last executing test programs:

12.487529754s ago: executing program 1 (id=12102):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b16", 0x3a}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40840)
socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000900)={0x1, 0x2, [@remote, @multicast]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(0x3)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.751912037s ago: executing program 1 (id=12106):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100111000100000000000000000000001000000000000000100100000e"], 0x28}, 0x0) (fail_nth: 11)

11.33570144s ago: executing program 1 (id=12109):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x601, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100111000100000000000000000000001000000000000000100100000e"], 0x28}, 0x0)

11.274619142s ago: executing program 1 (id=12112):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0)

6.561128131s ago: executing program 3 (id=12130):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, <r1=>0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/70, 0x46}], 0x8, &(0x7f0000000780)=""/198, 0xc6}, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x18, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000200604000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="1c0000005e007f62516a28aa1cb4c58e2912e5a64ed381df0069f51c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x2c}], 0x1}, 0x4000000)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x8000}, 0x8)
r7 = gettid()
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x11, 0x6, 0x9, 0x0, 0x5, 0x4017, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x9}, 0x104040, 0x5, 0xe, 0x3, 0x2, 0xfffffffd, 0x85, 0x0, 0x7, 0x0, 0x1}, r7, 0x5, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x2, 0x0, 0x0, 0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x3, 0xffffffffffffbbfe, 0x40000, 0x0, 0x0, 0x6fd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))
recvmsg(r6, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069c391f003dc68c84490aee2b9bd6efb2502eaf60d00", 0x2e}, {&(0x7f0000000980)="ab38f76e4590a7937b70b1cfd8e44e21a648c4fd5824b5e5d66e3c0b9b21ee6b194c18053c7f0f3cfe98bb4e1e7aca615dc0dd5a7e9e362237aab5e7291ce90fa06ffd54cf51161c4478d93aaead982b471bebf373182856129d2d8f5dd292bbc9c0bf2af0392d11f387fbb8bc3387b2c56a8a586869b53ddfffc5470a8f382fed632c7abb34515334e293b2fd57c08eb161bc7bbaecac8363b003ee7765c897376955f731e48580d5e96827ab4806fe35efc86537eef1473180f263342ca7ef06dcf805ddf1e39cb9131207f13aad017adf", 0xd2}, {&(0x7f0000000a80)="efb69e63e160478d3277b6705d46d308778f4d5fec72de23bf57c7d0f28d0bb24dda89e73f8f593f63e01550c61a090ae4afcb3e1d19feff0e1fb79c8c2a56668be1643a0ee51dcc5ad147a8d1b59e604f91f316880dc3c9df07889143543d4155fb6e1a472bc693e2d275e550e439a85a7572cbc1b97e0201f0b6692b380c14cf754eb6f2f2006d24404f1bd5d7a03d94d4911b517307e6837adf1bac2c71b61c1d6a43c4853b2de82a3eaf76528e1fcba1f9eca4ce593999e9280931cc9a5625f3c77b7e96dbedd1a488", 0xcb}, {&(0x7f0000001980)="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", 0x400}, {&(0x7f0000002980)="78f4a6919f4bbd527279f97430e51616bdd261a358215ce00123c6d56047b0f7aa4e632e582498f5e7400f5e620d1884d06398aba84d8a51fd39720cb0dfaf3403b2883d44517028f128936304fc40a6bffa39295129e500c2e908b0cb02e1", 0x5f}, {&(0x7f0000002a40)}], 0x6}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)

5.560094693s ago: executing program 2 (id=12136):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, &(0x7f0000000a00), 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x18, 0x0, 0x0)
socketpair(0x3, 0x800, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x40010040)
r3 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900), 0x4)
r4 = socket$kcm(0xa, 0x3, 0x73)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r1, 0x0, 0x4000088)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

5.236851933s ago: executing program 3 (id=12137):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000380)="c516c115"}, 0x20)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r4, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

5.075538058s ago: executing program 2 (id=12138):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b16", 0x3a}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40840)
socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000900)={0x1, 0x2, [@remote, @multicast]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(0x3)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.272056544s ago: executing program 3 (id=12139):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r0, &(0x7f0000000380)="c516c115"}, 0x20)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r4, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x4000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r7, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

4.268326914s ago: executing program 2 (id=12140):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe1b4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd409d6e4edef3d93452a92954b43370e970161ed7875e585d924ed43df459cab16", 0xd8}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

3.991064152s ago: executing program 2 (id=12141):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000380)="c516c115"}, 0x20)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r4, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

3.247690896s ago: executing program 3 (id=12144):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000509800e6000000292300002f009d009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ffed95000000000000005509500004000000181b0000262289d8bbfd3cf2563cd764ad5b6b7b846c87608c6e26cf13c8", @ANYRES32=r3, @ANYBLOB="00000000000000000f08fcff000000000d60f8ff08000000850000009600000080626e0003000000072400040e000000185b0000d18c00000000000000000000184a0000fcffffff00000000000000008520000005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x87, &(0x7f00000002c0)=""/135, 0x1e00, 0x41, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0xfffffff5, 0xf}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x1], &(0x7f0000000580)=[{0x0, 0x1, 0x3, 0x1}, {0x3, 0x5, 0xa, 0x9}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x3, 0xf, 0xc}, {0x2, 0x1, 0x6, 0xc}, {0x0, 0x5, 0x3, 0x6}], 0x10, 0x7}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(r10)
r11 = socket$kcm(0x23, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x6, 0x20009, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89ef, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x700, 0x12)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="080000000000000000008000000000000000000075a1ac298e277f18a67f9b1b524c5b42a14897188d4d06c37d8e89c4a3d57868e60181741574e9a1a9551b7902afaf5a2c67d37d0d72f55d15e5bd102e2fbfe7b635e67634dc82e78ee890513f", @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="00000000020000000400"/28], 0x50)
setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000)=r8, 0x8)
openat$cgroup_int(r8, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000279e73a0da52a54ea8561affdb3fbf2f6e70fc68af0236a64147706e231625a72445e8f667ccd784bc7292316782403a64093b97d455104501c7ef20c4e79a0f8454eec1d0865cd88382b976fdf9fd453ba778b1ef3c8e3b5dc2b58c433530a409e45562f357cc10d2db00e2706c8da732a718b2fe0c79324177103f155690b72ba52eb6267d6b76a1af28a817b688eab944aa067050858e8a6b382c04b16b423c5a16d5a2043afab73a8365454b931d914f02b8a5e5061375ae50299175a13cbf15b1fca8c8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000006000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_freezer_state(r10, &(0x7f00000007c0), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x38, 0xe, 0x0, &(0x7f0000000240)="00000000000800005bdfa092873f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, 0x0, 0x0)

3.243626886s ago: executing program 0 (id=12152):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r1, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)

3.057582932s ago: executing program 0 (id=12145):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, &(0x7f0000000a00), 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x18, 0x0, 0x0)
socketpair(0x3, 0x800, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x40010040)
r3 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900), 0x4)
r4 = socket$kcm(0xa, 0x3, 0x73)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(r1, 0x0, 0x4000088)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

2.970023395s ago: executing program 2 (id=12147):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300004a000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.945311566s ago: executing program 0 (id=12148):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b16", 0x3a}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40840)
socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000900)={0x1, 0x2, [@remote, @multicast]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.539633728s ago: executing program 0 (id=12149):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000380)="c516c115"}, 0x20)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r4, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

2.272040637s ago: executing program 3 (id=12150):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x4000, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)

1.989822986s ago: executing program 2 (id=12151):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x8, 0xa48, 0x20000, 0xffffffffffffffff, 0x640a9974, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xf}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, 0x0, 0x0}, 0x20)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(r4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xa, 0x0, 0x0, 0x0, 0x581, 0x11, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x4c00, 0xca, 0x200002, 0x6, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x20)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a)

1.060967496s ago: executing program 1 (id=12115):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, 0x0, 0x200ce0c0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x14)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x251a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x8000007be}, 0x114905, 0xc, 0x0, 0xec9b5fc2cc159a1, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a00300000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000317f34962e746e8700"/28], 0x50)
r4 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)

1.057562456s ago: executing program 0 (id=12160):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xfffffffffffffffd, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000680)=[{&(0x7f00000006c0)="ef30e3d92549a66f15578f476774102187b507be75d6fe7f9220f075dd5a63c0fab602d0bb42c82023e39250d0ef7563b2612e9b17006efd0d7c9d474fe81f9fac6d9cc89053453720e93c54fa46dae9e9b602ad5eb332bc828e9f0fc285b5a0e180fada14dd3a651953b3f9a855b632fe283a6fd80bb9c7f2359c7febef930c77de6e71983d8dda445f039e0af7634fd2ff8fe27a21af732e2049e589ed83d09f70605ff7859b6e6ed3c43b04e337967bdcb124e53d291e996b6bc63f315b64598cc92e7225d5cf"}], 0x1}, 0x40400c0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5a96d962f37f54270c35fbc6b1f21bf92671dbe7cef9829e1bad47ae78cab1d056410bee937bbc1b83f23d7e9ef221d5fa8a21690b5bd1999c6cd9d48b9cb108250b87e513a65e5b4b77339d3061d0d0d97cf21a982de7fe6c7925a7a784655bd9203f96c9fef2459aef4705a622dc7b811588372e725eaf92be5603a99ce3d0315b3d9555b28f13bef04bf2538f4d0af9091d44b5252328bfd6b471259f44edcb108ec288ed10d8c8fa12b03d42022442d45516e1ef3edfedc0dc82f539028534e8e"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000039c0)={&(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000002580)="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", 0xf80}, {&(0x7f0000000c80)="d21fbc8fc86ed8d8c3d406fdd98fb2dffc7ad0d1189449a9104a02048892ea97869823c65f96faadf4ce96f094038a597f6fba570efcc02425efff24339d04510f7f006d3af73fc0f44472578527824d3daa158bd16fb746f72586", 0x5b}, {&(0x7f0000003600)="469a47209e1d994b99f55382243841e7511f65ca4ba66af6fdbf0400000006", 0x1f}, {&(0x7f0000000dc0)="d32e066bb7519c1b59283784dbc287144cefcb8038535c079fa97e36cb7417b3974e0dbe374f3daf2abbbe76e5ed9c7f4626033459fb42d162a25bec6518e6d10d1ef5706c7288c8644e239f896c029c385f8de0a9f9e104d5de729d87802363ac6dd2569016f6dbab783bc5740ae069c63d3462644955c9406c9bdaf7e8dc47e54d3ae3dca2af515f220432b68c418d6c9e1077104518b266b8b0a63309606438c4141b433c5c7d0a5f4592e5d12996c3478ffa81b672c7f1127d2090b5e26516473c6e27a4ed5b7606331b1bb15f5e951922a1a3f13db0785ed099a9d662154c41fef5ba7904b0ada16c85338d15b3b574", 0xf2}, {&(0x7f0000000d00)="96858e7ad24a5e0e8f45e523308202b1def768d4812d484f8f4906c91949631497c6dad6c5234807413a438459f2e7836608d82b25db1f1314e796b0317bd991580ffc499b8cd55eb995d043ca71cce01a036eaef2c8a6102a6f6044d9500f2bd5f1a11e0ee8227a1c08cd7591ee5ed3de0f30204982be110a446bdea6c5fd349860b3c8", 0x84}], 0x5, &(0x7f0000000a40)}, 0x40001)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x1e, 0x0}, 0x10100)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000440)=[{&(0x7f0000000080)=""/45, 0x23}], 0x1, 0x0, 0xffffffffffffff28}, 0x40008140)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xc, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a19d76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bf", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000023000b02d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x7, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

251.291681ms ago: executing program 1 (id=12153):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r0, &(0x7f0000000380)="c516c115"}, 0x20)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r4, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x4000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r7, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

251.033451ms ago: executing program 3 (id=12154):
r0 = socket$kcm(0x10, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000003"], 0x0, 0x26}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603", 0x21}, {&(0x7f0000000040)="5b4fd437ed3abc2ed797192c2ceedfe45c8893349e7e7b71d98571fdd3531a8fcb36a6a8de9d00d2d042c4afe3face6db7ced9e63b3a809178f5ddd2ec6bef20fd800272461e498653580c8f3acb1c9ba36bef7ec7eda5857da000bb0e36b914177f07003a673ec9b580ba056c8d2f356192a14f6d736505f6051380a2281607f602906aad3cae5275986a759bc323cf8df8ff8dcc872ba38b2f6e692a3363f20935e6b6623752b54c12dabeae5904b8c0b306abd8cd99679179860b5a2702", 0xbf}], 0x2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x106)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x10, r2}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r3, 0xffffffffffffffff, 0xc, 0x2001, r4, @value=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000180000004000630000ee272227b9856d2a0000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

0s ago: executing program 0 (id=12155):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000380)="c516c115"}, 0x20)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_ro(r1, &(0x7f00000006c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xcf, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r3, 0x0, 0xb4, 0x1000, &(0x7f0000000580)="114538da2b59fbf6610e497d1aedacc135c0798de40f7b739ed5179d1624adb19af075708535a9ffd349a79455ac3e0abf5ae02a4f1dbab2554d69c6fdd78a942e79c80a2a3920aaf6eb89af2db876a506bac1b036d790cbfe0d58908e91a263b6ed5014e2b6bd6ee293c89703084c75945d90a98dbce87d6692add356145080d152cb9eeeab7f6fd172daeb8fce3efd744d0488bd03646b06055311fbe1fa451cb8f094895e4218427b4771542e7e8456def1d0", &(0x7f0000000c40)=""/4096, 0xfffffffe, 0x0, 0x31, 0xca, &(0x7f0000001c40)="498b71fe521df2c603a9b460e948d50f831037c15d5417cb92eff29cc5b6025b23e1b23ccb18623ba141774f366118b655", &(0x7f0000001c80)="95d66504ae0e2cfd14e1e7492733c072acf3d0c8548879220d88b235ff42dc22357dc1a12af770e1959a1527bc1af6bd314065279b57fddf6734f70e6c83d4dacc19162140b322c9fdfc3dfa2b96f439f0c0aa4cafbff85084a753b85b9e6e518652ebcb89be104ac381fefeb1fa248507407fa47acb0cf520a4218ba2a330495df04a3f4c20421be6319f65edc12b08dee8b807048d0fc07813181accdb70d80ea7490749fff9afe9c743ddacb190dec0051e7fbe42f8a78ca4d300e62e97793bed05776a3716d8a61b", 0x1, 0x0, 0x960}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

kernel console output (not intermixed with test programs):

f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2556.881517][ T6836] RSP: 002b:00007f775982b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2556.889927][ T6836] RAX: ffffffffffffffda RBX: 00007f7758c15fa0 RCX: 00007f775899ce59
[ 2556.897890][ T6836] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[ 2556.905854][ T6836] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2556.913818][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2556.921780][ T6836] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2556.929758][ T6836]  </TASK>
[ 2557.089924][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2557.125162][ T6847] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11442'.
[ 2557.862990][ T6856] netlink: 'syz.2.11446': attribute type 10 has an invalid length.
[ 2557.880385][ T6856] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2558.463439][ T6879] netlink: 'syz.1.11455': attribute type 10 has an invalid length.
[ 2558.526722][ T6879] team0: Device ipvlan1 failed to register rx_handler
[ 2558.627193][ T6886] __nla_validate_parse: 1 callbacks suppressed
[ 2558.627211][ T6886] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11456'.
[ 2558.679748][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2559.269474][ T6898] netlink: 'syz.3.11459': attribute type 10 has an invalid length.
[ 2559.279884][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11459'.
[ 2560.271038][ T6923] netlink: 'syz.2.11468': attribute type 10 has an invalid length.
[ 2560.333365][ T6923] team0: Device ipvlan1 failed to register rx_handler
[ 2560.437102][ T6932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11470'.
[ 2560.521877][ T6934] FAULT_INJECTION: forcing a failure.
[ 2560.521877][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2560.550430][ T6934] CPU: 1 PID: 6934 Comm: syz.0.11472 Not tainted syzkaller #0
[ 2560.557948][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2560.568042][ T6934] Call Trace:
[ 2560.571361][ T6934]  <TASK>
[ 2560.574330][ T6934]  dump_stack_lvl+0x18c/0x250
[ 2560.579074][ T6934]  ? show_regs_print_info+0x20/0x20
[ 2560.581471][ T6936] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11473'.
[ 2560.584298][ T6934]  ? load_image+0x420/0x420
[ 2560.584339][ T6934]  ? __lock_acquire+0x7d40/0x7d40
[ 2560.584372][ T6934]  ? snprintf+0xe9/0x140
[ 2560.607485][ T6934]  should_fail_ex+0x39d/0x4d0
[ 2560.612211][ T6934]  _copy_to_user+0x2f/0xa0
[ 2560.616657][ T6934]  simple_read_from_buffer+0xe7/0x150
[ 2560.622062][ T6934]  proc_fail_nth_read+0x1e8/0x260
[ 2560.627117][ T6934]  ? proc_fault_inject_write+0x360/0x360
[ 2560.632786][ T6934]  ? fsnotify_perm+0x271/0x5e0
[ 2560.637563][ T6934]  ? proc_fault_inject_write+0x360/0x360
[ 2560.643216][ T6934]  vfs_read+0x28b/0x970
[ 2560.647414][ T6934]  ? kernel_read+0x1e0/0x1e0
[ 2560.652032][ T6934]  ? __fget_files+0x28/0x4b0
[ 2560.656637][ T6934]  ? __fget_files+0x28/0x4b0
[ 2560.661248][ T6934]  ? __fget_files+0x43d/0x4b0
[ 2560.665966][ T6934]  ? __fdget_pos+0x2a3/0x330
[ 2560.670581][ T6934]  ? ksys_read+0x75/0x260
[ 2560.674941][ T6934]  ksys_read+0x150/0x260
[ 2560.679210][ T6934]  ? vfs_write+0x990/0x990
[ 2560.683654][ T6934]  ? lockdep_hardirqs_on+0x98/0x150
[ 2560.688886][ T6934]  do_syscall_64+0x55/0xb0
[ 2560.693321][ T6934]  ? clear_bhb_loop+0x40/0x90
[ 2560.698018][ T6934]  ? clear_bhb_loop+0x40/0x90
[ 2560.702716][ T6934]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2560.708635][ T6934] RIP: 0033:0x7f4ffbf5d68e
[ 2560.713066][ T6934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2560.732686][ T6934] RSP: 002b:00007f4ffce49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2560.741124][ T6934] RAX: ffffffffffffffda RBX: 00007f4ffce4a6c0 RCX: 00007f4ffbf5d68e
[ 2560.749108][ T6934] RDX: 000000000000000f RSI: 00007f4ffce4a0a0 RDI: 0000000000000004
[ 2560.757094][ T6934] RBP: 00007f4ffce4a090 R08: 0000000000000000 R09: 0000000000000000
[ 2560.765075][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2560.773059][ T6934] R13: 00007f4ffc216038 R14: 00007f4ffc215fa0 R15: 00007ffca89ef278
[ 2560.781088][ T6934]  </TASK>
[ 2561.760896][ T6955] netlink: 'syz.2.11479': attribute type 9 has an invalid length.
[ 2561.799439][ T6955] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11479'.
[ 2561.952289][ T6964] netlink: 'syz.1.11483': attribute type 10 has an invalid length.
[ 2561.971452][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11483'.
[ 2562.150939][ T6973] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11485'.
[ 2562.573791][ T6985] FAULT_INJECTION: forcing a failure.
[ 2562.573791][ T6985] name failslab, interval 1, probability 0, space 0, times 0
[ 2562.586863][ T6985] CPU: 0 PID: 6985 Comm: syz.2.11490 Not tainted syzkaller #0
[ 2562.594373][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2562.604465][ T6985] Call Trace:
[ 2562.607780][ T6985]  <TASK>
[ 2562.610749][ T6985]  dump_stack_lvl+0x18c/0x250
[ 2562.615487][ T6985]  ? show_regs_print_info+0x20/0x20
[ 2562.620732][ T6985]  ? load_image+0x420/0x420
[ 2562.625296][ T6985]  ? __might_sleep+0xe0/0xe0
[ 2562.629942][ T6985]  ? __lock_acquire+0x7d40/0x7d40
[ 2562.635021][ T6985]  ? trace_contention_end+0x39/0xe0
[ 2562.640289][ T6985]  should_fail_ex+0x39d/0x4d0
[ 2562.645044][ T6985]  should_failslab+0x9/0x20
[ 2562.649602][ T6985]  slab_pre_alloc_hook+0x59/0x310
[ 2562.654674][ T6985]  ? mutex_lock_nested+0x20/0x20
[ 2562.659639][ T6985]  ? rxrpc_lookup_local+0x579/0x1610
[ 2562.664953][ T6985]  __kmem_cache_alloc_node+0x53/0x250
[ 2562.670362][ T6985]  ? rxrpc_lookup_local+0x579/0x1610
[ 2562.675677][ T6985]  kmalloc_trace+0x2a/0xe0
[ 2562.680125][ T6985]  rxrpc_lookup_local+0x579/0x1610
[ 2562.685282][ T6985]  ? rxrpc_local_dont_fragment+0x70/0x70
[ 2562.690974][ T6985]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2562.696365][ T6985]  ? lockdep_hardirqs_on+0x98/0x150
[ 2562.701592][ T6985]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2562.706986][ T6985]  ? _local_bh_enable+0xa0/0xa0
[ 2562.711898][ T6985]  rxrpc_sendmsg+0x30a/0x5b0
[ 2562.716534][ T6985]  ? rxrpc_getsockopt+0x150/0x150
[ 2562.721589][ T6985]  ____sys_sendmsg+0x5ba/0x960
[ 2562.726403][ T6985]  ? __sys_sendmsg_sock+0x30/0x30
[ 2562.731442][ T6985]  ? __import_iovec+0x3fa/0x850
[ 2562.736330][ T6985]  ? import_iovec+0x73/0xa0
[ 2562.740856][ T6985]  ___sys_sendmsg+0x2a6/0x360
[ 2562.745562][ T6985]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2562.750400][ T6985]  ? __lock_acquire+0x7d40/0x7d40
[ 2562.755501][ T6985]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2562.760374][ T6985]  ? __x64_sys_sendmsg+0x80/0x80
[ 2562.765366][ T6985]  ? lockdep_hardirqs_on+0x98/0x150
[ 2562.770600][ T6985]  do_syscall_64+0x55/0xb0
[ 2562.775032][ T6985]  ? clear_bhb_loop+0x40/0x90
[ 2562.779725][ T6985]  ? clear_bhb_loop+0x40/0x90
[ 2562.784423][ T6985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2562.790339][ T6985] RIP: 0033:0x7f775899ce59
[ 2562.794783][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2562.814410][ T6985] RSP: 002b:00007f775982b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2562.822846][ T6985] RAX: ffffffffffffffda RBX: 00007f7758c15fa0 RCX: 00007f775899ce59
[ 2562.830831][ T6985] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000003
[ 2562.838822][ T6985] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2562.846804][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2562.854788][ T6985] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2562.862809][ T6985]  </TASK>
[ 2562.982153][ T6992] netlink: 'syz.2.11492': attribute type 3 has an invalid length.
[ 2563.001876][ T6992] netlink: 'syz.2.11492': attribute type 6 has an invalid length.
[ 2563.018621][ T6992] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.11492'.
[ 2563.250933][ T7003] netlink: 'syz.1.11495': attribute type 10 has an invalid length.
[ 2563.373546][ T7003] FAULT_INJECTION: forcing a failure.
[ 2563.373546][ T7003] name failslab, interval 1, probability 0, space 0, times 0
[ 2563.412279][ T7003] CPU: 1 PID: 7003 Comm: syz.1.11495 Not tainted syzkaller #0
[ 2563.419806][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2563.429900][ T7003] Call Trace:
[ 2563.433220][ T7003]  <TASK>
[ 2563.436195][ T7003]  dump_stack_lvl+0x18c/0x250
[ 2563.440928][ T7003]  ? trace_event_raw_event_lock+0x250/0x250
[ 2563.446879][ T7003]  ? show_regs_print_info+0x20/0x20
[ 2563.452141][ T7003]  ? load_image+0x420/0x420
[ 2563.456736][ T7003]  should_fail_ex+0x39d/0x4d0
[ 2563.461489][ T7003]  should_failslab+0x9/0x20
[ 2563.466054][ T7003]  slab_pre_alloc_hook+0x59/0x310
[ 2563.471131][ T7003]  kmem_cache_alloc_node+0x60/0x320
[ 2563.476351][ T7003]  ? __alloc_skb+0x103/0x2c0
[ 2563.480989][ T7003]  __alloc_skb+0x103/0x2c0
[ 2563.485445][ T7003]  rtmsg_ifinfo_build_skb+0x8c/0x260
[ 2563.490783][ T7003]  rtmsg_ifinfo+0x8c/0x1a0
[ 2563.495239][ T7003]  __dev_notify_flags+0xf3/0x310
[ 2563.500221][ T7003]  ? __dev_change_flags+0x6a0/0x6a0
[ 2563.505441][ T7003]  ? __dev_change_flags+0x529/0x6a0
[ 2563.510670][ T7003]  ? dev_get_flags+0x1c0/0x1c0
[ 2563.515454][ T7003]  ? printk_sprint+0x460/0x460
[ 2563.520243][ T7003]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 2563.526156][ T7003]  ? _raw_spin_unlock+0x40/0x40
[ 2563.531034][ T7003]  dev_change_flags+0xe8/0x1a0
[ 2563.535826][ T7003]  do_setlink+0xc58/0x4130
[ 2563.540267][ T7003]  ? arch_stack_walk+0x160/0x190
[ 2563.545235][ T7003]  ? load_image+0x420/0x420
[ 2563.549762][ T7003]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 2563.555930][ T7003]  ? stack_trace_save+0xaa/0x100
[ 2563.560905][ T7003]  ? __nla_validate_parse+0x2522/0x2ea0
[ 2563.566525][ T7003]  ? __nla_validate+0x50/0x50
[ 2563.571286][ T7003]  ? validate_linkmsg+0x719/0x910
[ 2563.576340][ T7003]  rtnl_newlink+0x17da/0x20a0
[ 2563.581099][ T7003]  ? rtnl_setlink+0x4e0/0x4e0
[ 2563.585802][ T7003]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 2563.591983][ T7003]  ? rcu_is_watching+0x15/0xb0
[ 2563.596769][ T7003]  ? trace_contention_end+0x39/0xe0
[ 2563.601982][ T7003]  ? __mutex_lock+0x315/0xcc0
[ 2563.606731][ T7003]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2563.611863][ T7003]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2563.616991][ T7003]  ? rtnl_setlink+0x4e0/0x4e0
[ 2563.621688][ T7003]  rtnetlink_rcv_msg+0x869/0xfa0
[ 2563.626665][ T7003]  ? rtnetlink_bind+0x80/0x80
[ 2563.631364][ T7003]  ? trace_call_bpf+0xc3/0x6c0
[ 2563.636173][ T7003]  ? trace_call_bpf+0xc3/0x6c0
[ 2563.640960][ T7003]  ? __lock_acquire+0x7d40/0x7d40
[ 2563.645999][ T7003]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2563.651411][ T7003]  ? trace_call_bpf+0xc3/0x6c0
[ 2563.656193][ T7003]  ? trace_call_bpf+0xc3/0x6c0
[ 2563.660975][ T7003]  ? trace_call_bpf+0x5e9/0x6c0
[ 2563.665845][ T7003]  ? __dev_queue_xmit+0x265/0x3660
[ 2563.670973][ T7003]  ? trace_call_bpf+0xc3/0x6c0
[ 2563.675761][ T7003]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 2563.680982][ T7003]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 2563.687093][ T7003]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 2563.692929][ T7003]  ? perf_trace_lock+0x304/0x3b0
[ 2563.697913][ T7003]  netlink_rcv_skb+0x241/0x4d0
[ 2563.702696][ T7003]  ? rtnetlink_bind+0x80/0x80
[ 2563.707393][ T7003]  ? netlink_ack+0x1180/0x1180
[ 2563.712224][ T7003]  ? __lock_acquire+0x7d40/0x7d40
[ 2563.717290][ T7003]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2563.722515][ T7003]  netlink_unicast+0x751/0x8d0
[ 2563.727325][ T7003]  netlink_sendmsg+0x8d0/0xbf0
[ 2563.732106][ T7003]  ? perf_trace_lock+0x304/0x3b0
[ 2563.737079][ T7003]  ? netlink_getsockopt+0x590/0x590
[ 2563.742297][ T7003]  ? aa_sock_msg_perm+0x94/0x150
[ 2563.747258][ T7003]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2563.752555][ T7003]  ? security_socket_sendmsg+0x80/0xa0
[ 2563.758024][ T7003]  ? netlink_getsockopt+0x590/0x590
[ 2563.763242][ T7003]  ____sys_sendmsg+0x5ba/0x960
[ 2563.768042][ T7003]  ? __asan_memset+0x22/0x40
[ 2563.772655][ T7003]  ? __sys_sendmsg_sock+0x30/0x30
[ 2563.777695][ T7003]  ? __import_iovec+0x5f2/0x850
[ 2563.782583][ T7003]  ? import_iovec+0x73/0xa0
[ 2563.787111][ T7003]  ___sys_sendmsg+0x2a6/0x360
[ 2563.791818][ T7003]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2563.796644][ T7003]  ? __lock_acquire+0x7d40/0x7d40
[ 2563.801740][ T7003]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2563.806613][ T7003]  ? __x64_sys_sendmsg+0x80/0x80
[ 2563.811604][ T7003]  ? lockdep_hardirqs_on+0x98/0x150
[ 2563.816828][ T7003]  do_syscall_64+0x55/0xb0
[ 2563.821254][ T7003]  ? clear_bhb_loop+0x40/0x90
[ 2563.825940][ T7003]  ? clear_bhb_loop+0x40/0x90
[ 2563.830630][ T7003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2563.836563][ T7003] RIP: 0033:0x7f5e4d19ce59
[ 2563.840991][ T7003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2563.860609][ T7003] RSP: 002b:00007f5e4df9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2563.869044][ T7003] RAX: ffffffffffffffda RBX: 00007f5e4d416180 RCX: 00007f5e4d19ce59
[ 2563.877025][ T7003] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[ 2563.885006][ T7003] RBP: 00007f5e4df9f090 R08: 0000000000000000 R09: 0000000000000000
[ 2563.892985][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2563.900963][ T7003] R13: 00007f5e4d416218 R14: 00007f5e4d416180 R15: 00007ffd42fe2038
[ 2563.908983][ T7003]  </TASK>
[ 2563.961571][ T7003] bridge0: port 3(team0) entered disabled state
[ 2563.969595][ T7003] team0: left allmulticast mode
[ 2563.984012][ T7003] team_slave_1: left allmulticast mode
[ 2564.014401][ T7003] virt_wifi0: left allmulticast mode
[ 2564.019727][ T7003] mac80211_hwsim hwsim188 wlan1: left allmulticast mode
[ 2564.094580][ T7003] team0: left promiscuous mode
[ 2564.105440][ T7003] team_slave_1: left promiscuous mode
[ 2564.118044][ T7003] virt_wifi0: left promiscuous mode
[ 2564.130237][ T7003] mac80211_hwsim hwsim188 wlan1: left promiscuous mode
[ 2564.148568][ T7003] bridge0: port 3(team0) entered disabled state
[ 2564.164770][ T7003] 8021q: adding VLAN 0 to HW filter on device team0
[ 2564.174217][ T7003] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2564.182979][ T7002] netlink: 'syz.0.11496': attribute type 10 has an invalid length.
[ 2564.199908][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11496'.
[ 2564.219875][ T7002] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2564.501684][ T7022] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11501'.
[ 2564.521875][ T7023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11503'.
[ 2564.929188][ T7032] netlink: 'syz.1.11507': attribute type 10 has an invalid length.
[ 2564.940870][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11507'.
[ 2564.951395][ T7032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2565.048662][ T7030] netlink: 'syz.0.11508': attribute type 10 has an invalid length.
[ 2565.060061][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11508'.
[ 2565.103378][ T7030] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2565.567198][ T7054] FAULT_INJECTION: forcing a failure.
[ 2565.567198][ T7054] name failslab, interval 1, probability 0, space 0, times 0
[ 2565.585021][ T7054] CPU: 0 PID: 7054 Comm: syz.2.11523 Not tainted syzkaller #0
[ 2565.592509][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2565.602567][ T7054] Call Trace:
[ 2565.605860][ T7054]  <TASK>
[ 2565.608807][ T7054]  dump_stack_lvl+0x18c/0x250
[ 2565.613515][ T7054]  ? show_regs_print_info+0x20/0x20
[ 2565.618733][ T7054]  ? load_image+0x420/0x420
[ 2565.623247][ T7054]  ? __might_sleep+0xe0/0xe0
[ 2565.627847][ T7054]  ? __lock_acquire+0x7d40/0x7d40
[ 2565.632882][ T7054]  should_fail_ex+0x39d/0x4d0
[ 2565.637569][ T7054]  should_failslab+0x9/0x20
[ 2565.642074][ T7054]  slab_pre_alloc_hook+0x59/0x310
[ 2565.647108][ T7054]  kmem_cache_alloc_node+0x60/0x320
[ 2565.652309][ T7054]  ? perf_event_alloc+0x15a/0x21b0
[ 2565.657423][ T7054]  perf_event_alloc+0x15a/0x21b0
[ 2565.662369][ T7054]  ? _raw_spin_unlock+0x28/0x40
[ 2565.667224][ T7054]  ? alloc_fd+0x58f/0x630
[ 2565.671552][ T7054]  ? find_lively_task_by_vpid+0x19/0x290
[ 2565.677188][ T7054]  ? find_lively_task_by_vpid+0x19/0x290
[ 2565.682823][ T7054]  __se_sys_perf_event_open+0x740/0x1c50
[ 2565.688470][ T7054]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 2565.694118][ T7054]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 2565.700011][ T7054]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 2565.705651][ T7054]  do_syscall_64+0x55/0xb0
[ 2565.710062][ T7054]  ? clear_bhb_loop+0x40/0x90
[ 2565.714743][ T7054]  ? clear_bhb_loop+0x40/0x90
[ 2565.719421][ T7054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2565.725314][ T7054] RIP: 0033:0x7f775899ce59
[ 2565.729728][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2565.749331][ T7054] RSP: 002b:00007f775982b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 2565.757750][ T7054] RAX: ffffffffffffffda RBX: 00007f7758c15fa0 RCX: 00007f775899ce59
[ 2565.765718][ T7054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[ 2565.773690][ T7054] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2565.781660][ T7054] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 2565.789631][ T7054] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2565.797613][ T7054]  </TASK>
[ 2565.809503][ T7061] netlink: 'syz.1.11516': attribute type 9 has an invalid length.
[ 2565.818100][ T7061] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11516'.
[ 2566.124940][ T7074] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11520'.
[ 2566.339350][ T7081] FAULT_INJECTION: forcing a failure.
[ 2566.339350][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2566.352853][ T7081] CPU: 0 PID: 7081 Comm: syz.2.11524 Not tainted syzkaller #0
[ 2566.360362][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2566.370458][ T7081] Call Trace:
[ 2566.373777][ T7081]  <TASK>
[ 2566.376754][ T7081]  dump_stack_lvl+0x18c/0x250
[ 2566.381375][ T7076] netlink: 'syz.0.11522': attribute type 10 has an invalid length.
[ 2566.381471][ T7081]  ? show_regs_print_info+0x20/0x20
[ 2566.381507][ T7081]  ? load_image+0x420/0x420
[ 2566.381544][ T7081]  ? __lock_acquire+0x7d40/0x7d40
[ 2566.381577][ T7081]  ? snprintf+0xe9/0x140
[ 2566.381619][ T7081]  should_fail_ex+0x39d/0x4d0
[ 2566.381669][ T7081]  _copy_to_user+0x2f/0xa0
[ 2566.381703][ T7081]  simple_read_from_buffer+0xe7/0x150
[ 2566.381751][ T7081]  proc_fail_nth_read+0x1e8/0x260
[ 2566.381791][ T7081]  ? proc_fault_inject_write+0x360/0x360
[ 2566.381843][ T7081]  ? fsnotify_perm+0x271/0x5e0
[ 2566.381868][ T7081]  ? proc_fault_inject_write+0x360/0x360
[ 2566.381902][ T7081]  vfs_read+0x28b/0x970
[ 2566.381950][ T7081]  ? kernel_read+0x1e0/0x1e0
[ 2566.381983][ T7081]  ? __fget_files+0x28/0x4b0
[ 2566.382007][ T7081]  ? __fget_files+0x28/0x4b0
[ 2566.382038][ T7081]  ? __fget_files+0x43d/0x4b0
[ 2566.396803][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11522'.
[ 2566.399655][ T7081]  ? __fdget_pos+0x2a3/0x330
[ 2566.399686][ T7081]  ? ksys_read+0x75/0x260
[ 2566.399725][ T7081]  ksys_read+0x150/0x260
[ 2566.399764][ T7081]  ? vfs_write+0x990/0x990
[ 2566.399806][ T7081]  ? lockdep_hardirqs_on+0x98/0x150
[ 2566.399856][ T7081]  do_syscall_64+0x55/0xb0
[ 2566.399879][ T7081]  ? clear_bhb_loop+0x40/0x90
[ 2566.399898][ T7081]  ? clear_bhb_loop+0x40/0x90
[ 2566.399926][ T7081]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2566.399954][ T7081] RIP: 0033:0x7f775895d68e
[ 2566.399979][ T7081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2566.399999][ T7081] RSP: 002b:00007f775982afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2566.400028][ T7081] RAX: ffffffffffffffda RBX: 00007f775982b6c0 RCX: 00007f775895d68e
[ 2566.400046][ T7081] RDX: 000000000000000f RSI: 00007f775982b0a0 RDI: 0000000000000005
[ 2566.400062][ T7081] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2566.400078][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2566.400093][ T7081] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2566.400160][ T7081]  </TASK>
[ 2566.741883][ T7076] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2566.993789][ T7097] FAULT_INJECTION: forcing a failure.
[ 2566.993789][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2567.010920][ T7097] CPU: 0 PID: 7097 Comm: syz.3.11531 Not tainted syzkaller #0
[ 2567.018392][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2567.028440][ T7097] Call Trace:
[ 2567.031706][ T7097]  <TASK>
[ 2567.034627][ T7097]  dump_stack_lvl+0x18c/0x250
[ 2567.039306][ T7097]  ? show_regs_print_info+0x20/0x20
[ 2567.044495][ T7097]  ? load_image+0x420/0x420
[ 2567.048998][ T7097]  ? __might_fault+0xaa/0x120
[ 2567.053681][ T7097]  ? __lock_acquire+0x7d40/0x7d40
[ 2567.058710][ T7097]  ? tomoyo_path_number_perm+0x5b4/0x620
[ 2567.064350][ T7097]  should_fail_ex+0x39d/0x4d0
[ 2567.069032][ T7097]  _copy_from_user+0x2f/0xe0
[ 2567.073614][ T7097]  wext_handle_ioctl+0xc8/0x1d0
[ 2567.078461][ T7097]  ? call_commit_handler+0xf0/0xf0
[ 2567.083573][ T7097]  sock_ioctl+0x15d/0x7e0
[ 2567.087904][ T7097]  ? sock_poll+0x3e0/0x3e0
[ 2567.092319][ T7097]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 2567.097245][ T7097]  ? security_file_ioctl+0x80/0xa0
[ 2567.102363][ T7097]  ? sock_poll+0x3e0/0x3e0
[ 2567.106808][ T7097]  __se_sys_ioctl+0xfd/0x170
[ 2567.111427][ T7097]  do_syscall_64+0x55/0xb0
[ 2567.115857][ T7097]  ? clear_bhb_loop+0x40/0x90
[ 2567.120528][ T7097]  ? clear_bhb_loop+0x40/0x90
[ 2567.125194][ T7097]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2567.131081][ T7097] RIP: 0033:0x7fdaa519ce59
[ 2567.135485][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2567.155086][ T7097] RSP: 002b:00007fdaa5fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2567.163490][ T7097] RAX: ffffffffffffffda RBX: 00007fdaa5415fa0 RCX: 00007fdaa519ce59
[ 2567.171451][ T7097] RDX: 0000200000000000 RSI: 0000000000008b20 RDI: 0000000000000004
[ 2567.179424][ T7097] RBP: 00007fdaa5fab090 R08: 0000000000000000 R09: 0000000000000000
[ 2567.187402][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2567.195361][ T7097] R13: 00007fdaa5416038 R14: 00007fdaa5415fa0 R15: 00007ffe0664e528
[ 2567.203332][ T7097]  </TASK>
[ 2567.399573][ T7105] netlink: 'syz.0.11534': attribute type 21 has an invalid length.
[ 2567.465660][ T7110] netlink: 'syz.3.11536': attribute type 10 has an invalid length.
[ 2567.473868][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11536'.
[ 2567.710769][ T7119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11539'.
[ 2568.362138][ T7124] netlink: 'syz.1.11541': attribute type 10 has an invalid length.
[ 2568.396429][ T7124] team0: entered promiscuous mode
[ 2568.402287][ T7124] team_slave_1: entered promiscuous mode
[ 2568.423827][ T7124] virt_wifi0: entered promiscuous mode
[ 2568.434195][ T7124] mac80211_hwsim hwsim188 wlan1: entered promiscuous mode
[ 2568.451973][ T7124] team0: entered allmulticast mode
[ 2568.460976][ T7124] team_slave_1: entered allmulticast mode
[ 2568.467671][ T7124] virt_wifi0: entered allmulticast mode
[ 2568.473813][ T7124] mac80211_hwsim hwsim188 wlan1: entered allmulticast mode
[ 2568.498103][ T7124] bond0: (slave team0): Releasing backup interface
[ 2569.343086][ T7124] bridge0: port 3(team0) entered blocking state
[ 2569.350635][ T7124] bridge0: port 3(team0) entered disabled state
[ 2569.537990][ T7141] netlink: 'syz.1.11547': attribute type 10 has an invalid length.
[ 2569.554395][ T7141] __nla_validate_parse: 1 callbacks suppressed
[ 2569.554430][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11547'.
[ 2569.583498][ T7141] bridge0: port 3(team0) entered blocking state
[ 2569.590304][ T7141] bridge0: port 3(team0) entered forwarding state
[ 2569.604220][ T7141] 8021q: adding VLAN 0 to HW filter on device team0
[ 2569.657754][ T7147] netlink: 'syz.2.11551': attribute type 9 has an invalid length.
[ 2569.682357][ T7147] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11551'.
[ 2570.395264][ T7163] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11552'.
[ 2570.869547][ T7175] netlink: 'syz.3.11559': attribute type 10 has an invalid length.
[ 2570.884901][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11559'.
[ 2570.979735][ T7178] netlink: 'syz.2.11560': attribute type 10 has an invalid length.
[ 2570.988313][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11560'.
[ 2571.008266][ T7178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2571.114632][ T7185] netlink: 'syz.3.11563': attribute type 9 has an invalid length.
[ 2571.122597][ T7185] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11563'.
[ 2571.522140][ T7191] FAULT_INJECTION: forcing a failure.
[ 2571.522140][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2571.537244][ T7191] CPU: 1 PID: 7191 Comm: syz.2.11565 Not tainted syzkaller #0
[ 2571.544745][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2571.554831][ T7191] Call Trace:
[ 2571.558142][ T7191]  <TASK>
[ 2571.561105][ T7191]  dump_stack_lvl+0x18c/0x250
[ 2571.565842][ T7191]  ? show_regs_print_info+0x20/0x20
[ 2571.571083][ T7191]  ? load_image+0x420/0x420
[ 2571.575634][ T7191]  ? __lock_acquire+0x7d40/0x7d40
[ 2571.580706][ T7191]  ? snprintf+0xe9/0x140
[ 2571.585003][ T7191]  should_fail_ex+0x39d/0x4d0
[ 2571.589741][ T7191]  _copy_to_user+0x2f/0xa0
[ 2571.594202][ T7191]  simple_read_from_buffer+0xe7/0x150
[ 2571.599633][ T7191]  proc_fail_nth_read+0x1e8/0x260
[ 2571.604710][ T7191]  ? proc_fault_inject_write+0x360/0x360
[ 2571.610403][ T7191]  ? fsnotify_perm+0x271/0x5e0
[ 2571.615210][ T7191]  ? proc_fault_inject_write+0x360/0x360
[ 2571.620887][ T7191]  vfs_read+0x28b/0x970
[ 2571.625109][ T7191]  ? kernel_read+0x1e0/0x1e0
[ 2571.629745][ T7191]  ? __fget_files+0x28/0x4b0
[ 2571.634373][ T7191]  ? __fget_files+0x28/0x4b0
[ 2571.639004][ T7191]  ? __fget_files+0x43d/0x4b0
[ 2571.643753][ T7191]  ? __fdget_pos+0x2a3/0x330
[ 2571.648380][ T7191]  ? ksys_read+0x75/0x260
[ 2571.652760][ T7191]  ksys_read+0x150/0x260
[ 2571.657055][ T7191]  ? vfs_write+0x990/0x990
[ 2571.661526][ T7191]  ? lockdep_hardirqs_on+0x98/0x150
[ 2571.666781][ T7191]  do_syscall_64+0x55/0xb0
[ 2571.671250][ T7191]  ? clear_bhb_loop+0x40/0x90
[ 2571.675973][ T7191]  ? clear_bhb_loop+0x40/0x90
[ 2571.680696][ T7191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2571.686633][ T7191] RIP: 0033:0x7f775895d68e
[ 2571.691088][ T7191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2571.710737][ T7191] RSP: 002b:00007f775982afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2571.719209][ T7191] RAX: ffffffffffffffda RBX: 00007f775982b6c0 RCX: 00007f775895d68e
[ 2571.727219][ T7191] RDX: 000000000000000f RSI: 00007f775982b0a0 RDI: 000000000000000e
[ 2571.735225][ T7191] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2571.743232][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2571.751235][ T7191] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2571.759299][ T7191]  </TASK>
[ 2571.992395][ T7198] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11566'.
[ 2572.701618][ T7213] netlink: 'syz.3.11572': attribute type 29 has an invalid length.
[ 2572.756730][ T7213] netlink: 'syz.3.11572': attribute type 29 has an invalid length.
[ 2572.775262][ T7216] netlink: 'syz.3.11572': attribute type 29 has an invalid length.
[ 2572.794839][ T7219] netlink: 'syz.3.11572': attribute type 29 has an invalid length.
[ 2573.222713][ T7232] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11577'.
[ 2573.423009][ T7235] validate_nla: 3 callbacks suppressed
[ 2573.423048][ T7235] netlink: 'syz.0.11576': attribute type 10 has an invalid length.
[ 2573.474231][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11576'.
[ 2573.492784][ T7235] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2574.196213][ T7256] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11582'.
[ 2574.422096][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2575.074781][ T7269] netlink: 'syz.1.11589': attribute type 9 has an invalid length.
[ 2575.083057][ T7269] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11589'.
[ 2575.542937][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2575.732506][ T7289] FAULT_INJECTION: forcing a failure.
[ 2575.732506][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2575.758510][ T7289] CPU: 0 PID: 7289 Comm: syz.1.11596 Not tainted syzkaller #0
[ 2575.766017][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2575.776089][ T7289] Call Trace:
[ 2575.779379][ T7289]  <TASK>
[ 2575.782321][ T7289]  dump_stack_lvl+0x18c/0x250
[ 2575.787027][ T7289]  ? show_regs_print_info+0x20/0x20
[ 2575.792250][ T7289]  ? load_image+0x420/0x420
[ 2575.796776][ T7289]  ? __might_fault+0xaa/0x120
[ 2575.801477][ T7289]  ? __lock_acquire+0x7d40/0x7d40
[ 2575.806529][ T7289]  should_fail_ex+0x39d/0x4d0
[ 2575.811239][ T7289]  _copy_from_user+0x2f/0xe0
[ 2575.815856][ T7289]  ___sys_sendmsg+0x1c7/0x360
[ 2575.820564][ T7289]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2575.825369][ T7289]  ? trace_call_bpf+0xc3/0x6c0
[ 2575.830180][ T7289]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2575.835058][ T7289]  ? __x64_sys_sendmsg+0x80/0x80
[ 2575.840036][ T7289]  ? lockdep_hardirqs_on+0x98/0x150
[ 2575.845264][ T7289]  do_syscall_64+0x55/0xb0
[ 2575.849700][ T7289]  ? clear_bhb_loop+0x40/0x90
[ 2575.854393][ T7289]  ? clear_bhb_loop+0x40/0x90
[ 2575.859086][ T7289]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2575.865006][ T7289] RIP: 0033:0x7f5e4d19ce59
[ 2575.869441][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2575.889064][ T7289] RSP: 002b:00007f5e4dfe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2575.897514][ T7289] RAX: ffffffffffffffda RBX: 00007f5e4d415fa0 RCX: 00007f5e4d19ce59
[ 2575.905502][ T7289] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 000000000000000b
[ 2575.913490][ T7289] RBP: 00007f5e4dfe1090 R08: 0000000000000000 R09: 0000000000000000
[ 2575.921481][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2575.929468][ T7289] R13: 00007f5e4d416038 R14: 00007f5e4d415fa0 R15: 00007ffd42fe2038
[ 2575.937461][ T7289]  </TASK>
[ 2575.941265][ T7291] FAULT_INJECTION: forcing a failure.
[ 2575.941265][ T7291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2575.964352][ T7291] CPU: 0 PID: 7291 Comm: syz.3.11597 Not tainted syzkaller #0
[ 2575.971835][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2575.981889][ T7291] Call Trace:
[ 2575.985172][ T7291]  <TASK>
[ 2575.988109][ T7291]  dump_stack_lvl+0x18c/0x250
[ 2575.992796][ T7291]  ? show_regs_print_info+0x20/0x20
[ 2575.997993][ T7291]  ? load_image+0x420/0x420
[ 2576.002494][ T7291]  ? __might_fault+0xaa/0x120
[ 2576.007169][ T7291]  ? __lock_acquire+0x7d40/0x7d40
[ 2576.012192][ T7291]  ? unix_ioctl+0x261/0x670
[ 2576.016699][ T7291]  should_fail_ex+0x39d/0x4d0
[ 2576.021382][ T7291]  _copy_from_user+0x2f/0xe0
[ 2576.025972][ T7291]  sock_do_ioctl+0x190/0x310
[ 2576.030567][ T7291]  ? sock_show_fdinfo+0xb0/0xb0
[ 2576.035427][ T7291]  sock_ioctl+0x5ba/0x7e0
[ 2576.039757][ T7291]  ? sock_poll+0x3e0/0x3e0
[ 2576.044178][ T7291]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 2576.049111][ T7291]  ? security_file_ioctl+0x80/0xa0
[ 2576.054225][ T7291]  ? sock_poll+0x3e0/0x3e0
[ 2576.058640][ T7291]  __se_sys_ioctl+0xfd/0x170
[ 2576.063232][ T7291]  do_syscall_64+0x55/0xb0
[ 2576.067649][ T7291]  ? clear_bhb_loop+0x40/0x90
[ 2576.072322][ T7291]  ? clear_bhb_loop+0x40/0x90
[ 2576.076993][ T7291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2576.082883][ T7291] RIP: 0033:0x7fdaa519ce59
[ 2576.087294][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2576.106899][ T7291] RSP: 002b:00007fdaa5fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2576.115309][ T7291] RAX: ffffffffffffffda RBX: 00007fdaa5415fa0 RCX: 00007fdaa519ce59
[ 2576.123272][ T7291] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004
[ 2576.131235][ T7291] RBP: 00007fdaa5fab090 R08: 0000000000000000 R09: 0000000000000000
[ 2576.139198][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2576.147161][ T7291] R13: 00007fdaa5416038 R14: 00007fdaa5415fa0 R15: 00007ffe0664e528
[ 2576.155152][ T7291]  </TASK>
[ 2576.337342][ T7298] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11598'.
[ 2576.427080][ T7299] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11601'.
[ 2576.961568][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2577.221674][ T7314] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11607'.
[ 2577.264128][ T7314] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[ 2577.448045][ T7319] hsr0: mtu less than device minimum
[ 2577.780623][ T7336] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11615'.
[ 2578.508373][ T7339] netlink: 'syz.2.11616': attribute type 9 has an invalid length.
[ 2578.519514][ T7339] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11616'.
[ 2578.908230][ T7351] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11619'.
[ 2579.284521][ T7356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11621'.
[ 2579.303237][ T7347] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.11619'.
[ 2579.345749][ T7347] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.11619'.
[ 2579.433081][ T7360] netlink: 'syz.0.11622': attribute type 29 has an invalid length.
[ 2579.441546][ T7360] netlink: 'syz.0.11622': attribute type 29 has an invalid length.
[ 2579.463508][ T7360] netlink: 'syz.0.11622': attribute type 29 has an invalid length.
[ 2579.479726][ T7360] netlink: 'syz.0.11622': attribute type 29 has an invalid length.
[ 2579.490355][ T7360] netlink: 'syz.0.11622': attribute type 29 has an invalid length.
[ 2580.110646][ T7379] netlink: 'syz.3.11631': attribute type 9 has an invalid length.
[ 2580.139218][ T7379] __nla_validate_parse: 1 callbacks suppressed
[ 2580.139311][ T7379] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11631'.
[ 2580.651443][ T7390] netlink: 'syz.2.11633': attribute type 2 has an invalid length.
[ 2580.674076][ T7390] netlink: 51 bytes leftover after parsing attributes in process `syz.2.11633'.
[ 2580.698259][ T7389] netlink: 'syz.0.11634': attribute type 10 has an invalid length.
[ 2580.715922][ T7389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11634'.
[ 2580.726559][ T7389] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2580.780295][ T7393] FAULT_INJECTION: forcing a failure.
[ 2580.780295][ T7393] name failslab, interval 1, probability 0, space 0, times 0
[ 2580.797851][ T7393] CPU: 0 PID: 7393 Comm: syz.3.11635 Not tainted syzkaller #0
[ 2580.805348][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2580.815411][ T7393] Call Trace:
[ 2580.818680][ T7393]  <TASK>
[ 2580.821593][ T7393]  dump_stack_lvl+0x18c/0x250
[ 2580.826268][ T7393]  ? show_regs_print_info+0x20/0x20
[ 2580.831467][ T7393]  ? load_image+0x420/0x420
[ 2580.835967][ T7393]  ? __might_sleep+0xe0/0xe0
[ 2580.840555][ T7393]  ? __lock_acquire+0x7d40/0x7d40
[ 2580.845575][ T7393]  ? _copy_from_iter+0x1b1/0x12e0
[ 2580.850602][ T7393]  should_fail_ex+0x39d/0x4d0
[ 2580.855283][ T7393]  should_failslab+0x9/0x20
[ 2580.859794][ T7393]  slab_pre_alloc_hook+0x59/0x310
[ 2580.864825][ T7393]  kmem_cache_alloc_node+0x60/0x320
[ 2580.870021][ T7393]  ? __alloc_skb+0x103/0x2c0
[ 2580.874612][ T7393]  __alloc_skb+0x103/0x2c0
[ 2580.879026][ T7393]  tipc_buf_acquire+0x2b/0xe0
[ 2580.883704][ T7393]  tipc_msg_build+0x8c3/0xee0
[ 2580.888388][ T7393]  ? skb_copy_to_linear_data_offset+0x60/0x60
[ 2580.894456][ T7393]  ? net_generic+0x1e/0x240
[ 2580.898958][ T7393]  ? tipc_group_bc_cong+0x15c/0x210
[ 2580.904163][ T7393]  tipc_send_group_bcast+0x7d8/0xad0
[ 2580.909461][ T7393]  ? tipc_wait_for_connect+0x650/0x650
[ 2580.914917][ T7393]  ? __lock_acquire+0x1273/0x7d40
[ 2580.919960][ T7393]  ? perf_trace_lock+0xfc/0x3b0
[ 2580.924814][ T7393]  ? wait_woken+0x180/0x180
[ 2580.929317][ T7393]  ? trace_event_raw_event_lock+0x250/0x250
[ 2580.935215][ T7393]  __tipc_sendmsg+0x33c/0x2bb0
[ 2580.939988][ T7393]  ? __lock_acquire+0x7d40/0x7d40
[ 2580.945012][ T7393]  ? rht_unlock+0x1d0/0x1d0
[ 2580.949513][ T7393]  ? trace_call_bpf+0xc3/0x6c0
[ 2580.954276][ T7393]  ? trace_call_bpf+0xc3/0x6c0
[ 2580.959041][ T7393]  ? trace_call_bpf+0x5e9/0x6c0
[ 2580.963887][ T7393]  ? trace_call_bpf+0xc3/0x6c0
[ 2580.968647][ T7393]  ? verify_lock_unused+0x140/0x140
[ 2580.973842][ T7393]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 2580.979910][ T7393]  ? perf_trace_lock+0xfc/0x3b0
[ 2580.984761][ T7393]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 2580.990565][ T7393]  ? mark_lock+0x94/0x320
[ 2580.994892][ T7393]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2581.000873][ T7393]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2581.006238][ T7393]  ? lockdep_hardirqs_on+0x98/0x150
[ 2581.011437][ T7393]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2581.016800][ T7393]  ? _local_bh_enable+0xa0/0xa0
[ 2581.021652][ T7393]  tipc_sendmsg+0x55/0x70
[ 2581.025981][ T7393]  sock_write_iter+0x2df/0x420
[ 2581.030744][ T7393]  ? sock_read_iter+0x3e0/0x3e0
[ 2581.035597][ T7393]  ? common_file_perm+0x198/0x1f0
[ 2581.040626][ T7393]  vfs_write+0x46c/0x990
[ 2581.044873][ T7393]  ? file_end_write+0x250/0x250
[ 2581.049725][ T7393]  ? __fget_files+0x43d/0x4b0
[ 2581.054401][ T7393]  ? __fdget_pos+0x1d8/0x330
[ 2581.058984][ T7393]  ? ksys_write+0x75/0x260
[ 2581.063395][ T7393]  ksys_write+0x150/0x260
[ 2581.067726][ T7393]  ? __ia32_sys_read+0x90/0x90
[ 2581.072490][ T7393]  ? lockdep_hardirqs_on+0x98/0x150
[ 2581.077692][ T7393]  do_syscall_64+0x55/0xb0
[ 2581.082100][ T7393]  ? clear_bhb_loop+0x40/0x90
[ 2581.086769][ T7393]  ? clear_bhb_loop+0x40/0x90
[ 2581.091438][ T7393]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2581.097334][ T7393] RIP: 0033:0x7fdaa519ce59
[ 2581.101746][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2581.121348][ T7393] RSP: 002b:00007fdaa5f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2581.129769][ T7393] RAX: ffffffffffffffda RBX: 00007fdaa5416090 RCX: 00007fdaa519ce59
[ 2581.137735][ T7393] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004
[ 2581.145697][ T7393] RBP: 00007fdaa5f8a090 R08: 0000000000000000 R09: 0000000000000000
[ 2581.153656][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2581.161619][ T7393] R13: 00007fdaa5416128 R14: 00007fdaa5416090 R15: 00007ffe0664e528
[ 2581.169595][ T7393]  </TASK>
[ 2581.760336][ T7414] netlink: 'syz.3.11643': attribute type 9 has an invalid length.
[ 2581.773127][ T7414] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11643'.
[ 2581.809188][ T7416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11642'.
[ 2582.167234][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11644'.
[ 2582.409924][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2582.592276][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11647'.
[ 2582.601954][ T7426] FAULT_INJECTION: forcing a failure.
[ 2582.601954][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2582.616744][ T7426] CPU: 1 PID: 7426 Comm: syz.1.11647 Not tainted syzkaller #0
[ 2582.624233][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2582.634287][ T7426] Call Trace:
[ 2582.637562][ T7426]  <TASK>
[ 2582.640494][ T7426]  dump_stack_lvl+0x18c/0x250
[ 2582.645180][ T7426]  ? show_regs_print_info+0x20/0x20
[ 2582.650375][ T7426]  ? load_image+0x420/0x420
[ 2582.654874][ T7426]  ? __lock_acquire+0x7d40/0x7d40
[ 2582.659900][ T7426]  ? snprintf+0xe9/0x140
[ 2582.664147][ T7426]  should_fail_ex+0x39d/0x4d0
[ 2582.668835][ T7426]  _copy_to_user+0x2f/0xa0
[ 2582.673252][ T7426]  simple_read_from_buffer+0xe7/0x150
[ 2582.678631][ T7426]  proc_fail_nth_read+0x1e8/0x260
[ 2582.683661][ T7426]  ? proc_fault_inject_write+0x360/0x360
[ 2582.689297][ T7426]  ? fsnotify_perm+0x271/0x5e0
[ 2582.694056][ T7426]  ? proc_fault_inject_write+0x360/0x360
[ 2582.699689][ T7426]  vfs_read+0x28b/0x970
[ 2582.703848][ T7426]  ? kernel_read+0x1e0/0x1e0
[ 2582.708438][ T7426]  ? __fget_files+0x28/0x4b0
[ 2582.713024][ T7426]  ? __fget_files+0x28/0x4b0
[ 2582.717613][ T7426]  ? __fget_files+0x43d/0x4b0
[ 2582.722311][ T7426]  ? __fdget_pos+0x2a3/0x330
[ 2582.726906][ T7426]  ? ksys_read+0x75/0x260
[ 2582.731238][ T7426]  ksys_read+0x150/0x260
[ 2582.735481][ T7426]  ? vfs_write+0x990/0x990
[ 2582.739898][ T7426]  ? lockdep_hardirqs_on+0x98/0x150
[ 2582.745102][ T7426]  do_syscall_64+0x55/0xb0
[ 2582.749513][ T7426]  ? clear_bhb_loop+0x40/0x90
[ 2582.754189][ T7426]  ? clear_bhb_loop+0x40/0x90
[ 2582.758864][ T7426]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2582.764758][ T7426] RIP: 0033:0x7f5e4d15d68e
[ 2582.769168][ T7426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2582.788777][ T7426] RSP: 002b:00007f5e4dfe0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2582.797191][ T7426] RAX: ffffffffffffffda RBX: 00007f5e4dfe16c0 RCX: 00007f5e4d15d68e
[ 2582.805154][ T7426] RDX: 000000000000000f RSI: 00007f5e4dfe10a0 RDI: 0000000000000004
[ 2582.813119][ T7426] RBP: 00007f5e4dfe1090 R08: 0000000000000000 R09: 0000000000000000
[ 2582.821081][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2582.829046][ T7426] R13: 00007f5e4d416038 R14: 00007f5e4d415fa0 R15: 00007ffd42fe2038
[ 2582.837021][ T7426]  </TASK>
[ 2583.098754][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11653'.
[ 2583.332051][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2583.440020][ T7457] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11660'.
[ 2583.453540][ T7456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2584.310110][ T7475] dvmrp1: tun_chr_ioctl cmd 1074025675
[ 2584.331039][ T7475] dvmrp1: persist disabled
[ 2584.519846][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2584.785403][ T7487] mac80211_hwsim hwsim174 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2584.895609][ T7491] validate_nla: 4 callbacks suppressed
[ 2584.895623][ T7491] netlink: 'syz.2.11673': attribute type 10 has an invalid length.
[ 2584.958239][ T7491] geneve1: entered promiscuous mode
[ 2584.963662][ T7491] geneve1: entered allmulticast mode
[ 2584.972169][ T7496] netlink: 'syz.3.11672': attribute type 9 has an invalid length.
[ 2584.980217][ T7496] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11672'.
[ 2584.981644][ T7491] team0: Port device geneve1 added
[ 2585.730957][ T7517] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11680'.
[ 2585.926714][ T7523] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.11682'.
[ 2586.336582][ T7529] mac80211_hwsim hwsim188 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2586.661349][ T7538] netlink: 'syz.2.11686': attribute type 9 has an invalid length.
[ 2586.670959][ T7538] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11686'.
[ 2586.741287][ T7543] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.11688'.
[ 2586.769099][ T7543] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 2586.782532][ T7546] netlink: 'syz.1.11688': attribute type 21 has an invalid length.
[ 2586.790937][ T7546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11688'.
[ 2586.852231][ T7547] netlink: 'syz.3.11689': attribute type 4 has an invalid length.
[ 2586.860590][ T7547] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11689'.
[ 2586.912122][ T7547] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2586.983804][ T7549] netlink: 'syz.1.11698': attribute type 9 has an invalid length.
[ 2587.009074][ T7549] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11698'.
[ 2587.830089][ T7568] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11694'.
[ 2588.649645][ T7578] syzkaller0: entered promiscuous mode
[ 2588.655822][ T7578] syzkaller0: entered allmulticast mode
[ 2589.306508][ T7600] netlink: 'syz.3.11704': attribute type 9 has an invalid length.
[ 2589.364022][ T7600] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11704'.
[ 2590.461385][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.467823][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 2590.924819][ T7597] dvmrp1: tun_chr_ioctl cmd 1074025675
[ 2590.930328][ T7597] dvmrp1: persist disabled
[ 2591.209027][ T7614] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11708'.
[ 2591.682645][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2592.156549][T14968] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[ 2592.251901][ T7628] netlink: 'syz.2.11715': attribute type 9 has an invalid length.
[ 2592.303671][ T7628] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11715'.
[ 2592.553019][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2592.776175][ T7644] dvmrp1: tun_chr_ioctl cmd 1074025675
[ 2592.782015][ T7644] dvmrp1: persist disabled
[ 2592.850743][ T7648] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11721'.
[ 2593.116574][ T7654] netlink: 'syz.1.11724': attribute type 4 has an invalid length.
[ 2593.126350][ T7654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11724'.
[ 2593.167288][ T7654] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2593.292018][ T7659] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11725'.
[ 2595.113137][ T7667] netlink: 'syz.0.11729': attribute type 4 has an invalid length.
[ 2595.132663][ T7667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11729'.
[ 2595.147186][ T7667] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2595.242865][ T7670] netlink: 'syz.1.11730': attribute type 9 has an invalid length.
[ 2595.274305][ T7670] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11730'.
[ 2595.323920][ T7676] FAULT_INJECTION: forcing a failure.
[ 2595.323920][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2595.339502][ T7676] CPU: 0 PID: 7676 Comm: syz.0.11732 Not tainted syzkaller #0
[ 2595.346994][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2595.357065][ T7676] Call Trace:
[ 2595.360345][ T7676]  <TASK>
[ 2595.363275][ T7676]  dump_stack_lvl+0x18c/0x250
[ 2595.367959][ T7676]  ? show_regs_print_info+0x20/0x20
[ 2595.373154][ T7676]  ? load_image+0x420/0x420
[ 2595.377657][ T7676]  ? __might_fault+0xaa/0x120
[ 2595.382333][ T7676]  ? __lock_acquire+0x7d40/0x7d40
[ 2595.387359][ T7676]  should_fail_ex+0x39d/0x4d0
[ 2595.392047][ T7676]  _copy_from_user+0x2f/0xe0
[ 2595.396639][ T7676]  ___sys_sendmsg+0x1c7/0x360
[ 2595.401322][ T7676]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2595.406123][ T7676]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2595.410975][ T7676]  ? __x64_sys_sendmsg+0x80/0x80
[ 2595.415922][ T7676]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 2595.421824][ T7676]  do_syscall_64+0x55/0xb0
[ 2595.426237][ T7676]  ? clear_bhb_loop+0x40/0x90
[ 2595.430908][ T7676]  ? clear_bhb_loop+0x40/0x90
[ 2595.435581][ T7676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2595.441482][ T7676] RIP: 0033:0x7f4ffbf9ce59
[ 2595.445903][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2595.465508][ T7676] RSP: 002b:00007f4ffce4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2595.473918][ T7676] RAX: ffffffffffffffda RBX: 00007f4ffc215fa0 RCX: 00007f4ffbf9ce59
[ 2595.481889][ T7676] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[ 2595.489855][ T7676] RBP: 00007f4ffce4a090 R08: 0000000000000000 R09: 0000000000000000
[ 2595.497822][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2595.505787][ T7676] R13: 00007f4ffc216038 R14: 00007f4ffc215fa0 R15: 00007ffca89ef278
[ 2595.513775][ T7676]  </TASK>
[ 2596.034163][ T7685] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11734'.
[ 2596.278918][ T7680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2596.286581][ T7680] IPv6: NLM_F_CREATE should be set when creating new route
[ 2596.295524][ T7680] IPv6: NLM_F_CREATE should be set when creating new route
[ 2596.303901][ T7680] IPv6: NLM_F_CREATE should be set when creating new route
[ 2597.227890][ T7706] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11738'.
[ 2597.324862][ T7707] netlink: 'syz.2.11740': attribute type 4 has an invalid length.
[ 2597.346766][ T7707] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11740'.
[ 2597.383518][ T7707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 2597.423505][ T7706] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 2597.651253][ T7713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11741'.
[ 2597.684107][ T7713] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2597.966804][ T7713] netlink: 'syz.3.11741': attribute type 10 has an invalid length.
[ 2598.155761][ T7713] bridge0: port 3(team0) entered disabled state
[ 2598.162311][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.169733][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.207415][ T7713] bridge0: port 3(team0) entered blocking state
[ 2598.213857][ T7713] bridge0: port 3(team0) entered forwarding state
[ 2598.220607][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2598.227820][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2598.235356][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2598.242563][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2598.277874][ T7713] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2598.861131][ T7730] netlink: 'syz.1.11745': attribute type 9 has an invalid length.
[ 2598.873191][ T7730] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11745'.
[ 2599.068469][ T7741] netlink: 'syz.3.11747': attribute type 2 has an invalid length.
[ 2599.122859][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11747'.
[ 2599.443553][ T7739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11748'.
[ 2599.464834][ T7737] netlink: 'syz.3.11747': attribute type 21 has an invalid length.
[ 2599.479986][ T7737] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11747'.
[ 2599.492094][ T7737] netlink: 'syz.3.11747': attribute type 5 has an invalid length.
[ 2599.501079][ T7737] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11747'.
[ 2599.724845][ T7749] tap0: tun_chr_ioctl cmd 1074025681
[ 2599.811061][ T7752] netlink: 7782 bytes leftover after parsing attributes in process `syz.2.11752'.
[ 2599.867148][ T7755] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11752'.
[ 2600.266535][ T7766] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 2600.305354][ T7766] netlink: 'syz.1.11754': attribute type 10 has an invalid length.
[ 2600.370903][ T7766] bridge0: port 3(team0) entered disabled state
[ 2600.377731][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2600.385354][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2600.515577][ T7766] bridge0: port 3(team0) entered blocking state
[ 2600.522176][ T7766] bridge0: port 3(team0) entered forwarding state
[ 2600.529263][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2600.536658][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2600.544452][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2600.551764][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2600.649300][ T7766] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2601.254881][ T7774] netlink: 'syz.0.11758': attribute type 9 has an invalid length.
[ 2602.012676][ T7793] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[ 2602.062071][ T7793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2602.235773][ T7797] __nla_validate_parse: 9 callbacks suppressed
[ 2602.235789][ T7797] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.11763'.
[ 2603.077038][ T7813] netlink: 22 bytes leftover after parsing attributes in process `syz.3.11771'.
[ 2603.247759][ T7816] netlink: 'syz.1.11772': attribute type 9 has an invalid length.
[ 2603.257762][ T7816] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11772'.
[ 2603.675631][ T7828] FAULT_INJECTION: forcing a failure.
[ 2603.675631][ T7828] name failslab, interval 1, probability 0, space 0, times 0
[ 2603.693109][ T7828] CPU: 1 PID: 7828 Comm: syz.0.11777 Not tainted syzkaller #0
[ 2603.700624][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2603.710715][ T7828] Call Trace:
[ 2603.714029][ T7828]  <TASK>
[ 2603.717000][ T7828]  dump_stack_lvl+0x18c/0x250
[ 2603.721742][ T7828]  ? show_regs_print_info+0x20/0x20
[ 2603.726990][ T7828]  ? load_image+0x420/0x420
[ 2603.731544][ T7828]  ? __might_sleep+0xe0/0xe0
[ 2603.736185][ T7828]  ? __lock_acquire+0x7d40/0x7d40
[ 2603.741266][ T7828]  should_fail_ex+0x39d/0x4d0
[ 2603.746015][ T7828]  should_failslab+0x9/0x20
[ 2603.750561][ T7828]  slab_pre_alloc_hook+0x59/0x310
[ 2603.755625][ T7828]  ? trace_call_bpf+0x5e9/0x6c0
[ 2603.760522][ T7828]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 2603.766269][ T7828]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 2603.772000][ T7828]  __kmem_cache_alloc_node+0x53/0x250
[ 2603.777399][ T7828]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 2603.783131][ T7828]  __kmalloc+0xa4/0x230
[ 2603.787314][ T7828]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 2603.792904][ T7828]  tomoyo_path_number_perm+0x248/0x620
[ 2603.798380][ T7828]  ? tomoyo_path_number_perm+0x217/0x620
[ 2603.804026][ T7828]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2603.809502][ T7828]  ? ksys_write+0x1c4/0x260
[ 2603.814094][ T7828]  ? __fget_files+0x28/0x4b0
[ 2603.818694][ T7828]  ? __fget_files+0x28/0x4b0
[ 2603.823324][ T7828]  security_file_ioctl+0x70/0xa0
[ 2603.828283][ T7828]  __se_sys_ioctl+0x48/0x170
[ 2603.832894][ T7828]  do_syscall_64+0x55/0xb0
[ 2603.837318][ T7828]  ? clear_bhb_loop+0x40/0x90
[ 2603.842005][ T7828]  ? clear_bhb_loop+0x40/0x90
[ 2603.846701][ T7828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2603.852621][ T7828] RIP: 0033:0x7f4ffbf9ce59
[ 2603.857050][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2603.876664][ T7828] RSP: 002b:00007f4ffce4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2603.885091][ T7828] RAX: ffffffffffffffda RBX: 00007f4ffc215fa0 RCX: 00007f4ffbf9ce59
[ 2603.893069][ T7828] RDX: 0000200000001000 RSI: 0000000000008949 RDI: 0000000000000004
[ 2603.901052][ T7828] RBP: 00007f4ffce4a090 R08: 0000000000000000 R09: 0000000000000000
[ 2603.909033][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2603.917010][ T7828] R13: 00007f4ffc216038 R14: 00007f4ffc215fa0 R15: 00007ffca89ef278
[ 2603.925050][ T7828]  </TASK>
[ 2603.943201][ T7828] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2604.277671][ T7842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11780'.
[ 2604.304467][ T7842] FAULT_INJECTION: forcing a failure.
[ 2604.304467][ T7842] name failslab, interval 1, probability 0, space 0, times 0
[ 2604.344052][ T7842] CPU: 1 PID: 7842 Comm: syz.1.11780 Not tainted syzkaller #0
[ 2604.351558][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2604.361623][ T7842] Call Trace:
[ 2604.364913][ T7842]  <TASK>
[ 2604.367853][ T7842]  dump_stack_lvl+0x18c/0x250
[ 2604.372551][ T7842]  ? show_regs_print_info+0x20/0x20
[ 2604.377766][ T7842]  ? load_image+0x420/0x420
[ 2604.382277][ T7842]  ? trace_call_bpf+0x5e9/0x6c0
[ 2604.387152][ T7842]  ? verify_lock_unused+0x140/0x140
[ 2604.392365][ T7842]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 2604.398450][ T7842]  should_fail_ex+0x39d/0x4d0
[ 2604.403151][ T7842]  should_failslab+0x9/0x20
[ 2604.407669][ T7842]  slab_pre_alloc_hook+0x59/0x310
[ 2604.412697][ T7842]  ? sctp_inet6addr_event+0x37f/0x730
[ 2604.418139][ T7842]  __kmem_cache_alloc_node+0x53/0x250
[ 2604.423513][ T7842]  ? sctp_inet6addr_event+0x37f/0x730
[ 2604.428879][ T7842]  kmalloc_trace+0x2a/0xe0
[ 2604.433300][ T7842]  sctp_inet6addr_event+0x37f/0x730
[ 2604.438505][ T7842]  notifier_call_chain+0x197/0x380
[ 2604.443616][ T7842]  ? atomic_notifier_call_chain+0x26/0x180
[ 2604.449418][ T7842]  atomic_notifier_call_chain+0xda/0x180
[ 2604.455051][ T7842]  ipv6_add_addr+0xdde/0x10d0
[ 2604.459730][ T7842]  ? ipv6_count_addresses+0x190/0x190
[ 2604.465094][ T7842]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 2604.470731][ T7842]  ? mutex_unlock+0x10/0x10
[ 2604.475236][ T7842]  add_addr+0x8c/0x2c0
[ 2604.479307][ T7842]  addrconf_init_auto_addrs+0x476/0xb20
[ 2604.484851][ T7842]  ? addrconf_dad_run+0x1d0/0x1d0
[ 2604.489879][ T7842]  ? __mutex_lock+0x315/0xcc0
[ 2604.494558][ T7842]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 2604.500192][ T7842]  ? mutex_unlock+0x10/0x10
[ 2604.504690][ T7842]  ? tls_dev_event+0x74d/0xf40
[ 2604.509535][ T7842]  ? addrconf_link_ready+0x116/0x170
[ 2604.514820][ T7842]  addrconf_notify+0xb62/0x1010
[ 2604.519670][ T7842]  notifier_call_chain+0x197/0x380
[ 2604.524786][ T7842]  netdev_state_change+0xe4/0x170
[ 2604.529814][ T7842]  ? netdev_features_change+0xd0/0xd0
[ 2604.535194][ T7842]  do_setlink+0x84a/0x4130
[ 2604.539610][ T7842]  ? arch_stack_walk+0x160/0x190
[ 2604.544550][ T7842]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 2604.550696][ T7842]  ? stack_trace_save+0xaa/0x100
[ 2604.555640][ T7842]  ? __nla_validate_parse+0x2522/0x2ea0
[ 2604.561199][ T7842]  ? __nla_validate+0x50/0x50
[ 2604.565914][ T7842]  ? validate_linkmsg+0x719/0x910
[ 2604.570946][ T7842]  rtnl_newlink+0x17da/0x20a0
[ 2604.575634][ T7842]  ? rtnl_newlink+0x511/0x20a0
[ 2604.580402][ T7842]  ? rtnl_setlink+0x4e0/0x4e0
[ 2604.585088][ T7842]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 2604.591247][ T7842]  ? rcu_is_watching+0x15/0xb0
[ 2604.596010][ T7842]  ? trace_contention_end+0x39/0xe0
[ 2604.601201][ T7842]  ? __mutex_lock+0x315/0xcc0
[ 2604.605897][ T7842]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2604.611011][ T7842]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2604.616115][ T7842]  ? rtnl_setlink+0x4e0/0x4e0
[ 2604.620786][ T7842]  rtnetlink_rcv_msg+0x869/0xfa0
[ 2604.625727][ T7842]  ? lockdep_hardirqs_on+0x98/0x150
[ 2604.630922][ T7842]  ? rtnetlink_bind+0x80/0x80
[ 2604.635596][ T7842]  ? perf_trace_preemptirq_template+0xac/0x330
[ 2604.641749][ T7842]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2604.647729][ T7842]  ? lock_chain_count+0x20/0x20
[ 2604.652576][ T7842]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2604.657954][ T7842]  ? lockdep_hardirqs_on+0x98/0x150
[ 2604.663166][ T7842]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2604.668542][ T7842]  ? _local_bh_enable+0xa0/0xa0
[ 2604.673396][ T7842]  ? __dev_queue_xmit+0x265/0x3660
[ 2604.678514][ T7842]  ? __dev_queue_xmit+0x265/0x3660
[ 2604.683629][ T7842]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 2604.688832][ T7842]  ? __dev_queue_xmit+0x265/0x3660
[ 2604.693959][ T7842]  ? ref_tracker_free+0x690/0x840
[ 2604.698991][ T7842]  netlink_rcv_skb+0x241/0x4d0
[ 2604.703753][ T7842]  ? rtnetlink_bind+0x80/0x80
[ 2604.708430][ T7842]  ? netlink_ack+0x1180/0x1180
[ 2604.713201][ T7842]  ? __lock_acquire+0x7d40/0x7d40
[ 2604.718228][ T7842]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2604.723426][ T7842]  netlink_unicast+0x751/0x8d0
[ 2604.728194][ T7842]  netlink_sendmsg+0x8d0/0xbf0
[ 2604.732980][ T7842]  ? netlink_getsockopt+0x590/0x590
[ 2604.738184][ T7842]  ? aa_sock_msg_perm+0x94/0x150
[ 2604.743126][ T7842]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2604.748408][ T7842]  ? security_socket_sendmsg+0x80/0xa0
[ 2604.753862][ T7842]  ? netlink_getsockopt+0x590/0x590
[ 2604.759060][ T7842]  ____sys_sendmsg+0x5ba/0x960
[ 2604.763829][ T7842]  ? __asan_memset+0x22/0x40
[ 2604.768423][ T7842]  ? __sys_sendmsg_sock+0x30/0x30
[ 2604.773443][ T7842]  ? __import_iovec+0x5f2/0x850
[ 2604.778294][ T7842]  ? import_iovec+0x73/0xa0
[ 2604.782792][ T7842]  ___sys_sendmsg+0x2a6/0x360
[ 2604.787466][ T7842]  ? get_pid_task+0x20/0x1e0
[ 2604.792054][ T7842]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2604.796829][ T7842]  ? __lock_acquire+0x7d40/0x7d40
[ 2604.801865][ T7842]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2604.806715][ T7842]  ? __x64_sys_sendmsg+0x80/0x80
[ 2604.811661][ T7842]  ? lockdep_hardirqs_on+0x98/0x150
[ 2604.816863][ T7842]  do_syscall_64+0x55/0xb0
[ 2604.821277][ T7842]  ? clear_bhb_loop+0x40/0x90
[ 2604.825947][ T7842]  ? clear_bhb_loop+0x40/0x90
[ 2604.830617][ T7842]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2604.836510][ T7842] RIP: 0033:0x7f5e4d19ce59
[ 2604.840919][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2604.860520][ T7842] RSP: 002b:00007f5e4dfc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2604.868931][ T7842] RAX: ffffffffffffffda RBX: 00007f5e4d416090 RCX: 00007f5e4d19ce59
[ 2604.876900][ T7842] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006
[ 2604.884863][ T7842] RBP: 00007f5e4dfc0090 R08: 0000000000000000 R09: 0000000000000000
[ 2604.892829][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2604.900793][ T7842] R13: 00007f5e4d416128 R14: 00007f5e4d416090 R15: 00007ffd42fe2038
[ 2604.908770][ T7842]  </TASK>
[ 2604.963545][ T7842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2605.198147][ T7849] netlink: 'syz.1.11784': attribute type 9 has an invalid length.
[ 2605.215450][ T7849] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11784'.
[ 2606.045692][ T7862] netlink: 'syz.2.11788': attribute type 9 has an invalid length.
[ 2606.057273][ T7862] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11788'.
[ 2606.609096][ T7874] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11792'.
[ 2606.618927][ T7874] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[ 2606.633403][ T7874] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11792'.
[ 2606.651383][ T7874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2606.819747][ T7881] netlink: 22 bytes leftover after parsing attributes in process `syz.2.11795'.
[ 2606.957154][ T7883] netlink: 'syz.1.11796': attribute type 10 has an invalid length.
[ 2606.965535][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11796'.
[ 2606.999063][ T7883] virt_wifi0: left promiscuous mode
[ 2607.014955][ T7883] virt_wifi0: left allmulticast mode
[ 2607.038436][ T7883] team0: Port device virt_wifi0 removed
[ 2607.051652][ T7883] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2608.120975][ T7902] netlink: 'syz.0.11803': attribute type 9 has an invalid length.
[ 2608.132535][ T7902] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11803'.
[ 2608.140672][ T7910] FAULT_INJECTION: forcing a failure.
[ 2608.140672][ T7910] name failslab, interval 1, probability 0, space 0, times 0
[ 2608.184687][ T7910] CPU: 0 PID: 7910 Comm: syz.2.11805 Not tainted syzkaller #0
[ 2608.192202][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2608.202294][ T7910] Call Trace:
[ 2608.205584][ T7910]  <TASK>
[ 2608.205601][ T7910]  dump_stack_lvl+0x18c/0x250
[ 2608.205645][ T7910]  ? show_regs_print_info+0x20/0x20
[ 2608.205675][ T7910]  ? load_image+0x420/0x420
[ 2608.205712][ T7910]  ? __might_sleep+0xe0/0xe0
[ 2608.205744][ T7910]  ? __lock_acquire+0x7d40/0x7d40
[ 2608.232751][ T7910]  should_fail_ex+0x39d/0x4d0
[ 2608.237503][ T7910]  should_failslab+0x9/0x20
[ 2608.242053][ T7910]  slab_pre_alloc_hook+0x59/0x310
[ 2608.247133][ T7910]  ? tomoyo_encode+0x28b/0x540
[ 2608.251942][ T7910]  ? tomoyo_encode+0x28b/0x540
[ 2608.256755][ T7910]  __kmem_cache_alloc_node+0x53/0x250
[ 2608.262169][ T7910]  ? tomoyo_encode+0x28b/0x540
[ 2608.266955][ T7910]  __kmalloc+0xa4/0x230
[ 2608.271140][ T7910]  tomoyo_encode+0x28b/0x540
[ 2608.275756][ T7910]  tomoyo_realpath_from_path+0x592/0x5d0
[ 2608.281425][ T7910]  tomoyo_path_number_perm+0x248/0x620
[ 2608.286899][ T7910]  ? tomoyo_path_number_perm+0x217/0x620
[ 2608.292546][ T7910]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2608.298018][ T7910]  ? ksys_write+0x1c4/0x260
[ 2608.302580][ T7910]  ? __fget_files+0x28/0x4b0
[ 2608.307196][ T7910]  ? __fget_files+0x28/0x4b0
[ 2608.311819][ T7910]  security_file_ioctl+0x70/0xa0
[ 2608.316774][ T7910]  __se_sys_ioctl+0x48/0x170
[ 2608.321385][ T7910]  do_syscall_64+0x55/0xb0
[ 2608.325819][ T7910]  ? clear_bhb_loop+0x40/0x90
[ 2608.330508][ T7910]  ? clear_bhb_loop+0x40/0x90
[ 2608.335204][ T7910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2608.341122][ T7910] RIP: 0033:0x7f775899ce59
[ 2608.345555][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2608.365183][ T7910] RSP: 002b:00007f775980a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2608.373619][ T7910] RAX: ffffffffffffffda RBX: 00007f7758c16090 RCX: 00007f775899ce59
[ 2608.381610][ T7910] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006
[ 2608.389601][ T7910] RBP: 00007f775980a090 R08: 0000000000000000 R09: 0000000000000000
[ 2608.397586][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2608.405570][ T7910] R13: 00007f7758c16128 R14: 00007f7758c16090 R15: 00007ffc222d9dd8
[ 2608.413562][ T7910]  </TASK>
[ 2608.444192][ T7910] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2608.458307][ T7907] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11805'.
[ 2608.572068][ T7914] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11807'.
[ 2608.583040][ T7914] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 2608.603890][ T7914] openvswitch: netlink: Message has 1 unknown bytes.
[ 2608.673522][ T7916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11808'.
[ 2608.722496][ T7918] netlink: 'syz.3.11809': attribute type 10 has an invalid length.
[ 2608.737781][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11809'.
[ 2609.454813][ T7934] netlink: 'syz.2.11816': attribute type 9 has an invalid length.
[ 2609.463879][ T7934] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11816'.
[ 2610.063764][ T7949] netlink: 'syz.2.11822': attribute type 10 has an invalid length.
[ 2610.072545][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11822'.
[ 2610.087299][ T7949] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2610.157000][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2610.824906][ T7969] netlink: 'syz.1.11830': attribute type 9 has an invalid length.
[ 2610.833162][ T7969] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11830'.
[ 2611.378701][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2614.132940][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2614.252729][ T8031] netlink: 'syz.2.11847': attribute type 39 has an invalid length.
[ 2615.277776][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2616.201377][ T8075] FAULT_INJECTION: forcing a failure.
[ 2616.201377][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2616.236429][ T8075] CPU: 0 PID: 8075 Comm: syz.1.11862 Not tainted syzkaller #0
[ 2616.243926][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2616.254008][ T8075] Call Trace:
[ 2616.257302][ T8075]  <TASK>
[ 2616.260244][ T8075]  dump_stack_lvl+0x18c/0x250
[ 2616.264944][ T8075]  ? show_regs_print_info+0x20/0x20
[ 2616.270165][ T8075]  ? load_image+0x420/0x420
[ 2616.274686][ T8075]  ? __lock_acquire+0x7d40/0x7d40
[ 2616.279735][ T8075]  should_fail_ex+0x39d/0x4d0
[ 2616.284449][ T8075]  _copy_from_user+0x2f/0xe0
[ 2616.289062][ T8075]  __copy_msghdr+0x3bb/0x580
[ 2616.293674][ T8075]  ___sys_sendmsg+0x214/0x360
[ 2616.298371][ T8075]  ? get_pid_task+0x20/0x1e0
[ 2616.302984][ T8075]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2616.307785][ T8075]  ? __lock_acquire+0x7d40/0x7d40
[ 2616.312862][ T8075]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2616.317741][ T8075]  ? __x64_sys_sendmsg+0x80/0x80
[ 2616.322719][ T8075]  ? lockdep_hardirqs_on+0x98/0x150
[ 2616.327944][ T8075]  do_syscall_64+0x55/0xb0
[ 2616.332380][ T8075]  ? clear_bhb_loop+0x40/0x90
[ 2616.337075][ T8075]  ? clear_bhb_loop+0x40/0x90
[ 2616.341776][ T8075]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2616.347695][ T8075] RIP: 0033:0x7f5e4d19ce59
[ 2616.352128][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2616.371753][ T8075] RSP: 002b:00007f5e4dfe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2616.380186][ T8075] RAX: ffffffffffffffda RBX: 00007f5e4d415fa0 RCX: 00007f5e4d19ce59
[ 2616.388177][ T8075] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003
[ 2616.396162][ T8075] RBP: 00007f5e4dfe1090 R08: 0000000000000000 R09: 0000000000000000
[ 2616.404146][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2616.412134][ T8075] R13: 00007f5e4d416038 R14: 00007f5e4d415fa0 R15: 00007ffd42fe2038
[ 2616.420138][ T8075]  </TASK>
[ 2616.675929][ T8086] netlink: 'syz.3.11866': attribute type 39 has an invalid length.
[ 2617.085432][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2618.215707][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2621.388279][ T8135] netlink: 'syz.1.11884': attribute type 10 has an invalid length.
[ 2621.406723][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11884'.
[ 2621.790353][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2621.937064][ T8146] delete_channel: no stack
[ 2625.366447][ T8165] netlink: 'syz.1.11897': attribute type 10 has an invalid length.
[ 2625.375354][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11897'.
[ 2625.407185][ T8169] netlink: 'syz.3.11899': attribute type 10 has an invalid length.
[ 2625.418725][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11899'.
[ 2625.441908][ T8169] virt_wifi0: left promiscuous mode
[ 2625.449210][ T8169] virt_wifi0: left allmulticast mode
[ 2625.457823][ T8169] team0: Port device virt_wifi0 removed
[ 2625.469745][ T8169] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2625.513813][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2625.517709][ T8175] FAULT_INJECTION: forcing a failure.
[ 2625.517709][ T8175] name failslab, interval 1, probability 0, space 0, times 0
[ 2625.538351][ T8175] CPU: 1 PID: 8175 Comm: syz.1.11902 Not tainted syzkaller #0
[ 2625.545831][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2625.555878][ T8175] Call Trace:
[ 2625.559148][ T8175]  <TASK>
[ 2625.562064][ T8175]  dump_stack_lvl+0x18c/0x250
[ 2625.566735][ T8175]  ? show_regs_print_info+0x20/0x20
[ 2625.571921][ T8175]  ? load_image+0x420/0x420
[ 2625.576416][ T8175]  should_fail_ex+0x39d/0x4d0
[ 2625.581091][ T8175]  should_failslab+0x9/0x20
[ 2625.585591][ T8175]  slab_pre_alloc_hook+0x59/0x310
[ 2625.590620][ T8175]  ? nf_ct_ext_add+0x1ab/0x440
[ 2625.595378][ T8175]  ? nf_ct_ext_add+0x1ab/0x440
[ 2625.600142][ T8175]  __kmem_cache_alloc_node+0x53/0x250
[ 2625.605520][ T8175]  ? nf_ct_ext_add+0x1ab/0x440
[ 2625.610277][ T8175]  __kmalloc_node_track_caller+0xa2/0x230
[ 2625.616000][ T8175]  krealloc+0x86/0x120
[ 2625.620067][ T8175]  nf_ct_ext_add+0x1ab/0x440
[ 2625.624655][ T8175]  init_conntrack+0x69c/0xf10
[ 2625.629334][ T8175]  ? early_drop+0x7f0/0x7f0
[ 2625.633835][ T8175]  ? nf_conntrack_find_get+0x650/0x650
[ 2625.639291][ T8175]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 2625.644660][ T8175]  ? __siphash_unaligned+0x22e/0x3a0
[ 2625.649950][ T8175]  nf_conntrack_in+0xc06/0x15c0
[ 2625.654814][ T8175]  ? nf_ct_pernet+0x270/0x270
[ 2625.659495][ T8175]  ? ipt_do_table+0x2c1/0x15e0
[ 2625.664269][ T8175]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[ 2625.669726][ T8175]  ? ip_select_ttl+0xb1/0x330
[ 2625.674403][ T8175]  ? ipv4_conntrack_local+0x123/0x200
[ 2625.679772][ T8175]  ? ipv4_conntrack_in+0x20/0x20
[ 2625.684710][ T8175]  nf_hook_slow+0xbd/0x200
[ 2625.689131][ T8175]  ? nf_hook+0x390/0x390
[ 2625.693367][ T8175]  nf_hook+0x228/0x390
[ 2625.697432][ T8175]  ? nf_hook+0xa2/0x390
[ 2625.701585][ T8175]  ? __ip_local_out+0x5f0/0x5f0
[ 2625.706433][ T8175]  ? nf_hook+0x390/0x390
[ 2625.710674][ T8175]  ? ip_fast_csum+0x1ee/0x2b0
[ 2625.715349][ T8175]  __ip_local_out+0x4db/0x5f0
[ 2625.720020][ T8175]  ? nf_hook+0x390/0x390
[ 2625.724260][ T8175]  ip_send_skb+0x4c/0x1d0
[ 2625.728584][ T8175]  raw_sendmsg+0x163e/0x1c00
[ 2625.733185][ T8175]  ? compat_raw_ioctl+0x70/0x70
[ 2625.738035][ T8175]  ? __lock_acquire+0x1273/0x7d40
[ 2625.743070][ T8175]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 2625.749481][ T8175]  ? sock_rps_record_flow+0x19/0x3f0
[ 2625.754766][ T8175]  ? inet_sendmsg+0x7c/0x2f0
[ 2625.759350][ T8175]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2625.764632][ T8175]  ? security_socket_sendmsg+0x80/0xa0
[ 2625.770082][ T8175]  ? inet_send_prepare+0x260/0x260
[ 2625.775194][ T8175]  ____sys_sendmsg+0x5ba/0x960
[ 2625.779952][ T8175]  ? __lock_acquire+0x7d40/0x7d40
[ 2625.784976][ T8175]  ? __asan_memset+0x22/0x40
[ 2625.789564][ T8175]  ? __sys_sendmsg_sock+0x30/0x30
[ 2625.794583][ T8175]  ? __import_iovec+0x3fa/0x850
[ 2625.799434][ T8175]  ? import_iovec+0x73/0xa0
[ 2625.803933][ T8175]  ___sys_sendmsg+0x2a6/0x360
[ 2625.808611][ T8175]  ? get_pid_task+0x20/0x1e0
[ 2625.813201][ T8175]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2625.817976][ T8175]  ? __lock_acquire+0x7d40/0x7d40
[ 2625.823015][ T8175]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2625.827862][ T8175]  ? __x64_sys_sendmsg+0x80/0x80
[ 2625.832805][ T8175]  ? lockdep_hardirqs_on+0x98/0x150
[ 2625.838003][ T8175]  do_syscall_64+0x55/0xb0
[ 2625.842411][ T8175]  ? clear_bhb_loop+0x40/0x90
[ 2625.847077][ T8175]  ? clear_bhb_loop+0x40/0x90
[ 2625.851751][ T8175]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2625.857643][ T8175] RIP: 0033:0x7f5e4d19ce59
[ 2625.862054][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2625.881652][ T8175] RSP: 002b:00007f5e4dfe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2625.890061][ T8175] RAX: ffffffffffffffda RBX: 00007f5e4d415fa0 RCX: 00007f5e4d19ce59
[ 2625.898033][ T8175] RDX: 2000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2625.905999][ T8175] RBP: 00007f5e4dfe1090 R08: 0000000000000000 R09: 0000000000000000
[ 2625.913964][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2625.921929][ T8175] R13: 00007f5e4d416038 R14: 00007f5e4d415fa0 R15: 00007ffd42fe2038
[ 2625.929906][ T8175]  </TASK>
[ 2626.221849][ T8177] delete_channel: no stack
[ 2626.701460][ T8187] netlink: 'syz.0.11906': attribute type 10 has an invalid length.
[ 2629.584474][T14968] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2629.610783][ T8203] netlink: 'syz.1.11911': attribute type 10 has an invalid length.
[ 2629.630670][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11911'.
[ 2629.751393][ T8212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11917'.
[ 2629.768215][ T8212] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 2630.087729][ T8220] netlink: 'syz.3.11919': attribute type 2 has an invalid length.
[ 2630.115951][ T8222] wg2: entered promiscuous mode
[ 2630.122460][ T8222] wg2: entered allmulticast mode
[ 2630.153882][ T8214] delete_channel: no stack
[ 2630.300842][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2630.351134][ T8235] FAULT_INJECTION: forcing a failure.
[ 2630.351134][ T8235] name failslab, interval 1, probability 0, space 0, times 0
[ 2630.357187][ T8237] netlink: 'syz.0.11924': attribute type 10 has an invalid length.
[ 2630.373502][ T8237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11924'.
[ 2630.384530][ T8235] CPU: 1 PID: 8235 Comm: syz.2.11925 Not tainted syzkaller #0
[ 2630.387081][ T8237] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2630.392004][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2630.392018][ T8235] Call Trace:
[ 2630.392026][ T8235]  <TASK>
[ 2630.392034][ T8235]  dump_stack_lvl+0x18c/0x250
[ 2630.392065][ T8235]  ? show_regs_print_info+0x20/0x20
[ 2630.392086][ T8235]  ? load_image+0x420/0x420
[ 2630.392108][ T8235]  ? verify_lock_unused+0x140/0x140
[ 2630.392139][ T8235]  should_fail_ex+0x39d/0x4d0
[ 2630.447923][ T8235]  should_failslab+0x9/0x20
[ 2630.452424][ T8235]  slab_pre_alloc_hook+0x59/0x310
[ 2630.457464][ T8235]  kmem_cache_alloc+0x5a/0x2d0
[ 2630.462253][ T8235]  ? skb_clone+0x1eb/0x370
[ 2630.466705][ T8235]  skb_clone+0x1eb/0x370
[ 2630.470974][ T8235]  __netlink_deliver_tap+0x41c/0x830
[ 2630.476299][ T8235]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2630.481526][ T8235]  netlink_deliver_tap+0x19c/0x1b0
[ 2630.486644][ T8235]  netlink_unicast+0x72c/0x8d0
[ 2630.491401][ T8235]  netlink_sendmsg+0x8d0/0xbf0
[ 2630.496156][ T8235]  ? lockdep_hardirqs_on+0x98/0x150
[ 2630.501352][ T8235]  ? netlink_getsockopt+0x590/0x590
[ 2630.506557][ T8235]  ? security_socket_sendmsg+0x45/0xa0
[ 2630.512028][ T8235]  ? security_socket_sendmsg+0x80/0xa0
[ 2630.517478][ T8235]  ? netlink_getsockopt+0x590/0x590
[ 2630.522665][ T8235]  ____sys_sendmsg+0x5ba/0x960
[ 2630.527423][ T8235]  ? __asan_memset+0x22/0x40
[ 2630.532012][ T8235]  ? __sys_sendmsg_sock+0x30/0x30
[ 2630.537041][ T8235]  ? __import_iovec+0x5f2/0x850
[ 2630.541883][ T8235]  ? import_iovec+0x73/0xa0
[ 2630.546395][ T8235]  ___sys_sendmsg+0x2a6/0x360
[ 2630.551072][ T8235]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2630.555848][ T8235]  ? __lock_acquire+0x7d40/0x7d40
[ 2630.560880][ T8235]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2630.565722][ T8235]  ? __x64_sys_sendmsg+0x80/0x80
[ 2630.570665][ T8235]  ? lockdep_hardirqs_on+0x98/0x150
[ 2630.575861][ T8235]  do_syscall_64+0x55/0xb0
[ 2630.580272][ T8235]  ? clear_bhb_loop+0x40/0x90
[ 2630.584948][ T8235]  ? clear_bhb_loop+0x40/0x90
[ 2630.589626][ T8235]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2630.595512][ T8235] RIP: 0033:0x7f775899ce59
[ 2630.599918][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2630.619514][ T8235] RSP: 002b:00007f775982b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2630.627917][ T8235] RAX: ffffffffffffffda RBX: 00007f7758c15fa0 RCX: 00007f775899ce59
[ 2630.635876][ T8235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2630.643834][ T8235] RBP: 00007f775982b090 R08: 0000000000000000 R09: 0000000000000000
[ 2630.651792][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2630.659764][ T8235] R13: 00007f7758c16038 R14: 00007f7758c15fa0 R15: 00007ffc222d9dd8
[ 2630.667770][ T8235]  </TASK>
[ 2630.682525][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11925'.
[ 2630.783750][ T8247] netlink: 'syz.2.11929': attribute type 10 has an invalid length.
[ 2630.797506][ T8247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11929'.
[ 2630.808157][ T8247] virt_wifi0: left promiscuous mode
[ 2630.813543][ T8247] virt_wifi0: left allmulticast mode
[ 2630.950132][ T8247] team0: Port device virt_wifi0 removed
[ 2630.961404][ T8247] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2630.983599][ T8250] netlink: 'syz.0.11930': attribute type 2 has an invalid length.
[ 2630.994587][ T8250] FAULT_INJECTION: forcing a failure.
[ 2630.994587][ T8250] name failslab, interval 1, probability 0, space 0, times 0
[ 2631.014092][ T8250] CPU: 1 PID: 8250 Comm: syz.0.11930 Not tainted syzkaller #0
[ 2631.021571][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2631.031615][ T8250] Call Trace:
[ 2631.034885][ T8250]  <TASK>
[ 2631.037806][ T8250]  dump_stack_lvl+0x18c/0x250
[ 2631.042479][ T8250]  ? show_regs_print_info+0x20/0x20
[ 2631.047668][ T8250]  ? load_image+0x420/0x420
[ 2631.052160][ T8250]  ? __lock_acquire+0x7d40/0x7d40
[ 2631.057181][ T8250]  should_fail_ex+0x39d/0x4d0
[ 2631.061859][ T8250]  should_failslab+0x9/0x20
[ 2631.066362][ T8250]  slab_pre_alloc_hook+0x59/0x310
[ 2631.071395][ T8250]  kmem_cache_alloc+0x5a/0x2d0
[ 2631.076156][ T8250]  ? fib_insert_alias+0x309/0x1280
[ 2631.081270][ T8250]  fib_insert_alias+0x309/0x1280
[ 2631.086207][ T8250]  ? rcu_is_watching+0x15/0xb0
[ 2631.090971][ T8250]  ? kmem_cache_alloc+0x149/0x2d0
[ 2631.095994][ T8250]  ? fib_table_insert+0x4b8/0x1b20
[ 2631.101105][ T8250]  fib_table_insert+0x68b/0x1b20
[ 2631.106042][ T8250]  ? l3mdev_fib_table+0x18/0x160
[ 2631.110982][ T8250]  ? l3mdev_fib_table+0x18/0x160
[ 2631.115916][ T8250]  ? fib_new_table+0x10a/0x2d0
[ 2631.120676][ T8250]  fib_magic+0x2e5/0x3c0
[ 2631.124922][ T8250]  ? fib_add_ifaddr+0x5e0/0x5e0
[ 2631.129783][ T8250]  fib_add_ifaddr+0x144/0x5e0
[ 2631.134457][ T8250]  ? is_eth_active_slave_of_bonding_rcu+0x260/0x260
[ 2631.141140][ T8250]  fib_inetaddr_event+0x140/0x1d0
[ 2631.146173][ T8250]  notifier_call_chain+0x197/0x380
[ 2631.151290][ T8250]  blocking_notifier_call_chain+0x6a/0x90
[ 2631.157011][ T8250]  __inet_insert_ifa+0x9bc/0xbd0
[ 2631.161960][ T8250]  ? inet_rcu_free_ifa+0xc0/0xc0
[ 2631.166906][ T8250]  inet_rtm_newaddr+0xc1d/0x1ae0
[ 2631.171845][ T8250]  ? __mutex_lock+0x4f9/0xcc0
[ 2631.176525][ T8250]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[ 2631.182339][ T8250]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2631.187451][ T8250]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 2631.192562][ T8250]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[ 2631.198365][ T8250]  rtnetlink_rcv_msg+0x869/0xfa0
[ 2631.203307][ T8250]  ? rtnetlink_bind+0x80/0x80
[ 2631.207977][ T8250]  ? mark_lock+0x94/0x320
[ 2631.212305][ T8250]  ? __lock_acquire+0x1273/0x7d40
[ 2631.217330][ T8250]  ? __kernel_text_address+0xd/0x30
[ 2631.222533][ T8250]  ? mark_lock+0x94/0x320
[ 2631.226863][ T8250]  ? mark_lock+0x94/0x320
[ 2631.231188][ T8250]  ? __lock_acquire+0x1273/0x7d40
[ 2631.236220][ T8250]  ? kmalloc_reserve+0x95/0x240
[ 2631.241070][ T8250]  ? verify_lock_unused+0x140/0x140
[ 2631.246268][ T8250]  ? verify_lock_unused+0x140/0x140
[ 2631.251475][ T8250]  netlink_rcv_skb+0x241/0x4d0
[ 2631.256238][ T8250]  ? rtnetlink_bind+0x80/0x80
[ 2631.260913][ T8250]  ? netlink_ack+0x1180/0x1180
[ 2631.265692][ T8250]  ? __lock_acquire+0x7d40/0x7d40
[ 2631.270726][ T8250]  ? net_generic+0x1e/0x240
[ 2631.275227][ T8250]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2631.280426][ T8250]  netlink_unicast+0x751/0x8d0
[ 2631.285192][ T8250]  netlink_sendmsg+0x8d0/0xbf0
[ 2631.289962][ T8250]  ? netlink_getsockopt+0x590/0x590
[ 2631.295157][ T8250]  ? aa_sock_msg_perm+0x94/0x150
[ 2631.300093][ T8250]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2631.305374][ T8250]  ? security_socket_sendmsg+0x80/0xa0
[ 2631.310828][ T8250]  ? netlink_getsockopt+0x590/0x590
[ 2631.316027][ T8250]  ____sys_sendmsg+0x5ba/0x960
[ 2631.320793][ T8250]  ? __asan_memset+0x22/0x40
[ 2631.325383][ T8250]  ? __sys_sendmsg_sock+0x30/0x30
[ 2631.330402][ T8250]  ? __import_iovec+0x5f2/0x850
[ 2631.335254][ T8250]  ? import_iovec+0x73/0xa0
[ 2631.339754][ T8250]  ___sys_sendmsg+0x2a6/0x360
[ 2631.344427][ T8250]  ? get_pid_task+0x20/0x1e0
[ 2631.349017][ T8250]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2631.353795][ T8250]  ? __lock_acquire+0x7d40/0x7d40
[ 2631.358835][ T8250]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2631.363690][ T8250]  ? __x64_sys_sendmsg+0x80/0x80
[ 2631.368650][ T8250]  ? lockdep_hardirqs_on+0x98/0x150
[ 2631.373868][ T8250]  do_syscall_64+0x55/0xb0
[ 2631.378289][ T8250]  ? clear_bhb_loop+0x40/0x90
[ 2631.382963][ T8250]  ? clear_bhb_loop+0x40/0x90
[ 2631.387637][ T8250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2631.393530][ T8250] RIP: 0033:0x7f4ffbf9ce59
[ 2631.397943][ T8250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2631.417553][ T8250] RSP: 002b:00007f4ffce4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2631.425967][ T8250] RAX: ffffffffffffffda RBX: 00007f4ffc215fa0 RCX: 00007f4ffbf9ce59
[ 2631.433931][ T8250] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 2631.441901][ T8250] RBP: 00007f4ffce4a090 R08: 0000000000000000 R09: 0000000000000000
[ 2631.449866][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2631.457831][ T8250] R13: 00007f4ffc216038 R14: 00007f4ffc215fa0 R15: 00007ffca89ef278
[ 2631.465811][ T8250]  </TASK>
[ 2631.562097][ T8254] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11932'.
[ 2631.606125][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2631.626257][ T8251] delete_channel: no stack
[ 2631.671655][ T8260] netlink: 'syz.3.11935': attribute type 10 has an invalid length.
[ 2631.680154][ T8260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11935'.
[ 2632.851079][ T8276] netlink: 'syz.2.11941': attribute type 21 has an invalid length.
[ 2632.859389][ T8276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11941'.
[ 2632.868853][ T8276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11941'.
[ 2634.990688][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2635.116131][ T8292] netlink: 'syz.2.11947': attribute type 10 has an invalid length.
[ 2635.124172][ T8292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11947'.
[ 2635.134501][ T8292] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2635.782826][ T8312] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11954'.
[ 2635.837862][ T8310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11953'.
[ 2635.996054][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2636.158825][ T8318] FAULT_INJECTION: forcing a failure.
[ 2636.158825][ T8318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2636.172715][ T8318] CPU: 0 PID: 8318 Comm: syz.0.11957 Not tainted syzkaller #0
[ 2636.180216][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2636.190300][ T8318] Call Trace:
[ 2636.193602][ T8318]  <TASK>
[ 2636.196561][ T8318]  dump_stack_lvl+0x18c/0x250
[ 2636.201281][ T8318]  ? show_regs_print_info+0x20/0x20
[ 2636.206508][ T8318]  ? load_image+0x420/0x420
[ 2636.211023][ T8318]  ? __lock_acquire+0x7d40/0x7d40
[ 2636.216057][ T8318]  ? snprintf+0xe9/0x140
[ 2636.220317][ T8318]  should_fail_ex+0x39d/0x4d0
[ 2636.225011][ T8318]  _copy_to_user+0x2f/0xa0
[ 2636.229432][ T8318]  simple_read_from_buffer+0xe7/0x150
[ 2636.234857][ T8318]  proc_fail_nth_read+0x1e8/0x260
[ 2636.239906][ T8318]  ? proc_fault_inject_write+0x360/0x360
[ 2636.245552][ T8318]  ? fsnotify_perm+0x271/0x5e0
[ 2636.250321][ T8318]  ? proc_fault_inject_write+0x360/0x360
[ 2636.255961][ T8318]  vfs_read+0x28b/0x970
[ 2636.260129][ T8318]  ? kernel_read+0x1e0/0x1e0
[ 2636.264730][ T8318]  ? __fget_files+0x28/0x4b0
[ 2636.269324][ T8318]  ? __fget_files+0x28/0x4b0
[ 2636.273919][ T8318]  ? __fget_files+0x43d/0x4b0
[ 2636.278619][ T8318]  ? __fdget_pos+0x2a3/0x330
[ 2636.283219][ T8318]  ? ksys_read+0x75/0x260
[ 2636.287559][ T8318]  ksys_read+0x150/0x260
[ 2636.291812][ T8318]  ? vfs_write+0x990/0x990
[ 2636.296238][ T8318]  ? lockdep_hardirqs_on+0x98/0x150
[ 2636.301450][ T8318]  do_syscall_64+0x55/0xb0
[ 2636.305880][ T8318]  ? clear_bhb_loop+0x40/0x90
[ 2636.310556][ T8318]  ? clear_bhb_loop+0x40/0x90
[ 2636.315236][ T8318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2636.321132][ T8318] RIP: 0033:0x7f4ffbf5d68e
[ 2636.325549][ T8318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2636.345159][ T8318] RSP: 002b:00007f4ffce49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2636.353574][ T8318] RAX: ffffffffffffffda RBX: 00007f4ffce4a6c0 RCX: 00007f4ffbf5d68e
[ 2636.361550][ T8318] RDX: 000000000000000f RSI: 00007f4ffce4a0a0 RDI: 000000000000000c
[ 2636.369525][ T8318] RBP: 00007f4ffce4a090 R08: 0000000000000000 R09: 0000000000000000
[ 2636.377496][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2636.385466][ T8318] R13: 00007f4ffc216038 R14: 00007f4ffc215fa0 R15: 00007ffca89ef278
[ 2636.393462][ T8318]  </TASK>
[ 2639.348241][ T8335] netlink: 'syz.0.11963': attribute type 9 has an invalid length.
[ 2639.362155][ T8335] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11963'.
[ 2639.773533][ T8338] netlink: 'syz.2.11964': attribute type 10 has an invalid length.
[ 2639.823507][ T8338] team0: Device ipvlan1 failed to register rx_handler
[ 2640.095895][ T8359] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11969'.
[ 2640.218987][ T8362] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11970'.
[ 2640.500494][ T8364] veth0_vlan: entered allmulticast mode
[ 2640.601656][ T8366] veth0_vlan: left promiscuous mode
[ 2640.609545][ T8366] veth0_vlan: entered promiscuous mode
[ 2643.962992][ T8379] mac80211_hwsim hwsim174 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2644.178901][ T8394] netlink: 'syz.3.11977': attribute type 9 has an invalid length.
[ 2644.190796][ T8394] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11977'.
[ 2644.502522][ T8385] netlink: 'syz.1.11979': attribute type 10 has an invalid length.
[ 2644.546942][ T8385] team0: Device ipvlan1 failed to register rx_handler
[ 2647.330155][ T8404] netlink: 'syz.3.11985': attribute type 10 has an invalid length.
[ 2647.344217][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11985'.
[ 2650.404985][T14968] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2650.731763][ T8436] netlink: 703 bytes leftover after parsing attributes in process `syz.3.11995'.
[ 2650.769747][ T8440] netlink: 'syz.2.11994': attribute type 9 has an invalid length.
[ 2650.779283][ T8440] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11994'.
[ 2651.266593][ T8451] veth0_vlan: entered allmulticast mode
[ 2651.899633][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 2651.907837][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 2651.956840][ T8455] veth0_vlan: left promiscuous mode
[ 2651.963101][ T8455] veth0_vlan: entered promiscuous mode
[ 2652.365509][ T8465] netlink: 'syz.1.12005': attribute type 10 has an invalid length.
[ 2652.384181][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12005'.
[ 2652.613612][ T1294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2652.623862][ T1294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2652.634455][ T1294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2652.646920][ T1294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2652.665976][ T1294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2652.673495][ T1294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2652.952530][ T8473] chnl_net:caif_netlink_parms(): no params data found
[ 2653.078457][ T8667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2653.243266][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2653.267242][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2653.282549][ T8473] bridge_slave_0: entered allmulticast mode
[ 2653.291901][ T8473] bridge_slave_0: entered promiscuous mode
[ 2653.362063][ T8487] netlink: 'syz.3.12011': attribute type 9 has an invalid length.
[ 2653.366596][ T8667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2653.374785][ T8487] netlink: 463 bytes leftover after parsing attributes in process `syz.3.12011'.
[ 2653.410419][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2653.422111][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2653.430016][ T8473] bridge_slave_1: entered allmulticast mode
[ 2653.445978][ T8473] bridge_slave_1: entered promiscuous mode
[ 2653.525986][ T8667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2653.550458][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2653.561661][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2653.647829][ T8667] bond0: (slave netdevsim0): Releasing backup interface
[ 2653.668582][ T8667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2653.701430][ T8495] netlink: 'syz.2.12013': attribute type 10 has an invalid length.
[ 2653.712502][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12013'.
[ 2653.728538][ T8495] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2653.748080][ T8497] netlink: 'syz.1.12014': attribute type 16 has an invalid length.
[ 2653.757884][ T8497] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12014'.
[ 2653.775645][ T8473] team0: Port device team_slave_0 added
[ 2653.781863][ T8500] netlink: 'syz.1.12014': attribute type 28 has an invalid length.
[ 2653.804900][ T8473] team0: Port device team_slave_1 added
[ 2653.836077][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2653.843045][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2653.869673][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2653.882716][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2653.889929][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2653.916388][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2654.023277][ T8473] hsr_slave_0: entered promiscuous mode
[ 2654.035196][ T8473] hsr_slave_1: entered promiscuous mode
[ 2654.043384][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2654.051611][ T8473] Cannot create hsr debugfs directory
[ 2654.769538][ T8528] netlink: 'syz.3.12022': attribute type 10 has an invalid length.
[ 2654.778568][ T1294] Bluetooth: hci2: command tx timeout
[ 2654.815878][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2654.842004][ T8528] bridge_slave_1: left allmulticast mode
[ 2654.869185][ T8528] bridge_slave_1: left promiscuous mode
[ 2654.881946][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2654.969608][ T8528] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 2655.049270][ T8535] netlink: 'syz.2.12023': attribute type 10 has an invalid length.
[ 2655.108123][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12023'.
[ 2655.120846][ T8535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2656.032100][ T8544] netlink: 'syz.3.12025': attribute type 10 has an invalid length.
[ 2656.092328][ T8544] team0: Device ipvlan1 failed to register rx_handler
[ 2656.864060][ T1294] Bluetooth: hci2: command tx timeout
[ 2658.377916][ T8473] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2658.398604][ T8473] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2658.409781][ T8473] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2658.465394][ T8473] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2658.934116][ T1294] Bluetooth: hci2: command tx timeout
[ 2659.087261][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2659.120969][ T8473] 8021q: adding VLAN 0 to HW filter on device team0
[ 2659.149291][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2659.156516][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2659.185671][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2659.192840][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2661.014037][ T1294] Bluetooth: hci2: command tx timeout
[ 2661.519339][ T8583] netlink: 'syz.1.12033': attribute type 10 has an invalid length.
[ 2661.535636][ T8583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12033'.
[ 2661.626389][ T8587] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.12036'.
[ 2662.089613][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2662.188184][ T8473] veth0_vlan: entered promiscuous mode
[ 2662.205536][ T8473] veth1_vlan: entered promiscuous mode
[ 2662.259477][ T8473] veth0_macvtap: entered promiscuous mode
[ 2662.280266][ T8473] veth1_macvtap: entered promiscuous mode
[ 2662.316553][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2662.336644][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2662.357578][ T8473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2662.369477][ T8473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2662.385208][ T8473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2662.393932][ T8473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2663.011512][T18992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2663.064030][T18992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2663.114989][ T8614] netlink: 'syz.2.12043': attribute type 9 has an invalid length.
[ 2663.123321][ T8614] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12043'.
[ 2663.172247][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2663.186855][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2663.778528][ T1294] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2664.063529][ T8621] netlink: 'syz.3.12044': attribute type 9 has an invalid length.
[ 2664.071688][ T8621] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12044'.
[ 2665.145654][ T1294] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2665.348904][ T8652] netlink: 'syz.2.12054': attribute type 9 has an invalid length.
[ 2665.368791][ T8652] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12054'.
[ 2667.663641][ T8682] netlink: 'syz.1.12063': attribute type 9 has an invalid length.
[ 2667.695499][ T8682] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12063'.
[ 2668.259468][ T1294] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2668.802665][ T8697] FAULT_INJECTION: forcing a failure.
[ 2668.802665][ T8697] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.816458][ T8694] netlink: 'syz.2.12067': attribute type 9 has an invalid length.
[ 2668.832706][ T8694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12067'.
[ 2668.852606][ T8697] CPU: 1 PID: 8697 Comm: syz.3.12068 Not tainted syzkaller #0
[ 2668.860099][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2668.870166][ T8697] Call Trace:
[ 2668.873449][ T8697]  <TASK>
[ 2668.876390][ T8697]  dump_stack_lvl+0x18c/0x250
[ 2668.881083][ T8697]  ? lock_chain_count+0x20/0x20
[ 2668.885945][ T8697]  ? show_regs_print_info+0x20/0x20
[ 2668.891150][ T8697]  ? load_image+0x420/0x420
[ 2668.895664][ T8697]  ? lockdep_hardirqs_on+0x98/0x150
[ 2668.900891][ T8697]  should_fail_ex+0x39d/0x4d0
[ 2668.905594][ T8697]  should_failslab+0x9/0x20
[ 2668.910116][ T8697]  slab_pre_alloc_hook+0x59/0x310
[ 2668.915146][ T8697]  ? __asan_memcpy+0x40/0x70
[ 2668.919741][ T8697]  ? tomoyo_encode+0x28b/0x540
[ 2668.924507][ T8697]  ? tomoyo_encode+0x28b/0x540
[ 2668.929270][ T8697]  __kmem_cache_alloc_node+0x53/0x250
[ 2668.934643][ T8697]  ? prepend_path+0x4b/0x960
[ 2668.939232][ T8697]  ? tomoyo_encode+0x28b/0x540
[ 2668.944008][ T8697]  __kmalloc+0xa4/0x230
[ 2668.948187][ T8697]  tomoyo_encode+0x28b/0x540
[ 2668.952783][ T8697]  tomoyo_realpath_from_path+0x592/0x5d0
[ 2668.958433][ T8697]  tomoyo_check_open_permission+0x224/0x460
[ 2668.964331][ T8697]  ? tomoyo_check_open_permission+0x1cf/0x460
[ 2668.970400][ T8697]  ? tomoyo_check_path_number_acl+0x280/0x280
[ 2668.976473][ T8697]  ? __asan_memset+0x22/0x40
[ 2668.981085][ T8697]  ? __rwlock_init+0x150/0x150
[ 2668.985851][ T8697]  ? tomoyo_file_open+0xed/0x180
[ 2668.990786][ T8697]  security_file_open+0x62/0xa0
[ 2668.995635][ T8697]  do_dentry_open+0x380/0x1500
[ 2669.000410][ T8697]  path_openat+0x27f1/0x3230
[ 2669.005025][ T8697]  ? do_filp_open+0x430/0x430
[ 2669.009718][ T8697]  do_filp_open+0x1f5/0x430
[ 2669.014222][ T8697]  ? vfs_tmpfile+0x490/0x490
[ 2669.018825][ T8697]  ? _raw_spin_unlock+0x28/0x40
[ 2669.023676][ T8697]  ? alloc_fd+0x58f/0x630
[ 2669.028011][ T8697]  do_sys_openat2+0x134/0x1d0
[ 2669.032693][ T8697]  ? do_sys_open+0xe0/0xe0
[ 2669.037109][ T8697]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2669.043088][ T8697]  ? lock_chain_count+0x20/0x20
[ 2669.047942][ T8697]  __x64_sys_openat+0x139/0x160
[ 2669.052795][ T8697]  do_syscall_64+0x55/0xb0
[ 2669.057212][ T8697]  ? clear_bhb_loop+0x40/0x90
[ 2669.061883][ T8697]  ? clear_bhb_loop+0x40/0x90
[ 2669.066560][ T8697]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2669.072455][ T8697] RIP: 0033:0x7fdaa519ce59
[ 2669.076868][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2669.096470][ T8697] RSP: 002b:00007fdaa5fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2669.104881][ T8697] RAX: ffffffffffffffda RBX: 00007fdaa5415fa0 RCX: 00007fdaa519ce59
[ 2669.112847][ T8697] RDX: 000000000000275a RSI: 0000200000000040 RDI: 0000000000000005
[ 2669.120812][ T8697] RBP: 00007fdaa5fab090 R08: 0000000000000000 R09: 0000000000000000
[ 2669.128776][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2669.136740][ T8697] R13: 00007fdaa5416038 R14: 00007fdaa5415fa0 R15: 00007ffe0664e528
[ 2669.144719][ T8697]  </TASK>
[ 2669.173790][ T8701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12069'.
[ 2669.187235][ T8697] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2669.501713][ T8667] hsr_slave_0: left promiscuous mode
[ 2669.526411][ T8667] hsr_slave_1: left promiscuous mode
[ 2669.567516][ T8667] veth1_macvtap: left promiscuous mode
[ 2669.573129][ T8667] veth0_macvtap: left promiscuous mode
[ 2669.589391][ T1294] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2670.234310][ T8667] virt_wifi0 (unregistering): left promiscuous mode
[ 2670.246938][ T8667] virt_wifi0 (unregistering): left allmulticast mode
[ 2670.274406][ T8667] team0 (unregistering): Port device virt_wifi0 removed
[ 2671.170041][ T8667] team_slave_1 (unregistering): left promiscuous mode
[ 2671.177341][ T8667] team_slave_1 (unregistering): left allmulticast mode
[ 2671.195056][ T8667] team0 (unregistering): Port device team_slave_1 removed
[ 2671.294845][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2671.352061][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2671.636006][ T8667] bond0 (unregistering): Released all slaves
[ 2671.684931][ T8720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2671.692208][ T8720] IPv6: NLM_F_CREATE should be set when creating new route
[ 2671.699610][ T8720] IPv6: NLM_F_CREATE should be set when creating new route
[ 2671.707041][ T8720] IPv6: NLM_F_CREATE should be set when creating new route
[ 2671.741061][ T8740] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12081'.
[ 2671.768532][ T8739] netlink: 'syz.2.12081': attribute type 46 has an invalid length.
[ 2671.975851][ T8748] FAULT_INJECTION: forcing a failure.
[ 2671.975851][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2671.994781][ T8748] CPU: 1 PID: 8748 Comm: syz.0.12083 Not tainted syzkaller #0
[ 2672.002284][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2672.012351][ T8748] Call Trace:
[ 2672.015622][ T8748]  <TASK>
[ 2672.018977][ T8748]  dump_stack_lvl+0x18c/0x250
[ 2672.023648][ T8748]  ? show_regs_print_info+0x20/0x20
[ 2672.028838][ T8748]  ? load_image+0x420/0x420
[ 2672.033329][ T8748]  ? __might_fault+0xaa/0x120
[ 2672.037998][ T8748]  should_fail_ex+0x39d/0x4d0
[ 2672.042674][ T8748]  copyin+0x1a/0x90
[ 2672.046492][ T8748]  _copy_from_iter+0x404/0x12e0
[ 2672.051356][ T8748]  ? __virt_addr_valid+0x18c/0x540
[ 2672.056467][ T8748]  ? __lock_acquire+0x7d40/0x7d40
[ 2672.061483][ T8748]  ? copyout_mc+0x70/0x70
[ 2672.065802][ T8748]  ? __virt_addr_valid+0x18c/0x540
[ 2672.070908][ T8748]  ? __virt_addr_valid+0x18c/0x540
[ 2672.076009][ T8748]  ? __virt_addr_valid+0x469/0x540
[ 2672.081112][ T8748]  ? __check_object_size+0x506/0xa20
[ 2672.086386][ T8748]  skb_copy_datagram_from_iter+0xf4/0x6e0
[ 2672.092096][ T8748]  ? dev_get_by_index+0x22/0x2d0
[ 2672.097031][ T8748]  ? skb_put+0x11b/0x210
[ 2672.101277][ T8748]  packet_sendmsg+0x33ff/0x4c30
[ 2672.106145][ T8748]  ? __might_sleep+0xe0/0xe0
[ 2672.110729][ T8748]  ? mark_lock+0x94/0x320
[ 2672.115057][ T8748]  ? __lock_acquire+0x1273/0x7d40
[ 2672.120079][ T8748]  ? aa_sk_perm+0x83c/0x970
[ 2672.124577][ T8748]  ? packet_getsockopt+0xad0/0xad0
[ 2672.129683][ T8748]  ? tomoyo_path_number_perm+0x6/0x620
[ 2672.135139][ T8748]  ? aa_sock_msg_perm+0x94/0x150
[ 2672.140111][ T8748]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2672.145405][ T8748]  ? security_socket_sendmsg+0x80/0xa0
[ 2672.150863][ T8748]  ? packet_getsockopt+0xad0/0xad0
[ 2672.155978][ T8748]  ____sys_sendmsg+0x5ba/0x960
[ 2672.160748][ T8748]  ? __lock_acquire+0x7d40/0x7d40
[ 2672.165774][ T8748]  ? __asan_memset+0x22/0x40
[ 2672.170374][ T8748]  ? __sys_sendmsg_sock+0x30/0x30
[ 2672.175396][ T8748]  ? __import_iovec+0x3fa/0x850
[ 2672.180251][ T8748]  ? import_iovec+0x73/0xa0
[ 2672.184753][ T8748]  ___sys_sendmsg+0x2a6/0x360
[ 2672.189441][ T8748]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2672.194220][ T8748]  ? trace_call_bpf+0xc3/0x6c0
[ 2672.199007][ T8748]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2672.203861][ T8748]  ? __x64_sys_sendmsg+0x80/0x80
[ 2672.208810][ T8748]  ? lockdep_hardirqs_on+0x98/0x150
[ 2672.214017][ T8748]  do_syscall_64+0x55/0xb0
[ 2672.218433][ T8748]  ? clear_bhb_loop+0x40/0x90
[ 2672.223104][ T8748]  ? clear_bhb_loop+0x40/0x90
[ 2672.227774][ T8748]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2672.233676][ T8748] RIP: 0033:0x7fc5cf99ce59
[ 2672.238093][ T8748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2672.257696][ T8748] RSP: 002b:00007fc5d08f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2672.266115][ T8748] RAX: ffffffffffffffda RBX: 00007fc5cfc15fa0 RCX: 00007fc5cf99ce59
[ 2672.274084][ T8748] RDX: 0000000000000811 RSI: 00002000000001c0 RDI: 0000000000000003
[ 2672.282046][ T8748] RBP: 00007fc5d08f9090 R08: 0000000000000000 R09: 0000000000000000
[ 2672.290010][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2672.297984][ T8748] R13: 00007fc5cfc16038 R14: 00007fc5cfc15fa0 R15: 00007ffe6a931458
[ 2672.305964][ T8748]  </TASK>
[ 2672.482129][ T1294] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2673.236004][ T8765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2673.243740][ T8765] IPv6: NLM_F_CREATE should be set when creating new route
[ 2673.251241][ T8765] IPv6: NLM_F_CREATE should be set when creating new route
[ 2673.258885][ T8765] IPv6: NLM_F_CREATE should be set when creating new route
[ 2673.398446][ T8771] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12094'.
[ 2673.800249][ T1294] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2675.008290][ T8800] FAULT_INJECTION: forcing a failure.
[ 2675.008290][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2675.053986][ T8800] CPU: 0 PID: 8800 Comm: syz.1.12106 Not tainted syzkaller #0
[ 2675.061485][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2675.071556][ T8800] Call Trace:
[ 2675.074850][ T8800]  <TASK>
[ 2675.077785][ T8800]  dump_stack_lvl+0x18c/0x250
[ 2675.082468][ T8800]  ? show_regs_print_info+0x20/0x20
[ 2675.087662][ T8800]  ? load_image+0x420/0x420
[ 2675.092163][ T8800]  ? __lock_acquire+0x7d40/0x7d40
[ 2675.097183][ T8800]  ? snprintf+0xe9/0x140
[ 2675.101428][ T8800]  should_fail_ex+0x39d/0x4d0
[ 2675.106111][ T8800]  _copy_to_user+0x2f/0xa0
[ 2675.110525][ T8800]  simple_read_from_buffer+0xe7/0x150
[ 2675.115904][ T8800]  proc_fail_nth_read+0x1e8/0x260
[ 2675.120927][ T8800]  ? proc_fault_inject_write+0x360/0x360
[ 2675.126560][ T8800]  ? fsnotify_perm+0x271/0x5e0
[ 2675.131315][ T8800]  ? proc_fault_inject_write+0x360/0x360
[ 2675.136944][ T8800]  vfs_read+0x28b/0x970
[ 2675.141099][ T8800]  ? kernel_read+0x1e0/0x1e0
[ 2675.145688][ T8800]  ? __fget_files+0x28/0x4b0
[ 2675.150271][ T8800]  ? __fget_files+0x28/0x4b0
[ 2675.154857][ T8800]  ? __fget_files+0x43d/0x4b0
[ 2675.159534][ T8800]  ? __fdget_pos+0x2a3/0x330
[ 2675.164117][ T8800]  ? ksys_read+0x75/0x260
[ 2675.168444][ T8800]  ksys_read+0x150/0x260
[ 2675.172681][ T8800]  ? vfs_write+0x990/0x990
[ 2675.177095][ T8800]  ? lockdep_hardirqs_on+0x98/0x150
[ 2675.182293][ T8800]  do_syscall_64+0x55/0xb0
[ 2675.186701][ T8800]  ? clear_bhb_loop+0x40/0x90
[ 2675.191369][ T8800]  ? clear_bhb_loop+0x40/0x90
[ 2675.196037][ T8800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2675.201929][ T8800] RIP: 0033:0x7f5e4d15d68e
[ 2675.206337][ T8800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2675.225940][ T8800] RSP: 002b:00007f5e4dfe0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2675.234348][ T8800] RAX: ffffffffffffffda RBX: 00007f5e4dfe16c0 RCX: 00007f5e4d15d68e
[ 2675.242311][ T8800] RDX: 000000000000000f RSI: 00007f5e4dfe10a0 RDI: 0000000000000004
[ 2675.250277][ T8800] RBP: 00007f5e4dfe1090 R08: 0000000000000000 R09: 0000000000000000
[ 2675.258241][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2675.266204][ T8800] R13: 00007f5e4d416038 R14: 00007f5e4d415fa0 R15: 00007ffd42fe2038
[ 2675.274181][ T8800]  </TASK>
[ 2676.047186][T14968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2676.058171][T14968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2676.066308][T14968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2676.074543][T14968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2676.083264][T14968] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2676.093445][T14968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2676.766298][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2676.837070][ T8835] netlink: 'syz.0.12117': attribute type 10 has an invalid length.
[ 2676.867471][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12117'.
[ 2676.882621][ T8835] team0: entered promiscuous mode
[ 2676.888175][ T8835] team_slave_0: entered promiscuous mode
[ 2676.895475][ T8835] team_slave_1: entered promiscuous mode
[ 2676.902872][ T8835] team0: entered allmulticast mode
[ 2676.908335][ T8835] team_slave_0: entered allmulticast mode
[ 2676.915164][ T8835] team_slave_1: entered allmulticast mode
[ 2676.925992][ T8835] bridge0: port 3(team0) entered blocking state
[ 2676.933271][ T8835] bridge0: port 3(team0) entered disabled state
[ 2676.956422][ T8835] bridge0: port 3(team0) entered blocking state
[ 2676.963656][ T8835] bridge0: port 3(team0) entered forwarding state
[ 2677.083758][ T8850] FAULT_INJECTION: forcing a failure.
[ 2677.083758][ T8850] name failslab, interval 1, probability 0, space 0, times 0
[ 2677.097054][ T8850] CPU: 0 PID: 8850 Comm: syz.0.12121 Not tainted syzkaller #0
[ 2677.104544][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2677.114615][ T8850] Call Trace:
[ 2677.117908][ T8850]  <TASK>
[ 2677.120852][ T8850]  dump_stack_lvl+0x18c/0x250
[ 2677.125556][ T8850]  ? show_regs_print_info+0x20/0x20
[ 2677.130775][ T8850]  ? load_image+0x420/0x420
[ 2677.135299][ T8850]  ? __might_sleep+0xe0/0xe0
[ 2677.139907][ T8850]  ? __lock_acquire+0x7d40/0x7d40
[ 2677.144959][ T8850]  ? verify_lock_unused+0x140/0x140
[ 2677.150189][ T8850]  should_fail_ex+0x39d/0x4d0
[ 2677.154898][ T8850]  should_failslab+0x9/0x20
[ 2677.157957][ T8841] syzkaller0: entered promiscuous mode
[ 2677.159403][ T8850]  slab_pre_alloc_hook+0x59/0x310
[ 2677.159437][ T8850]  kmem_cache_alloc_node+0x60/0x320
[ 2677.171130][ T8841] syzkaller0: entered allmulticast mode
[ 2677.175073][ T8850]  ? __alloc_skb+0x103/0x2c0
[ 2677.175102][ T8850]  __alloc_skb+0x103/0x2c0
[ 2677.175125][ T8850]  pfkey_sendmsg+0x1a8/0x10e0
[ 2677.175150][ T8850]  ? __might_sleep+0xe0/0xe0
[ 2677.175179][ T8850]  ? pfkey_release+0x320/0x320
[ 2677.175203][ T8850]  ? aa_sk_perm+0x83c/0x970
[ 2677.175220][ T8850]  ? trace_call_bpf+0xc3/0x6c0
[ 2677.213010][ T8850]  ? aa_af_perm+0x330/0x330
[ 2677.217525][ T8850]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 2677.223955][ T8850]  ? aa_sock_msg_perm+0x94/0x150
[ 2677.228911][ T8850]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2677.234229][ T8850]  ? security_socket_sendmsg+0x80/0xa0
[ 2677.239693][ T8850]  ? pfkey_release+0x320/0x320
[ 2677.244472][ T8850]  ____sys_sendmsg+0x5ba/0x960
[ 2677.249250][ T8850]  ? __asan_memset+0x22/0x40
[ 2677.253848][ T8850]  ? __sys_sendmsg_sock+0x30/0x30
[ 2677.258882][ T8850]  ? __import_iovec+0x5f2/0x850
[ 2677.263750][ T8850]  ? import_iovec+0x73/0xa0
[ 2677.268267][ T8850]  ___sys_sendmsg+0x2a6/0x360
[ 2677.272986][ T8850]  ? __sys_sendmsg+0x2a0/0x2a0
[ 2677.277775][ T8850]  ? trace_call_bpf+0xc3/0x6c0
[ 2677.282573][ T8850]  __se_sys_sendmsg+0x1c2/0x2b0
[ 2677.287430][ T8850]  ? __x64_sys_sendmsg+0x80/0x80
[ 2677.292389][ T8850]  ? lockdep_hardirqs_on+0x98/0x150
[ 2677.297600][ T8850]  do_syscall_64+0x55/0xb0
[ 2677.302026][ T8850]  ? clear_bhb_loop+0x40/0x90
[ 2677.306705][ T8850]  ? clear_bhb_loop+0x40/0x90
[ 2677.311384][ T8850]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2677.317284][ T8850] RIP: 0033:0x7fc5cf99ce59
[ 2677.321702][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2677.341312][ T8850] RSP: 002b:00007fc5d08f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2677.349731][ T8850] RAX: ffffffffffffffda RBX: 00007fc5cfc15fa0 RCX: 00007fc5cf99ce59
[ 2677.357713][ T8850] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000008
[ 2677.365689][ T8850] RBP: 00007fc5d08f9090 R08: 0000000000000000 R09: 0000000000000000
[ 2677.373662][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2677.381635][ T8850] R13: 00007fc5cfc16038 R14: 00007fc5cfc15fa0 R15: 00007ffe6a931458
[ 2677.389625][ T8850]  </TASK>
[ 2677.425804][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2677.509199][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2677.609145][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2678.134274][T14968] Bluetooth: hci4: command tx timeout
[ 2680.089899][ T8829] chnl_net:caif_netlink_parms(): no params data found
[ 2680.109305][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2680.122808][ T8871] netlink: 'syz.2.12129': attribute type 10 has an invalid length.
[ 2680.132413][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12129'.
[ 2680.142705][ T8871] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2680.215986][T14968] Bluetooth: hci4: command tx timeout
[ 2680.414505][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2680.435874][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2680.443186][ T8829] bridge_slave_0: entered allmulticast mode
[ 2680.471770][ T8829] bridge_slave_0: entered promiscuous mode
[ 2680.482873][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2680.520180][ T8884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12130'.
[ 2680.557442][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2680.587321][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2680.614917][ T8829] bridge_slave_1: entered allmulticast mode
[ 2680.637848][ T8829] bridge_slave_1: entered promiscuous mode
[ 2680.849844][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2680.913127][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2681.836086][ T8829] team0: Port device team_slave_0 added
[ 2681.847837][ T8829] team0: Port device team_slave_1 added
[ 2681.875864][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2681.883290][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2681.912353][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2681.948556][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2681.958589][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2681.990303][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2682.107793][ T8829] hsr_slave_0: entered promiscuous mode
[ 2682.115420][ T8829] hsr_slave_1: entered promiscuous mode
[ 2682.121738][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2682.137729][ T8829] Cannot create hsr debugfs directory
[ 2682.294330][T14968] Bluetooth: hci4: command tx timeout
[ 2682.526475][ T8937] netlink: 'syz.2.12140': attribute type 21 has an invalid length.
[ 2682.544634][ T8937] netlink: 'syz.2.12140': attribute type 3 has an invalid length.
[ 2682.552520][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12140'.
[ 2682.819212][ T8933] mac80211_hwsim hwsim272 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 2683.086011][T14968] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2683.331548][ T8829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2683.367473][ T8829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2683.380525][ T8829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2683.394614][ T8829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2683.524206][ T8966] netlink: 'syz.0.12152': attribute type 12 has an invalid length.
[ 2683.532156][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12152'.
[ 2683.711574][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2683.774824][ T8829] 8021q: adding VLAN 0 to HW filter on device team0
[ 2684.067699][T18992] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2684.074925][T18992] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2684.106939][T18992] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2684.114122][T18992] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2684.374127][T14968] Bluetooth: hci4: command tx timeout
[ 2684.742611][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2684.785012][T14968] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2684.921005][ T8829] veth0_vlan: entered promiscuous mode
[ 2684.953851][ T8829] veth1_vlan: entered promiscuous mode
[ 2685.002781][ T8829] veth0_macvtap: entered promiscuous mode
[ 2685.040532][ T8829] veth1_macvtap: entered promiscuous mode
[ 2685.080925][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2685.091772][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2685.116728][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2685.147375][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2685.175182][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2685.195189][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2685.221574][ T8829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2685.230499][ T8829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2685.239401][ T8829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2685.249193][ T8829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2685.473023][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2685.488806][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2685.569818][T32433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2685.578415][T32433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2685.975617][ T9027] netlink: 'syz.0.12160': attribute type 3 has an invalid length.
[ 2686.039648][ T9027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12160'.
[ 2686.508453][ T9018] mac80211_hwsim hwsim272 .3ãc¤±: renamed from wlan1 (while UP)
[ 2686.628927][ T1294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2686.645519][ T1294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2686.655966][ T1294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2686.683526][ T1294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2686.692956][ T1294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2686.701109][ T1294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2686.749680][ T1140] 
[ 2686.752040][ T1140] ======================================================
[ 2686.759056][ T1140] WARNING: possible circular locking dependency detected
[ 2686.766083][ T1140] syzkaller #0 Not tainted
[ 2686.770505][ T1140] ------------------------------------------------------
[ 2686.777524][ T1140] kworker/u4:5/1140 is trying to acquire lock:
[ 2686.783681][ T1140] ffff88804c9b8d80 (team->team_lock_key#19){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[ 2686.793387][ T1140] 
[ 2686.793387][ T1140] but task is already holding lock:
[ 2686.800753][ T1140] ffff888065ae8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[ 2686.811164][ T1140] 
[ 2686.811164][ T1140] which lock already depends on the new lock.
[ 2686.811164][ T1140] 
[ 2686.821553][ T1140] 
[ 2686.821553][ T1140] the existing dependency chain (in reverse order) is:
[ 2686.830554][ T1140] 
[ 2686.830554][ T1140] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[ 2686.838274][ T1140]        __mutex_lock+0x136/0xcc0
[ 2686.843294][ T1140]        cfg80211_netdev_notifier_call+0x33a/0x13f0
[ 2686.849935][ T1140]        notifier_call_chain+0x197/0x380
[ 2686.855560][ T1140]        dev_open+0x110/0x190
[ 2686.860226][ T1140]        team_add_slave+0x75f/0x29a0
[ 2686.865501][ T1140]        do_setlink+0xdfe/0x4130
[ 2686.870429][ T1140]        rtnl_newlink+0x17da/0x20a0
[ 2686.875615][ T1140]        rtnetlink_rcv_msg+0x869/0xfa0
[ 2686.881063][ T1140]        netlink_rcv_skb+0x241/0x4d0
[ 2686.886340][ T1140]        netlink_unicast+0x751/0x8d0
[ 2686.891620][ T1140]        netlink_sendmsg+0x8d0/0xbf0
[ 2686.896897][ T1140]        ____sys_sendmsg+0x5ba/0x960
[ 2686.902169][ T1140]        ___sys_sendmsg+0x2a6/0x360
[ 2686.907360][ T1140]        __se_sys_sendmsg+0x1c2/0x2b0
[ 2686.912719][ T1140]        do_syscall_64+0x55/0xb0
[ 2686.917648][ T1140]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2686.924053][ T1140] 
[ 2686.924053][ T1140] -> #0 (team->team_lock_key#19){+.+.}-{3:3}:
[ 2686.932297][ T1140]        __lock_acquire+0x2df1/0x7d40
[ 2686.937658][ T1140]        lock_acquire+0x19e/0x420
[ 2686.942667][ T1140]        __mutex_lock+0x136/0xcc0
[ 2686.947680][ T1140]        team_del_slave+0x32/0x1c0
[ 2686.952778][ T1140]        team_device_event+0x28d/0xa20
[ 2686.958225][ T1140]        notifier_call_chain+0x197/0x380
[ 2686.963847][ T1140]        unregister_netdevice_many_notify+0x100d/0x1900
[ 2686.970771][ T1140]        unregister_netdevice_queue+0x32c/0x370
[ 2686.977011][ T1140]        _cfg80211_unregister_wdev+0x16b/0x580
[ 2686.983155][ T1140]        ieee80211_remove_interfaces+0x49e/0x690
[ 2686.989472][ T1140]        ieee80211_unregister_hw+0x5d/0x2a0
[ 2686.995360][ T1140]        mac80211_hwsim_del_radio+0x289/0x480
[ 2687.001483][ T1140]        hwsim_exit_net+0x58d/0x650
[ 2687.006671][ T1140]        cleanup_net+0x70a/0xbb0
[ 2687.011597][ T1140]        process_scheduled_works+0xa5d/0x15d0
[ 2687.017657][ T1140]        worker_thread+0xa55/0xfc0
[ 2687.022762][ T1140]        kthread+0x2fa/0x390
[ 2687.027342][ T1140]        ret_from_fork+0x48/0x80
[ 2687.032269][ T1140]        ret_from_fork_asm+0x11/0x20
[ 2687.037541][ T1140] 
[ 2687.037541][ T1140] other info that might help us debug this:
[ 2687.037541][ T1140] 
[ 2687.047754][ T1140]  Possible unsafe locking scenario:
[ 2687.047754][ T1140] 
[ 2687.055186][ T1140]        CPU0                    CPU1
[ 2687.060537][ T1140]        ----                    ----
[ 2687.065884][ T1140]   lock(&rdev->wiphy.mtx);
[ 2687.070375][ T1140]                                lock(team->team_lock_key#19);
[ 2687.077910][ T1140]                                lock(&rdev->wiphy.mtx);
[ 2687.084921][ T1140]   lock(team->team_lock_key#19);
[ 2687.089939][ T1140] 
[ 2687.089939][ T1140]  *** DEADLOCK ***
[ 2687.089939][ T1140] 
[ 2687.098071][ T1140] 5 locks held by kworker/u4:5/1140:
[ 2687.103341][ T1140]  #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2687.114208][ T1140]  #1: ffffc90004c1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2687.124724][ T1140]  #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[ 2687.134105][ T1140]  #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[ 2687.143929][ T1140]  #4: ffff888065ae8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[ 2687.154715][ T1140] 
[ 2687.154715][ T1140] stack backtrace:
[ 2687.160589][ T1140] CPU: 0 PID: 1140 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 2687.168117][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2687.178163][ T1140] Workqueue: netns cleanup_net
[ 2687.182920][ T1140] Call Trace:
[ 2687.186189][ T1140]  <TASK>
[ 2687.189112][ T1140]  dump_stack_lvl+0x18c/0x250
[ 2687.193784][ T1140]  ? load_image+0x420/0x420
[ 2687.198279][ T1140]  ? show_regs_print_info+0x20/0x20
[ 2687.203470][ T1140]  ? print_circular_bug+0x12b/0x1a0
[ 2687.208660][ T1140]  check_noncircular+0x2fc/0x400
[ 2687.213591][ T1140]  ? print_deadlock_bug+0x5d0/0x5d0
[ 2687.218775][ T1140]  ? lockdep_lock+0xf5/0x230
[ 2687.223356][ T1140]  ? __lock_acquire+0x1273/0x7d40
[ 2687.228372][ T1140]  ? _find_first_zero_bit+0xd3/0x100
[ 2687.233650][ T1140]  __lock_acquire+0x2df1/0x7d40
[ 2687.238499][ T1140]  ? verify_lock_unused+0x140/0x140
[ 2687.243687][ T1140]  ? verify_lock_unused+0x140/0x140
[ 2687.248877][ T1140]  lock_acquire+0x19e/0x420
[ 2687.253367][ T1140]  ? team_del_slave+0x32/0x1c0
[ 2687.258126][ T1140]  ? __might_sleep+0xe0/0xe0
[ 2687.262705][ T1140]  ? read_lock_is_recursive+0x20/0x20
[ 2687.268070][ T1140]  __mutex_lock+0x136/0xcc0
[ 2687.272566][ T1140]  ? team_del_slave+0x32/0x1c0
[ 2687.277326][ T1140]  ? __lock_acquire+0x7d40/0x7d40
[ 2687.282342][ T1140]  ? rcu_is_watching+0x15/0xb0
[ 2687.287099][ T1140]  ? trace_contention_end+0x39/0xe0
[ 2687.292285][ T1140]  ? __mutex_lock+0x315/0xcc0
[ 2687.296954][ T1140]  ? team_del_slave+0x32/0x1c0
[ 2687.301717][ T1140]  ? mutex_lock_nested+0x20/0x20
[ 2687.306640][ T1140]  ? bond_netdev_event+0xeb/0xf20
[ 2687.311705][ T1140]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 2687.317337][ T1140]  team_del_slave+0x32/0x1c0
[ 2687.321917][ T1140]  team_device_event+0x28d/0xa20
[ 2687.326845][ T1140]  notifier_call_chain+0x197/0x380
[ 2687.331948][ T1140]  unregister_netdevice_many_notify+0x100d/0x1900
[ 2687.338356][ T1140]  ? lock_chain_count+0x20/0x20
[ 2687.343200][ T1140]  ? unregister_netdevice_many+0x20/0x20
[ 2687.348822][ T1140]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 2687.354538][ T1140]  ? __lock_acquire+0x7d40/0x7d40
[ 2687.359552][ T1140]  unregister_netdevice_queue+0x32c/0x370
[ 2687.365263][ T1140]  ? list_netdevice+0x730/0x730
[ 2687.370103][ T1140]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 2687.375816][ T1140]  _cfg80211_unregister_wdev+0x16b/0x580
[ 2687.381441][ T1140]  ieee80211_remove_interfaces+0x49e/0x690
[ 2687.387244][ T1140]  ? ieee80211_do_stop+0x1e20/0x1e20
[ 2687.392519][ T1140]  ? rcu_is_watching+0x15/0xb0
[ 2687.397279][ T1140]  ieee80211_unregister_hw+0x5d/0x2a0
[ 2687.402648][ T1140]  mac80211_hwsim_del_radio+0x289/0x480
[ 2687.408185][ T1140]  ? rhashtable_remove_fast+0xc00/0xc00
[ 2687.413725][ T1140]  hwsim_exit_net+0x58d/0x650
[ 2687.418395][ T1140]  ? hwsim_init_net+0x90/0x90
[ 2687.423068][ T1140]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[ 2687.428944][ T1140]  cleanup_net+0x70a/0xbb0
[ 2687.433351][ T1140]  ? ops_free_list+0x3b0/0x3b0
[ 2687.438121][ T1140]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2687.443327][ T1140]  ? process_scheduled_works+0x96f/0x15d0
[ 2687.449045][ T1140]  ? process_scheduled_works+0x96f/0x15d0
[ 2687.454759][ T1140]  process_scheduled_works+0xa5d/0x15d0
[ 2687.460309][ T1140]  ? worker_attach_to_pool+0x380/0x380
[ 2687.465765][ T1140]  ? assign_work+0x3d2/0x5d0
[ 2687.470355][ T1140]  worker_thread+0xa55/0xfc0
[ 2687.474949][ T1140]  kthread+0x2fa/0x390
[ 2687.479010][ T1140]  ? pr_cont_work+0x560/0x560
[ 2687.483685][ T1140]  ? kthread_blkcg+0xd0/0xd0
[ 2687.488271][ T1140]  ret_from_fork+0x48/0x80
[ 2687.492684][ T1140]  ? kthread_blkcg+0xd0/0xd0
[ 2687.497268][ T1140]  ret_from_fork_asm+0x11/0x20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2687.502046][ T1140]  </TASK>
[ 2687.536427][ T1140] mac80211_hwsim hwsim188 wlan1 (unregistering): left promiscuous mode
[ 2687.554224][ T1140] mac80211_hwsim hwsim188 wlan1 (unregistering): left allmulticast mode
[ 2687.563704][ T1140] team0: Port device wlan1 removed
[ 2687.575495][ T9036] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.12154'.
[ 2687.934080][ T1140] hsr_slave_0: left promiscuous mode
[ 2687.992924][ T1140] hsr_slave_1: left promiscuous mode
[ 2688.095522][ T1140] bridge0: port 3(team0) entered disabled state
[ 2688.158145][ T1140] bridge_slave_1: left allmulticast mode
[ 2688.163817][ T1140] bridge_slave_1: left promiscuous mode
[ 2688.185444][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2688.254750][ T1140] bridge_slave_0: left allmulticast mode
[ 2688.274115][ T1140] bridge_slave_0: left promiscuous mode
[ 2688.279828][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2688.358352][ T1140] veth1_macvtap: left promiscuous mode
[ 2688.363905][ T1140] veth0_macvtap: left promiscuous mode
[ 2688.384154][ T1140] veth1_vlan: left promiscuous mode
[ 2688.389460][ T1140] veth0_vlan: left promiscuous mode
[ 2688.577670][ T1140] team_slave_1 (unregistering): left promiscuous mode
[ 2688.584508][ T1140] team_slave_1 (unregistering): left allmulticast mode
[ 2688.592090][ T1140] team0 (unregistering): Port device team_slave_1 removed
[ 2688.648189][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2688.672042][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2688.772586][ T1140] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2688.774256][T14968] Bluetooth: hci0: command tx timeout
[ 2688.786692][ T1140] bond0 (unregistering): Released all slaves
[ 2689.279088][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.309152][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.366924][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.408665][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.508517][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.550957][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.621523][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.695031][ T1140] bond0: (slave netdevsim0): Releasing backup interface
[ 2689.703574][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.818479][ T1140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.870845][ T1140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.929708][ T1140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2689.985742][ T1140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2693.520192][ T1140] hsr_slave_0: left promiscuous mode
[ 2693.528420][ T1140] hsr_slave_1: left promiscuous mode
[ 2693.535498][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2693.542895][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2693.559044][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2693.566774][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2693.578041][ T1140] bridge0: port 3(team0) entered disabled state
[ 2693.585850][ T1140] bridge_slave_1: left allmulticast mode
[ 2693.591500][ T1140] bridge_slave_1: left promiscuous mode
[ 2693.597370][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2693.608051][ T1140] bridge_slave_0: left allmulticast mode
[ 2693.613702][ T1140] bridge_slave_0: left promiscuous mode
[ 2693.620059][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2693.632570][ T1140] hsr_slave_0: left promiscuous mode
[ 2693.639612][ T1140] hsr_slave_1: left promiscuous mode
[ 2693.645842][ T1140] bridge0: port 3(team0) entered disabled state
[ 2693.653379][ T1140] bridge_slave_0: left allmulticast mode
[ 2693.660927][ T1140] bridge_slave_0: left promiscuous mode
[ 2693.669039][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2693.685452][ T1140] hsr_slave_0: left promiscuous mode
[ 2693.691262][ T1140] hsr_slave_1: left promiscuous mode
[ 2693.701842][ T1140] veth1_macvtap: left promiscuous mode
[ 2693.707585][ T1140] veth0_macvtap: left promiscuous mode
[ 2693.713117][ T1140] veth1_vlan: left promiscuous mode
[ 2693.721059][ T1140] veth0_vlan: left promiscuous mode
[ 2693.729210][ T1140] veth1_macvtap: left promiscuous mode
[ 2693.735325][ T1140] veth0_macvtap: left promiscuous mode
[ 2693.740922][ T1140] veth1_vlan: left promiscuous mode
[ 2693.746254][ T1140] veth0_vlan: left promiscuous mode
[ 2693.752909][ T1140] veth1_macvtap: left promiscuous mode
[ 2693.758880][ T1140] veth0_macvtap: left promiscuous mode
[ 2693.764556][ T1140] veth1_vlan: left promiscuous mode
[ 2693.769845][ T1140] veth0_vlan: left promiscuous mode
[ 2694.030801][ T1140] team_slave_1 (unregistering): left promiscuous mode
[ 2694.040602][ T1140] team_slave_1 (unregistering): left allmulticast mode
[ 2694.050969][ T1140] team0 (unregistering): Port device team_slave_1 removed
[ 2694.061966][ T1140] team_slave_0 (unregistering): left promiscuous mode
[ 2694.072934][ T1140] team_slave_0 (unregistering): left allmulticast mode
[ 2694.080361][ T1140] team0 (unregistering): Port device team_slave_0 removed
[ 2694.103655][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2694.129528][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2694.185690][ T1140] bond0 (unregistering): Released all slaves
[ 2694.433352][ T1140] team_slave_1 (unregistering): left promiscuous mode
[ 2694.440164][ T1140] team_slave_1 (unregistering): left allmulticast mode
[ 2694.447592][ T1140] team0 (unregistering): Port device team_slave_1 removed
[ 2694.503377][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2694.529419][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2694.554339][ T1140] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 2694.632447][ T1140] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 2694.640969][ T1140] bond0 (unregistering): Released all slaves
[ 2694.698275][ T1140] geneve1 (unregistering): left promiscuous mode
[ 2694.704658][ T1140] geneve1 (unregistering): left allmulticast mode
[ 2694.711651][ T1140] team0 (unregistering): Port device geneve1 removed
[ 2694.910469][ T1140] team_slave_1 (unregistering): left promiscuous mode
[ 2694.921038][ T1140] team_slave_1 (unregistering): left allmulticast mode
[ 2694.928737][ T1140] team0 (unregistering): Port device team_slave_1 removed
[ 2694.978764][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2695.005878][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2695.093114][ T1140] bond0 (unregistering): Released all slaves
[ 2695.713455][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2695.766015][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2695.818168][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2695.880030][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2696.622550][ T1140] hsr_slave_0: left promiscuous mode
[ 2696.631766][ T1140] hsr_slave_1: left promiscuous mode
[ 2696.638838][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2696.646713][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2696.657571][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2696.665390][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2696.672959][ T1140] bridge_slave_1: left allmulticast mode
[ 2696.681022][ T1140] bridge_slave_1: left promiscuous mode
[ 2696.687331][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2696.696563][ T1140] bridge_slave_0: left allmulticast mode
[ 2696.702213][ T1140] bridge_slave_0: left promiscuous mode
[ 2696.708656][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2696.720172][ T1140] veth1_macvtap: left promiscuous mode
[ 2696.726218][ T1140] veth0_macvtap: left promiscuous mode
[ 2696.731811][ T1140] veth1_vlan: left promiscuous mode
[ 2696.737633][ T1140] veth0_vlan: left promiscuous mode