last executing test programs:

10.347984265s ago: executing program 0 (id=6495):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)

9.534191532s ago: executing program 3 (id=6497):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x5, 0x8, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xf3df}}]}}, 0x0, 0x4a, 0x0, 0x0, 0x3, 0x10000}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044943, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x30, 0x20004000}, 0x48044)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = gettid()
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x8, 0xc4, 0x6, 0x0, 0x1ff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x5, 0xfa6, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4, 0x0, 0x8000}, r6, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

9.40899987s ago: executing program 2 (id=6498):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x7ffffffff000)

7.375527199s ago: executing program 0 (id=6500):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e105000000890600001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc9", 0x3b}], 0x1}, 0x0)

7.35376812s ago: executing program 2 (id=6501):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x2, 0x1, 0x0, 0x2, 0x7, 0xc, 0xfffffffffffffffc}], &(0x7f0000000240)='GPL\x00', 0x700d, 0x9f, &(0x7f0000000280)=""/159, 0xc2f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x14, 0x9d, &(0x7f00000005c0)="5d8a9a7337cf65874ee8d6638853d8d079ff2d9a", &(0x7f0000000700)=""/157, 0xfffffffd, 0x0, 0xa0, 0x96, &(0x7f00000007c0)="9a1325e4de4f0406dda3bec8bd515e7bca8246ebfff7e03d8e4f405606c22116c3bb63201806a723198227919e72217580f3c0bf56227d9a79e98cf9cfe5bc832a88d8c8261c7e4a07940c994a2c1cf130ceab444303d815da126fc6fc6c274f5a62c71581e2bfe221b3803f70b687bed60a544c767309873b68f187c377c1ddd29c2c94b869137f5d2c8f809b6385eb9068a33a75fa118f1b0f2425d20c45fd", &(0x7f0000000880)="638b4266c6810bd276c52e5e1d3725ef7af924957d8ca74ca61affa844d269b28be639f7208c36790f8362fdfd2e33dc1001c9e13d0b3f9cd802e392acc3ac1eecf0c0efc3ba540a8178545572203ba93febc17cd5645719a7b05ab41928d3c7962d3611dfd2a53e2a1a59dc6674594ec2223cf20f0a592c79c087e2614d49864c087811669553e02a1f92bdafb65e57166ee507d49d", 0x2, 0x0, 0x69f}, 0x4a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000, 0x84}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}, 0x14002)
r10 = socket$kcm(0x2b, 0x1, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x18, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000a80)='syzkaller\x00', 0x200, 0xac, &(0x7f0000000ac0)=""/172, 0x40e00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x10, 0x8, 0x5d5fd19e}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[r6, r4, r4, r8], &(0x7f0000000c80)=[{0x2, 0x2, 0xf, 0xf}, {0x5, 0x4, 0xa}, {0x1, 0x5, 0x9, 0x2}, {0x4, 0x4, 0x9, 0xc}, {0x3, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x3, 0x9}, {0x4, 0x1, 0x5, 0x9}, {0x4, 0x2, 0x6, 0x1}, {0x1, 0x4, 0x1, 0x2}], 0x10, 0xd32a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r4}, &(0x7f0000000580), &(0x7f0000000e00)=r11}, 0x20)
setsockopt$sock_attach_bpf(r10, 0x1, 0x9, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8946, &(0x7f0000000080))

7.332630231s ago: executing program 1 (id=6502):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x3000000}, 0x3e8)

7.318803662s ago: executing program 3 (id=6503):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
ioctl$TUNGETFEATURES(r0, 0x541b, &(0x7f00000013c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab7749efbc3330ec3a"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r5 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x7, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0xe1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x801, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

7.099345325s ago: executing program 0 (id=6504):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x90)
write$cgroup_freezer_state(r3, &(0x7f0000000a80)='THAWED\x00', 0x7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000ac0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x34}, @generic={0xc6, 0x8, 0x3, 0x4, 0x8}], &(0x7f0000000b00)='syzkaller\x00', 0xfffffff7, 0x8b, &(0x7f0000000b40)=""/139, 0x0, 0x2, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000d00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})

6.274630183s ago: executing program 0 (id=6505):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4105, 0x1009}], 0x1}, 0x10100)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2000000, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808d0ffd0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0xc2ba, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4105, 0x1009}], 0x1}, 0x10100) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2000000, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808d0ffd0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000084b6aff56b9ac0ab1bbbb0547d3c418ad12710c101cee321af94c699eb33a3e6289dbfb09f5419ec77b684552dbf9e5868d1a0b3e5b3a1464a664953142415e55dfb2a9e442746d9d446dce0427805e1a5f65709cb7600840845521227c5308e34533a79193b67c2fc6ec4295521b1c196123593d8c39bb7f8624ed7e8c83e0caf28c2fc3f49"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x25) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0xc2ba, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async)
close(r2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async)
syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

6.260620214s ago: executing program 2 (id=6506):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x10140)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0xfffffffffffffffc}, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x800)

6.209106827s ago: executing program 1 (id=6507):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)

6.208409257s ago: executing program 4 (id=6508):
r0 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x86}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000)

6.102651093s ago: executing program 3 (id=6509):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

5.945628552s ago: executing program 2 (id=6510):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008000"/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000004000e0eef6d333980061104c000000000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r3})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x4100, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000002c"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.872989817s ago: executing program 4 (id=6511):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x7ffffffff000)

5.872506816s ago: executing program 3 (id=6512):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0})

5.689782247s ago: executing program 3 (id=6513):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000000000000000000000ffff7a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000006, 0x106)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10820, 0x0, 0x0, 0x6, 0x2}, 0xffffffffffffffff, 0x0, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f600008100000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
write$cgroup_freezer_state(r5, &(0x7f0000000180)='THAWED\x00', 0x7)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r7=>0x0}, 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r7, 0x4)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r8, r4, 0x4, r6}, 0x10)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4)

5.608515252s ago: executing program 1 (id=6514):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x5, 0x8, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xf3df}}]}}, 0x0, 0x4a, 0x0, 0x0, 0x3, 0x10000}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044943, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x30, 0x20004000}, 0x48044)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = gettid()
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x8, 0xc4, 0x6, 0x0, 0x1ff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x5, 0xfa6, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4, 0x0, 0x8000}, r6, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

4.528826865s ago: executing program 0 (id=6515):
perf_event_open(0x0, 0x0, 0x10008, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x90)
write$cgroup_freezer_state(r3, &(0x7f0000000a80)='THAWED\x00', 0x7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000ac0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x34}, @generic={0xc6, 0x8, 0x3, 0x4, 0x8}], &(0x7f0000000b00)='syzkaller\x00', 0xfffffff7, 0x8b, &(0x7f0000000b40)=""/139, 0x0, 0x2, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000d00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})

3.430129809s ago: executing program 1 (id=6516):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711066000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x5, [@volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @datasec={0x1, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x80, 0x3}, {0x4, 0x8, 0x5}, {0x4, 0x6d5e, 0x8}], "86"}, @datasec={0xc, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x3ff}, {0x4, 0x2, 0xe}], "bbc1ed"}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x1, 0xd}]}, @typedef={0x10}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7}]}, @struct={0xb, 0x8, 0x0, 0x4, 0x1, 0x15, [{0xc, 0x4, 0x2}, {0x4, 0x2, 0x7f}, {0xc, 0x2, 0x7}, {0x10, 0x5, 0x9}, {0x4, 0x2, 0x568a}, {0xc, 0x4, 0x6}, {0xb, 0x0, 0x7}, {0xc, 0x3, 0x8}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000200)=""/103, 0x145, 0x67, 0x1, 0x4e8bcfe6}, 0x28)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x0, 0x2, 0x4}, 0x50)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
write$cgroup_freezer_state(r5, &(0x7f0000000080)='FROZEN\x00', 0x7)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0xa3, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r1, 0x10, 0x1, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414196401754e00000000180000000000000000000000070000004404c97194040007"], 0x38}, 0x20040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="23b1a043ed89bd2d22137b89668c52f6f14552194fe87600a69312dc339a269f752ed820d841732c935c74392b657c171be02a1387eeee8b50f8b80659418e6fb96fa190dbcfff9114953189a19c37eed5bd564ed656accdc178fba870e72c9024e29c980c7bcc0d25", @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="02000000040000000500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="4eaa00000000000071103d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)

3.429363799s ago: executing program 4 (id=6517):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x0, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000001f40)={&(0x7f0000000b40)=@ll={0x11, 0x2, r1, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000bc0)="2feeffacfc86bdcfbebf0778026d8c0f3cdebde26be1d6d69f2b992b164a53724b04a11376c7a8d87d6d7ed709e5689cedf6d8f0292637f2b03478bb87079dd353b26e82c09949c26df6f43a84a8765630366b5dab0c7beeb51cf83c077bb6dae1ca3635d90a9b4f666b5a9389cc6eeb", 0x70}, {&(0x7f0000000c40)="c78839c07fde4f89d0180f299524b608269bf424b6d70329e063e7a24194143c2b3e535a5c2c020efda252916e0cb87a083adfbd3942d05684e830823eb1aafb3e35c4ac2b764de77b41d48707bede82ecc06a0a9e3f272f08d92f863214fe47e4507112f9aec771a46968f5b1322464b09455a1b136168240082af951b88efdadfb0a7bc984b9b1283f6c93d39f2073aa91692317bda93ce8a5609831b6833a3257b617e262f014de2e1ae7f8", 0xad}, {&(0x7f0000000d00)="e56360d3d4dff7f467b14cc980660d37ed09dfa51bcd76626f68cdc0ef15ea6798e92b153ac51fb22eb85341883e38497d9b45bc551a1f3894", 0x39}, {&(0x7f0000000d40)="712daf3ed5f56be1bbd09e9cda9a341faef884ee478a740b5c6dbabdf32e2d3f5d780e113c9f1ce58af77a9bb453c4cb38d7701a2cdc2f7e7f7b8b735231303ad236ad33c2c4d2f7f96832a0ac1dc95a81d544fb84daa33203c1cc1b094cef6c3ede0d06681b654a08221c1fbe1669de91425a00c15dcae862bd5087e3f30fd447b182c1da56c616de0d3d28b516aab567b1f1f047", 0x95}, {&(0x7f0000000e00)="fbf3ef9673c4dbce418feece3c000d9cb2103a18df1b48e3e00b8c349ed1fff1d87e05e39feb568ab9c625", 0x2b}, {&(0x7f0000000e40)="2d271bb0e0b16781fd26c0d64ece6d6644732ce77954eebd2808e2db6f239092eb993cf22b32a09d96c8d943ceb135468889067a0a6c89a6e6c470773ee5450458147a1522973a01f166d14feb91a9b6cb4180e76acab324eda76ab39998650e334d88c9eb91c6d896ca2c5450fe3a63d60e95bf", 0x74}, {&(0x7f0000000ec0)="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", 0x1000}], 0x7}, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000881)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002080)='./cgroup/syz0\x00', 0x1ff)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYBLOB], 0x0}, 0x94)
perf_event_open(&(0x7f0000002000)={0x0, 0x80, 0xe2, 0xbb, 0x3, 0x5, 0x0, 0x2, 0x2020, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x809, 0x9, 0x8000, 0x5, 0x5, 0x4, 0x3, 0x0, 0x401, 0x0, 0x80000000}, 0xffffffffffffffff, 0x1, r3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

3.367089223s ago: executing program 2 (id=6518):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xd, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x79}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

3.308641286s ago: executing program 3 (id=6519):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008000"/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000004000e0eef6d333980061104c000000000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r3})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x4100, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000002c"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.292303677s ago: executing program 0 (id=6520):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x800000, 0x378e}, 0x1400, 0xfffffffffffffffc, 0x2, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7fffffffb, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100))
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x2f, 0x2, 0x73)
gettid()
setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94)
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x46, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r14=>0x0, 0xe8, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, <r15=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x9, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x7fff, 0x80, &(0x7f0000000180)=""/128, 0x41100, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0x4, 0x10}, 0x10, r14, r0, 0x5, &(0x7f0000000840)=[r15], &(0x7f0000000880)=[{0x1, 0x5, 0xa, 0x5}, {0x4, 0x1, 0xe, 0x2636a3d202c8ee8}, {0x1, 0x1, 0x5, 0x8}, {0x1, 0x2, 0xd, 0x7}, {0x0, 0x2, 0x4, 0x5}], 0x10, 0x6}, 0x94)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000002850000006100000018010000ff03000000000000002020207b1af8ff00dfffffbea100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r16, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.115913968s ago: executing program 2 (id=6521):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b040000", 0xa}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r3})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

3.114490718s ago: executing program 1 (id=6522):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x600, 0x4, 0x0, 0x28)

2.860173512s ago: executing program 4 (id=6523):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.840467124s ago: executing program 1 (id=6524):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
ioctl$TUNGETFEATURES(r0, 0x541b, &(0x7f00000013c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab7749efbc3330ec3a"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r5 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"})
socket$kcm(0x10, 0x7, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

2.583737198s ago: executing program 4 (id=6525):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff}) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNGETVNETLE(r1, 0x4008744b, &(0x7f0000000180))
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000040), 0x3b)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0", 0x1b}], 0x1}, 0x800) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) (async)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1, 0x0, 0xffffffffffffff78}, 0x4000050) (async, rerun: 64)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x11)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0))

0s ago: executing program 4 (id=6526):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r1, &(0x7f0000000140), 0x0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
write$cgroup_devices(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030f00fd486af2c41ccf59f5057b452e373e414c", @ANYRES64], 0xffdd)
close(r2)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63b0328e46002e92e40ccbbd6865", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x63, @local, 0x81}}, 0x80, 0x0}, 0x200ca8c0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='*:* m\x00\x00\x00'], 0x8)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r9, r8})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x800}}]}}, 0x0, 0x52}, 0x28)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

kernel console output (not intermixed with test programs):

er parsing attributes in process `syz.3.5630'.
[ 1135.314711][T21883] FAULT_INJECTION: forcing a failure.
[ 1135.314711][T21883] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.351960][T21883] CPU: 1 PID: 21883 Comm: syz.4.5635 Not tainted syzkaller #0
[ 1135.359482][T21883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1135.369542][T21883] Call Trace:
[ 1135.372813][T21883]  <TASK>
[ 1135.375743][T21883]  dump_stack_lvl+0x188/0x24e
[ 1135.380429][T21883]  ? show_regs_print_info+0x12/0x12
[ 1135.385629][T21883]  ? load_image+0x400/0x400
[ 1135.390133][T21883]  ? __might_sleep+0xd0/0xd0
[ 1135.394739][T21883]  ? __lock_acquire+0x7d10/0x7d10
[ 1135.399780][T21883]  should_fail_ex+0x399/0x4d0
[ 1135.404486][T21883]  should_failslab+0x5/0x20
[ 1135.408993][T21883]  slab_pre_alloc_hook+0x59/0x310
[ 1135.414047][T21883]  ? allocate_cgrp_cset_links+0xc9/0x320
[ 1135.419682][T21883]  __kmem_cache_alloc_node+0x4f/0x260
[ 1135.425063][T21883]  ? allocate_cgrp_cset_links+0xc9/0x320
[ 1135.430705][T21883]  kmalloc_trace+0x26/0xe0
[ 1135.435149][T21883]  allocate_cgrp_cset_links+0xc9/0x320
[ 1135.440631][T21883]  find_css_set+0xa1a/0x15d0
[ 1135.445259][T21883]  ? trace_event_raw_event_lock+0x250/0x250
[ 1135.451164][T21883]  ? trace_event_raw_event_lock+0x250/0x250
[ 1135.457066][T21883]  ? cgroup_migrate_prepare_dst+0x6f0/0x6f0
[ 1135.462975][T21883]  ? mark_lock+0x94/0x320
[ 1135.467333][T21883]  cgroup_migrate_prepare_dst+0x12c/0x6f0
[ 1135.473065][T21883]  cgroup_attach_task+0x546/0x870
[ 1135.478095][T21883]  ? cgroup_attach_task+0x20f/0x870
[ 1135.483328][T21883]  ? cgroup_migrate_execute+0xf30/0xf30
[ 1135.488918][T21883]  ? get_task_cred+0x1f/0x370
[ 1135.493638][T21883]  ? get_task_cred+0x2f0/0x370
[ 1135.498444][T21883]  ? get_task_cred+0x1f/0x370
[ 1135.503143][T21883]  __cgroup1_procs_write+0x2f5/0x3f0
[ 1135.508474][T21883]  ? cgroup_pidlist_destroy_work_fn+0x210/0x210
[ 1135.514755][T21883]  ? cgroup_pidlist_stop+0xf0/0xf0
[ 1135.519899][T21883]  cgroup_file_write+0x2c5/0x690
[ 1135.524882][T21883]  ? read_lock_is_recursive+0x10/0x10
[ 1135.530318][T21883]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 1135.535477][T21883]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 1135.540598][T21883]  kernfs_fop_write_iter+0x3b2/0x520
[ 1135.545900][T21883]  vfs_write+0x4b1/0xa30
[ 1135.550157][T21883]  ? file_end_write+0x250/0x250
[ 1135.555025][T21883]  ? __fget_files+0x43d/0x4b0
[ 1135.559722][T21883]  ? __fdget_pos+0x2ae/0x360
[ 1135.564310][T21883]  ? ksys_write+0x71/0x250
[ 1135.568734][T21883]  ksys_write+0x14c/0x250
[ 1135.573076][T21883]  ? __ia32_sys_read+0x80/0x80
[ 1135.577941][T21883]  ? lockdep_hardirqs_on+0x94/0x140
[ 1135.583157][T21883]  do_syscall_64+0x4c/0xa0
[ 1135.587577][T21883]  ? clear_bhb_loop+0x60/0xb0
[ 1135.592255][T21883]  ? clear_bhb_loop+0x60/0xb0
[ 1135.596937][T21883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1135.602829][T21883] RIP: 0033:0x7f34c4b9acb9
[ 1135.607254][T21883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1135.626870][T21883] RSP: 002b:00007f34c5a99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1135.635286][T21883] RAX: ffffffffffffffda RBX: 00007f34c4e15fa0 RCX: 00007f34c4b9acb9
[ 1135.643363][T21883] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005
[ 1135.651330][T21883] RBP: 00007f34c5a99090 R08: 0000000000000000 R09: 0000000000000000
[ 1135.659299][T21883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1135.667442][T21883] R13: 00007f34c4e16038 R14: 00007f34c4e15fa0 R15: 00007ffe3b11a488
[ 1135.675442][T21883]  </TASK>
[ 1135.769928][T21888] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5637'.
[ 1138.646496][T21911] netlink: 'syz.3.5644': attribute type 2 has an invalid length.
[ 1138.654358][T21911] netlink: 'syz.3.5644': attribute type 8 has an invalid length.
[ 1138.669476][T21911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5644'.
[ 1138.768025][T21928] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5652'.
[ 1138.882458][T21930] netlink: 'syz.1.5651': attribute type 12 has an invalid length.
[ 1138.906888][T21930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5651'.
[ 1140.074769][T21950] netlink: 'syz.1.5658': attribute type 12 has an invalid length.
[ 1140.090570][T21950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5658'.
[ 1140.129061][T21951] netlink: 'syz.0.5659': attribute type 12 has an invalid length.
[ 1140.145001][T21951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5659'.
[ 1141.357160][T21984] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5665'.
[ 1141.386591][T21987] netlink: 'syz.0.5667': attribute type 7 has an invalid length.
[ 1141.406753][T21987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5667'.
[ 1141.948964][T22000] netlink: 'syz.2.5673': attribute type 12 has an invalid length.
[ 1141.975441][T22000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5673'.
[ 1142.325114][ T4282] Bluetooth: hci0: ISO packet for unknown connection handle 0
[ 1144.359341][T22031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5683'.
[ 1144.375132][T22026] netlink: 'syz.4.5680': attribute type 17 has an invalid length.
[ 1144.386956][T22026] netlink: 'syz.4.5680': attribute type 16 has an invalid length.
[ 1144.394808][T22026] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5680'.
[ 1145.525780][T22053] netlink: 'syz.1.5687': attribute type 12 has an invalid length.
[ 1145.564591][T22053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5687'.
[ 1145.758101][T22057] netlink: 'syz.4.5686': attribute type 3 has an invalid length.
[ 1145.795843][T22057] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.5686'.
[ 1145.916903][T22066] netlink: 'syz.1.5689': attribute type 12 has an invalid length.
[ 1145.935780][T22066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5689'.
[ 1146.031345][T22070] device syzkaller0 left promiscuous mode
[ 1146.054633][T22070] netlink: 'syz.2.5691': attribute type 33 has an invalid length.
[ 1146.076349][T22070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5691'.
[ 1147.013886][T22077] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5695'.
[ 1147.111021][T22084] netlink: 'syz.1.5697': attribute type 30 has an invalid length.
[ 1147.262437][T22088] netlink: 'syz.4.5701': attribute type 12 has an invalid length.
[ 1147.279982][T22088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5701'.
[ 1147.300201][T22090] netlink: 'syz.3.5702': attribute type 10 has an invalid length.
[ 1147.341604][T22090] team0: Port device netdevsim0 added
[ 1147.537779][T22101] netlink: 'syz.4.5707': attribute type 12 has an invalid length.
[ 1147.548080][T22101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5707'.
[ 1151.023269][T22163] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5729'.
[ 1152.771784][T22180] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5734'.
[ 1153.132395][T22184] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1153.453433][T22205] netlink: 'syz.0.5752': attribute type 3 has an invalid length.
[ 1153.471966][T22205] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.5752'.
[ 1154.008456][T22215] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5746'.
[ 1154.045453][T22215] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1154.267324][T22219] device syzkaller0 entered promiscuous mode
[ 1154.991243][T22234] netlink: 'syz.0.5755': attribute type 12 has an invalid length.
[ 1155.054389][T22234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5755'.
[ 1155.104753][T22238] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5757'.
[ 1155.143761][T22238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5757'.
[ 1155.924216][T22250] netlink: 'syz.4.5761': attribute type 12 has an invalid length.
[ 1155.945458][T22250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5761'.
[ 1155.973248][T22250] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.5761'.
[ 1156.033590][T22250] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1157.216884][T22274] netlink: 'syz.0.5767': attribute type 15 has an invalid length.
[ 1157.237445][T22274] netlink: 'syz.0.5767': attribute type 5 has an invalid length.
[ 1157.255110][T22274] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5767'.
[ 1159.158867][T22283] netlink: 'syz.3.5770': attribute type 12 has an invalid length.
[ 1159.172612][T22283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5770'.
[ 1159.364578][T22290] netlink: 'syz.2.5772': attribute type 12 has an invalid length.
[ 1159.391631][T22290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5772'.
[ 1160.100692][T22301] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5774'.
[ 1160.113396][T22301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5774'.
[ 1160.912987][T22306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5778'.
[ 1161.013354][T22311] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.5780'.
[ 1161.034796][T22311] netlink: zone id is out of range
[ 1161.040617][T22311] netlink: zone id is out of range
[ 1161.053115][T22311] netlink: zone id is out of range
[ 1161.067042][T22314] netlink: 'syz.2.5780': attribute type 10 has an invalid length.
[ 1161.080699][T22311] netlink: get zone limit has 8 unknown bytes
[ 1161.093631][T22314] device wlan1 entered promiscuous mode
[ 1161.106934][T22314] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1161.168967][T22319] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.5783'.
[ 1161.203036][T22319] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.5783'.
[ 1161.245989][T22321] FAULT_INJECTION: forcing a failure.
[ 1161.245989][T22321] name failslab, interval 1, probability 0, space 0, times 0
[ 1161.259303][T22321] CPU: 1 PID: 22321 Comm: syz.3.5784 Not tainted syzkaller #0
[ 1161.266807][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1161.276903][T22321] Call Trace:
[ 1161.280219][T22321]  <TASK>
[ 1161.283183][T22321]  dump_stack_lvl+0x188/0x24e
[ 1161.287917][T22321]  ? show_regs_print_info+0x12/0x12
[ 1161.293169][T22321]  ? load_image+0x400/0x400
[ 1161.297728][T22321]  ? __might_sleep+0xd0/0xd0
[ 1161.302362][T22321]  ? __lock_acquire+0x7d10/0x7d10
[ 1161.307448][T22321]  should_fail_ex+0x399/0x4d0
[ 1161.312190][T22321]  should_failslab+0x5/0x20
[ 1161.316735][T22321]  slab_pre_alloc_hook+0x59/0x310
[ 1161.321819][T22321]  kmem_cache_alloc+0x56/0x2f0
[ 1161.326619][T22321]  ? getname_kernel+0x56/0x2f0
[ 1161.331472][T22321]  getname_kernel+0x56/0x2f0
[ 1161.336133][T22321]  kern_path+0x19/0x50
[ 1161.340249][T22321]  create_local_trace_uprobe+0xaa/0x6e0
[ 1161.345872][T22321]  ? bpf_get_uprobe_info+0x520/0x520
[ 1161.351214][T22321]  ? _copy_from_user+0x10b/0x170
[ 1161.356229][T22321]  perf_uprobe_init+0xef/0x190
[ 1161.361049][T22321]  perf_uprobe_event_init+0xe2/0x170
[ 1161.366375][T22321]  perf_try_init_event+0x12b/0x3d0
[ 1161.371512][T22321]  perf_event_alloc+0xf5c/0x21b0
[ 1161.376473][T22321]  ? perf_event_alloc+0xbe2/0x21b0
[ 1161.381643][T22321]  ? find_lively_task_by_vpid+0x19/0x290
[ 1161.387298][T22321]  __se_sys_perf_event_open+0x6fd/0x1ec0
[ 1161.392951][T22321]  ? __fget_files+0x43d/0x4b0
[ 1161.397665][T22321]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1161.403384][T22321]  ? lockdep_hardirqs_on+0x94/0x140
[ 1161.408608][T22321]  ? __x64_sys_perf_event_open+0x1c/0xc0
[ 1161.414277][T22321]  do_syscall_64+0x4c/0xa0
[ 1161.418708][T22321]  ? clear_bhb_loop+0x60/0xb0
[ 1161.423401][T22321]  ? clear_bhb_loop+0x60/0xb0
[ 1161.428096][T22321]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1161.434000][T22321] RIP: 0033:0x7f254999acb9
[ 1161.438429][T22321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1161.458043][T22321] RSP: 002b:00007f254a835028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1161.466488][T22321] RAX: ffffffffffffffda RBX: 00007f2549c15fa0 RCX: 00007f254999acb9
[ 1161.474466][T22321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080
[ 1161.482442][T22321] RBP: 00007f254a835090 R08: 0000000000000000 R09: 0000000000000000
[ 1161.490421][T22321] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1161.500079][T22321] R13: 00007f2549c16038 R14: 00007f2549c15fa0 R15: 00007ffdceaf6cc8
[ 1161.508138][T22321]  </TASK>
[ 1161.769730][T22325] netlink: 'syz.2.5785': attribute type 1 has an invalid length.
[ 1161.781861][T22325] netlink: 'syz.2.5785': attribute type 4 has an invalid length.
[ 1161.790871][T22325] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5785'.
[ 1163.249642][T22354] FAULT_INJECTION: forcing a failure.
[ 1163.249642][T22354] name failslab, interval 1, probability 0, space 0, times 0
[ 1163.301486][T22355] netlink: 'syz.3.5795': attribute type 12 has an invalid length.
[ 1163.325176][T22355] __nla_validate_parse: 2 callbacks suppressed
[ 1163.325221][T22355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5795'.
[ 1163.349974][T22354] CPU: 1 PID: 22354 Comm: syz.2.5796 Not tainted syzkaller #0
[ 1163.357485][T22354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1163.367572][T22354] Call Trace:
[ 1163.370864][T22354]  <TASK>
[ 1163.373812][T22354]  dump_stack_lvl+0x188/0x24e
[ 1163.378538][T22354]  ? show_regs_print_info+0x12/0x12
[ 1163.383779][T22354]  ? load_image+0x400/0x400
[ 1163.388344][T22354]  ? __might_sleep+0xd0/0xd0
[ 1163.392962][T22354]  ? __lock_acquire+0x7d10/0x7d10
[ 1163.398029][T22354]  should_fail_ex+0x399/0x4d0
[ 1163.402750][T22354]  should_failslab+0x5/0x20
[ 1163.407284][T22354]  slab_pre_alloc_hook+0x59/0x310
[ 1163.412340][T22354]  kmem_cache_alloc+0x56/0x2f0
[ 1163.417124][T22354]  ? getname_kernel+0x56/0x2f0
[ 1163.421923][T22354]  getname_kernel+0x56/0x2f0
[ 1163.426540][T22354]  kern_path+0x19/0x50
[ 1163.430621][T22354]  create_local_trace_uprobe+0xaa/0x6e0
[ 1163.436192][T22354]  ? bpf_get_uprobe_info+0x520/0x520
[ 1163.441489][T22354]  ? _copy_from_user+0x10b/0x170
[ 1163.446540][T22354]  perf_uprobe_init+0xef/0x190
[ 1163.451313][T22354]  perf_uprobe_event_init+0xe2/0x170
[ 1163.456608][T22354]  perf_try_init_event+0x12b/0x3d0
[ 1163.461726][T22354]  perf_event_alloc+0xf5c/0x21b0
[ 1163.466666][T22354]  ? perf_event_alloc+0xbe2/0x21b0
[ 1163.471807][T22354]  __se_sys_perf_event_open+0x5db/0x1ec0
[ 1163.477446][T22354]  ? __fget_files+0x43d/0x4b0
[ 1163.482139][T22354]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1163.487800][T22354]  ? lockdep_hardirqs_on+0x94/0x140
[ 1163.493002][T22354]  ? __x64_sys_perf_event_open+0x1c/0xc0
[ 1163.498646][T22354]  do_syscall_64+0x4c/0xa0
[ 1163.503060][T22354]  ? clear_bhb_loop+0x60/0xb0
[ 1163.507736][T22354]  ? clear_bhb_loop+0x60/0xb0
[ 1163.512418][T22354]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1163.518308][T22354] RIP: 0033:0x7f5735f9acb9
[ 1163.522722][T22354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1163.542331][T22354] RSP: 002b:00007f5736f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1163.550745][T22354] RAX: ffffffffffffffda RBX: 00007f5736215fa0 RCX: 00007f5735f9acb9
[ 1163.558717][T22354] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000
[ 1163.566685][T22354] RBP: 00007f5736f39090 R08: 0000000000000000 R09: 0000000000000000
[ 1163.574652][T22354] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1163.582620][T22354] R13: 00007f5736216038 R14: 00007f5736215fa0 R15: 00007ffec73db918
[ 1163.590618][T22354]  </TASK>
[ 1163.618362][T22362] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5798'.
[ 1163.944712][T22373] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.5812'.
[ 1164.011625][T22373] netlink: zone id is out of range
[ 1164.055191][T22373] netlink: zone id is out of range
[ 1164.068847][T22373] netlink: zone id is out of range
[ 1164.092785][T22373] netlink: get zone limit has 8 unknown bytes
[ 1164.095214][T22377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5801'.
[ 1164.129386][T22379] netlink: 'syz.3.5812': attribute type 10 has an invalid length.
[ 1164.157591][T22379] team0: Port device wlan1 removed
[ 1164.167447][T22379] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1164.692577][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5804'.
[ 1166.211308][T22398] netlink: 'syz.0.5810': attribute type 12 has an invalid length.
[ 1166.219720][T22398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5810'.
[ 1166.396477][T22408] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.5813'.
[ 1167.908723][T22431] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5820'.
[ 1167.945713][T22431] netlink: zone id is out of range
[ 1167.953981][T22431] netlink: zone id is out of range
[ 1167.960225][T22431] netlink: zone id is out of range
[ 1167.966491][T22431] netlink: get zone limit has 8 unknown bytes
[ 1167.988459][T22431] netlink: 'syz.1.5820': attribute type 10 has an invalid length.
[ 1168.001328][T22431] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1168.013508][T22437] netlink: 'syz.4.5822': attribute type 12 has an invalid length.
[ 1168.026355][T22437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5822'.
[ 1168.040818][T22440] netlink: 'syz.3.5823': attribute type 10 has an invalid length.
[ 1168.066021][T22440] team0: Cannot enslave team device to itself
[ 1168.380277][T22445] netlink: 'syz.1.5824': attribute type 11 has an invalid length.
[ 1168.395130][T22445] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5824'.
[ 1168.503045][T22449] netlink: 'syz.1.5824': attribute type 10 has an invalid length.
[ 1168.692579][T22449] team0: Port device hsr_slave_0 added
[ 1168.792002][T22444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.849124][T22456] netlink: 'syz.2.5830': attribute type 11 has an invalid length.
[ 1168.868382][T22456] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5830'.
[ 1169.619573][T22468] netlink: 'syz.1.5833': attribute type 3 has an invalid length.
[ 1169.653662][T22468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5833'.
[ 1170.065747][T22477] netlink: 'syz.4.5837': attribute type 12 has an invalid length.
[ 1170.091110][T22477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5837'.
[ 1170.130075][T22481] netlink: 'syz.1.5839': attribute type 10 has an invalid length.
[ 1170.161064][T22479] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.5838'.
[ 1170.205407][T22481] team0: Cannot enslave team device to itself
[ 1170.214825][T22479] netlink: zone id is out of range
[ 1170.232667][T22479] netlink: zone id is out of range
[ 1170.251660][T22483] netlink: 'syz.3.5838': attribute type 10 has an invalid length.
[ 1170.262196][T22479] netlink: zone id is out of range
[ 1170.297534][T22479] netlink: get zone limit has 8 unknown bytes
[ 1170.559825][ T8685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.642415][T20110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1170.654458][T20110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1170.664843][T20110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1170.674727][T22496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5843'.
[ 1170.693946][T20110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1170.705158][T20110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1170.713169][T20110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1170.739693][T22488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5840'.
[ 1170.795481][T22496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5843'.
[ 1170.842793][T22499] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5842'.
[ 1171.012195][ T8685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.070443][T22496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5843'.
[ 1171.161607][ T8685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.240101][T22505] netlink: 'syz.0.5845': attribute type 11 has an invalid length.
[ 1171.444706][T22510] validate_nla: 2 callbacks suppressed
[ 1171.444723][T22510] netlink: 'syz.0.5845': attribute type 10 has an invalid length.
[ 1172.043465][T22504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1172.241947][T22510] team0: Device hsr_slave_0 failed to register rx_handler
[ 1172.547719][T22517] netlink: 'syz.1.5849': attribute type 11 has an invalid length.
[ 1172.726837][T22525] netlink: zone id is out of range
[ 1172.732227][T22525] netlink: zone id is out of range
[ 1172.735225][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[ 1172.750164][T22524] netlink: 'syz.0.5850': attribute type 10 has an invalid length.
[ 1172.836247][T22524] team0: Cannot enslave team device to itself
[ 1172.864031][T22525] netlink: 'syz.3.5851': attribute type 10 has an invalid length.
[ 1172.915142][T22492] chnl_net:caif_netlink_parms(): no params data found
[ 1172.983095][ T8685] device 0 left promiscuous mode
[ 1173.395371][T22492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.429972][T22492] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.468894][T22492] device bridge_slave_0 entered promiscuous mode
[ 1174.492536][T22492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1174.500870][T22492] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1174.509696][T22492] device bridge_slave_1 entered promiscuous mode
[ 1174.568491][T22492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1174.597855][T22492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1174.699063][T22492] team0: Port device team_slave_0 added
[ 1174.727518][T22492] team0: Port device team_slave_1 added
[ 1174.764691][T22492] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1174.784120][T22492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.837211][T22492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1174.864726][T22492] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1174.879802][T22492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.906141][T20110] Bluetooth: hci1: command 0x041b tx timeout
[ 1174.944755][T22492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1175.340645][T22492] device hsr_slave_0 entered promiscuous mode
[ 1175.358478][T22492] device hsr_slave_1 entered promiscuous mode
[ 1175.419998][T22492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1175.445401][T22492] Cannot create hsr debugfs directory
[ 1175.490895][T22578] __nla_validate_parse: 4 callbacks suppressed
[ 1175.490913][T22578] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5863'.
[ 1175.560112][T22578] net_ratelimit: 2 callbacks suppressed
[ 1175.560129][T22578] netlink: zone id is out of range
[ 1175.587025][T22578] netlink: zone id is out of range
[ 1175.600274][T22578] netlink: zone id is out of range
[ 1175.607039][T22578] netlink: get zone limit has 8 unknown bytes
[ 1175.627992][T22585] netlink: 'syz.3.5862': attribute type 11 has an invalid length.
[ 1175.641077][T22582] netlink: 'syz.1.5863': attribute type 10 has an invalid length.
[ 1175.648232][T22585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5862'.
[ 1175.810354][T22589] netlink: 'syz.3.5862': attribute type 10 has an invalid length.
[ 1175.849976][T22589] team0: Port device hsr_slave_0 added
[ 1175.880459][T22584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1176.593154][T22606] netlink: 'syz.4.5865': attribute type 10 has an invalid length.
[ 1176.688477][T22606] team0: Cannot enslave team device to itself
[ 1176.706026][T22610] netlink: 'syz.3.5868': attribute type 12 has an invalid length.
[ 1176.738235][T22610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5868'.
[ 1176.975068][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[ 1177.298902][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.305352][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.668802][T22628] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5873'.
[ 1177.684338][T22628] netlink: zone id is out of range
[ 1177.693798][T22628] netlink: zone id is out of range
[ 1177.721436][T22628] netlink: zone id is out of range
[ 1177.735445][T22628] netlink: zone id is out of range
[ 1177.741093][T22628] netlink: zone id is out of range
[ 1177.755264][T22628] netlink: zone id is out of range
[ 1177.948643][ T8685] bond0: (slave wlan1): Releasing backup interface
[ 1177.956376][ T8685] device wlan1 left promiscuous mode
[ 1177.976869][T22492] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1177.987067][T22624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5866'.
[ 1178.020195][T22492] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1178.281231][T22636] netlink: 'syz.4.5875': attribute type 11 has an invalid length.
[ 1178.335092][T22492] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1178.342039][T22636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5875'.
[ 1179.055042][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[ 1179.067998][T22634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1179.263567][T22492] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1179.371096][T22642] netlink: 'syz.4.5875': attribute type 10 has an invalid length.
[ 1179.403821][T22642] team0: Device hsr_slave_0 failed to register rx_handler
[ 1179.504103][ T8685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1179.535144][ T8685] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1179.573986][ T8685] device bond0 left promiscuous mode
[ 1179.592873][ T8685] device bond_slave_1 left promiscuous mode
[ 1179.617248][ T8685] device batadv_slave_0 left promiscuous mode
[ 1179.639940][ T8685] bridge0: port 3(bond0) entered disabled state
[ 1179.677551][ T8685] device bridge_slave_1 left promiscuous mode
[ 1179.721476][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.732087][ T8685] device bridge_slave_0 left promiscuous mode
[ 1179.742676][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.793905][ T8685] device veth1_vlan left promiscuous mode
[ 1181.741610][ T8685] team0 (unregistering): Port device macvlan1 removed
[ 1181.854896][ T8685] team0 (unregistering): Port device hsr_slave_0 removed
[ 1181.923973][ T8685] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1181.970962][ T8685] team0 (unregistering): Port device team_slave_1 removed
[ 1182.040363][ T8685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1182.349313][ T8685] bond0 (unregistering): Released all slaves
[ 1182.451615][T22654] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1182.469882][T22654] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1182.481894][T22666] netlink: 'syz.0.5880': attribute type 21 has an invalid length.
[ 1182.482927][T22654] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1182.514428][T22667] netlink: 'syz.0.5880': attribute type 10 has an invalid length.
[ 1182.558764][T22667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1182.587638][T22674] tap0: tun_chr_ioctl cmd 1074025675
[ 1182.592970][T22674] tap0: persist enabled
[ 1182.605917][T22677] tap0: tun_chr_ioctl cmd 1074025675
[ 1182.616901][T22677] tap0: persist enabled
[ 1182.685292][T22680] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1182.691297][T22680] syzkaller1: linktype set to 780
[ 1183.024285][T22492] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1183.128447][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1183.157210][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1183.218273][T22492] 8021q: adding VLAN 0 to HW filter on device team0
[ 1183.254002][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1183.286173][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1183.295989][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.303136][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.368311][T22707] netlink: 'syz.3.5893': attribute type 12 has an invalid length.
[ 1183.381256][T22707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5893'.
[ 1183.446609][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1183.459059][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1183.473865][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1183.483235][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.490387][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1183.522073][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1183.623684][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1183.640490][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1183.672820][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1183.701850][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1183.729479][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1183.765154][T22716] netlink: 'syz.0.5895': attribute type 12 has an invalid length.
[ 1183.795326][T22716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5895'.
[ 1183.840808][T22720] netlink: 'syz.4.5896': attribute type 29 has an invalid length.
[ 1183.843473][T22492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1183.895145][T22492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1183.936672][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1183.963926][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1183.986875][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1184.014200][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1184.043148][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1184.071931][T22724] netlink: 'syz.1.5898': attribute type 21 has an invalid length.
[ 1184.088980][T22727] netlink: 'syz.1.5898': attribute type 10 has an invalid length.
[ 1184.130908][T22720] netlink: 'syz.4.5896': attribute type 29 has an invalid length.
[ 1184.162595][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1184.508456][T22743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5903'.
[ 1184.637788][T22746] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.5904'.
[ 1184.736501][T22746] net_ratelimit: 1 callbacks suppressed
[ 1184.736658][T22746] netlink: zone id is out of range
[ 1184.736952][T22749] netlink: 'syz.0.5904': attribute type 10 has an invalid length.
[ 1184.742325][T22746] netlink: zone id is out of range
[ 1184.847461][T22746] netlink: zone id is out of range
[ 1184.853280][T22746] netlink: get zone limit has 8 unknown bytes
[ 1185.601112][T22749] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1185.943902][T22766] netlink: 'syz.0.5907': attribute type 12 has an invalid length.
[ 1185.967488][T22766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5907'.
[ 1186.160995][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1186.186966][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1186.224422][T22492] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.363613][T22772] device 0 entered promiscuous mode
[ 1186.573425][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1186.629114][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1186.756901][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1186.787199][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1186.851126][T22492] device veth0_vlan entered promiscuous mode
[ 1186.901031][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1186.953712][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1187.072812][T22492] device veth1_vlan entered promiscuous mode
[ 1187.185558][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1187.235370][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1187.294121][T22492] device veth0_macvtap entered promiscuous mode
[ 1187.424124][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1187.467777][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1187.485863][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1187.498091][T22492] device veth1_macvtap entered promiscuous mode
[ 1187.551680][T22788] validate_nla: 1 callbacks suppressed
[ 1187.551755][T22788] netlink: 'syz.4.5910': attribute type 12 has an invalid length.
[ 1187.580316][T22788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5910'.
[ 1187.647568][T22492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1187.679989][T22492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1187.704481][T22492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1187.725035][T22492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1187.746684][T22492] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1187.794209][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1187.835772][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1187.851603][T22791] netlink: 'syz.0.5912': attribute type 29 has an invalid length.
[ 1187.865656][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1187.900879][T22803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5914'.
[ 1187.945930][T22492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1187.982757][T22492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1188.012457][T22492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1188.040660][T22492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1188.069996][T22492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1188.123158][T22492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1188.173070][T22492] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1188.233544][T22492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.287748][T22492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.383293][T22492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.427608][T22492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.505359][T22791] netlink: 'syz.0.5912': attribute type 29 has an invalid length.
[ 1188.514716][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1188.537095][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1188.599135][T22817] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.5917'.
[ 1188.706680][T22817] netlink: zone id is out of range
[ 1188.756786][T22817] netlink: zone id is out of range
[ 1188.787992][T22817] netlink: zone id is out of range
[ 1188.793578][T22817] netlink: get zone limit has 8 unknown bytes
[ 1189.012854][T22821] netlink: 'syz.3.5917': attribute type 10 has an invalid length.
[ 1189.200705][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1189.242833][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1189.293307][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1189.403480][ T8699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1189.450199][ T8699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1189.491191][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1189.560006][T22838] delete_channel: no stack
[ 1189.572676][T22838] delete_channel: no stack
[ 1190.244644][T22847] netlink: 'syz.2.5835': attribute type 3 has an invalid length.
[ 1190.295322][T22847] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5835'.
[ 1190.950170][T22853] netlink: 'syz.1.5925': attribute type 1 has an invalid length.
[ 1191.201875][T22867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5928'.
[ 1192.000881][T22880] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5935'.
[ 1193.075187][T22883] netlink: 'syz.3.5936': attribute type 2 has an invalid length.
[ 1193.433489][T22883] device 1 entered promiscuous mode
[ 1194.001582][T22891] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5939'.
[ 1194.062761][T22894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5941'.
[ 1194.985808][T22920] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5949'.
[ 1195.007173][T22920] netlink: zone id is out of range
[ 1195.029360][T22920] netlink: zone id is out of range
[ 1195.045819][T22922] netlink: 'syz.1.5949': attribute type 10 has an invalid length.
[ 1195.065474][T22920] netlink: zone id is out of range
[ 1195.083067][T22920] netlink: get zone limit has 8 unknown bytes
[ 1195.489258][T22930] netlink: 'syz.1.5951': attribute type 2 has an invalid length.
[ 1195.654375][T22930] device 1 entered promiscuous mode
[ 1196.453737][T22953] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5960'.
[ 1196.551157][T22954] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.5961'.
[ 1196.623217][T22954] netlink: zone id is out of range
[ 1196.638227][T22957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5962'.
[ 1196.662576][T22954] netlink: zone id is out of range
[ 1196.683076][T22954] netlink: zone id is out of range
[ 1196.691610][T22955] netlink: 'syz.3.5961': attribute type 10 has an invalid length.
[ 1196.716983][T22957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5962'.
[ 1196.729613][T22954] netlink: get zone limit has 8 unknown bytes
[ 1196.776739][T22959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5962'.
[ 1196.813242][T22960] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.5962'.
[ 1196.857096][T22960] openvswitch: netlink: Message has 48126 unknown bytes.
[ 1197.893779][T22986] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.5970'.
[ 1197.941499][T22989] netlink: 'syz.0.5972': attribute type 10 has an invalid length.
[ 1198.065827][T22989] bond0: (slave netdevsim0): Releasing backup interface
[ 1198.140558][T22989] team0: Port device netdevsim0 added
[ 1198.532971][T23000] netlink: zone id is out of range
[ 1198.594600][T23007] team0: default FDB implementation only supports local addresses
[ 1198.630597][T23000] netlink: 'syz.3.5975': attribute type 10 has an invalid length.
[ 1198.796047][T23014] FAULT_INJECTION: forcing a failure.
[ 1198.796047][T23014] name failslab, interval 1, probability 0, space 0, times 0
[ 1198.864108][T23014] CPU: 1 PID: 23014 Comm: syz.0.5980 Not tainted syzkaller #0
[ 1198.871626][T23014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1198.881698][T23014] Call Trace:
[ 1198.884988][T23014]  <TASK>
[ 1198.887923][T23014]  dump_stack_lvl+0x188/0x24e
[ 1198.892604][T23014]  ? irqentry_enter+0x33/0x50
[ 1198.897279][T23014]  ? show_regs_print_info+0x12/0x12
[ 1198.902481][T23014]  ? load_image+0x400/0x400
[ 1198.906985][T23014]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1198.913060][T23014]  ? lock_chain_count+0x20/0x20
[ 1198.917922][T23014]  should_fail_ex+0x399/0x4d0
[ 1198.922616][T23014]  should_failslab+0x5/0x20
[ 1198.927131][T23014]  slab_pre_alloc_hook+0x59/0x310
[ 1198.932168][T23014]  kmem_cache_alloc+0x56/0x2f0
[ 1198.936936][T23014]  ? __build_skb+0x2a/0x3c0
[ 1198.941530][T23014]  __build_skb+0x2a/0x3c0
[ 1198.945892][T23014]  build_skb+0x1e/0x230
[ 1198.950061][T23014]  bpf_prog_test_run_skb+0x37e/0x12a0
[ 1198.955437][T23014]  ? __fget_files+0x28/0x4b0
[ 1198.960038][T23014]  ? __fget_files+0x43d/0x4b0
[ 1198.964733][T23014]  ? cpu_online+0xa0/0xa0
[ 1198.969062][T23014]  bpf_prog_test_run+0x31e/0x390
[ 1198.974007][T23014]  __sys_bpf+0x62b/0x780
[ 1198.978251][T23014]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1198.983629][T23014]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1198.989803][T23014]  __x64_sys_bpf+0x78/0x90
[ 1198.994226][T23014]  do_syscall_64+0x4c/0xa0
[ 1198.998638][T23014]  ? clear_bhb_loop+0x60/0xb0
[ 1199.003307][T23014]  ? clear_bhb_loop+0x60/0xb0
[ 1199.007982][T23014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1199.013874][T23014] RIP: 0033:0x7fdc64d9acb9
[ 1199.018286][T23014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.037891][T23014] RSP: 002b:00007fdc65bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1199.046298][T23014] RAX: ffffffffffffffda RBX: 00007fdc65015fa0 RCX: 00007fdc64d9acb9
[ 1199.054262][T23014] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[ 1199.062311][T23014] RBP: 00007fdc65bac090 R08: 0000000000000000 R09: 0000000000000000
[ 1199.070279][T23014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1199.078242][T23014] R13: 00007fdc65016038 R14: 00007fdc65015fa0 R15: 00007ffe91b48558
[ 1199.086231][T23014]  </TASK>
[ 1199.104361][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 12
[ 1199.698735][T23044] netlink: 'syz.3.5991': attribute type 10 has an invalid length.
[ 1199.760505][T23047] __nla_validate_parse: 3 callbacks suppressed
[ 1199.760526][T23047] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.5992'.
[ 1199.830768][T23047] netlink: 'syz.2.5992': attribute type 10 has an invalid length.
[ 1199.911747][T23047] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1200.107521][T23056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5995'.
[ 1200.271173][T23061] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5997'.
[ 1200.326168][T23061] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1200.338792][T23061] CPU: 0 PID: 23061 Comm: syz.4.5997 Not tainted syzkaller #0
[ 1200.346288][T23061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1200.356363][T23061] Call Trace:
[ 1200.359661][T23061]  <TASK>
[ 1200.362607][T23061]  dump_stack_lvl+0x188/0x24e
[ 1200.367310][T23061]  ? show_regs_print_info+0x12/0x12
[ 1200.372545][T23061]  ? load_image+0x400/0x400
[ 1200.377070][T23061]  sysfs_warn_dup+0x8a/0xa0
[ 1200.381587][T23061]  sysfs_do_create_link_sd+0xc0/0x110
[ 1200.386975][T23061]  device_add+0x7ed/0xfb0
[ 1200.391322][T23061]  wiphy_register+0x1d9f/0x2ac0
[ 1200.396198][T23061]  ? cfg80211_event_work+0x40/0x40
[ 1200.401315][T23061]  ? minstrel_ht_alloc+0x894/0xa20
[ 1200.406438][T23061]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1200.412515][T23061]  ieee80211_register_hw+0x2d00/0x39f0
[ 1200.417989][T23061]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1200.423537][T23061]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1200.429092][T23061]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1200.434741][T23061]  ? memset+0x1e/0x40
[ 1200.438729][T23061]  ? __hrtimer_init+0x186/0x270
[ 1200.443609][T23061]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1200.449343][T23061]  hwsim_new_radio_nl+0xafa/0xce0
[ 1200.454378][T23061]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1200.459929][T23061]  ? end_current_label_crit_section+0x170/0x170
[ 1200.466171][T23061]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1200.472073][T23061]  ? bpf_lsm_capable+0x5/0x10
[ 1200.476745][T23061]  ? security_capable+0x85/0xb0
[ 1200.481601][T23061]  genl_rcv_msg+0x604/0x790
[ 1200.486114][T23061]  ? genl_bind+0x360/0x360
[ 1200.490534][T23061]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1200.496875][T23061]  netlink_rcv_skb+0x1fb/0x450
[ 1200.501643][T23061]  ? genl_bind+0x360/0x360
[ 1200.506060][T23061]  ? netlink_ack+0x1170/0x1170
[ 1200.510830][T23061]  ? down_read+0x1a8/0x2d0
[ 1200.515247][T23061]  genl_rcv+0x24/0x40
[ 1200.519227][T23061]  netlink_unicast+0x74d/0x8d0
[ 1200.524000][T23061]  netlink_sendmsg+0x8ad/0xbd0
[ 1200.528763][T23061]  ? lockdep_hardirqs_on+0x94/0x140
[ 1200.533969][T23061]  ? netlink_getsockopt+0x550/0x550
[ 1200.539170][T23061]  ? bpf_lsm_socket_accept+0x10/0x10
[ 1200.544448][T23061]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1200.549725][T23061]  ? security_socket_sendmsg+0x7c/0xa0
[ 1200.555192][T23061]  ? netlink_getsockopt+0x550/0x550
[ 1200.560392][T23061]  ____sys_sendmsg+0x5be/0x970
[ 1200.565165][T23061]  ? __sys_sendmsg_sock+0x30/0x30
[ 1200.570187][T23061]  ? __import_iovec+0x315/0x500
[ 1200.575040][T23061]  ? import_iovec+0x6f/0xa0
[ 1200.579543][T23061]  ___sys_sendmsg+0x2a2/0x360
[ 1200.584222][T23061]  ? try_to_wake_up+0x67c/0x1080
[ 1200.589163][T23061]  ? __sys_sendmsg+0x290/0x290
[ 1200.593953][T23061]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1200.599969][T23061]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1200.606143][T23061]  ? lockdep_hardirqs_on+0x94/0x140
[ 1200.611355][T23061]  ? __se_sys_sendmsg+0xf4/0x2a0
[ 1200.616301][T23061]  ? kasan_check_range+0x80/0x290
[ 1200.621337][T23061]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1200.626195][T23061]  ? __x64_sys_sendmsg+0x80/0x80
[ 1200.631145][T23061]  ? lockdep_hardirqs_on+0x94/0x140
[ 1200.636347][T23061]  do_syscall_64+0x4c/0xa0
[ 1200.640758][T23061]  ? clear_bhb_loop+0x60/0xb0
[ 1200.645428][T23061]  ? clear_bhb_loop+0x60/0xb0
[ 1200.650101][T23061]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1200.655988][T23061] RIP: 0033:0x7f34c4b9acb9
[ 1200.660396][T23061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1200.679998][T23061] RSP: 002b:00007f34c5a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1200.688408][T23061] RAX: ffffffffffffffda RBX: 00007f34c4e15fa0 RCX: 00007f34c4b9acb9
[ 1200.696376][T23061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1200.704336][T23061] RBP: 00007f34c4c08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1200.712309][T23061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1200.720274][T23061] R13: 00007f34c4e16038 R14: 00007f34c4e15fa0 R15: 00007ffe3b11a488
[ 1200.728255][T23061]  </TASK>
[ 1200.812622][T23071] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.6000'.
[ 1200.822536][T23071] net_ratelimit: 7 callbacks suppressed
[ 1200.822552][T23071] openvswitch: netlink: Key type 386 is out of range max 32
[ 1200.842454][T23071] netlink: 'syz.1.6000': attribute type 3 has an invalid length.
[ 1200.852284][T23071] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6000'.
[ 1201.213339][T23082] FAULT_INJECTION: forcing a failure.
[ 1201.213339][T23082] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1201.229414][T23082] CPU: 0 PID: 23082 Comm: syz.1.6004 Not tainted syzkaller #0
[ 1201.236909][T23082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1201.247061][T23082] Call Trace:
[ 1201.250331][T23082]  <TASK>
[ 1201.253252][T23082]  dump_stack_lvl+0x188/0x24e
[ 1201.258018][T23082]  ? show_regs_print_info+0x12/0x12
[ 1201.263232][T23082]  ? load_image+0x400/0x400
[ 1201.267768][T23082]  ? __lock_acquire+0x7d10/0x7d10
[ 1201.272815][T23082]  should_fail_ex+0x399/0x4d0
[ 1201.277509][T23082]  _copy_from_user+0x2c/0x170
[ 1201.282195][T23082]  generic_map_update_batch+0x4f3/0x810
[ 1201.287767][T23082]  ? rcu_read_unlock+0xa0/0xa0
[ 1201.292539][T23082]  ? __fdget+0x17c/0x200
[ 1201.296783][T23082]  ? rcu_read_unlock+0xa0/0xa0
[ 1201.301545][T23082]  bpf_map_do_batch+0x466/0x600
[ 1201.306403][T23082]  __sys_bpf+0x6f7/0x780
[ 1201.310648][T23082]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1201.316029][T23082]  ? lock_chain_count+0x20/0x20
[ 1201.320879][T23082]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1201.326860][T23082]  __x64_sys_bpf+0x78/0x90
[ 1201.331272][T23082]  do_syscall_64+0x4c/0xa0
[ 1201.335680][T23082]  ? clear_bhb_loop+0x60/0xb0
[ 1201.340345][T23082]  ? clear_bhb_loop+0x60/0xb0
[ 1201.345019][T23082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1201.350905][T23082] RIP: 0033:0x7f50c2b9acb9
[ 1201.355310][T23082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.374910][T23082] RSP: 002b:00007f50c3b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1201.383322][T23082] RAX: ffffffffffffffda RBX: 00007f50c2e15fa0 RCX: 00007f50c2b9acb9
[ 1201.391283][T23082] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1201.399243][T23082] RBP: 00007f50c3b37090 R08: 0000000000000000 R09: 0000000000000000
[ 1201.407206][T23082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1201.415169][T23082] R13: 00007f50c2e16038 R14: 00007f50c2e15fa0 R15: 00007fff80adbc48
[ 1201.423144][T23082]  </TASK>
[ 1201.520788][T23088] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.6006'.
[ 1201.571328][T23092] netlink: 'syz.0.6006': attribute type 10 has an invalid length.
[ 1201.575444][T23088] netlink: zone id is out of range
[ 1201.614133][T23088] netlink: zone id is out of range
[ 1201.626048][T23088] netlink: zone id is out of range
[ 1201.637003][T23088] netlink: get zone limit has 8 unknown bytes
[ 1201.664850][T23098] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6010'.
[ 1201.709540][T23099] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6009'.
[ 1202.205260][T23107] netlink: 'syz.1.6012': attribute type 11 has an invalid length.
[ 1202.225949][T23107] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6012'.
[ 1202.343267][T23107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1203.286763][T23134] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6021'.
[ 1203.350079][T23134] netlink: zone id is out of range
[ 1203.390282][T23134] netlink: zone id is out of range
[ 1203.410964][T23134] netlink: zone id is out of range
[ 1203.432512][T23134] netlink: get zone limit has 8 unknown bytes
[ 1203.971917][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1204.334889][T23153] netlink: 'syz.1.6027': attribute type 29 has an invalid length.
[ 1205.825033][T23148] net_ratelimit: 30134 callbacks suppressed
[ 1205.825053][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.840948][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.850874][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.861162][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.871134][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.881097][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.891062][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.901152][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.911292][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1205.921654][T23148] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[ 1206.094591][T23153] netlink: 'syz.1.6027': attribute type 29 has an invalid length.
[ 1206.244748][T23161] netlink: 'syz.0.6029': attribute type 12 has an invalid length.
[ 1206.265308][T23161] __nla_validate_parse: 1 callbacks suppressed
[ 1206.265369][T23161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6029'.
[ 1206.840683][T23174] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6034'.
[ 1207.069517][ T8685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.250962][ T8685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.340264][T20110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1207.365386][T20110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1207.374094][T20110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1207.383094][T20110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1207.391579][T20110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1207.399764][T20110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1208.155503][T23188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6037'.
[ 1208.237450][ T8685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.333840][ T8685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.553062][ T8685] device 0 left promiscuous mode
[ 1208.604463][T23203] netlink: 'syz.2.6042': attribute type 12 has an invalid length.
[ 1208.632870][T23203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6042'.
[ 1208.668832][T23180] chnl_net:caif_netlink_parms(): no params data found
[ 1208.966938][T23180] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1208.976632][T23180] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1208.987157][T23180] device bridge_slave_0 entered promiscuous mode
[ 1209.002478][T23215] netlink: 'syz.2.6044': attribute type 39 has an invalid length.
[ 1209.180126][T23180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.187589][T23180] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.223544][T23180] device bridge_slave_1 entered promiscuous mode
[ 1209.279131][T23222] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6046'.
[ 1209.396919][T23180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1209.448768][T23180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1209.465504][T20110] Bluetooth: hci4: command 0x0409 tx timeout
[ 1209.574603][T23180] team0: Port device team_slave_0 added
[ 1209.683043][T23180] team0: Port device team_slave_1 added
[ 1209.798422][T23244] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6049'.
[ 1211.083562][T23180] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1211.090653][T23180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1211.125823][T23180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1211.139199][T23180] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1211.146531][T23180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1211.197448][T23180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1211.354541][T23180] device hsr_slave_0 entered promiscuous mode
[ 1211.373273][T23180] device hsr_slave_1 entered promiscuous mode
[ 1211.382195][T23180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1211.390626][T23180] Cannot create hsr debugfs directory
[ 1211.535888][T20110] Bluetooth: hci4: command 0x041b tx timeout
[ 1212.442531][ T8685] device veth0_to_team left promiscuous mode
[ 1212.461083][ T8685] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1212.506090][ T8685] device hsr_slave_0 left promiscuous mode
[ 1212.538122][ T8685] device hsr_slave_1 left promiscuous mode
[ 1212.553186][ T8685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1212.574273][ T8685] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1212.604232][T23291] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.6059'.
[ 1212.605360][ T8685] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1212.632722][T23291] net_ratelimit: 2891 callbacks suppressed
[ 1212.632742][T23291] netlink: zone id is out of range
[ 1212.655115][ T8685] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1212.658173][T23291] netlink: zone id is out of range
[ 1212.669196][T23291] netlink: zone id is out of range
[ 1212.675267][T23291] netlink: get zone limit has 8 unknown bytes
[ 1212.675482][ T8685] device bridge_slave_1 left promiscuous mode
[ 1212.705795][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1212.714844][ T8685] device bridge_slave_0 left promiscuous mode
[ 1212.722187][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1212.973562][ T8685] device veth1_macvtap left promiscuous mode
[ 1212.989903][ T8685] device veth0_macvtap left promiscuous mode
[ 1213.000086][ T8685] device veth1_vlan left promiscuous mode
[ 1213.618484][T20110] Bluetooth: hci4: command 0x040f tx timeout
[ 1215.348777][ T8685] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1215.393018][ T8685] team0 (unregistering): Port device team_slave_1 removed
[ 1215.461835][ T8685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1215.705322][T20110] Bluetooth: hci4: command 0x0419 tx timeout
[ 1215.740797][ T8685] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1215.749530][ T8685] bond0 (unregistering): Released all slaves
[ 1215.847004][T23284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6058'.
[ 1215.869322][T23304] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6063'.
[ 1216.197017][T23320] netlink: 'syz.0.6065': attribute type 15 has an invalid length.
[ 1216.232030][T23320] netlink: 'syz.0.6065': attribute type 7 has an invalid length.
[ 1217.182466][T23180] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1217.217723][T23180] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1217.264888][T23335] bond0: (slave netdevsim0): Error: Slave device does not support XDP
[ 1217.368904][T23338] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.6071'.
[ 1217.460517][T23338] netlink: zone id is out of range
[ 1217.467740][T23338] netlink: zone id is out of range
[ 1217.479058][T23180] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1217.486012][T23338] netlink: zone id is out of range
[ 1217.491583][T23338] netlink: get zone limit has 8 unknown bytes
[ 1217.505160][T23339] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6069'.
[ 1217.535385][T23180] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1217.724162][T23358] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6083'.
[ 1217.759143][T23358] netlink: zone id is out of range
[ 1217.771897][T23180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1217.778849][T23358] netlink: zone id is out of range
[ 1217.800877][T23362] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6074'.
[ 1217.811904][T23358] netlink: zone id is out of range
[ 1217.831049][T23362] device hsr_slave_0 left promiscuous mode
[ 1217.840729][T23358] netlink: get zone limit has 8 unknown bytes
[ 1217.862173][T23362] device hsr_slave_1 left promiscuous mode
[ 1217.978609][T23365] bond0: (slave wlan1): Error: Slave device does not support XDP
[ 1217.999124][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1218.014011][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1218.031429][T23180] 8021q: adding VLAN 0 to HW filter on device team0
[ 1218.100130][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1218.116598][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1218.164647][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.171884][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1218.191722][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1218.230382][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1218.249645][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1218.276785][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1218.283939][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1218.341849][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1218.372079][T23377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6077'.
[ 1218.409837][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1218.458343][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1218.488931][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1218.522126][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1218.571177][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1218.615700][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1218.657784][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1218.688822][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1218.747428][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1218.778872][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1218.809474][T23180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1219.745236][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1219.752776][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1219.789720][T23180] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1219.959412][T23412] netlink: 'syz.2.6084': attribute type 10 has an invalid length.
[ 1220.689557][T23427] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6086'.
[ 1220.725652][T23427] netlink: zone id is out of range
[ 1220.730897][T23427] netlink: zone id is out of range
[ 1220.766841][T23427] netlink: zone id is out of range
[ 1220.797414][T23427] netlink: get zone limit has 8 unknown bytes
[ 1221.035415][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1221.070856][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1221.146521][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1221.164388][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1221.213422][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1221.243584][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1221.289004][T23180] device veth0_vlan entered promiscuous mode
[ 1221.308183][T23444] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6090'.
[ 1221.363685][T23180] device veth1_vlan entered promiscuous mode
[ 1221.439483][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1221.467709][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1221.500932][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1221.528464][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1221.550665][T23180] device veth0_macvtap entered promiscuous mode
[ 1221.611514][T23180] device veth1_macvtap entered promiscuous mode
[ 1221.701101][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.732181][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.777258][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.815543][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.842367][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.872517][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.892138][T23180] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1221.927960][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1221.937311][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1221.985533][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1222.016678][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1222.076515][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1222.114272][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1222.145981][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1222.182005][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1222.217607][T23180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1222.248217][T23180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1222.290843][T23180] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1222.322212][T23478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1222.335959][T23478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1222.362133][T23180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.385440][T23180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.394175][T23180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.405293][T23180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.564404][T23480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.570451][T23507] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6099'.
[ 1222.584309][T23480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.594900][T23507] netlink: zone id is out of range
[ 1222.614227][T23507] netlink: zone id is out of range
[ 1222.632966][T23478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1222.679999][T23478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.727254][T23478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.762531][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1222.843694][T23512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6101'.
[ 1222.950021][T23524] FAULT_INJECTION: forcing a failure.
[ 1222.950021][T23524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1222.964088][T23526] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6105'.
[ 1222.984182][T23526] device hsr_slave_0 left promiscuous mode
[ 1223.004375][T23524] CPU: 0 PID: 23524 Comm: syz.3.6104 Not tainted syzkaller #0
[ 1223.011881][T23524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1223.021957][T23524] Call Trace:
[ 1223.025249][T23524]  <TASK>
[ 1223.028190][T23524]  dump_stack_lvl+0x188/0x24e
[ 1223.032887][T23524]  ? show_regs_print_info+0x12/0x12
[ 1223.038086][T23524]  ? load_image+0x400/0x400
[ 1223.042583][T23524]  ? __might_fault+0xa6/0x120
[ 1223.047262][T23524]  should_fail_ex+0x399/0x4d0
[ 1223.051968][T23524]  copyin+0x1b/0x120
[ 1223.055873][T23524]  _copy_from_iter+0x559/0x1130
[ 1223.060745][T23524]  ? copyout_mc+0x110/0x110
[ 1223.065269][T23524]  ? __virt_addr_valid+0x188/0x540
[ 1223.070378][T23524]  ? __virt_addr_valid+0x188/0x540
[ 1223.075482][T23524]  ? __virt_addr_valid+0x465/0x540
[ 1223.080586][T23524]  ? __check_object_size+0x500/0xa40
[ 1223.085866][T23524]  netlink_sendmsg+0x755/0xbd0
[ 1223.090641][T23524]  ? netlink_getsockopt+0x550/0x550
[ 1223.095843][T23524]  ? aa_sock_msg_perm+0x94/0x150
[ 1223.100773][T23524]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1223.106046][T23524]  ? security_socket_sendmsg+0x7c/0xa0
[ 1223.111502][T23524]  ? netlink_getsockopt+0x550/0x550
[ 1223.116690][T23524]  ____sys_sendmsg+0x5be/0x970
[ 1223.121470][T23524]  ? __sys_sendmsg_sock+0x30/0x30
[ 1223.126512][T23524]  ? __import_iovec+0x315/0x500
[ 1223.131375][T23524]  ? import_iovec+0x6f/0xa0
[ 1223.135908][T23524]  ___sys_sendmsg+0x2a2/0x360
[ 1223.140589][T23524]  ? __sys_sendmsg+0x290/0x290
[ 1223.145368][T23524]  ? __lock_acquire+0x7d10/0x7d10
[ 1223.150398][T23524]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1223.155247][T23524]  ? __x64_sys_sendmsg+0x80/0x80
[ 1223.160206][T23524]  ? lockdep_hardirqs_on+0x94/0x140
[ 1223.165418][T23524]  do_syscall_64+0x4c/0xa0
[ 1223.169821][T23524]  ? clear_bhb_loop+0x60/0xb0
[ 1223.174495][T23524]  ? clear_bhb_loop+0x60/0xb0
[ 1223.179194][T23524]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1223.185094][T23524] RIP: 0033:0x7f254999acb9
[ 1223.189517][T23524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1223.209203][T23524] RSP: 002b:00007f254a835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1223.217606][T23524] RAX: ffffffffffffffda RBX: 00007f2549c15fa0 RCX: 00007f254999acb9
[ 1223.225566][T23524] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005
[ 1223.233531][T23524] RBP: 00007f254a835090 R08: 0000000000000000 R09: 0000000000000000
[ 1223.241497][T23524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1223.249461][T23524] R13: 00007f2549c16038 R14: 00007f2549c15fa0 R15: 00007ffdceaf6cc8
[ 1223.257450][T23524]  </TASK>
[ 1223.265836][T23526] device hsr_slave_1 left promiscuous mode
[ 1223.389565][T23528] netlink: 'syz.4.6030': attribute type 12 has an invalid length.
[ 1223.420201][T23528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6030'.
[ 1223.751368][T23542] netlink: 'syz.4.6109': attribute type 10 has an invalid length.
[ 1223.992007][T23542] team0: Device hsr_slave_0 failed to register rx_handler
[ 1224.220621][T23550] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6112'.
[ 1224.289036][T23550] net_ratelimit: 2 callbacks suppressed
[ 1224.289065][T23550] netlink: zone id is out of range
[ 1224.311063][T23550] netlink: zone id is out of range
[ 1224.367068][T23550] netlink: zone id is out of range
[ 1224.413765][T23550] netlink: get zone limit has 8 unknown bytes
[ 1224.525472][T20110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1224.544498][T20110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1224.553079][T20110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1224.585173][T20110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1224.592990][T20110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1224.601399][T20110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1224.716394][T23484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.733620][T23560] netlink: 'syz.0.6114': attribute type 21 has an invalid length.
[ 1224.847044][T23484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.060695][T23484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.093959][T23574] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6120'.
[ 1225.207490][T23484] bond0: (slave netdevsim0): Releasing backup interface
[ 1225.549641][T23553] chnl_net:caif_netlink_parms(): no params data found
[ 1225.925800][T23484] device 0 left promiscuous mode
[ 1226.076064][T23484] device .*! left promiscuous mode
[ 1226.235144][T23553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1226.257032][T23553] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1226.276965][T23553] device bridge_slave_0 entered promiscuous mode
[ 1226.323255][T23484] device 1 left promiscuous mode
[ 1226.366368][T23553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1226.424331][T23553] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1226.455659][T23553] device bridge_slave_1 entered promiscuous mode
[ 1226.655415][T20110] Bluetooth: hci0: command 0x0409 tx timeout
[ 1226.702448][T23553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1226.876137][T23553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1226.912692][T23626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6131'.
[ 1226.993655][T23553] team0: Port device team_slave_0 added
[ 1227.104124][T23553] team0: Port device team_slave_1 added
[ 1227.268393][T23553] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1227.310239][T23553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1227.363676][T23553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1227.499353][T23553] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1227.534088][T23553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1227.621728][T23553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1227.705514][T23647] netlink: 'syz.2.6135': attribute type 10 has an invalid length.
[ 1227.735950][T23647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6135'.
[ 1227.890377][T23647] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1227.925213][T23647] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1227.991445][T23647] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[ 1228.179920][T23653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6137'.
[ 1228.242038][T23658] netlink: 'syz.3.6137': attribute type 21 has an invalid length.
[ 1228.338221][T23553] device hsr_slave_0 entered promiscuous mode
[ 1228.352378][T23553] device hsr_slave_1 entered promiscuous mode
[ 1228.471544][T23676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6141'.
[ 1228.537379][T23676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6141'.
[ 1228.589605][T23678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6141'.
[ 1228.635426][T23676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6141'.
[ 1228.735551][T20110] Bluetooth: hci0: command 0x041b tx timeout
[ 1228.934012][T23692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6146'.
[ 1229.013005][T23694] netlink: 'syz.3.6145': attribute type 12 has an invalid length.
[ 1229.050156][T23694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6145'.
[ 1230.135801][T23484] bond0: (slave wlan1): Releasing backup interface
[ 1230.350031][T23720] bond0: (slave wlan1): Error: Slave device does not support XDP
[ 1230.372366][T23722] netlink: 'syz.2.6152': attribute type 10 has an invalid length.
[ 1230.529014][T23722] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1230.566204][T23724] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6152'.
[ 1230.636497][T23736] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6156'.
[ 1230.747286][T23741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6157'.
[ 1230.825372][T20110] Bluetooth: hci0: command 0x040f tx timeout
[ 1231.015592][T23484] device bridge_slave_1 left promiscuous mode
[ 1231.021854][T23484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1231.047151][T23484] device bridge_slave_0 left promiscuous mode
[ 1231.053391][T23484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1232.860155][T23484] team0 (unregistering): Port device hsr_slave_0 removed
[ 1232.904182][T20110] Bluetooth: hci0: command 0x0419 tx timeout
[ 1233.155567][T23484] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1233.237455][T23484] team0 (unregistering): Port device team_slave_1 removed
[ 1233.394273][T23484] team0 (unregistering): Port device team_slave_0 removed
[ 1233.457150][T23484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1233.551011][T23484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1233.982712][T23484] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1233.992035][T23484] bond0 (unregistering): Released all slaves
[ 1234.096718][T23752] __nla_validate_parse: 6 callbacks suppressed
[ 1234.096736][T23752] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6160'.
[ 1234.115452][T23747] netlink: 'syz.2.6159': attribute type 12 has an invalid length.
[ 1234.129247][T23747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6159'.
[ 1234.184008][T23553] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1234.208065][T23553] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1234.243573][T23553] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1234.341926][T23553] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1234.485187][T23784] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6169'.
[ 1234.536048][T23790] netlink: 'syz.2.6170': attribute type 29 has an invalid length.
[ 1234.617571][T23790] netlink: 'syz.2.6170': attribute type 29 has an invalid length.
[ 1234.640577][T23793] netlink: 'syz.2.6170': attribute type 29 has an invalid length.
[ 1234.696597][T23790] netlink: 'syz.2.6170': attribute type 39 has an invalid length.
[ 1234.771268][T23798] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6172'.
[ 1234.849923][T23800] netlink: 'syz.3.6173': attribute type 10 has an invalid length.
[ 1234.873352][T23800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6173'.
[ 1234.953732][T23553] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1235.010161][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1235.047895][T23480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1235.076230][T23553] 8021q: adding VLAN 0 to HW filter on device team0
[ 1235.124232][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1235.139403][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1235.160115][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1235.167425][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1235.269860][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1235.297480][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1235.327258][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1235.387840][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1235.395117][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1235.485510][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1235.519723][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1235.573161][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1235.630459][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1235.665654][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1235.702307][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1235.773047][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1235.804438][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1235.848159][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1235.884298][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1235.915834][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1235.958456][T23553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1236.754990][T23836] netlink: 'syz.4.6179': attribute type 12 has an invalid length.
[ 1236.801684][T23836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6179'.
[ 1236.872324][T23553] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1236.880995][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1236.903494][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1236.994745][T23844] netlink: 'syz.0.6182': attribute type 3 has an invalid length.
[ 1237.033622][T23844] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6182'.
[ 1237.075166][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1237.094481][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1237.848287][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1237.865960][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1237.887647][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1237.900125][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1237.923629][T23553] device veth0_vlan entered promiscuous mode
[ 1237.953540][T23553] device veth1_vlan entered promiscuous mode
[ 1238.067236][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1238.114062][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1238.142299][T23553] device veth0_macvtap entered promiscuous mode
[ 1238.219227][T23553] device veth1_macvtap entered promiscuous mode
[ 1238.321780][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1238.365069][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.402404][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1238.442800][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.464707][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1238.485322][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.514985][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1238.535025][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.546845][T23553] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1238.554543][T23881] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6189'.
[ 1238.571402][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1238.584770][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1238.594113][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1238.611403][T23468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1238.635904][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1238.659156][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.684979][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1238.704987][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.714849][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1238.734314][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.748879][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.756731][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.759829][T23553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1238.773944][T23553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.787013][T23553] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1238.798037][T23553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.808142][T23553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.817675][T23553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.826478][T23553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.846885][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1238.858351][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1240.005759][T23480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.045261][T23480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.074373][T23467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1240.093694][T23480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.118366][T23480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.160096][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1240.300415][T23920] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6196'.
[ 1240.389790][T23925] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6116'.
[ 1240.491849][T23932] IPv6: Can't replace route, no match found
[ 1240.508635][T23932] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1240.534546][T23482] wlan1: Created IBSS using preconfigured BSSID 00:00:ff:ff:00:00
[ 1240.548026][T23482] wlan1: Creating new IBSS network, BSSID 00:00:ff:ff:00:00
[ 1240.815942][T20110] Bluetooth: hci3: command 0x0406 tx timeout
[ 1241.606990][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1241.618106][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1241.630334][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1241.656675][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1241.678110][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1241.690619][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1243.785201][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[ 1244.806721][ T8696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1244.826200][T23952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6209'.
[ 1244.893086][ T8696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.010264][ T8696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.073130][T23966] FAULT_INJECTION: forcing a failure.
[ 1245.073130][T23966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1245.212873][ T8696] team0: Port device netdevsim0 removed
[ 1245.224240][T23966] CPU: 0 PID: 23966 Comm: syz.2.6213 Not tainted syzkaller #0
[ 1245.231840][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1245.241931][T23966] Call Trace:
[ 1245.245232][T23966]  <TASK>
[ 1245.248179][T23966]  dump_stack_lvl+0x188/0x24e
[ 1245.252881][T23966]  ? show_regs_print_info+0x12/0x12
[ 1245.258098][T23966]  ? load_image+0x400/0x400
[ 1245.262612][T23966]  ? __lock_acquire+0x7d10/0x7d10
[ 1245.267677][T23966]  should_fail_ex+0x399/0x4d0
[ 1245.272379][T23966]  _copy_from_user+0x2c/0x170
[ 1245.277072][T23966]  iovec_from_user+0x143/0x360
[ 1245.281857][T23966]  __import_iovec+0x6d/0x500
[ 1245.286473][T23966]  import_iovec+0x6f/0xa0
[ 1245.290822][T23966]  ___sys_sendmsg+0x252/0x360
[ 1245.295521][T23966]  ? __sys_sendmsg+0x290/0x290
[ 1245.300351][T23966]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1245.305232][T23966]  ? ct_nmi_exit+0x145/0x1c0
[ 1245.309842][T23966]  ? __x64_sys_sendmsg+0x80/0x80
[ 1245.314839][T23966]  ? lockdep_hardirqs_on+0x94/0x140
[ 1245.320063][T23966]  do_syscall_64+0x4c/0xa0
[ 1245.324485][T23966]  ? clear_bhb_loop+0x60/0xb0
[ 1245.329166][T23966]  ? clear_bhb_loop+0x60/0xb0
[ 1245.333847][T23966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1245.339740][T23966] RIP: 0033:0x7f7fa699acb9
[ 1245.344154][T23966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1245.363763][T23966] RSP: 002b:00007f7fa4bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1245.372176][T23966] RAX: ffffffffffffffda RBX: 00007f7fa6c15fa0 RCX: 00007f7fa699acb9
[ 1245.380236][T23966] RDX: 0000000000008810 RSI: 0000200000000000 RDI: 0000000000000009
[ 1245.388200][T23966] RBP: 00007f7fa4bf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1245.396164][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1245.404130][T23966] R13: 00007f7fa6c16038 R14: 00007f7fa6c15fa0 R15: 00007ffc565daa88
[ 1245.412108][T23966]  </TASK>
[ 1245.418864][ T8696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.432777][T23971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6215'.
[ 1245.670668][T23956] chnl_net:caif_netlink_parms(): no params data found
[ 1245.855730][ T4282] Bluetooth: hci2: command 0x041b tx timeout
[ 1245.980985][T23956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1246.003830][T23956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1246.031828][T23956] device bridge_slave_0 entered promiscuous mode
[ 1246.063068][T23956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.082817][T23956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.111244][T23956] device bridge_slave_1 entered promiscuous mode
[ 1246.188550][T23956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1246.223399][T23956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1246.320523][ T8696] device 0 left promiscuous mode
[ 1246.380685][T23956] team0: Port device team_slave_0 added
[ 1246.388757][T23956] team0: Port device team_slave_1 added
[ 1246.457896][ T8696] device .d left promiscuous mode
[ 1246.485443][T23996] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6218'.
[ 1246.502292][T23992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6227'.
[ 1246.592859][ T8696] device 1 left promiscuous mode
[ 1247.421743][T23956] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1247.429918][T23956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.499204][T23956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1247.647792][T24009] IPv6: Can't replace route, no match found
[ 1247.663465][T24016] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1247.694845][T23956] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1247.715362][T23956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.792393][ T4284] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[ 1247.810861][T23956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1247.937006][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[ 1249.855220][ T4284] Bluetooth: hci4: command 0x2016 tx timeout
[ 1249.855552][T23485] wlan1: Trigger new scan to find an IBSS to join
[ 1250.020703][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[ 1252.451300][T24031] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.770226][T23956] device hsr_slave_0 entered promiscuous mode
[ 1252.854281][T23956] device hsr_slave_1 entered promiscuous mode
[ 1252.871736][T23956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1252.902252][T23956] Cannot create hsr debugfs directory
[ 1252.978235][T24057] IPv6: Can't replace route, no match found
[ 1252.993040][T24061] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1253.855440][T23482] wlan1: Trigger new scan to find an IBSS to join
[ 1254.216849][T24093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6235'.
[ 1254.412800][ T8696] device gretap0 left promiscuous mode
[ 1254.451645][ T8696] Ÿë
: port 1(gretap0) entered disabled state
[ 1254.664532][T24120] FAULT_INJECTION: forcing a failure.
[ 1254.664532][T24120] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.741152][T24120] CPU: 1 PID: 24120 Comm: syz.4.6242 Not tainted syzkaller #0
[ 1254.748670][T24120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1254.758747][T24120] Call Trace:
[ 1254.762022][T24120]  <TASK>
[ 1254.764949][T24120]  dump_stack_lvl+0x188/0x24e
[ 1254.769643][T24120]  ? show_regs_print_info+0x12/0x12
[ 1254.774841][T24120]  ? load_image+0x400/0x400
[ 1254.779341][T24120]  ? __might_sleep+0xd0/0xd0
[ 1254.783925][T24120]  ? __lock_acquire+0x7d10/0x7d10
[ 1254.788951][T24120]  should_fail_ex+0x399/0x4d0
[ 1254.793631][T24120]  should_failslab+0x5/0x20
[ 1254.798131][T24120]  slab_pre_alloc_hook+0x59/0x310
[ 1254.803151][T24120]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1254.808259][T24120]  ? __d_alloc+0x31/0x700
[ 1254.812584][T24120]  __d_alloc+0x31/0x700
[ 1254.816728][T24120]  ? __ns_get_path+0x335/0x650
[ 1254.821488][T24120]  __ns_get_path+0x3e8/0x650
[ 1254.826075][T24120]  ns_get_path+0x50/0x90
[ 1254.830313][T24120]  proc_ns_get_link+0xf4/0x200
[ 1254.835072][T24120]  ? proc_ns_instantiate+0xf0/0xf0
[ 1254.840180][T24120]  ? pick_link+0x10f/0xe20
[ 1254.844587][T24120]  ? bpf_lsm_inode_follow_link+0x5/0x10
[ 1254.850133][T24120]  ? security_inode_follow_link+0xb3/0x100
[ 1254.855939][T24120]  ? proc_ns_instantiate+0xf0/0xf0
[ 1254.861048][T24120]  pick_link+0x6b3/0xe20
[ 1254.865292][T24120]  step_into+0xc49/0xf20
[ 1254.869532][T24120]  ? rcu_read_lock_any_held+0xb0/0x130
[ 1254.874989][T24120]  ? rcu_read_lock_bh_held+0xf0/0xf0
[ 1254.880264][T24120]  ? set_root+0x3a0/0x3a0
[ 1254.884586][T24120]  ? d_splice_alias+0x110/0x320
[ 1254.889435][T24120]  path_openat+0x15f3/0x2ee0
[ 1254.894039][T24120]  ? do_filp_open+0x430/0x430
[ 1254.898723][T24120]  do_filp_open+0x1f1/0x430
[ 1254.903223][T24120]  ? vfs_tmpfile+0x480/0x480
[ 1254.907826][T24120]  ? _raw_spin_unlock+0x24/0x40
[ 1254.912676][T24120]  ? alloc_fd+0x58f/0x630
[ 1254.917021][T24120]  do_sys_openat2+0x150/0x4b0
[ 1254.921750][T24120]  ? atomic_notifier_call_chain+0x282/0x2b0
[ 1254.927640][T24120]  ? perf_trace_preemptirq_template+0xa8/0x320
[ 1254.933809][T24120]  ? do_sys_open+0xe0/0xe0
[ 1254.938242][T24120]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1254.944242][T24120]  ? lock_chain_count+0x20/0x20
[ 1254.949112][T24120]  __x64_sys_openat+0x135/0x160
[ 1254.953969][T24120]  do_syscall_64+0x4c/0xa0
[ 1254.958386][T24120]  ? clear_bhb_loop+0x60/0xb0
[ 1254.963062][T24120]  ? clear_bhb_loop+0x60/0xb0
[ 1254.967750][T24120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1254.973646][T24120] RIP: 0033:0x7fb0edb5b58e
[ 1254.978061][T24120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1254.997665][T24120] RSP: 002b:00007fb0ee9ceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1255.006349][T24120] RAX: ffffffffffffffda RBX: 00007fb0ee9cf6c0 RCX: 00007fb0edb5b58e
[ 1255.014318][T24120] RDX: 0000000000000002 RSI: 00007fb0ee9cef90 RDI: ffffffffffffff9c
[ 1255.022302][T24120] RBP: 00007fb0ee9cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1255.030273][T24120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1255.038246][T24120] R13: 00007fb0ede16038 R14: 00007fb0ede15fa0 R15: 00007ffca5345088
[ 1255.046230][T24120]  </TASK>
[ 1255.650817][T24123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6244'.
[ 1256.280175][T24159] netlink: 'syz.1.6254': attribute type 2 has an invalid length.
[ 1256.895163][T23485] wlan1: Trigger new scan to find an IBSS to join
[ 1259.363094][T23482] wlan1: Creating new IBSS network, BSSID 8e:07:e7:6a:c8:2d
[ 1259.392100][T24150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6251'.
[ 1259.428834][T24159] device .*! entered promiscuous mode
[ 1259.589062][T24170] netlink: 'syz.0.6256': attribute type 46 has an invalid length.
[ 1259.607058][T24170] netlink: 'syz.0.6256': attribute type 41 has an invalid length.
[ 1259.741214][T24174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6258'.
[ 1259.776468][T24177] netlink: 'syz.1.6259': attribute type 12 has an invalid length.
[ 1259.797313][T24177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6259'.
[ 1260.114091][ T8696] bond0: (slave wlan1): Releasing backup interface
[ 1260.134773][T23956] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1260.179901][T23956] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1260.235560][T23956] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1260.267129][T23956] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1260.302924][T24189] FAULT_INJECTION: forcing a failure.
[ 1260.302924][T24189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1260.331606][T24189] CPU: 0 PID: 24189 Comm: syz.4.6262 Not tainted syzkaller #0
[ 1260.339119][T24189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1260.349291][T24189] Call Trace:
[ 1260.352591][T24189]  <TASK>
[ 1260.355536][T24189]  dump_stack_lvl+0x188/0x24e
[ 1260.360505][T24189]  ? show_regs_print_info+0x12/0x12
[ 1260.365735][T24189]  ? load_image+0x400/0x400
[ 1260.370283][T24189]  ? __lock_acquire+0x7d10/0x7d10
[ 1260.375334][T24189]  ? __virt_addr_valid+0x188/0x540
[ 1260.380443][T24189]  should_fail_ex+0x399/0x4d0
[ 1260.385136][T24189]  _copy_from_user+0x2c/0x170
[ 1260.389879][T24189]  bpf_test_init+0xde/0x140
[ 1260.394414][T24189]  bpf_prog_test_run_xdp+0x484/0xf10
[ 1260.399747][T24189]  ? dev_put+0x80/0x80
[ 1260.403853][T24189]  ? dev_put+0x80/0x80
[ 1260.407946][T24189]  bpf_prog_test_run+0x31e/0x390
[ 1260.412917][T24189]  __sys_bpf+0x62b/0x780
[ 1260.417180][T24189]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1260.422583][T24189]  ? lock_chain_count+0x20/0x20
[ 1260.427459][T24189]  __x64_sys_bpf+0x78/0x90
[ 1260.431901][T24189]  do_syscall_64+0x4c/0xa0
[ 1260.436327][T24189]  ? clear_bhb_loop+0x60/0xb0
[ 1260.441002][T24189]  ? clear_bhb_loop+0x60/0xb0
[ 1260.445683][T24189]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1260.451570][T24189] RIP: 0033:0x7fb0edb9acb9
[ 1260.455979][T24189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1260.475603][T24189] RSP: 002b:00007fb0ee9cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1260.484052][T24189] RAX: ffffffffffffffda RBX: 00007fb0ede15fa0 RCX: 00007fb0edb9acb9
[ 1260.492042][T24189] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[ 1260.500014][T24189] RBP: 00007fb0ee9cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1260.507977][T24189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1260.515937][T24189] R13: 00007fb0ede16038 R14: 00007fb0ede15fa0 R15: 00007ffca5345088
[ 1260.523915][T24189]  </TASK>
[ 1260.696456][T24192] netlink: 'syz.1.6263': attribute type 13 has an invalid length.
[ 1260.728244][T24192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6263'.
[ 1260.796824][ T8696] device veth0_to_team left promiscuous mode
[ 1260.802984][ T8696] Ÿë
: port 2(veth0_to_team) entered disabled state
[ 1260.832124][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1260.848030][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1260.892006][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1260.902626][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1260.921619][ T8696] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1260.931260][ T8696] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1261.372439][T24228] FAULT_INJECTION: forcing a failure.
[ 1261.372439][T24228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1261.434842][T24228] CPU: 1 PID: 24228 Comm: syz.1.6270 Not tainted syzkaller #0
[ 1261.442356][T24228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1261.452423][T24228] Call Trace:
[ 1261.455717][T24228]  <TASK>
[ 1261.458656][T24228]  dump_stack_lvl+0x188/0x24e
[ 1261.463366][T24228]  ? show_regs_print_info+0x12/0x12
[ 1261.468582][T24228]  ? load_image+0x400/0x400
[ 1261.473103][T24228]  ? __lock_acquire+0x7d10/0x7d10
[ 1261.478152][T24228]  should_fail_ex+0x399/0x4d0
[ 1261.482854][T24228]  _copy_from_user+0x2c/0x170
[ 1261.487567][T24228]  copy_from_sockptr+0x69/0x80
[ 1261.492340][T24228]  packet_setsockopt+0x1f6/0x1390
[ 1261.497384][T24228]  ? packet_ioctl+0x240/0x240
[ 1261.502083][T24228]  ? __fget_files+0x28/0x4b0
[ 1261.506702][T24228]  ? aa_sk_perm+0x81f/0x950
[ 1261.511224][T24228]  ? aa_af_perm+0x340/0x340
[ 1261.515738][T24228]  ? __fget_files+0x43d/0x4b0
[ 1261.520435][T24228]  ? aa_sock_opt_perm+0x74/0x100
[ 1261.525383][T24228]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 1261.530941][T24228]  ? security_socket_setsockopt+0x7a/0xa0
[ 1261.536672][T24228]  ? packet_ioctl+0x240/0x240
[ 1261.541376][T24228]  __sys_setsockopt+0x2bf/0x3d0
[ 1261.546262][T24228]  __x64_sys_setsockopt+0xb1/0xc0
[ 1261.551320][T24228]  do_syscall_64+0x4c/0xa0
[ 1261.555754][T24228]  ? clear_bhb_loop+0x60/0xb0
[ 1261.560442][T24228]  ? clear_bhb_loop+0x60/0xb0
[ 1261.565131][T24228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1261.571036][T24228] RIP: 0033:0x7fedfc99acb9
[ 1261.575457][T24228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.595073][T24228] RSP: 002b:00007fedfd880028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1261.603501][T24228] RAX: ffffffffffffffda RBX: 00007fedfcc15fa0 RCX: 00007fedfc99acb9
[ 1261.611481][T24228] RDX: 0000000000000013 RSI: 0000000000000107 RDI: 0000000000000003
[ 1261.619459][T24228] RBP: 00007fedfd880090 R08: 0000000000000004 R09: 0000000000000000
[ 1261.627438][T24228] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001
[ 1261.635419][T24228] R13: 00007fedfcc16038 R14: 00007fedfcc15fa0 R15: 00007fff35e3a798
[ 1261.643413][T24228]  </TASK>
[ 1262.208354][ T8696] device veth1_macvtap left promiscuous mode
[ 1262.218160][ T8696] device veth1_vlan left promiscuous mode
[ 1265.240822][ T8696] team0 (unregistering): Port device hsr_slave_0 removed
[ 1265.336609][ T8696] team0 (unregistering): Port device team_slave_1 removed
[ 1265.405462][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1265.697068][ T8696] bond0 (unregistering): Released all slaves
[ 1265.737295][T24232] netlink: 'syz.2.6271': attribute type 12 has an invalid length.
[ 1265.745395][T24232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6271'.
[ 1265.765052][T24254] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6279'.
[ 1266.044520][T23956] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1266.078744][T24268] netlink: 'syz.1.6283': attribute type 3 has an invalid length.
[ 1266.087526][T24268] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6283'.
[ 1266.116410][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1266.128297][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1266.151401][T23956] 8021q: adding VLAN 0 to HW filter on device team0
[ 1266.196810][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1266.229441][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1266.245941][T23456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1266.253168][T23456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1266.300408][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1266.354811][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1266.372943][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1266.393813][T23482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1266.401036][T23482] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1266.473715][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1266.491197][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1266.560887][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1266.582485][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1266.598531][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1266.623710][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1266.673513][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1266.703635][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1266.719527][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1266.736240][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1266.758832][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1266.781417][T23956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1267.052725][T24290] netlink: 'syz.2.6287': attribute type 2 has an invalid length.
[ 1267.093443][T24290] device .*! entered promiscuous mode
[ 1267.496550][T24301] netlink: 'syz.2.6289': attribute type 12 has an invalid length.
[ 1267.504556][T24301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6289'.
[ 1267.696023][T23485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1267.705263][T23485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1267.720449][T23956] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1267.809947][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1267.832118][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1267.947843][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1267.961120][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1268.000500][T23956] device veth0_vlan entered promiscuous mode
[ 1268.033979][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1268.057755][T23482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1268.106325][T23956] device veth1_vlan entered promiscuous mode
[ 1268.220242][T23485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1268.237766][T23485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1268.269213][T23956] device veth0_macvtap entered promiscuous mode
[ 1268.315418][T23956] device veth1_macvtap entered promiscuous mode
[ 1268.405126][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1268.444141][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.470783][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1268.497150][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.519280][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1268.544165][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.570729][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1268.614882][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.633960][T23956] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1268.645210][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1268.656157][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.675412][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1268.694972][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.705480][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1268.734080][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.754592][T23956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1268.774996][T23956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1268.795435][T23956] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1268.811600][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1268.830910][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1268.841090][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1268.861625][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1268.876027][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1268.898496][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1268.923891][T23956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1268.943620][T23956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1268.963989][T23956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1268.987564][T23956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.206226][T23456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1269.214364][T23456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1269.302600][T23467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1269.330564][T23467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1269.370133][T23467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1269.417420][T23456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1269.725930][T24336] netlink: 'syz.3.6205': attribute type 13 has an invalid length.
[ 1269.757432][T24336] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6205'.
[ 1271.152058][T24359] netlink: 'syz.4.6302': attribute type 12 has an invalid length.
[ 1271.212257][T24359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6302'.
[ 1274.430334][T24404] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6312'.
[ 1274.852560][T24422] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6316'.
[ 1275.064158][T24426] netlink: 'syz.3.6317': attribute type 12 has an invalid length.
[ 1275.121260][T24426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6317'.
[ 1276.904344][T24455] netlink: 'syz.1.6331': attribute type 12 has an invalid length.
[ 1276.941703][T24455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6331'.
[ 1276.970885][T24459] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6330'.
[ 1277.005666][T24465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1277.065591][T24465] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1277.094720][T24465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1277.115067][T24465] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1277.445785][T24476] netlink: 15862 bytes leftover after parsing attributes in process `syz.1.6338'.
[ 1279.089271][T24497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6346'.
[ 1279.112543][T24499] netlink: 'syz.1.6348': attribute type 12 has an invalid length.
[ 1279.125375][T24499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6348'.
[ 1279.149598][T24497] netlink: 'syz.3.6346': attribute type 39 has an invalid length.
[ 1279.163001][T24497] device veth0_macvtap left promiscuous mode
[ 1279.621858][T24516] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6356'.
[ 1280.490525][T24534] netlink: 'syz.1.6361': attribute type 12 has an invalid length.
[ 1280.575893][T24534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6361'.
[ 1281.161110][T24544] netlink: 'syz.1.6364': attribute type 39 has an invalid length.
[ 1281.192389][T24544] device veth0_macvtap left promiscuous mode
[ 1281.633558][T24562] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.6370'.
[ 1281.682310][T24562] netlink: zone id is out of range
[ 1281.958789][T24572] netlink: 'syz.3.6374': attribute type 12 has an invalid length.
[ 1281.973229][T24572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6374'.
[ 1282.027065][T24578] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6375'.
[ 1282.487994][T24581] device hsr0 entered promiscuous mode
[ 1282.557295][T24583] netlink: 'syz.3.6378': attribute type 10 has an invalid length.
[ 1282.590893][T24583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6378'.
[ 1282.616876][T24583] device ipvlan1 entered promiscuous mode
[ 1282.643979][T24583] bridge0: port 3(ipvlan1) entered blocking state
[ 1282.675167][T24583] bridge0: port 3(ipvlan1) entered disabled state
[ 1282.710886][T24583] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1283.096864][T24589] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6380'.
[ 1283.235530][T24589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1283.315186][T24589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1283.354458][T24589] bond0 (unregistering): Released all slaves
[ 1283.383167][T24601] netlink: 'syz.2.6385': attribute type 29 has an invalid length.
[ 1283.400901][T24601] netlink: 'syz.2.6385': attribute type 29 has an invalid length.
[ 1283.436542][T24601] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6385'.
[ 1283.447894][T24601] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[ 1283.627417][T24606] netlink: 'syz.3.6388': attribute type 11 has an invalid length.
[ 1283.645006][T24606] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6388'.
[ 1283.666589][T24606] netlink: 'syz.3.6388': attribute type 11 has an invalid length.
[ 1283.674592][T24606] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6388'.
[ 1283.733723][T24605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1285.201814][T24656] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6407'.
[ 1285.684347][T24673] netlink: 'syz.1.6414': attribute type 21 has an invalid length.
[ 1285.698432][T24673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6414'.
[ 1285.893144][T24677] netlink: 'syz.1.6414': attribute type 29 has an invalid length.
[ 1287.989380][T24722] netlink: 'syz.0.6431': attribute type 12 has an invalid length.
[ 1288.002835][T24722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6431'.
[ 1288.019104][T24724] netlink: 'syz.2.6430': attribute type 46 has an invalid length.
[ 1288.053305][T24724] netlink: 'syz.2.6430': attribute type 41 has an invalid length.
[ 1289.330452][T24758] netlink: 'syz.3.6444': attribute type 12 has an invalid length.
[ 1289.340911][T24758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6444'.
[ 1289.362098][T24756] Â: renamed from pim6reg1
[ 1289.394795][T24760] netlink: 'syz.0.6445': attribute type 13 has an invalid length.
[ 1289.406703][T24760] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.6445'.
[ 1290.533257][T24790] netlink: 'syz.2.6456': attribute type 12 has an invalid length.
[ 1290.555155][T24790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6456'.
[ 1290.804373][T24802] bond0: (slave wlan1): Error: Slave device does not support XDP
[ 1290.871013][T24807] netlink: 'syz.0.6460': attribute type 10 has an invalid length.
[ 1290.946741][T24807] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1291.194147][T24820] bond0: (slave wlan1): Error: Slave device does not support XDP
[ 1291.498124][T24827] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6469'.
[ 1291.637895][T24827] netlink: del zone limit has 4 unknown bytes
[ 1291.969592][T24838] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6471'.
[ 1292.213184][T24842] netlink: 'syz.2.6472': attribute type 12 has an invalid length.
[ 1292.241721][T24842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6472'.
[ 1292.511428][T24852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6476'.
[ 1292.539781][T24852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6476'.
[ 1292.570634][T24856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6476'.
[ 1292.882151][T24868] FAULT_INJECTION: forcing a failure.
[ 1292.882151][T24868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1292.900329][T24868] CPU: 0 PID: 24868 Comm: syz.0.6480 Not tainted syzkaller #0
[ 1292.907824][T24868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1292.917934][T24868] Call Trace:
[ 1292.921231][T24868]  <TASK>
[ 1292.924180][T24868]  dump_stack_lvl+0x188/0x24e
[ 1292.928896][T24868]  ? show_regs_print_info+0x12/0x12
[ 1292.934125][T24868]  ? load_image+0x400/0x400
[ 1292.938660][T24868]  ? __lock_acquire+0x7d10/0x7d10
[ 1292.943721][T24868]  should_fail_ex+0x399/0x4d0
[ 1292.948431][T24868]  _copy_from_iter+0x1c0/0x1130
[ 1292.953324][T24868]  ? copyout_mc+0x110/0x110
[ 1292.957863][T24868]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1292.963878][T24868]  ? lock_chain_count+0x20/0x20
[ 1292.968758][T24868]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1292.973813][T24868]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1292.979480][T24868]  ? page_copy_sane+0x4e/0x390
[ 1292.984281][T24868]  copy_page_from_iter+0x77/0x100
[ 1292.989339][T24868]  pipe_write+0x87f/0x1b20
[ 1292.993805][T24868]  ? pipe_read+0x1260/0x1260
[ 1292.998428][T24868]  ? end_current_label_crit_section+0x14b/0x170
[ 1293.004694][T24868]  ? common_file_perm+0x171/0x1c0
[ 1293.009753][T24868]  vfs_write+0x4b1/0xa30
[ 1293.014036][T24868]  ? file_end_write+0x250/0x250
[ 1293.018920][T24868]  ? __fget_files+0x43d/0x4b0
[ 1293.023635][T24868]  ? __fdget_pos+0x1d4/0x360
[ 1293.028250][T24868]  ? ksys_write+0x71/0x250
[ 1293.032702][T24868]  ksys_write+0x14c/0x250
[ 1293.037067][T24868]  ? __ia32_sys_read+0x80/0x80
[ 1293.041861][T24868]  ? lockdep_hardirqs_on+0x94/0x140
[ 1293.047110][T24868]  do_syscall_64+0x4c/0xa0
[ 1293.051556][T24868]  ? clear_bhb_loop+0x60/0xb0
[ 1293.056257][T24868]  ? clear_bhb_loop+0x60/0xb0
[ 1293.060977][T24868]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1293.066892][T24868] RIP: 0033:0x7fdc64d9acb9
[ 1293.071327][T24868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1293.090961][T24868] RSP: 002b:00007fdc65b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1293.099403][T24868] RAX: ffffffffffffffda RBX: 00007fdc65016090 RCX: 00007fdc64d9acb9
[ 1293.107402][T24868] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000
[ 1293.115398][T24868] RBP: 00007fdc65b8b090 R08: 0000000000000000 R09: 0000000000000000
[ 1293.123393][T24868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1293.131387][T24868] R13: 00007fdc65016128 R14: 00007fdc65016090 R15: 00007ffe91b48558
[ 1293.139583][T24868]  </TASK>
[ 1295.834064][T24888] netlink: 'syz.2.6486': attribute type 39 has an invalid length.
[ 1295.907643][T24888] device veth0_macvtap left promiscuous mode
[ 1295.944606][T24894] FAULT_INJECTION: forcing a failure.
[ 1295.944606][T24894] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1296.001364][T24894] CPU: 1 PID: 24894 Comm: syz.3.6488 Not tainted syzkaller #0
[ 1296.008887][T24894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1296.018964][T24894] Call Trace:
[ 1296.022255][T24894]  <TASK>
[ 1296.025200][T24894]  dump_stack_lvl+0x188/0x24e
[ 1296.029903][T24894]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1296.036088][T24894]  ? show_regs_print_info+0x12/0x12
[ 1296.041310][T24894]  ? load_image+0x400/0x400
[ 1296.045847][T24894]  should_fail_ex+0x399/0x4d0
[ 1296.050556][T24894]  prepare_alloc_pages+0x1e2/0x5f0
[ 1296.055703][T24894]  __alloc_pages+0x130/0x4f0
[ 1296.060335][T24894]  ? zone_statistics+0x170/0x170
[ 1296.065314][T24894]  ? copy_page_from_iter+0xe4/0x100
[ 1296.070545][T24894]  pipe_write+0x623/0x1b20
[ 1296.075018][T24894]  ? pipe_read+0x1260/0x1260
[ 1296.079641][T24894]  ? end_current_label_crit_section+0x14b/0x170
[ 1296.086004][T24894]  ? common_file_perm+0x171/0x1c0
[ 1296.091046][T24894]  vfs_write+0x4b1/0xa30
[ 1296.095289][T24894]  ? file_end_write+0x250/0x250
[ 1296.100136][T24894]  ? __fget_files+0x43d/0x4b0
[ 1296.104810][T24894]  ? __fdget_pos+0x1d4/0x360
[ 1296.109413][T24894]  ? ksys_write+0x71/0x250
[ 1296.113872][T24894]  ksys_write+0x14c/0x250
[ 1296.118236][T24894]  ? __ia32_sys_read+0x80/0x80
[ 1296.123043][T24894]  ? lockdep_hardirqs_on+0x94/0x140
[ 1296.128272][T24894]  do_syscall_64+0x4c/0xa0
[ 1296.132713][T24894]  ? clear_bhb_loop+0x60/0xb0
[ 1296.137410][T24894]  ? clear_bhb_loop+0x60/0xb0
[ 1296.142122][T24894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1296.148041][T24894] RIP: 0033:0x7f1847d9acb9
[ 1296.152476][T24894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1296.172109][T24894] RSP: 002b:00007f1848bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1296.180549][T24894] RAX: ffffffffffffffda RBX: 00007f1848015fa0 RCX: 00007f1847d9acb9
[ 1296.188545][T24894] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000
[ 1296.196537][T24894] RBP: 00007f1848bfc090 R08: 0000000000000000 R09: 0000000000000000
[ 1296.204618][T24894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1296.212615][T24894] R13: 00007f1848016038 R14: 00007f1848015fa0 R15: 00007ffceb697c78
[ 1296.220626][T24894]  </TASK>
[ 1296.317307][T24896] netlink: 'syz.1.6489': attribute type 12 has an invalid length.
[ 1296.371806][T24896] __nla_validate_parse: 1 callbacks suppressed
[ 1296.371862][T24896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6489'.
[ 1296.607072][T24909] netlink: 'syz.3.6491': attribute type 3 has an invalid length.
[ 1296.677602][T24909] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6491'.
[ 1296.851649][T24914] netlink: 'syz.1.6493': attribute type 3 has an invalid length.
[ 1296.943187][T24914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6493'.
[ 1297.135367][ T4282] Bluetooth: hci1: command 0x0406 tx timeout
[ 1297.568169][T24924] netlink: 'syz.2.6496': attribute type 3 has an invalid length.
[ 1297.637086][T24924] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6496'.
[ 1300.153865][T24946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6502'.
[ 1300.178986][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.185362][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.883107][T24955] netlink: 'syz.0.6504': attribute type 12 has an invalid length.
[ 1300.900166][T24955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6504'.
[ 1300.910607][T24954] IPv6: Can't replace route, no match found
[ 1300.935343][T24957] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1301.698093][T24985] netlink: 'syz.3.6513': attribute type 3 has an invalid length.
[ 1301.715132][T24985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6513'.
[ 1303.752727][T24998] netlink: 'syz.0.6515': attribute type 12 has an invalid length.
[ 1303.765039][T24998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6515'.
[ 1303.986975][T25006] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6517'.
[ 1304.052295][T25010] netlink: 'syz.0.6520': attribute type 21 has an invalid length.
[ 1304.075219][T25010] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6520'.
[ 1307.248574][T25016] ------------[ cut here ]------------
[ 1307.254476][T25016] WARNING: CPU: 0 PID: 25016 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470
[ 1307.264491][T25016] Modules linked in:
[ 1307.268458][T25016] CPU: 0 PID: 25016 Comm: syz.2.6521 Not tainted syzkaller #0
[ 1307.276024][T25016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1307.286509][T25016] RIP: 0010:perf_pending_task+0x358/0x470
[ 1307.292262][T25016] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6
[ 1307.311963][T25016] RSP: 0018:ffffc9000d58f8e0 EFLAGS: 00010293
[ 1307.318101][T25016] RAX: ffffffff81a7f328 RBX: ffff8880443bea58 RCX: ffff8880244f5940
[ 1307.326150][T25016] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1307.334154][T25016] RBP: 0000000000000001 R08: ffff8880244f6343 R09: 1ffff1100489ec68
[ 1307.342211][T25016] R10: dffffc0000000000 R11: ffffed100489ec69 R12: ffff8880244f5940
[ 1307.350249][T25016] R13: ffff888057b8cd60 R14: ffff8880443be820 R15: 1ffff11008877d04
[ 1307.358301][T25016] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1307.367293][T25016] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1307.373903][T25016] CR2: 0000000020000000 CR3: 000000001d669000 CR4: 00000000003506f0
[ 1307.381981][T25016] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000000000000000
[ 1307.390015][T25016] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1307.398086][T25016] Call Trace:
[ 1307.401390][T25016]  <TASK>
[ 1307.404344][T25016]  task_work_run+0x1d0/0x260
[ 1307.409027][T25016]  ? task_work_cancel+0x220/0x220
[ 1307.414089][T25016]  ? do_raw_spin_unlock+0x11d/0x230
[ 1307.419375][T25016]  do_exit+0x982/0x2480
[ 1307.423574][T25016]  ? put_task_struct+0x80/0x80
[ 1307.428415][T25016]  ? lockdep_hardirqs_on+0x94/0x140
[ 1307.433645][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.439910][T25016]  do_group_exit+0x217/0x2d0
[ 1307.444537][T25016]  ? do_group_exit+0x1/0x2d0
[ 1307.449210][T25016]  get_signal+0x1272/0x1350
[ 1307.453762][T25016]  arch_do_signal_or_restart+0xc4/0x1350
[ 1307.459509][T25016]  ? lock_chain_count+0x20/0x20
[ 1307.464389][T25016]  ? rcu_is_watching+0x11/0xa0
[ 1307.469226][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.475433][T25016]  ? lockdep_hardirqs_on+0x94/0x140
[ 1307.480661][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.486881][T25016]  ? get_sigframe_size+0x10/0x10
[ 1307.491945][T25016]  ? task_work_add+0x263/0x330
[ 1307.496815][T25016]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1307.502307][T25016]  exit_to_user_mode_loop+0x70/0x110
[ 1307.507670][T25016]  exit_to_user_mode_prepare+0xee/0x180
[ 1307.513256][T25016]  syscall_exit_to_user_mode+0x16/0x40
[ 1307.518788][T25016]  do_syscall_64+0x58/0xa0
[ 1307.523230][T25016]  ? clear_bhb_loop+0x60/0xb0
[ 1307.527984][T25016]  ? clear_bhb_loop+0x60/0xb0
[ 1307.532684][T25016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1307.538647][T25016] RIP: 0033:0x7f7fa699acb9
[ 1307.543080][T25016] Code: Unable to access opcode bytes at 0x7f7fa699ac8f.
[ 1307.550164][T25016] RSP: 002b:00007f7fa4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1307.558632][T25016] RAX: fffffffffffffff2 RBX: 00007f7fa6c15fa0 RCX: 00007f7fa699acb9
[ 1307.566670][T25016] RDX: 0000200000000900 RSI: 00000000000089f0 RDI: 000000000000000d
[ 1307.574645][T25016] RBP: 00007f7fa6a08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1307.582694][T25016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1307.590717][T25016] R13: 00007f7fa6c16038 R14: 00007f7fa6c15fa0 R15: 00007ffc565daa88
[ 1307.598777][T25016]  </TASK>
[ 1307.601818][T25016] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1307.609210][T25016] CPU: 0 PID: 25016 Comm: syz.2.6521 Not tainted syzkaller #0
[ 1307.616662][T25016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1307.626725][T25016] Call Trace:
[ 1307.629997][T25016]  <TASK>
[ 1307.632923][T25016]  dump_stack_lvl+0x188/0x24e
[ 1307.637613][T25016]  ? memcpy+0x3c/0x60
[ 1307.641598][T25016]  ? show_regs_print_info+0x12/0x12
[ 1307.646965][T25016]  ? load_image+0x400/0x400
[ 1307.651469][T25016]  panic+0x2e5/0x730
[ 1307.655368][T25016]  ? bpf_jit_dump+0xd0/0xd0
[ 1307.659881][T25016]  __warn+0x2f8/0x4f0
[ 1307.663862][T25016]  ? perf_pending_task+0x358/0x470
[ 1307.668968][T25016]  ? perf_pending_task+0x358/0x470
[ 1307.674075][T25016]  report_bug+0x2ba/0x4f0
[ 1307.678400][T25016]  ? perf_pending_task+0x358/0x470
[ 1307.683506][T25016]  handle_bug+0x3a/0x70
[ 1307.687658][T25016]  exc_invalid_op+0x16/0x40
[ 1307.692155][T25016]  asm_exc_invalid_op+0x16/0x20
[ 1307.696998][T25016] RIP: 0010:perf_pending_task+0x358/0x470
[ 1307.702715][T25016] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6
[ 1307.722762][T25016] RSP: 0018:ffffc9000d58f8e0 EFLAGS: 00010293
[ 1307.728829][T25016] RAX: ffffffff81a7f328 RBX: ffff8880443bea58 RCX: ffff8880244f5940
[ 1307.736797][T25016] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1307.744762][T25016] RBP: 0000000000000001 R08: ffff8880244f6343 R09: 1ffff1100489ec68
[ 1307.752725][T25016] R10: dffffc0000000000 R11: ffffed100489ec69 R12: ffff8880244f5940
[ 1307.760688][T25016] R13: ffff888057b8cd60 R14: ffff8880443be820 R15: 1ffff11008877d04
[ 1307.768659][T25016]  ? perf_pending_task+0x358/0x470
[ 1307.773803][T25016]  task_work_run+0x1d0/0x260
[ 1307.778411][T25016]  ? task_work_cancel+0x220/0x220
[ 1307.783448][T25016]  ? do_raw_spin_unlock+0x11d/0x230
[ 1307.788650][T25016]  do_exit+0x982/0x2480
[ 1307.792816][T25016]  ? put_task_struct+0x80/0x80
[ 1307.797577][T25016]  ? lockdep_hardirqs_on+0x94/0x140
[ 1307.802786][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.808944][T25016]  do_group_exit+0x217/0x2d0
[ 1307.813800][T25016]  ? do_group_exit+0x1/0x2d0
[ 1307.818391][T25016]  get_signal+0x1272/0x1350
[ 1307.822908][T25016]  arch_do_signal_or_restart+0xc4/0x1350
[ 1307.828540][T25016]  ? lock_chain_count+0x20/0x20
[ 1307.833384][T25016]  ? rcu_is_watching+0x11/0xa0
[ 1307.838145][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.844294][T25016]  ? lockdep_hardirqs_on+0x94/0x140
[ 1307.849490][T25016]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1307.855639][T25016]  ? get_sigframe_size+0x10/0x10
[ 1307.860570][T25016]  ? task_work_add+0x263/0x330
[ 1307.865345][T25016]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1307.870801][T25016]  exit_to_user_mode_loop+0x70/0x110
[ 1307.876086][T25016]  exit_to_user_mode_prepare+0xee/0x180
[ 1307.881627][T25016]  syscall_exit_to_user_mode+0x16/0x40
[ 1307.887075][T25016]  do_syscall_64+0x58/0xa0
[ 1307.891484][T25016]  ? clear_bhb_loop+0x60/0xb0
[ 1307.896153][T25016]  ? clear_bhb_loop+0x60/0xb0
[ 1307.900822][T25016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1307.906705][T25016] RIP: 0033:0x7f7fa699acb9
[ 1307.911111][T25016] Code: Unable to access opcode bytes at 0x7f7fa699ac8f.
[ 1307.918116][T25016] RSP: 002b:00007f7fa4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1307.926525][T25016] RAX: fffffffffffffff2 RBX: 00007f7fa6c15fa0 RCX: 00007f7fa699acb9
[ 1307.934488][T25016] RDX: 0000200000000900 RSI: 00000000000089f0 RDI: 000000000000000d
[ 1307.942449][T25016] RBP: 00007f7fa6a08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1307.950413][T25016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1307.958373][T25016] R13: 00007f7fa6c16038 R14: 00007f7fa6c15fa0 R15: 00007ffc565daa88
[ 1307.966435][T25016]  </TASK>
[ 1307.969792][T25016] Kernel Offset: disabled
[ 1307.974106][T25016] Rebooting in 86400 seconds..