalid length.
[ 1199.354504][ T2235] netlink: 'syz.4.10619': attribute type 29 has an invalid length.
[ 1199.386587][ T2241] netlink: 'syz.0.10623': attribute type 2 has an invalid length.
[ 1199.412375][ T2244] netlink: 'syz.1.10625': attribute type 3 has an invalid length.
[ 1199.416024][ T2241] netlink: 'syz.0.10623': attribute type 8 has an invalid length.
[ 1199.420789][ T2244] netlink: 'syz.1.10625': attribute type 1 has an invalid length.
[ 1199.446155][ T2241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10623'.
[ 1199.453875][ T2244] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10625'.
[ 1199.468183][ T2245] netlink: 'syz.4.10619': attribute type 29 has an invalid length.
[ 1199.478246][ T2238] netlink: 'syz.3.10622': attribute type 16 has an invalid length.
[ 1199.496574][ T2238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10622'.
[ 1199.508859][ T2247] netlink: 'syz.0.10623': attribute type 21 has an invalid length.
[ 1199.517742][ T2247] netlink: 'syz.0.10623': attribute type 20 has an invalid length.
[ 1199.538798][ T2235] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10619'.
[ 1199.567831][ T2241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10623'.
[ 1199.610325][ T4292] Bluetooth: hci1: command 0x0406 tx timeout
[ 1199.697783][ T2259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10630'.
[ 1199.946432][ T2265] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10631'.
[ 1200.098760][ T2274] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10635'.
[ 1204.118860][ T2379] __nla_validate_parse: 28 callbacks suppressed
[ 1204.118876][ T2379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10681'.
[ 1204.158951][ T2379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10681'.
[ 1204.326031][ T2389] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.10684'.
[ 1204.367671][ T2395] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.10687'.
[ 1204.403384][ T2390] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.10684'.
[ 1204.456853][ T2395] validate_nla: 73 callbacks suppressed
[ 1204.456878][ T2395] netlink: 'syz.5.10687': attribute type 3 has an invalid length.
[ 1204.484834][ T2395] netlink: 'syz.5.10687': attribute type 1 has an invalid length.
[ 1204.506863][ T2395] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.10687'.
[ 1204.528751][ T2403] netlink: 'syz.1.10689': attribute type 41 has an invalid length.
[ 1204.563277][ T2402] netlink: 'syz.0.10690': attribute type 3 has an invalid length.
[ 1204.577239][ T2403] netlink: 'syz.1.10689': attribute type 41 has an invalid length.
[ 1204.624048][ T2402] netlink: 'syz.0.10690': attribute type 1 has an invalid length.
[ 1204.658322][ T2402] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.10690'.
[ 1204.683827][ T2405] netlink: 'syz.3.10691': attribute type 21 has an invalid length.
[ 1204.714833][ T2405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10691'.
[ 1204.764522][ T2403] netlink: 'syz.1.10689': attribute type 1 has an invalid length.
[ 1204.780494][ T2403] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.10689'.
[ 1204.789997][ T2403] netlink: 'syz.1.10689': attribute type 1 has an invalid length.
[ 1204.891392][ T2415] netlink: 'syz.4.10694': attribute type 3 has an invalid length.
[ 1204.909210][ T2415] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10694'.
[ 1209.158795][ T2727] __nla_validate_parse: 35 callbacks suppressed
[ 1209.158811][ T2727] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10783'.
[ 1209.245004][ T2734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10786'.
[ 1209.267023][ T2734] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10786'.
[ 1209.290830][ T2732] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10785'.
[ 1209.302993][ T2731] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.10784'.
[ 1209.327351][ T2734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10786'.
[ 1209.359834][ T2739] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10788'.
[ 1209.498103][ T2759] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10792'.
[ 1209.546104][ T2760] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10794'.
[ 1209.572103][ T2762] validate_nla: 64 callbacks suppressed
[ 1209.572135][ T2762] netlink: 'syz.5.10795': attribute type 25 has an invalid length.
[ 1209.587330][ T2759] netlink: 'syz.1.10792': attribute type 3 has an invalid length.
[ 1209.626374][ T2760] netlink: 'syz.0.10794': attribute type 3 has an invalid length.
[ 1209.638423][ T2759] netlink: 'syz.1.10792': attribute type 1 has an invalid length.
[ 1209.649178][ T2760] netlink: 'syz.0.10794': attribute type 1 has an invalid length.
[ 1209.658562][ T2759] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.10792'.
[ 1209.851431][ T4292] Bluetooth: hci2: command 0x0406 tx timeout
[ 1209.861822][ T2770] netlink: 'syz.5.10798': attribute type 16 has an invalid length.
[ 1210.092412][ T2780] netlink: 'syz.0.10801': attribute type 3 has an invalid length.
[ 1210.205497][ T2786] netlink: 'syz.1.10805': attribute type 21 has an invalid length.
[ 1210.223544][ T2782] netlink: 'syz.4.10802': attribute type 3 has an invalid length.
[ 1210.237887][ T2791] netlink: 'syz.0.10804': attribute type 29 has an invalid length.
[ 1212.883171][ T2924] device caif0 entered promiscuous mode
[ 1212.889202][ T2924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1212.920535][ T2924] FAULT_INJECTION: forcing a failure.
[ 1212.920535][ T2924] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.005554][ T2924] CPU: 0 PID: 2924 Comm: syz.1.10855 Not tainted syzkaller #0
[ 1213.013046][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1213.023111][ T2924] Call Trace:
[ 1213.026394][ T2924]  <TASK>
[ 1213.029332][ T2924]  dump_stack_lvl+0x188/0x250
[ 1213.034030][ T2924]  ? show_regs_print_info+0x20/0x20
[ 1213.039239][ T2924]  ? load_image+0x400/0x400
[ 1213.043745][ T2924]  ? __might_sleep+0xf0/0xf0
[ 1213.048337][ T2924]  ? __lock_acquire+0x7d10/0x7d10
[ 1213.053367][ T2924]  should_fail+0x38c/0x4c0
[ 1213.057792][ T2924]  should_failslab+0x5/0x20
[ 1213.062290][ T2924]  slab_pre_alloc_hook+0x51/0xc0
[ 1213.067230][ T2924]  __kmalloc_node_track_caller+0x68/0x3a0
[ 1213.072950][ T2924]  ? netlink_ack+0x372/0xb50
[ 1213.077545][ T2924]  ? kmem_cache_alloc_node+0x162/0x2d0
[ 1213.083005][ T2924]  ? __alloc_skb+0xf4/0x750
[ 1213.087513][ T2924]  ? netlink_ack+0x372/0xb50
[ 1213.092101][ T2924]  __alloc_skb+0x22c/0x750
[ 1213.096525][ T2924]  netlink_ack+0x372/0xb50
[ 1213.100946][ T2924]  ? trace_event_raw_event_lock+0x270/0x270
[ 1213.106844][ T2924]  ? netlink_dump+0xcf0/0xcf0
[ 1213.111521][ T2924]  ? __skb_clone+0x480/0x790
[ 1213.116122][ T2924]  netlink_rcv_skb+0x27a/0x440
[ 1213.120886][ T2924]  ? rtnetlink_bind+0x80/0x80
[ 1213.125567][ T2924]  ? netlink_ack+0xb50/0xb50
[ 1213.130158][ T2924]  netlink_unicast+0x774/0x920
[ 1213.134916][ T2924]  netlink_sendmsg+0x8ba/0xbe0
[ 1213.139679][ T2924]  ? netlink_getsockopt+0x570/0x570
[ 1213.144859][ T2924]  ? aa_sock_msg_perm+0x94/0x150
[ 1213.149791][ T2924]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1213.155059][ T2924]  ? security_socket_sendmsg+0x7c/0xa0
[ 1213.160524][ T2924]  ? netlink_getsockopt+0x570/0x570
[ 1213.165725][ T2924]  ____sys_sendmsg+0x5b7/0x8f0
[ 1213.170499][ T2924]  ? __sys_sendmsg_sock+0x30/0x30
[ 1213.175539][ T2924]  ? import_iovec+0x6f/0xa0
[ 1213.180052][ T2924]  ___sys_sendmsg+0x236/0x2e0
[ 1213.184740][ T2924]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1213.189521][ T2924]  ? trace_event_raw_event_lock+0x270/0x270
[ 1213.195434][ T2924]  ? vfs_write+0x8b2/0xd60
[ 1213.199877][ T2924]  __se_sys_sendmsg+0x1af/0x290
[ 1213.204732][ T2924]  ? __x64_sys_sendmsg+0x80/0x80
[ 1213.209670][ T2924]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1213.215666][ T2924]  ? lockdep_hardirqs_on+0x94/0x140
[ 1213.220872][ T2924]  do_syscall_64+0x4c/0xa0
[ 1213.225288][ T2924]  ? clear_bhb_loop+0x30/0x80
[ 1213.229965][ T2924]  ? clear_bhb_loop+0x30/0x80
[ 1213.234643][ T2924]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1213.240543][ T2924] RIP: 0033:0x7f5cc0929eb9
[ 1213.244956][ T2924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1213.264557][ T2924] RSP: 002b:00007f5cbeb85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1213.272972][ T2924] RAX: ffffffffffffffda RBX: 00007f5cc0ba4fa0 RCX: 00007f5cc0929eb9
[ 1213.280940][ T2924] RDX: 0000000004000004 RSI: 0000200000000040 RDI: 0000000000000007
[ 1213.288893][ T2924] RBP: 00007f5cbeb85090 R08: 0000000000000000 R09: 0000000000000000
[ 1213.296846][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.304795][ T2924] R13: 00007f5cc0ba5038 R14: 00007f5cc0ba4fa0 R15: 00007fffb97b09f8
[ 1213.312873][ T2924]  </TASK>
[ 1214.330209][ T3003] __nla_validate_parse: 44 callbacks suppressed
[ 1214.359744][ T3003] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10880'.
[ 1214.383538][ T3007] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.10881'.
[ 1215.047421][ T3026] validate_nla: 51 callbacks suppressed
[ 1215.047466][ T3026] netlink: 'syz.5.10888': attribute type 29 has an invalid length.
[ 1215.134125][ T3026] netlink: 'syz.5.10888': attribute type 29 has an invalid length.
[ 1215.142058][ T3029] netlink: 'syz.0.10889': attribute type 1 has an invalid length.
[ 1215.149319][ T3032] netlink: 'syz.1.10892': attribute type 16 has an invalid length.
[ 1215.199041][ T3032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10892'.
[ 1215.219342][ T3029] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.10889'.
[ 1215.219516][ T3034] netlink: 'syz.5.10888': attribute type 29 has an invalid length.
[ 1215.244209][ T3026] netlink: 'syz.5.10888': attribute type 29 has an invalid length.
[ 1215.292360][ T3036] netlink: 'syz.5.10888': attribute type 29 has an invalid length.
[ 1215.348138][ T3039] netlink: 'syz.4.10894': attribute type 21 has an invalid length.
[ 1215.375016][ T3029] netlink: 'syz.0.10889': attribute type 9 has an invalid length.
[ 1215.406542][ T3042] netlink: 'syz.1.10895': attribute type 3 has an invalid length.
[ 1215.407426][ T3039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10894'.
[ 1215.426488][ T3042] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10895'.
[ 1215.432245][ T3029] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10889'.
[ 1215.548696][ T3045] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10889'.
[ 1215.592763][ T3048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10897'.
[ 1216.091688][ T3068] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10903'.
[ 1217.541513][ T3126] syzkaller: port 1(erspan0) entered blocking state
[ 1217.594777][ T3126] syzkaller: port 1(erspan0) entered disabled state
[ 1218.105950][ T3126] device erspan0 entered promiscuous mode
[ 1218.115674][ T3134] syzkaller: port 1(erspan0) entered blocking state
[ 1218.122350][ T3134] syzkaller: port 1(erspan0) entered forwarding state
[ 1218.254652][ T3159] bridge_slave_1: default FDB implementation only supports local addresses
[ 1219.132093][T19213] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready
[ 1219.498825][ T3211] __nla_validate_parse: 28 callbacks suppressed
[ 1219.498840][ T3211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10960'.
[ 1219.618960][ T3218] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.10963'.
[ 1219.632304][ T3220] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10964'.
[ 1219.645521][ T3211] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10960'.
[ 1219.822700][ T3218] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10963'.
[ 1219.867386][ T3216] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10962'.
[ 1219.929985][ T3225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10965'.
[ 1220.237268][ T3243] validate_nla: 54 callbacks suppressed
[ 1220.237283][ T3243] netlink: 'syz.5.10972': attribute type 1 has an invalid length.
[ 1220.326728][ T3243] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.10972'.
[ 1220.393816][ T3253] netlink: 'syz.5.10972': attribute type 9 has an invalid length.
[ 1220.433063][ T3253] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.10972'.
[ 1220.523025][ T3259] netlink: 'syz.4.10976': attribute type 2 has an invalid length.
[ 1220.538769][ T3259] netlink: 'syz.4.10976': attribute type 8 has an invalid length.
[ 1220.553358][ T3259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10976'.
[ 1220.596783][ T3254] netlink: 'syz.5.10972': attribute type 9 has an invalid length.
[ 1220.738255][ T3256] netlink: 'syz.3.10975': attribute type 1 has an invalid length.
[ 1220.751103][ T3257] netlink: 'syz.3.10975': attribute type 9 has an invalid length.
[ 1220.853823][ T3260] netlink: 'syz.3.10975': attribute type 9 has an invalid length.
[ 1220.919366][ T3268] netlink: 'syz.4.10980': attribute type 3 has an invalid length.
[ 1220.937871][ T3268] netlink: 'syz.4.10980': attribute type 1 has an invalid length.
[ 1224.521091][ T3401] __nla_validate_parse: 44 callbacks suppressed
[ 1224.521106][ T3401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11032'.
[ 1224.565109][ T3389] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.11027'.
[ 1224.582079][ T3392] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11027'.
[ 1224.616021][ T3404] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11032'.
[ 1224.728643][ T3399] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11027'.
[ 1224.749558][ T3407] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.11033'.
[ 1224.837449][ T3411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11034'.
[ 1224.865117][ T3407] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.11033'.
[ 1225.046673][ T3412] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11035'.
[ 1225.210371][ T4227] Bluetooth: hci3: command 0x0406 tx timeout
[ 1225.309739][ T3426] validate_nla: 53 callbacks suppressed
[ 1225.309754][ T3426] netlink: 'syz.1.11040': attribute type 16 has an invalid length.
[ 1225.331506][ T3424] netlink: 'syz.3.11038': attribute type 3 has an invalid length.
[ 1225.349507][ T3424] netlink: 'syz.3.11038': attribute type 1 has an invalid length.
[ 1225.382236][ T3426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11040'.
[ 1225.559968][ T3437] netlink: 'syz.0.11046': attribute type 1 has an invalid length.
[ 1225.612468][ T3437] netlink: 'syz.0.11046': attribute type 9 has an invalid length.
[ 1225.654944][ T3445] netlink: 'syz.5.11049': attribute type 29 has an invalid length.
[ 1225.678895][ T3445] netlink: 'syz.5.11049': attribute type 29 has an invalid length.
[ 1225.721702][ T3448] netlink: 'syz.5.11049': attribute type 29 has an invalid length.
[ 1225.731222][ T3447] netlink: 'syz.0.11046': attribute type 9 has an invalid length.
[ 1225.757104][ T3445] netlink: 'syz.5.11049': attribute type 29 has an invalid length.
[ 1226.787219][    C0] 
[ 1226.787227][    C0] ================================
[ 1226.787233][    C0] WARNING: inconsistent lock state
[ 1226.787247][    C0] syzkaller #0 Not tainted
[ 1226.787256][    C0] --------------------------------
[ 1226.787260][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1226.787268][    C0] syz.0.11075/3514 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1226.787284][    C0] ffff888059124520 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520
[ 1226.787330][    C0] {INITIAL USE} state was registered at:
[ 1226.787336][    C0]   lock_acquire+0x19e/0x400
[ 1226.787354][    C0]   _raw_spin_lock_irqsave+0xb0/0x100
[ 1226.787371][    C0]   htab_map_delete_elem+0x1b2/0x520
[ 1226.787387][    C0]   bpf_prog_2c29ac5cdc6b1842+0x3a/0xb88
[ 1226.787402][    C0]   bpf_overflow_handler+0x1c2/0x4a0
[ 1226.787419][    C0]   __perf_event_overflow+0x364/0x530
[ 1226.787432][    C0]   perf_bp_event+0x276/0x320
[ 1226.787444][    C0]   hw_breakpoint_exceptions_notify+0x152/0x470
[ 1226.787459][    C0]   atomic_notifier_call_chain+0x15d/0x280
[ 1226.787484][    C0]   notify_die+0x141/0x1a0
[ 1226.787497][    C0]   notify_debug+0x20/0x30
[ 1226.787512][    C0]   noist_exc_debug+0x73/0x120
[ 1226.787526][    C0]   asm_exc_debug+0x2f/0x40
[ 1226.787537][    C0] irq event stamp: 1422
[ 1226.787543][    C0] hardirqs last  enabled at (1421): [<ffffffff81493e86>] __local_bh_enable_ip+0x136/0x1c0
[ 1226.787562][    C0] hardirqs last disabled at (1422): [<ffffffff89bbc46e>] exc_debug+0x6e/0x130
[ 1226.787579][    C0] softirqs last  enabled at (1420): [<ffffffff881c1ed5>] netlink_insert+0xe95/0x11f0
[ 1226.787601][    C0] softirqs last disabled at (1418): [<ffffffff87dab76b>] release_sock+0x2b/0x1b0
[ 1226.787619][    C0] 
[ 1226.787619][    C0] other info that might help us debug this:
[ 1226.787627][    C0]  Possible unsafe locking scenario:
[ 1226.787627][    C0] 
[ 1226.787631][    C0]        CPU0
[ 1226.787634][    C0]        ----
[ 1226.787637][    C0]   lock(&htab->lockdep_key);
[ 1226.787647][    C0]   <Interrupt>
[ 1226.787650][    C0]     lock(&htab->lockdep_key);
[ 1226.787659][    C0] 
[ 1226.787659][    C0]  *** DEADLOCK ***
[ 1226.787659][    C0] 
[ 1226.787663][    C0] no locks held by syz.0.11075/3514.
[ 1226.787670][    C0] 
[ 1226.787670][    C0] stack backtrace:
[ 1226.787675][    C0] CPU: 0 PID: 3514 Comm: syz.0.11075 Not tainted syzkaller #0
[ 1226.787690][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1226.787700][    C0] Call Trace:
[ 1226.787704][    C0]  <#DB>
[ 1226.787711][    C0]  dump_stack_lvl+0x188/0x250
[ 1226.787731][    C0]  ? show_regs_print_info+0x20/0x20
[ 1226.787753][    C0]  ? print_usage_bug+0x42a/0x690
[ 1226.787767][    C0]  ? verify_lock_unused+0x18/0x140
[ 1226.787786][    C0]  lock_acquire+0x2c3/0x400
[ 1226.787805][    C0]  ? htab_map_delete_elem+0x1b2/0x520
[ 1226.787823][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1226.787840][    C0]  ? look_up_lock_class+0x71/0x110
[ 1226.787858][    C0]  ? verify_lock_unused+0x18/0x140
[ 1226.787878][    C0]  _raw_spin_lock_irqsave+0xb0/0x100
[ 1226.787895][    C0]  ? htab_map_delete_elem+0x1b2/0x520
[ 1226.787912][    C0]  ? _raw_spin_lock+0x40/0x40
[ 1226.787931][    C0]  ? htab_map_hash+0x33d/0x6d0
[ 1226.787946][    C0]  htab_map_delete_elem+0x1b2/0x520
[ 1226.787969][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0xb88
[ 1226.787983][    C0]  bpf_overflow_handler+0x1c2/0x4a0
[ 1226.788003][    C0]  ? perf_event_switch_output+0x730/0x730
[ 1226.788024][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1226.788042][    C0]  __perf_event_overflow+0x364/0x530
[ 1226.788061][    C0]  perf_bp_event+0x276/0x320
[ 1226.788079][    C0]  ? perf_event_free_bpf_prog+0x110/0x110
[ 1226.788110][    C0]  ? rcu_lock_acquire+0x9/0x30
[ 1226.788127][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1226.788149][    C0]  hw_breakpoint_exceptions_notify+0x152/0x470
[ 1226.788168][    C0]  atomic_notifier_call_chain+0x15d/0x280
[ 1226.788187][    C0]  notify_die+0x141/0x1a0
[ 1226.788204][    C0]  ? srcu_init_notifier_head+0x90/0x90
[ 1226.788223][    C0]  ? exc_debug+0x6e/0x130
[ 1226.788238][    C0]  ? trace_hardirqs_off_finish+0x57/0x1f0
[ 1226.788256][    C0]  notify_debug+0x20/0x30
[ 1226.788272][    C0]  exc_debug+0xcf/0x130
[ 1226.788288][    C0]  asm_exc_debug+0x1a/0x40
[ 1226.788301][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[ 1226.788320][    C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8
[ 1226.788333][    C0] RSP: 0018:ffffc9000152f7f8 EFLAGS: 00050202
[ 1226.788346][    C0] RAX: ffffffff83e1b101 RBX: 000000000000005c RCX: 000000000000001b
[ 1226.788357][    C0] RDX: 000000000000005c RSI: 0000200000000301 RDI: ffff888056c73c41
[ 1226.788368][    C0] RBP: ffffc9000152f950 R08: ffff888056c73c5b R09: 1ffff1100ad8e78b
[ 1226.788379][    C0] R10: dffffc0000000000 R11: ffffed100ad8e78c R12: ffff888056c73c00
[ 1226.788391][    C0] R13: dffffc00000000ff R14: 00002000000002c0 R15: 0000000000000000
[ 1226.788407][    C0]  ? _copy_from_iter+0x231/0x1170
[ 1226.788430][    C0]  </#DB>
[ 1226.788435][    C0]  <TASK>
[ 1226.788439][    C0]  _copy_from_iter+0x318/0x1170
[ 1226.788457][    C0]  ? __lock_acquire+0x7d10/0x7d10
[ 1226.788484][    C0]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[ 1226.788504][    C0]  ? __virt_addr_valid+0x3c6/0x470
[ 1226.788519][    C0]  ? __phys_addr_symbol+0x2b/0x70
[ 1226.788533][    C0]  ? __check_object_size+0x30c/0x410
[ 1226.788551][    C0]  netlink_sendmsg+0x758/0xbe0
[ 1226.788571][    C0]  ? netlink_getsockopt+0x570/0x570
[ 1226.788587][    C0]  ? aa_sock_msg_perm+0x94/0x150
[ 1226.788604][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1226.788620][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[ 1226.788636][    C0]  ? netlink_getsockopt+0x570/0x570
[ 1226.788650][    C0]  ____sys_sendmsg+0x5b7/0x8f0
[ 1226.788673][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[ 1226.788695][    C0]  ? import_iovec+0x6f/0xa0
[ 1226.788713][    C0]  ___sys_sendmsg+0x236/0x2e0
[ 1226.788734][    C0]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1226.788773][    C0]  __se_sys_sendmsg+0x1af/0x290
[ 1226.788792][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[ 1226.788807][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1226.788832][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1226.788850][    C0]  do_syscall_64+0x4c/0xa0
[ 1226.788864][    C0]  ? clear_bhb_loop+0x30/0x80
[ 1226.788877][    C0]  ? clear_bhb_loop+0x30/0x80
[ 1226.788893][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1226.788913][    C0] RIP: 0033:0x7f2b131bceb9
[ 1226.788926][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1226.788938][    C0] RSP: 002b:00007f2b11418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1226.788953][    C0] RAX: ffffffffffffffda RBX: 00007f2b13437fa0 RCX: 00007f2b131bceb9
[ 1226.788964][    C0] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000008
[ 1226.788974][    C0] RBP: 00007f2b1322ac1f R08: 0000000000000000 R09: 0000000000000000
[ 1226.788983][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1226.788992][    C0] R13: 00007f2b13438038 R14: 00007f2b13437fa0 R15: 00007fff227d7928
[ 1226.789013][    C0]  </TASK>
[ 1235.450300][ T4194] Bluetooth: hci0: command 0x0406 tx timeout