last executing test programs:

13.772746038s ago: executing program 3 (id=9129):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r4=>r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0xa, 0x2, 0x3a) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x12100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x1c, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, &(0x7f00000008c0)=""/4096, 0x4}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) (async)
r8 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async)
syz_open_procfs$namespace(r8, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}, {0x0, 0x30}], 0x2, 0x0, 0x0, 0x900}, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x8000})

12.613215115s ago: executing program 3 (id=9136):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8ffdcb7907009875f375ffff86dd6317ce6207"], 0xfe1b)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000012c0)={&(0x7f0000000100)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/241, 0xf1}], 0x2}, 0x10020)

12.410327702s ago: executing program 3 (id=9140):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)

12.273531826s ago: executing program 3 (id=9143):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) (fail_nth: 5)

11.639915377s ago: executing program 3 (id=9146):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x38}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pi6   \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xe, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query, @map_val={0x18, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x89}, @map_fd={0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x2, 0x5, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x4c, &(0x7f0000000400)=""/76, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000840)=[r2, r4, r5, r6, r7, r10, r12, r13], &(0x7f0000000880)=[{0x5, 0x1, 0x1, 0x1}, {0x1, 0x4, 0x9, 0x8}, {0x5, 0x2, 0xf, 0x8}, {0x2, 0x1, 0xb, 0x4}, {0x4, 0x2, 0xc, 0x9}, {0x1, 0x5, 0xa, 0xb}, {0x2, 0x1, 0xff, 0x6}, {0x4, 0x4, 0x0, 0x6}, {0x4, 0x2, 0x7, 0x8}], 0x10, 0x2}, 0x94)
close(r1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r14, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r14, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0)

11.5295257s ago: executing program 3 (id=9148):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.761254665s ago: executing program 0 (id=9163):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xd)
socket$kcm(0x21, 0x2, 0x2)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0xfffffc69}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000001400)="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", 0xbed}], 0x6}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000180))
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
openat$cgroup_freezer_state(r0, &(0x7f0000000200), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
recvmsg(r5, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122)
socket$kcm(0x10, 0x2, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

4.144664977s ago: executing program 0 (id=9170):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2b, 0x20000000000001, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

3.817195718s ago: executing program 0 (id=9171):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12)
close(r2)
r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12)
openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
r9 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$sock(r9, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1, 0x0, 0x4b}, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x32, 0x1, 0x81, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x55, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex=r11, r8, 0x2, 0x2, r1, @void, @value=r1, @void, @void, r10}, 0x20)

3.817076668s ago: executing program 1 (id=9172):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES64, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

3.706824421s ago: executing program 1 (id=9173):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

3.219880157s ago: executing program 1 (id=9175):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x80000001, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x9, 0xfe, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0xc32a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
getpid()
socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r3, r2, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0xb, 0x4, 0x78, 0x0, 0x200000000000, 0xe8088, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x40000000000009, 0x7}, 0x8, 0x9, 0x3, 0x5, 0x5a6a, 0x127, 0x801, 0x0, 0x0, 0x0, 0x3}, r3, 0x1, r1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10002, 0x0, 0x7, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48)

3.219458657s ago: executing program 2 (id=9176):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)

3.11520592s ago: executing program 4 (id=9177):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[])
close(0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x200000c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fe", 0x69}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @remote})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38)

2.721408552s ago: executing program 2 (id=9178):
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000001c0)=r3, 0x4)
openat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.155515591s ago: executing program 1 (id=9179):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r2, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000c20000000008b0d4000a0200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000080)="6a020cc2bf", 0x0, 0x4}, 0x20)

2.047201954s ago: executing program 2 (id=9180):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2b, 0x20000000000001, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

2.041297954s ago: executing program 0 (id=9189):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x80000001, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x9, 0xfe, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0xc32a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
getpid()
socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r3, r2, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0xb, 0x4, 0x78, 0x0, 0x200000000000, 0xe8088, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x40000000000009, 0x7}, 0x8, 0x9, 0x3, 0x5, 0x5a6a, 0x127, 0x801, 0x0, 0x0, 0x0, 0x3}, r3, 0x1, r1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10002, 0x0, 0x7, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48)

1.937384558s ago: executing program 4 (id=9181):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0x58, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x2, &(0x7f0000000000), 0x8)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="d80000001e0081054e81f782db020000071d95eb78dc2992cbf538f6b830080006007c09e8fe08a304000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc080000000db7e5167fda40fad95667e006dcdfcace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x40400)

1.718127995s ago: executing program 4 (id=9182):
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c0000002b3926c8d8c4ea3a1c9c33ad14319d821af111cef415601e8d557e4b7bb39be125677e366406c0ad9d085f97b0008d8fcdb6a106dbfde02743f3f1cb90b5ec0fd7b1edf2085ef5d008ab6fd3bf3a807881427971dc7cfc0a6a2072bd72f244391b39538caa4d804780233e963627a162c491dcd04bb0b1a189495ec38e99035dedec13c4fba4d58cc022d3f91d8e45cf233088432b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94)
sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4)
recvmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x102)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x7f}, 0x8)

1.675907386s ago: executing program 2 (id=9192):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[])
close(0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x200000c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fe", 0x69}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @remote})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38)

1.55367899s ago: executing program 4 (id=9183):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x67ec84498adf8991)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, 0x0, 0x45)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xb}, {0x5}], 0x10, 0x7}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000)=r4, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x4, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x10)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

1.188352282s ago: executing program 0 (id=9184):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], &(0x7f0000000040)=""/270, 0x82, 0x10e, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08000007", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63", 0x8}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00"], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x104, 0x4, 0x13, 0x0, r5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004540)={r8, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x2, 0xa, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xd, 0x1, 0xa, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f00000034c0)=""/4096, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x10, r0, 0x8, &(0x7f00000044c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000004500)={0x3, 0x3, 0x100, 0x9f}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000004580)=[r5, r1, r9], 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r2, 0x0, 0x1000, 0x7b, &(0x7f0000001780)="0e4f4713d9c07584e3e6bf39697bfbcd3f835dd410384a82665380f9f9135c8bd8e1e86db7daa257e8f2af3d975264e036b1de2bfc5b80d8356ec22226d65a7b561511196d48e2adeb392870d0892fd7473d58188cc7bc2fab2ec8923cafb3f901bad1c6968bd51b352bd2459c6316b74ddd9f7a288b9653d22782bb46c79316bf110c1ef8fbec77c728c58bc15f245ea04fa06624e321e37ac5b8c18f0af5f7fed61e5d0fae772c5e22ac075ffd97c12afe8b56d643d60f9ee18e22ecaa7ccd7dcab2f122fd5c471b4347911e88e1d853adcc8f832ddfcb005dbe0798d152134d34b4cadf3a31cb0b26d29846a38e4ee1f90e0cc7147a345de96ac01adf21cb6e7a91b80d181543b4a0bad8f6073303a6bb82101a8503c4a2c089181a4aa81d50e3d0f45c13885919dd088873ff6b3c0127ba4dc02dc0cb902b846336e5769a6fb662464d8212d1dab17ceeff450e8f1d4a34af19f41aee5fe12d4ac799459d8e8be99b96aa02975d1de10432acb5c30461007c79e5410a6e0d9b387dd6d8c6730a15f1066e719de3b0ec761eaaaf8140372c07b06f47755c705031dbd35a7ddb33c7568c4ce62cbb895e57f76ab0e7c2fa986756ff528388c401a1f1d913dd26c67eee1003e220ca827fd6b0b5cc7c54afa0f234b0fc7bba2dc421d896b7155f5968fc44357bd1fdcfa8ac258779e20aac485dbfe8c46c3239c88df47536177f72fc07eec0ca9078d9b1fa284acbc052b84fb668619024a3b56789885030db3e4bf28d129d268612f99a3850ad6b7b53a436707260696534feef5468ebb14f77e5e59555c89185a9f9868dbee33277e4a9d4168b2b8cc972d74ff1c9e2cf1cde645e0d6f8e78fdd51f1b96c5c2678421eb5ff9d4e02d68ebde17da178e378ea5ecceb7571b3c2afc1e4b328ae2b70e785136124d8647a60ca6d3124d7825059652519a50921d32ae85e021ba0baaa2ba344c541d497b915b831b9b06ab63b1a193c12ef22c1a88af5b0a9e05089160bbc640a77aa656b4484c3ec59d44cc8c8e60ce98ee2028c3a47fb88680fdf45865ffc08ddf6518f597b59138b71b7e78b92809580c3615238edf40288b8b3660150bc9d34bc5d0697107fc9ea4a518488a05a972b3c4a8ab68eb4686116a2884890bda75baf26926e4d0013209a3c0b9b0086f16aba32c758c079636f7f63a924985f1aca9d0fcef6f13b9a16de0afa1f27562e22ea16f41692db045f8fde576d76174799273531abe5e3736e16de0b868f2e0bc0c5c394646f4668bda83cb38b55f398ee517e7cc5680818117007c27c5da988394605821588895d3585b07434fca016a8e6a817d14dccfa7bbffa9392da3d0e2fe1fe0d9af3c884e47bc6f6812a2103a13343688954a938875ddcf046bd0b84715eb433a6434c35c6f4cc50dc3ba687e0835958434f5b09459db7ad08c2c554ddac692d47ff60d88a367024072519060575eba9ee8908032029e695d2794f9d9d62de59aecf1ddad5471226df72bf7de23af4062d82c0c1f1cc98087def1071fab35c366f68d7d26ba8385ca65f9652ffe6f105eaf55958bab2d0eba05468de06c746075c8210ee2ec38a00159422bca43bec612f6d1b7399529d824c1c9ee8617b9f96514599688e34ce9345d9e62521d76c26e443548ce768bd3421e9af48f57769d90c5dd0e4065497860d099f024af2129cbf9a7795fb52777e6a7aed771f90668569c2f72956a2284ca258d9da5c22c88ccb8c617a0dd7e4a1454e15a67564f5f32a6e17c1d6a2ceb4756a1e305cd5c914fe1384710d595525b5f1555b8112568440914166ba0047d3405d88072965658ee589a9113340719a4d43380838c72e66af9f22e863b93ff2423683b737f2de22ee62bb67af120fdb0cec5c4e6fe4c73e5e291b38c1c1122e5879e7fe785c32b5b1c87c5344138fb3ff36f51716513929f3ef07d2117e28e24c5ce1ad9a53cddd27dc4bfb28705802b0603b4df8fec6a2efd3d57c9a3bead612f9b3fa97880dfde36168ca02ba4069a3cccb40df649ec4e76db6b40c5b11d1cc80f479e5f54650ca37f7e7c2014eb6ad6337b1fc51e6293f8aaec725c9b9d4e471b276ae44c2127b4d36654024adbecbd0549a901fc72cfc11e51f123a8b700748d703f7f3d1cb6b32863941ee753b122ee257865257eead8760ba06bdcd8a225617fe32392a27c20d9bcd16b4a3dabd8d6ba7f927630072ae0e9d9cfa36f2c46e46e94b8c3fa7cb48c7ba3630b986af5dbaf515fc3674762aa8826c7b62ec16b3744cc1c94d1a8da93260c6896e2af12dceb5aad1898ab512910689c43796d9084d0a9d020b27a2fbf2280c08040b6b8bea7f0078bd7cac35b711424aa737856fee1d88fcf4f435b095c749324468c5336bbeadf3ce7d66bb33c4623b16f6b93a1fbb37d07a89ba40c67176dd36b236356efb312bfc92e2eb1616bb4c11644ac02fdbfde8b315965b0e3829b35bf5e1835a23e23deb236804b5c4aa1eb7e388a1f586720c46bb70409ecc87df7ebd59b691dc7b61ccde293c269c8de9648244a1313d5998ef0789152d5c1c7e3c38050fdd279ea8ce83fac936e27f4ef156338757b7dac1b43e8ce4281c6581ab8c30da04bc4e417f6a15e31aae5cf4f53ee0cd8e07cadf113487faaba5dbc19118dd6c0f055f285d9dbbdf0ffc711e5cbe787934f81b10506f045e33d446fb5e84ea111075c1bb78aab6d5d455e14bfa4641ef432271ee9b9bef579d66235215a413e1ae4e02502b432d40e967985b609cd2ad31d40ae0a98045d30e87e7f1ff163dbe51361c70fa6e68b222d7efafcf730f17d3095f0f09247f3ee64e97135ec1d4861e18cac48b92e97bc7a87414996eefa58df1bbf03bce84c0cec88eea786bb053e2d4eb00d13e1937049b1799b13b4e5e2077d1b1c297161123e8addc9011e57c632d8f4fc22e9227ec4325c65320a9b7768b7c60bb39d1313e77171cfdcd268821f7c7a1fea04062033a56e0f1a2c517ee0ca0100cea9cac1c6c9cd230075dd325046a22cdbebbf8a4a263a95bc37ef56a413e89502f9b479c26a114f90a3be4213e2f8e10d31d02fbc0de8dfe12e320fa5bf2016343f38e801a969ac2a993fcd4591eb85301c687ea09d1963e2c67883e70175f6ab8ec5fb1bff1067651caa162dcb5846b5e92d6d9984c2f98c81e7ab8ee381798ad5a5aea2edfe3bb2afef996e3721c8ba55a264028893e4ae431b2a3a715cfb8b1538f4300dab87d5ea24b543be58a7d9289c8953103a5e13195c00f2aa5658a9b7edfa88b785e5be760ad496193de54b5723c37df24bf40eae21558610642556879a060160671bc44b403eb68b96784234e96f5d895df00867f2c0e93f41e5d7ee0ef3e8b19c59e5b6956f4697e7cfe3616c338aa46015474b88f007ead493a46d3d944b1209fd150c34c2cf8e9fd1d4af8d23a0b65a27b2c91839c0bffd3bcadb7352f51427a0a2efcf7ed389d716b89271e3ced1f9bc9b3772204af382feceb0c723db5cb72af1b98768d9da864ed1687fc4c22ce4db4fedaffa97ded15e36fbcd6bb2093aaa472e92ee08aa9a0b24f833eb0db6ada29fd0a422c08c20da86b0cf78c737aaee25ed5e000a5f73102e6023cf6db5c4b55500bd42f6f1c9f0ab36598407d22f2bc1eefe6f62b9bafc3e35d91b7882b47c16aff43a6a870acf2d3e4587adee283811561003e132591d54ed43148d42aafe0abea31f59758e53618e41d5f74c30e3ab0da51f0f994d54c76a5f58a5624cb00dca989dec62b310414573aabd676d61349e12bbc9fce7f67dc7eb02c7a8773b07b0849c7a959a536ee7c27594128636f91b4b37b63bdfe740d1fba7f7632442cdf46eb049d58aa5c0825437ac9bf4fa327969c366ed1f5eea8d3b114916f17462e00f2b7cc16f884886e2412fd47b757f0d30c3dc90c0de8f072a89789ae81cd97a3d38ae28c0ce4b5de035947663d83cdf9ee9b3ac1151f7ee2e6f16e19a8cb59e70460180561f9ff35c3ece7d1d29d10016eb0d4e377fdad9a4f208c9ccbcada8998d53e43245d2e4e47b0976bd672c054862718b4fc524cfa2470f41d2d67c2c804b743e2ee5338de1742239ca7fe82f74e6deb11c687bfd1794e531aa43fc080e98ca65f1f60bb565e7102a480a27189f2eb72947ff676408f19d095b7b1055f399cc2d223d7e17cdec622ec33b8747ee3a28100edc8757571ffef1038e9debdb3477f721b6d64ec4e45893bd09f86263b44730a56d072cb6dedb0cb13c46ba6a71ad3b80c4cb282287245313078096a3deba1b924437d5aa83f889fb2e3e9846f082dacc8ab90259209d9f3b8b0ca9f911c2863e7861bc40af068d33ff0fae00e8dd36aadf01bf110accce0c8c453c06492088ce28871eb81e6bb3596c1781fbaecadead6e7ba74457fc437313ea4097a237edf0573d06cff132b6195d38d02709ee9266d575f3486a7fba30f8c3da2d8baae84e5c45565d4f2ae6ee1f80a5716bd8a7a2c89ed4811f67155d6c32fb7870518562302ce4d0de6ac4a75eba1b530ab6c1f8743dadebb5dfc5416cd12059d5cc254b762bc22b5a2f0d2ccdfa2a6748b0b7636f6bc82d4e6c2ed4af9c430bebcdc54be82036a76946a444cbd490004f16fb41e7b27ad67446486ee5da5876336d9532fd8bb72ae92f9b8f1bb705331d74546e002cfa4a3e967fc0f4498acffc2c61c20c5bb5aa5083c2e2087f7a5942e74c2cfffbb5f3ed4bfb876578797166d6fc94956c3cd05b20be426e6c5567820a901117ae695fe7f3e729d8794744d83f8abd3d75a630bcf2e55f4d8e277846caf8bc3bb41e3b6367958e553cd6badbb5ffe35dc4a4635f4b1a46e59633202e0b0107ed50a2952ccc480fc02097917fb910267ca143c78ae833d10a14cc88cb5483cb34141060d955282cd363037dc59505861c44dff4fbf7b29cbe99526bcd13fa0a7e040d364e94f98c14fc6e1145facd1fde6c835d12801672d1b8aadbd651bfbc579e861db7948eaf6be374bfb7795efaa94bbb6c737da1c37e3bcef242618fd2b01558a38d17f3d71663a6405b2d8231f65883194930990e5ee025be47f44d18995b209902e441ccda6be32fa1738dba332bb293cef9fc37cd1fe2ea1fa256c15fbd8fc3f5ae33c5c3040f34219e9dd449ec58ec5871ee156870c038c7b20b157640cfc6ce5c2d706cf687393acc09701df7f4ce42f19a949e043cbf971160dfe41cd6af2f2e57a68c219d7d41b7da298f0c08c000df26b427421b455b5e677ea224e69bc3cd5c47bb4aac6ebfb844db093ae30192906e8564a48b0d6b57fbdbfc108d4a74b527ab5f98c6de16b6625750d5615c613483190dba6ed9e9ed9c95beb3eea2c427dd82a4cc301b2d5bb3f0e83b6f64877b3bec6a86377e757871d3375637714c39bf0e959e94a4be67ac06fe7241b3d39a44c0d140caeff01390f19dbe85d286770549aaa1eb108c0c3f3639cf028adfa7290ca06b6b33469db4746dae0226d91767e11226961658b4d4544c16e878f2903d4f7dc8382ca8760d9e0043379783d731e35ff240bd64297518702bea2049903f36f0e64fca2187f9086cd2eae1193d79000d1776a39593a6f54c21ed31cfee71c513e2882088d1c8f1d7f86cf0b4e808fe2e6e87f485e51ba4f44854a38da92da9d5e3c2f339b774808f27764769281fc4c13b5e67c36b3b599fa173ec968efc0c4193b9f5ea17bd50a8f26a8d28a944433aa44bed93f9131937027a788bf7f8e7977154fb70b026e805f89c49baafa80f506d04", &(0x7f0000002780)=""/123, 0xe, 0x0, 0xd5, 0x40, &(0x7f0000002800)="7ea8e80a61b8b9722a0a0ba98f47cc2758bd405210e9be326f5e201b98529cead601557dc1624cc896d4bfedb91e6e5694f0152a22aca5985dbf291a76a47bdae61ce118d877e887856aa4ba768fe56853b22408945a2ba803f6845d80c71ce58fc384b088b1b1420e7490c4ec058b5c19a1d416f13dae412c341e65b9db15754720f0019645ec5505b3dbe4e2e003b334ca2316aabe25a512de30e5c461a2fe716fefa64fa690fb92e5c40e2300bb1a9a9f5d1cfdbf4228927784f5b83904bdbdc9fefbf579234b20767650a31bed35892ddf10fa", &(0x7f0000002900)="4c5cb1b36b6d4e5e6b8655eaa74cfb78b63d1d9d3e46e83eb43244df14b4b48b3023e9fa2ed928350cb4dc7b70531056fb9ea562bfe88fa935166ec621181a10", 0x2, 0x0, 0xf88}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffff, 0x8}, 0xc)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={&(0x7f0000000780)="70aa1d163cb1d2442475355a5bc11b2794a09b1d78d0b4f69a67af648a7085b085d64024ef85f8ab588d11d3a63a947c13", &(0x7f0000000880)=""/235, &(0x7f0000000980), &(0x7f00000009c0)="f8cc669031af953d95f1e87bde771ba4932e97fd840c075c8ef222afdb36453fd043f7886eb6065a4a1a41a11c9b53d7731e5331fd034fbe21ccc3a65516c8689c93855d63b0ac0b791ca96bbecfe458b43ff10b81ef273d84b94b956462660ff6b204cad43fa190891f19974164a820918cb3486bb5ff98cb75b61845c8a16753764d8cd90d4a6f8d67a06dfe92c12ae774911497f43719cb29341b5799306457f9edf64812433edc8f69f69c1292f84ee59bebc8d064b038d56ab9b56afa8fb4080e20d95f1aae36119f8bf39dc54ed7b918b600f72de05b44ff41a96e8dde25de6a", 0x40, r5}, 0x38)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r13=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x52}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1fa94, r2, 0x7, &(0x7f0000000600)=[r3, r5, r8, r10, r11, r12, r13], &(0x7f0000000640)=[{0x3, 0x2, 0xa, 0x5}, {0x0, 0x2, 0xc, 0x9}, {0x0, 0x1, 0x6, 0xb}, {0x1, 0x1, 0x1, 0x8}, {0x3, 0x2, 0xd, 0x6}, {0x0, 0x5, 0xd, 0x3}, {0x5, 0x1, 0x2, 0x1}], 0x10, 0x6}, 0x94)
r14 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33)

1.146742393s ago: executing program 1 (id=9185):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x200000000003, 0x0, 0x4003, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000000000009a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfb, 0x0, 0x0, 0xa3, 0x0, 0x200000000000c26, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0x7602, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000180000000200000000000000070000005d42020000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0xa03, 0x9, &(0x7f00000006c0)=""/9, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0x100, 0x3fb4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0x5}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b05", 0x0, 0x0, 0x0}, 0x38)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000080), 0x12)
r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0xc00)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)

1.145939083s ago: executing program 4 (id=9186):
socket$kcm(0x1e, 0x4, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x891b, &(0x7f0000000400)={'rose0\x00', @random="0200ff7fffff"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4   \x00'}, 0x20)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000a40), 0x8, 0xf0, 0x8, 0xffffffffffffff8a, &(0x7f0000000540)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x91, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x0, &(0x7f0000000a40), &(0x7f0000000a80)='GPL\x00', 0x7, 0xe8, &(0x7f0000000ac0)=""/232, 0x41100, 0xd71fcf769ae57eff, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000bc0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x20000001, 0x5, 0x80b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c80)=[{0x2, 0x5, 0xc, 0x8}], 0x10, 0x5}, 0x94)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
r14 = perf_event_open$cgroup(&(0x7f0000000f40)={0x2, 0x80, 0xfa, 0x1, 0x1, 0x2, 0x0, 0xd63e, 0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0x6, 0x1000, 0x2, 0x7, 0x6, 0x6, 0x0, 0xb0b, 0x0, 0x3}, r7, 0xa, r1, 0x5)
ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40082404, &(0x7f0000000fc0)=0x7f) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40082404, &(0x7f0000000fc0)=0x7f)
socket$kcm(0x2, 0x5, 0x84) (async)
r15 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r16=>0xffffffffffffffff})
recvmsg$unix(r16, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r17=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r15, 0x84, 0x7d, &(0x7f0000000000)=r17, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x16, 0x17, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000070113f36000000000000000000004ce52ff25b425d6ccdd85f2bb08972ad00", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018130000", @ANYRES32=r4, @ANYBLOB="00000000000000002d8279000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9180000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x13, '\x00', r8, @fallback=0x2c, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f0000000e40)=[r12, r13, 0xffffffffffffffff, r17], 0x0, 0x10, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x16, 0x17, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000070113f36000000000000000000004ce52ff25b425d6ccdd85f2bb08972ad00", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018130000", @ANYRES32=r4, @ANYBLOB="00000000000000002d8279000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9180000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x13, '\x00', r8, @fallback=0x2c, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f0000000e40)=[r12, r13, 0xffffffffffffffff, r17], 0x0, 0x10, 0x1}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

1.023404137s ago: executing program 2 (id=9187):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640))
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e1208000600", 0x2c}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)

571.969452ms ago: executing program 4 (id=9188):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002)
recvmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/101, 0x65}], 0x4}, 0x100)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03316844268c", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='.'], 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='E', 0x1}], 0x1}, 0x4000040)
close(r1)

493.603544ms ago: executing program 2 (id=9190):
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000001c0)=r4, 0x4)
openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

88.085947ms ago: executing program 0 (id=9191):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

0s ago: executing program 1 (id=9193):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfa, r6}, 0x38) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 64)
close(r8) (async, rerun: 64)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) (async, rerun: 32)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xf, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd709c01bb8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000da0004a31104ebc7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

kernel console output (not intermixed with test programs):

lid length.
[ 1636.880891][T28807] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8224'.
[ 1637.188061][T28821] netlink: 'syz.2.8230': attribute type 41 has an invalid length.
[ 1637.250918][T28824] netlink: 'syz.2.8230': attribute type 2 has an invalid length.
[ 1637.258725][T28824] netlink: 'syz.2.8230': attribute type 8 has an invalid length.
[ 1637.311369][T28824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8230'.
[ 1637.385243][T28826] netlink: 'syz.4.8231': attribute type 10 has an invalid length.
[ 1637.409937][T28826] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8231'.
[ 1637.552941][T28832] netlink: 'syz.2.8232': attribute type 2 has an invalid length.
[ 1637.585720][T28832] netlink: 'syz.2.8232': attribute type 8 has an invalid length.
[ 1637.610305][T28832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8232'.
[ 1637.651576][T28826] netlink: 'syz.4.8231': attribute type 2 has an invalid length.
[ 1637.659380][T28826] netlink: 'syz.4.8231': attribute type 3 has an invalid length.
[ 1637.724498][T28826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8231'.
[ 1637.745749][T28835] FAULT_INJECTION: forcing a failure.
[ 1637.745749][T28835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1637.792538][T28823] delete_channel: no stack
[ 1637.818592][T28835] CPU: 1 PID: 28835 Comm: syz.0.8233 Not tainted syzkaller #0
[ 1637.826132][T28835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1637.836311][T28835] Call Trace:
[ 1637.839625][T28835]  <TASK>
[ 1637.842589][T28835]  dump_stack_lvl+0x188/0x24e
[ 1637.847444][T28835]  ? show_regs_print_info+0x12/0x12
[ 1637.852702][T28835]  ? load_image+0x400/0x400
[ 1637.857259][T28835]  ? __lock_acquire+0x7d10/0x7d10
[ 1637.862344][T28835]  should_fail_ex+0x399/0x4d0
[ 1637.867075][T28835]  _copy_from_user+0x2c/0x170
[ 1637.871808][T28835]  iovec_from_user+0x143/0x360
[ 1637.876623][T28835]  __import_iovec+0x6d/0x500
[ 1637.881255][T28835]  import_iovec+0x6f/0xa0
[ 1637.885627][T28835]  ___sys_sendmsg+0x252/0x360
[ 1637.890369][T28835]  ? __sys_sendmsg+0x290/0x290
[ 1637.895202][T28835]  ? __lock_acquire+0x7d10/0x7d10
[ 1637.900291][T28835]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1637.905211][T28835]  ? __x64_sys_sendmsg+0x80/0x80
[ 1637.910226][T28835]  ? lockdep_hardirqs_on+0x94/0x140
[ 1637.915471][T28835]  do_syscall_64+0x4c/0xa0
[ 1637.919938][T28835]  ? clear_bhb_loop+0x60/0xb0
[ 1637.924661][T28835]  ? clear_bhb_loop+0x60/0xb0
[ 1637.929387][T28835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1637.935318][T28835] RIP: 0033:0x7f8e0579ce59
[ 1637.939769][T28835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.959426][T28835] RSP: 002b:00007f8e06667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1637.967886][T28835] RAX: ffffffffffffffda RBX: 00007f8e05a15fa0 RCX: 00007f8e0579ce59
[ 1637.975926][T28835] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1637.983933][T28835] RBP: 00007f8e06667090 R08: 0000000000000000 R09: 0000000000000000
[ 1637.991937][T28835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1637.999938][T28835] R13: 00007f8e05a16038 R14: 00007f8e05a15fa0 R15: 00007fffac387078
[ 1638.007958][T28835]  </TASK>
[ 1638.205919][T28839] device syzkaller0 entered promiscuous mode
[ 1638.580546][T28852] FAULT_INJECTION: forcing a failure.
[ 1638.580546][T28852] name failslab, interval 1, probability 0, space 0, times 0
[ 1638.654786][T28852] CPU: 0 PID: 28852 Comm: syz.2.8239 Not tainted syzkaller #0
[ 1638.662347][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1638.672455][T28852] Call Trace:
[ 1638.675774][T28852]  <TASK>
[ 1638.678732][T28852]  dump_stack_lvl+0x188/0x24e
[ 1638.683465][T28852]  ? show_regs_print_info+0x12/0x12
[ 1638.688703][T28852]  ? load_image+0x400/0x400
[ 1638.693335][T28852]  ? __might_sleep+0xd0/0xd0
[ 1638.697957][T28852]  ? __lock_acquire+0x7d10/0x7d10
[ 1638.703021][T28852]  ? rcu_is_watching+0x11/0xa0
[ 1638.707828][T28852]  should_fail_ex+0x399/0x4d0
[ 1638.712538][T28852]  should_failslab+0x5/0x20
[ 1638.717065][T28852]  slab_pre_alloc_hook+0x59/0x310
[ 1638.722124][T28852]  ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0
[ 1638.728075][T28852]  __kmem_cache_alloc_node+0x4f/0x260
[ 1638.733496][T28852]  ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0
[ 1638.739431][T28852]  kmalloc_trace+0x26/0xe0
[ 1638.743889][T28852]  sctp_auth_asoc_copy_shkeys+0x148/0x5a0
[ 1638.749665][T28852]  sctp_association_new+0x15e5/0x25d0
[ 1638.755096][T28852]  sctp_connect_new_asoc+0x2da/0x6a0
[ 1638.760422][T28852]  ? __sctp_connect+0xd80/0xd80
[ 1638.765302][T28852]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1638.770710][T28852]  ? _local_bh_enable+0xa0/0xa0
[ 1638.775604][T28852]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1638.781451][T28852]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1638.787288][T28852]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1638.792867][T28852]  ? security_sctp_bind_connect+0x85/0xb0
[ 1638.798628][T28852]  sctp_sendmsg+0x15b0/0x2940
[ 1638.803371][T28852]  ? trace_event_raw_event_lock+0x250/0x250
[ 1638.809313][T28852]  ? aa_sk_perm+0x811/0x950
[ 1638.813857][T28852]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1638.818921][T28852]  ? __might_fault+0xa6/0x120
[ 1638.823628][T28852]  ? aa_af_perm+0x340/0x340
[ 1638.828163][T28852]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1638.834632][T28852]  ? inet_sendmsg+0x78/0x2f0
[ 1638.839333][T28852]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1638.844646][T28852]  ? security_socket_sendmsg+0x7c/0xa0
[ 1638.850161][T28852]  ? inet_send_prepare+0x260/0x260
[ 1638.855292][T28852]  ____sys_sendmsg+0x5be/0x970
[ 1638.860104][T28852]  ? __sys_sendmsg_sock+0x30/0x30
[ 1638.865162][T28852]  ? __import_iovec+0x315/0x500
[ 1638.870055][T28852]  ? import_iovec+0x6f/0xa0
[ 1638.874595][T28852]  ___sys_sendmsg+0x2a2/0x360
[ 1638.879324][T28852]  ? __sys_sendmsg+0x290/0x290
[ 1638.884164][T28852]  ? __lock_acquire+0x7d10/0x7d10
[ 1638.889268][T28852]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1638.894159][T28852]  ? __x64_sys_sendmsg+0x80/0x80
[ 1638.899169][T28852]  ? lockdep_hardirqs_on+0x94/0x140
[ 1638.904425][T28852]  do_syscall_64+0x4c/0xa0
[ 1638.908878][T28852]  ? clear_bhb_loop+0x60/0xb0
[ 1638.913588][T28852]  ? clear_bhb_loop+0x60/0xb0
[ 1638.918296][T28852]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1638.924215][T28852] RIP: 0033:0x7fbf08f9ce59
[ 1638.928689][T28852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1638.948318][T28852] RSP: 002b:00007fbf09ec3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1638.956761][T28852] RAX: ffffffffffffffda RBX: 00007fbf09215fa0 RCX: 00007fbf08f9ce59
[ 1638.964762][T28852] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000006
[ 1638.972758][T28852] RBP: 00007fbf09ec3090 R08: 0000000000000000 R09: 0000000000000000
[ 1638.980754][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1638.988750][T28852] R13: 00007fbf09216038 R14: 00007fbf09215fa0 R15: 00007ffefb649b58
[ 1638.996807][T28852]  </TASK>
[ 1642.934233][T28846] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8235'.
[ 1642.944923][T28848] netlink: 'syz.1.8235': attribute type 2 has an invalid length.
[ 1642.953808][T28848] netlink: 'syz.1.8235': attribute type 8 has an invalid length.
[ 1642.961645][T28848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8235'.
[ 1642.977075][T28850] netlink: 'syz.3.8238': attribute type 21 has an invalid length.
[ 1642.987429][T28850] netlink: 'syz.3.8238': attribute type 5 has an invalid length.
[ 1643.014282][T28854] netlink: 'syz.3.8238': attribute type 10 has an invalid length.
[ 1643.034009][T28854] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8238'.
[ 1643.096187][T28868] FAULT_INJECTION: forcing a failure.
[ 1643.096187][T28868] name failslab, interval 1, probability 0, space 0, times 0
[ 1643.115569][T28868] CPU: 0 PID: 28868 Comm: syz.1.8245 Not tainted syzkaller #0
[ 1643.123097][T28868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1643.133184][T28868] Call Trace:
[ 1643.136497][T28868]  <TASK>
[ 1643.139462][T28868]  dump_stack_lvl+0x188/0x24e
[ 1643.144205][T28868]  ? show_regs_print_info+0x12/0x12
[ 1643.149454][T28868]  ? load_image+0x400/0x400
[ 1643.154011][T28868]  ? __might_sleep+0xd0/0xd0
[ 1643.158653][T28868]  ? __lock_acquire+0x7d10/0x7d10
[ 1643.163753][T28868]  should_fail_ex+0x399/0x4d0
[ 1643.168478][T28868]  should_failslab+0x5/0x20
[ 1643.173011][T28868]  slab_pre_alloc_hook+0x59/0x310
[ 1643.178078][T28868]  ? rtnl_newlink+0x10c/0x20a0
[ 1643.182889][T28868]  __kmem_cache_alloc_node+0x4f/0x260
[ 1643.188295][T28868]  ? rtnl_newlink+0x10c/0x20a0
[ 1643.193111][T28868]  kmalloc_trace+0x26/0xe0
[ 1643.197585][T28868]  ? rtnl_setlink+0x510/0x510
[ 1643.202324][T28868]  rtnl_newlink+0x10c/0x20a0
[ 1643.206994][T28868]  ? __mutex_trylock_common+0x155/0x260
[ 1643.212587][T28868]  ? rtnl_setlink+0x510/0x510
[ 1643.217321][T28868]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1643.223523][T28868]  ? rcu_is_watching+0x11/0xa0
[ 1643.228344][T28868]  ? trace_contention_end+0x5f/0x170
[ 1643.233712][T28868]  ? __mutex_lock+0x1ab/0xaf0
[ 1643.238458][T28868]  ? rtnetlink_rcv_msg+0x824/0xfc0
[ 1643.243622][T28868]  ? rcu_read_unlock+0x8c/0xa0
[ 1643.248432][T28868]  ? mutex_lock_nested+0x10/0x10
[ 1643.253423][T28868]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1643.258578][T28868]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1643.263769][T28868]  ? rtnl_setlink+0x510/0x510
[ 1643.268493][T28868]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1643.273499][T28868]  ? rtnetlink_bind+0x80/0x80
[ 1643.278228][T28868]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1643.283731][T28868]  ? lockdep_hardirqs_on+0x94/0x140
[ 1643.288976][T28868]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1643.294405][T28868]  ? _local_bh_enable+0xa0/0xa0
[ 1643.299308][T28868]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1643.304467][T28868]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1643.309622][T28868]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1643.314876][T28868]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1643.320040][T28868]  ? ref_tracker_free+0x68c/0x840
[ 1643.325128][T28868]  ? __copy_skb_header+0x3ba/0x4f0
[ 1643.330286][T28868]  ? refcount_inc+0x70/0x70
[ 1643.334854][T28868]  ? memcpy+0x3c/0x60
[ 1643.338882][T28868]  ? __copy_skb_header+0x3ba/0x4f0
[ 1643.344053][T28868]  ? __skb_clone+0x480/0x790
[ 1643.348707][T28868]  netlink_rcv_skb+0x1fb/0x450
[ 1643.353538][T28868]  ? rtnetlink_bind+0x80/0x80
[ 1643.358274][T28868]  ? netlink_ack+0x1170/0x1170
[ 1643.363102][T28868]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1643.368352][T28868]  netlink_unicast+0x74d/0x8d0
[ 1643.373177][T28868]  netlink_sendmsg+0x8ad/0xbd0
[ 1643.378003][T28868]  ? netlink_getsockopt+0x550/0x550
[ 1643.383268][T28868]  ? aa_sock_msg_perm+0x94/0x150
[ 1643.388258][T28868]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1643.393583][T28868]  ? security_socket_sendmsg+0x7c/0xa0
[ 1643.399093][T28868]  ? netlink_getsockopt+0x550/0x550
[ 1643.404348][T28868]  ____sys_sendmsg+0x5be/0x970
[ 1643.409172][T28868]  ? __sys_sendmsg_sock+0x30/0x30
[ 1643.414252][T28868]  ? __import_iovec+0x315/0x500
[ 1643.419153][T28868]  ? import_iovec+0x6f/0xa0
[ 1643.423741][T28868]  ___sys_sendmsg+0x2a2/0x360
[ 1643.428476][T28868]  ? __sys_sendmsg+0x290/0x290
[ 1643.433315][T28868]  ? __lock_acquire+0x7d10/0x7d10
[ 1643.438416][T28868]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1643.443318][T28868]  ? __x64_sys_sendmsg+0x80/0x80
[ 1643.448333][T28868]  ? lockdep_hardirqs_on+0x94/0x140
[ 1643.453576][T28868]  do_syscall_64+0x4c/0xa0
[ 1643.458055][T28868]  ? clear_bhb_loop+0x60/0xb0
[ 1643.462786][T28868]  ? clear_bhb_loop+0x60/0xb0
[ 1643.467505][T28868]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1643.473438][T28868] RIP: 0033:0x7feb33b9ce59
[ 1643.477892][T28868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1643.497547][T28868] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1643.506030][T28868] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1643.514042][T28868] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000003
[ 1643.522072][T28868] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1643.530084][T28868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1643.538091][T28868] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1643.546115][T28868]  </TASK>
[ 1643.552741][ T4332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1644.108984][T28899] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8253'.
[ 1644.149499][T28897] netlink: 'syz.4.8254': attribute type 3 has an invalid length.
[ 1644.170809][T28897] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8254'.
[ 1644.228194][T28903] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8255'.
[ 1644.252341][T28903] netlink: 'syz.0.8255': attribute type 2 has an invalid length.
[ 1644.269224][T28903] netlink: 'syz.0.8255': attribute type 8 has an invalid length.
[ 1644.296934][T28903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8255'.
[ 1645.039146][T28967] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8268'.
[ 1646.059060][T29000] netlink: 'syz.2.8266': attribute type 3 has an invalid length.
[ 1646.109964][T29000] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8266'.
[ 1646.309567][T29013] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8273'.
[ 1646.337116][T29013] netlink: 'syz.4.8273': attribute type 2 has an invalid length.
[ 1646.375517][T29017] tipc: Started in network mode
[ 1646.386747][T29017] tipc: Node identity 9215a268, cluster identity 4711
[ 1646.402146][T29017] tipc: Node number set to 2450891368
[ 1647.132553][T29039] device wlan1 left promiscuous mode
[ 1648.058667][T29079] __nla_validate_parse: 5 callbacks suppressed
[ 1648.058707][T29079] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8302'.
[ 1648.066881][T28971] wlan1: Trigger new scan to find an IBSS to join
[ 1648.127853][T29079] validate_nla: 6 callbacks suppressed
[ 1648.127916][T29079] netlink: 'syz.4.8302': attribute type 2 has an invalid length.
[ 1648.182699][T29079] netlink: 'syz.4.8302': attribute type 8 has an invalid length.
[ 1648.201867][T29079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8302'.
[ 1648.265657][T29081] device wlan1 left promiscuous mode
[ 1648.347077][T29085] netlink: 'syz.1.8303': attribute type 3 has an invalid length.
[ 1648.367452][T29085] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8303'.
[ 1648.382656][T29090] FAULT_INJECTION: forcing a failure.
[ 1648.382656][T29090] name failslab, interval 1, probability 0, space 0, times 0
[ 1648.410012][T29090] CPU: 0 PID: 29090 Comm: syz.4.8306 Not tainted syzkaller #0
[ 1648.417547][T29090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1648.427656][T29090] Call Trace:
[ 1648.430984][T29090]  <TASK>
[ 1648.433958][T29090]  dump_stack_lvl+0x188/0x24e
[ 1648.438691][T29090]  ? show_regs_print_info+0x12/0x12
[ 1648.443927][T29090]  ? load_image+0x400/0x400
[ 1648.448504][T29090]  ? __might_sleep+0xd0/0xd0
[ 1648.453128][T29090]  ? __lock_acquire+0x7d10/0x7d10
[ 1648.458180][T29090]  ? aa_file_perm+0x3ea/0xf00
[ 1648.462908][T29090]  should_fail_ex+0x399/0x4d0
[ 1648.467620][T29090]  should_failslab+0x5/0x20
[ 1648.472148][T29090]  slab_pre_alloc_hook+0x59/0x310
[ 1648.477214][T29090]  ? kernfs_fop_write_iter+0x155/0x520
[ 1648.482719][T29090]  __kmem_cache_alloc_node+0x4f/0x260
[ 1648.488141][T29090]  ? kernfs_fop_write_iter+0x155/0x520
[ 1648.493630][T29090]  __kmalloc+0xa0/0x240
[ 1648.497832][T29090]  kernfs_fop_write_iter+0x155/0x520
[ 1648.503158][T29090]  vfs_write+0x4b1/0xa30
[ 1648.507463][T29090]  ? file_end_write+0x250/0x250
[ 1648.512360][T29090]  ? __fget_files+0x43d/0x4b0
[ 1648.517087][T29090]  ? __fdget_pos+0x2ae/0x360
[ 1648.521715][T29090]  ? ksys_write+0x71/0x250
[ 1648.526186][T29090]  ksys_write+0x14c/0x250
[ 1648.530563][T29090]  ? __ia32_sys_read+0x80/0x80
[ 1648.535371][T29090]  ? lockdep_hardirqs_on+0x94/0x140
[ 1648.540607][T29090]  do_syscall_64+0x4c/0xa0
[ 1648.545052][T29090]  ? clear_bhb_loop+0x60/0xb0
[ 1648.549776][T29090]  ? clear_bhb_loop+0x60/0xb0
[ 1648.554500][T29090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1648.560419][T29090] RIP: 0033:0x7f998519ce59
[ 1648.564867][T29090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1648.584502][T29090] RSP: 002b:00007f99860df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1648.592938][T29090] RAX: ffffffffffffffda RBX: 00007f9985415fa0 RCX: 00007f998519ce59
[ 1648.600930][T29090] RDX: 0000000000000006 RSI: 00002000000007c0 RDI: 0000000000000006
[ 1648.608927][T29090] RBP: 00007f99860df090 R08: 0000000000000000 R09: 0000000000000000
[ 1648.616921][T29090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1648.624917][T29090] R13: 00007f9985416038 R14: 00007f9985415fa0 R15: 00007ffdee74d568
[ 1648.632944][T29090]  </TASK>
[ 1649.715535][T29126] FAULT_INJECTION: forcing a failure.
[ 1649.715535][T29126] name failslab, interval 1, probability 0, space 0, times 0
[ 1649.758060][T29126] CPU: 1 PID: 29126 Comm: syz.0.8314 Not tainted syzkaller #0
[ 1649.765595][T29126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1649.775694][T29126] Call Trace:
[ 1649.779013][T29126]  <TASK>
[ 1649.781985][T29126]  dump_stack_lvl+0x188/0x24e
[ 1649.786723][T29126]  ? show_regs_print_info+0x12/0x12
[ 1649.791978][T29126]  ? load_image+0x400/0x400
[ 1649.796531][T29126]  ? __might_sleep+0xd0/0xd0
[ 1649.801165][T29126]  ? __lock_acquire+0x7d10/0x7d10
[ 1649.806243][T29126]  should_fail_ex+0x399/0x4d0
[ 1649.810964][T29126]  should_failslab+0x5/0x20
[ 1649.815501][T29126]  slab_pre_alloc_hook+0x59/0x310
[ 1649.820566][T29126]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1649.826345][T29126]  __kmem_cache_alloc_node+0x4f/0x260
[ 1649.831780][T29126]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1649.837556][T29126]  __kmalloc+0xa0/0x240
[ 1649.841769][T29126]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1649.847381][T29126]  ? tomoyo_path_number_perm+0x205/0x650
[ 1649.853059][T29126]  tomoyo_path_number_perm+0x22f/0x650
[ 1649.858567][T29126]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1649.864073][T29126]  ? ksys_write+0x1c0/0x250
[ 1649.868640][T29126]  ? common_file_perm+0x171/0x1c0
[ 1649.873736][T29126]  ? __fget_files+0x28/0x4b0
[ 1649.878371][T29126]  ? __fget_files+0x28/0x4b0
[ 1649.883016][T29126]  security_file_ioctl+0x6c/0xa0
[ 1649.888002][T29126]  __se_sys_ioctl+0x48/0x170
[ 1649.892642][T29126]  do_syscall_64+0x4c/0xa0
[ 1649.897109][T29126]  ? clear_bhb_loop+0x60/0xb0
[ 1649.901825][T29126]  ? clear_bhb_loop+0x60/0xb0
[ 1649.906560][T29126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1649.912503][T29126] RIP: 0033:0x7f8e0579ce59
[ 1649.916957][T29126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1649.936605][T29126] RSP: 002b:00007f8e06625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1649.945098][T29126] RAX: ffffffffffffffda RBX: 00007f8e05a16180 RCX: 00007f8e0579ce59
[ 1649.953116][T29126] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000004
[ 1649.961214][T29126] RBP: 00007f8e06625090 R08: 0000000000000000 R09: 0000000000000000
[ 1649.969222][T29126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1649.977232][T29126] R13: 00007f8e05a16218 R14: 00007f8e05a16180 R15: 00007fffac387078
[ 1649.985259][T29126]  </TASK>
[ 1650.056459][T29126] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1652.396868][T29142] device wlan1 left promiscuous mode
[ 1652.459983][T29143] netlink: 'syz.2.8321': attribute type 3 has an invalid length.
[ 1652.467849][T29143] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8321'.
[ 1652.592337][T12604] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[ 1652.609168][T29150] netlink: 'syz.3.8324': attribute type 10 has an invalid length.
[ 1652.651139][T29150] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8324'.
[ 1652.925972][T29147] device syzkaller0 entered promiscuous mode
[ 1656.437686][T29182] netlink: 'syz.4.8335': attribute type 3 has an invalid length.
[ 1656.455949][T29182] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8335'.
[ 1658.211651][T29231] device wlan1 entered promiscuous mode
[ 1658.275930][T29236] device wlan1 left promiscuous mode
[ 1658.355171][T29231] netlink: 'syz.4.8355': attribute type 3 has an invalid length.
[ 1658.369400][T29231] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8355'.
[ 1658.409879][T29242] netlink: 'syz.0.8357': attribute type 3 has an invalid length.
[ 1658.441259][T29242] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8357'.
[ 1658.618556][T29245] device wlan1 entered promiscuous mode
[ 1658.690541][T29245] netlink: 'syz.1.8360': attribute type 3 has an invalid length.
[ 1658.709158][T29245] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8360'.
[ 1659.625632][T29268] netlink: 'syz.0.8369': attribute type 3 has an invalid length.
[ 1659.671558][T29268] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8369'.
[ 1659.865004][T29275] device wlan1 entered promiscuous mode
[ 1659.939689][T29275] netlink: 'syz.2.8373': attribute type 3 has an invalid length.
[ 1659.956668][T29275] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8373'.
[ 1660.466163][T29285] device wlan1 left promiscuous mode
[ 1660.572082][T29289] netlink: 'syz.4.8377': attribute type 3 has an invalid length.
[ 1660.619341][T29289] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8377'.
[ 1660.683045][T29291] netlink: 'syz.3.8374': attribute type 3 has an invalid length.
[ 1660.731426][T29291] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8374'.
[ 1660.750077][T29300] FAULT_INJECTION: forcing a failure.
[ 1660.750077][T29300] name failslab, interval 1, probability 0, space 0, times 0
[ 1660.785446][T29300] CPU: 0 PID: 29300 Comm: syz.0.8380 Not tainted syzkaller #0
[ 1660.792969][T29300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1660.803060][T29300] Call Trace:
[ 1660.806371][T29300]  <TASK>
[ 1660.809344][T29300]  dump_stack_lvl+0x188/0x24e
[ 1660.814087][T29300]  ? show_regs_print_info+0x12/0x12
[ 1660.819342][T29300]  ? load_image+0x400/0x400
[ 1660.823895][T29300]  ? __might_sleep+0xd0/0xd0
[ 1660.828525][T29300]  ? __lock_acquire+0x7d10/0x7d10
[ 1660.833589][T29300]  should_fail_ex+0x399/0x4d0
[ 1660.838296][T29300]  should_failslab+0x5/0x20
[ 1660.842826][T29300]  slab_pre_alloc_hook+0x59/0x310
[ 1660.847877][T29300]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1660.853014][T29300]  ? __d_alloc+0x31/0x700
[ 1660.857374][T29300]  __d_alloc+0x31/0x700
[ 1660.861565][T29300]  ? __ns_get_path+0x335/0x650
[ 1660.866422][T29300]  __ns_get_path+0x3e8/0x650
[ 1660.871078][T29300]  ns_get_path+0x50/0x90
[ 1660.875350][T29300]  proc_ns_get_link+0xf4/0x200
[ 1660.880156][T29300]  ? proc_ns_instantiate+0xf0/0xf0
[ 1660.885296][T29300]  ? pick_link+0x10f/0xe20
[ 1660.889773][T29300]  ? bpf_lsm_inode_follow_link+0x5/0x10
[ 1660.895358][T29300]  ? security_inode_follow_link+0xb3/0x100
[ 1660.901193][T29300]  ? proc_ns_instantiate+0xf0/0xf0
[ 1660.906341][T29300]  pick_link+0x6b3/0xe20
[ 1660.910626][T29300]  step_into+0xc49/0xf20
[ 1660.914917][T29300]  ? rcu_read_lock_any_held+0xb0/0x130
[ 1660.920413][T29300]  ? rcu_read_lock_bh_held+0xf0/0xf0
[ 1660.925746][T29300]  ? set_root+0x3a0/0x3a0
[ 1660.930120][T29300]  ? d_splice_alias+0x110/0x320
[ 1660.935036][T29300]  path_openat+0x15f3/0x2ee0
[ 1660.939692][T29300]  ? do_filp_open+0x430/0x430
[ 1660.944421][T29300]  do_filp_open+0x1f1/0x430
[ 1660.948958][T29300]  ? vfs_tmpfile+0x480/0x480
[ 1660.953598][T29300]  ? _raw_spin_unlock+0x24/0x40
[ 1660.958481][T29300]  ? alloc_fd+0x58f/0x630
[ 1660.962850][T29300]  do_sys_openat2+0x150/0x4b0
[ 1660.967557][T29300]  ? atomic_notifier_call_chain+0x282/0x2b0
[ 1660.973485][T29300]  ? perf_trace_preemptirq_template+0xa8/0x320
[ 1660.979676][T29300]  ? do_sys_open+0xe0/0xe0
[ 1660.984131][T29300]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1660.990148][T29300]  ? lock_chain_count+0x20/0x20
[ 1660.995041][T29300]  __x64_sys_openat+0x135/0x160
[ 1660.999938][T29300]  do_syscall_64+0x4c/0xa0
[ 1661.004385][T29300]  ? clear_bhb_loop+0x60/0xb0
[ 1661.009089][T29300]  ? clear_bhb_loop+0x60/0xb0
[ 1661.013819][T29300]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1661.019747][T29300] RIP: 0033:0x7f8e0575d68e
[ 1661.024204][T29300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1661.043847][T29300] RSP: 002b:00007f8e06666ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1661.052305][T29300] RAX: ffffffffffffffda RBX: 00007f8e066676c0 RCX: 00007f8e0575d68e
[ 1661.060305][T29300] RDX: 0000000000000002 RSI: 00007f8e06666f90 RDI: ffffffffffffff9c
[ 1661.068372][T29300] RBP: 00007f8e06667090 R08: 0000000000000000 R09: 0000000000000000
[ 1661.076372][T29300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1661.084371][T29300] R13: 00007f8e05a16038 R14: 00007f8e05a15fa0 R15: 00007fffac387078
[ 1661.092395][T29300]  </TASK>
[ 1661.101103][T28961] wlan1: Trigger new scan to find an IBSS to join
[ 1662.060926][T28968] wlan1: Trigger new scan to find an IBSS to join
[ 1662.648559][T29324] netlink: 'syz.4.8391': attribute type 11 has an invalid length.
[ 1662.750267][T29324] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8391'.
[ 1662.876543][T29323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.979505][T29328] device wlan1 entered promiscuous mode
[ 1663.155695][T29340] netlink: 'syz.3.8390': attribute type 3 has an invalid length.
[ 1663.299522][T29340] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8390'.
[ 1665.020022][T28968] wlan1: Trigger new scan to find an IBSS to join
[ 1665.855807][T29371] netlink: 'syz.2.8410': attribute type 3 has an invalid length.
[ 1665.883387][T29371] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8410'.
[ 1666.042885][T29377] device wlan1 entered promiscuous mode
[ 1666.129557][T29377] netlink: 'syz.0.8411': attribute type 3 has an invalid length.
[ 1666.171588][T29377] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8411'.
[ 1667.032662][T28961] wlan1: Creating new IBSS network, BSSID 3e:c0:26:eb:61:1d
[ 1667.040350][T28947] wlan1: Trigger new scan to find an IBSS to join
[ 1667.070221][T28961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1667.110757][T28952] wlan1: Trigger new scan to find an IBSS to join
[ 1667.864968][T29395] netlink: 'syz.0.8417': attribute type 3 has an invalid length.
[ 1667.890804][T29395] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8417'.
[ 1668.096764][T28968] wlan1: Creating new IBSS network, BSSID ce:c1:2f:d0:c7:c3
[ 1668.198791][T28968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1668.393172][T29415] netlink: 'syz.0.8424': attribute type 3 has an invalid length.
[ 1668.408991][T29415] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8424'.
[ 1668.448535][T29417] netlink: 'syz.2.8426': attribute type 3 has an invalid length.
[ 1668.457736][T29417] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8426'.
[ 1669.555303][T29426] netlink: 'syz.1.8427': attribute type 3 has an invalid length.
[ 1669.589878][T29426] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8427'.
[ 1670.061515][T28947] wlan1: Trigger new scan to find an IBSS to join
[ 1670.073513][T28968] wlan1: Trigger new scan to find an IBSS to join
[ 1670.336475][T29442] device bridge_slave_1 left promiscuous mode
[ 1670.389561][T29442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1670.612799][T29442] device bridge_slave_0 left promiscuous mode
[ 1670.627756][T29442] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1670.722329][T29450] netlink: 'syz.2.8438': attribute type 3 has an invalid length.
[ 1670.749963][T29450] netlink: 'syz.2.8438': attribute type 1 has an invalid length.
[ 1670.757929][T29450] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.8438'.
[ 1670.895723][T29442] team0: Port device bridge0 removed
[ 1671.117214][T28947] wlan1: Creating new IBSS network, BSSID 66:9a:3b:8c:62:9b
[ 1671.127700][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1671.359687][T29461] FAULT_INJECTION: forcing a failure.
[ 1671.359687][T29461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1671.460361][T29456] netlink: 'syz.0.8441': attribute type 3 has an invalid length.
[ 1671.491882][T29456] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8441'.
[ 1671.505156][T29461] CPU: 1 PID: 29461 Comm: syz.1.8442 Not tainted syzkaller #0
[ 1671.512769][T29461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1671.522855][T29461] Call Trace:
[ 1671.526175][T29461]  <TASK>
[ 1671.529133][T29461]  dump_stack_lvl+0x188/0x24e
[ 1671.533873][T29461]  ? show_regs_print_info+0x12/0x12
[ 1671.539131][T29461]  ? load_image+0x400/0x400
[ 1671.543689][T29461]  ? __lock_acquire+0x7d10/0x7d10
[ 1671.548760][T29461]  should_fail_ex+0x399/0x4d0
[ 1671.553480][T29461]  _copy_from_user+0x2c/0x170
[ 1671.558189][T29461]  iovec_from_user+0x143/0x360
[ 1671.562990][T29461]  __import_iovec+0x6d/0x500
[ 1671.567614][T29461]  ? __might_fault+0xc2/0x120
[ 1671.572338][T29461]  import_iovec+0x6f/0xa0
[ 1671.576714][T29461]  ___sys_sendmsg+0x252/0x360
[ 1671.581475][T29461]  ? __sys_sendmsg+0x290/0x290
[ 1671.586322][T29461]  ? __lock_acquire+0x7d10/0x7d10
[ 1671.591413][T29461]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1671.596302][T29461]  ? __x64_sys_sendmsg+0x80/0x80
[ 1671.601290][T29461]  ? lockdep_hardirqs_on+0x94/0x140
[ 1671.606530][T29461]  do_syscall_64+0x4c/0xa0
[ 1671.611012][T29461]  ? clear_bhb_loop+0x60/0xb0
[ 1671.615726][T29461]  ? clear_bhb_loop+0x60/0xb0
[ 1671.620447][T29461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1671.626384][T29461] RIP: 0033:0x7feb33b9ce59
[ 1671.630835][T29461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1671.650474][T29461] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1671.658926][T29461] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1671.666944][T29461] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000003
[ 1671.674975][T29461] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1671.682974][T29461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1671.690976][T29461] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1671.698995][T29461]  </TASK>
[ 1672.188243][T29471] netlink: 'syz.2.8446': attribute type 2 has an invalid length.
[ 1672.216709][T29471] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8446'.
[ 1672.824370][T29485] netlink: 'syz.2.8449': attribute type 3 has an invalid length.
[ 1672.835856][T29485] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8449'.
[ 1673.100977][T28968] wlan1: Creating new IBSS network, BSSID 1a:ad:5a:2a:10:31
[ 1673.117891][T28968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1674.145161][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.151688][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1675.286878][T29538] syzkaller1: tun_chr_ioctl cmd 1074025678
[ 1675.317484][T29538] syzkaller1: group set to 778
[ 1679.154207][T29595] netlink: 'syz.0.8491': attribute type 3 has an invalid length.
[ 1679.224699][T29595] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8491'.
[ 1679.617314][T29605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8496'.
[ 1679.962347][T29615] netlink: 'syz.2.8502': attribute type 11 has an invalid length.
[ 1679.996370][T29615] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8502'.
[ 1680.778106][T29613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1680.809397][T29625] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1680.890604][T29625] device bridge_slave_0 left promiscuous mode
[ 1680.897583][T29625] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1681.177213][T29625] team0: Port device bridge0 removed
[ 1681.357724][T29637] netlink: 'syz.2.8507': attribute type 3 has an invalid length.
[ 1681.377742][T29637] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8507'.
[ 1683.283587][T29673] FAULT_INJECTION: forcing a failure.
[ 1683.283587][T29673] name failslab, interval 1, probability 0, space 0, times 0
[ 1683.325000][T29673] CPU: 0 PID: 29673 Comm: syz.1.8523 Not tainted syzkaller #0
[ 1683.332544][T29673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1683.342657][T29673] Call Trace:
[ 1683.345961][T29673]  <TASK>
[ 1683.348923][T29673]  dump_stack_lvl+0x188/0x24e
[ 1683.353662][T29673]  ? show_regs_print_info+0x12/0x12
[ 1683.358898][T29673]  ? load_image+0x400/0x400
[ 1683.363447][T29673]  ? __might_sleep+0xd0/0xd0
[ 1683.368073][T29673]  ? __lock_acquire+0x7d10/0x7d10
[ 1683.373202][T29673]  should_fail_ex+0x399/0x4d0
[ 1683.377921][T29673]  should_failslab+0x5/0x20
[ 1683.382486][T29673]  slab_pre_alloc_hook+0x59/0x310
[ 1683.387560][T29673]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1683.393415][T29673]  __kmem_cache_alloc_node+0x4f/0x260
[ 1683.398835][T29673]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1683.404684][T29673]  kmalloc_trace+0x26/0xe0
[ 1683.409152][T29673]  apparmor_sk_alloc_security+0x74/0x100
[ 1683.414823][T29673]  security_sk_alloc+0x6a/0xa0
[ 1683.419612][T29673]  sk_prot_alloc+0x101/0x210
[ 1683.424234][T29673]  ? sk_alloc+0x20/0x340
[ 1683.428506][T29673]  sk_alloc+0x36/0x340
[ 1683.432598][T29673]  ? bpf_ctx_init+0x163/0x1a0
[ 1683.437293][T29673]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[ 1683.442890][T29673]  bpf_prog_test_run_skb+0x35e/0x12a0
[ 1683.448302][T29673]  ? __fget_files+0x28/0x4b0
[ 1683.452927][T29673]  ? __fget_files+0x43d/0x4b0
[ 1683.457660][T29673]  ? cpu_online+0xa0/0xa0
[ 1683.462013][T29673]  bpf_prog_test_run+0x31e/0x390
[ 1683.466980][T29673]  __sys_bpf+0x62b/0x780
[ 1683.471253][T29673]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1683.476659][T29673]  ? lock_chain_count+0x20/0x20
[ 1683.481542][T29673]  __x64_sys_bpf+0x78/0x90
[ 1683.485993][T29673]  do_syscall_64+0x4c/0xa0
[ 1683.490465][T29673]  ? clear_bhb_loop+0x60/0xb0
[ 1683.495173][T29673]  ? clear_bhb_loop+0x60/0xb0
[ 1683.499883][T29673]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1683.505812][T29673] RIP: 0033:0x7feb33b9ce59
[ 1683.510248][T29673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1683.529885][T29673] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1683.538331][T29673] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1683.546328][T29673] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1683.554320][T29673] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1683.562324][T29673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1683.570319][T29673] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1683.578321][T29673]  </TASK>
[ 1685.221031][T29698] netlink: 'syz.1.8534': attribute type 3 has an invalid length.
[ 1685.249722][T29698] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8534'.
[ 1685.326750][T29702] netlink: 'syz.0.8535': attribute type 3 has an invalid length.
[ 1685.349932][T29702] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8535'.
[ 1687.113561][T29745] netlink: 'syz.4.8551': attribute type 3 has an invalid length.
[ 1687.132240][T29745] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8551'.
[ 1687.548430][T29759] netlink: 'syz.3.8557': attribute type 13 has an invalid length.
[ 1687.610475][T29759] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8557'.
[ 1688.573839][T29759] erspan0: refused to change device tx_queue_len
[ 1688.766452][T29783] FAULT_INJECTION: forcing a failure.
[ 1688.766452][T29783] name failslab, interval 1, probability 0, space 0, times 0
[ 1688.787964][T29783] CPU: 1 PID: 29783 Comm: syz.3.8566 Not tainted syzkaller #0
[ 1688.795491][T29783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1688.805581][T29783] Call Trace:
[ 1688.808881][T29783]  <TASK>
[ 1688.811832][T29783]  dump_stack_lvl+0x188/0x24e
[ 1688.816547][T29783]  ? show_regs_print_info+0x12/0x12
[ 1688.821772][T29783]  ? load_image+0x400/0x400
[ 1688.826304][T29783]  should_fail_ex+0x399/0x4d0
[ 1688.831001][T29783]  should_failslab+0x5/0x20
[ 1688.835521][T29783]  slab_pre_alloc_hook+0x59/0x310
[ 1688.840563][T29783]  ? __lock_acquire+0x7d10/0x7d10
[ 1688.845616][T29783]  ? find_exception+0x171/0xa30
[ 1688.850506][T29783]  kmem_cache_alloc+0x56/0x2f0
[ 1688.855281][T29783]  ? dst_alloc+0x101/0x160
[ 1688.859717][T29783]  dst_alloc+0x101/0x160
[ 1688.863985][T29783]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1688.870067][T29783]  ? ip_route_output_key_hash_rcu+0x12e1/0x23f0
[ 1688.876328][T29783]  ? ip_route_output_key_hash+0x139/0x330
[ 1688.882072][T29783]  ip_route_output_key_hash+0x1ef/0x330
[ 1688.887634][T29783]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1688.893284][T29783]  ? ip_route_input_rcu+0x3160/0x3160
[ 1688.898675][T29783]  ? rcu_is_watching+0x11/0xa0
[ 1688.903471][T29783]  ? read_lock_is_recursive+0x10/0x10
[ 1688.908889][T29783]  ip_route_output_flow+0x26/0x150
[ 1688.914019][T29783]  ? security_sk_classify_flow+0x77/0x90
[ 1688.919679][T29783]  l2tp_ip_sendmsg+0xceb/0x1490
[ 1688.924555][T29783]  ? l2tp_ip_sendmsg+0x3b2/0x1490
[ 1688.929607][T29783]  ? inet_send_prepare+0x260/0x260
[ 1688.934742][T29783]  ____sys_sendmsg+0x5be/0x970
[ 1688.939552][T29783]  ? __sys_sendmsg_sock+0x30/0x30
[ 1688.944603][T29783]  ? __import_iovec+0x315/0x500
[ 1688.949481][T29783]  ? import_iovec+0x6f/0xa0
[ 1688.954013][T29783]  ___sys_sendmsg+0x2a2/0x360
[ 1688.958731][T29783]  ? __sys_sendmsg+0x290/0x290
[ 1688.963548][T29783]  ? __lock_acquire+0x7d10/0x7d10
[ 1688.968627][T29783]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1688.973511][T29783]  ? __x64_sys_sendmsg+0x80/0x80
[ 1688.978510][T29783]  ? lockdep_hardirqs_on+0x94/0x140
[ 1688.983733][T29783]  do_syscall_64+0x4c/0xa0
[ 1688.988176][T29783]  ? clear_bhb_loop+0x60/0xb0
[ 1688.992880][T29783]  ? clear_bhb_loop+0x60/0xb0
[ 1688.997590][T29783]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1689.003513][T29783] RIP: 0033:0x7ff90a79ce59
[ 1689.007956][T29783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1689.027592][T29783] RSP: 002b:00007ff90b663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1689.036030][T29783] RAX: ffffffffffffffda RBX: 00007ff90aa15fa0 RCX: 00007ff90a79ce59
[ 1689.044052][T29783] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[ 1689.052054][T29783] RBP: 00007ff90b663090 R08: 0000000000000000 R09: 0000000000000000
[ 1689.060041][T29783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1689.068026][T29783] R13: 00007ff90aa16038 R14: 00007ff90aa15fa0 R15: 00007ffebcd8c6b8
[ 1689.076028][T29783]  </TASK>
[ 1689.332158][T29793] netlink: 'syz.0.8578': attribute type 3 has an invalid length.
[ 1689.340431][T29793] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8578'.
[ 1689.378515][T29787] netlink: 'syz.2.8568': attribute type 3 has an invalid length.
[ 1689.438417][T29787] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8568'.
[ 1689.754153][T29805] tipc: Started in network mode
[ 1689.789548][T29805] tipc: Node identity 9215a268, cluster identity 4711
[ 1689.822212][T29805] tipc: Node number set to 2450891368
[ 1689.858023][T29807] tipc: Started in network mode
[ 1689.874656][T29807] tipc: Node identity 9215a268, cluster identity 4711
[ 1689.903278][T29807] tipc: Node number set to 2450891368
[ 1690.807068][T29817] netlink: 'syz.4.8581': attribute type 3 has an invalid length.
[ 1690.827474][T29817] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8581'.
[ 1691.083075][T29820] netlink: 'syz.1.8584': attribute type 3 has an invalid length.
[ 1691.095368][T29820] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8584'.
[ 1691.194584][T29828] FAULT_INJECTION: forcing a failure.
[ 1691.194584][T29828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1691.240845][T29828] CPU: 1 PID: 29828 Comm: syz.0.8586 Not tainted syzkaller #0
[ 1691.248373][T29828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1691.258468][T29828] Call Trace:
[ 1691.261788][T29828]  <TASK>
[ 1691.264787][T29828]  dump_stack_lvl+0x188/0x24e
[ 1691.269529][T29828]  ? show_regs_print_info+0x12/0x12
[ 1691.274782][T29828]  ? load_image+0x400/0x400
[ 1691.279335][T29828]  ? __lock_acquire+0x7d10/0x7d10
[ 1691.284408][T29828]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1691.290706][T29828]  should_fail_ex+0x399/0x4d0
[ 1691.295426][T29828]  _copy_from_user+0x2c/0x170
[ 1691.300146][T29828]  __sys_bpf+0x2ea/0x780
[ 1691.304440][T29828]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1691.309862][T29828]  ? lock_chain_count+0x20/0x20
[ 1691.314740][T29828]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1691.320754][T29828]  __x64_sys_bpf+0x78/0x90
[ 1691.325205][T29828]  do_syscall_64+0x4c/0xa0
[ 1691.329752][T29828]  ? clear_bhb_loop+0x60/0xb0
[ 1691.334476][T29828]  ? clear_bhb_loop+0x60/0xb0
[ 1691.339182][T29828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1691.345099][T29828] RIP: 0033:0x7f8e0579ce59
[ 1691.349536][T29828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1691.369163][T29828] RSP: 002b:00007f8e06667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1691.377612][T29828] RAX: ffffffffffffffda RBX: 00007f8e05a15fa0 RCX: 00007f8e0579ce59
[ 1691.385600][T29828] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1691.393583][T29828] RBP: 00007f8e06667090 R08: 0000000000000000 R09: 0000000000000000
[ 1691.401575][T29828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1691.409566][T29828] R13: 00007f8e05a16038 R14: 00007f8e05a15fa0 R15: 00007fffac387078
[ 1691.417576][T29828]  </TASK>
[ 1692.435135][T29856] netlink: 'syz.0.8596': attribute type 3 has an invalid length.
[ 1692.499298][T29856] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8596'.
[ 1692.616446][T29860] netlink: 'syz.4.8599': attribute type 3 has an invalid length.
[ 1692.655502][T29860] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8599'.
[ 1693.164823][T29880] tipc: Started in network mode
[ 1693.175913][T29880] tipc: Node identity 9215a268, cluster identity 4711
[ 1693.191580][T29880] tipc: Node number set to 2450891368
[ 1693.427310][T29890] netlink: 'syz.4.8612': attribute type 11 has an invalid length.
[ 1693.455860][T29890] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8612'.
[ 1693.513568][T29894] netlink: 'syz.3.8614': attribute type 3 has an invalid length.
[ 1693.532532][T29894] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8614'.
[ 1693.573031][T29898] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8613'.
[ 1693.617434][T29898] netlink: 'syz.2.8613': attribute type 2 has an invalid length.
[ 1693.645159][T29898] netlink: 'syz.2.8613': attribute type 8 has an invalid length.
[ 1693.665334][T29898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8613'.
[ 1693.916453][T29905] netlink: 'syz.3.8616': attribute type 3 has an invalid length.
[ 1693.928803][T29905] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8616'.
[ 1694.235960][T29889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1696.566600][T29925] netlink: 'syz.3.8635': attribute type 11 has an invalid length.
[ 1696.574921][T29923] netlink: 'syz.2.8624': attribute type 39 has an invalid length.
[ 1696.586166][T29925] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8635'.
[ 1697.413832][T29924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1697.630353][T29928] tipc: Started in network mode
[ 1697.649489][T29928] tipc: Node identity 9215a268, cluster identity 4711
[ 1697.667073][T29928] tipc: Node number set to 2450891368
[ 1697.960516][T29942] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8628'.
[ 1698.039245][T29942] netlink: 'syz.1.8628': attribute type 2 has an invalid length.
[ 1698.087948][T29942] netlink: 'syz.1.8628': attribute type 8 has an invalid length.
[ 1698.155076][T29942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8628'.
[ 1698.916851][T29953] netlink: 'syz.2.8634': attribute type 3 has an invalid length.
[ 1698.945864][T29953] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8634'.
[ 1699.005960][T29961] FAULT_INJECTION: forcing a failure.
[ 1699.005960][T29961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1699.068234][T29961] CPU: 0 PID: 29961 Comm: syz.4.8636 Not tainted syzkaller #0
[ 1699.075773][T29961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1699.085863][T29961] Call Trace:
[ 1699.089202][T29961]  <TASK>
[ 1699.092164][T29961]  dump_stack_lvl+0x188/0x24e
[ 1699.096901][T29961]  ? show_regs_print_info+0x12/0x12
[ 1699.102157][T29961]  ? load_image+0x400/0x400
[ 1699.106741][T29961]  ? __lock_acquire+0x7d10/0x7d10
[ 1699.111825][T29961]  ? __virt_addr_valid+0x188/0x540
[ 1699.116990][T29961]  should_fail_ex+0x399/0x4d0
[ 1699.121711][T29961]  _copy_from_user+0x2c/0x170
[ 1699.126437][T29961]  bpf_test_init+0xde/0x140
[ 1699.130989][T29961]  bpf_prog_test_run_xdp+0x484/0xf10
[ 1699.136348][T29961]  ? dev_put+0x80/0x80
[ 1699.140476][T29961]  ? dev_put+0x80/0x80
[ 1699.144587][T29961]  bpf_prog_test_run+0x31e/0x390
[ 1699.149575][T29961]  __sys_bpf+0x62b/0x780
[ 1699.153871][T29961]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1699.159317][T29961]  __x64_sys_bpf+0x78/0x90
[ 1699.163798][T29961]  do_syscall_64+0x4c/0xa0
[ 1699.168258][T29961]  ? clear_bhb_loop+0x60/0xb0
[ 1699.172974][T29961]  ? clear_bhb_loop+0x60/0xb0
[ 1699.177691][T29961]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1699.183624][T29961] RIP: 0033:0x7f998519ce59
[ 1699.188080][T29961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1699.207732][T29961] RSP: 002b:00007f99860df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1699.216186][T29961] RAX: ffffffffffffffda RBX: 00007f9985415fa0 RCX: 00007f998519ce59
[ 1699.224212][T29961] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1699.232226][T29961] RBP: 00007f99860df090 R08: 0000000000000000 R09: 0000000000000000
[ 1699.240231][T29961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1699.248240][T29961] R13: 00007f9985416038 R14: 00007f9985415fa0 R15: 00007ffdee74d568
[ 1699.256260][T29961]  </TASK>
[ 1699.607033][T29971] netlink: 'syz.2.8641': attribute type 11 has an invalid length.
[ 1699.629026][T29971] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8641'.
[ 1700.209884][T29976] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8643'.
[ 1700.245467][T29976] netlink: 'syz.3.8643': attribute type 2 has an invalid length.
[ 1700.270047][T29976] netlink: 'syz.3.8643': attribute type 8 has an invalid length.
[ 1700.279681][T29976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8643'.
[ 1700.422160][T29970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.137924][T29985] netlink: 'syz.0.8647': attribute type 21 has an invalid length.
[ 1701.145985][T29985] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8647'.
[ 1702.847735][T29999] netlink: 'syz.3.8651': attribute type 25 has an invalid length.
[ 1702.855976][T29999] netlink: 'syz.3.8651': attribute type 28 has an invalid length.
[ 1702.890753][T30002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8652'.
[ 1703.309026][T30008] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8655'.
[ 1703.339241][T30009] netlink: 'syz.0.8655': attribute type 2 has an invalid length.
[ 1703.377988][T30009] netlink: 'syz.0.8655': attribute type 8 has an invalid length.
[ 1703.410025][T30009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8655'.
[ 1703.631239][T30020] netlink: 'syz.1.8659': attribute type 21 has an invalid length.
[ 1703.639145][T30020] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8659'.
[ 1704.287779][T30030] netlink: 'syz.0.8663': attribute type 11 has an invalid length.
[ 1704.295855][T30030] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8663'.
[ 1704.448099][T30035] netlink: 'syz.2.8665': attribute type 21 has an invalid length.
[ 1704.765077][T30044] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8669'.
[ 1704.797356][T30044] netlink: 'syz.3.8669': attribute type 2 has an invalid length.
[ 1704.830035][T30044] netlink: 'syz.3.8669': attribute type 8 has an invalid length.
[ 1704.864383][T30044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8669'.
[ 1705.138935][T30029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1705.361453][T30065] netlink: 'syz.3.8673': attribute type 9 has an invalid length.
[ 1705.397033][T30065] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.8673'.
[ 1706.097994][T30084] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8681'.
[ 1706.123425][T30084] netlink: 'syz.4.8681': attribute type 2 has an invalid length.
[ 1706.131715][T30084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8681'.
[ 1706.582903][T30098] netlink: 'syz.3.8686': attribute type 11 has an invalid length.
[ 1707.373189][T30094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1710.612081][T30135] validate_nla: 3 callbacks suppressed
[ 1710.612126][T30135] netlink: 'syz.1.8699': attribute type 10 has an invalid length.
[ 1711.133231][T30153] netlink: 'syz.3.8703': attribute type 3 has an invalid length.
[ 1711.149737][T30153] __nla_validate_parse: 2 callbacks suppressed
[ 1711.156556][T30153] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8703'.
[ 1711.350784][T30158] netlink: 'syz.3.8705': attribute type 11 has an invalid length.
[ 1711.397563][T30158] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8705'.
[ 1712.175513][T30157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.536188][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8717'.
[ 1716.442561][T30210] netlink: 'syz.0.8725': attribute type 11 has an invalid length.
[ 1716.469437][T30210] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8725'.
[ 1717.203197][T30207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1720.277237][T30251] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8743'.
[ 1720.314878][T30251] netlink: 'syz.4.8743': attribute type 2 has an invalid length.
[ 1720.343396][T30251] netlink: 'syz.4.8743': attribute type 8 has an invalid length.
[ 1720.355814][T30253] netlink: 'syz.3.8742': attribute type 11 has an invalid length.
[ 1720.371588][T30251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8743'.
[ 1720.418498][T30253] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8742'.
[ 1721.180039][T30252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1722.968416][T30275] netlink: 'syz.0.8750': attribute type 2 has an invalid length.
[ 1723.004574][T30274] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.8751'.
[ 1723.025449][T30275] netlink: 'syz.0.8750': attribute type 1 has an invalid length.
[ 1723.049218][T30274] netlink: 'syz.4.8751': attribute type 1 has an invalid length.
[ 1723.098996][T30275] netlink: 185292 bytes leftover after parsing attributes in process `syz.0.8750'.
[ 1723.161862][T30276] netlink: 'syz.0.8750': attribute type 2 has an invalid length.
[ 1723.200867][T30276] netlink: 196452 bytes leftover after parsing attributes in process `syz.0.8750'.
[ 1725.607407][T28961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1725.923798][T30295] netlink: 'syz.1.8756': attribute type 3 has an invalid length.
[ 1725.932614][T30295] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8756'.
[ 1725.962020][T30307] netlink: 'syz.2.8758': attribute type 9 has an invalid length.
[ 1726.203297][T30318] FAULT_INJECTION: forcing a failure.
[ 1726.203297][T30318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1726.216873][T30318] CPU: 0 PID: 30318 Comm: syz.0.8763 Not tainted syzkaller #0
[ 1726.224381][T30318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1726.234569][T30318] Call Trace:
[ 1726.237892][T30318]  <TASK>
[ 1726.240897][T30318]  dump_stack_lvl+0x188/0x24e
[ 1726.245653][T30318]  ? show_regs_print_info+0x12/0x12
[ 1726.250929][T30318]  ? load_image+0x400/0x400
[ 1726.255486][T30318]  ? folio_mark_accessed+0x2f2/0x1460
[ 1726.260921][T30318]  ? folio_activate_fn+0x2000/0x2000
[ 1726.266274][T30318]  should_fail_ex+0x399/0x4d0
[ 1726.271017][T30318]  copy_page_from_iter_atomic+0x21e/0x1280
[ 1726.276879][T30318]  ? pipe_zero+0x140/0x140
[ 1726.281345][T30318]  ? PageHeadHuge+0x8f/0x1c0
[ 1726.285986][T30318]  ? shmem_write_begin+0x1b4/0x3f0
[ 1726.291155][T30318]  generic_perform_write+0x34f/0x5c0
[ 1726.296507][T30318]  ? generic_file_direct_write+0x330/0x330
[ 1726.302373][T30318]  ? __file_remove_privs+0x5f0/0x5f0
[ 1726.307707][T30318]  ? rwsem_write_trylock+0x135/0x1c0
[ 1726.313302][T30318]  ? clear_nonspinnable+0x60/0x60
[ 1726.318374][T30318]  ? generic_write_checks_count+0x3d9/0x4c0
[ 1726.324367][T30318]  __generic_file_write_iter+0x148/0x2a0
[ 1726.330059][T30318]  generic_file_write_iter+0xab/0x2e0
[ 1726.335494][T30318]  vfs_write+0x4b1/0xa30
[ 1726.339794][T30318]  ? file_end_write+0x250/0x250
[ 1726.344732][T30318]  ? __fget_files+0x43d/0x4b0
[ 1726.349463][T30318]  ? __fdget_pos+0x2ae/0x360
[ 1726.354088][T30318]  ? ksys_write+0x71/0x250
[ 1726.358547][T30318]  ksys_write+0x14c/0x250
[ 1726.362930][T30318]  ? __ia32_sys_read+0x80/0x80
[ 1726.367741][T30318]  ? lockdep_hardirqs_on+0x94/0x140
[ 1726.372985][T30318]  do_syscall_64+0x4c/0xa0
[ 1726.377435][T30318]  ? clear_bhb_loop+0x60/0xb0
[ 1726.382149][T30318]  ? clear_bhb_loop+0x60/0xb0
[ 1726.386861][T30318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1726.392790][T30318] RIP: 0033:0x7f8e0579ce59
[ 1726.397265][T30318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1726.416905][T30318] RSP: 002b:00007f8e06667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1726.425354][T30318] RAX: ffffffffffffffda RBX: 00007f8e05a15fa0 RCX: 00007f8e0579ce59
[ 1726.433353][T30318] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009
[ 1726.441363][T30318] RBP: 00007f8e06667090 R08: 0000000000000000 R09: 0000000000000000
[ 1726.449363][T30318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1726.457360][T30318] R13: 00007f8e05a16038 R14: 00007f8e05a15fa0 R15: 00007fffac387078
[ 1726.465379][T30318]  </TASK>
[ 1726.916786][T30325] netlink: 177648 bytes leftover after parsing attributes in process `syz.1.8765'.
[ 1726.975246][T30325] netlink: 'syz.1.8765': attribute type 10 has an invalid length.
[ 1727.005848][T30325] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8765'.
[ 1728.249791][T30353] netlink: 'syz.1.8771': attribute type 9 has an invalid length.
[ 1728.467006][T30356] netlink: 'syz.0.8772': attribute type 3 has an invalid length.
[ 1728.521992][T30356] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8772'.
[ 1728.871260][T30372] netlink: 'syz.0.8778': attribute type 3 has an invalid length.
[ 1728.879324][T30372] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8778'.
[ 1728.997221][T30376] netlink: 'syz.2.8779': attribute type 3 has an invalid length.
[ 1729.040043][T30376] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8779'.
[ 1729.180130][T30365] can: request_module (can-proto-0) failed.
[ 1729.420379][T30383] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.8782'.
[ 1730.665842][T30409] FAULT_INJECTION: forcing a failure.
[ 1730.665842][T30409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1730.688247][T30410] netlink: 'syz.2.8790': attribute type 3 has an invalid length.
[ 1730.706437][T30410] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8790'.
[ 1730.726934][T30409] CPU: 1 PID: 30409 Comm: syz.4.8791 Not tainted syzkaller #0
[ 1730.734453][T30409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1730.744556][T30409] Call Trace:
[ 1730.747868][T30409]  <TASK>
[ 1730.750831][T30409]  dump_stack_lvl+0x188/0x24e
[ 1730.755575][T30409]  ? show_regs_print_info+0x12/0x12
[ 1730.760817][T30409]  ? load_image+0x400/0x400
[ 1730.765358][T30409]  ? __lock_acquire+0x7d10/0x7d10
[ 1730.770442][T30409]  should_fail_ex+0x399/0x4d0
[ 1730.775170][T30409]  _copy_from_user+0x2c/0x170
[ 1730.779902][T30409]  generic_map_update_batch+0x4f3/0x810
[ 1730.785530][T30409]  ? rcu_read_unlock+0xa0/0xa0
[ 1730.790341][T30409]  ? __fdget+0x17c/0x200
[ 1730.794616][T30409]  ? rcu_read_unlock+0xa0/0xa0
[ 1730.799408][T30409]  bpf_map_do_batch+0x466/0x600
[ 1730.804312][T30409]  __sys_bpf+0x6f7/0x780
[ 1730.808586][T30409]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1730.813999][T30409]  ? lock_chain_count+0x20/0x20
[ 1730.818896][T30409]  __x64_sys_bpf+0x78/0x90
[ 1730.823350][T30409]  do_syscall_64+0x4c/0xa0
[ 1730.827801][T30409]  ? clear_bhb_loop+0x60/0xb0
[ 1730.832512][T30409]  ? clear_bhb_loop+0x60/0xb0
[ 1730.837221][T30409]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1730.843175][T30409] RIP: 0033:0x7f998519ce59
[ 1730.847617][T30409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1730.867242][T30409] RSP: 002b:00007f99860df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1730.875683][T30409] RAX: ffffffffffffffda RBX: 00007f9985415fa0 RCX: 00007f998519ce59
[ 1730.883687][T30409] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a
[ 1730.891681][T30409] RBP: 00007f99860df090 R08: 0000000000000000 R09: 0000000000000000
[ 1730.899675][T30409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1730.907667][T30409] R13: 00007f9985416038 R14: 00007f9985415fa0 R15: 00007ffdee74d568
[ 1730.915675][T30409]  </TASK>
[ 1730.929489][T30412] netlink: 'syz.3.8789': attribute type 9 has an invalid length.
[ 1731.277232][T30420] netlink: 'syz.1.8795': attribute type 3 has an invalid length.
[ 1731.311500][T30420] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8795'.
[ 1731.365185][T30421] netlink: 'syz.3.8793': attribute type 3 has an invalid length.
[ 1731.425355][T30421] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8793'.
[ 1731.543057][T30430] netlink: 'syz.2.8797': attribute type 11 has an invalid length.
[ 1731.551902][T30430] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8797'.
[ 1731.597158][T30428] netlink: 'syz.4.8798': attribute type 11 has an invalid length.
[ 1731.639967][T30428] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8798'.
[ 1732.519994][T30427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1732.550034][T30429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1734.302117][T28952] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1734.510739][T30450] can: request_module (can-proto-0) failed.
[ 1735.040440][T30466] netlink: 'syz.3.8806': attribute type 6 has an invalid length.
[ 1735.116212][T30466] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8806'.
[ 1735.586003][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.592475][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1735.784929][T30478] netlink: 'syz.0.8812': attribute type 3 has an invalid length.
[ 1735.865855][T30478] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8812'.
[ 1736.013288][T30474] netlink: 'syz.3.8811': attribute type 3 has an invalid length.
[ 1736.071298][T30474] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8811'.
[ 1736.103654][T30486] netlink: 'syz.4.8815': attribute type 21 has an invalid length.
[ 1736.142581][T30486] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.8815'.
[ 1736.968735][T30504] netlink: 'syz.1.8822': attribute type 10 has an invalid length.
[ 1737.040498][T30504] team0: Device hsr_slave_0 failed to register rx_handler
[ 1737.132639][T30510] netlink: 'syz.4.8823': attribute type 3 has an invalid length.
[ 1737.154032][T30510] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8823'.
[ 1737.660387][T30523] netlink: 'syz.4.8828': attribute type 3 has an invalid length.
[ 1737.668361][T30523] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8828'.
[ 1737.885955][T30515] can: request_module (can-proto-0) failed.
[ 1737.903172][T30537] netlink: 'syz.2.8833': attribute type 10 has an invalid length.
[ 1738.235577][T30550] netlink: 'syz.2.8837': attribute type 3 has an invalid length.
[ 1738.255787][T30550] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8837'.
[ 1738.929495][T30572] netlink: 'syz.3.8844': attribute type 3 has an invalid length.
[ 1738.969186][T30572] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 1739.234763][T30582] netlink: 'syz.3.8848': attribute type 21 has an invalid length.
[ 1739.253125][T30582] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8848'.
[ 1739.291929][T30582] netlink: 'syz.3.8848': attribute type 4 has an invalid length.
[ 1739.321545][T30582] netlink: 'syz.3.8848': attribute type 5 has an invalid length.
[ 1739.353699][T30582] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8848'.
[ 1740.027525][T30597] netlink: 'syz.1.8852': attribute type 3 has an invalid length.
[ 1740.329605][T30608] __nla_validate_parse: 1 callbacks suppressed
[ 1740.329653][T30608] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8860'.
[ 1740.602492][T30617] netlink: 'syz.0.8862': attribute type 11 has an invalid length.
[ 1740.767556][T30617] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8862'.
[ 1741.489953][T30614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1744.487441][T30647] validate_nla: 1 callbacks suppressed
[ 1744.487479][T30647] netlink: 'syz.0.8873': attribute type 3 has an invalid length.
[ 1744.565347][T30647] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8873'.
[ 1744.687853][T30659] netlink: 'syz.2.8877': attribute type 3 has an invalid length.
[ 1744.711074][T30659] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8877'.
[ 1744.949112][T30666] FAULT_INJECTION: forcing a failure.
[ 1744.949112][T30666] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.026290][T30666] CPU: 1 PID: 30666 Comm: syz.2.8879 Not tainted syzkaller #0
[ 1745.033824][T30666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1745.043919][T30666] Call Trace:
[ 1745.047248][T30666]  <TASK>
[ 1745.050206][T30666]  dump_stack_lvl+0x188/0x24e
[ 1745.054928][T30666]  ? verify_lock_unused+0x140/0x140
[ 1745.060170][T30666]  ? show_regs_print_info+0x12/0x12
[ 1745.065416][T30666]  ? load_image+0x400/0x400
[ 1745.069978][T30666]  should_fail_ex+0x399/0x4d0
[ 1745.074698][T30666]  should_failslab+0x5/0x20
[ 1745.079233][T30666]  slab_pre_alloc_hook+0x59/0x310
[ 1745.084297][T30666]  kmem_cache_alloc+0x56/0x2f0
[ 1745.089102][T30666]  ? __nf_conntrack_alloc+0x99/0x380
[ 1745.094441][T30666]  __nf_conntrack_alloc+0x99/0x380
[ 1745.099619][T30666]  init_conntrack+0x25b/0x11a0
[ 1745.104429][T30666]  ? early_drop+0x870/0x870
[ 1745.108970][T30666]  ? nf_conntrack_find_get+0x670/0x670
[ 1745.114489][T30666]  ? __siphash_unaligned+0x25b/0x3a0
[ 1745.119827][T30666]  nf_conntrack_in+0xd3e/0x17b0
[ 1745.124745][T30666]  ? nf_ct_pernet+0x270/0x270
[ 1745.129482][T30666]  ? ipt_do_table+0x2bd/0x15a0
[ 1745.134296][T30666]  ? read_lock_is_recursive+0x10/0x10
[ 1745.139714][T30666]  ? ipv4_conntrack_defrag+0x284/0x5b0
[ 1745.145231][T30666]  ? ipv4_conntrack_local+0x11f/0x200
[ 1745.150648][T30666]  ? ipv4_conntrack_in+0x20/0x20
[ 1745.155627][T30666]  nf_hook_slow+0xb9/0x200
[ 1745.160094][T30666]  ? nf_hook+0x390/0x390
[ 1745.164404][T30666]  nf_hook+0x224/0x390
[ 1745.168519][T30666]  ? nf_hook+0x9e/0x390
[ 1745.172715][T30666]  ? __ip_local_out+0x5d0/0x5d0
[ 1745.177617][T30666]  ? nf_hook+0x390/0x390
[ 1745.181946][T30666]  ? ip_fast_csum+0x1ea/0x2b0
[ 1745.186666][T30666]  __ip_local_out+0x49c/0x5d0
[ 1745.191387][T30666]  ? nf_hook+0x390/0x390
[ 1745.195670][T30666]  ip_send_skb+0x48/0x1c0
[ 1745.200037][T30666]  udp_send_skb+0xa88/0x1580
[ 1745.204690][T30666]  udp_sendmsg+0x1b33/0x23b0
[ 1745.209336][T30666]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1745.214243][T30666]  ? udp_cmsg_send+0x350/0x350
[ 1745.219051][T30666]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1745.225089][T30666]  ? lock_chain_count+0x20/0x20
[ 1745.229985][T30666]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1745.235374][T30666]  ? _local_bh_enable+0xa0/0xa0
[ 1745.240245][T30666]  ? inet_sendmsg+0x147/0x2f0
[ 1745.244975][T30666]  ? inet_sendmsg+0x147/0x2f0
[ 1745.249675][T30666]  ? inet_send_prepare+0x260/0x260
[ 1745.254826][T30666]  ____sys_sendmsg+0x5be/0x970
[ 1745.259638][T30666]  ? __sys_sendmsg_sock+0x30/0x30
[ 1745.264692][T30666]  ? __import_iovec+0x315/0x500
[ 1745.269570][T30666]  ? import_iovec+0x6f/0xa0
[ 1745.274112][T30666]  ___sys_sendmsg+0x2a2/0x360
[ 1745.278827][T30666]  ? __sys_sendmsg+0x290/0x290
[ 1745.283636][T30666]  ? __lock_acquire+0x7d10/0x7d10
[ 1745.288725][T30666]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1745.293607][T30666]  ? __x64_sys_sendmsg+0x80/0x80
[ 1745.298580][T30666]  ? lockdep_hardirqs_on+0x94/0x140
[ 1745.303796][T30666]  do_syscall_64+0x4c/0xa0
[ 1745.308247][T30666]  ? clear_bhb_loop+0x60/0xb0
[ 1745.312943][T30666]  ? clear_bhb_loop+0x60/0xb0
[ 1745.317640][T30666]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1745.323550][T30666] RIP: 0033:0x7fbf08f9ce59
[ 1745.327981][T30666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1745.347604][T30666] RSP: 002b:00007fbf09ec3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1745.356032][T30666] RAX: ffffffffffffffda RBX: 00007fbf09215fa0 RCX: 00007fbf08f9ce59
[ 1745.364013][T30666] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005
[ 1745.371995][T30666] RBP: 00007fbf09ec3090 R08: 0000000000000000 R09: 0000000000000000
[ 1745.379990][T30666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1745.387976][T30666] R13: 00007fbf09216038 R14: 00007fbf09215fa0 R15: 00007ffefb649b58
[ 1745.395994][T30666]  </TASK>
[ 1746.570843][T30692] netlink: 'syz.2.8886': attribute type 21 has an invalid length.
[ 1746.799156][T30683] netlink: 'syz.1.8885': attribute type 10 has an invalid length.
[ 1747.106194][T30703] netlink: 'syz.3.8888': attribute type 3 has an invalid length.
[ 1747.123562][T30703] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8888'.
[ 1747.338636][T30711] netlink: 'syz.4.8891': attribute type 11 has an invalid length.
[ 1747.369882][T30711] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8891'.
[ 1747.411330][T30717] netlink: 'syz.3.8892': attribute type 1 has an invalid length.
[ 1747.419259][T30717] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.8892'.
[ 1748.112468][T30710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1749.709262][T30730] netlink: 'syz.4.8899': attribute type 21 has an invalid length.
[ 1749.848916][T30736] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.8902'.
[ 1749.889332][T30731] netlink: 'syz.4.8899': attribute type 5 has an invalid length.
[ 1749.897683][T30731] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8899'.
[ 1749.942622][T30740] netlink: 'syz.1.8901': attribute type 3 has an invalid length.
[ 1749.960138][T30740] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8901'.
[ 1750.169070][T30751] FAULT_INJECTION: forcing a failure.
[ 1750.169070][T30751] name failslab, interval 1, probability 0, space 0, times 0
[ 1750.192312][T30751] CPU: 1 PID: 30751 Comm: syz.1.8907 Not tainted syzkaller #0
[ 1750.199930][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1750.210034][T30751] Call Trace:
[ 1750.213367][T30751]  <TASK>
[ 1750.216327][T30751]  dump_stack_lvl+0x188/0x24e
[ 1750.221058][T30751]  ? show_regs_print_info+0x12/0x12
[ 1750.226306][T30751]  ? load_image+0x400/0x400
[ 1750.230861][T30751]  ? __might_sleep+0xd0/0xd0
[ 1750.235485][T30751]  ? __lock_acquire+0x7d10/0x7d10
[ 1750.240562][T30751]  should_fail_ex+0x399/0x4d0
[ 1750.245283][T30751]  should_failslab+0x5/0x20
[ 1750.249842][T30751]  slab_pre_alloc_hook+0x59/0x310
[ 1750.254921][T30751]  ? tomoyo_encode+0x27e/0x540
[ 1750.259732][T30751]  __kmem_cache_alloc_node+0x4f/0x260
[ 1750.265152][T30751]  ? tomoyo_encode+0x27e/0x540
[ 1750.269954][T30751]  __kmalloc+0xa0/0x240
[ 1750.274159][T30751]  tomoyo_encode+0x27e/0x540
[ 1750.278838][T30751]  tomoyo_realpath_from_path+0x58e/0x5d0
[ 1750.284536][T30751]  ? tomoyo_path_number_perm+0x205/0x650
[ 1750.290210][T30751]  tomoyo_path_number_perm+0x22f/0x650
[ 1750.295723][T30751]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1750.301235][T30751]  ? ksys_write+0x1c0/0x250
[ 1750.305789][T30751]  ? common_file_perm+0x171/0x1c0
[ 1750.310891][T30751]  ? __fget_files+0x28/0x4b0
[ 1750.315527][T30751]  ? __fget_files+0x28/0x4b0
[ 1750.320169][T30751]  security_file_ioctl+0x6c/0xa0
[ 1750.325132][T30751]  __se_sys_ioctl+0x48/0x170
[ 1750.329758][T30751]  do_syscall_64+0x4c/0xa0
[ 1750.334207][T30751]  ? clear_bhb_loop+0x60/0xb0
[ 1750.338908][T30751]  ? clear_bhb_loop+0x60/0xb0
[ 1750.343609][T30751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1750.349535][T30751] RIP: 0033:0x7feb33b9ce59
[ 1750.353973][T30751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1750.373603][T30751] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1750.382132][T30751] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1750.390125][T30751] RDX: 0000200000000200 RSI: 0000000000008993 RDI: 0000000000000003
[ 1750.398120][T30751] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1750.406114][T30751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1750.414107][T30751] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1750.422116][T30751]  </TASK>
[ 1750.491923][T30751] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1750.522773][T30760] netlink: 'syz.0.8909': attribute type 11 has an invalid length.
[ 1750.569820][T30760] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8909'.
[ 1751.324762][T30759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1753.891994][T30785] netlink: 'syz.3.8919': attribute type 1 has an invalid length.
[ 1753.925502][T30783] netlink: 'syz.0.8918': attribute type 3 has an invalid length.
[ 1753.943620][T30783] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8918'.
[ 1753.947773][T30785] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.8919'.
[ 1754.513289][T30812] netlink: 'syz.4.8926': attribute type 10 has an invalid length.
[ 1754.542100][T30810] netlink: 'syz.1.8928': attribute type 11 has an invalid length.
[ 1754.614474][T30810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8928'.
[ 1754.817839][T30821] device bridge_slave_1 left promiscuous mode
[ 1754.840230][T30821] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1755.329290][T30807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1757.044080][T28968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1757.470643][T30821] device bridge_slave_0 left promiscuous mode
[ 1757.510996][T30821] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1757.637323][T30821] team0: Port device bridge0 removed
[ 1759.956705][T30835] netlink: 'syz.0.8937': attribute type 10 has an invalid length.
[ 1759.968505][T30835] bridge0: port 3(hsr0) entered disabled state
[ 1759.995537][T30835] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1760.013991][T30836] netlink: 'syz.2.8934': attribute type 3 has an invalid length.
[ 1760.030112][T30836] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8934'.
[ 1760.326255][T30850] device syzkaller0 entered promiscuous mode
[ 1760.477137][T30860] netlink: 'syz.0.8945': attribute type 11 has an invalid length.
[ 1760.502041][T30860] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8945'.
[ 1761.257599][T30857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.377504][T30863] netlink: 'syz.1.8944': attribute type 10 has an invalid length.
[ 1761.397594][T30868] netlink: 'syz.3.8946': attribute type 28 has an invalid length.
[ 1761.405846][T30868] netlink: 'syz.3.8946': attribute type 3 has an invalid length.
[ 1761.414894][T30868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8946'.
[ 1763.893845][T30896] netlink: 'syz.4.8952': attribute type 3 has an invalid length.
[ 1763.917184][T30896] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.8952'.
[ 1763.927820][T30899] syzkaller0: tun_chr_ioctl cmd 1074812118
[ 1764.492099][T30912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1764.514886][T30912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1764.527478][T30912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1764.547401][T30912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1764.555953][T30912] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1764.566057][T30912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1766.301943][T28952] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1766.989913][T12604] Bluetooth: hci2: command 0x0409 tx timeout
[ 1768.871152][T30908] netlink: 'syz.1.8957': attribute type 11 has an invalid length.
[ 1768.879044][T30908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8957'.
[ 1768.910271][T30908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1769.024619][T12604] Bluetooth: hci2: command 0x041b tx timeout
[ 1769.362081][T30935] netlink: 'syz.0.8960': attribute type 10 has an invalid length.
[ 1769.531652][T30911] chnl_net:caif_netlink_parms(): no params data found
[ 1769.672606][T30911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1769.684844][T30911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.696396][T30911] device bridge_slave_0 entered promiscuous mode
[ 1769.713632][T30911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1769.725679][T30911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.737254][T30911] device bridge_slave_1 entered promiscuous mode
[ 1769.804201][T30911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1769.824672][T30911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1769.889186][T30911] team0: Port device team_slave_0 added
[ 1770.052330][T30911] team0: Port device team_slave_1 added
[ 1770.092178][T30911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1770.099414][T30911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1770.140722][T30911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1770.172719][T30911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1770.200130][T30911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1770.329779][T30911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1770.401740][T30911] device hsr_slave_0 entered promiscuous mode
[ 1770.424345][T30911] device hsr_slave_1 entered promiscuous mode
[ 1770.440072][T30911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1770.472475][T30911] Cannot create hsr debugfs directory
[ 1770.502146][T30949] netlink: 'syz.3.8965': attribute type 3 has an invalid length.
[ 1770.517856][T30949] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.8965'.
[ 1771.057478][T30911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.097655][T30962] netlink: 'syz.0.8970': attribute type 11 has an invalid length.
[ 1771.105837][T12604] Bluetooth: hci2: command 0x040f tx timeout
[ 1771.112398][T30962] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8970'.
[ 1771.941026][T30960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1773.189874][T30912] Bluetooth: hci2: command 0x0419 tx timeout
[ 1774.298019][T30911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1775.500668][T30999] FAULT_INJECTION: forcing a failure.
[ 1775.500668][T30999] name failslab, interval 1, probability 0, space 0, times 0
[ 1775.514635][T30999] CPU: 0 PID: 30999 Comm: syz.0.8977 Not tainted syzkaller #0
[ 1775.522153][T30999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1775.532249][T30999] Call Trace:
[ 1775.535551][T30999]  <TASK>
[ 1775.538498][T30999]  dump_stack_lvl+0x188/0x24e
[ 1775.543227][T30999]  ? show_regs_print_info+0x12/0x12
[ 1775.548457][T30999]  ? load_image+0x400/0x400
[ 1775.553006][T30999]  ? __might_sleep+0xd0/0xd0
[ 1775.557622][T30999]  ? __lock_acquire+0x7d10/0x7d10
[ 1775.562689][T30999]  should_fail_ex+0x399/0x4d0
[ 1775.567409][T30999]  should_failslab+0x5/0x20
[ 1775.571936][T30999]  slab_pre_alloc_hook+0x59/0x310
[ 1775.577001][T30999]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1775.582765][T30999]  __kmem_cache_alloc_node+0x4f/0x260
[ 1775.588204][T30999]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1775.593957][T30999]  __kmalloc+0xa0/0x240
[ 1775.598157][T30999]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1775.603752][T30999]  ? tomoyo_path_number_perm+0x205/0x650
[ 1775.609423][T30999]  tomoyo_path_number_perm+0x22f/0x650
[ 1775.614917][T30999]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1775.620409][T30999]  ? ksys_write+0x1c0/0x250
[ 1775.624949][T30999]  ? common_file_perm+0x171/0x1c0
[ 1775.630067][T30999]  ? __fget_files+0x28/0x4b0
[ 1775.634705][T30999]  ? __fget_files+0x28/0x4b0
[ 1775.639354][T30999]  security_file_ioctl+0x6c/0xa0
[ 1775.644335][T30999]  __se_sys_ioctl+0x48/0x170
[ 1775.648966][T30999]  do_syscall_64+0x4c/0xa0
[ 1775.653426][T30999]  ? clear_bhb_loop+0x60/0xb0
[ 1775.658127][T30999]  ? clear_bhb_loop+0x60/0xb0
[ 1775.662829][T30999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1775.668750][T30999] RIP: 0033:0x7f8e0579ce59
[ 1775.673189][T30999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1775.692821][T30999] RSP: 002b:00007f8e06625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1775.701268][T30999] RAX: ffffffffffffffda RBX: 00007f8e05a16180 RCX: 00007f8e0579ce59
[ 1775.709273][T30999] RDX: 0000200000000180 RSI: 0000000040047452 RDI: 0000000000000003
[ 1775.717268][T30999] RBP: 00007f8e06625090 R08: 0000000000000000 R09: 0000000000000000
[ 1775.725259][T30999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1775.733257][T30999] R13: 00007f8e05a16218 R14: 00007f8e05a16180 R15: 00007fffac387078
[ 1775.741280][T30999]  </TASK>
[ 1775.769655][T30999] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1777.159318][T30911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.286755][T30911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.374083][T31001] netlink: 'syz.1.8979': attribute type 3 has an invalid length.
[ 1777.405609][T31001] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8979'.
[ 1777.629066][T31011] netlink: 'syz.1.8983': attribute type 11 has an invalid length.
[ 1777.664694][T31011] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8983'.
[ 1777.683901][T30911] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1778.455723][T31010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1778.496847][T30911] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1778.530785][T30911] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1778.579837][T30911] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1778.846881][T30911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1778.888260][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1778.904125][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1778.935496][T30911] 8021q: adding VLAN 0 to HW filter on device team0
[ 1778.976112][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1779.005777][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1779.052374][T28971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1779.059606][T28971] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1779.162023][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1779.193308][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1779.218986][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1779.256110][T28971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1779.263346][T28971] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1779.293590][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1779.329523][T31037] netlink: 'syz.0.8992': attribute type 3 has an invalid length.
[ 1779.337900][T31037] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8992'.
[ 1779.349103][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1779.370280][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1779.382178][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1779.391544][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1779.407248][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1779.416642][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1779.432112][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1779.445847][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1779.456394][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1779.480727][T30911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1779.507417][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1779.829535][T31047] netlink: 'syz.4.8997': attribute type 11 has an invalid length.
[ 1779.837784][T31047] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8997'.
[ 1780.005407][T31051] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.8996'.
[ 1780.086794][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1780.100090][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1780.133674][T30911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1780.188545][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1780.204006][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1780.254106][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1780.265456][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1780.276415][T30911] device veth0_vlan entered promiscuous mode
[ 1780.283646][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1780.292917][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1780.301575][T31065] FAULT_INJECTION: forcing a failure.
[ 1780.301575][T31065] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1780.322985][T30911] device veth1_vlan entered promiscuous mode
[ 1780.348264][T31065] CPU: 0 PID: 31065 Comm: syz.3.9000 Not tainted syzkaller #0
[ 1780.355771][T31065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1780.365857][T31065] Call Trace:
[ 1780.369165][T31065]  <TASK>
[ 1780.372136][T31065]  dump_stack_lvl+0x188/0x24e
[ 1780.376878][T31065]  ? show_regs_print_info+0x12/0x12
[ 1780.382137][T31065]  ? load_image+0x400/0x400
[ 1780.386686][T31065]  ? __lock_acquire+0x7d10/0x7d10
[ 1780.391770][T31065]  should_fail_ex+0x399/0x4d0
[ 1780.396496][T31065]  prepare_alloc_pages+0x1e2/0x5f0
[ 1780.401683][T31065]  __alloc_pages+0x130/0x4f0
[ 1780.406330][T31065]  ? zone_statistics+0x170/0x170
[ 1780.411321][T31065]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1780.416915][T31065]  ? copy_page_from_iter+0xe4/0x100
[ 1780.422153][T31065]  pipe_write+0x623/0x1b20
[ 1780.426650][T31065]  ? pipe_read+0x1260/0x1260
[ 1780.431279][T31065]  ? end_current_label_crit_section+0x14b/0x170
[ 1780.436649][T30911] device veth0_macvtap entered promiscuous mode
[ 1780.437537][T31065]  ? common_file_perm+0x171/0x1c0
[ 1780.448854][T31065]  vfs_write+0x4b1/0xa30
[ 1780.453159][T31065]  ? file_end_write+0x250/0x250
[ 1780.458079][T31065]  ? __fget_files+0x43d/0x4b0
[ 1780.462822][T31065]  ? __fdget_pos+0x1d4/0x360
[ 1780.467470][T31065]  ? ksys_write+0x71/0x250
[ 1780.471934][T31065]  ksys_write+0x14c/0x250
[ 1780.473418][T30911] device veth1_macvtap entered promiscuous mode
[ 1780.476301][T31065]  ? __ia32_sys_read+0x80/0x80
[ 1780.476342][T31065]  ? lockdep_hardirqs_on+0x94/0x140
[ 1780.476371][T31065]  do_syscall_64+0x4c/0xa0
[ 1780.497067][T31065]  ? clear_bhb_loop+0x60/0xb0
[ 1780.501790][T31065]  ? clear_bhb_loop+0x60/0xb0
[ 1780.506517][T31065]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1780.512459][T31065] RIP: 0033:0x7ff90a79ce59
[ 1780.516913][T31065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1780.536559][T31065] RSP: 002b:00007ff90b621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1780.545023][T31065] RAX: ffffffffffffffda RBX: 00007ff90aa16180 RCX: 00007ff90a79ce59
[ 1780.553044][T31065] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 0000000000000000
[ 1780.561069][T31065] RBP: 00007ff90b621090 R08: 0000000000000000 R09: 0000000000000000
[ 1780.569077][T31065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1780.575159][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1780.577068][T31065] R13: 00007ff90aa16218 R14: 00007ff90aa16180 R15: 00007ffebcd8c6b8
[ 1780.595538][T31065]  </TASK>
[ 1780.598490][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.619982][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1780.634009][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.648535][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1780.660484][T31046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1780.670517][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.680868][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1780.691951][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.704754][T30911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1780.712737][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1780.722086][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1780.730675][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1780.739566][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1780.750468][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1780.759205][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1780.769496][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1780.787530][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1780.798797][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.813582][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1780.826342][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.843601][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1780.856861][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.874448][T30911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1780.887479][T30911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1780.903492][T30911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1780.916651][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1780.926163][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1780.937507][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1780.964135][T30911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.976991][T30911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.989143][T30911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.002118][T30911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1783.079394][T28971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1783.100208][T28971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1783.112065][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1783.164053][T28971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1783.174675][T28971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1783.209582][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1783.292040][T31070] netlink: 'syz.3.9004': attribute type 3 has an invalid length.
[ 1783.302308][T31070] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.9004'.
[ 1783.327755][T31080] netlink: 'syz.1.9001': attribute type 3 has an invalid length.
[ 1783.350544][T31080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9001'.
[ 1784.335755][T31102] netlink: 'syz.0.9011': attribute type 11 has an invalid length.
[ 1784.346596][T31102] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9011'.
[ 1784.556116][T31110] netlink: 'syz.1.9015': attribute type 3 has an invalid length.
[ 1784.566514][T31110] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.9015'.
[ 1784.786940][T31121] netlink: 'syz.2.9016': attribute type 21 has an invalid length.
[ 1784.828829][T31121] netlink: 'syz.2.9016': attribute type 6 has an invalid length.
[ 1784.851417][T31121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9016'.
[ 1785.168588][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1787.896548][T31141] netlink: 'syz.0.9025': attribute type 3 has an invalid length.
[ 1787.940366][T31141] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.9025'.
[ 1789.189133][T31155] netlink: 'syz.1.9028': attribute type 3 has an invalid length.
[ 1789.239297][T31155] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.9028'.
[ 1789.443462][T31165] netlink: 'syz.4.9032': attribute type 11 has an invalid length.
[ 1789.468601][T31165] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9032'.
[ 1789.915069][T28971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1790.290130][T31164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1792.654544][T31205] FAULT_INJECTION: forcing a failure.
[ 1792.654544][T31205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1792.711601][T31203] device wlan1 entered promiscuous mode
[ 1792.713949][T31205] CPU: 0 PID: 31205 Comm: syz.1.9046 Not tainted syzkaller #0
[ 1792.724754][T31205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1792.734846][T31205] Call Trace:
[ 1792.738164][T31205]  <TASK>
[ 1792.741139][T31205]  dump_stack_lvl+0x188/0x24e
[ 1792.745870][T31205]  ? show_regs_print_info+0x12/0x12
[ 1792.751137][T31205]  ? load_image+0x400/0x400
[ 1792.755682][T31205]  ? __lock_acquire+0x7d10/0x7d10
[ 1792.760761][T31205]  should_fail_ex+0x399/0x4d0
[ 1792.765481][T31205]  strncpy_from_user+0x32/0x350
[ 1792.770377][T31205]  bpf_prog_load+0x1f3/0x1560
[ 1792.775121][T31205]  ? map_freeze+0x390/0x390
[ 1792.779666][T31205]  ? __might_fault+0xa6/0x120
[ 1792.784396][T31205]  ? __might_fault+0xa6/0x120
[ 1792.789110][T31205]  ? __might_fault+0xc2/0x120
[ 1792.793816][T31205]  ? __might_fault+0xa6/0x120
[ 1792.798512][T31205]  ? bpf_lsm_bpf+0x5/0x10
[ 1792.802869][T31205]  ? security_bpf+0x7a/0xa0
[ 1792.807403][T31205]  __sys_bpf+0x5b8/0x780
[ 1792.811672][T31205]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1792.817077][T31205]  ? lock_chain_count+0x20/0x20
[ 1792.821967][T31205]  __x64_sys_bpf+0x78/0x90
[ 1792.826412][T31205]  do_syscall_64+0x4c/0xa0
[ 1792.830849][T31205]  ? clear_bhb_loop+0x60/0xb0
[ 1792.835550][T31205]  ? clear_bhb_loop+0x60/0xb0
[ 1792.840256][T31205]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1792.846166][T31205] RIP: 0033:0x7feb33b9ce59
[ 1792.850605][T31205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1792.870231][T31205] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1792.878661][T31205] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1792.886653][T31205] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[ 1792.894645][T31205] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1792.902632][T31205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1792.910614][T31205] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1792.918613][T31205]  </TASK>
[ 1792.967377][T31203] netlink: 'syz.2.9045': attribute type 3 has an invalid length.
[ 1793.011996][T31203] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.9045'.
[ 1793.365713][T31224] netlink: 'syz.2.9054': attribute type 11 has an invalid length.
[ 1793.439849][T31224] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9054'.
[ 1793.553686][T31221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1793.918654][T31234] netlink: 'syz.0.9068': attribute type 11 has an invalid length.
[ 1794.005142][T31234] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9068'.
[ 1794.325035][T30912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1794.339080][T30912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1794.350102][T30912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1794.361746][T30912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1794.370897][T30912] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1794.378423][T30912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1794.720085][T31233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1795.017051][T31240] chnl_net:caif_netlink_parms(): no params data found
[ 1795.059348][T31258] netlink: 'syz.3.9063': attribute type 3 has an invalid length.
[ 1795.078261][T31258] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.9063'.
[ 1795.360394][T31240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1795.367622][T31240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1795.411963][T31240] device bridge_slave_0 entered promiscuous mode
[ 1795.445635][T31240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1795.464879][T31240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1795.487050][T31240] device bridge_slave_1 entered promiscuous mode
[ 1795.548269][T31240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1795.575472][T31240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1795.576320][T31279] netlink: 'syz.3.9073': attribute type 11 has an invalid length.
[ 1795.705382][T31279] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9073'.
[ 1795.804542][T31240] team0: Port device team_slave_0 added
[ 1796.394213][T31278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1796.780258][T12604] Bluetooth: hci1: command 0x0409 tx timeout
[ 1797.022477][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1797.028884][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1798.300219][T28968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1798.575452][T31240] team0: Port device team_slave_1 added
[ 1798.661472][T31240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1798.677459][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1798.756127][T31240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1798.784430][T31295] netlink: 'syz.2.9079': attribute type 10 has an invalid length.
[ 1798.826004][T31295] team0: Device wg1 is of different type
[ 1798.855901][T31240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1798.864748][T12604] Bluetooth: hci1: command 0x041b tx timeout
[ 1798.872407][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1798.904013][T31240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1798.970299][T31301] netlink: 'syz.3.9077': attribute type 3 has an invalid length.
[ 1799.009932][T31301] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.9077'.
[ 1799.128086][T31240] device hsr_slave_0 entered promiscuous mode
[ 1799.161010][T31240] device hsr_slave_1 entered promiscuous mode
[ 1799.190519][T31240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1799.198144][T31240] Cannot create hsr debugfs directory
[ 1799.461587][T31314] netlink: 'syz.2.9084': attribute type 29 has an invalid length.
[ 1799.687056][T31314] netlink: 'syz.2.9084': attribute type 29 has an invalid length.
[ 1799.847651][T31240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.898998][T31313] netlink: 'syz.2.9084': attribute type 29 has an invalid length.
[ 1800.032406][T31240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1800.111400][T31324] netlink: 'syz.3.9087': attribute type 11 has an invalid length.
[ 1800.143128][T31324] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9087'.
[ 1800.936263][T31322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1800.950109][T12604] Bluetooth: hci1: command 0x040f tx timeout
[ 1801.083042][T31240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.278078][T31240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.304923][T31336] netlink: 'syz.3.9092': attribute type 3 has an invalid length.
[ 1801.313150][T31336] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.9092'.
[ 1801.460858][T31343] netlink: 'syz.3.9095': attribute type 10 has an invalid length.
[ 1801.486040][T31343] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9095'.
[ 1801.531596][T31344] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9094'.
[ 1801.785091][T31240] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1801.820791][T31240] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1801.859794][T31240] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1801.890588][T31240] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1802.048440][T31362] netlink: 'syz.1.9101': attribute type 11 has an invalid length.
[ 1802.089528][T31362] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9101'.
[ 1802.153920][T31240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1802.189156][T31369] netlink: 'syz.0.9104': attribute type 3 has an invalid length.
[ 1802.198155][T31369] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.9104'.
[ 1802.227917][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1802.240838][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1802.262242][T31240] 8021q: adding VLAN 0 to HW filter on device team0
[ 1802.298459][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1802.308133][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1802.322770][T28949] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1802.329961][T28949] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1802.361121][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1802.369708][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1802.392382][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1802.410055][T28949] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1802.417199][T28949] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1802.441215][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1802.461798][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1802.485706][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1802.496565][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1802.507060][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1802.522508][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1802.548308][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1802.575508][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1802.590698][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1802.614811][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1802.630956][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1802.655069][T31240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1802.670767][T31375] netlink: 'syz.0.9105': attribute type 10 has an invalid length.
[ 1802.876010][T31361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1803.031421][T12604] Bluetooth: hci1: command 0x0419 tx timeout
[ 1803.110591][T31383] FAULT_INJECTION: forcing a failure.
[ 1803.110591][T31383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1803.190208][T31383] CPU: 0 PID: 31383 Comm: syz.2.9107 Not tainted syzkaller #0
[ 1803.197761][T31383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1803.207852][T31383] Call Trace:
[ 1803.211161][T31383]  <TASK>
[ 1803.214115][T31383]  dump_stack_lvl+0x188/0x24e
[ 1803.218929][T31383]  ? show_regs_print_info+0x12/0x12
[ 1803.224174][T31383]  ? load_image+0x400/0x400
[ 1803.228752][T31383]  ? __lock_acquire+0x7d10/0x7d10
[ 1803.233838][T31383]  should_fail_ex+0x399/0x4d0
[ 1803.238549][T31383]  _copy_from_user+0x2c/0x170
[ 1803.243269][T31383]  perf_copy_attr+0x174/0x850
[ 1803.246649][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1803.247975][T31383]  __se_sys_perf_event_open+0xf5/0x1ec0
[ 1803.260841][T31383]  ? __fget_files+0x43d/0x4b0
[ 1803.261492][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1803.265553][T31383]  ? ct_nmi_exit+0x145/0x1c0
[ 1803.277493][T31383]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1803.283212][T31383]  ? lockdep_hardirqs_on+0x94/0x140
[ 1803.288458][T31383]  ? __x64_sys_perf_event_open+0x1c/0xc0
[ 1803.294149][T31383]  do_syscall_64+0x4c/0xa0
[ 1803.298629][T31383]  ? clear_bhb_loop+0x60/0xb0
[ 1803.303357][T31383]  ? clear_bhb_loop+0x60/0xb0
[ 1803.308098][T31383]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1803.314049][T31383] RIP: 0033:0x7f96e2d9ce59
[ 1803.318512][T31383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1803.330641][T31240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1803.338138][T31383] RSP: 002b:00007f96e3d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1803.338166][T31383] RAX: ffffffffffffffda RBX: 00007f96e3015fa0 RCX: 00007f96e2d9ce59
[ 1803.361369][T31383] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[ 1803.369386][T31383] RBP: 00007f96e3d11090 R08: 0000000000000000 R09: 0000000000000000
[ 1803.377398][T31383] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1803.385416][T31383] R13: 00007f96e3016038 R14: 00007f96e3015fa0 R15: 00007fffa622c858
[ 1803.393457][T31383]  </TASK>
[ 1804.000198][T31405] netlink: 'syz.0.9115': attribute type 3 has an invalid length.
[ 1804.008190][T31405] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.9115'.
[ 1804.134965][T31411] netlink: 'syz.3.9117': attribute type 11 has an invalid length.
[ 1804.147092][T31411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9117'.
[ 1804.674739][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1804.697814][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1804.755573][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1804.765433][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1804.775538][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1804.784840][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1804.793455][T31240] device veth0_vlan entered promiscuous mode
[ 1804.808779][T31240] device veth1_vlan entered promiscuous mode
[ 1804.851569][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1804.861754][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1804.879684][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1804.889215][T28971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1804.907651][T31240] device veth0_macvtap entered promiscuous mode
[ 1804.937739][T31240] device veth1_macvtap entered promiscuous mode
[ 1804.963149][T31410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.990939][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1805.012670][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.029755][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1805.061096][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.073621][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1805.085061][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.109760][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1805.125791][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.138797][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1805.149693][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.163579][T31240] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1805.177627][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1805.200443][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1805.219008][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1805.238142][T28949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1805.310614][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1805.344245][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.385636][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1805.429196][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.464886][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1805.506526][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.552027][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1805.585024][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.634545][T31240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1805.676974][T31240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1805.731526][T31240] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1805.765752][T31431] netlink: 'syz.1.9119': attribute type 10 has an invalid length.
[ 1805.796560][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1805.813349][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1805.859152][T31240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.892497][T31240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.924436][T31240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.956776][T31240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1806.197817][T28958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.230588][T28958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1806.263425][T28947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1806.338953][T28958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.347361][T28958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1806.359663][T31442] netlink: 'syz.1.9125': attribute type 10 has an invalid length.
[ 1806.383789][T28958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1806.568527][T31447] tipc: Started in network mode
[ 1806.589329][T31447] tipc: Node identity 9215a268, cluster identity 4711
[ 1806.614420][T31447] tipc: Node number set to 2450891368
[ 1806.645008][T31448] netlink: 'syz.1.9127': attribute type 3 has an invalid length.
[ 1806.670066][T31448] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.9127'.
[ 1807.654402][T31474] netlink: 'syz.1.9134': attribute type 10 has an invalid length.
[ 1807.835551][T31485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9138'.
[ 1807.933695][T31487] netlink: 'syz.4.9139': attribute type 10 has an invalid length.
[ 1808.065279][T31493] tipc: Started in network mode
[ 1808.093505][T31493] tipc: Node identity 9215a268, cluster identity 4711
[ 1808.126423][T31493] tipc: Node number set to 2450891368
[ 1808.136751][T31497] FAULT_INJECTION: forcing a failure.
[ 1808.136751][T31497] name failslab, interval 1, probability 0, space 0, times 0
[ 1808.152644][T31497] CPU: 0 PID: 31497 Comm: syz.3.9143 Not tainted syzkaller #0
[ 1808.160165][T31497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1808.170266][T31497] Call Trace:
[ 1808.173560][T31497]  <TASK>
[ 1808.176517][T31497]  dump_stack_lvl+0x188/0x24e
[ 1808.181241][T31497]  ? show_regs_print_info+0x12/0x12
[ 1808.186493][T31497]  ? load_image+0x400/0x400
[ 1808.191045][T31497]  ? __might_sleep+0xd0/0xd0
[ 1808.195663][T31497]  ? __lock_acquire+0x7d10/0x7d10
[ 1808.200718][T31497]  should_fail_ex+0x399/0x4d0
[ 1808.205413][T31497]  should_failslab+0x5/0x20
[ 1808.209936][T31497]  slab_pre_alloc_hook+0x59/0x310
[ 1808.214978][T31497]  ? kvmalloc_node+0x6c/0x180
[ 1808.219700][T31497]  __kmem_cache_alloc_node+0x4f/0x260
[ 1808.225112][T31497]  ? kvmalloc_node+0x6c/0x180
[ 1808.229817][T31497]  __kmalloc_node+0xa0/0x240
[ 1808.234457][T31497]  kvmalloc_node+0x6c/0x180
[ 1808.238991][T31497]  bpf_test_run_xdp_live+0x209/0x1a90
[ 1808.244389][T31497]  ? 0xffffffffa0004440
[ 1808.248581][T31497]  ? text_poke_copy+0x79/0x90
[ 1808.253309][T31497]  ? 0xffffffffa0004440
[ 1808.257493][T31497]  ? bpf_dispatcher_change_prog+0xcbb/0xf10
[ 1808.263437][T31497]  ? 0xffffffffa0004440
[ 1808.267639][T31497]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1808.273254][T31497]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1808.279538][T31497]  ? bpf_test_init+0x119/0x140
[ 1808.284341][T31497]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1808.289853][T31497]  bpf_prog_test_run_xdp+0x736/0xf10
[ 1808.295189][T31497]  ? dev_put+0x80/0x80
[ 1808.299303][T31497]  ? dev_put+0x80/0x80
[ 1808.303400][T31497]  bpf_prog_test_run+0x31e/0x390
[ 1808.308393][T31497]  __sys_bpf+0x62b/0x780
[ 1808.312692][T31497]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1808.318116][T31497]  ? lock_chain_count+0x20/0x20
[ 1808.323015][T31497]  __x64_sys_bpf+0x78/0x90
[ 1808.327471][T31497]  do_syscall_64+0x4c/0xa0
[ 1808.331926][T31497]  ? clear_bhb_loop+0x60/0xb0
[ 1808.336635][T31497]  ? clear_bhb_loop+0x60/0xb0
[ 1808.341361][T31497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1808.347292][T31497] RIP: 0033:0x7ff90a79ce59
[ 1808.351733][T31497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1808.371543][T31497] RSP: 002b:00007ff90b663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1808.379992][T31497] RAX: ffffffffffffffda RBX: 00007ff90aa15fa0 RCX: 00007ff90a79ce59
[ 1808.387993][T31497] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1808.395994][T31497] RBP: 00007ff90b663090 R08: 0000000000000000 R09: 0000000000000000
[ 1808.403990][T31497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1808.411983][T31497] R13: 00007ff90aa16038 R14: 00007ff90aa15fa0 R15: 00007ffebcd8c6b8
[ 1808.419993][T31497]  </TASK>
[ 1808.473759][T31498] device wlan1 entered promiscuous mode
[ 1808.492532][T31501] netlink: 'syz.1.9144': attribute type 11 has an invalid length.
[ 1808.509232][T31498] netlink: 'syz.4.9142': attribute type 3 has an invalid length.
[ 1808.518061][T31498] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.9142'.
[ 1808.540398][T31501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9144'.
[ 1808.878860][T31510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9145'.
[ 1809.328330][T31500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1811.664515][T31525] netlink: 'syz.0.9152': attribute type 3 has an invalid length.
[ 1811.726721][T31525] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9152'.
[ 1812.398199][T31532] netlink: 'syz.2.9156': attribute type 3 has an invalid length.
[ 1812.467840][T31532] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.9156'.
[ 1813.147383][T12604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1813.158425][T12604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1813.180620][T12604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1813.188459][T12604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1813.196994][T12604] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1813.206277][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1813.524446][T31548] netlink: 'syz.4.9158': attribute type 10 has an invalid length.
[ 1813.561084][T31548] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9158'.
[ 1813.953923][T31554] FAULT_INJECTION: forcing a failure.
[ 1813.953923][T31554] name failslab, interval 1, probability 0, space 0, times 0
[ 1814.002257][T31554] CPU: 1 PID: 31554 Comm: syz.1.9160 Not tainted syzkaller #0
[ 1814.009814][T31554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1814.019931][T31554] Call Trace:
[ 1814.023270][T31554]  <TASK>
[ 1814.026261][T31554]  dump_stack_lvl+0x188/0x24e
[ 1814.031039][T31554]  ? show_regs_print_info+0x12/0x12
[ 1814.036320][T31554]  ? load_image+0x400/0x400
[ 1814.040909][T31554]  ? __lock_acquire+0x7d10/0x7d10
[ 1814.046062][T31554]  should_fail_ex+0x399/0x4d0
[ 1814.050840][T31554]  should_failslab+0x5/0x20
[ 1814.055396][T31554]  slab_pre_alloc_hook+0x59/0x310
[ 1814.060484][T31554]  ? bpf_test_init+0x9f/0x140
[ 1814.065234][T31554]  __kmem_cache_alloc_node+0x4f/0x260
[ 1814.070690][T31554]  ? bpf_test_init+0x9f/0x140
[ 1814.075417][T31554]  __kmalloc+0xa0/0x240
[ 1814.079665][T31554]  bpf_test_init+0x9f/0x140
[ 1814.084249][T31554]  bpf_prog_test_run_xdp+0x484/0xf10
[ 1814.089688][T31554]  ? dev_put+0x80/0x80
[ 1814.093875][T31554]  ? dev_put+0x80/0x80
[ 1814.098040][T31554]  bpf_prog_test_run+0x31e/0x390
[ 1814.103079][T31554]  __sys_bpf+0x62b/0x780
[ 1814.107395][T31554]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1814.112902][T31554]  ? lock_chain_count+0x20/0x20
[ 1814.117879][T31554]  __x64_sys_bpf+0x78/0x90
[ 1814.122376][T31554]  do_syscall_64+0x4c/0xa0
[ 1814.126861][T31554]  ? clear_bhb_loop+0x60/0xb0
[ 1814.131601][T31554]  ? clear_bhb_loop+0x60/0xb0
[ 1814.136366][T31554]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1814.142331][T31554] RIP: 0033:0x7feb33b9ce59
[ 1814.146811][T31554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1814.166506][T31554] RSP: 002b:00007feb31df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1814.174994][T31554] RAX: ffffffffffffffda RBX: 00007feb33e15fa0 RCX: 00007feb33b9ce59
[ 1814.183028][T31554] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1814.191068][T31554] RBP: 00007feb31df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1814.199108][T31554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1814.207185][T31554] R13: 00007feb33e16038 R14: 00007feb33e15fa0 R15: 00007ffd77ab8498
[ 1814.215283][T31554]  </TASK>
[ 1814.771655][T31559] netlink: 'syz.1.9162': attribute type 2 has an invalid length.
[ 1815.260729][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[ 1815.641894][T31559] device 0 entered promiscuous mode
[ 1815.653998][T31561] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.9162'.
[ 1815.966501][T31574] netlink: 'syz.2.9167': attribute type 3 has an invalid length.
[ 1815.975813][T31574] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.9167'.
[ 1816.122425][T31538] chnl_net:caif_netlink_parms(): no params data found
[ 1816.366073][T31538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1816.389279][T31538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1816.399087][T31538] device bridge_slave_0 entered promiscuous mode
[ 1816.422649][T31538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1816.430114][T31538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1816.441137][T31538] device bridge_slave_1 entered promiscuous mode
[ 1816.486988][T31538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1816.519610][T31538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1816.543277][T31593] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9172'.
[ 1816.602825][T31538] team0: Port device team_slave_0 added
[ 1816.624083][T31538] team0: Port device team_slave_1 added
[ 1816.656158][T31538] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1816.665354][T31538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1816.705111][T31538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1816.753239][T31538] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1816.790605][T31538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1816.900483][T31538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1817.026559][T31538] device hsr_slave_0 entered promiscuous mode
[ 1817.053900][T31538] device hsr_slave_1 entered promiscuous mode
[ 1817.080124][T31538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1817.087758][T31538] Cannot create hsr debugfs directory
[ 1817.339962][   T48] Bluetooth: hci3: command 0x041b tx timeout
[ 1817.386169][T31607] netlink: 'syz.4.9177': attribute type 2 has an invalid length.
[ 1818.066033][T31607] device 0 entered promiscuous mode
[ 1818.116832][T31615] netlink: 'syz.2.9178': attribute type 3 has an invalid length.
[ 1818.141500][T31615] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.9178'.
[ 1818.200983][T31608] netlink: 64019 bytes leftover after parsing attributes in process `syz.4.9177'.
[ 1818.406140][T31538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.627990][T31538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.748139][T31632] netlink: 'syz.2.9192': attribute type 2 has an invalid length.
[ 1818.822885][T31538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.903485][T31632] device 0 entered promiscuous mode
[ 1819.043732][T31538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1819.099672][T31633] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.9192'.
[ 1819.421592][   T48] Bluetooth: hci3: command 0x040f tx timeout
[ 1819.537257][T31538] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1819.590349][T31538] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1819.650341][T31538] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1819.688810][T31538] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1820.027889][T31656] netlink: 'syz.4.9188': attribute type 29 has an invalid length.
[ 1820.042807][T31538] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1820.064888][T31653] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.9184'.
[ 1820.096312][T31656] netlink: 'syz.4.9188': attribute type 29 has an invalid length.
[ 1820.115409][T31658] netlink: 'syz.4.9188': attribute type 29 has an invalid length.
[ 1820.134908][T28961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1820.150775][T28961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1820.162361][T31656] netlink: 'syz.4.9188': attribute type 29 has an invalid length.
[ 1820.173349][T31657] netlink: 'syz.2.9190': attribute type 3 has an invalid length.
[ 1820.193461][T31657] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.9190'.
[ 1820.261113][T31658] netlink: 'syz.4.9188': attribute type 29 has an invalid length.
[ 1820.315852][T31656] ==================================================================
[ 1820.324042][T31656] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[ 1820.331873][T31656] Write of size 56 at addr ffff88807959c290 by task syz.4.9188/31656
[ 1820.339972][T31656] 
[ 1820.342319][T31656] CPU: 0 PID: 31656 Comm: syz.4.9188 Not tainted syzkaller #0
[ 1820.349797][T31656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1820.359887][T31656] Call Trace:
[ 1820.363178][T31656]  <TASK>
[ 1820.366129][T31656]  dump_stack_lvl+0x188/0x24e
[ 1820.370829][T31656]  ? __lock_acquire+0x7d10/0x7d10
[ 1820.375880][T31656]  ? show_regs_print_info+0x12/0x12
[ 1820.381113][T31656]  ? load_image+0x400/0x400
[ 1820.385636][T31656]  ? __virt_addr_valid+0x465/0x540
[ 1820.390773][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1820.395902][T31656]  print_report+0xa8/0x210
[ 1820.400346][T31656]  kasan_report+0x10b/0x140
[ 1820.404880][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1820.410020][T31656]  kasan_check_range+0x235/0x290
[ 1820.414985][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1820.420110][T31656]  memcpy+0x3c/0x60
[ 1820.423932][T31656]  __bpf_get_stackid+0x6c9/0x920
[ 1820.428900][T31656]  bpf_get_stackid_pe+0x33f/0x400
[ 1820.433949][T31656]  bpf_prog_ceda4e53fcf21ae1+0x28/0x40
[ 1820.439428][T31656]  bpf_overflow_handler+0x522/0x7c0
[ 1820.444650][T31656]  ? bpf_overflow_handler+0xd9/0x7c0
[ 1820.449951][T31656]  ? perf_swevent_overflow+0x230/0x230
[ 1820.455437][T31656]  ? __lock_acquire+0x13cf/0x7d10
[ 1820.460501][T31656]  ? __perf_event_account_interrupt+0x187/0x280
[ 1820.466768][T31656]  __perf_event_overflow+0x448/0x610
[ 1820.472089][T31656]  perf_swevent_event+0x315/0x570
[ 1820.477142][T31656]  ? perf_tp_event+0xc30/0xc30
[ 1820.481940][T31656]  ? verify_lock_unused+0x140/0x140
[ 1820.487169][T31656]  ___perf_sw_event+0x49e/0x6e0
[ 1820.492049][T31656]  ? ___perf_sw_event+0x180/0x6e0
[ 1820.497097][T31656]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1820.503533][T31656]  ? __lock_acquire+0x13cf/0x7d10
[ 1820.508591][T31656]  ? verify_lock_unused+0x140/0x140
[ 1820.513812][T31656]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1820.519820][T31656]  ? lock_chain_count+0x20/0x20
[ 1820.524705][T31656]  ? mark_lock+0x94/0x320
[ 1820.529070][T31656]  __perf_sw_event+0x135/0x260
[ 1820.533869][T31656]  do_user_addr_fault+0xaea/0xb10
[ 1820.538926][T31656]  ? trace_hardirqs_off_finish+0x86/0x180
[ 1820.544670][T31656]  exc_page_fault+0x60/0x100
[ 1820.549283][T31656]  asm_exc_page_fault+0x22/0x30
[ 1820.554159][T31656] RIP: 0010:strncpy_from_user+0x14b/0x350
[ 1820.559914][T31656] Code: 4c 89 e6 e8 f7 dd 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49
[ 1820.579539][T31656] RSP: 0018:ffffc90003837b50 EFLAGS: 00050246
[ 1820.585624][T31656] RAX: ffffffff8438ac99 RBX: ffffc90003837c70 RCX: ffff888057b28000
[ 1820.593619][T31656] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[ 1820.601611][T31656] RBP: ffffc90003837c70 R08: ffff888057b28000 R09: 0000000000000003
[ 1820.609603][T31656] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f
[ 1820.617594][T31656] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000
[ 1820.625596][T31656]  ? strncpy_from_user+0x129/0x350
[ 1820.630751][T31656]  bpf_prog_load+0x1f3/0x1560
[ 1820.635462][T31656]  ? map_freeze+0x390/0x390
[ 1820.639991][T31656]  ? __might_fault+0xa6/0x120
[ 1820.644688][T31656]  ? __might_fault+0xa6/0x120
[ 1820.649399][T31656]  ? __might_fault+0xc2/0x120
[ 1820.654103][T31656]  ? __might_fault+0xa6/0x120
[ 1820.658805][T31656]  ? bpf_lsm_bpf+0x5/0x10
[ 1820.663154][T31656]  ? security_bpf+0x7a/0xa0
[ 1820.667678][T31656]  __sys_bpf+0x5b8/0x780
[ 1820.671955][T31656]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1820.677355][T31656]  ? lock_chain_count+0x20/0x20
[ 1820.682241][T31656]  __x64_sys_bpf+0x78/0x90
[ 1820.686680][T31656]  do_syscall_64+0x4c/0xa0
[ 1820.691130][T31656]  ? clear_bhb_loop+0x60/0xb0
[ 1820.695837][T31656]  ? clear_bhb_loop+0x60/0xb0
[ 1820.700545][T31656]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1820.706467][T31656] RIP: 0033:0x7f301899ce59
[ 1820.710900][T31656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1820.730517][T31656] RSP: 002b:00007f3019868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1820.738944][T31656] RAX: ffffffffffffffda RBX: 00007f3018c15fa0 RCX: 00007f301899ce59
[ 1820.746932][T31656] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005
[ 1820.754914][T31656] RBP: 00007f3018a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1820.762904][T31656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1820.770890][T31656] R13: 00007f3018c16038 R14: 00007f3018c15fa0 R15: 00007ffea23f1a38
[ 1820.778881][T31656]  </TASK>
[ 1820.781910][T31656] 
[ 1820.784252][T31656] Allocated by task 31656:
[ 1820.788674][T31656]  kasan_set_track+0x4b/0x70
[ 1820.793299][T31656]  __kasan_kmalloc+0x8e/0xa0
[ 1820.797910][T31656]  __kmalloc_node+0xb0/0x240
[ 1820.802523][T31656]  bpf_map_area_alloc+0x47/0xe0
[ 1820.807391][T31656]  prealloc_elems_and_freelist+0x86/0x1c0
[ 1820.813144][T31656]  stack_map_alloc+0x390/0x520
[ 1820.817916][T31656]  map_create+0x534/0x1000
[ 1820.822378][T31656]  __sys_bpf+0x38b/0x780
[ 1820.826639][T31656]  __x64_sys_bpf+0x78/0x90
[ 1820.831081][T31656]  do_syscall_64+0x4c/0xa0
[ 1820.835530][T31656]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1820.841440][T31656] 
[ 1820.843780][T31656] Last potentially related work creation:
[ 1820.849509][T31656]  kasan_save_stack+0x3a/0x60
[ 1820.854212][T31656]  __kasan_record_aux_stack+0xb2/0xc0
[ 1820.859596][T31656]  call_rcu+0x14f/0x990
[ 1820.863779][T31656]  nf_nat_unregister_fn+0x1ea/0x370
[ 1820.869060][T31656]  iptable_nat_net_pre_exit+0x50/0x90
[ 1820.874440][T31656]  cleanup_net+0x591/0xba0
[ 1820.878875][T31656]  process_one_work+0x8a2/0x1160
[ 1820.883830][T31656]  worker_thread+0xaa2/0x1270
[ 1820.888520][T31656]  kthread+0x29d/0x330
[ 1820.892602][T31656]  ret_from_fork+0x1f/0x30
[ 1820.897053][T31656] 
[ 1820.899391][T31656] The buggy address belongs to the object at ffff88807959c280
[ 1820.899391][T31656]  which belongs to the cache kmalloc-cg-64 of size 64
[ 1820.913544][T31656] The buggy address is located 16 bytes inside of
[ 1820.913544][T31656]  64-byte region [ffff88807959c280, ffff88807959c2c0)
[ 1820.926657][T31656] 
[ 1820.928993][T31656] The buggy address belongs to the physical page:
[ 1820.935461][T31656] page:ffffea0001e56700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807959cf00 pfn:0x7959c
[ 1820.946927][T31656] memcg:ffff888029a10a01
[ 1820.951176][T31656] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1820.958756][T31656] raw: 00fff00000000200 ffffea0001e0a780 dead000000000007 ffff888017442780
[ 1820.967353][T31656] raw: ffff88807959cf00 000000008020001a 00000001ffffffff ffff888029a10a01
[ 1820.975948][T31656] page dumped because: kasan: bad access detected
[ 1820.982394][T31656] page_owner tracks the page as allocated
[ 1820.988128][T31656] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4284, tgid 4284 (syz-executor), ts 107302215341, free_ts 107010073490
[ 1821.006567][T31656]  post_alloc_hook+0x173/0x1a0
[ 1821.011362][T31656]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1821.016943][T31656]  __alloc_pages+0x1ec/0x4f0
[ 1821.021559][T31656]  alloc_slab_page+0x5d/0x160
[ 1821.026251][T31656]  new_slab+0x87/0x2c0
[ 1821.030332][T31656]  ___slab_alloc+0xbc6/0x1240
[ 1821.035024][T31656]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1821.040497][T31656]  __kmalloc_node+0xa0/0x240
[ 1821.045109][T31656]  kvmalloc_node+0x6c/0x180
[ 1821.049645][T31656]  nf_hook_entries_grow+0x309/0x730
[ 1821.054864][T31656]  __nf_register_net_hook+0x2c9/0x910
[ 1821.060253][T31656]  nf_register_net_hook+0xae/0x190
[ 1821.065383][T31656]  nf_register_net_hooks+0x40/0x1a0
[ 1821.070686][T31656]  ebt_register_table+0xc97/0x1020
[ 1821.075887][T31656]  find_inlist_lock_noload+0x178/0x260
[ 1821.081370][T31656]  do_ebt_get_ctl+0x2c7/0x1cf0
[ 1821.086160][T31656] page last free stack trace:
[ 1821.090845][T31656]  free_unref_page_prepare+0x8b4/0x9a0
[ 1821.096331][T31656]  free_unref_page+0x2e/0x3f0
[ 1821.101041][T31656]  qlist_free_all+0x76/0xe0
[ 1821.105568][T31656]  kasan_quarantine_reduce+0x144/0x160
[ 1821.111041][T31656]  __kasan_slab_alloc+0x1e/0x80
[ 1821.115915][T31656]  slab_post_alloc_hook+0x4b/0x480
[ 1821.121043][T31656]  kmem_cache_alloc_lru+0x11a/0x2e0
[ 1821.126259][T31656]  shmem_alloc_inode+0x24/0x40
[ 1821.131039][T31656]  new_inode_pseudo+0x5f/0x1c0
[ 1821.135816][T31656]  new_inode+0x25/0x1c0
[ 1821.139994][T31656]  shmem_get_inode+0x347/0xbf0
[ 1821.144788][T31656]  shmem_mknod+0x55/0x1c0
[ 1821.149136][T31656]  shmem_mkdir+0x27/0x60
[ 1821.153406][T31656]  vfs_mkdir+0x387/0x570
[ 1821.157659][T31656]  do_mkdirat+0x1d8/0x440
[ 1821.161998][T31656]  __x64_sys_mkdirat+0x85/0x90
[ 1821.166773][T31656] 
[ 1821.169110][T31656] Memory state around the buggy address:
[ 1821.174752][T31656]  ffff88807959c180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1821.182832][T31656]  ffff88807959c200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1821.190911][T31656] >ffff88807959c280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 1821.199154][T31656]                                   ^
[ 1821.204549][T31656]  ffff88807959c300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1821.212619][T31656]  ffff88807959c380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1821.220692][T31656] ==================================================================
[ 1821.228770][T31656] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1821.235980][T31656] CPU: 0 PID: 31656 Comm: syz.4.9188 Not tainted syzkaller #0
[ 1821.243450][T31656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1821.253520][T31656] Call Trace:
[ 1821.256817][T31656]  <TASK>
[ 1821.259763][T31656]  dump_stack_lvl+0x188/0x24e
[ 1821.264481][T31656]  ? memcpy+0x3c/0x60
[ 1821.268475][T31656]  ? show_regs_print_info+0x12/0x12
[ 1821.273696][T31656]  ? load_image+0x400/0x400
[ 1821.278216][T31656]  panic+0x2e5/0x730
[ 1821.282140][T31656]  ? bpf_jit_dump+0xd0/0xd0
[ 1821.286661][T31656]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1821.292591][T31656]  ? _raw_spin_unlock+0x40/0x40
[ 1821.297450][T31656]  ? print_memory_metadata+0x314/0x400
[ 1821.302947][T31656]  check_panic_on_warn+0x80/0xa0
[ 1821.307989][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1821.313129][T31656]  end_report+0x66/0x110
[ 1821.317400][T31656]  kasan_report+0x118/0x140
[ 1821.321926][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1821.327054][T31656]  kasan_check_range+0x235/0x290
[ 1821.332040][T31656]  ? __bpf_get_stackid+0x6c9/0x920
[ 1821.337170][T31656]  memcpy+0x3c/0x60
[ 1821.341002][T31656]  __bpf_get_stackid+0x6c9/0x920
[ 1821.345963][T31656]  bpf_get_stackid_pe+0x33f/0x400
[ 1821.351010][T31656]  bpf_prog_ceda4e53fcf21ae1+0x28/0x40
[ 1821.356486][T31656]  bpf_overflow_handler+0x522/0x7c0
[ 1821.361725][T31656]  ? bpf_overflow_handler+0xd9/0x7c0
[ 1821.367020][T31656]  ? perf_swevent_overflow+0x230/0x230
[ 1821.372496][T31656]  ? __lock_acquire+0x13cf/0x7d10
[ 1821.377554][T31656]  ? __perf_event_account_interrupt+0x187/0x280
[ 1821.383820][T31656]  __perf_event_overflow+0x448/0x610
[ 1821.389133][T31656]  perf_swevent_event+0x315/0x570
[ 1821.394193][T31656]  ? perf_tp_event+0xc30/0xc30
[ 1821.398993][T31656]  ? verify_lock_unused+0x140/0x140
[ 1821.404217][T31656]  ___perf_sw_event+0x49e/0x6e0
[ 1821.409090][T31656]  ? ___perf_sw_event+0x180/0x6e0
[ 1821.414139][T31656]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 1821.420576][T31656]  ? __lock_acquire+0x13cf/0x7d10
[ 1821.425627][T31656]  ? verify_lock_unused+0x140/0x140
[ 1821.430850][T31656]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1821.436891][T31656]  ? lock_chain_count+0x20/0x20
[ 1821.441757][T31656]  ? mark_lock+0x94/0x320
[ 1821.446105][T31656]  __perf_sw_event+0x135/0x260
[ 1821.450890][T31656]  do_user_addr_fault+0xaea/0xb10
[ 1821.455942][T31656]  ? trace_hardirqs_off_finish+0x86/0x180
[ 1821.461691][T31656]  exc_page_fault+0x60/0x100
[ 1821.466304][T31656]  asm_exc_page_fault+0x22/0x30
[ 1821.471182][T31656] RIP: 0010:strncpy_from_user+0x14b/0x350
[ 1821.476927][T31656] Code: 4c 89 e6 e8 f7 dd 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49
[ 1821.496578][T31656] RSP: 0018:ffffc90003837b50 EFLAGS: 00050246
[ 1821.502665][T31656] RAX: ffffffff8438ac99 RBX: ffffc90003837c70 RCX: ffff888057b28000
[ 1821.510657][T31656] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[ 1821.518644][T31656] RBP: ffffc90003837c70 R08: ffff888057b28000 R09: 0000000000000003
[ 1821.526633][T31656] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f
[ 1821.534629][T31656] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000
[ 1821.542700][T31656]  ? strncpy_from_user+0x129/0x350
[ 1821.547861][T31656]  bpf_prog_load+0x1f3/0x1560
[ 1821.552569][T31656]  ? map_freeze+0x390/0x390
[ 1821.557087][T31656]  ? __might_fault+0xa6/0x120
[ 1821.561779][T31656]  ? __might_fault+0xa6/0x120
[ 1821.566474][T31656]  ? __might_fault+0xc2/0x120
[ 1821.571166][T31656]  ? __might_fault+0xa6/0x120
[ 1821.575856][T31656]  ? bpf_lsm_bpf+0x5/0x10
[ 1821.580201][T31656]  ? security_bpf+0x7a/0xa0
[ 1821.584727][T31656]  __sys_bpf+0x5b8/0x780
[ 1821.589001][T31656]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1821.594399][T31656]  ? lock_chain_count+0x20/0x20
[ 1821.599282][T31656]  __x64_sys_bpf+0x78/0x90
[ 1821.603718][T31656]  do_syscall_64+0x4c/0xa0
[ 1821.608162][T31656]  ? clear_bhb_loop+0x60/0xb0
[ 1821.612865][T31656]  ? clear_bhb_loop+0x60/0xb0
[ 1821.617596][T31656]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1821.623527][T31656] RIP: 0033:0x7f301899ce59
[ 1821.627974][T31656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1821.647600][T31656] RSP: 002b:00007f3019868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1821.656029][T31656] RAX: ffffffffffffffda RBX: 00007f3018c15fa0 RCX: 00007f301899ce59
[ 1821.664018][T31656] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005
[ 1821.672006][T31656] RBP: 00007f3018a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1821.679992][T31656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1821.687987][T31656] R13: 00007f3018c16038 R14: 00007f3018c15fa0 R15: 00007ffea23f1a38
[ 1821.695990][T31656]  </TASK>
[ 1821.699598][T31656] Kernel Offset: disabled
[ 1821.703928][T31656] Rebooting in 86400 seconds..