last executing test programs:

26.669994838s ago: executing program 3 (id=2816):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xffffffffffffffbd, 0x7400}, 0x4)

25.875812297s ago: executing program 3 (id=2818):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94)

25.873913377s ago: executing program 3 (id=2822):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="af448ddb4ca32d79d63c1185e6521a8228329ef297ca7bc37e281a4b8b0d3a2c11b5438303f6e553e92b5e6d7aa27951285d2ddecb91dbf4d222921caf4c6a1395bd39e846f1808206f76658"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x8)
unlink(&(0x7f0000000200)='./cgroup\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r0, 0x0, 0x0}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d005cbd983247f03151ca60bc24eab556a71a251e6182949a3651f60a84c9f4d49309000000a6d0bdd7fcf50e4509", 0x51}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c40), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

25.871829557s ago: executing program 3 (id=2825):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x9, 0x1d, &(0x7f0000000100)=""/29, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340))
close(0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)}, 0x20)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140)
sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680))
gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}], 0x1, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x74a}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}, 0x45)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000e16513020f9a920e"], &(0x7f0000000040)='GPL\x00'}, 0x94)
socket$kcm(0x1e, 0x1, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r9, 0x0, 0x0, 0x4}, 0x20)
setsockopt$sock_attach_bpf(r7, 0x0, 0x25, 0x0, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000080)="ff5ceeea40457723c97d5dc916ffb5945a4291de32fca9e07af3970533cea6b1badd12d0e65b56891cf829ba1e72083eff965ff876c1c1911ea81ddacf9833c73a69bd6cb94c48e32563576b62ed60e04e066288683fafcb7d52ee33c753b8d3370c8abe2a1107f39fbb32f2e509850f56cda9528236626d739368b514c693fcfd83a8c50c04afdbae3c3cd4f8dd309e026fa065fb9b3c9b6c", &(0x7f0000000400)=""/242, 0x4}, 0x20)

25.562435085s ago: executing program 3 (id=2829):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x2b, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200", @ANYRES32], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))
sendmsg$kcm(r0, &(0x7f0000003040)={&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000000340)="a52a4bba10327532037195b80cf347ce1a52a714bf29e5f959ae6ca60ae1c1472dbfcff2a2123f6f290cc7e0134ef20affbd34bb1976f812cd60f0386b66a561d9e8d58eaffa1821fc0d0713eb68a814b219d3d166f7af7a4c35d9e830ce3308b2d3b55c14e7fd13556b62bca58849473c516c99a45ab3db1292303f87361e6f5f61487c0a5c337d44350baa9e26a3f721a629ca674ed6b8ae870115d4", 0x9d}, {0x0}, {&(0x7f0000002b40)="c47181de37c7249e9506abaa94c1c87dd3c9d55082b7b98a68a91be3242a4add7e4bbd73397a1ab37832", 0x2a}], 0x4, &(0x7f0000002d00)}, 0x845)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000001d00)={'wlan1\x00', @random='\x00\x00\b\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0x1b, 0x0, &(0x7f00000000c0)="f181e834f3aac4ce9731ea7b6a57a8e4180f96eccc000000000000", 0x0, 0x39f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0x50)

25.112018696s ago: executing program 3 (id=2834):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4)
r1 = perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0xb8a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x4946, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r6, &(0x7f0000000a80), 0x0}, 0x20)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff0001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0xcb, &(0x7f0000000580)=""/203, 0x40f00, 0x2, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[r0, r5, r6, r7], &(0x7f0000000840)=[{0x5, 0x5, 0x3, 0x6b788f9ca55be2cf}, {0x1, 0x2, 0xd, 0xa}, {0x2, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)

20.594052266s ago: executing program 4 (id=2843):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc3014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0xa, 0x7, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x28)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}], 0x4, &(0x7f00000001c0)=""/52, 0x34}, 0x2000)
recvmsg$kcm(r1, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x111f8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r4 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4})
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0)

18.611533575s ago: executing program 1 (id=2850):
r0 = socket$kcm(0x22, 0x3, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x604, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800", @ANYRESHEX], 0x0}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r6, 0xe0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_pid(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0)
socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x4c, 0x8, 0x4, 0x1, 0x0, 0x9, 0x430c1, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x1d01, 0x5, 0x400, 0x3, 0x6, 0x7, 0x7, 0x0, 0x87, 0x0, 0x1}, r7, 0x3, r1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0)
socket$kcm(0x22, 0x3, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x604, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800", @ANYRESHEX], 0x0}, 0x94) (async)
socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
close(r5) (async)
recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r6, 0xe0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
write$cgroup_pid(r8, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x4c, 0x8, 0x4, 0x1, 0x0, 0x9, 0x430c1, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x1d01, 0x5, 0x400, 0x3, 0x6, 0x7, 0x7, 0x0, 0x87, 0x0, 0x1}, r7, 0x3, r1, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0) (async)

18.553048806s ago: executing program 2 (id=2852):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f848200000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/14, 0xe}, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x18, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.292557912s ago: executing program 4 (id=2853):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x4f, 0x5f]}}, &(0x7f0000000740)=""/4096, 0x2f, 0x1000, 0x0, 0xf4b8}, 0x28)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020)
sendmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="a21f751aa1c7fce1ae4e36e3f6b29035bc06162b43195655bf303b71756834c6d185a580ca4347dffe9e9b81da1665999e0998f42dfcc3737aed5a5e003f8232ac4391f36fe3f035d59bae438bfb7f7902423339d654c19fd6be861b5d1fbff21e3ab13fa6099962b1153312ae0c2dadba5be9eff648ebe1f7d7c9babd0db32a2a0fe3825bc439317a94859426ccca0f095dc4d5b17bd04b3109fd19939b4190c2925dec2902e4b5d3235dca9878cab2b6657f31a51453ee7aae581501c4fa9c348e64db4e7f3be72eff19ae0fbbdbfd43909b7c595e5e3e0a085293", 0xdc}, {&(0x7f0000000500)="501160d5e27bc41f2ac567134e66610e39a183246c4a9408c30628e8", 0x1c}, {&(0x7f0000000580)="7855c472486b31413aeade850bed4b5f743a6157a36e308f5ebe4f324deae0cffe38d36f9335bf8d5bd28ae9df5fc15d91", 0x31}, {&(0x7f00000005c0)="34e72a13b59795e5b90d875a1d3ee978cb19ba0dc31f7c8091fe92611b5cccdd9378d29a7abfd8ed12507e4cf3c2774bdba3e0f2f50e173c2858c22fb60d4dbf81addcfd38f664cf0b702d712d90f8d1ab43af461de38242c839dae0f3ce1c1fcd62a1b62e2fdafad9e5e9534c0a5afe446b8fa634004a1b64bd691ec5bdb7bfa977a38cbaa175dfe39d987f0ae3b6f00cd35800ad4231dd25f0a8dcc77fbec05c3336d3d3cec17e7f", 0xa9}], 0x4, &(0x7f0000001780)=[{0xc8, 0x1, 0x2, "b67325ccace7bf5000709c41408893c95727a3f80b7178626b3032c575a724f2deaff86e999de7c2dacf7ac816dde24122e1d941e9592be1fd0367bd12d5a529f145eaf089e69b47ce0599bc40a921d8b7b1efde94fb3632575526a63d89392f1f64e40be559f3a1be37d4d154d140d280714c0143563ebd7c41f7353fce7c280d0ed009030e81afc88d761ebd3747b43f53ad9ec1f6f68792f2404bf024dd37950051e686920acb9991c6d83f73b997d1dca1c8"}, {0xe0, 0x103, 0x9, "883e65e168cc4f4c8d371ac050460bbfd136c1dc2810e4f769ff50813cee6cb6a8f191a9c52cc53fa0e0021b44e1a519fb98e3fd5c07f28fa142b7f86f054d634712a51134116c35af86cdb3d2b4eebeb38db967ed7781e25d5cc643243e66ecb5f23c71d6232fc7ea62d8dac8959fa037c5f93394391c513fabc84851c410413b8fe9fcc5566f72987fc01b7013af3243d97128a637aca8a3e715815fd4e73fcaff553fa235d7b57cc1713b464d40570731ad3c5eaeb81406a205138fbc1f588c5e9861b8909f1420b0"}, {0x30, 0x103, 0x6476, "5bc235ac190ad29e1eb26ffb53c26f31c7d96a5fa5bb721c4e0ed840a3d1"}, {0xf0, 0x110, 0x1ff, "342a94b9de7ca526e5d7c051c4f0ddd9bcb1d42b449a2831180cb65f5e48e82af9f193365da37916db4eb932533bc2181e03d6562597eae49048382763e7e23472c4f12a24115c04e36d269edf483c2cfcf85d3f6c6b791b1574e8d3fe092270f6d72dab2f408bd50052fec6b346d0528abb7cb9da20d3bdbad8880bc67dc6286ed6fa14f7dcad73e19c1b20858fc07ff9eb609d41208fd08129d825c923570f8559e8f6371d44e4289d15292c0ee3c30bc7b804a007e842361860382cf05076cb4a242088888ecfb9e2f6d1de0031cd48f18d998ea37bddc2fc"}, {0x10, 0x88, 0x8000}, {0x110, 0x112, 0x3, "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"}, {0xc8, 0xff, 0x8f7d, "b4318c83e33de89f093a9787c9a85c41d92ce208ae9651dfed5995ce1e4a8d0e462e9f05fdc5d61b086656d19b9f033f1f44bacb72bedf1287a24f9446f3075a2608bd6364823eb2574c90294e23acba9d0d166165e8428202e65560dea9279538e75b1bbdd54289b50ce3f809700ac71d1b46424252e2900947b42abaa191c5193b7afa39d5e15545b41cae1b2a116f93a63e745664d2a70dd9e35f911f12261d1407f7886e17f502fe009d02d291ef81b0c0"}, {0xd0, 0x10b, 0x9, "d16b27dcd006eda7e8a41f00ab646b7a5d26138fc2e6348cdbb19cc5079f49249aa50a747c9f8c2320a5747c1e1f3a14f4322b2c95d29a8a062aaa8a1d9bf7a465d159d93d51d170105d1f063d379d6a6bae8cdfc314508faaf6ed401123d9bee108956eca7d59d4f9bb726875e8648800405fed47606d4dee526fa9abe233949709cbbd318a064e09312a27e15b689825c1f81caa96baaacfb4c3cd1da4fe3f43bc8195750e7055971d88122efe8c5f31cffea9de4cbf39483e94"}], 0x580}, 0x81)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000010000040010000000000000020000000300000000000000000000060400"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x28)

18.066679778s ago: executing program 0 (id=2854):
r0 = socket$kcm(0x29, 0x7, 0x0) (async)
socket$kcm(0x22, 0x2, 0x26) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001000)={r1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) (async)
r3 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) (async)
close(r8)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80194, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x90802, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) (async)
recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r8, @ANYBLOB="3ee901"], 0x9a) (async)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804)

18.064501358s ago: executing program 1 (id=2855):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c00000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x80, 0x85, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x62, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x44, 0x0, 0x6, 0x8, 0x4, 0x7f, 0x98bb, 0x0, 0xf3, 0x0, 0x3}, r5, 0x10, r2, 0xe)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000040), 0xcf)
r8 = socket$kcm(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x80631, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x40, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r8, r1})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x86}, 0x0, 0x100, 0xc2be, 0x0, 0x4000000, 0x4, 0x4, 0x0, 0x1000000, 0x0, 0x400000000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
sendmsg$kcm(r8, 0x0, 0x20010)
close(r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17.97693717s ago: executing program 2 (id=2856):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11, 0x68, 0x0, 0x0)
close(r0)
socket$kcm(0x25, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003}, 0x38)
socket$kcm(0x11, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x2, 0x9}], 0x10, 0xd5}, 0x94)
close(0x3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000140)}, 0x10)

17.837083734s ago: executing program 0 (id=2857):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100806, 0x7ff, 0x59, 0x1, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x240d0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x200, 0x0, 0xffffffffffffffff, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000d051c764e08fea70edf9bcea61bcea94af88444eb259d924d197743fd7cc8ba673d1f9a104a7d5d7fbb03db4f2214cd6d29dd44a4a42e6efbf4834b96dae3c9e3fdcd26442ed3331418a6da15942d9a66e0712b555e6da5a8cee8fd3f385edeaedc999fab86b19b5cc5bbd723774786c479ef50f1562d444"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

17.764788265s ago: executing program 4 (id=2858):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
write$cgroup_type(r1, &(0x7f0000000380), 0x9)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0, <r4=>0x0, <r5=>0x0}}}], 0x20}, 0x40000000)
syz_open_procfs$namespace(r3, 0x0)
r6 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0x9, 0x82, 0x6, 0x0, 0x1, 0x200, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3058, 0x6, 0x0, 0x3, 0x4, 0x81, 0x3, 0x0, 0xffffff30, 0x0, 0x8000}, 0x0, 0x6, 0xffffffffffffffff, 0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES64=r5], 0x48)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000280))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x48, 0x5, 0x5, 0xb, 0x9, 0x0, 0xd, 0xc40, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x41ac0cf9, 0x1, @perf_bp, 0x10c000, 0xd, 0xa822, 0x9, 0x4, 0x2b27, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, r3, 0x9, r6, 0x1)
r9 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x9e806080, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x80000000001fe)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)

17.58879402s ago: executing program 2 (id=2859):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x5, [@fwd={0xc}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x2057, [{0xf, 0x0, 0x2}, {0xc, 0x4, 0x800}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x8, [{0x5, 0x5, 0x2}, {0x2, 0x4, 0x1000}, {0x0, 0x3, 0xf}, {0x9, 0x0, 0x2}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @datasec={0x4, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x5f71, 0x8}, {0x5, 0x9, 0x5}], "e7"}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x6f, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xfffff801}, {0x10, 0x10}, {0xa, 0xfffffff2}, {0x4, 0x5}]}]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f0000000580)=""/237, 0x11d, 0xed, 0x1, 0x6, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1f, 0x5, 0x7fff, 0xafbc, 0x370, r1, 0x5, '\x00', r2, r3, 0x4, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

17.55705777s ago: executing program 2 (id=2860):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x41}, 0x80, 0x0}, 0x20048015)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010011201000"})

17.490135682s ago: executing program 0 (id=2861):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x4}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1, 0x0, 0x5}, 0x4880)

17.371840425s ago: executing program 0 (id=2862):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce", 0x4}], 0x1, &(0x7f0000000480)}, 0x844)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
socket$kcm(0x21, 0x2, 0x2)

17.090369241s ago: executing program 1 (id=2863):
socket$kcm(0x1e, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x13, &(0x7f0000000800)=r1, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00Z'], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e000000000000000000000000000000b2685adbc9fc6d556a4ad33e083a53604f4b143e796eef81d39d9d9ef6295aaab0577d78a07dff4648cc7296f15995a71897343a9ff26eb10a826aa70b9e0fe3a172e4ae907e1c7e60fe6753165b0cf59b4e3cff44974da5d32792829f227bf9999317680222f8386a313751fb19f08d887e0000009977fb9c0a88caa8bff0ffa257a58316837a5806ab", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r5 = getpid()
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x7}, 0x10c, 0x2, 0x10000, 0x0, 0x1, 0xfa, 0xff0c, 0x0, 0x2, 0x0, 0x8}, r5, 0xa, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000000000b70400000000000085000000c3000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x40000)
recvmsg(r6, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)

16.989776364s ago: executing program 0 (id=2864):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xf9, &(0x7f00000001c0)=""/249, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x60, 0xd685}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xca, 0x43, &(0x7f0000000540)="fed61b46d47839999fb46b429badaa7e86877ccdc78a93a30f0e52a80952e645b849292a4c97163c9e70867f6d46acce62160ce5bb3742c0e872067b9d02116f7267d108b5871526dfaef40dfe8eb5ad2cb63c292e3a8ee7d57c6b623fe2d66eadcf76a017b8e08d21274c9fffdaec0a2b2ec100d3ef0a626e2c9b0f31b2e6bcc2b579a2ba00714ed78f96357ac002b7309823d98761ef9b971ee40c521a2e2fd5d3c48851b24a64fd1b005894c9f91160e1eaa8892ba8a5670d8b78695e9f0ad236976df94b841041b3", &(0x7f0000000640)=""/67, 0x0, 0x0, 0x72, 0xfc, &(0x7f00000006c0)="3c241328c881700fc9219eb3229d5adfac2b0c87cb53f629bb54201b87f27eea1f4094ee70cfe2c80e92a239723f138cfab1630fce99cd702e17d2a1da539b1cd0b2e2b51e2ad2c1af6113d1db24641c8c66e56f36d091f28aee447a825fd396eb015cf25945d3ca3a6f7ee250cac3949d22", &(0x7f0000000740)="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", 0x5, 0x0, 0x36ac}, 0x50)
recvmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/64, 0x40}, {&(0x7f0000001900)=""/8, 0x8}], 0x3}, 0x2020)

16.823852498s ago: executing program 1 (id=2865):
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4de8)

16.760662549s ago: executing program 4 (id=2866):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='-&]\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x4, 0x4, 0x1, 0x801, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r3], 0xfe33)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffffff7, 0x8, 0x9, 0x8, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000738ad6ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000120000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.704077401s ago: executing program 1 (id=2867):
socket$kcm(0x21, 0x2, 0x2) (async)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x58, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1f3acf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000002b40)="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", 0xfb}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814)
socket$kcm(0xa, 0x6, 0x0) (async)
r4 = socket$kcm(0xa, 0x6, 0x0)
socket$kcm(0x2, 0x2, 0x73)
setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000001100), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x0, 0xbb, &(0x7f0000000e00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e40), &(0x7f00000001c0), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)

16.533245946s ago: executing program 2 (id=2868):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x4f, 0x5f]}}, &(0x7f0000000740)=""/4096, 0x2f, 0x1000, 0x0, 0xf4b8}, 0x28)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020)
sendmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="a21f751aa1c7fce1ae4e36e3f6b29035bc06162b43195655bf303b71756834c6d185a580ca4347dffe9e9b81da1665999e0998f42dfcc3737aed5a5e003f8232ac4391f36fe3f035d59bae438bfb7f7902423339d654c19fd6be861b5d1fbff21e3ab13fa6099962b1153312ae0c2dadba5be9eff648ebe1f7d7c9babd0db32a2a0fe3825bc439317a94859426ccca0f095dc4d5b17bd04b3109fd19939b4190c2925dec2902e4b5d3235dca9878cab2b6657f31a51453ee7aae581501c4fa9c348e64db4e7f3be72eff19ae0fbbdbfd43909b7c595e5e3e0a085293", 0xdc}, {&(0x7f0000000500)="501160d5e27bc41f2ac567134e66610e39a183246c4a9408c30628e8", 0x1c}, {&(0x7f0000000580)="7855c472486b31413aeade850bed4b5f743a6157a36e308f5ebe4f324deae0cffe38d36f9335bf8d5bd28ae9df5fc15d91", 0x31}, {&(0x7f00000005c0)="34e72a13b59795e5b90d875a1d3ee978cb19ba0dc31f7c8091fe92611b5cccdd9378d29a7abfd8ed12507e4cf3c2774bdba3e0f2f50e173c2858c22fb60d4dbf81addcfd38f664cf0b702d712d90f8d1ab43af461de38242c839dae0f3ce1c1fcd62a1b62e2fdafad9e5e9534c0a5afe446b8fa634004a1b64bd691ec5bdb7bfa977a38cbaa175dfe39d987f0ae3b6f00cd35800ad4231dd25f0a8dcc77fbec05c3336d3d3cec17e7f", 0xa9}], 0x4, &(0x7f0000001780)=[{0xc8, 0x1, 0x2, "b67325ccace7bf5000709c41408893c95727a3f80b7178626b3032c575a724f2deaff86e999de7c2dacf7ac816dde24122e1d941e9592be1fd0367bd12d5a529f145eaf089e69b47ce0599bc40a921d8b7b1efde94fb3632575526a63d89392f1f64e40be559f3a1be37d4d154d140d280714c0143563ebd7c41f7353fce7c280d0ed009030e81afc88d761ebd3747b43f53ad9ec1f6f68792f2404bf024dd37950051e686920acb9991c6d83f73b997d1dca1c8"}, {0xe0, 0x103, 0x9, "883e65e168cc4f4c8d371ac050460bbfd136c1dc2810e4f769ff50813cee6cb6a8f191a9c52cc53fa0e0021b44e1a519fb98e3fd5c07f28fa142b7f86f054d634712a51134116c35af86cdb3d2b4eebeb38db967ed7781e25d5cc643243e66ecb5f23c71d6232fc7ea62d8dac8959fa037c5f93394391c513fabc84851c410413b8fe9fcc5566f72987fc01b7013af3243d97128a637aca8a3e715815fd4e73fcaff553fa235d7b57cc1713b464d40570731ad3c5eaeb81406a205138fbc1f588c5e9861b8909f1420b0"}, {0x30, 0x103, 0x6476, "5bc235ac190ad29e1eb26ffb53c26f31c7d96a5fa5bb721c4e0ed840a3d1"}, {0xf0, 0x110, 0x1ff, "342a94b9de7ca526e5d7c051c4f0ddd9bcb1d42b449a2831180cb65f5e48e82af9f193365da37916db4eb932533bc2181e03d6562597eae49048382763e7e23472c4f12a24115c04e36d269edf483c2cfcf85d3f6c6b791b1574e8d3fe092270f6d72dab2f408bd50052fec6b346d0528abb7cb9da20d3bdbad8880bc67dc6286ed6fa14f7dcad73e19c1b20858fc07ff9eb609d41208fd08129d825c923570f8559e8f6371d44e4289d15292c0ee3c30bc7b804a007e842361860382cf05076cb4a242088888ecfb9e2f6d1de0031cd48f18d998ea37bddc2fc"}, {0x10, 0x88, 0x8000}, {0x110, 0x112, 0x3, "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"}, {0xc8, 0xff, 0x8f7d, "b4318c83e33de89f093a9787c9a85c41d92ce208ae9651dfed5995ce1e4a8d0e462e9f05fdc5d61b086656d19b9f033f1f44bacb72bedf1287a24f9446f3075a2608bd6364823eb2574c90294e23acba9d0d166165e8428202e65560dea9279538e75b1bbdd54289b50ce3f809700ac71d1b46424252e2900947b42abaa191c5193b7afa39d5e15545b41cae1b2a116f93a63e745664d2a70dd9e35f911f12261d1407f7886e17f502fe009d02d291ef81b0c0"}, {0xd0, 0x10b, 0x9, "d16b27dcd006eda7e8a41f00ab646b7a5d26138fc2e6348cdbb19cc5079f49249aa50a747c9f8c2320a5747c1e1f3a14f4322b2c95d29a8a062aaa8a1d9bf7a465d159d93d51d170105d1f063d379d6a6bae8cdfc314508faaf6ed401123d9bee108956eca7d59d4f9bb726875e8648800405fed47606d4dee526fa9abe233949709cbbd318a064e09312a27e15b689825c1f81caa96baaacfb4c3cd1da4fe3f43bc8195750e7055971d88122efe8c5f31cffea9de4cbf39483e94"}], 0x580}, 0x81)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000010000040010000000000000020000000300000000000000000000060400"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x28)

16.466968077s ago: executing program 4 (id=2869):
r0 = socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000000c0))
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

16.466386767s ago: executing program 0 (id=2870):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x41fc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a00)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x3, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000321, 0xe, 0x0, &(0x7f0000000300)="00f5cc1051170000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000b00)='FREEZING\x00', 0x9)

15.902833591s ago: executing program 2 (id=2871):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) (async)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x2, 0x0) (async)
r1 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0xfffffffffffffffd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15.782429933s ago: executing program 4 (id=2872):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

15.616500577s ago: executing program 1 (id=2873):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x102280, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x102280, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="14000000320081024e81798ead4cb9040c1d0800", 0x14}], 0x1}, 0x20004000)
close(r3)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000f00000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000001864000003000000000000000004000085000000ae00000018140000", @ANYRES32, @ANYBLOB="000000000000000095000000000000007d790c0001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0xffffceb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r14) (async)
close(r14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.195986921s ago: executing program 32 (id=2870):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x41fc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a00)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x3, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000321, 0xe, 0x0, &(0x7f0000000300)="00f5cc1051170000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000b00)='FREEZING\x00', 0x9)

188.223065ms ago: executing program 33 (id=2873):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x102280, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x102280, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="14000000320081024e81798ead4cb9040c1d0800", 0x14}], 0x1}, 0x20004000)
close(r3)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000f00000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000001864000003000000000000000004000085000000ae00000018140000", @ANYRES32, @ANYBLOB="000000000000000095000000000000007d790c0001000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0xffffceb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r14) (async)
close(r14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

89.759108ms ago: executing program 34 (id=2871):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) (async)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x2, 0x0) (async)
r1 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0xfffffffffffffffd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

0s ago: executing program 35 (id=2872):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

1310'.
[  220.301677][ T8505] netlink: 'syz.0.1307': attribute type 10 has an invalid length.
[  220.357182][ T8505] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1307'.
[  220.504663][ T8518] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1314'.
[  221.255378][ T8551] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1324'.
[  221.614001][ T8559] IPv6: pim6reg1: Disabled Multicast RS
[  222.434191][ T8574] netlink: 'syz.0.1328': attribute type 3 has an invalid length.
[  222.512447][ T8574] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1328'.
[  222.918200][ T8594] netlink: 'syz.1.1334': attribute type 10 has an invalid length.
[  222.937924][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1334'.
[  225.387599][ T8651] netlink: 'syz.3.1350': attribute type 10 has an invalid length.
[  225.397078][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1350'.
[  225.617508][ T8662] netlink: 'syz.2.1352': attribute type 10 has an invalid length.
[  225.656815][ T8662] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1352'.
[  226.570884][ T8667] delete_channel: no stack
[  226.697992][ T8697] device syzkaller0 entered promiscuous mode
[  229.928009][ T8712] netlink: 'syz.1.1366': attribute type 21 has an invalid length.
[  229.935956][ T8712] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1366'.
[  229.945293][ T8713] netlink: 'syz.0.1365': attribute type 10 has an invalid length.
[  229.953588][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1365'.
[  229.972371][ T8724] netlink: 'syz.3.1370': attribute type 21 has an invalid length.
[  229.980214][ T8724] netlink: 'syz.3.1370': attribute type 6 has an invalid length.
[  230.448822][ T8746] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  230.504295][ T8746] netlink: 'syz.2.1375': attribute type 3 has an invalid length.
[  230.519729][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'.
[  232.408871][ T8770] netlink: 'syz.2.1384': attribute type 10 has an invalid length.
[  232.424115][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1384'.
[  232.595074][ T8781] netlink: 'syz.0.1387': attribute type 5 has an invalid length.
[  232.628352][ T8786] netlink: 'syz.1.1388': attribute type 2 has an invalid length.
[  232.663454][ T8786] netlink: 193088 bytes leftover after parsing attributes in process `syz.1.1388'.
[  232.765863][ T4289] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  233.171443][ T8808] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  233.227906][ T8809] FAULT_INJECTION: forcing a failure.
[  233.227906][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.285376][ T8809] CPU: 1 PID: 8809 Comm: syz.4.1395 Not tainted syzkaller #0
[  233.292823][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.303176][ T8809] Call Trace:
[  233.307091][ T8809]  <TASK>
[  233.310051][ T8809]  dump_stack_lvl+0x188/0x24e
[  233.314775][ T8809]  ? show_regs_print_info+0x12/0x12
[  233.320017][ T8809]  ? load_image+0x410/0x410
[  233.324572][ T8809]  ? __lock_acquire+0x7c40/0x7c40
[  233.329657][ T8809]  should_fail_ex+0x390/0x4c0
[  233.334388][ T8809]  _copy_from_user+0x2c/0x170
[  233.339102][ T8809]  ___sys_sendmsg+0x1c3/0x360
[  233.343830][ T8809]  ? __sys_sendmsg+0x2a0/0x2a0
[  233.348856][ T8809]  __se_sys_sendmsg+0x1c3/0x2b0
[  233.353749][ T8809]  ? __x64_sys_sendmsg+0x80/0x80
[  233.358758][ T8809]  ? syscall_enter_from_user_mode+0x2a/0x80
[  233.364694][ T8809]  do_syscall_64+0x4c/0xa0
[  233.369150][ T8809]  ? clear_bhb_loop+0x60/0xb0
[  233.373859][ T8809]  ? clear_bhb_loop+0x60/0xb0
[  233.378571][ T8809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.384496][ T8809] RIP: 0033:0x7fc3a659e0d9
[  233.388949][ T8809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.408579][ T8809] RSP: 002b:00007fc3a7550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.417027][ T8809] RAX: ffffffffffffffda RBX: 00007fc3a6825fa0 RCX: 00007fc3a659e0d9
[  233.425026][ T8809] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  233.433031][ T8809] RBP: 00007fc3a7550090 R08: 0000000000000000 R09: 0000000000000000
[  233.441032][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.449032][ T8809] R13: 00007fc3a6826038 R14: 00007fc3a6825fa0 R15: 00007ffc0059a9c8
[  233.457073][ T8809]  </TASK>
[  233.925989][ T8814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1398'.
[  234.898590][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1402'.
[  236.673985][ T8863] validate_nla: 2 callbacks suppressed
[  236.674000][ T8863] netlink: 'syz.3.1412': attribute type 10 has an invalid length.
[  236.687652][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'.
[  237.119748][ T8899] sctp: [Deprecated]: syz.1.1423 (pid 8899) Use of int in maxseg socket option.
[  237.119748][ T8899] Use struct sctp_assoc_value instead
[  237.134652][ T8900] sctp: [Deprecated]: syz.1.1423 (pid 8900) Use of int in maxseg socket option.
[  237.134652][ T8900] Use struct sctp_assoc_value instead
[  240.126670][ T8966] netlink: 'syz.1.1444': attribute type 10 has an invalid length.
[  240.135498][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'.
[  240.290683][ T8975] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1449'.
[  240.826297][ T8990] netlink: 'syz.2.1456': attribute type 15 has an invalid length.
[  240.842679][ T8990] netlink: 'syz.2.1456': attribute type 7 has an invalid length.
[  241.337501][ T9019] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  243.458729][ T9019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1463'.
[  243.468013][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  243.479399][ T9019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.502988][ T9042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1471'.
[  244.039556][ T4289] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  244.130192][ T9082] netlink: 'syz.3.1485': attribute type 10 has an invalid length.
[  244.159184][ T9082] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1485'.
[  244.789246][ T9096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1487'.
[  244.889403][ T9101] netlink: 'syz.0.1492': attribute type 10 has an invalid length.
[  245.282538][ T9120] netlink: 'syz.1.1498': attribute type 11 has an invalid length.
[  245.324089][ T9120] netlink: 'syz.1.1498': attribute type 6 has an invalid length.
[  245.343290][ T9120] netlink: 125060 bytes leftover after parsing attributes in process `syz.1.1498'.
[  245.666892][ T9122] delete_channel: no stack
[  247.158721][ T9165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1512'.
[  247.559147][ T9182] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1517'.
[  247.726869][ T9182] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1517'.
[  247.750824][ T9182] netlink: zone id is out of range
[  247.776932][ T9182] netlink: zone id is out of range
[  248.229885][ T9213] netlink: 'syz.0.1524': attribute type 21 has an invalid length.
[  248.299512][ T9213] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1524'.
[  248.351208][ T9213] netlink: 'syz.0.1524': attribute type 4 has an invalid length.
[  248.949709][ T9236] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.1533'.
[  248.985163][ T9236] netlink: zone id is out of range
[  249.411172][ T9255] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1539'.
[  249.442071][ T9252] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1539'.
[  249.865781][ T9266] device hsr0 entered promiscuous mode
[  250.842987][ T9296] netlink: 'syz.1.1552': attribute type 25 has an invalid length.
[  250.876959][ T9296] netlink: 'syz.1.1552': attribute type 29 has an invalid length.
[  250.971322][ T9300] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1552'.
[  251.685336][ T9317] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1560'.
[  251.780824][ T9317] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  252.601445][ T9353] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  252.626473][ T9353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1572'.
[  253.046293][ T9359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.053663][ T9359] IPv6: NLM_F_CREATE should be set when creating new route
[  253.061083][ T9359] IPv6: NLM_F_CREATE should be set when creating new route
[  253.068416][ T9359] IPv6: NLM_F_CREATE should be set when creating new route
[  253.802875][ T9385] netlink: 'syz.4.1580': attribute type 10 has an invalid length.
[  253.846546][ T9385] device netdevsim0 entered promiscuous mode
[  254.360587][ T9402] netlink: 'syz.3.1588': attribute type 11 has an invalid length.
[  254.390718][ T9402] netlink: 184220 bytes leftover after parsing attributes in process `syz.3.1588'.
[  254.527382][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.917517][ T9408] device hsr0 entered promiscuous mode
[  254.924007][ T9408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  255.100614][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1593'.
[  255.664165][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  255.670544][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  255.745718][ T9444] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1600'.
[  256.488022][ T9463] netlink: 'syz.0.1606': attribute type 10 has an invalid length.
[  256.519592][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1606'.
[  256.532001][ T9464] netlink: 'syz.2.1608': attribute type 10 has an invalid length.
[  256.543879][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1608'.
[  256.613025][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.620344][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.746296][ T9477] netlink: 'syz.0.1611': attribute type 21 has an invalid length.
[  256.762013][ T9477] netlink: 'syz.0.1611': attribute type 6 has an invalid length.
[  256.771460][ T9477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'.
[  256.801140][ T9480] netlink: 'syz.2.1612': attribute type 10 has an invalid length.
[  257.060504][ T9480] device veth0_vlan left promiscuous mode
[  257.126918][ T9480] device veth0_vlan entered promiscuous mode
[  257.237245][ T9480] team0: Device veth0_vlan failed to register rx_handler
[  257.395840][ T9485] device veth1_macvtap left promiscuous mode
[  257.818268][ T9507] netlink: 'syz.3.1621': attribute type 10 has an invalid length.
[  257.827969][ T9507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1621'.
[  258.422124][ T9527] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  258.458305][ T9527] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  258.516040][ T9528] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  258.539149][ T9533] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  259.052506][ T9550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1636'.
[  259.271903][ T4289] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  259.563058][ T9576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1644'.
[  260.117815][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1649'.
[  260.287742][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1650'.
[  260.301198][ T9609] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1652'.
[  260.328436][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1652'.
[  260.367566][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1652'.
[  260.384715][ T9614] device veth0_macvtap left promiscuous mode
[  260.614930][ T9623] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1656'.
[  261.162957][ T9645] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1663'.
[  261.213176][ T9645] netlink: zone id is out of range
[  261.236444][ T9645] netlink: zone id is out of range
[  261.253364][ T9645] netlink: zone id is out of range
[  261.274312][ T9645] netlink: zone id is out of range
[  261.296617][ T9645] netlink: zone id is out of range
[  261.330808][ T9645] netlink: zone id is out of range
[  261.370388][ T9645] netlink: zone id is out of range
[  261.397248][ T9645] netlink: zone id is out of range
[  261.416882][ T9645] netlink: zone id is out of range
[  261.424837][ T9645] netlink: zone id is out of range
[  261.456054][ T9645] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1663'.
[  261.479870][ T9653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1665'.
[  261.919434][ T9662] validate_nla: 10 callbacks suppressed
[  261.919453][ T9662] netlink: 'syz.1.1667': attribute type 3 has an invalid length.
[  262.099832][ T9662] netlink: 'syz.1.1667': attribute type 3 has an invalid length.
[  262.587425][ T9675] device bridge_slave_1 left promiscuous mode
[  262.617072][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.678221][ T9675] device bridge_slave_0 left promiscuous mode
[  262.715074][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.948396][ T9691] netlink: 'syz.4.1678': attribute type 10 has an invalid length.
[  263.479466][ T9716] netlink: 'syz.4.1686': attribute type 1 has an invalid length.
[  264.759917][ T4289] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  264.811688][ T9740] netlink: 'syz.4.1692': attribute type 10 has an invalid length.
[  264.820183][ T9740] __nla_validate_parse: 24 callbacks suppressed
[  264.820219][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1692'.
[  265.870882][ T9782] netlink: 'syz.4.1708': attribute type 2 has an invalid length.
[  265.881893][ T9783] netlink: 'syz.0.1709': attribute type 1 has an invalid length.
[  265.898544][ T9782] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1708'.
[  265.924930][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'.
[  266.290395][ T4289] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[  267.460278][ T9818] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1721'.
[  267.610185][ T9818] device bridge_slave_0 left promiscuous mode
[  267.670890][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.915200][ T9818] team0: Port device bridge0 removed
[  268.236000][ T9852] FAULT_INJECTION: forcing a failure.
[  268.236000][ T9852] name failslab, interval 1, probability 0, space 0, times 0
[  268.285638][ T9852] CPU: 0 PID: 9852 Comm: syz.1.1730 Not tainted syzkaller #0
[  268.293106][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  268.303219][ T9852] Call Trace:
[  268.306536][ T9852]  <TASK>
[  268.309510][ T9852]  dump_stack_lvl+0x188/0x24e
[  268.314253][ T9852]  ? show_regs_print_info+0x12/0x12
[  268.319509][ T9852]  ? load_image+0x410/0x410
[  268.324081][ T9852]  ? __might_sleep+0xd0/0xd0
[  268.328727][ T9852]  ? __lock_acquire+0x7c40/0x7c40
[  268.333824][ T9852]  should_fail_ex+0x390/0x4c0
[  268.338568][ T9852]  should_failslab+0x5/0x20
[  268.343099][ T9852]  slab_pre_alloc_hook+0x59/0x300
[  268.348160][ T9852]  ? __lock_acquire+0x138a/0x7c40
[  268.353231][ T9852]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  268.358998][ T9852]  __kmem_cache_alloc_node+0x4f/0x270
[  268.364424][ T9852]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  268.370190][ T9852]  __kmalloc+0xa3/0x240
[  268.374408][ T9852]  tomoyo_realpath_from_path+0xe2/0x5c0
[  268.376112][ T9850] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1729'.
[  268.379987][ T9852]  ? tomoyo_domain+0xd2/0x120
[  268.380042][ T9852]  ? tomoyo_path_number_perm+0x205/0x650
[  268.380068][ T9852]  tomoyo_path_number_perm+0x22f/0x650
[  268.380095][ T9852]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  268.380126][ T9852]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  268.380152][ T9852]  ? ksys_write+0x1ce/0x260
[  268.380182][ T9852]  ? common_file_perm+0x171/0x1c0
[  268.380312][ T9852]  ? __fget_files+0x28/0x460
[  268.380379][ T9852]  security_file_ioctl+0x6c/0xa0
[  268.380416][ T9852]  __se_sys_ioctl+0x48/0x170
[  268.380460][ T9852]  do_syscall_64+0x4c/0xa0
[  268.380487][ T9852]  ? clear_bhb_loop+0x60/0xb0
[  268.380513][ T9852]  ? clear_bhb_loop+0x60/0xb0
[  268.380547][ T9852]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.380572][ T9852] RIP: 0033:0x7f6d8319e0d9
[  268.465530][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.485178][ T9852] RSP: 002b:00007f6d84019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  268.493614][ T9852] RAX: ffffffffffffffda RBX: 00007f6d83425fa0 RCX: 00007f6d8319e0d9
[  268.493637][ T9852] RDX: 0000200000000a80 RSI: 00000000c008240a RDI: 0000000000000003
[  268.493652][ T9852] RBP: 00007f6d84019090 R08: 0000000000000000 R09: 0000000000000000
[  268.493665][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.493677][ T9852] R13: 00007f6d83426038 R14: 00007f6d83425fa0 R15: 00007fff25189a78
[  268.493737][ T9852]  </TASK>
[  268.575764][ T9852] ERROR: Out of memory at tomoyo_realpath_from_path.
[  268.593067][ T9850] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  268.805546][ T9859] netlink: 'syz.4.1732': attribute type 2 has an invalid length.
[  268.837553][ T9859] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.1732'.
[  269.226955][ T9880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1739'.
[  269.621542][ T9894] FAULT_INJECTION: forcing a failure.
[  269.621542][ T9894] name failslab, interval 1, probability 0, space 0, times 0
[  269.648330][ T9894] CPU: 0 PID: 9894 Comm: syz.3.1744 Not tainted syzkaller #0
[  269.655777][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  269.665871][ T9894] Call Trace:
[  269.669183][ T9894]  <TASK>
[  269.672152][ T9894]  dump_stack_lvl+0x188/0x24e
[  269.676887][ T9894]  ? show_regs_print_info+0x12/0x12
[  269.682170][ T9894]  ? load_image+0x410/0x410
[  269.686718][ T9894]  ? __might_sleep+0xd0/0xd0
[  269.691339][ T9894]  ? __lock_acquire+0x7c40/0x7c40
[  269.696416][ T9894]  should_fail_ex+0x390/0x4c0
[  269.701149][ T9894]  should_failslab+0x5/0x20
[  269.705679][ T9894]  slab_pre_alloc_hook+0x59/0x300
[  269.710750][ T9894]  ? tomoyo_encode+0x28a/0x550
[  269.715559][ T9894]  __kmem_cache_alloc_node+0x4f/0x270
[  269.720989][ T9894]  ? tomoyo_encode+0x28a/0x550
[  269.725791][ T9894]  __kmalloc+0xa3/0x240
[  269.730000][ T9894]  tomoyo_encode+0x28a/0x550
[  269.734647][ T9894]  tomoyo_realpath_from_path+0x578/0x5c0
[  269.740328][ T9894]  ? tomoyo_domain+0xd2/0x120
[  269.745058][ T9894]  ? tomoyo_path_number_perm+0x205/0x650
[  269.750781][ T9894]  tomoyo_path_number_perm+0x22f/0x650
[  269.756286][ T9894]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  269.762926][ T9894]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  269.768428][ T9894]  ? ksys_write+0x1ce/0x260
[  269.772976][ T9894]  ? common_file_perm+0x171/0x1c0
[  269.778138][ T9894]  ? __fget_files+0x28/0x460
[  269.782809][ T9894]  security_file_ioctl+0x6c/0xa0
[  269.787793][ T9894]  __se_sys_ioctl+0x48/0x170
[  269.792430][ T9894]  do_syscall_64+0x4c/0xa0
[  269.796883][ T9894]  ? clear_bhb_loop+0x60/0xb0
[  269.801595][ T9894]  ? clear_bhb_loop+0x60/0xb0
[  269.806317][ T9894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.812293][ T9894] RIP: 0033:0x7f416299e0d9
[  269.816750][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.836396][ T9894] RSP: 002b:00007f41638ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  269.844859][ T9894] RAX: ffffffffffffffda RBX: 00007f4162c25fa0 RCX: 00007f416299e0d9
[  269.852868][ T9894] RDX: 0000200000000a80 RSI: 00000000c008240a RDI: 0000000000000003
[  269.860883][ T9894] RBP: 00007f41638ef090 R08: 0000000000000000 R09: 0000000000000000
[  269.868896][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.876918][ T9894] R13: 00007f4162c26038 R14: 00007f4162c25fa0 R15: 00007ffda54ae0d8
[  269.884979][ T9894]  </TASK>
[  270.175261][ T9894] ERROR: Out of memory at tomoyo_realpath_from_path.
[  270.814046][ T9911] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1747'.
[  271.038717][ T9915] netlink: 'syz.3.1750': attribute type 2 has an invalid length.
[  271.112771][ T9915] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1750'.
[  271.435790][ T9937] netlink: 'syz.4.1756': attribute type 3 has an invalid length.
[  271.461057][ T9937] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1756'.
[  271.670404][ T9943] netlink: 'syz.3.1759': attribute type 10 has an invalid length.
[  271.709566][ T9945] netlink: 'syz.4.1760': attribute type 1 has an invalid length.
[  271.738429][ T9945] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1760'.
[  271.743163][ T9943] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  271.789195][ T9941] netlink: 'syz.0.1769': attribute type 10 has an invalid length.
[  271.804150][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'.
[  271.820280][ T9947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1760'.
[  271.858740][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1760'.
[  272.143182][ T9954] device hsr0 entered promiscuous mode
[  272.641257][ T9987] netlink: 'syz.3.1772': attribute type 3 has an invalid length.
[  272.662401][ T9987] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1772'.
[  272.845155][ T9986] netlink: 'syz.0.1774': attribute type 10 has an invalid length.
[  272.857419][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1774'.
[  273.214963][T10005] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1781'.
[  274.036177][T10036] netlink: 'syz.2.1791': attribute type 10 has an invalid length.
[  274.247008][T10028] netlink: 'syz.1.1789': attribute type 3 has an invalid length.
[  275.416598][T10084] netlink: 'syz.1.1804': attribute type 10 has an invalid length.
[  275.498609][T10083] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  275.528475][T10083] CPU: 0 PID: 10083 Comm: syz.2.1805 Not tainted syzkaller #0
[  275.536003][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  275.546086][T10083] Call Trace:
[  275.549386][T10083]  <TASK>
[  275.552336][T10083]  dump_stack_lvl+0x188/0x24e
[  275.557055][T10083]  ? show_regs_print_info+0x12/0x12
[  275.562289][T10083]  ? load_image+0x410/0x410
[  275.566842][T10083]  sysfs_warn_dup+0x8a/0xa0
[  275.571379][T10083]  sysfs_do_create_link_sd+0xc0/0x110
[  275.576796][T10083]  device_add+0x83b/0x1050
[  275.581248][T10083]  wiphy_register+0x1d8b/0x2aa0
[  275.586136][T10083]  ? lock_chain_count+0x20/0x20
[  275.591035][T10083]  ? cfg80211_event_work+0x40/0x40
[  275.596195][T10083]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  275.602301][T10083]  ieee80211_register_hw+0x2d48/0x39f0
[  275.607809][T10083]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  275.614012][T10083]  ? ieee80211_register_hw+0xf61/0x39f0
[  275.619593][T10083]  ? ieee80211_register_hw+0xf61/0x39f0
[  275.625180][T10083]  ? ieee80211_tasklet_handler+0x20/0x20
[  275.630910][T10083]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  275.636845][T10083]  ? __debug_object_init+0xed/0x440
[  275.642086][T10083]  ? memset+0x1e/0x40
[  275.646107][T10083]  ? __hrtimer_init+0x189/0x270
[  275.650985][T10083]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  275.656730][T10083]  ? memcpy+0x3c/0x60
[  275.660750][T10083]  hwsim_new_radio_nl+0xab7/0xc90
[  275.665829][T10083]  genl_family_rcv_msg_doit+0x22f/0x350
[  275.671415][T10083]  ? end_current_label_crit_section+0x170/0x170
[  275.677702][T10083]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  275.683637][T10083]  ? bpf_lsm_capable+0x5/0x10
[  275.688349][T10083]  ? security_capable+0x85/0xb0
[  275.693242][T10083]  genl_rcv_msg+0x601/0x790
[  275.697770][T10083]  ? genl_bind+0x360/0x360
[  275.702193][T10083]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  275.708554][T10083]  netlink_rcv_skb+0x1ef/0x440
[  275.713331][T10083]  ? genl_bind+0x360/0x360
[  275.717742][T10083]  ? netlink_ack+0x1160/0x1160
[  275.722511][T10083]  ? down_read+0x1a8/0x2d0
[  275.726925][T10083]  genl_rcv+0x24/0x40
[  275.730899][T10083]  netlink_unicast+0x7ad/0x920
[  275.735672][T10083]  netlink_sendmsg+0x8ad/0xbd0
[  275.740438][T10083]  ? netlink_getsockopt+0x550/0x550
[  275.745636][T10083]  ? apparmor_socket_sendmsg+0x8a/0x330
[  275.751181][T10083]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  275.756458][T10083]  ? security_socket_sendmsg+0x7c/0xa0
[  275.761918][T10083]  ? netlink_getsockopt+0x550/0x550
[  275.767112][T10083]  ____sys_sendmsg+0x5ed/0x9a0
[  275.771887][T10083]  ? __sys_sendmsg_sock+0x30/0x30
[  275.776907][T10083]  ? __import_iovec+0x306/0x510
[  275.781763][T10083]  ? import_iovec+0x6f/0xa0
[  275.786272][T10083]  ___sys_sendmsg+0x2a2/0x360
[  275.790958][T10083]  ? __sys_sendmsg+0x2a0/0x2a0
[  275.795759][T10083]  __se_sys_sendmsg+0x1c3/0x2b0
[  275.800611][T10083]  ? perf_trace_preemptirq_template+0x268/0x320
[  275.806848][T10083]  ? __x64_sys_sendmsg+0x80/0x80
[  275.811796][T10083]  ? lockdep_hardirqs_on+0x94/0x140
[  275.816994][T10083]  do_syscall_64+0x4c/0xa0
[  275.821415][T10083]  ? clear_bhb_loop+0x60/0xb0
[  275.826108][T10083]  ? clear_bhb_loop+0x60/0xb0
[  275.830808][T10083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.836714][T10083] RIP: 0033:0x7fcf3dd9e0d9
[  275.841130][T10083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.860734][T10083] RSP: 002b:00007fcf3ec04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.869142][T10083] RAX: ffffffffffffffda RBX: 00007fcf3e026090 RCX: 00007fcf3dd9e0d9
[  275.877106][T10083] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  275.885076][T10083] RBP: 00007fcf3de35024 R08: 0000000000000000 R09: 0000000000000000
[  275.893041][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.901007][T10083] R13: 00007fcf3e026128 R14: 00007fcf3e026090 R15: 00007ffd88e09478
[  275.908990][T10083]  </TASK>
[  276.230943][T10102] __nla_validate_parse: 4 callbacks suppressed
[  276.230978][T10102] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1811'.
[  277.320445][T10123] netlink: 'syz.2.1819': attribute type 10 has an invalid length.
[  277.339137][T10123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1819'.
[  277.370042][T10129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1818'.
[  277.845887][T10136] device syzkaller0 entered promiscuous mode
[  277.966286][T10144] delete_channel: no stack
[  278.318921][T10155] netlink: 'syz.4.1828': attribute type 11 has an invalid length.
[  278.347868][T10155] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1828'.
[  278.583138][T10145] delete_channel: no stack
[  279.102726][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.421957][T10155] netlink: 'syz.4.1828': attribute type 10 has an invalid length.
[  284.434311][T10155] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  284.446353][T10178] netlink: 'syz.3.1834': attribute type 10 has an invalid length.
[  284.542679][T10178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1834'.
[  284.734182][T10198] netlink: 'syz.4.1842': attribute type 10 has an invalid length.
[  284.754857][T10198] bridge0: port 3(hsr0) entered disabled state
[  284.761221][T10198] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.768573][T10198] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.202780][T10216] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1847'.
[  285.651478][T10230] netlink: 'syz.1.1852': attribute type 10 has an invalid length.
[  285.698228][T10234] netlink: 'syz.3.1854': attribute type 3 has an invalid length.
[  285.718839][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1854'.
[  285.747410][T10230] 8021q: adding VLAN 0 to HW filter on device team0
[  285.841788][T10230] bond0: (slave team0): Enslaving as an active interface with an up link
[  285.894767][T10238] netlink: 'syz.4.1855': attribute type 10 has an invalid length.
[  285.913570][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'.
[  286.574667][T10260] netlink: 'syz.0.1863': attribute type 39 has an invalid length.
[  286.793012][T10260] device hsr_slave_1 left promiscuous mode
[  286.936064][T10275] netlink: 'syz.3.1866': attribute type 10 has an invalid length.
[  287.166113][T10281] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1869'.
[  287.200401][T10284] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1870'.
[  287.266731][T10287] netlink: 'syz.4.1870': attribute type 1 has an invalid length.
[  287.328220][T10287] netlink: 'syz.4.1870': attribute type 4 has an invalid length.
[  287.488993][T10287] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1870'.
[  287.601400][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1871'.
[  288.367503][T10304] FAULT_INJECTION: forcing a failure.
[  288.367503][T10304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.382514][T10304] CPU: 1 PID: 10304 Comm: syz.4.1876 Not tainted syzkaller #0
[  288.390028][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  288.400101][T10304] Call Trace:
[  288.403376][T10304]  <TASK>
[  288.406302][T10304]  dump_stack_lvl+0x188/0x24e
[  288.410983][T10304]  ? show_regs_print_info+0x12/0x12
[  288.416178][T10304]  ? load_image+0x410/0x410
[  288.420681][T10304]  ? __lock_acquire+0x7c40/0x7c40
[  288.425708][T10304]  should_fail_ex+0x390/0x4c0
[  288.430385][T10304]  _copy_from_user+0x2c/0x170
[  288.435055][T10304]  __sys_bpf+0x2ea/0x780
[  288.439299][T10304]  ? bpf_link_show_fdinfo+0x380/0x380
[  288.444678][T10304]  ? lock_chain_count+0x20/0x20
[  288.449537][T10304]  __x64_sys_bpf+0x78/0x90
[  288.453954][T10304]  do_syscall_64+0x4c/0xa0
[  288.458369][T10304]  ? clear_bhb_loop+0x60/0xb0
[  288.463043][T10304]  ? clear_bhb_loop+0x60/0xb0
[  288.467715][T10304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  288.473603][T10304] RIP: 0033:0x7fc3a659e0d9
[  288.478012][T10304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.497612][T10304] RSP: 002b:00007fc3a752f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  288.506018][T10304] RAX: ffffffffffffffda RBX: 00007fc3a6826090 RCX: 00007fc3a659e0d9
[  288.513983][T10304] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004
[  288.521947][T10304] RBP: 00007fc3a752f090 R08: 0000000000000000 R09: 0000000000000000
[  288.529913][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.537882][T10304] R13: 00007fc3a6826128 R14: 00007fc3a6826090 R15: 00007ffc0059a9c8
[  288.545860][T10304]  </TASK>
[  288.947925][T10318] FAULT_INJECTION: forcing a failure.
[  288.947925][T10318] name failslab, interval 1, probability 0, space 0, times 0
[  289.003761][T10318] CPU: 1 PID: 10318 Comm: syz.0.1891 Not tainted syzkaller #0
[  289.011307][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.021392][T10318] Call Trace:
[  289.024668][T10318]  <TASK>
[  289.027593][T10318]  dump_stack_lvl+0x188/0x24e
[  289.032315][T10318]  ? show_regs_print_info+0x12/0x12
[  289.037511][T10318]  ? load_image+0x410/0x410
[  289.042015][T10318]  ? __might_sleep+0xd0/0xd0
[  289.046598][T10318]  ? __lock_acquire+0x7c40/0x7c40
[  289.051619][T10318]  should_fail_ex+0x390/0x4c0
[  289.056304][T10318]  should_failslab+0x5/0x20
[  289.060798][T10318]  slab_pre_alloc_hook+0x59/0x300
[  289.065818][T10318]  ? vmemdup_user+0x45/0x1d0
[  289.070408][T10318]  __kmem_cache_alloc_node+0x4f/0x270
[  289.075778][T10318]  ? vmemdup_user+0x45/0x1d0
[  289.080365][T10318]  __kmalloc_node+0xa2/0x240
[  289.084959][T10318]  vmemdup_user+0x45/0x1d0
[  289.089372][T10318]  map_get_next_key+0x21d/0x620
[  289.094251][T10318]  ? bpf_lsm_bpf+0x5/0x10
[  289.098586][T10318]  __sys_bpf+0x466/0x780
[  289.102831][T10318]  ? bpf_link_show_fdinfo+0x380/0x380
[  289.108214][T10318]  ? lock_chain_count+0x20/0x20
[  289.113152][T10318]  __x64_sys_bpf+0x78/0x90
[  289.117588][T10318]  do_syscall_64+0x4c/0xa0
[  289.122009][T10318]  ? clear_bhb_loop+0x60/0xb0
[  289.126689][T10318]  ? clear_bhb_loop+0x60/0xb0
[  289.131364][T10318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.137254][T10318] RIP: 0033:0x7fcd5cb9e0d9
[  289.141668][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.161272][T10318] RSP: 002b:00007fcd5adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  289.169689][T10318] RAX: ffffffffffffffda RBX: 00007fcd5ce26090 RCX: 00007fcd5cb9e0d9
[  289.177675][T10318] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004
[  289.185654][T10318] RBP: 00007fcd5adf6090 R08: 0000000000000000 R09: 0000000000000000
[  289.193621][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.201584][T10318] R13: 00007fcd5ce26128 R14: 00007fcd5ce26090 R15: 00007ffd1bb1d368
[  289.209560][T10318]  </TASK>
[  290.964103][T10348] validate_nla: 6 callbacks suppressed
[  290.964121][T10348] netlink: 'syz.4.1890': attribute type 10 has an invalid length.
[  291.066551][T10348] bond0: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  291.128448][T10348] 8021q: adding VLAN 0 to HW filter on device team0
[  291.175640][T10348] bond0: (slave team0): Enslaving as an active interface with an up link
[  291.823323][T10370] FAULT_INJECTION: forcing a failure.
[  291.823323][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.848085][T10370] CPU: 0 PID: 10370 Comm: syz.1.1896 Not tainted syzkaller #0
[  291.855589][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  291.865660][T10370] Call Trace:
[  291.868952][T10370]  <TASK>
[  291.871895][T10370]  dump_stack_lvl+0x188/0x24e
[  291.876600][T10370]  ? show_regs_print_info+0x12/0x12
[  291.881826][T10370]  ? load_image+0x410/0x410
[  291.886353][T10370]  ? __lock_acquire+0x7c40/0x7c40
[  291.891408][T10370]  should_fail_ex+0x390/0x4c0
[  291.896133][T10370]  _copy_from_user+0x2c/0x170
[  291.900827][T10370]  vmemdup_user+0xa8/0x1d0
[  291.905308][T10370]  map_get_next_key+0x21d/0x620
[  291.910168][T10370]  ? bpf_lsm_bpf+0x5/0x10
[  291.914500][T10370]  __sys_bpf+0x466/0x780
[  291.918744][T10370]  ? bpf_link_show_fdinfo+0x380/0x380
[  291.924132][T10370]  ? lock_chain_count+0x20/0x20
[  291.928991][T10370]  __x64_sys_bpf+0x78/0x90
[  291.933400][T10370]  do_syscall_64+0x4c/0xa0
[  291.937813][T10370]  ? clear_bhb_loop+0x60/0xb0
[  291.942483][T10370]  ? clear_bhb_loop+0x60/0xb0
[  291.947155][T10370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.953043][T10370] RIP: 0033:0x7f6d8319e0d9
[  291.957448][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.977048][T10370] RSP: 002b:00007f6d83ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  291.985455][T10370] RAX: ffffffffffffffda RBX: 00007f6d83426090 RCX: 00007f6d8319e0d9
[  291.993418][T10370] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004
[  292.001380][T10370] RBP: 00007f6d83ff8090 R08: 0000000000000000 R09: 0000000000000000
[  292.009338][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.017299][T10370] R13: 00007f6d83426128 R14: 00007f6d83426090 R15: 00007fff25189a78
[  292.025271][T10370]  </TASK>
[  293.236019][T10399] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1907'.
[  293.667486][T10409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1910'.
[  293.735776][T10409] bond0: (slave bond_slave_0): Releasing backup interface
[  293.847392][T10400] delete_channel: no stack
[  293.853972][T10409] net_ratelimit: 5996 callbacks suppressed
[  293.853986][T10409] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  293.988236][T10413] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1910'.
[  294.251436][T10428] FAULT_INJECTION: forcing a failure.
[  294.251436][T10428] name failslab, interval 1, probability 0, space 0, times 0
[  294.286241][T10428] CPU: 0 PID: 10428 Comm: syz.3.1913 Not tainted syzkaller #0
[  294.293764][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  294.303835][T10428] Call Trace:
[  294.307123][T10428]  <TASK>
[  294.310058][T10428]  dump_stack_lvl+0x188/0x24e
[  294.314783][T10428]  ? show_regs_print_info+0x12/0x12
[  294.320002][T10428]  ? load_image+0x410/0x410
[  294.324522][T10428]  ? __might_sleep+0xd0/0xd0
[  294.329127][T10428]  ? __lock_acquire+0x7c40/0x7c40
[  294.334171][T10428]  should_fail_ex+0x390/0x4c0
[  294.338869][T10428]  should_failslab+0x5/0x20
[  294.343389][T10428]  slab_pre_alloc_hook+0x59/0x300
[  294.348429][T10428]  ? kvmalloc_node+0x6c/0x180
[  294.353121][T10428]  __kmem_cache_alloc_node+0x4f/0x270
[  294.358507][T10428]  ? kvmalloc_node+0x6c/0x180
[  294.363201][T10428]  __kmalloc_node+0xa2/0x240
[  294.367818][T10428]  kvmalloc_node+0x6c/0x180
[  294.372341][T10428]  map_get_next_key+0x288/0x620
[  294.377215][T10428]  __sys_bpf+0x466/0x780
[  294.381480][T10428]  ? bpf_link_show_fdinfo+0x380/0x380
[  294.386883][T10428]  ? lock_chain_count+0x20/0x20
[  294.391757][T10428]  __x64_sys_bpf+0x78/0x90
[  294.396188][T10428]  do_syscall_64+0x4c/0xa0
[  294.400619][T10428]  ? clear_bhb_loop+0x60/0xb0
[  294.405311][T10428]  ? clear_bhb_loop+0x60/0xb0
[  294.410008][T10428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.415910][T10428] RIP: 0033:0x7f416299e0d9
[  294.420326][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.439939][T10428] RSP: 002b:00007f41638ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  294.448372][T10428] RAX: ffffffffffffffda RBX: 00007f4162c26090 RCX: 00007f416299e0d9
[  294.456349][T10428] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004
[  294.464321][T10428] RBP: 00007f41638ce090 R08: 0000000000000000 R09: 0000000000000000
[  294.472293][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.480264][T10428] R13: 00007f4162c26128 R14: 00007f4162c26090 R15: 00007ffda54ae0d8
[  294.488253][T10428]  </TASK>
[  294.656482][T10437] device veth1_macvtap left promiscuous mode
[  294.763389][T10440] device veth1_macvtap entered promiscuous mode
[  294.810467][T10440] device macsec0 entered promiscuous mode
[  294.888622][T10436] netlink: 'syz.0.1918': attribute type 10 has an invalid length.
[  295.379189][T10457] netlink: 'syz.0.1923': attribute type 10 has an invalid length.
[  295.398817][T10457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1923'.
[  295.740145][T10475] netlink: 'syz.4.1929': attribute type 3 has an invalid length.
[  295.829011][T10475] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.1929'.
[  296.307942][T10501] netlink: 'syz.0.1937': attribute type 10 has an invalid length.
[  296.346827][T10501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1937'.
[  296.472091][T10515] netlink: 'syz.3.1941': attribute type 16 has an invalid length.
[  296.484111][T10515] netlink: 'syz.3.1941': attribute type 3 has an invalid length.
[  296.496882][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1941'.
[  297.931253][T10544] netlink: 'syz.4.1949': attribute type 7 has an invalid length.
[  297.974651][T10544] netlink: 'syz.4.1949': attribute type 7 has an invalid length.
[  298.161054][T10549] netlink: 'syz.0.1952': attribute type 10 has an invalid length.
[  298.169898][T10549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1952'.
[  298.392894][T10559] netlink: 'syz.4.1956': attribute type 39 has an invalid length.
[  298.679212][T10564] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1957'.
[  298.692135][T10577] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1960'.
[  298.720842][T10566] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.721645][T10578] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1958'.
[  298.747629][T10579] netlink: 'syz.1.1960': attribute type 10 has an invalid length.
[  298.762487][T10578] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  298.840687][T10579] bond0: (slave team0): Releasing backup interface
[  298.877282][T10579] team0 (unregistering): Port device team_slave_0 removed
[  298.930671][T10579] team0 (unregistering): Port device team_slave_1 removed
[  298.941752][T10579] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.951343][T10579] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.960598][T10579] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.969875][T10579] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.990039][T10579] team0 (unregistering): Port device geneve1 removed
[  299.086220][T10587] netlink: 61955 bytes leftover after parsing attributes in process `syz.2.1964'.
[  299.098362][T10587] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1964'.
[  299.565016][T10603] netlink: 'syz.0.1969': attribute type 10 has an invalid length.
[  299.592569][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1969'.
[  300.211371][T10631] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1980'.
[  300.231512][T10631] device hsr_slave_0 left promiscuous mode
[  300.303215][T10637] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1980'.
[  300.323567][T10637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1980'.
[  300.382592][T10637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1980'.
[  300.436258][T10644] netlink: 'syz.3.1986': attribute type 21 has an invalid length.
[  302.268435][T10708] validate_nla: 1 callbacks suppressed
[  302.268473][T10708] netlink: 'syz.1.2008': attribute type 10 has an invalid length.
[  302.810645][T10732] netlink: 'syz.3.2014': attribute type 7 has an invalid length.
[  302.836899][T10732] netlink: 'syz.3.2014': attribute type 7 has an invalid length.
[  302.870410][T10734] device syzkaller0 entered promiscuous mode
[  303.116632][T10742] delete_channel: no stack
[  304.722407][T10753] netlink: 'syz.2.2019': attribute type 10 has an invalid length.
[  304.741027][T10753] device nlmon0 entered promiscuous mode
[  304.760668][T10753] team0: Device nlmon0 is of different type
[  304.781033][T10760] netlink: 'syz.0.2022': attribute type 10 has an invalid length.
[  304.795399][T10760] __nla_validate_parse: 9 callbacks suppressed
[  304.795414][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'.
[  305.015859][T10769] netlink: 'syz.0.2026': attribute type 4 has an invalid length.
[  305.181260][T10774] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2027'.
[  306.517040][T10804] netlink: 'syz.2.2037': attribute type 10 has an invalid length.
[  306.571963][T10804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2037'.
[  307.438841][T10838] netlink: 'syz.3.2049': attribute type 2 has an invalid length.
[  307.515496][T10838] netlink: 'syz.3.2049': attribute type 8 has an invalid length.
[  307.562857][T10838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'.
[  307.623349][T10843] netlink: 'syz.3.2049': attribute type 2 has an invalid length.
[  307.652650][T10843] netlink: 'syz.3.2049': attribute type 8 has an invalid length.
[  307.682670][T10843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'.
[  308.086090][T10853] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2053'.
[  308.659364][T10858] netlink: 'syz.3.2054': attribute type 10 has an invalid length.
[  308.714992][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2054'.
[  308.765561][T10854] netlink: 'syz.4.2053': attribute type 10 has an invalid length.
[  308.951124][T10861] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2055'.
[  309.648564][T10875] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2060'.
[  309.824313][T10875] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  309.847555][T10875] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  309.858097][T10875] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  310.143931][T10892] device lo entered promiscuous mode
[  310.193371][T10900] FAULT_INJECTION: forcing a failure.
[  310.193371][T10900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.237945][T10900] CPU: 1 PID: 10900 Comm: syz.4.2068 Not tainted syzkaller #0
[  310.245473][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.255542][T10900] Call Trace:
[  310.258826][T10900]  <TASK>
[  310.261762][T10900]  dump_stack_lvl+0x188/0x24e
[  310.266465][T10900]  ? show_regs_print_info+0x12/0x12
[  310.271680][T10900]  ? load_image+0x410/0x410
[  310.276208][T10900]  ? __lock_acquire+0x7c40/0x7c40
[  310.281254][T10900]  should_fail_ex+0x390/0x4c0
[  310.285956][T10900]  _copy_from_user+0x2c/0x170
[  310.290656][T10900]  __copy_msghdr+0x384/0x560
[  310.295272][T10900]  ___sys_sendmsg+0x210/0x360
[  310.299974][T10900]  ? __sys_sendmsg+0x2a0/0x2a0
[  310.304792][T10900]  ? __lock_acquire+0x7c40/0x7c40
[  310.309882][T10900]  __se_sys_sendmsg+0x1c3/0x2b0
[  310.314752][T10900]  ? __x64_sys_sendmsg+0x80/0x80
[  310.319738][T10900]  ? lockdep_hardirqs_on+0x94/0x140
[  310.324951][T10900]  do_syscall_64+0x4c/0xa0
[  310.329377][T10900]  ? clear_bhb_loop+0x60/0xb0
[  310.334065][T10900]  ? clear_bhb_loop+0x60/0xb0
[  310.338757][T10900]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  310.344659][T10900] RIP: 0033:0x7fc3a659e0d9
[  310.349081][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.368704][T10900] RSP: 002b:00007fc3a7550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.377136][T10900] RAX: ffffffffffffffda RBX: 00007fc3a6825fa0 RCX: 00007fc3a659e0d9
[  310.385118][T10900] RDX: 0000000000004010 RSI: 0000200000002580 RDI: 0000000000000003
[  310.393117][T10900] RBP: 00007fc3a7550090 R08: 0000000000000000 R09: 0000000000000000
[  310.401101][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.409084][T10900] R13: 00007fc3a6826038 R14: 00007fc3a6825fa0 R15: 00007ffc0059a9c8
[  310.417131][T10900]  </TASK>
[  310.509595][T10901] netlink: 'syz.1.2067': attribute type 1 has an invalid length.
[  310.532631][T10901] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2067'.
[  310.675813][T10906] IPv6: NLM_F_CREATE should be specified when creating new route
[  311.137952][T10921] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2077'.
[  311.748657][T10932] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2080'.
[  312.177996][T10952] FAULT_INJECTION: forcing a failure.
[  312.177996][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.191185][T10952] CPU: 0 PID: 10952 Comm: syz.2.2086 Not tainted syzkaller #0
[  312.198671][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  312.208751][T10952] Call Trace:
[  312.212045][T10952]  <TASK>
[  312.214995][T10952]  dump_stack_lvl+0x188/0x24e
[  312.219703][T10952]  ? show_regs_print_info+0x12/0x12
[  312.224931][T10952]  ? load_image+0x410/0x410
[  312.229459][T10952]  ? __lock_acquire+0x7c40/0x7c40
[  312.234562][T10952]  should_fail_ex+0x390/0x4c0
[  312.239281][T10952]  _copy_from_user+0x2c/0x170
[  312.243981][T10952]  ____sys_sendmsg+0x31a/0x9a0
[  312.248771][T10952]  ? __lock_acquire+0x7c40/0x7c40
[  312.253826][T10952]  ? __sys_sendmsg_sock+0x30/0x30
[  312.258878][T10952]  ? __import_iovec+0x306/0x510
[  312.263763][T10952]  ? import_iovec+0x6f/0xa0
[  312.268292][T10952]  ___sys_sendmsg+0x2a2/0x360
[  312.273004][T10952]  ? __sys_sendmsg+0x2a0/0x2a0
[  312.277813][T10952]  ? __lock_acquire+0x7c40/0x7c40
[  312.282953][T10952]  __se_sys_sendmsg+0x1c3/0x2b0
[  312.287841][T10952]  ? ct_nmi_exit+0x145/0x1c0
[  312.292454][T10952]  ? __x64_sys_sendmsg+0x80/0x80
[  312.297435][T10952]  ? lockdep_hardirqs_on+0x94/0x140
[  312.302659][T10952]  do_syscall_64+0x4c/0xa0
[  312.307079][T10952]  ? clear_bhb_loop+0x60/0xb0
[  312.311753][T10952]  ? clear_bhb_loop+0x60/0xb0
[  312.316427][T10952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  312.322315][T10952] RIP: 0033:0x7fcf3dd9e0d9
[  312.326725][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.346323][T10952] RSP: 002b:00007fcf3ec25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  312.354730][T10952] RAX: ffffffffffffffda RBX: 00007fcf3e025fa0 RCX: 00007fcf3dd9e0d9
[  312.362693][T10952] RDX: 0000000000004010 RSI: 0000200000002580 RDI: 0000000000000003
[  312.370655][T10952] RBP: 00007fcf3ec25090 R08: 0000000000000000 R09: 0000000000000000
[  312.378617][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.386580][T10952] R13: 00007fcf3e026038 R14: 00007fcf3e025fa0 R15: 00007ffd88e09478
[  312.394560][T10952]  </TASK>
[  312.667012][ T4289] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  312.674685][ T4289] Bluetooth: hci3: Invalid handle: 0x5393 > 0x0eff
[  312.697378][T10958] netlink: 'syz.2.2088': attribute type 3 has an invalid length.
[  312.717681][T10958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2088'.
[  313.215971][T10979] netlink: 'syz.4.2095': attribute type 21 has an invalid length.
[  313.324038][T10980] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2096'.
[  313.658254][T10995] FAULT_INJECTION: forcing a failure.
[  313.658254][T10995] name failslab, interval 1, probability 0, space 0, times 0
[  313.729323][T10995] CPU: 1 PID: 10995 Comm: syz.1.2099 Not tainted syzkaller #0
[  313.736853][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.746933][T10995] Call Trace:
[  313.750226][T10995]  <TASK>
[  313.753178][T10995]  dump_stack_lvl+0x188/0x24e
[  313.757890][T10995]  ? show_regs_print_info+0x12/0x12
[  313.763120][T10995]  ? load_image+0x410/0x410
[  313.767657][T10995]  ? __might_sleep+0xd0/0xd0
[  313.772268][T10995]  ? __lock_acquire+0x7c40/0x7c40
[  313.777591][T10995]  should_fail_ex+0x390/0x4c0
[  313.782305][T10995]  should_failslab+0x5/0x20
[  313.786823][T10995]  slab_pre_alloc_hook+0x59/0x300
[  313.791883][T10995]  ? __scm_send+0x5f6/0x1350
[  313.796500][T10995]  __kmem_cache_alloc_node+0x4f/0x270
[  313.801892][T10995]  ? __scm_send+0x5f6/0x1350
[  313.806501][T10995]  kmalloc_trace+0x26/0xe0
[  313.810949][T10995]  __scm_send+0x5f6/0x1350
[  313.815420][T10995]  unix_dgram_sendmsg+0x164/0x16f0
[  313.820595][T10995]  ? aa_sk_perm+0x81f/0x950
[  313.825124][T10995]  ? __might_fault+0xa6/0x120
[  313.829821][T10995]  ? aa_af_perm+0x340/0x340
[  313.834402][T10995]  ? unix_dgram_poll+0x680/0x680
[  313.839379][T10995]  ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0
[  313.845855][T10995]  ? apparmor_socket_sendmsg+0x8a/0x330
[  313.851433][T10995]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  313.856738][T10995]  ? security_socket_sendmsg+0x7c/0xa0
[  313.862218][T10995]  ? unix_dgram_poll+0x680/0x680
[  313.867185][T10995]  ____sys_sendmsg+0x5ed/0x9a0
[  313.871971][T10995]  ? __lock_acquire+0x7c40/0x7c40
[  313.877029][T10995]  ? __sys_sendmsg_sock+0x30/0x30
[  313.882095][T10995]  ? __import_iovec+0x306/0x510
[  313.886992][T10995]  ? import_iovec+0x6f/0xa0
[  313.891539][T10995]  ___sys_sendmsg+0x2a2/0x360
[  313.896265][T10995]  ? __sys_sendmsg+0x2a0/0x2a0
[  313.901088][T10995]  ? __lock_acquire+0x7c40/0x7c40
[  313.906180][T10995]  __se_sys_sendmsg+0x1c3/0x2b0
[  313.911066][T10995]  ? __x64_sys_sendmsg+0x80/0x80
[  313.916053][T10995]  ? lockdep_hardirqs_on+0x94/0x140
[  313.921284][T10995]  do_syscall_64+0x4c/0xa0
[  313.925724][T10995]  ? clear_bhb_loop+0x60/0xb0
[  313.930423][T10995]  ? clear_bhb_loop+0x60/0xb0
[  313.935132][T10995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  313.941046][T10995] RIP: 0033:0x7f6d8319e0d9
[  313.945479][T10995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.965110][T10995] RSP: 002b:00007f6d84019028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  313.973566][T10995] RAX: ffffffffffffffda RBX: 00007f6d83425fa0 RCX: 00007f6d8319e0d9
[  313.981578][T10995] RDX: 0000000000004010 RSI: 0000200000002580 RDI: 0000000000000003
[  313.989572][T10995] RBP: 00007f6d84019090 R08: 0000000000000000 R09: 0000000000000000
[  313.997568][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.005554][T10995] R13: 00007f6d83426038 R14: 00007f6d83425fa0 R15: 00007fff25189a78
[  314.013563][T10995]  </TASK>
[  314.258256][T11002] netlink: 'syz.2.2102': attribute type 21 has an invalid length.
[  314.283023][T11004] netlink: 'syz.4.2103': attribute type 5 has an invalid length.
[  314.435850][T11011] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2107'.
[  315.062020][T11025] FAULT_INJECTION: forcing a failure.
[  315.062020][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.149781][T11025] CPU: 1 PID: 11025 Comm: syz.3.2113 Not tainted syzkaller #0
[  315.157310][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  315.167388][T11025] Call Trace:
[  315.170688][T11025]  <TASK>
[  315.173635][T11025]  dump_stack_lvl+0x188/0x24e
[  315.178338][T11025]  ? show_regs_print_info+0x12/0x12
[  315.183564][T11025]  ? load_image+0x410/0x410
[  315.188096][T11025]  ? __lock_acquire+0x7c40/0x7c40
[  315.193159][T11025]  should_fail_ex+0x390/0x4c0
[  315.197872][T11025]  strncpy_from_user+0x32/0x340
[  315.202751][T11025]  bpf_prog_load+0x200/0x1530
[  315.207465][T11025]  ? map_freeze+0x390/0x390
[  315.211999][T11025]  ? __might_fault+0xa6/0x120
[  315.216707][T11025]  ? __might_fault+0xa6/0x120
[  315.221394][T11025]  ? __might_fault+0xc2/0x120
[  315.226085][T11025]  ? __might_fault+0xa6/0x120
[  315.230784][T11025]  ? bpf_lsm_bpf+0x5/0x10
[  315.235155][T11025]  ? security_bpf+0x7a/0xa0
[  315.239726][T11025]  __sys_bpf+0x5b8/0x780
[  315.243999][T11025]  ? bpf_link_show_fdinfo+0x380/0x380
[  315.249435][T11025]  ? lock_chain_count+0x20/0x20
[  315.254323][T11025]  __x64_sys_bpf+0x78/0x90
[  315.258767][T11025]  do_syscall_64+0x4c/0xa0
[  315.263217][T11025]  ? clear_bhb_loop+0x60/0xb0
[  315.267915][T11025]  ? clear_bhb_loop+0x60/0xb0
[  315.272624][T11025]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.278587][T11025] RIP: 0033:0x7f416299e0d9
[  315.283014][T11025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.302643][T11025] RSP: 002b:00007f41638ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  315.311085][T11025] RAX: ffffffffffffffda RBX: 00007f4162c25fa0 RCX: 00007f416299e0d9
[  315.319086][T11025] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  315.327084][T11025] RBP: 00007f41638ef090 R08: 0000000000000000 R09: 0000000000000000
[  315.335079][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.343065][T11025] R13: 00007f4162c26038 R14: 00007f4162c25fa0 R15: 00007ffda54ae0d8
[  315.351070][T11025]  </TASK>
[  315.690351][T11046] netlink: 'syz.2.2115': attribute type 10 has an invalid length.
[  315.945370][T11050] FAULT_INJECTION: forcing a failure.
[  315.945370][T11050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.970659][T11046] device gre0 entered promiscuous mode
[  315.976703][T11046] team0: Device gre0 is of different type
[  315.983266][T11050] CPU: 1 PID: 11050 Comm: syz.0.2117 Not tainted syzkaller #0
[  315.990758][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  316.000831][T11050] Call Trace:
[  316.004125][T11050]  <TASK>
[  316.007072][T11050]  dump_stack_lvl+0x188/0x24e
[  316.011779][T11050]  ? show_regs_print_info+0x12/0x12
[  316.017015][T11050]  ? load_image+0x410/0x410
[  316.021540][T11050]  ? __lock_acquire+0x7c40/0x7c40
[  316.026588][T11050]  ? snprintf+0xe5/0x140
[  316.030853][T11050]  should_fail_ex+0x390/0x4c0
[  316.035558][T11050]  _copy_to_user+0x2c/0x130
[  316.040083][T11050]  simple_read_from_buffer+0xe3/0x150
[  316.045482][T11050]  proc_fail_nth_read+0x1a6/0x220
[  316.050526][T11050]  ? proc_fault_inject_write+0x310/0x310
[  316.056178][T11050]  ? fsnotify_perm+0x248/0x550
[  316.060955][T11050]  ? proc_fault_inject_write+0x310/0x310
[  316.066606][T11050]  vfs_read+0x2db/0x960
[  316.070790][T11050]  ? kernel_read+0x1e0/0x1e0
[  316.075401][T11050]  ? __fget_files+0x28/0x460
[  316.080019][T11050]  ? __fget_files+0x3fc/0x460
[  316.084730][T11050]  ? __fdget_pos+0x2ae/0x360
[  316.089338][T11050]  ? ksys_read+0x70/0x260
[  316.093692][T11050]  ksys_read+0x14d/0x260
[  316.098015][T11050]  ? vfs_write+0x9a0/0x9a0
[  316.102454][T11050]  ? lockdep_hardirqs_on+0x94/0x140
[  316.107668][T11050]  do_syscall_64+0x4c/0xa0
[  316.112097][T11050]  ? clear_bhb_loop+0x60/0xb0
[  316.116792][T11050]  ? clear_bhb_loop+0x60/0xb0
[  316.121487][T11050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.127402][T11050] RIP: 0033:0x7fcd5cb5e90e
[  316.131843][T11050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  316.151492][T11050] RSP: 002b:00007fcd5d993fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  316.159949][T11050] RAX: ffffffffffffffda RBX: 00007fcd5d9946c0 RCX: 00007fcd5cb5e90e
[  316.167949][T11050] RDX: 000000000000000f RSI: 00007fcd5d9940a0 RDI: 0000000000000005
[  316.175943][T11050] RBP: 00007fcd5d994090 R08: 0000000000000000 R09: 0000000000000000
[  316.183939][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.191936][T11050] R13: 00007fcd5ce26038 R14: 00007fcd5ce25fa0 R15: 00007ffd1bb1d368
[  316.199948][T11050]  </TASK>
[  317.104663][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  317.111242][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  317.387508][T11076] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2126'.
[  318.313188][T11095] sctp: [Deprecated]: syz.0.2133 (pid 11095) Use of int in maxseg socket option.
[  318.313188][T11095] Use struct sctp_assoc_value instead
[  319.259872][T11112] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2136'.
[  319.608403][T11127] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2144'.
[  319.654120][T11127] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  320.402353][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  321.718532][T11184] cgroup: fork rejected by pids controller in /syz0
[  322.365628][T11204] netlink: 'syz.1.2170': attribute type 10 has an invalid length.
[  322.377047][T11204] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2170'.
[  322.392831][T11204] device hsr0 entered promiscuous mode
[  323.131351][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.215657][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.374026][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.895188][T11246] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2183'.
[  323.992650][T11245] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2183'.
[  324.366469][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  324.376999][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  324.385945][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  324.394704][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  324.412939][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  324.424853][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.309424][T11255] chnl_net:caif_netlink_parms(): no params data found
[  326.462551][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  328.542603][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  328.732951][T11255] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.740090][T11255] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.833076][T11255] device bridge_slave_0 entered promiscuous mode
[  328.896979][T11255] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.912647][T11255] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.920804][T11255] device bridge_slave_1 entered promiscuous mode
[  328.976790][T11314] cgroup: fork rejected by pids controller in /syz4
[  329.029110][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.061245][T11322] netlink: 'syz.2.2203': attribute type 13 has an invalid length.
[  329.077264][T11322] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2203'.
[  329.104879][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.188777][T11255] team0: Port device team_slave_0 added
[  329.234468][T11255] team0: Port device team_slave_1 added
[  329.394982][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.406755][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.502497][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.573076][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.580070][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.686349][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.856548][T11345] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2210'.
[  329.903546][T11255] device hsr_slave_0 entered promiscuous mode
[  329.952688][T11255] device hsr_slave_1 entered promiscuous mode
[  329.962762][T11255] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.981645][T11255] Cannot create hsr debugfs directory
[  330.623698][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  330.768527][T11360] netlink: 'syz.1.2215': attribute type 10 has an invalid length.
[  330.822998][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.832187][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.839978][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.848506][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.856071][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  330.876934][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  330.904930][T11364] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2216'.
[  331.061778][   T46] device veth0_macvtap left promiscuous mode
[  331.091085][   T46] device veth1_vlan left promiscuous mode
[  332.278057][ T4285] Bluetooth: hci4: Malformed HCI Event: 0x22
[  332.390657][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.536560][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.702458][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  332.953379][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  332.986259][   T46] bond0 (unregistering): Released all slaves
[  333.178547][T11363] device syzkaller0 entered promiscuous mode
[  334.943866][T11425] netlink: 'syz.3.2227': attribute type 10 has an invalid length.
[  334.953454][T11425] device hsr0 left promiscuous mode
[  334.964091][T11425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  335.011055][T11428] netlink: 'syz.2.2228': attribute type 11 has an invalid length.
[  335.032553][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[  335.039323][T11428] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2228'.
[  335.104609][T11427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.256972][T11435] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.2230'.
[  335.294311][T11435] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2230'.
[  335.342432][T11435] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2230'.
[  335.527655][T11255] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  335.562859][T11255] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  335.604741][T11255] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  335.675187][T11255] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  335.738256][T11372] chnl_net:caif_netlink_parms(): no params data found
[  335.768330][T11450] netlink: 'syz.3.2232': attribute type 3 has an invalid length.
[  335.783737][T11450] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2232'.
[  335.799928][   T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.022210][   T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.279028][   T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.362972][T11372] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.373869][T11372] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.393656][T11372] device bridge_slave_0 entered promiscuous mode
[  336.455573][   T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.512646][T11372] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.519758][T11372] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.530234][T11372] device bridge_slave_1 entered promiscuous mode
[  336.600646][T11255] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.629216][T11372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.672805][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  336.693878][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  336.729165][T11255] 8021q: adding VLAN 0 to HW filter on device team0
[  336.784527][T11372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.018231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  337.048493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  337.103417][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[  337.103596][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.116735][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.201647][T11372] team0: Port device team_slave_0 added
[  337.247363][T11372] team0: Port device team_slave_1 added
[  337.425160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  337.483780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  337.515506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  337.568501][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.575715][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.609022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  337.653501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  338.283115][T11372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.290107][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.318015][T11372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.337434][T11515] netlink: 'syz.1.2244': attribute type 10 has an invalid length.
[  338.348792][T11520] netlink: 'syz.1.2244': attribute type 10 has an invalid length.
[  338.381993][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  338.429549][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  338.472822][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  338.492849][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  338.527537][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  338.564011][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  338.594146][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  338.609144][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  338.633509][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  338.672903][T11372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.701830][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.772558][T11372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.890949][   T46] device 0 left promiscuous mode
[  339.131016][T11372] device hsr_slave_0 entered promiscuous mode
[  339.156488][T11372] device hsr_slave_1 entered promiscuous mode
[  339.192624][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[  339.198908][T11372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.237522][T11372] Cannot create hsr debugfs directory
[  339.847831][T11573] netlink: 'syz.3.2255': attribute type 29 has an invalid length.
[  340.075195][T11102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  340.092595][T11102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  340.186906][T11255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.268118][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  340.279197][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  340.360009][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  340.372229][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  340.387237][T11255] device veth0_vlan entered promiscuous mode
[  340.409637][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  340.422223][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  340.441509][T11255] device veth1_vlan entered promiscuous mode
[  340.522524][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  340.531047][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  340.545283][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  340.556236][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  340.589392][T11255] device veth0_macvtap entered promiscuous mode
[  340.611664][T11255] device veth1_macvtap entered promiscuous mode
[  340.655467][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.668091][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.692311][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.703175][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.716757][T11255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.735964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  340.747620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  340.760198][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  340.769772][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  340.780262][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.799269][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.811056][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.824977][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.837477][T11255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.869032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  340.878760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  340.891621][T11255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.901459][T11255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.911318][T11255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.920158][T11255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.967701][   T46] bond0: (slave wlan1): Releasing backup interface
[  341.097164][T11372] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  341.137875][T11372] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  341.150709][T11372] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  341.178043][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.187424][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.196416][T11372] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  341.207753][   T46] device hsr_slave_0 left promiscuous mode
[  341.216635][   T46] device hsr_slave_1 left promiscuous mode
[  341.224759][   T46] bridge0: port 3(hsr0) entered disabled state
[  341.232433][   T46] device bridge_slave_1 left promiscuous mode
[  341.239320][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.247956][   T46] device bridge_slave_0 left promiscuous mode
[  341.254232][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.273573][   T46] device veth1_macvtap left promiscuous mode
[  341.280455][   T46] device veth1_vlan left promiscuous mode
[  341.286778][   T46] device veth0_vlan left promiscuous mode
[  341.747853][   T46] team0 (unregistering): Port device team_slave_1 removed
[  341.786095][   T46] team0 (unregistering): Port device team_slave_0 removed
[  341.825913][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.867678][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.085875][   T46] bond0 (unregistering): (slave team0): Releasing backup interface
[  342.094658][   T46] bond0 (unregistering): (slave team0): last VLAN challenged slave left bond - VLAN blocking is removed
[  342.108243][   T46] team0 (unregistering): Port device bridge0 removed
[  342.136930][   T46] bond0 (unregistering): Released all slaves
[  342.219656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  342.255925][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.265246][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.275542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  342.419021][T11372] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.441844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  342.450600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  342.470512][T11372] 8021q: adding VLAN 0 to HW filter on device team0
[  342.484309][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  342.493757][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  342.502204][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.509352][ T8242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.533030][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  342.542597][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  342.559542][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  342.568704][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.575883][ T8242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.585647][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  342.597338][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  342.643404][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  342.655095][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  342.664705][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  342.681914][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  342.710170][T11372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  342.772891][T11372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.806381][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  342.828652][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  342.865644][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  342.912078][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  342.921422][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.930560][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.939141][T11606] netlink: 'syz.1.2268': attribute type 39 has an invalid length.
[  343.050442][T11606] device hsr_slave_1 left promiscuous mode
[  343.914760][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  343.933754][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  343.945863][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.729130][T11705] netlink: 'syz.1.2282': attribute type 9 has an invalid length.
[  344.769494][T11705] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2282'.
[  344.888792][T11711] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2284'.
[  344.964336][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  344.997454][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  345.079304][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  345.136021][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  345.165801][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  345.174200][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  345.193797][T11372] device veth0_vlan entered promiscuous mode
[  345.241223][T11372] device veth1_vlan entered promiscuous mode
[  345.272836][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  345.340745][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  345.359943][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  345.385787][T11372] device veth0_macvtap entered promiscuous mode
[  345.415263][T11372] device veth1_macvtap entered promiscuous mode
[  345.453467][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.516545][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.528561][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.539437][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.549311][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.560707][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.572044][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.583301][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.595717][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.612531][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.652405][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.664880][T11372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.675729][T11372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.696040][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.726156][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  345.746167][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  345.771775][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  345.809480][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  345.857013][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  345.895809][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.927817][T11372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.963976][T11372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.998922][T11372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.008656][T11372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.268289][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.299909][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.341151][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  346.431051][T11102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.453500][T11102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.461070][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  346.718102][T11773] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2211'.
[  346.737253][T11772] netlink: 'syz.1.2305': attribute type 13 has an invalid length.
[  346.823445][T11770] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.2211'.
[  347.018239][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'.
[  347.401981][T11797] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.2322'.
[  347.654237][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'.
[  347.711969][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'.
[  347.758223][T11810] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2315'.
[  347.785640][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'.
[  347.790625][T11818] netlink: 'syz.2.2317': attribute type 9 has an invalid length.
[  347.816506][T11816] netlink: 'syz.2.2317': attribute type 13 has an invalid length.
[  348.119519][T11833] netlink: 'syz.0.2318': attribute type 1 has an invalid length.
[  348.399406][T11839] netlink: 'syz.1.2325': attribute type 10 has an invalid length.
[  349.679822][T11880] netlink: 'syz.1.2337': attribute type 2 has an invalid length.
[  350.739584][T11937] __nla_validate_parse: 9 callbacks suppressed
[  350.739601][T11937] netlink: 126612 bytes leftover after parsing attributes in process `syz.3.2353'.
[  350.775612][T11937] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2353'.
[  350.829095][T11939] netlink: 'syz.2.2354': attribute type 10 has an invalid length.
[  350.860424][T11939] team0: Device hsr_slave_0 failed to register rx_handler
[  351.030630][T11949] netlink: 'syz.0.2358': attribute type 13 has an invalid length.
[  351.053759][T11952] netlink: 'syz.3.2357': attribute type 2 has an invalid length.
[  351.061749][T11952] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2357'.
[  351.067974][T11949] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2358'.
[  351.170697][T11949] netlink: 'syz.0.2358': attribute type 9 has an invalid length.
[  351.184833][T11949] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2358'.
[  351.653592][T11972] netlink: 'syz.0.2364': attribute type 21 has an invalid length.
[  351.684137][T11974] netlink: 'syz.4.2365': attribute type 10 has an invalid length.
[  351.700763][T11974] device syz_tun entered promiscuous mode
[  351.856819][T11974] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  351.866614][T11979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2365'.
[  352.760648][T11999] netlink: 'syz.1.2372': attribute type 13 has an invalid length.
[  352.780511][T11999] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2372'.
[  352.888875][T11999] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2372'.
[  356.018193][T12024] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2376'.
[  356.082774][T12024] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  356.139025][T12024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.380580][T12046] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2383'.
[  356.441046][T12055] validate_nla: 1 callbacks suppressed
[  356.441089][T12055] netlink: 'syz.2.2388': attribute type 4 has an invalid length.
[  356.490806][T12046] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[  356.530274][T12055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2388'.
[  356.541097][T12046] CPU: 1 PID: 12046 Comm: syz.3.2383 Not tainted syzkaller #0
[  356.548592][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  356.558664][T12046] Call Trace:
[  356.561956][T12046]  <TASK>
[  356.564902][T12046]  dump_stack_lvl+0x188/0x24e
[  356.569606][T12046]  ? show_regs_print_info+0x12/0x12
[  356.574826][T12046]  ? load_image+0x410/0x410
[  356.579360][T12046]  sysfs_warn_dup+0x8a/0xa0
[  356.583887][T12046]  sysfs_do_create_link_sd+0xc0/0x110
[  356.589278][T12046]  device_add+0x83b/0x1050
[  356.593727][T12046]  wiphy_register+0x1d8b/0x2aa0
[  356.598612][T12046]  ? cfg80211_event_work+0x40/0x40
[  356.603736][T12046]  ? minstrel_ht_alloc+0x894/0xa20
[  356.608852][T12046]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  356.614924][T12046]  ieee80211_register_hw+0x2d48/0x39f0
[  356.620389][T12046]  ? ieee80211_register_hw+0xf61/0x39f0
[  356.625927][T12046]  ? ieee80211_register_hw+0xf61/0x39f0
[  356.631477][T12046]  ? ieee80211_tasklet_handler+0x20/0x20
[  356.637101][T12046]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  356.642991][T12046]  ? __debug_object_init+0xed/0x440
[  356.648181][T12046]  ? memset+0x1e/0x40
[  356.652159][T12046]  ? __hrtimer_init+0x189/0x270
[  356.657007][T12046]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  356.662731][T12046]  ? memcpy+0x3c/0x60
[  356.666707][T12046]  hwsim_new_radio_nl+0xab7/0xc90
[  356.671736][T12046]  genl_family_rcv_msg_doit+0x22f/0x350
[  356.677274][T12046]  ? end_current_label_crit_section+0x170/0x170
[  356.683511][T12046]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  356.689402][T12046]  ? bpf_lsm_capable+0x5/0x10
[  356.694072][T12046]  ? security_capable+0x85/0xb0
[  356.698924][T12046]  genl_rcv_msg+0x601/0x790
[  356.703426][T12046]  ? genl_bind+0x360/0x360
[  356.707832][T12046]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  356.714170][T12046]  netlink_rcv_skb+0x1ef/0x440
[  356.718929][T12046]  ? genl_bind+0x360/0x360
[  356.723339][T12046]  ? netlink_ack+0x1160/0x1160
[  356.728105][T12046]  ? down_read+0x1a8/0x2d0
[  356.732515][T12046]  genl_rcv+0x24/0x40
[  356.736487][T12046]  netlink_unicast+0x7ad/0x920
[  356.741284][T12046]  netlink_sendmsg+0x8ad/0xbd0
[  356.746045][T12046]  ? netlink_getsockopt+0x550/0x550
[  356.751236][T12046]  ? apparmor_socket_sendmsg+0x8a/0x330
[  356.756778][T12046]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  356.762051][T12046]  ? security_socket_sendmsg+0x7c/0xa0
[  356.767502][T12046]  ? netlink_getsockopt+0x550/0x550
[  356.772691][T12046]  ____sys_sendmsg+0x5ed/0x9a0
[  356.777456][T12046]  ? __sys_sendmsg_sock+0x30/0x30
[  356.782479][T12046]  ? __import_iovec+0x306/0x510
[  356.787332][T12046]  ? import_iovec+0x6f/0xa0
[  356.791833][T12046]  ___sys_sendmsg+0x2a2/0x360
[  356.796516][T12046]  ? __sys_sendmsg+0x2a0/0x2a0
[  356.801292][T12046]  ? ktime_get+0x7b/0x270
[  356.805634][T12046]  __se_sys_sendmsg+0x1c3/0x2b0
[  356.810482][T12046]  ? __x64_sys_sendmsg+0x80/0x80
[  356.815429][T12046]  ? lockdep_hardirqs_on+0x94/0x140
[  356.820619][T12046]  do_syscall_64+0x4c/0xa0
[  356.825028][T12046]  ? clear_bhb_loop+0x60/0xb0
[  356.829706][T12046]  ? clear_bhb_loop+0x60/0xb0
[  356.834379][T12046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.840274][T12046] RIP: 0033:0x7f416299e0d9
[  356.844685][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.864283][T12046] RSP: 002b:00007f41638ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.872688][T12046] RAX: ffffffffffffffda RBX: 00007f4162c25fa0 RCX: 00007f416299e0d9
[  356.880648][T12046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  356.888609][T12046] RBP: 00007f4162a35024 R08: 0000000000000000 R09: 0000000000000000
[  356.896580][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.904542][T12046] R13: 00007f4162c26038 R14: 00007f4162c25fa0 R15: 00007ffda54ae0d8
[  356.912516][T12046]  </TASK>
[  357.277845][T12064] netlink: 'syz.0.2389': attribute type 10 has an invalid length.
[  357.344016][T12064] device syz_tun entered promiscuous mode
[  357.497453][T12064] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  358.128703][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2389'.
[  358.315549][T12091] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2398'.
[  358.551549][T12091] netlink: 'syz.2.2398': attribute type 3 has an invalid length.
[  358.569494][T12091] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.2398'.
[  358.924642][T12126] netlink: 'syz.4.2404': attribute type 21 has an invalid length.
[  359.732880][T12164] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2417'.
[  359.782037][T12173] netlink: 'syz.3.2417': attribute type 2 has an invalid length.
[  359.802367][T12164] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2417'.
[  359.835612][T12164] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2417'.
[  360.256121][T12193] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2424'.
[  362.297342][T12199] netlink: 'syz.4.2426': attribute type 10 has an invalid length.
[  362.352793][T12199] device veth0_vlan left promiscuous mode
[  362.379711][T12199] device veth0_vlan entered promiscuous mode
[  362.402587][T12199] team0: Device veth0_vlan failed to register rx_handler
[  365.513598][T12060] delete_channel: no stack
[  365.522060][T12208] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2429'.
[  365.544050][T12209] netlink: 'syz.2.2429': attribute type 21 has an invalid length.
[  365.551973][T12209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2429'.
[  365.741569][T12224] netlink: 'syz.4.2432': attribute type 12 has an invalid length.
[  365.752958][T12224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2432'.
[  366.274853][T12245] netlink: 'syz.3.2437': attribute type 2 has an invalid length.
[  368.880981][T12265] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2444'.
[  368.894964][T12265] device bridge_slave_1 entered promiscuous mode
[  369.402197][T12317] device veth1_macvtap left promiscuous mode
[  369.420725][T12317] device macsec0 left promiscuous mode
[  369.703961][T12334] netlink: 'syz.2.2465': attribute type 2 has an invalid length.
[  369.735891][T12334] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2465'.
[  369.988338][T12347] netlink: 'syz.2.2465': attribute type 21 has an invalid length.
[  370.007210][T12347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2465'.
[  370.038915][T12344] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2468'.
[  370.359759][T12363] netlink: 'syz.0.2471': attribute type 10 has an invalid length.
[  370.516519][T12363] device veth0_vlan left promiscuous mode
[  370.572347][T12363] device veth0_vlan entered promiscuous mode
[  370.629940][T12363] team0: Device veth0_vlan failed to register rx_handler
[  370.760869][T12368] netlink: 'syz.1.2474': attribute type 10 has an invalid length.
[  371.056062][T12376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2478'.
[  371.149854][T12383] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2480'.
[  371.240392][T12376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.257657][T12383] netlink: 'syz.0.2480': attribute type 29 has an invalid length.
[  371.320182][T12376] bond0 (unregistering): Released all slaves
[  371.367510][T12386] netlink: 'syz.0.2480': attribute type 10 has an invalid length.
[  371.425485][T12386] team0: Device wg1 is of different type
[  371.499958][T12383] netlink: 'syz.0.2480': attribute type 29 has an invalid length.
[  371.632491][T12390] netlink: 'syz.0.2480': attribute type 29 has an invalid length.
[  372.033342][T12409] netlink: 'syz.0.2486': attribute type 10 has an invalid length.
[  372.041579][T12409] device netdevsim0 entered promiscuous mode
[  372.197444][T12418] netlink: 'syz.4.2489': attribute type 21 has an invalid length.
[  372.238383][T12418] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2489'.
[  373.619570][T12479] FAULT_INJECTION: forcing a failure.
[  373.619570][T12479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  373.637515][T12479] CPU: 1 PID: 12479 Comm: syz.4.2508 Not tainted syzkaller #0
[  373.645014][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  373.655090][T12479] Call Trace:
[  373.658378][T12479]  <TASK>
[  373.661314][T12479]  dump_stack_lvl+0x188/0x24e
[  373.666016][T12479]  ? show_regs_print_info+0x12/0x12
[  373.671237][T12479]  ? load_image+0x410/0x410
[  373.675756][T12479]  ? __lock_acquire+0x7c40/0x7c40
[  373.680800][T12479]  should_fail_ex+0x390/0x4c0
[  373.685494][T12479]  _copy_from_user+0x2c/0x170
[  373.690184][T12479]  __sys_bpf+0x2ea/0x780
[  373.694447][T12479]  ? bpf_link_show_fdinfo+0x380/0x380
[  373.699841][T12479]  ? lock_chain_count+0x20/0x20
[  373.704694][T12479]  __x64_sys_bpf+0x78/0x90
[  373.709106][T12479]  do_syscall_64+0x4c/0xa0
[  373.713516][T12479]  ? clear_bhb_loop+0x60/0xb0
[  373.718186][T12479]  ? clear_bhb_loop+0x60/0xb0
[  373.722859][T12479]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.728748][T12479] RIP: 0033:0x7fc51639e0d9
[  373.733160][T12479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.752758][T12479] RSP: 002b:00007fc517325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  373.761167][T12479] RAX: ffffffffffffffda RBX: 00007fc516625fa0 RCX: 00007fc51639e0d9
[  373.769131][T12479] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 000000000000000f
[  373.777096][T12479] RBP: 00007fc517325090 R08: 0000000000000000 R09: 0000000000000000
[  373.785067][T12479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.793030][T12479] R13: 00007fc516626038 R14: 00007fc516625fa0 R15: 00007ffd9cacede8
[  373.801025][T12479]  </TASK>
[  374.996554][T12499] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2516'.
[  375.041686][T12499] netlink: zone id is out of range
[  375.052693][T12499] netlink: zone id is out of range
[  375.063689][T12499] netlink: zone id is out of range
[  375.095668][T12499] netlink: zone id is out of range
[  375.101347][T12499] netlink: zone id is out of range
[  375.116091][T12499] netlink: zone id is out of range
[  375.136662][T12499] netlink: zone id is out of range
[  375.194116][T12499] netlink: zone id is out of range
[  375.199900][T12499] netlink: zone id is out of range
[  375.233762][T12499] netlink: zone id is out of range
[  375.245307][T12512] FAULT_INJECTION: forcing a failure.
[  375.245307][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.302702][T12512] CPU: 1 PID: 12512 Comm: syz.1.2519 Not tainted syzkaller #0
[  375.310212][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.320284][T12512] Call Trace:
[  375.323577][T12512]  <TASK>
[  375.326524][T12512]  dump_stack_lvl+0x188/0x24e
[  375.331227][T12512]  ? show_regs_print_info+0x12/0x12
[  375.336442][T12512]  ? load_image+0x410/0x410
[  375.340965][T12512]  ? __lock_acquire+0x7c40/0x7c40
[  375.346024][T12512]  should_fail_ex+0x390/0x4c0
[  375.350719][T12512]  _copy_from_user+0x2c/0x170
[  375.355410][T12512]  bpf_obj_get_info_by_fd+0x45b/0x2f70
[  375.360892][T12512]  ? __lock_acquire+0x7c40/0x7c40
[  375.365944][T12512]  ? bpf_map_get_fd_by_id+0x330/0x330
[  375.371342][T12512]  ? get_pid_task+0x1c/0x1e0
[  375.375965][T12512]  ? __might_fault+0xa6/0x120
[  375.380685][T12512]  ? __might_fault+0xc2/0x120
[  375.385353][T12512]  ? __might_fault+0xa6/0x120
[  375.390023][T12512]  ? bpf_lsm_bpf+0x5/0x10
[  375.394344][T12512]  ? security_bpf+0x7a/0xa0
[  375.398849][T12512]  __sys_bpf+0x505/0x780
[  375.403088][T12512]  ? bpf_link_show_fdinfo+0x380/0x380
[  375.408464][T12512]  ? lock_chain_count+0x20/0x20
[  375.413316][T12512]  __x64_sys_bpf+0x78/0x90
[  375.417726][T12512]  do_syscall_64+0x4c/0xa0
[  375.422135][T12512]  ? clear_bhb_loop+0x60/0xb0
[  375.426804][T12512]  ? clear_bhb_loop+0x60/0xb0
[  375.431475][T12512]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.437361][T12512] RIP: 0033:0x7f6d8319e0d9
[  375.441767][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.461363][T12512] RSP: 002b:00007f6d84019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  375.469789][T12512] RAX: ffffffffffffffda RBX: 00007f6d83425fa0 RCX: 00007f6d8319e0d9
[  375.477752][T12512] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 000000000000000f
[  375.485715][T12512] RBP: 00007f6d84019090 R08: 0000000000000000 R09: 0000000000000000
[  375.493677][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.501637][T12512] R13: 00007f6d83426038 R14: 00007f6d83425fa0 R15: 00007fff25189a78
[  375.509610][T12512]  </TASK>
[  375.635019][T12519] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2522'.
[  375.850095][T12522] device syzkaller0 entered promiscuous mode
[  375.867255][T12530] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2525'.
[  375.949180][T12530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.978063][T12530] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  376.023129][T12530] bond0 (unregistering): Released all slaves
[  377.872424][T12550] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2533'.
[  377.885540][T12553] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2533'.
[  378.338135][T12580] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.2542'.
[  378.398992][T12580] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2542'.
[  378.429972][T12589] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2541'.
[  378.452909][T12580] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2542'.
[  378.502899][T12585] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2543'.
[  378.554710][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  378.561060][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  379.200980][T12585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.236774][T12585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.276846][T12585] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  379.301235][T12585] bond0 (unregistering): Released all slaves
[  379.310498][T12602] validate_nla: 4 callbacks suppressed
[  379.310532][T12602] netlink: 'syz.3.2546': attribute type 21 has an invalid length.
[  379.326241][T12602] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2546'.
[  379.342495][T12608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2548'.
[  379.375587][T12608] device caif0 entered promiscuous mode
[  379.393484][ T4285] Bluetooth: hci1: Malformed LE Event: 0x1b
[  379.801946][T12631] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2555'.
[  379.842539][T12633] netlink: 'syz.1.2557': attribute type 2 has an invalid length.
[  379.986615][T12642] netlink: 'syz.2.2555': attribute type 21 has an invalid length.
[  380.031163][T12641] device netdevsim0 entered promiscuous mode
[  380.157440][T12645] netlink: 'syz.1.2559': attribute type 2 has an invalid length.
[  380.172418][T12645] netlink: 'syz.1.2559': attribute type 8 has an invalid length.
[  383.179258][T12658] __nla_validate_parse: 2 callbacks suppressed
[  383.179291][T12658] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2562'.
[  383.578675][T12681] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2572'.
[  383.601608][T12683] netlink: 'syz.3.2568': attribute type 3 has an invalid length.
[  383.640981][T12682] netlink: 'syz.1.2572': attribute type 21 has an invalid length.
[  383.661338][T12681] netlink: 'syz.1.2572': attribute type 21 has an invalid length.
[  383.692896][T12683] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2568'.
[  383.710442][T12688] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2572'.
[  383.767808][T12688] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  383.830166][T12688] net_ratelimit: 400 callbacks suppressed
[  383.830183][T12688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.902534][T12695] netlink: 'syz.0.2576': attribute type 21 has an invalid length.
[  383.953477][T12695] netlink: 'syz.0.2576': attribute type 6 has an invalid length.
[  383.982106][T12695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2576'.
[  384.660039][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'.
[  386.026370][T12765] can: request_module (can-proto-0) failed.
[  386.197466][T12777] netlink: 'syz.2.2601': attribute type 10 has an invalid length.
[  386.212228][T12777] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2601'.
[  386.255368][T12779] Ÿë
: port 1(veth0_to_bridge) entered blocking state
[  386.262930][T12779] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  386.285965][T12779] device veth0_to_bridge entered promiscuous mode
[  387.421005][T12814] netlink: 'syz.0.2611': attribute type 29 has an invalid length.
[  387.432694][T12814] netlink: 'syz.0.2611': attribute type 29 has an invalid length.
[  387.460313][T12812] netlink: 'syz.2.2610': attribute type 3 has an invalid length.
[  387.475971][T12815] netlink: 'syz.0.2611': attribute type 29 has an invalid length.
[  387.501653][T12812] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2610'.
[  387.567454][T12821] netlink: 'syz.4.2613': attribute type 39 has an invalid length.
[  387.792183][T12817] netlink: 'syz.3.2612': attribute type 25 has an invalid length.
[  387.802157][T12817] netlink: 'syz.3.2612': attribute type 29 has an invalid length.
[  388.116498][T12838] netlink: 'syz.0.2618': attribute type 2 has an invalid length.
[  388.165447][T12838] netlink: 'syz.0.2618': attribute type 10 has an invalid length.
[  388.219786][T12844] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2618'.
[  388.362068][T12838] device macvlan0 entered promiscuous mode
[  388.414059][T12844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2618'.
[  388.794106][T12853] device syzkaller0 entered promiscuous mode
[  388.959484][T12863] device bridge_slave_1 left promiscuous mode
[  388.984752][T12863] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.064928][T12863] device bridge_slave_0 left promiscuous mode
[  389.087011][T12863] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.248279][T12883] netlink: 'syz.3.2628': attribute type 19 has an invalid length.
[  391.256581][T12883] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2628'.
[  391.269460][T12885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2629'.
[  392.011814][T12925] netlink: 'syz.2.2641': attribute type 16 has an invalid length.
[  392.056789][T12925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2641'.
[  392.160553][T12925] netlink: 'syz.2.2641': attribute type 10 has an invalid length.
[  392.251302][T12925] device macvlan0 entered promiscuous mode
[  392.277764][T12925] team0: Port device macvlan0 added
[  392.306962][T12921] delete_channel: no stack
[  392.530193][T12935] IPv6: pim6reg1: Disabled Multicast RS
[  393.096949][T12967] device syzkaller0 entered promiscuous mode
[  393.346466][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 72
[  393.386687][T12983] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  395.106006][T12977] netlink: 'syz.0.2657': attribute type 2 has an invalid length.
[  395.114022][T12977] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2657'.
[  395.124720][T12980] netlink: 'syz.0.2657': attribute type 2 has an invalid length.
[  395.134001][T12980] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2657'.
[  395.160547][T13003] netlink: 'syz.4.2661': attribute type 10 has an invalid length.
[  395.171850][T13003] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2661'.
[  395.590702][T13022] netlink: 'syz.2.2667': attribute type 10 has an invalid length.
[  396.719504][T13031] netlink: 'syz.4.2670': attribute type 5 has an invalid length.
[  396.762979][T13039] netlink: 'syz.3.2672': attribute type 16 has an invalid length.
[  396.771017][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2672'.
[  396.874872][T13039] netlink: 'syz.3.2672': attribute type 10 has an invalid length.
[  397.173216][T13050] netlink: 'syz.4.2675': attribute type 10 has an invalid length.
[  397.384011][T13050] team0: Port device geneve1 added
[  398.448924][T13083] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2685'.
[  398.819381][T13097] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2690'.
[  398.879960][T13095] netlink: 'syz.1.2689': attribute type 16 has an invalid length.
[  398.922929][T13095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2689'.
[  398.954810][T13095] netlink: 'syz.1.2689': attribute type 10 has an invalid length.
[  399.142579][T13107] netlink: 'syz.2.2693': attribute type 27 has an invalid length.
[  399.172540][T13107] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2693'.
[  399.266762][T13111] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  399.290128][T13111] netlink: 'syz.1.2695': attribute type 10 has an invalid length.
[  399.303981][T13111] device macvlan0 entered promiscuous mode
[  399.336854][T13111] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  399.365286][T13111] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2695'.
[  399.415971][T13111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'.
[  399.851622][T13134] netlink: 'syz.2.2703': attribute type 29 has an invalid length.
[  400.594441][T13151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2706'.
[  400.953901][T13152] device macvlan0 left promiscuous mode
[  400.993124][T13152] team0: Port device macvlan0 added
[  401.075371][T13157] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2708'.
[  401.898744][T13186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2715'.
[  401.957234][T13190] device syzkaller0 entered promiscuous mode
[  401.965359][T13191] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  403.166514][T13233] validate_nla: 4 callbacks suppressed
[  403.166574][T13233] netlink: 'syz.3.2729': attribute type 3 has an invalid length.
[  403.222583][T13236] netlink: 'syz.1.2728': attribute type 10 has an invalid length.
[  403.234671][T13233] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2729'.
[  403.262439][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2728'.
[  403.283178][T13236] device ipvlan1 entered promiscuous mode
[  403.297277][T13236] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  403.578231][T13242] netlink: 'syz.4.2732': attribute type 10 has an invalid length.
[  403.740781][T13242] team0: Port device wlan1 added
[  403.770154][T13250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2735'.
[  403.945507][T13257] device syzkaller0 entered promiscuous mode
[  405.348848][T13277] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2741'.
[  405.454224][T13277] netlink: zone id is out of range
[  405.459621][T13277] netlink: zone id is out of range
[  405.466387][T13277] netlink: zone id is out of range
[  405.475172][T13277] netlink: del zone limit has 4 unknown bytes
[  407.082422][T13282] netlink: 'syz.3.2742': attribute type 5 has an invalid length.
[  407.090218][T13282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2742'.
[  407.322108][T13291] netlink: 'syz.0.2745': attribute type 3 has an invalid length.
[  407.363797][T13291] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2745'.
[  407.492483][T13299] netlink: 'syz.1.2748': attribute type 15 has an invalid length.
[  407.508608][T13299] netlink: 'syz.1.2748': attribute type 7 has an invalid length.
[  407.590381][T13299] netlink: 'syz.1.2748': attribute type 39 has an invalid length.
[  408.733409][T13350] netlink: 'syz.2.2762': attribute type 3 has an invalid length.
[  408.761700][T13350] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2762'.
[  409.158944][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'.
[  411.408297][T13402] netlink: 'syz.0.2775': attribute type 39 has an invalid length.
[  411.815171][T13407] netlink: 'syz.4.2776': attribute type 11 has an invalid length.
[  412.101466][T13418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2780'.
[  412.850069][T13447] netlink: 'syz.0.2787': attribute type 10 has an invalid length.
[  412.882371][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2787'.
[  412.914027][T13447] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  413.303111][T13473] netlink: 9855 bytes leftover after parsing attributes in process `syz.4.2789'.
[  413.317475][T13474] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2790'.
[  413.399140][T13474] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  413.424300][T13474] CPU: 0 PID: 13474 Comm: syz.3.2790 Not tainted syzkaller #0
[  413.431824][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  413.441899][T13474] Call Trace:
[  413.445195][T13474]  <TASK>
[  413.448134][T13474]  dump_stack_lvl+0x188/0x24e
[  413.452840][T13474]  ? show_regs_print_info+0x12/0x12
[  413.458055][T13474]  ? load_image+0x410/0x410
[  413.462598][T13474]  sysfs_warn_dup+0x8a/0xa0
[  413.467129][T13474]  sysfs_do_create_link_sd+0xc0/0x110
[  413.472522][T13474]  device_add+0x83b/0x1050
[  413.476968][T13474]  wiphy_register+0x1d8b/0x2aa0
[  413.481856][T13474]  ? cfg80211_event_work+0x40/0x40
[  413.486981][T13474]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  413.493172][T13474]  ? ieee80211_register_hw+0x2ca9/0x39f0
[  413.498840][T13474]  ieee80211_register_hw+0x2d48/0x39f0
[  413.504332][T13474]  ? ieee80211_register_hw+0xf61/0x39f0
[  413.509893][T13474]  ? ieee80211_register_hw+0xf61/0x39f0
[  413.515460][T13474]  ? ieee80211_tasklet_handler+0x20/0x20
[  413.521108][T13474]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  413.527022][T13474]  ? __debug_object_init+0xed/0x440
[  413.532235][T13474]  ? memset+0x1e/0x40
[  413.536223][T13474]  ? __hrtimer_init+0x189/0x270
[  413.541172][T13474]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  413.546917][T13474]  ? memcpy+0x3c/0x60
[  413.550912][T13474]  hwsim_new_radio_nl+0xab7/0xc90
[  413.555961][T13474]  genl_family_rcv_msg_doit+0x22f/0x350
[  413.561515][T13474]  ? end_current_label_crit_section+0x170/0x170
[  413.567770][T13474]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  413.573679][T13474]  ? bpf_lsm_capable+0x5/0x10
[  413.578365][T13474]  ? security_capable+0x85/0xb0
[  413.583236][T13474]  genl_rcv_msg+0x601/0x790
[  413.587757][T13474]  ? genl_bind+0x360/0x360
[  413.592178][T13474]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  413.598534][T13474]  netlink_rcv_skb+0x1ef/0x440
[  413.603314][T13474]  ? genl_bind+0x360/0x360
[  413.607739][T13474]  ? netlink_ack+0x1160/0x1160
[  413.612526][T13474]  ? down_read+0x1a8/0x2d0
[  413.616954][T13474]  genl_rcv+0x24/0x40
[  413.620942][T13474]  netlink_unicast+0x7ad/0x920
[  413.625729][T13474]  netlink_sendmsg+0x8ad/0xbd0
[  413.630507][T13474]  ? netlink_getsockopt+0x550/0x550
[  413.635710][T13474]  ? apparmor_socket_sendmsg+0x8a/0x330
[  413.641266][T13474]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  413.646556][T13474]  ? security_socket_sendmsg+0x7c/0xa0
[  413.652020][T13474]  ? netlink_getsockopt+0x550/0x550
[  413.657227][T13474]  ____sys_sendmsg+0x5ed/0x9a0
[  413.662015][T13474]  ? __sys_sendmsg_sock+0x30/0x30
[  413.667047][T13474]  ? __import_iovec+0x306/0x510
[  413.671926][T13474]  ? import_iovec+0x6f/0xa0
[  413.676442][T13474]  ___sys_sendmsg+0x2a2/0x360
[  413.681136][T13474]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  413.687308][T13474]  ? __sys_sendmsg+0x2a0/0x2a0
[  413.692136][T13474]  __se_sys_sendmsg+0x1c3/0x2b0
[  413.697002][T13474]  ? __x64_sys_sendmsg+0x80/0x80
[  413.701962][T13474]  ? lockdep_hardirqs_on+0x94/0x140
[  413.707174][T13474]  do_syscall_64+0x4c/0xa0
[  413.711811][T13474]  ? clear_bhb_loop+0x60/0xb0
[  413.716569][T13474]  ? clear_bhb_loop+0x60/0xb0
[  413.721275][T13474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.727182][T13474] RIP: 0033:0x7f416299e0d9
[  413.731615][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.751232][T13474] RSP: 002b:00007f41638ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.759661][T13474] RAX: ffffffffffffffda RBX: 00007f4162c26180 RCX: 00007f416299e0d9
[  413.767637][T13474] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  413.775638][T13474] RBP: 00007f4162a35024 R08: 0000000000000000 R09: 0000000000000000
[  413.783614][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.791590][T13474] R13: 00007f4162c26218 R14: 00007f4162c26180 R15: 00007ffda54ae0d8
[  413.799583][T13474]  </TASK>
[  414.734293][T13521] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.2808'.
[  415.119294][T13539] pimreg: tun_chr_ioctl cmd 1074025677
[  415.149187][T13539] pimreg: linktype set to 23
[  415.225137][T13539] pimreg: tun_chr_ioctl cmd 1074025673
[  415.467444][T13556] netlink: 'syz.2.2820': attribute type 3 has an invalid length.
[  415.485894][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2820'.
[  416.727585][T13595] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2832'.
[  418.166893][T13624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2838'.
[  418.292107][T13593] device syzkaller0 entered promiscuous mode
[  418.967559][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  418.977667][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  418.990570][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  419.000259][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  419.008224][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  419.016063][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  421.102416][ T4285] Bluetooth: hci5: command 0x0409 tx timeout
[  421.569851][T13644] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2843'.
[  423.181409][T13644] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  423.190061][ T4285] Bluetooth: hci5: command 0x041b tx timeout
[  423.201896][T13663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2847'.
[  423.211323][T13669] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2848'.
[  423.371945][T13677] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2849'.
[  423.488302][T13681] netlink: 'syz.2.2852': attribute type 10 has an invalid length.
[  423.556728][T13680] can: request_module (can-proto-0) failed.
[  423.633282][T13681] device veth0_to_bond entered promiscuous mode
[  423.663906][T13681] team0: Port device veth0_to_bond added
[  423.796742][T13691] netlink: 'syz.4.2853': attribute type 29 has an invalid length.
[  423.947656][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.968079][T13691] netlink: 'syz.4.2853': attribute type 29 has an invalid length.
[  423.976837][T13698] netlink: 'syz.0.2854': attribute type 29 has an invalid length.
[  423.998298][T13641] chnl_net:caif_netlink_parms(): no params data found
[  424.029475][T13698] delete_channel: no stack
[  424.081641][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.220677][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.347539][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.368514][T13717] netlink: 'syz.2.2860': attribute type 2 has an invalid length.
[  424.390391][T13641] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.411091][T13641] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.431742][T13641] device bridge_slave_0 entered promiscuous mode
[  424.461357][T13641] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.468848][T13641] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.478969][T13641] device bridge_slave_1 entered promiscuous mode
[  424.506150][T13641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.518888][T13641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.612855][T13641] team0: Port device team_slave_0 added
[  424.637806][T13641] team0: Port device team_slave_1 added
[  424.669611][   T11] device 0 left promiscuous mode
[  424.714479][T13641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.749096][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.794435][T13641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.807549][   T11] tipc: Left network mode
[  424.808671][T13641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.832639][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.926696][T13641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.090337][T13730] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2864'.
[  425.263047][ T4285] Bluetooth: hci5: command 0x040f tx timeout
[  425.276706][T13732] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2864'.
[  425.373453][T13641] device hsr_slave_0 entered promiscuous mode
[  425.401103][T13641] device hsr_slave_1 entered promiscuous mode
[  425.441766][T13641] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.491441][T13641] Cannot create hsr debugfs directory
[  425.623367][T13749] netlink: 'syz.2.2868': attribute type 29 has an invalid length.
[  425.722657][T13749] netlink: 'syz.2.2868': attribute type 29 has an invalid length.
[  427.382546][ T4285] Bluetooth: hci5: command 0x0419 tx timeout
[  441.046603][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  441.055917][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  441.064394][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  441.073381][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  441.080962][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  441.099294][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.673136][ T4289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  442.689488][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  442.697871][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  442.706112][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  442.714701][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  442.722749][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  442.839685][ T4289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  442.849017][ T4289] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  442.857600][ T4289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  442.865544][ T4289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  442.873635][ T4289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  442.881062][ T4289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  443.005438][ T4289] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  443.014801][ T4289] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  443.023391][ T4289] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  443.031327][ T4289] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  443.050610][ T4289] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  443.058170][ T4289] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  443.132647][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[  444.782658][ T4287] Bluetooth: hci6: command 0x0409 tx timeout
[  444.982921][ T4287] Bluetooth: hci7: command 0x0409 tx timeout
[  445.133028][ T4287] Bluetooth: hci8: command 0x0409 tx timeout
[  445.182638][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[  446.882616][ T4287] Bluetooth: hci6: command 0x041b tx timeout
[  447.032632][ T4287] Bluetooth: hci7: command 0x041b tx timeout
[  447.182726][ T4287] Bluetooth: hci8: command 0x041b tx timeout
[  447.282617][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[  448.982532][ T4287] Bluetooth: hci6: command 0x040f tx timeout
[  449.132568][ T4287] Bluetooth: hci7: command 0x040f tx timeout
[  449.282914][ T4287] Bluetooth: hci8: command 0x040f tx timeout
[  449.382575][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[  451.039234][ T4287] Bluetooth: hci6: command 0x0419 tx timeout
[  451.182640][ T4287] Bluetooth: hci7: command 0x0419 tx timeout
[  451.383073][ T4287] Bluetooth: hci8: command 0x0419 tx timeout
[  452.792380][ T2189] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2670 jiffies s: 66049 root: 0x1/.
[  452.809821][ T2189] rcu: blocking rcu_node structures (internal RCU debug):
[  452.817285][ T2189] Sending NMI from CPU 1 to CPUs 0:
[  452.822565][    C0] NMI backtrace for cpu 0
[  452.822575][    C0] CPU: 0 PID: 13751 Comm: syz.0.2870 Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  452.822590][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.822598][    C0] RIP: 0010:unwind_get_return_address+0x37/0x80
[  452.822627][    C0] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 47 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 0f 67 9a 00 48 8b 3b e8 37 19 1d 00 85 c0 74 14
[  452.822639][    C0] RSP: 0018:ffffc900000070a0 EFLAGS: 00000046
[  452.822652][    C0] RAX: 0000000000000000 RBX: ffffc90000007168 RCX: ffff88802af09e00
[  452.822663][    C0] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: ffffc90000007120
[  452.822673][    C0] RBP: ffffc900000071f0 R08: ffffc900056e7f48 R09: ffffc90000007170
[  452.822684][    C0] R10: dffffc0000000000 R11: fffff52000000e30 R12: ffffc9000000724c
[  452.822694][    C0] R13: ffffc90000007120 R14: dffffc0000000000 R15: 1ffff92000000e2d
[  452.822705][    C0] FS:  00007f5a2e1056c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  452.822718][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  452.822728][    C0] CR2: 0000555ee7043950 CR3: 0000000022c7c000 CR4: 00000000003506f0
[  452.822741][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  452.822749][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  452.822758][    C0] Call Trace:
[  452.822763][    C0]  <IRQ>
[  452.822768][    C0]  ? do_syscall_64+0x4c/0xa0
[  452.822790][    C0]  perf_callchain_kernel+0x300/0x690
[  452.822816][    C0]  ? arch_perf_update_userpage+0x3c0/0x3c0
[  452.822840][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.822865][    C0]  ? get_callchain_entry+0x181/0x3b0
[  452.822886][    C0]  get_perf_callchain+0x236/0x490
[  452.822907][    C0]  ? put_callchain_entry+0xb0/0xb0
[  452.822929][    C0]  ? __perf_event_header__init_id+0x428/0x530
[  452.822952][    C0]  perf_prepare_sample+0x399/0x2020
[  452.822976][    C0]  ? read_lock_is_recursive+0x10/0x10
[  452.822996][    C0]  ? perf_callchain+0x190/0x190
[  452.823016][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  452.823040][    C0]  perf_event_output_forward+0x197/0x2f0
[  452.823061][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  452.823080][    C0]  ? perf_get_page_size+0x430/0x430
[  452.823098][    C0]  ? __lock_acquire+0x138a/0x7c40
[  452.823119][    C0]  ? perf_event_output_forward+0x282/0x2f0
[  452.823144][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  452.823167][    C0]  __perf_event_overflow+0x457/0x630
[  452.823191][    C0]  perf_swevent_event+0x315/0x570
[  452.823213][    C0]  ? perf_tp_event+0xc10/0xc10
[  452.823233][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[  452.823249][    C0]  ? trace_event_raw_event_lock+0x230/0x230
[  452.823265][    C0]  ? perf_swevent_event+0x4ba/0x570
[  452.823289][    C0]  perf_tp_event+0x36b/0xc10
[  452.823313][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  452.823334][    C0]  ? trace_call_bpf+0xbf/0x6b0
[  452.823375][    C0]  ? kvm_sched_clock_read+0x14/0x40
[  452.823389][    C0]  ? sched_clock_cpu+0x6e/0x260
[  452.823407][    C0]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  452.823431][    C0]  perf_trace_preemptirq_template+0x268/0x320
[  452.823452][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  452.823472][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  452.823493][    C0]  ? __irq_exit_rcu+0x147/0x230
[  452.823506][    C0]  ? irq_exit_rcu+0x20/0x20
[  452.823522][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  452.823541][    C0]  trace_irq_enable_rcuidle+0xd3/0x140
[  452.823562][    C0]  trace_hardirqs_on+0x24/0x40
[  452.823578][    C0]  asm_sysvec_irq_work+0x16/0x20
[  452.823597][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  452.823617][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  452.823628][    C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206
[  452.823639][    C0] RAX: af93cc2b7401bb00 RBX: 1ffff92000000f64 RCX: af93cc2b7401bb00
[  452.823650][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf5fa0
[  452.823660][    C0] RBP: ffffc90000007bd0 R08: ffffffff90b122e7 R09: 1ffffffff216245c
[  452.823670][    C0] R10: dffffc0000000000 R11: fffffbfff216245d R12: 0000000000000246
[  452.823680][    C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001
[  452.823700][    C0]  ? kmem_cache_free+0x80/0x2a0
[  452.823719][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  452.823740][    C0]  __rcu_read_unlock+0x78/0xd0
[  452.823753][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  452.823775][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  452.823791][    C0]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[  452.823814][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  452.823837][    C0]  __hrtimer_run_queues+0x522/0xc90
[  452.823856][    C0]  ? hw_scan_work+0xf00/0xf00
[  452.823882][    C0]  ? hrtimer_interrupt+0x980/0x980
[  452.823902][    C0]  hrtimer_run_softirq+0x173/0x290
[  452.823921][    C0]  handle_softirqs+0x291/0x910
[  452.823937][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  452.823953][    C0]  ? do_softirq+0x210/0x210
[  452.823965][    C0]  ? hrtimer_interrupt+0x775/0x980
[  452.823982][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  452.823998][    C0]  __irq_exit_rcu+0x13b/0x230
[  452.824011][    C0]  ? irq_exit_rcu+0x20/0x20
[  452.824031][    C0]  irq_exit_rcu+0x5/0x20
[  452.824043][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  452.824058][    C0]  </IRQ>
[  452.824062][    C0]  <TASK>
[  452.824067][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  452.824086][    C0] RIP: 0010:memset+0x2d/0x40
[  452.824099][    C0] Code: 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 92 ec ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e <5d> e9 cd ba 51 08 31 c0 5b 41 5e 5d c3 66 0f 1f 44 00 00 41 57 41
[  452.824111][    C0] RSP: 0018:ffffc900056e72f0 EFLAGS: 00000202
[  452.824122][    C0] RAX: 0000000000000001 RBX: ffffc900056e73a8 RCX: ffffffff8139037a
[  452.824131][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900056e73f8
[  452.824140][    C0] RBP: 0000000000000000 R08: ffffc900056e7407 R09: 1ffff92000adce80
[  452.824150][    C0] R10: dffffc0000000000 R11: fffff52000adce81 R12: dffffc0000000000
[  452.824160][    C0] R13: ffffc900056e8000 R14: ffffc900056e73e0 R15: ffffc900056e73dd
[  452.824175][    C0]  ? unwind_next_frame+0x8da/0x1fd0
[  452.824195][    C0]  unwind_next_frame+0x8da/0x1fd0
[  452.824215][    C0]  ? do_syscall_64+0x4c/0xa0
[  452.824236][    C0]  ? stack_trace_save+0xf0/0xf0
[  452.824254][    C0]  arch_stack_walk+0x10c/0x140
[  452.824274][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.824296][    C0]  stack_trace_save+0xa6/0xf0
[  452.824313][    C0]  ? stack_trace_snprint+0xe0/0xe0
[  452.824331][    C0]  ? mark_lock+0x94/0x320
[  452.824353][    C0]  kasan_set_track+0x4b/0x70
[  452.824371][    C0]  ? kasan_set_track+0x4b/0x70
[  452.824388][    C0]  ? __kasan_slab_alloc+0x6b/0x80
[  452.824406][    C0]  ? slab_post_alloc_hook+0x4b/0x490
[  452.824421][    C0]  ? kmem_cache_alloc+0x18b/0x2f0
[  452.824435][    C0]  ? security_inode_alloc+0x30/0x110
[  452.824449][    C0]  ? inode_init_always+0x910/0xc90
[  452.824464][    C0]  ? new_inode_pseudo+0x91/0x1c0
[  452.824479][    C0]  ? new_inode+0x25/0x1d0
[  452.824493][    C0]  ? shmem_get_inode+0x327/0xbc0
[  452.824511][    C0]  ? shmem_mknod+0x54/0x1c0
[  452.824529][    C0]  ? path_openat+0x11b9/0x2f10
[  452.824547][    C0]  ? do_filp_open+0x1ee/0x420
[  452.824560][    C0]  ? do_sys_openat2+0x14b/0x4f0
[  452.824578][    C0]  ? __x64_sys_openat+0x135/0x160
[  452.824596][    C0]  ? do_syscall_64+0x4c/0xa0
[  452.824645][    C0]  __kasan_slab_alloc+0x6b/0x80
[  452.824665][    C0]  slab_post_alloc_hook+0x4b/0x490
[  452.824681][    C0]  ? slab_pre_alloc_hook+0x59/0x300
[  452.824699][    C0]  kmem_cache_alloc+0x18b/0x2f0
[  452.824713][    C0]  ? security_inode_alloc+0x30/0x110
[  452.824730][    C0]  security_inode_alloc+0x30/0x110
[  452.824745][    C0]  inode_init_always+0x910/0xc90
[  452.824763][    C0]  new_inode_pseudo+0x91/0x1c0
[  452.824781][    C0]  new_inode+0x25/0x1d0
[  452.824799][    C0]  shmem_get_inode+0x327/0xbc0
[  452.824823][    C0]  shmem_mknod+0x54/0x1c0
[  452.824841][    C0]  ? shmem_fileattr_get+0x80/0x80
[  452.824861][    C0]  path_openat+0x11b9/0x2f10
[  452.824894][    C0]  ? do_filp_open+0x420/0x420
[  452.824919][    C0]  do_filp_open+0x1ee/0x420
[  452.824937][    C0]  ? vfs_tmpfile+0x470/0x470
[  452.824966][    C0]  ? do_sys_openat2+0x136/0x4f0
[  452.824988][    C0]  do_sys_openat2+0x14b/0x4f0
[  452.825006][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  452.825022][    C0]  ? do_sys_open+0xe0/0xe0
[  452.825043][    C0]  ? __x64_sys_openat+0x118/0x160
[  452.825065][    C0]  __x64_sys_openat+0x135/0x160
[  452.825087][    C0]  do_syscall_64+0x4c/0xa0
[  452.825106][    C0]  ? clear_bhb_loop+0x60/0xb0
[  452.825124][    C0]  ? clear_bhb_loop+0x60/0xb0
[  452.825145][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.825163][    C0] RIP: 0033:0x7f5a2d19e0d9
[  452.825175][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.825186][    C0] RSP: 002b:00007f5a2e105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  452.825200][    C0] RAX: ffffffffffffffda RBX: 00007f5a2d425fa0 RCX: 00007f5a2d19e0d9
[  452.825209][    C0] RDX: 00000000000026e1 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  452.825219][    C0] RBP: 00007f5a2d235024 R08: 0000000000000000 R09: 0000000000000000
[  452.825228][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.825236][    C0] R13: 00007f5a2d426038 R14: 00007f5a2d425fa0 R15: 00007ffd264d5188
[  452.825255][    C0]  </TASK>
[  457.432558][ T4289] Bluetooth: hci0: command 0x0406 tx timeout