last executing test programs:

4.905233298s ago: executing program 3 (id=1011):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0)

3.282453089s ago: executing program 3 (id=1019):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84800, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x400})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x200})
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r4 = openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'net'}, {0x2b, 'freezer'}, {0x2d, 'rlimit'}]}, 0x16)
r5 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000240)=0x2)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0x4000})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xffffffff, '\x00', 0x0, r5, 0x3, 0x5, 0x5}, 0x50)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r5}, 0x8)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0xd, 0x0, r5, 0x5, '\x00', 0x0, r5, 0x5, 0x5, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x13, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7d3}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x92, &(0x7f00000003c0)=""/146, 0x41000, 0x46, '\x00', r7, 0x1c, r5, 0x8, &(0x7f0000000780)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x8, 0x3, 0x1}, 0x10, 0x1eb79, r5, 0x0, &(0x7f0000000a00)=[0x1, r5, r8, r5, r5, r5, r9, r10, r11], 0x0, 0x10, 0x9}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000b00)={'ip6erspan0\x00', @local})
write$cgroup_devices(r5, &(0x7f0000000b40)={'b', ' *:* ', 'r\x00'}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x36, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x72}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @alu={0x4, 0x64ce81c1b7246f5c, 0x3, 0x0, 0xa, 0x18, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0xffff, 0xf, &(0x7f0000000d80)=""/15, 0x41000, 0x8, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000dc0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0x5, 0x2, 0xfffffffc}, 0x10, 0x2ec76, r10, 0x3, &(0x7f0000000e40)=[r10, r11, r11], &(0x7f0000000e80)=[{0x2, 0x2, 0x1, 0xb}, {0x1, 0x4, 0xa, 0x9}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x8}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f80))
sendmsg$unix(r0, &(0x7f00000016c0)={&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001040)="08969ce76ad87197f34407faee", 0xd}, {&(0x7f0000001080)="e2f9ce96f0e46316c64285e6c721ec248837680b9762fd48f3d4dcf4023acdd8a9cb72fd44942cc0178b8047b04805c794be8e352ac78bad59806a52e050c68281435a90fdb0b7227d290b81a647f7ff87f8f7a78d5ef92234f23518a18589c2ff746b5e78b3726eecc74aa95d831d8614779fe5dc31466082f58f78f4687c90e31b3638f6b35e12f5a04b20877b0e20e6001da31ba20b5c838128b01ac65588de54244f33ef9c5eea9bab07fc810ad404eea9aa504796d969c7025b0550caec6b2390cc35da6f79df7ae12323f8825d801e7592092c99c20b142ae0faa13398366632245a50f1166f28dfe22cc55a4e3b1f539bf2a3b0aefc", 0xf9}, {&(0x7f0000001180)="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", 0xfb}, {&(0x7f0000001280)="3febe72a826eca0fac54065d370e0be4511775b488362d7bdaad4ec1fac2e791bb5c8b6021e91390730c2417bede890c143a3e538232b6ebbbe8df5c515617e079bc5801dc61216ba05ed98d48dcf50122b6815c61dfbf2964bb2995a70660d86326fdf5914f21f3e358c0ca8c563e04d4f3fcd4313c7183c12afed880dfa55cc0830581ac58e3ea0237", 0x8a}, {&(0x7f0000001340)="d499f5bdb55da17e45de8e390394559a87c70bde9a0d922a9b4abc1eaca2a33f4a9934b518108f575c18317513a4f5cbc9ee43340aa224fa5a901dfaabfdd4d61710561cfaa2aabeda737f9f2713321dbaeb23ab135326fed46bfcd97312bc836475def0446bf6f41732f994e1d91c7faf71152431017742a64bc248af2a44761795aa913c6cf2fe865d73bafc9b9d36a1d60e40576840a0f45abd481087be3bda3dc9b5df540dbda20889227d38bedac9f2b3ed0edc71", 0xb7}, {&(0x7f0000001400)="e90f1639d073c17ff6c3a682b34f1881750792018a3c4525d8fd9737383b37b9e8d553a7dd3d9a639b28f26ed554a1628b5a68f93afdee1a1ebe8c3d84da045e41b0a3788cb15438b50d47f7b920fbe4bfbeccaa99699f5a83ae6b0934ca0bc22fdf5d13a8706bf0ff4e813179ba4fe9b2978622329fbd38c50e9d25c4c87313abcd504b90c64a956f0ee8df513b725e83c140a2bae24b8d15", 0x99}, {&(0x7f00000014c0)="54cabede4c4c69144179bf45a4e078bc6d2d5f621beec590df2bac99e8a7879c41172de5b83f90896f188eccda32bf6a5c92f5417f0daa17558d828a32c91f7433eedf40a855a5b9d393cad5f5f8eac459906694d81da581f692cea9fbb89db3853f9993cdc033a064adc73d0aee0ec9a46989b21523b82d66ca724bbee1aad1052219282dc90eef3998482976ef724bbf6f68b394952315a29f252b1ef7b3528fbf6831d6977f80b71886fb2e58fddfc0b7", 0xb2}, {&(0x7f0000001580)="2a8f00c9e2c834b2716549d41b4166841d975af2765fa07d392f", 0x1a}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r6, r10, r6]}}, @rights={{0x24, 0x1, 0x1, [r3, r6, r9, r8, r9]}}], 0x50, 0x4800}, 0x20000080)
syz_clone(0x72dfe1810f6ebdfd, &(0x7f0000001700)="29c5e04f01b817f49d305e5acce386543906d200e5d5e364b623133c2b0a7fee6d9ed8a62d6cc9330d615edfd068d8d78d7eee80084b11c22dfc636d4c2f61045a08ad9a3f2494a79d719228af9a4f20141edd623cef850c4ab54bfac44efca47e5f1cddfb4e9cd08b7f8de22a65ab25da6f566ace58b3ebb3ca26fba41ce1507cddefe1fd4bc11031c7f25453d03d5a810b3ae83d356fcb795179ff30635f738a61bef759f41999ed9cb66e161e2197389c379e14716804a2cc72097a92e63154126c6c469321cb642b679e3503924e", 0xd0, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="f58f4b5c5f7ba7784e57d920a821b49deace8a868ede1a2d65921cf8eafff0b7d4fd243c5cd92c7563892f1aba4019a57066c536f22ab307eac3078d628beeec277ce067b1db2caa18744d9fce75e0e9c4261fd615a6d47ccdc5613afab3445edfc194f1ecadab49e5a95197d323cef9c5b83f2290175132dc0f8db1f4f15522dc65acd5822ad1b9380967aee0f80f22a64c18018c3458a4")
r12 = openat$cgroup_ro(r10, &(0x7f0000001940)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000001980))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001b00)={r8, &(0x7f00000019c0)="f335ea21be1629f707d9d8542b669db85dc92ae5d6209fa12af93bb215ca807c0558badf611327115f30d76d5660082d8f358656803163209923e0349601ff1db5bbabd599d1547d78b646db4c79a53679173aa1545a931ae7bee9cced12fbb28858097b9967381f7f4010ae7184c435691e38005d0e66651b342fa17ac0340b58994ce54f6e43", &(0x7f0000001a80)=""/126}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b80)={[{0x2b, 'freezer'}, {0x2d, 'cpuacct'}]}, 0x12)

3.202502091s ago: executing program 3 (id=1022):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041c00000000000aa1180015000600142603600e1208000f0000810401a800160020000140fefeff7f07391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0xe, 0x0, 0x0, 0x0, 0x92211, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x0, &(0x7f00000005c0), &(0x7f0000000180)='GPL\x00', 0xffff, 0xaa, &(0x7f0000000700)=""/170, 0x41100, 0x55, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xb, 0xa, 0xb560}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[r0, r0, r0, r0], &(0x7f0000000940)=[{0x0, 0x3, 0xc, 0x9}, {0x3, 0x1, 0x4, 0x5}, {0x5, 0x5, 0x2, 0xf}, {0x2, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x6c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a02413bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a99281000000059f425ec2f8580fe3c6f605f9a00e90ba71cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e0852c8e7536bd1f018fa6be1e4de61fdccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4065903124bff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae441e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d62"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffff01}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})

2.999296745s ago: executing program 1 (id=1025):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2)

2.997983285s ago: executing program 3 (id=1027):
socket$kcm(0x2, 0x1, 0x84)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x101, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0x1000}, 0x454a}, 0xffffffffffffffff, 0x0, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, 0x0}, 0x20)
recvmsg$kcm(r1, 0x0, 0x10000)
recvmsg(0xffffffffffffffff, 0x0, 0x2102)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000020000000bca30000000000002403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600000000ff000e61146000000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001040)=ANY=[], 0x31)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000028af98bc608674b9190ab0f864932cc772da39db9e24158b100a95132420bb2c13cf8bc909d6db91f4ddf5e14778cc998c2f3624113b9ec6ae2704043f956ccec62100d404d90dcf66dd19aa8d6f6d1aa6779866a6e09a2fdcbf091a3d38b216a0760f2f43"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

2.941285057s ago: executing program 1 (id=1028):
socket$kcm(0x2, 0x1, 0x84)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x101, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0x1000}, 0x454a}, 0xffffffffffffffff, 0x0, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, 0x0}, 0x20)
recvmsg$kcm(r1, 0x0, 0x10000)
recvmsg(0xffffffffffffffff, 0x0, 0x2102)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001040)=ANY=[], 0x31)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000028af98bc608674b9190ab0f864932cc772da39db9e24158b100a95132420bb2c13cf8bc909d6db91f4ddf5e14778cc998c2f3624113b9ec6ae2704043f956ccec62100d404d90dcf66dd19aa8d6f6d1aa6779866a6e09a2fdcbf091a3d38b216a0760f2f43"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

2.915839327s ago: executing program 4 (id=1030):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041c00000000000aa1180015000600142603600e1208000f0000810401a8", 0x31}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

2.834990809s ago: executing program 4 (id=1032):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x3, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r2, 0x4)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1)

2.515950658s ago: executing program 4 (id=1034):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="17000000000000009500000000"], 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.078677383s ago: executing program 4 (id=1036):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x113c48, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000b40))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8)
bpf$PROG_LOAD(0x83, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82)

1.078125453s ago: executing program 2 (id=1037):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001a11400000007b556a737c160f9555b4755bb05251e618256000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 4)

1.014415375s ago: executing program 3 (id=1038):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041c00000000000aa1180015000600142603600e1208000f0000810401a800160020000140fefeff7f07391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0xe, 0x0, 0x0, 0x0, 0x92211, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x0, &(0x7f00000005c0), &(0x7f0000000180)='GPL\x00', 0xffff, 0xaa, &(0x7f0000000700)=""/170, 0x41100, 0x55, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xb, 0xa, 0xb560}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[r0, r0, r0, r0], &(0x7f0000000940)=[{0x0, 0x3, 0xc, 0x9}, {0x3, 0x1, 0x4, 0x5}, {0x5, 0x5, 0x2, 0xf}, {0x2, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x6c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffff01}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})

1.013616915s ago: executing program 1 (id=1039):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

943.014027ms ago: executing program 1 (id=1040):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x3, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r3, 0x4)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94)
r7 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10)
sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80)

942.720456ms ago: executing program 4 (id=1041):
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac340", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x10040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xfdef)

936.318687ms ago: executing program 0 (id=1042):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041c00000000000aa1180015000600142603600e1208000f0000810401a800160020000140fe", 0x39}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

869.521258ms ago: executing program 0 (id=1043):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

743.217271ms ago: executing program 0 (id=1044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2)

640.343344ms ago: executing program 2 (id=1045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2)

607.006725ms ago: executing program 0 (id=1046):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="17000000000000009500000000"], 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

606.284065ms ago: executing program 3 (id=1047):
r0 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000001c0), 0x12)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000)

568.671576ms ago: executing program 4 (id=1048):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0x12, 0x88a8, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

491.789178ms ago: executing program 2 (id=1049):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x3, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r3, 0x4)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94)
r7 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80)

437.422589ms ago: executing program 0 (id=1050):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

388.95078ms ago: executing program 1 (id=1051):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2)

296.546212ms ago: executing program 0 (id=1052):
socket$kcm(0x2, 0x1, 0x84)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x101, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0x1000}, 0x454a}, 0xffffffffffffffff, 0x0, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, 0x0}, 0x20)
recvmsg$kcm(r1, 0x0, 0x10000)
recvmsg(0xffffffffffffffff, 0x0, 0x2102)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001040)=ANY=[], 0x31)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000028af98bc608674b9190ab0f864932cc772da39db9e24158b100a95132420bb2c13cf8bc909d6db91f4ddf5e14778cc998c2f3624113b9ec6ae2704043f956ccec62100d404d90dcf66dd19aa8d6f6d1aa6779866a6e09a2fdcbf091a3d38b216a0760f2f43"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

292.743622ms ago: executing program 1 (id=1053):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x5, 0x40}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000700000056000000400000004100", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000022a0a5ebffd94dd9a630931149d44cddeb5324fa8814918ff9a97303a8f8ccd1650068b88011b5ec5a55e45f04a744d44053622f584085faf669d5486542ae39", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000004001)
r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000005000000000000c3a000"/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x1)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x100)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x34, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0xb94, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

246.616513ms ago: executing program 2 (id=1054):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

126.802927ms ago: executing program 2 (id=1055):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x3, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r2, 0x4)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r5, 0x8)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1)

0s ago: executing program 2 (id=1056):
r0 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000001c0), 0x12)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000)

kernel console output (not intermixed with test programs):

is not up; please bring it up to get a fully working HSR network
[   58.365892][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.379464][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.388342][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.396800][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.406388][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.415287][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.423942][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.433280][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.444308][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.452669][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.471696][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.480109][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.493627][ T4186] device veth0_macvtap entered promiscuous mode
[   58.513959][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.548333][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.563553][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.575380][ T4186] device veth1_macvtap entered promiscuous mode
[   58.594904][ T4187] device veth0_macvtap entered promiscuous mode
[   58.611577][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.621148][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.630304][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.644836][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.663656][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.676671][ T4187] device veth1_macvtap entered promiscuous mode
[   58.693112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.702070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.716515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.736977][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.749496][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.761684][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.777580][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.785083][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.793622][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.802655][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.815981][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.828686][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.838193][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.846922][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.855984][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.883164][ T4199] device veth0_vlan entered promiscuous mode
[   58.893813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.902612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.910679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.919120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.932342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.940604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.949378][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.960344][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.971683][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.981131][ T4199] device veth1_vlan entered promiscuous mode
[   59.002176][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.010539][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.019557][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.029411][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.038769][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.049885][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.060586][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.072902][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.083130][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.111854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.121863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.138752][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.150364][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.159350][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.168345][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.190069][ T4188] device veth0_vlan entered promiscuous mode
[   59.223870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.233914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.242719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.251297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.259791][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.305472][ T4199] device veth0_macvtap entered promiscuous mode
[   59.322517][ T4188] device veth1_vlan entered promiscuous mode
[   59.336344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.344632][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.354827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.380345][ T4199] device veth1_macvtap entered promiscuous mode
[   59.394257][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.402803][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.411984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.420922][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.429247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.438577][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.446302][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.455170][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.513522][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.522593][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.532947][ T4188] device veth0_macvtap entered promiscuous mode
[   59.550205][ T4188] device veth1_macvtap entered promiscuous mode
[   59.568592][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.576451][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.592054][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.600822][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.609102][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.616782][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.625953][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.636397][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.644938][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.657262][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.668499][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.678650][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.689425][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.700639][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.712540][ T4189] device veth0_vlan entered promiscuous mode
[   59.722322][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.738336][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.746944][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.749263][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.764613][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.775506][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.785481][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.796428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.807885][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.818581][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.830743][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.840195][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.850972][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.861321][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.872655][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.883589][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.894746][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.903841][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.913561][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.922454][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.939852][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.948117][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.955933][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.965685][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.973091][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.973659][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.990950][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.999761][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.014155][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.024731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.035031][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.045858][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.056027][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.066884][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.079548][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.087657][ T4189] device veth1_vlan entered promiscuous mode
[   60.109005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.119543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.142384][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.151999][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.160773][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.170150][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.228258][ T4189] device veth0_macvtap entered promiscuous mode
[   60.239446][ T4189] device veth1_macvtap entered promiscuous mode
[   60.272602][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.306512][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.329464][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.358247][ T4191] Bluetooth: hci4: command 0x040f tx timeout
[   60.365022][ T4191] Bluetooth: hci1: command 0x040f tx timeout
[   60.383316][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.394172][ T4191] Bluetooth: hci2: command 0x040f tx timeout
[   60.407148][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.417774][ T4191] Bluetooth: hci3: command 0x040f tx timeout
[   60.429035][ T4244] Bluetooth: hci0: command 0x040f tx timeout
[   60.432828][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.447788][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.457867][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.468548][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.479077][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.491150][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.502680][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.511127][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.527834][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.542737][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.590579][ T4266] netlink: 'syz.1.2': attribute type 39 has an invalid length.
[   60.657092][    C1] hrtimer: interrupt took 38242 ns
[   60.678973][ T4270] netlink: 'syz.2.3': attribute type 39 has an invalid length.
[   60.706484][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.717852][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.728536][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.739372][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.755803][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.766510][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.776389][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.787306][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.799574][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.808202][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.819250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.850306][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.859857][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.868931][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.878713][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.898584][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.907405][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.912840][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.923281][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.954127][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.963134][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.986135][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.986578][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.011757][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.023975][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.034173][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.045742][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.092580][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.105472][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.116562][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.172158][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.181940][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.222437][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.363660][ T4280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'.
[   61.376375][ T4280] netlink: 'syz.3.6': attribute type 1 has an invalid length.
[   61.384428][ T4280] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6'.
[   61.423803][ T4285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'.
[   61.439031][ T4285] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   61.446751][ T4285] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5'.
[   61.758587][ T4297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11'.
[   61.767877][ T4297] netlink: 'syz.3.11': attribute type 1 has an invalid length.
[   61.775512][ T4297] netlink: 6 bytes leftover after parsing attributes in process `syz.3.11'.
[   61.920145][ T4301] sctp: [Deprecated]: syz.1.12 (pid 4301) Use of int in max_burst socket option deprecated.
[   61.920145][ T4301] Use struct sctp_assoc_value instead
[   61.930329][ T4304] netlink: 'syz.0.13': attribute type 10 has an invalid length.
[   62.013588][ T4304] team0 (unregistering): Port device team_slave_0 removed
[   62.053516][ T4304] team0 (unregistering): Port device team_slave_1 removed
[   62.089347][ T4310] netlink: 'syz.4.14': attribute type 39 has an invalid length.
[   62.370934][ T4322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   62.434618][ T4271] Bluetooth: hci3: command 0x0419 tx timeout
[   62.441920][ T4271] Bluetooth: hci2: command 0x0419 tx timeout
[   62.453645][ T4271] Bluetooth: hci1: command 0x0419 tx timeout
[   62.470428][ T4271] Bluetooth: hci4: command 0x0419 tx timeout
[   62.518757][ T1107] Bluetooth: hci0: command 0x0419 tx timeout
[   62.590342][ T4330] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.21'.
[   62.783802][ T4332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22'.
[   62.795275][ T4332] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   62.853035][ T4332] netlink: 6 bytes leftover after parsing attributes in process `syz.0.22'.
[   62.945021][ T4339] netlink: 'syz.4.23': attribute type 39 has an invalid length.
[   63.096941][ T4343] Zero length message leads to an empty skb
[   63.580801][ T4347] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.27'.
[   63.671411][ T4352] netlink: 'syz.2.28': attribute type 39 has an invalid length.
[   64.113806][ T4363] device hsr0 entered promiscuous mode
[   64.196146][ T4363] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   64.238465][ T4363] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   64.250939][ T4363] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   64.277355][ T4363] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   65.724426][ T4413] validate_nla: 10 callbacks suppressed
[   65.724455][ T4413] netlink: 'syz.3.50': attribute type 1 has an invalid length.
[   65.896033][ T4416] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   65.995646][ T4424] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   66.058291][ T4425] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[   66.512734][ T4444] netlink: 'syz.2.57': attribute type 39 has an invalid length.
[   66.577523][ T4438] __nla_validate_parse: 14 callbacks suppressed
[   66.577556][ T4438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.56'.
[   66.656616][ T4438] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   66.702078][ T4438] netlink: 6 bytes leftover after parsing attributes in process `syz.1.56'.
[   66.796759][ T4443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.59'.
[   66.826498][ T4443] netlink: 'syz.3.59': attribute type 1 has an invalid length.
[   66.851482][ T4443] netlink: 6 bytes leftover after parsing attributes in process `syz.3.59'.
[   66.872507][ T4451] netlink: 'syz.1.60': attribute type 39 has an invalid length.
[   67.059808][ T4454] netlink: 'syz.0.61': attribute type 39 has an invalid length.
[   67.479442][ T4467] netlink: 'syz.1.65': attribute type 39 has an invalid length.
[   67.632971][ T4472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'.
[   67.688239][ T4472] netlink: 6 bytes leftover after parsing attributes in process `syz.3.68'.
[   67.751647][ T4475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'.
[   67.796007][ T4475] netlink: 6 bytes leftover after parsing attributes in process `syz.1.69'.
[   67.884806][ T4483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.71'.
[   67.941295][ T4483] netlink: 6 bytes leftover after parsing attributes in process `syz.0.71'.
[   70.848485][ T4548] validate_nla: 9 callbacks suppressed
[   70.848518][ T4548] netlink: 'syz.4.94': attribute type 39 has an invalid length.
[   71.267402][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.273991][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.414201][ T4557] netlink: 'syz.4.98': attribute type 1 has an invalid length.
[   71.436932][ T4560] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   71.751374][ T4572] netlink: 'syz.3.103': attribute type 10 has an invalid length.
[   71.867045][ T4572] team0 (unregistering): Port device team_slave_0 removed
[   71.902344][ T4572] team0 (unregistering): Port device team_slave_1 removed
[   71.921746][ T4568] __nla_validate_parse: 9 callbacks suppressed
[   71.921788][ T4568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.101'.
[   71.937778][ T4568] netlink: 'syz.2.101': attribute type 1 has an invalid length.
[   71.947789][ T4568] netlink: 6 bytes leftover after parsing attributes in process `syz.2.101'.
[   71.961550][ T4575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.106'.
[   71.971171][ T4575] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   72.005178][ T4575] netlink: 6 bytes leftover after parsing attributes in process `syz.1.106'.
[   72.030968][ T4583] netlink: 'syz.0.107': attribute type 39 has an invalid length.
[   72.059556][ T4586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.108'.
[   72.075318][ T4586] netlink: 'syz.4.108': attribute type 1 has an invalid length.
[   72.111268][ T4586] netlink: 6 bytes leftover after parsing attributes in process `syz.4.108'.
[   72.203138][ T4595] netlink: 'syz.2.110': attribute type 39 has an invalid length.
[   72.261705][ T4594] netlink: 'syz.0.112': attribute type 39 has an invalid length.
[   72.618749][ T4609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'.
[   72.658618][ T4609] netlink: 6 bytes leftover after parsing attributes in process `syz.0.115'.
[   73.602801][ T4639] sctp: [Deprecated]: syz.3.126 (pid 4639) Use of int in max_burst socket option deprecated.
[   73.602801][ T4639] Use struct sctp_assoc_value instead
[   73.654657][ T4635] team0 (unregistering): Port device team_slave_0 removed
[   73.680073][ T4635] team0 (unregistering): Port device team_slave_1 removed
[   74.306588][ T4666] FAULT_INJECTION: forcing a failure.
[   74.306588][ T4666] name failslab, interval 1, probability 0, space 0, times 1
[   74.364564][ T4666] CPU: 1 PID: 4666 Comm: syz.1.136 Not tainted syzkaller #0
[   74.371975][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.382054][ T4666] Call Trace:
[   74.385348][ T4666]  <TASK>
[   74.388288][ T4666]  dump_stack_lvl+0x188/0x250
[   74.392985][ T4666]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[   74.399145][ T4666]  ? show_regs_print_info+0x20/0x20
[   74.404357][ T4666]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[   74.410531][ T4666]  should_fail+0x383/0x4b0
[   74.415050][ T4666]  should_failslab+0x5/0x20
[   74.419557][ T4666]  slab_pre_alloc_hook+0x51/0xc0
[   74.424494][ T4666]  kmem_cache_alloc_trace+0x47/0x290
[   74.429775][ T4666]  ? genl_start+0x14e/0x490
[   74.434280][ T4666]  genl_start+0x14e/0x490
[   74.438608][ T4666]  __netlink_dump_start+0x3cc/0x720
[   74.443809][ T4666]  genl_rcv_msg+0xbc7/0xfa0
[   74.448310][ T4666]  ? genl_bind+0x370/0x370
[   74.452735][ T4666]  ? genl_rcv_msg+0xfa0/0xfa0
[   74.457400][ T4666]  ? ila_xlat_nl_dump_done+0x50/0x50
[   74.462683][ T4666]  ? genl_lock_done+0xd0/0xd0
[   74.467354][ T4666]  ? dev_queue_xmit+0x20/0x20
[   74.472030][ T4666]  ? rhashtable_remove_fast+0xc70/0xc70
[   74.477574][ T4666]  ? ila_dump_info+0x4d0/0x4d0
[   74.482423][ T4666]  ? ila_xlat_nl_dump_done+0x50/0x50
[   74.487701][ T4666]  ? ila_xlat_nl_dump_start+0x180/0x180
[   74.493258][ T4666]  netlink_rcv_skb+0x1e9/0x430
[   74.498030][ T4666]  ? genl_bind+0x370/0x370
[   74.502449][ T4666]  ? netlink_ack+0xb10/0xb10
[   74.507056][ T4666]  ? down_read+0x1aa/0x2e0
[   74.511470][ T4666]  genl_rcv+0x24/0x40
[   74.515453][ T4666]  netlink_unicast+0x78f/0x940
[   74.520223][ T4666]  netlink_sendmsg+0x8ba/0xbe0
[   74.525024][ T4666]  ? netlink_getsockopt+0x570/0x570
[   74.530924][ T4666]  ? aa_sock_msg_perm+0x94/0x150
[   74.535861][ T4666]  ? apparmor_socket_sendmsg+0x88/0x230
[   74.541396][ T4666]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[   74.546673][ T4666]  ? security_socket_sendmsg+0x7c/0xa0
[   74.552126][ T4666]  ? netlink_getsockopt+0x570/0x570
[   74.557328][ T4666]  ____sys_sendmsg+0x5be/0x8f0
[   74.562191][ T4666]  ? __sys_sendmsg_sock+0x30/0x30
[   74.567225][ T4666]  ? import_iovec+0x6f/0xa0
[   74.571745][ T4666]  ___sys_sendmsg+0x236/0x2e0
[   74.576427][ T4666]  ? __sys_sendmsg+0x290/0x290
[   74.581193][ T4666]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[   74.587447][ T4666]  __se_sys_sendmsg+0x1b7/0x2a0
[   74.592298][ T4666]  ? __x64_sys_sendmsg+0x80/0x80
[   74.597236][ T4666]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   74.603228][ T4666]  ? lockdep_hardirqs_on+0x94/0x140
[   74.608425][ T4666]  do_syscall_64+0x4c/0xa0
[   74.612834][ T4666]  ? clear_bhb_loop+0x30/0x80
[   74.617508][ T4666]  ? clear_bhb_loop+0x30/0x80
[   74.622180][ T4666]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   74.628084][ T4666] RIP: 0033:0x7fd8f164ef99
[   74.632593][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.652207][ T4666] RSP: 002b:00007fd8ef8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.660628][ T4666] RAX: ffffffffffffffda RBX: 00007fd8f18d6fa0 RCX: 00007fd8f164ef99
[   74.668603][ T4666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   74.676679][ T4666] RBP: 00007fd8ef8a7090 R08: 0000000000000000 R09: 0000000000000000
[   74.684680][ T4666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.692891][ T4666] R13: 00007fd8f18d7038 R14: 00007fd8f18d6fa0 R15: 00007ffcec3e27d8
[   74.701001][ T4666]  </TASK>
[   75.973870][ T4710] validate_nla: 10 callbacks suppressed
[   75.973939][ T4710] netlink: 'syz.1.149': attribute type 2 has an invalid length.
[   76.034257][ T4710] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.149'.
[   76.218854][ T4724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.152'.
[   76.274843][ T4725] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   76.397495][ T4726] syz.2.155 uses obsolete (PF_INET,SOCK_PACKET)
[   76.693922][ T4741] FAULT_INJECTION: forcing a failure.
[   76.693922][ T4741] name failslab, interval 1, probability 0, space 0, times 0
[   76.789283][ T4741] CPU: 0 PID: 4741 Comm: syz.0.160 Not tainted syzkaller #0
[   76.796624][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   76.806761][ T4741] Call Trace:
[   76.810075][ T4741]  <TASK>
[   76.813011][ T4741]  dump_stack_lvl+0x188/0x250
[   76.817711][ T4741]  ? show_regs_print_info+0x20/0x20
[   76.822930][ T4741]  ? load_image+0x410/0x410
[   76.827456][ T4741]  ? __might_sleep+0xf0/0xf0
[   76.832065][ T4741]  ? __lock_acquire+0x7b50/0x7b50
[   76.837124][ T4741]  should_fail+0x383/0x4b0
[   76.841565][ T4741]  should_failslab+0x5/0x20
[   76.846527][ T4741]  slab_pre_alloc_hook+0x51/0xc0
[   76.851479][ T4741]  __kmalloc+0x6b/0x340
[   76.855723][ T4741]  ? sk_prot_alloc+0xe7/0x210
[   76.860427][ T4741]  sk_prot_alloc+0xe7/0x210
[   76.864948][ T4741]  ? sk_alloc+0x1d/0x310
[   76.869179][ T4741]  sk_alloc+0x2f/0x310
[   76.873239][ T4741]  bpf_prog_test_run_skb+0x23c/0x1190
[   76.878600][ T4741]  ? __fget_files+0x402/0x470
[   76.883273][ T4741]  ? cpu_online+0x60/0x60
[   76.887759][ T4741]  bpf_prog_test_run+0x31c/0x390
[   76.892687][ T4741]  __sys_bpf+0x5a5/0x6f0
[   76.896938][ T4741]  ? bpf_link_show_fdinfo+0x380/0x380
[   76.902306][ T4741]  __x64_sys_bpf+0x78/0x90
[   76.907149][ T4741]  do_syscall_64+0x4c/0xa0
[   76.911554][ T4741]  ? clear_bhb_loop+0x30/0x80
[   76.916217][ T4741]  ? clear_bhb_loop+0x30/0x80
[   76.920883][ T4741]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.926765][ T4741] RIP: 0033:0x7f37b2675f99
[   76.931257][ T4741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.951031][ T4741] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   76.959458][ T4741] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[   76.967613][ T4741] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[   76.976264][ T4741] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[   76.984406][ T4741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.992398][ T4741] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[   77.000458][ T4741]  </TASK>
[   77.155019][ T4745] __nla_validate_parse: 3 callbacks suppressed
[   77.155034][ T4745] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.161'.
[   77.645839][ T4754] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   77.679904][ T4754] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   77.712137][ T4755] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   77.747603][ T4754] netlink: 'syz.0.164': attribute type 29 has an invalid length.
[   77.999155][ T4762] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.166'.
[   78.469519][ T4773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.552256][ T4768] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.168'.
[   78.630279][ T4768] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[   78.657163][ T4768] CPU: 1 PID: 4768 Comm: syz.3.168 Not tainted syzkaller #0
[   78.664507][ T4768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.674667][ T4768] Call Trace:
[   78.677968][ T4768]  <TASK>
[   78.680917][ T4768]  dump_stack_lvl+0x188/0x250
[   78.685622][ T4768]  ? show_regs_print_info+0x20/0x20
[   78.690849][ T4768]  ? load_image+0x410/0x410
[   78.695388][ T4768]  sysfs_warn_dup+0x8a/0xa0
[   78.699917][ T4768]  sysfs_do_create_link_sd+0xc0/0x110
[   78.705508][ T4768]  device_add+0x83b/0x1050
[   78.710391][ T4768]  wiphy_register+0x1e74/0x2c40
[   78.715299][ T4768]  ? cfg80211_event_work+0x40/0x40
[   78.720438][ T4768]  ? minstrel_ht_alloc+0x807/0x980
[   78.725584][ T4768]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[   78.731689][ T4768]  ieee80211_register_hw+0x2a03/0x3a60
[   78.737230][ T4768]  ? ieee80211_register_hw+0xb21/0x3a60
[   78.742811][ T4768]  ? ieee80211_tasklet_handler+0x20/0x20
[   78.748470][ T4768]  ? rcu_is_watching+0x11/0xa0
[   78.753255][ T4768]  ? hrtimer_init+0x10c/0x220
[   78.757961][ T4768]  mac80211_hwsim_new_radio+0x209d/0x4050
[   78.763725][ T4768]  hwsim_new_radio_nl+0xa7d/0xc50
[   78.768787][ T4768]  genl_rcv_msg+0xd0b/0xfa0
[   78.773315][ T4768]  ? genl_bind+0x370/0x370
[   78.777758][ T4768]  ? __dev_queue_xmit+0x1b64/0x2e50
[   78.782981][ T4768]  ? verify_lock_unused+0x140/0x140
[   78.788209][ T4768]  ? perf_trace_lock+0xe4/0x390
[   78.793077][ T4768]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[   78.799428][ T4768]  netlink_rcv_skb+0x1e9/0x430
[   78.804223][ T4768]  ? genl_bind+0x370/0x370
[   78.808641][ T4768]  ? netlink_ack+0xb10/0xb10
[   78.813371][ T4768]  ? down_read+0x1aa/0x2e0
[   78.817796][ T4768]  genl_rcv+0x24/0x40
[   78.821786][ T4768]  netlink_unicast+0x78f/0x940
[   78.826554][ T4768]  netlink_sendmsg+0x8ba/0xbe0
[   78.831355][ T4768]  ? netlink_getsockopt+0x570/0x570
[   78.836538][ T4768]  ? aa_sock_msg_perm+0x94/0x150
[   78.841463][ T4768]  ? apparmor_socket_sendmsg+0x88/0x230
[   78.846997][ T4768]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[   78.852265][ T4768]  ? security_socket_sendmsg+0x7c/0xa0
[   78.857709][ T4768]  ? netlink_getsockopt+0x570/0x570
[   78.862908][ T4768]  ____sys_sendmsg+0x5be/0x8f0
[   78.867668][ T4768]  ? __sys_sendmsg_sock+0x30/0x30
[   78.872691][ T4768]  ? import_iovec+0x6f/0xa0
[   78.877186][ T4768]  ___sys_sendmsg+0x236/0x2e0
[   78.881859][ T4768]  ? __sys_sendmsg+0x290/0x290
[   78.886633][ T4768]  ? trace_event_raw_event_lock+0x250/0x250
[   78.892568][ T4768]  __se_sys_sendmsg+0x1b7/0x2a0
[   78.897410][ T4768]  ? __x64_sys_sendmsg+0x80/0x80
[   78.902352][ T4768]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   78.908331][ T4768]  ? lockdep_hardirqs_on+0x94/0x140
[   78.913521][ T4768]  do_syscall_64+0x4c/0xa0
[   78.917924][ T4768]  ? clear_bhb_loop+0x30/0x80
[   78.922581][ T4768]  ? clear_bhb_loop+0x30/0x80
[   78.927242][ T4768]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.933124][ T4768] RIP: 0033:0x7fc1a16e7f99
[   78.937552][ T4768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.957144][ T4768] RSP: 002b:00007fc19f940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.965563][ T4768] RAX: ffffffffffffffda RBX: 00007fc1a196ffa0 RCX: 00007fc1a16e7f99
[   78.973517][ T4768] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   78.981488][ T4768] RBP: 00007fc1a177eec4 R08: 0000000000000000 R09: 0000000000000000
[   78.989445][ T4768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.997400][ T4768] R13: 00007fc1a1970038 R14: 00007fc1a196ffa0 R15: 00007ffd1bffcc08
[   79.005369][ T4768]  </TASK>
[   79.426262][ T4792] netlink: 'syz.4.178': attribute type 39 has an invalid length.
[   79.615577][ T4806] netlink: 'syz.4.184': attribute type 3 has an invalid length.
[   79.642992][ T4806] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.184'.
[   79.648961][ T4808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.185'.
[   79.662821][ T4808] netlink: 'syz.2.185': attribute type 1 has an invalid length.
[   79.671543][ T4808] netlink: 6 bytes leftover after parsing attributes in process `syz.2.185'.
[   79.753329][ T4811] netlink: 'syz.0.187': attribute type 39 has an invalid length.
[   79.941364][ T4824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.191'.
[   79.992791][ T4830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.191'.
[   80.009967][ T4823] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.192'.
[   80.150253][ T4830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.191'.
[   80.262593][ T4830] syz.4.191[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.262733][ T4830] syz.4.191[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.701506][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.709720][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.947728][ T4852] device bridge_slave_1 left promiscuous mode
[   80.964748][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.114052][ T4852] device bridge_slave_0 left promiscuous mode
[   81.132880][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.424171][ T4847] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[   81.441027][ T4868] validate_nla: 4 callbacks suppressed
[   81.441043][ T4868] netlink: 'syz.1.205': attribute type 39 has an invalid length.
[   81.471232][ T1325] cfg80211: failed to load regulatory.db
[   81.746980][ T4881] netlink: 'syz.1.211': attribute type 39 has an invalid length.
[   81.914533][ T4896] netlink: 'syz.1.227': attribute type 3 has an invalid length.
[   81.993933][ T4897] netlink: 'syz.4.217': attribute type 39 has an invalid length.
[   82.007998][ T4898] netlink: 'syz.3.219': attribute type 1 has an invalid length.
[   82.327613][ T4909] __nla_validate_parse: 11 callbacks suppressed
[   82.327628][ T4909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.221'.
[   82.414425][ T4909] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[   82.443881][ T4913] netlink: 'syz.4.223': attribute type 39 has an invalid length.
[   82.824580][ T4928] netlink: 'syz.1.232': attribute type 2 has an invalid length.
[   82.886402][ T4928] netlink: 'syz.1.232': attribute type 3 has an invalid length.
[   82.888680][ T4933] netlink: 202260 bytes leftover after parsing attributes in process `syz.0.230'.
[   82.964742][ T4928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.232'.
[   83.001649][ T4939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.233'.
[   83.032048][ T4939] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   83.062943][ T4940] netlink: 'syz.3.234': attribute type 3 has an invalid length.
[   83.096868][ T4940] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.234'.
[   83.124394][ T4939] netlink: 6 bytes leftover after parsing attributes in process `syz.2.233'.
[   83.395048][ T4925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'.
[   83.448179][ T4925] device ipvlan1 entered promiscuous mode
[   83.469719][ T4925] bridge0: port 3(ipvlan1) entered blocking state
[   83.476725][ T4925] bridge0: port 3(ipvlan1) entered disabled state
[   83.502624][ T4925] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   83.765425][ T4970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.244'.
[   83.804560][ T4976] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.320207][ T5001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.256'.
[   84.436794][ T5001] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.256'.
[   84.718440][ T5019] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0
[   84.961457][ T5029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   85.053401][ T5018] device syzkaller0 entered promiscuous mode
[   85.101684][ T4271] syzkaller0: tun_net_xmit 48
[   85.443853][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.451294][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.504768][ T5046] device bridge_slave_1 left promiscuous mode
[   85.528122][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.579102][ T5055] FAULT_INJECTION: forcing a failure.
[   85.579102][ T5055] name failslab, interval 1, probability 0, space 0, times 0
[   85.609384][ T5055] CPU: 1 PID: 5055 Comm: syz.2.268 Not tainted syzkaller #0
[   85.616816][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.626886][ T5055] Call Trace:
[   85.630173][ T5055]  <TASK>
[   85.633118][ T5055]  dump_stack_lvl+0x188/0x250
[   85.637822][ T5055]  ? show_regs_print_info+0x20/0x20
[   85.643048][ T5055]  ? load_image+0x410/0x410
[   85.647756][ T5055]  should_fail+0x383/0x4b0
[   85.652207][ T5055]  should_failslab+0x5/0x20
[   85.656733][ T5055]  slab_pre_alloc_hook+0x51/0xc0
[   85.661693][ T5055]  kmem_cache_alloc_trace+0x47/0x290
[   85.667020][ T5055]  ? sctp_add_bind_addr+0x89/0x350
[   85.672159][ T5055]  sctp_add_bind_addr+0x89/0x350
[   85.677167][ T5055]  sctp_copy_local_addr_list+0x2f1/0x4c0
[   85.682829][ T5055]  ? sctp_do_8_2_transport_strike+0x8b0/0x8b0
[   85.688919][ T5055]  ? sctp_v6_is_any+0x60/0x70
[   85.693629][ T5055]  ? sctp_copy_one_addr+0x93/0x660
[   85.698859][ T5055]  sctp_bind_addr_copy+0xaf/0x3c0
[   85.703910][ T5055]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[   85.710360][ T5055]  sctp_connect_new_asoc+0x2f5/0x6a0
[   85.715680][ T5055]  ? __sctp_connect+0xd80/0xd80
[   85.720548][ T5055]  ? __local_bh_enable_ip+0x136/0x1c0
[   85.725949][ T5055]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[   85.731512][ T5055]  ? security_sctp_bind_connect+0x85/0xb0
[   85.737256][ T5055]  sctp_sendmsg+0x15e1/0x2940
[   85.742058][ T5055]  ? sctp_getsockopt+0x8a0/0x8a0
[   85.747014][ T5055]  ? aa_af_perm+0x340/0x340
[   85.751570][ T5055]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[   85.758191][ T5055]  ? aa_sock_msg_perm+0x94/0x150
[   85.763320][ T5055]  ? sock_rps_record_flow+0x17/0x3b0
[   85.768628][ T5055]  ? inet_sendmsg+0xca/0x2a0
[   85.773240][ T5055]  ? inet_send_prepare+0x250/0x250
[   85.778683][ T5055]  ____sys_sendmsg+0x5be/0x8f0
[   85.783485][ T5055]  ? __sys_sendmsg_sock+0x30/0x30
[   85.788539][ T5055]  ? import_iovec+0x6f/0xa0
[   85.793068][ T5055]  ___sys_sendmsg+0x236/0x2e0
[   85.797811][ T5055]  ? __sys_sendmsg+0x290/0x290
[   85.802629][ T5055]  __se_sys_sendmsg+0x1b7/0x2a0
[   85.807587][ T5055]  ? __x64_sys_sendmsg+0x80/0x80
[   85.812724][ T5055]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   85.818739][ T5055]  ? lockdep_hardirqs_on+0x94/0x140
[   85.823962][ T5055]  do_syscall_64+0x4c/0xa0
[   85.828390][ T5055]  ? clear_bhb_loop+0x30/0x80
[   85.833170][ T5055]  ? clear_bhb_loop+0x30/0x80
[   85.837862][ T5055]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.843810][ T5055] RIP: 0033:0x7fa3438e5f99
[   85.848239][ T5055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.867942][ T5055] RSP: 002b:00007fa341b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.876385][ T5055] RAX: ffffffffffffffda RBX: 00007fa343b6dfa0 RCX: 00007fa3438e5f99
[   85.884375][ T5055] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003
[   85.892479][ T5055] RBP: 00007fa341b3e090 R08: 0000000000000000 R09: 0000000000000000
[   85.900477][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   85.908470][ T5055] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[   85.916501][ T5055]  </TASK>
[   85.925647][ T5046] device bridge_slave_0 left promiscuous mode
[   85.945679][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.542665][ T5081] FAULT_INJECTION: forcing a failure.
[   86.542665][ T5081] name failslab, interval 1, probability 0, space 0, times 0
[   86.613361][ T5081] CPU: 0 PID: 5081 Comm: syz.0.279 Not tainted syzkaller #0
[   86.620693][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.630758][ T5081] Call Trace:
[   86.634046][ T5081]  <TASK>
[   86.636983][ T5081]  dump_stack_lvl+0x188/0x250
[   86.641688][ T5081]  ? show_regs_print_info+0x20/0x20
[   86.646900][ T5081]  ? load_image+0x410/0x410
[   86.651487][ T5081]  ? __might_sleep+0xf0/0xf0
[   86.656097][ T5081]  ? __lock_acquire+0x7b50/0x7b50
[   86.661141][ T5081]  should_fail+0x383/0x4b0
[   86.665566][ T5081]  should_failslab+0x5/0x20
[   86.670073][ T5081]  slab_pre_alloc_hook+0x51/0xc0
[   86.675017][ T5081]  __kmalloc+0x6b/0x340
[   86.679183][ T5081]  ? tomoyo_encode+0x28a/0x550
[   86.683943][ T5081]  tomoyo_encode+0x28a/0x550
[   86.688523][ T5081]  tomoyo_realpath_from_path+0x5a2/0x5e0
[   86.694153][ T5081]  tomoyo_path_number_perm+0x251/0x6b0
[   86.699621][ T5081]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   86.705100][ T5081]  security_file_ioctl+0x6c/0xa0
[   86.710029][ T5081]  __se_sys_ioctl+0x48/0x170
[   86.714641][ T5081]  do_syscall_64+0x4c/0xa0
[   86.719053][ T5081]  ? clear_bhb_loop+0x30/0x80
[   86.723735][ T5081]  ? clear_bhb_loop+0x30/0x80
[   86.728404][ T5081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.734291][ T5081] RIP: 0033:0x7f37b2675f99
[   86.738723][ T5081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.758315][ T5081] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.766715][ T5081] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[   86.774673][ T5081] RDX: 0000200000000080 RSI: 00000000000089f9 RDI: 0000000000000004
[   86.782626][ T5081] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[   86.790584][ T5081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.798558][ T5081] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[   86.806875][ T5081]  </TASK>
[   86.927268][ T5081] ERROR: Out of memory at tomoyo_realpath_from_path.
[   86.954281][ T5086] syz.3.280 (5086) used greatest stack depth: 19632 bytes left
[   87.518580][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.526051][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.772218][ T5108] device bridge_slave_1 left promiscuous mode
[   87.790624][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.833227][ T5108] device bridge_slave_0 left promiscuous mode
[   87.869620][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.004969][ T5124] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.164665][ T5123] validate_nla: 5 callbacks suppressed
[   88.164699][ T5123] netlink: 'syz.2.291': attribute type 39 has an invalid length.
[   88.218514][ T5128] __nla_validate_parse: 8 callbacks suppressed
[   88.218665][ T5128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'.
[   88.300386][ T5128] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.295'.
[   88.898696][ T5152] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.304'.
[   89.604171][ T5171] netlink: 'syz.0.311': attribute type 39 has an invalid length.
[   89.857740][ T5182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.314'.
[   89.982330][ T5182] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.314'.
[   90.007467][ T5188] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.315'.
[   90.016717][ T5188] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0
[   90.760669][ T5198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.319'.
[   90.941188][ T5198] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.319'.
[   93.118126][ T5218] netlink: 'syz.1.325': attribute type 39 has an invalid length.
[   93.238947][ T5230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.331'.
[   93.294597][ T5230] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.331'.
[   93.518915][ T5241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.333'.
[   93.659622][ T5248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.336'.
[   93.676849][ T5253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.337'.
[   93.695467][ T5248] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.336'.
[   93.774411][ T5261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'.
[   93.796112][ T5261] netlink: 'syz.3.335': attribute type 1 has an invalid length.
[   93.838374][ T5261] netlink: 6 bytes leftover after parsing attributes in process `syz.3.335'.
[   94.018911][ T5257] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.082299][ T5269] netlink: 'syz.2.341': attribute type 39 has an invalid length.
[   94.280085][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.347'.
[   94.578560][ T5302] netlink: 'syz.3.353': attribute type 1 has an invalid length.
[   95.777564][ T5346] netlink: 'syz.0.368': attribute type 1 has an invalid length.
[   96.277761][ T5376] FAULT_INJECTION: forcing a failure.
[   96.277761][ T5376] name failslab, interval 1, probability 0, space 0, times 0
[   96.295000][ T5376] CPU: 0 PID: 5376 Comm: syz.3.378 Not tainted syzkaller #0
[   96.302320][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.312387][ T5376] Call Trace:
[   96.315687][ T5376]  <TASK>
[   96.318626][ T5376]  dump_stack_lvl+0x188/0x250
[   96.323313][ T5376]  ? show_regs_print_info+0x20/0x20
[   96.328526][ T5376]  ? load_image+0x410/0x410
[   96.333050][ T5376]  should_fail+0x383/0x4b0
[   96.337477][ T5376]  should_failslab+0x5/0x20
[   96.342132][ T5376]  slab_pre_alloc_hook+0x51/0xc0
[   96.347098][ T5376]  ? __debug_object_init+0x819/0xc80
[   96.352407][ T5376]  kmem_cache_alloc+0x3d/0x280
[   96.357195][ T5376]  __debug_object_init+0x819/0xc80
[   96.362324][ T5376]  ? memset+0x1e/0x40
[   96.366321][ T5376]  ? debug_object_init+0x10/0x10
[   96.371357][ T5376]  ? lockdep_init_map_type+0x98/0x900
[   96.376758][ T5376]  ? sctp_endpoint_hold+0x145/0x1c0
[   96.381968][ T5376]  ? sctp_generate_t1_init_event+0x20/0x20
[   96.387987][ T5376]  init_timer_key+0x3d/0x2a0
[   96.392600][ T5376]  sctp_association_new+0x9c7/0x2400
[   96.397910][ T5376]  sctp_connect_new_asoc+0x2da/0x6a0
[   96.403204][ T5376]  ? __sctp_connect+0xd80/0xd80
[   96.408061][ T5376]  ? __local_bh_enable_ip+0x136/0x1c0
[   96.413437][ T5376]  ? _local_bh_enable+0xa0/0xa0
[   96.418296][ T5376]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[   96.423850][ T5376]  ? security_sctp_bind_connect+0x85/0xb0
[   96.429577][ T5376]  sctp_sendmsg+0x15e1/0x2940
[   96.434272][ T5376]  ? sctp_getsockopt+0x8a0/0x8a0
[   96.439218][ T5376]  ? aa_af_perm+0x340/0x340
[   96.443732][ T5376]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[   96.450156][ T5376]  ? aa_sock_msg_perm+0x94/0x150
[   96.455104][ T5376]  ? sock_rps_record_flow+0x17/0x3b0
[   96.460397][ T5376]  ? inet_sendmsg+0x7a/0x2a0
[   96.464993][ T5376]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[   96.470284][ T5376]  ? inet_send_prepare+0x250/0x250
[   96.475408][ T5376]  ____sys_sendmsg+0x5be/0x8f0
[   96.480186][ T5376]  ? __sys_sendmsg_sock+0x30/0x30
[   96.485220][ T5376]  ? import_iovec+0x6f/0xa0
[   96.489733][ T5376]  ___sys_sendmsg+0x236/0x2e0
[   96.494445][ T5376]  ? __sys_sendmsg+0x290/0x290
[   96.499254][ T5376]  __se_sys_sendmsg+0x1b7/0x2a0
[   96.504115][ T5376]  ? __x64_sys_sendmsg+0x80/0x80
[   96.509063][ T5376]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   96.515062][ T5376]  ? lockdep_hardirqs_on+0x94/0x140
[   96.520272][ T5376]  do_syscall_64+0x4c/0xa0
[   96.524720][ T5376]  ? clear_bhb_loop+0x30/0x80
[   96.529400][ T5376]  ? clear_bhb_loop+0x30/0x80
[   96.534082][ T5376]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   96.539974][ T5376] RIP: 0033:0x7fc1a16e7f99
[   96.544390][ T5376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.564000][ T5376] RSP: 002b:00007fc19f91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.572434][ T5376] RAX: ffffffffffffffda RBX: 00007fc1a1970090 RCX: 00007fc1a16e7f99
[   96.580418][ T5376] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[   96.588402][ T5376] RBP: 00007fc19f91f090 R08: 0000000000000000 R09: 0000000000000000
[   96.596381][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.604368][ T5376] R13: 00007fc1a1970128 R14: 00007fc1a1970090 R15: 00007ffd1bffcc08
[   96.612362][ T5376]  </TASK>
[   99.474012][ T5382] __nla_validate_parse: 14 callbacks suppressed
[   99.474070][ T5382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.379'.
[   99.493367][ T5392] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.379'.
[   99.648766][ T5388] netlink: 'syz.0.379': attribute type 10 has an invalid length.
[   99.806230][ T5396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.385'.
[   99.815785][ T5396] netlink: 'syz.4.385': attribute type 1 has an invalid length.
[   99.829865][ T5396] netlink: 6 bytes leftover after parsing attributes in process `syz.4.385'.
[   99.990312][ T5405] netlink: 'syz.2.389': attribute type 39 has an invalid length.
[  100.051134][ T5412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.392'.
[  100.800310][ T5457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.406'.
[  100.927292][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.949817][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.958470][ T5463] FAULT_INJECTION: forcing a failure.
[  100.958470][ T5463] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  101.035942][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.047412][ T5463] CPU: 0 PID: 5463 Comm: syz.4.409 Not tainted syzkaller #0
[  101.054723][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.064779][ T5463] Call Trace:
[  101.068064][ T5463]  <TASK>
[  101.071264][ T5463]  dump_stack_lvl+0x188/0x250
[  101.071379][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.075966][ T5463]  ? show_regs_print_info+0x20/0x20
[  101.075992][ T5463]  ? load_image+0x410/0x410
[  101.076019][ T5463]  ? __lock_acquire+0x7b50/0x7b50
[  101.076043][ T5463]  should_fail+0x383/0x4b0
[  101.076065][ T5463]  _copy_from_user+0x2e/0x170
[  101.106921][ T5463]  __copy_msghdr_from_user+0x48a/0x630
[  101.112395][ T5463]  ? verify_lock_unused+0x140/0x140
[  101.117610][ T5463]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  101.123020][ T5463]  ? __lock_acquire+0x13dc/0x7b50
[  101.128087][ T5463]  ___sys_sendmsg+0x19a/0x2e0
[  101.132786][ T5463]  ? __sys_sendmsg+0x290/0x290
[  101.137595][ T5463]  __se_sys_sendmsg+0x1b7/0x2a0
[  101.142463][ T5463]  ? __x64_sys_sendmsg+0x80/0x80
[  101.147419][ T5463]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  101.153427][ T5463]  ? lockdep_hardirqs_on+0x94/0x140
[  101.158639][ T5463]  do_syscall_64+0x4c/0xa0
[  101.163059][ T5463]  ? clear_bhb_loop+0x30/0x80
[  101.167738][ T5463]  ? clear_bhb_loop+0x30/0x80
[  101.172427][ T5463]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.178328][ T5463] RIP: 0033:0x7f7c1d328f99
[  101.182795][ T5463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.202524][ T5463] RSP: 002b:00007f7c1b581028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.211318][ T5463] RAX: ffffffffffffffda RBX: 00007f7c1d5b0fa0 RCX: 00007f7c1d328f99
[  101.219582][ T5463] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003
[  101.227566][ T5463] RBP: 00007f7c1b581090 R08: 0000000000000000 R09: 0000000000000000
[  101.235539][ T5463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.243518][ T5463] R13: 00007f7c1d5b1038 R14: 00007f7c1d5b0fa0 R15: 00007ffe98aa3b08
[  101.251712][ T5463]  </TASK>
[  101.397252][ T5476] netlink: 'syz.2.412': attribute type 29 has an invalid length.
[  101.414220][ T5476] netlink: 'syz.2.412': attribute type 29 has an invalid length.
[  101.459036][ T5471] netlink: 'syz.2.412': attribute type 29 has an invalid length.
[  101.629595][ T5475] netlink: 'syz.2.412': attribute type 4 has an invalid length.
[  101.657440][ T5475] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.412'.
[  101.928778][ T5503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.419'.
[  102.107621][ T5508] netlink: 'syz.0.423': attribute type 39 has an invalid length.
[  102.341301][ T5524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.427'.
[  102.371228][ T5524] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[  102.392043][ T5524] netlink: 6 bytes leftover after parsing attributes in process `syz.0.427'.
[  102.413590][ T5530] netlink: 'syz.3.430': attribute type 5 has an invalid length.
[  103.154899][ T5566] FAULT_INJECTION: forcing a failure.
[  103.154899][ T5566] name failslab, interval 1, probability 0, space 0, times 0
[  103.177501][ T5566] CPU: 1 PID: 5566 Comm: syz.0.443 Not tainted syzkaller #0
[  103.184836][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.194902][ T5566] Call Trace:
[  103.198189][ T5566]  <TASK>
[  103.201127][ T5566]  dump_stack_lvl+0x188/0x250
[  103.205823][ T5566]  ? show_regs_print_info+0x20/0x20
[  103.211037][ T5566]  ? load_image+0x410/0x410
[  103.215557][ T5566]  ? __might_sleep+0xf0/0xf0
[  103.220178][ T5566]  ? __lock_acquire+0x7b50/0x7b50
[  103.225305][ T5566]  ? rcu_is_watching+0x11/0xa0
[  103.230084][ T5566]  should_fail+0x383/0x4b0
[  103.234524][ T5566]  should_failslab+0x5/0x20
[  103.239053][ T5566]  slab_pre_alloc_hook+0x51/0xc0
[  103.244006][ T5566]  ? __pmd_alloc+0x116/0x750
[  103.248609][ T5566]  kmem_cache_alloc+0x3d/0x280
[  103.253390][ T5566]  __pmd_alloc+0x116/0x750
[  103.257815][ T5566]  ? __lock_acquire+0x7b50/0x7b50
[  103.262849][ T5566]  ? do_raw_spin_lock+0x128/0x2f0
[  103.267882][ T5566]  ? __pud_alloc+0x140/0x140
[  103.272482][ T5566]  ? __rwlock_init+0x140/0x140
[  103.277259][ T5566]  ? count_memcg_event_mm+0x324/0x370
[  103.282646][ T5566]  ? do_raw_spin_unlock+0x11d/0x230
[  103.287894][ T5566]  ? _raw_spin_unlock+0x24/0x40
[  103.292754][ T5566]  ? __pud_alloc+0x122/0x140
[  103.297360][ T5566]  handle_mm_fault+0xbd3/0x4440
[  103.302371][ T5566]  ? get_page+0xe0/0xe0
[  103.306549][ T5566]  ? vmacache_find+0x4f0/0x590
[  103.311324][ T5566]  ? vmacache_update+0xa0/0x100
[  103.316191][ T5566]  ? find_vma+0x1df/0x230
[  103.320539][ T5566]  do_user_addr_fault+0x494/0xc90
[  103.325583][ T5566]  exc_page_fault+0x60/0x100
[  103.330182][ T5566]  asm_exc_page_fault+0x22/0x30
[  103.335045][ T5566] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[  103.340771][ T5566] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f
[  103.360385][ T5566] RSP: 0018:ffffc9000322fe80 EFLAGS: 00050297
[  103.366466][ T5566] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000200000000000
[  103.374481][ T5566] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200
[  103.382469][ T5566] RBP: 0000000000000004 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd
[  103.390452][ T5566] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000
[  103.398434][ T5566] R13: 0000200000000000 R14: 0000000000000018 R15: 0000000000000006
[  103.406436][ T5566]  __sys_socketpair+0xb4/0x540
[  103.411238][ T5566]  __x64_sys_socketpair+0x97/0xb0
[  103.416299][ T5566]  do_syscall_64+0x4c/0xa0
[  103.420730][ T5566]  ? clear_bhb_loop+0x30/0x80
[  103.425418][ T5566]  ? clear_bhb_loop+0x30/0x80
[  103.430111][ T5566]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  103.436016][ T5566] RIP: 0033:0x7f37b2675f99
[  103.440444][ T5566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.460266][ T5566] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  103.468691][ T5566] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[  103.476677][ T5566] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000018
[  103.484650][ T5566] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[  103.492649][ T5566] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.500630][ T5566] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[  103.508626][ T5566]  </TASK>
[  103.990524][ T5598] FAULT_INJECTION: forcing a failure.
[  103.990524][ T5598] name failslab, interval 1, probability 0, space 0, times 0
[  104.087371][ T5598] CPU: 0 PID: 5598 Comm: syz.4.455 Not tainted syzkaller #0
[  104.094741][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.104811][ T5598] Call Trace:
[  104.108102][ T5598]  <TASK>
[  104.111042][ T5598]  dump_stack_lvl+0x188/0x250
[  104.115742][ T5598]  ? show_regs_print_info+0x20/0x20
[  104.120961][ T5598]  ? load_image+0x410/0x410
[  104.125494][ T5598]  should_fail+0x383/0x4b0
[  104.129950][ T5598]  ? bpf_clone_redirect+0x1c2/0x460
[  104.135170][ T5598]  should_failslab+0x5/0x20
[  104.139693][ T5598]  slab_pre_alloc_hook+0x51/0xc0
[  104.144648][ T5598]  ? bpf_clone_redirect+0x1c2/0x460
[  104.149870][ T5598]  __kmalloc_node_track_caller+0x68/0x3a0
[  104.155606][ T5598]  ? bpf_clone_redirect+0x1c2/0x460
[  104.160820][ T5598]  ? bpf_clone_redirect+0x1c2/0x460
[  104.166032][ T5598]  pskb_expand_head+0x128/0x1100
[  104.171000][ T5598]  bpf_clone_redirect+0x1c2/0x460
[  104.176057][ T5598]  bpf_prog_c6f54bbad6dab1ee+0x56/0x278
[  104.181631][ T5598]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  104.187639][ T5598]  ? lock_chain_count+0x20/0x20
[  104.192520][ T5598]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  104.199124][ T5598]  ? lockdep_hardirqs_on+0x94/0x140
[  104.204343][ T5598]  ? ktime_get+0x7b/0x270
[  104.208695][ T5598]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  104.214953][ T5598]  ? ktime_get_real_ts64+0x440/0x440
[  104.220257][ T5598]  ? read_lock_is_recursive+0x10/0x10
[  104.225651][ T5598]  ? __cant_sleep+0x220/0x220
[  104.230378][ T5598]  ? ktime_get+0x247/0x270
[  104.234818][ T5598]  bpf_test_run+0x2a8/0x800
[  104.239370][ T5598]  ? convert___skb_to_skb+0x4c0/0x4c0
[  104.244773][ T5598]  ? convert___skb_to_skb+0x3d/0x4c0
[  104.250082][ T5598]  bpf_prog_test_run_skb+0x9fb/0x1190
[  104.255482][ T5598]  ? cpu_online+0x60/0x60
[  104.259983][ T5598]  bpf_prog_test_run+0x31c/0x390
[  104.264943][ T5598]  __sys_bpf+0x5a5/0x6f0
[  104.269203][ T5598]  ? perf_trace_preemptirq_template+0x2aa/0x360
[  104.275464][ T5598]  ? bpf_link_show_fdinfo+0x380/0x380
[  104.280855][ T5598]  ? rcu_nmi_exit+0x6f/0xf0
[  104.285393][ T5598]  __x64_sys_bpf+0x78/0x90
[  104.289831][ T5598]  do_syscall_64+0x4c/0xa0
[  104.294265][ T5598]  ? clear_bhb_loop+0x30/0x80
[  104.298954][ T5598]  ? clear_bhb_loop+0x30/0x80
[  104.303640][ T5598]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  104.309543][ T5598] RIP: 0033:0x7f7c1d328f99
[  104.313970][ T5598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.333587][ T5598] RSP: 002b:00007f7c1b581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  104.342130][ T5598] RAX: ffffffffffffffda RBX: 00007f7c1d5b0fa0 RCX: 00007f7c1d328f99
[  104.350241][ T5598] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[  104.358227][ T5598] RBP: 00007f7c1b581090 R08: 0000000000000000 R09: 0000000000000000
[  104.366210][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.374189][ T5598] R13: 00007f7c1d5b1038 R14: 00007f7c1d5b0fa0 R15: 00007ffe98aa3b08
[  104.382188][ T5598]  </TASK>
[  104.774562][ T5597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.855831][ T5601] validate_nla: 6 callbacks suppressed
[  104.855847][ T5601] netlink: 'syz.3.456': attribute type 39 has an invalid length.
[  105.236538][ T5625] __nla_validate_parse: 7 callbacks suppressed
[  105.236568][ T5625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.465'.
[  105.309989][ T5627] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.465'.
[  105.360337][ T5616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.460'.
[  105.415968][ T5616] netlink: 'syz.2.460': attribute type 1 has an invalid length.
[  105.484518][ T5616] netlink: 6 bytes leftover after parsing attributes in process `syz.2.460'.
[  105.541984][ T5634] FAULT_INJECTION: forcing a failure.
[  105.541984][ T5634] name failslab, interval 1, probability 0, space 0, times 0
[  105.575794][ T5634] CPU: 0 PID: 5634 Comm: syz.1.467 Not tainted syzkaller #0
[  105.583121][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.593313][ T5634] Call Trace:
[  105.596595][ T5634]  <TASK>
[  105.599525][ T5634]  dump_stack_lvl+0x188/0x250
[  105.604220][ T5634]  ? show_regs_print_info+0x20/0x20
[  105.609440][ T5634]  ? load_image+0x410/0x410
[  105.613953][ T5634]  ? __might_sleep+0xf0/0xf0
[  105.618552][ T5634]  ? __lock_acquire+0x7b50/0x7b50
[  105.623585][ T5634]  should_fail+0x383/0x4b0
[  105.628020][ T5634]  should_failslab+0x5/0x20
[  105.632534][ T5634]  slab_pre_alloc_hook+0x51/0xc0
[  105.637477][ T5634]  __kmalloc_node_track_caller+0x68/0x3a0
[  105.643202][ T5634]  ? netlink_sendmsg+0x654/0xbe0
[  105.648154][ T5634]  ? __alloc_skb+0xf4/0x750
[  105.652702][ T5634]  ? netlink_sendmsg+0x654/0xbe0
[  105.657652][ T5634]  __alloc_skb+0x22c/0x750
[  105.662084][ T5634]  netlink_sendmsg+0x654/0xbe0
[  105.666871][ T5634]  ? netlink_getsockopt+0x570/0x570
[  105.672082][ T5634]  ? aa_sock_msg_perm+0x94/0x150
[  105.677032][ T5634]  ? apparmor_socket_sendmsg+0x88/0x230
[  105.682570][ T5634]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  105.687842][ T5634]  ? security_socket_sendmsg+0x7c/0xa0
[  105.693284][ T5634]  ? netlink_getsockopt+0x570/0x570
[  105.698468][ T5634]  ____sys_sendmsg+0x5be/0x8f0
[  105.703226][ T5634]  ? __sys_sendmsg_sock+0x30/0x30
[  105.708241][ T5634]  ? import_iovec+0x6f/0xa0
[  105.712762][ T5634]  ___sys_sendmsg+0x236/0x2e0
[  105.717450][ T5634]  ? __sys_sendmsg+0x290/0x290
[  105.722204][ T5634]  ? trace_event_raw_event_lock+0x250/0x250
[  105.728097][ T5634]  __se_sys_sendmsg+0x1b7/0x2a0
[  105.732940][ T5634]  ? __x64_sys_sendmsg+0x80/0x80
[  105.737861][ T5634]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  105.743834][ T5634]  ? lockdep_hardirqs_on+0x94/0x140
[  105.749019][ T5634]  do_syscall_64+0x4c/0xa0
[  105.753421][ T5634]  ? clear_bhb_loop+0x30/0x80
[  105.758098][ T5634]  ? clear_bhb_loop+0x30/0x80
[  105.762761][ T5634]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.768637][ T5634] RIP: 0033:0x7fd8f164ef99
[  105.773058][ T5634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.792664][ T5634] RSP: 002b:00007fd8ef8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.801063][ T5634] RAX: ffffffffffffffda RBX: 00007fd8f18d6fa0 RCX: 00007fd8f164ef99
[  105.809026][ T5634] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  105.816981][ T5634] RBP: 00007fd8ef8a7090 R08: 0000000000000000 R09: 0000000000000000
[  105.824934][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.832917][ T5634] R13: 00007fd8f18d7038 R14: 00007fd8f18d6fa0 R15: 00007ffcec3e27d8
[  105.840904][ T5634]  </TASK>
[  105.956768][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.964387][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.162030][ T5650] netlink: 'syz.0.470': attribute type 39 has an invalid length.
[  106.232601][ T5637] device bridge_slave_1 left promiscuous mode
[  106.249339][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.338730][ T5637] device bridge_slave_0 left promiscuous mode
[  106.345719][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.534965][ T5656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.474'.
[  106.626298][ T5656] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.474'.
[  106.954590][ T5668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.476'.
[  106.983363][ T5671] device veth0 entered promiscuous mode
[  107.023942][ T5669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.478'.
[  107.076904][ T5669] netlink: 'syz.0.478': attribute type 1 has an invalid length.
[  107.089767][ T5669] netlink: 6 bytes leftover after parsing attributes in process `syz.0.478'.
[  107.129185][ T5680] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.480'.
[  107.327393][ T5688] netlink: 'syz.0.484': attribute type 2 has an invalid length.
[  107.376527][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.386269][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.399400][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.408126][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.676425][ T5696] syz.4.488 (5696) used greatest stack depth: 18640 bytes left
[  107.802829][ T5709] FAULT_INJECTION: forcing a failure.
[  107.802829][ T5709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.826304][ T5709] CPU: 1 PID: 5709 Comm: syz.4.492 Not tainted syzkaller #0
[  107.833619][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.843681][ T5709] Call Trace:
[  107.846960][ T5709]  <TASK>
[  107.849887][ T5709]  dump_stack_lvl+0x188/0x250
[  107.854572][ T5709]  ? show_regs_print_info+0x20/0x20
[  107.859790][ T5709]  ? load_image+0x410/0x410
[  107.864676][ T5709]  ? __lock_acquire+0x7b50/0x7b50
[  107.869707][ T5709]  ? bpf_test_run+0x78e/0x800
[  107.874388][ T5709]  should_fail+0x383/0x4b0
[  107.878808][ T5709]  _copy_to_user+0x2e/0x130
[  107.883314][ T5709]  bpf_test_finish+0x215/0x2f0
[  107.888084][ T5709]  ? convert_skb_to___skb+0x360/0x360
[  107.893580][ T5709]  ? convert_skb_to___skb+0x1ff/0x360
[  107.898959][ T5709]  bpf_prog_test_run_skb+0xbc0/0x1190
[  107.904348][ T5709]  ? cpu_online+0x60/0x60
[  107.908678][ T5709]  bpf_prog_test_run+0x31c/0x390
[  107.913624][ T5709]  __sys_bpf+0x5a5/0x6f0
[  107.917880][ T5709]  ? bpf_link_show_fdinfo+0x380/0x380
[  107.923249][ T5709]  ? perf_trace_preemptirq_template+0x2bc/0x360
[  107.929521][ T5709]  __x64_sys_bpf+0x78/0x90
[  107.933937][ T5709]  do_syscall_64+0x4c/0xa0
[  107.938348][ T5709]  ? clear_bhb_loop+0x30/0x80
[  107.943051][ T5709]  ? clear_bhb_loop+0x30/0x80
[  107.947728][ T5709]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.953619][ T5709] RIP: 0033:0x7f7c1d328f99
[  107.958038][ T5709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.977731][ T5709] RSP: 002b:00007f7c1b581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  107.986152][ T5709] RAX: ffffffffffffffda RBX: 00007f7c1d5b0fa0 RCX: 00007f7c1d328f99
[  107.994123][ T5709] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a
[  108.002130][ T5709] RBP: 00007f7c1b581090 R08: 0000000000000000 R09: 0000000000000000
[  108.010098][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.018069][ T5709] R13: 00007f7c1d5b1038 R14: 00007f7c1d5b0fa0 R15: 00007ffe98aa3b08
[  108.026165][ T5709]  </TASK>
[  108.442805][ T5726] FAULT_INJECTION: forcing a failure.
[  108.442805][ T5726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.511210][ T5726] CPU: 0 PID: 5726 Comm: syz.2.502 Not tainted syzkaller #0
[  108.518727][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.529705][ T5726] Call Trace:
[  108.532998][ T5726]  <TASK>
[  108.535937][ T5726]  dump_stack_lvl+0x188/0x250
[  108.540633][ T5726]  ? show_regs_print_info+0x20/0x20
[  108.545859][ T5726]  ? load_image+0x410/0x410
[  108.550391][ T5726]  ? __lock_acquire+0x7b50/0x7b50
[  108.555436][ T5726]  should_fail+0x383/0x4b0
[  108.559878][ T5726]  _copy_to_user+0x2e/0x130
[  108.564405][ T5726]  simple_read_from_buffer+0xe3/0x150
[  108.569851][ T5726]  proc_fail_nth_read+0x1a6/0x220
[  108.574899][ T5726]  ? proc_fault_inject_write+0x310/0x310
[  108.580685][ T5726]  ? fsnotify_perm+0x254/0x560
[  108.585450][ T5726]  ? proc_fault_inject_write+0x310/0x310
[  108.591596][ T5726]  vfs_read+0x2ff/0xd50
[  108.595743][ T5726]  ? __lock_acquire+0x7b50/0x7b50
[  108.600764][ T5726]  ? kernel_read+0x1e0/0x1e0
[  108.605393][ T5726]  ? mutex_lock_nested+0x17/0x20
[  108.610327][ T5726]  ? __fdget_pos+0x2bf/0x370
[  108.614905][ T5726]  ? ksys_read+0x70/0x260
[  108.619242][ T5726]  ksys_read+0x153/0x260
[  108.623478][ T5726]  ? vfs_write+0xd70/0xd70
[  108.627888][ T5726]  ? lockdep_hardirqs_on+0x94/0x140
[  108.633076][ T5726]  do_syscall_64+0x4c/0xa0
[  108.637477][ T5726]  ? clear_bhb_loop+0x30/0x80
[  108.642170][ T5726]  ? clear_bhb_loop+0x30/0x80
[  108.646836][ T5726]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  108.652730][ T5726] RIP: 0033:0x7fa3438a67ce
[  108.657134][ T5726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  108.676816][ T5726] RSP: 002b:00007fa341b3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  108.685326][ T5726] RAX: ffffffffffffffda RBX: 00007fa341b3e6c0 RCX: 00007fa3438a67ce
[  108.693304][ T5726] RDX: 000000000000000f RSI: 00007fa341b3e0a0 RDI: 0000000000000004
[  108.701265][ T5726] RBP: 00007fa341b3e090 R08: 0000000000000000 R09: 0000000000000000
[  108.709416][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.717392][ T5726] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[  108.725396][ T5726]  </TASK>
[  109.453820][ T5759] netlink: 'syz.4.513': attribute type 39 has an invalid length.
[  109.491499][ T5758] netlink: 'syz.3.514': attribute type 39 has an invalid length.
[  109.677685][ T5768] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[  109.734907][ T5775] netlink: 'syz.3.518': attribute type 1 has an invalid length.
[  109.888554][ T5783] FAULT_INJECTION: forcing a failure.
[  109.888554][ T5783] name failslab, interval 1, probability 0, space 0, times 0
[  109.955693][ T5783] CPU: 1 PID: 5783 Comm: syz.1.521 Not tainted syzkaller #0
[  109.963354][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.973413][ T5783] Call Trace:
[  109.976998][ T5783]  <TASK>
[  109.979939][ T5783]  dump_stack_lvl+0x188/0x250
[  109.984660][ T5783]  ? show_regs_print_info+0x20/0x20
[  109.989959][ T5783]  ? load_image+0x410/0x410
[  109.994521][ T5783]  ? __might_sleep+0xf0/0xf0
[  109.999583][ T5783]  ? __lock_acquire+0x7b50/0x7b50
[  110.004708][ T5783]  should_fail+0x383/0x4b0
[  110.009568][ T5783]  should_failslab+0x5/0x20
[  110.014333][ T5783]  slab_pre_alloc_hook+0x51/0xc0
[  110.020166][ T5783]  kmem_cache_alloc_node+0x47/0x2c0
[  110.025545][ T5783]  ? __alloc_skb+0xf4/0x750
[  110.030066][ T5783]  __alloc_skb+0xf4/0x750
[  110.034587][ T5783]  netlink_dump+0x1cc/0xdd0
[  110.039086][ T5783]  ? apparmor_capable+0x12c/0x190
[  110.044104][ T5783]  ? netlink_lookup+0x1d0/0x1d0
[  110.048958][ T5783]  ? __inet_diag_dump_start+0x805/0x970
[  110.054503][ T5783]  __netlink_dump_start+0x4e4/0x720
[  110.059809][ T5783]  inet_diag_rcv_msg_compat+0x207/0x420
[  110.065440][ T5783]  ? inet_diag_unregister+0xb0/0xb0
[  110.071111][ T5783]  ? __mutex_trylock_common+0x15c/0x260
[  110.076839][ T5783]  ? mutex_lock_io_nested+0x60/0x60
[  110.082144][ T5783]  ? __inet_diag_dump+0x380/0x380
[  110.087863][ T5783]  ? inet_diag_dump_start_compat+0x20/0x20
[  110.093881][ T5783]  ? inet_diag_dump+0x50/0x50
[  110.098589][ T5783]  ? __mutex_lock_common+0x435/0x2400
[  110.104014][ T5783]  ? inet_diag_unregister+0xb0/0xb0
[  110.109300][ T5783]  sock_diag_rcv_msg+0x15c/0x3e0
[  110.114230][ T5783]  ? netlink_rcv_skb+0x1c8/0x430
[  110.119375][ T5783]  netlink_rcv_skb+0x1e9/0x430
[  110.124363][ T5783]  ? sock_diag_bind+0xa0/0xa0
[  110.129512][ T5783]  ? netlink_ack+0xb10/0xb10
[  110.134303][ T5783]  sock_diag_rcv+0x26/0x40
[  110.138821][ T5783]  netlink_unicast+0x78f/0x940
[  110.143718][ T5783]  netlink_sendmsg+0x8ba/0xbe0
[  110.148509][ T5783]  ? netlink_getsockopt+0x570/0x570
[  110.154294][ T5783]  ? aa_sock_msg_perm+0x94/0x150
[  110.159224][ T5783]  ? apparmor_socket_sendmsg+0x88/0x230
[  110.164844][ T5783]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  110.170117][ T5783]  ? security_socket_sendmsg+0x7c/0xa0
[  110.175560][ T5783]  ? netlink_getsockopt+0x570/0x570
[  110.180747][ T5783]  ____sys_sendmsg+0x5be/0x8f0
[  110.185595][ T5783]  ? __sys_sendmsg_sock+0x30/0x30
[  110.190613][ T5783]  ? import_iovec+0x6f/0xa0
[  110.195108][ T5783]  ___sys_sendmsg+0x236/0x2e0
[  110.199777][ T5783]  ? __sys_sendmsg+0x290/0x290
[  110.204648][ T5783]  ? trace_event_raw_event_lock+0x250/0x250
[  110.210559][ T5783]  __se_sys_sendmsg+0x1b7/0x2a0
[  110.215619][ T5783]  ? __x64_sys_sendmsg+0x80/0x80
[  110.220631][ T5783]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  110.226696][ T5783]  ? lockdep_hardirqs_on+0x94/0x140
[  110.231882][ T5783]  do_syscall_64+0x4c/0xa0
[  110.236324][ T5783]  ? clear_bhb_loop+0x30/0x80
[  110.240998][ T5783]  ? clear_bhb_loop+0x30/0x80
[  110.245667][ T5783]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  110.251554][ T5783] RIP: 0033:0x7fd8f164ef99
[  110.255958][ T5783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.275670][ T5783] RSP: 002b:00007fd8ef8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.284089][ T5783] RAX: ffffffffffffffda RBX: 00007fd8f18d6fa0 RCX: 00007fd8f164ef99
[  110.292187][ T5783] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  110.300158][ T5783] RBP: 00007fd8ef8a7090 R08: 0000000000000000 R09: 0000000000000000
[  110.308454][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.316502][ T5783] R13: 00007fd8f18d7038 R14: 00007fd8f18d6fa0 R15: 00007ffcec3e27d8
[  110.324736][ T5783]  </TASK>
[  110.384662][ T5789] __nla_validate_parse: 9 callbacks suppressed
[  110.384695][ T5789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.523'.
[  110.499488][ T5789] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.523'.
[  110.635423][ T5798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.528'.
[  110.855673][ T5805] netlink: 'syz.0.529': attribute type 39 has an invalid length.
[  110.908856][ T5813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.531'.
[  111.004276][ T5810] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.531'.
[  111.050924][ T5820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.543'.
[  111.388950][ T5824] netlink: 144 bytes leftover after parsing attributes in process `syz.0.534'.
[  111.435689][ T5830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.535'.
[  111.447323][ T5830] netlink: 'syz.4.535': attribute type 1 has an invalid length.
[  111.483151][ T5830] netlink: 6 bytes leftover after parsing attributes in process `syz.4.535'.
[  111.950545][ T5854] FAULT_INJECTION: forcing a failure.
[  111.950545][ T5854] name failslab, interval 1, probability 0, space 0, times 0
[  111.968407][ T5854] CPU: 1 PID: 5854 Comm: syz.0.541 Not tainted syzkaller #0
[  111.975729][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.985966][ T5854] Call Trace:
[  111.989259][ T5854]  <TASK>
[  111.992202][ T5854]  dump_stack_lvl+0x188/0x250
[  111.996934][ T5854]  ? show_regs_print_info+0x20/0x20
[  112.002172][ T5854]  ? load_image+0x410/0x410
[  112.006705][ T5854]  ? __might_sleep+0xf0/0xf0
[  112.011308][ T5854]  ? __lock_acquire+0x7b50/0x7b50
[  112.016352][ T5854]  ? __lock_acquire+0x7b50/0x7b50
[  112.021397][ T5854]  should_fail+0x383/0x4b0
[  112.025832][ T5854]  should_failslab+0x5/0x20
[  112.030349][ T5854]  slab_pre_alloc_hook+0x51/0xc0
[  112.035304][ T5854]  __kmalloc_node+0x6d/0x3a0
[  112.039905][ T5854]  ? kvmalloc_node+0x84/0x130
[  112.044596][ T5854]  kvmalloc_node+0x84/0x130
[  112.049208][ T5854]  map_update_elem+0x308/0x760
[  112.053997][ T5854]  __sys_bpf+0x46b/0x6f0
[  112.058260][ T5854]  ? bpf_link_show_fdinfo+0x380/0x380
[  112.063642][ T5854]  ? rcu_nmi_exit+0x6f/0xf0
[  112.068180][ T5854]  __x64_sys_bpf+0x78/0x90
[  112.072606][ T5854]  do_syscall_64+0x4c/0xa0
[  112.077048][ T5854]  ? clear_bhb_loop+0x30/0x80
[  112.081757][ T5854]  ? clear_bhb_loop+0x30/0x80
[  112.086496][ T5854]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  112.092408][ T5854] RIP: 0033:0x7f37b2675f99
[  112.096848][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.116464][ T5854] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  112.124977][ T5854] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[  112.132966][ T5854] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002
[  112.140953][ T5854] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[  112.148940][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.157170][ T5854] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[  112.165306][ T5854]  </TASK>
[  112.274757][ T5862] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.541'.
[  113.283408][ T5904] netlink: 'syz.2.554': attribute type 39 has an invalid length.
[  114.168079][ T5938] netlink: 'syz.2.571': attribute type 39 has an invalid length.
[  114.463971][ T5942] netlink: 'syz.2.572': attribute type 39 has an invalid length.
[  115.244296][ T5959] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[  115.319496][ T5964] FAULT_INJECTION: forcing a failure.
[  115.319496][ T5964] name failslab, interval 1, probability 0, space 0, times 0
[  115.332859][ T5964] CPU: 0 PID: 5964 Comm: syz.0.579 Not tainted syzkaller #0
[  115.340205][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  115.350316][ T5964] Call Trace:
[  115.353618][ T5964]  <TASK>
[  115.356567][ T5964]  dump_stack_lvl+0x188/0x250
[  115.361293][ T5964]  ? show_regs_print_info+0x20/0x20
[  115.366522][ T5964]  ? load_image+0x410/0x410
[  115.371070][ T5964]  should_fail+0x383/0x4b0
[  115.375518][ T5964]  should_failslab+0x5/0x20
[  115.380097][ T5964]  slab_pre_alloc_hook+0x51/0xc0
[  115.385043][ T5964]  ? nf_ct_ext_add+0x42e/0x660
[  115.389866][ T5964]  __kmalloc_track_caller+0x69/0x330
[  115.395171][ T5964]  ? nf_ct_ext_add+0x42e/0x660
[  115.399977][ T5964]  krealloc+0x5a/0xf0
[  115.403983][ T5964]  nf_ct_ext_add+0x42e/0x660
[  115.408682][ T5964]  init_conntrack+0x76d/0x1530
[  115.413471][ T5964]  ? get_l4proto+0x670/0x670
[  115.418070][ T5964]  ? early_drop+0x800/0x800
[  115.422589][ T5964]  ? nf_conntrack_find_get+0x640/0x640
[  115.428070][ T5964]  ? __siphash_unaligned+0x286/0x3d0
[  115.433383][ T5964]  nf_conntrack_in+0xd76/0x17b0
[  115.438314][ T5964]  ? nf_ct_pernet+0x240/0x240
[  115.443047][ T5964]  ? ip6t_alloc_initial_table+0x640/0x640
[  115.448796][ T5964]  ? ipv6_defrag+0x2d2/0x3a0
[  115.453398][ T5964]  ? ipv6_conntrack_in+0x20/0x20
[  115.458504][ T5964]  nf_hook_slow+0xb9/0x200
[  115.462956][ T5964]  __ip6_local_out+0x738/0x850
[  115.467744][ T5964]  ? ip6_dst_hoplimit+0x310/0x310
[  115.472786][ T5964]  ? __ip6_local_out+0x850/0x850
[  115.477729][ T5964]  ? read_lock_is_recursive+0x10/0x10
[  115.483262][ T5964]  ip6_local_out+0x26/0x120
[  115.487774][ T5964]  ip6_send_skb+0x1af/0x350
[  115.492282][ T5964]  udp_v6_send_skb+0x966/0x14a0
[  115.497136][ T5964]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  115.503119][ T5964]  udp_v6_push_pending_frames+0x1cc/0x320
[  115.508847][ T5964]  ? udp_v6_send_skb+0x14a0/0x14a0
[  115.513986][ T5964]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  115.518842][ T5964]  udpv6_sendmsg+0xecd/0x2520
[  115.523619][ T5964]  ? aa_sk_perm+0x910/0x910
[  115.528324][ T5964]  ? udp_v6_early_demux+0xe10/0xe10
[  115.533528][ T5964]  ? perf_trace_lock+0x301/0x390
[  115.538653][ T5964]  ? aa_sk_perm+0x7dc/0x910
[  115.543177][ T5964]  ? aa_af_perm+0x340/0x340
[  115.547676][ T5964]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  115.554212][ T5964]  ? sock_rps_record_flow+0x17/0x3b0
[  115.559599][ T5964]  ? inet_send_prepare+0x57/0x250
[  115.564635][ T5964]  ? inet6_sendmsg+0x5b/0xd0
[  115.569224][ T5964]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  115.574540][ T5964]  ____sys_sendmsg+0x5be/0x8f0
[  115.579352][ T5964]  ? __sys_sendmsg_sock+0x30/0x30
[  115.584400][ T5964]  ? import_iovec+0x6f/0xa0
[  115.588926][ T5964]  ___sys_sendmsg+0x236/0x2e0
[  115.593622][ T5964]  ? __sys_sendmsg+0x290/0x290
[  115.598461][ T5964]  __se_sys_sendmsg+0x1b7/0x2a0
[  115.603313][ T5964]  ? __x64_sys_sendmsg+0x80/0x80
[  115.608374][ T5964]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  115.614515][ T5964]  ? lockdep_hardirqs_on+0x94/0x140
[  115.619778][ T5964]  do_syscall_64+0x4c/0xa0
[  115.624213][ T5964]  ? clear_bhb_loop+0x30/0x80
[  115.628885][ T5964]  ? clear_bhb_loop+0x30/0x80
[  115.633555][ T5964]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  115.639438][ T5964] RIP: 0033:0x7f37b2675f99
[  115.643848][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.663461][ T5964] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.671883][ T5964] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[  115.679852][ T5964] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000005
[  115.687819][ T5964] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[  115.695781][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.703742][ T5964] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[  115.711730][ T5964]  </TASK>
[  116.074156][ T5974] netlink: 'syz.3.582': attribute type 39 has an invalid length.
[  116.299639][ T5992] netlink: 'syz.4.587': attribute type 39 has an invalid length.
[  116.509863][ T5998] __nla_validate_parse: 14 callbacks suppressed
[  116.509880][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.586'.
[  116.550989][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.586'.
[  117.545456][ T6041] netlink: 'syz.4.606': attribute type 39 has an invalid length.
[  117.885808][ T6061] netlink: 'syz.2.613': attribute type 21 has an invalid length.
[  117.923666][ T6061] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[  117.941744][ T6061] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.613'.
[  118.003543][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.615'.
[  118.065248][ T6067] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.615'.
[  118.804491][ T6086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'.
[  118.862906][ T6086] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.619'.
[  118.882829][ T6089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.621'.
[  119.001063][ T6098] FAULT_INJECTION: forcing a failure.
[  119.001063][ T6098] name failslab, interval 1, probability 0, space 0, times 0
[  119.017861][ T6098] CPU: 1 PID: 6098 Comm: syz.0.625 Not tainted syzkaller #0
[  119.025460][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.035553][ T6098] Call Trace:
[  119.038848][ T6098]  <TASK>
[  119.041788][ T6098]  dump_stack_lvl+0x188/0x250
[  119.046494][ T6098]  ? show_regs_print_info+0x20/0x20
[  119.051719][ T6098]  ? load_image+0x410/0x410
[  119.056245][ T6098]  ? __might_sleep+0xf0/0xf0
[  119.060856][ T6098]  ? __lock_acquire+0x7b50/0x7b50
[  119.065909][ T6098]  should_fail+0x383/0x4b0
[  119.070356][ T6098]  should_failslab+0x5/0x20
[  119.074872][ T6098]  slab_pre_alloc_hook+0x51/0xc0
[  119.079830][ T6098]  ? __d_alloc+0x27/0x6d0
[  119.084292][ T6098]  kmem_cache_alloc+0x3d/0x280
[  119.089101][ T6098]  __d_alloc+0x27/0x6d0
[  119.093294][ T6098]  d_alloc_parallel+0x7b/0x1320
[  119.098159][ T6098]  ? trace_event_raw_event_lock+0x250/0x250
[  119.104094][ T6098]  ? __init_waitqueue_head+0xa4/0x140
[  119.109521][ T6098]  __lookup_slow+0x134/0x410
[  119.114142][ T6098]  ? lookup_one_len+0x2d0/0x2d0
[  119.119054][ T6098]  ? down_read+0x1aa/0x2e0
[  119.123496][ T6098]  lookup_slow+0x53/0x70
[  119.127759][ T6098]  walk_component+0x314/0x460
[  119.132574][ T6098]  link_path_walk+0x688/0xde0
[  119.137302][ T6098]  ? handle_lookup_down+0x130/0x130
[  119.142539][ T6098]  path_lookupat+0x83/0x420
[  119.147062][ T6098]  filename_lookup+0x21e/0x550
[  119.151858][ T6098]  ? hashlen_string+0x110/0x110
[  119.156821][ T6098]  ? getname_kernel+0x56/0x2e0
[  119.161608][ T6098]  ? getname_kernel+0x142/0x2e0
[  119.166494][ T6098]  ? getname_kernel+0x1fc/0x2e0
[  119.171383][ T6098]  kern_path+0x37/0x190
[  119.175822][ T6098]  create_local_trace_uprobe+0xaa/0x660
[  119.181442][ T6098]  ? bpf_get_uprobe_info+0x480/0x480
[  119.186761][ T6098]  ? _copy_from_user+0x111/0x170
[  119.191844][ T6098]  perf_uprobe_init+0xef/0x190
[  119.196640][ T6098]  perf_uprobe_event_init+0xe2/0x170
[  119.201965][ T6098]  perf_try_init_event+0x12b/0x3d0
[  119.206838][ T6096] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.621'.
[  119.207101][ T6098]  perf_event_alloc+0xf78/0x21d0
[  119.207157][ T6098]  ? _raw_spin_unlock+0x24/0x40
[  119.207192][ T6098]  __se_sys_perf_event_open+0x6f5/0x1bb0
[  119.207231][ T6098]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  119.207270][ T6098]  ? lockdep_hardirqs_on+0x94/0x140
[  119.242627][ T6098]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  119.248432][ T6098]  do_syscall_64+0x4c/0xa0
[  119.252867][ T6098]  ? clear_bhb_loop+0x30/0x80
[  119.257744][ T6098]  ? clear_bhb_loop+0x30/0x80
[  119.263462][ T6098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.269360][ T6098] RIP: 0033:0x7f37b2675f99
[  119.273890][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.293612][ T6098] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  119.302070][ T6098] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[  119.310267][ T6098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080
[  119.318442][ T6098] RBP: 00007f37b08ce090 R08: 0000000000000009 R09: 0000000000000000
[  119.326433][ T6098] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  119.334432][ T6098] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[  119.342433][ T6098]  </TASK>
[  122.426676][ T6126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.633'.
[  122.453575][ T6124] netlink: 'syz.3.634': attribute type 10 has an invalid length.
[  122.494787][ T6126] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.633'.
[  122.886265][ T6132] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.637'.
[  123.023166][ T6144] netlink: 'syz.0.642': attribute type 39 has an invalid length.
[  123.066172][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'.
[  123.172094][ T6150] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.233684][ T6148] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.644'.
[  123.821306][ T6177] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.656'.
[  123.986599][ T6181] netlink: 'syz.3.657': attribute type 39 has an invalid length.
[  124.130568][ T6193] FAULT_INJECTION: forcing a failure.
[  124.130568][ T6193] name failslab, interval 1, probability 0, space 0, times 0
[  124.196735][ T6193] CPU: 0 PID: 6193 Comm: syz.0.664 Not tainted syzkaller #0
[  124.204054][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.214118][ T6193] Call Trace:
[  124.215534][ T6195] netlink: 'syz.1.675': attribute type 39 has an invalid length.
[  124.217610][ T6193]  <TASK>
[  124.217621][ T6193]  dump_stack_lvl+0x188/0x250
[  124.217647][ T6193]  ? show_regs_print_info+0x20/0x20
[  124.217665][ T6193]  ? load_image+0x410/0x410
[  124.217687][ T6193]  ? __might_sleep+0xf0/0xf0
[  124.217704][ T6193]  ? __lock_acquire+0x7b50/0x7b50
[  124.217722][ T6193]  ? netlink_insert+0xe90/0x11f0
[  124.257607][ T6193]  should_fail+0x383/0x4b0
[  124.262083][ T6193]  should_failslab+0x5/0x20
[  124.266601][ T6193]  slab_pre_alloc_hook+0x51/0xc0
[  124.271558][ T6193]  kmem_cache_alloc_node+0x47/0x2c0
[  124.276773][ T6193]  ? __alloc_skb+0xf4/0x750
[  124.281287][ T6193]  __alloc_skb+0xf4/0x750
[  124.285614][ T6193]  netlink_sendmsg+0x654/0xbe0
[  124.290649][ T6193]  ? netlink_getsockopt+0x570/0x570
[  124.295848][ T6193]  ? aa_sock_msg_perm+0x94/0x150
[  124.300785][ T6193]  ? apparmor_socket_sendmsg+0x88/0x230
[  124.306384][ T6193]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  124.311659][ T6193]  ? security_socket_sendmsg+0x7c/0xa0
[  124.317103][ T6193]  ? netlink_getsockopt+0x570/0x570
[  124.322286][ T6193]  ____sys_sendmsg+0x5be/0x8f0
[  124.327051][ T6193]  ? __sys_sendmsg_sock+0x30/0x30
[  124.332071][ T6193]  ? import_iovec+0x6f/0xa0
[  124.336558][ T6193]  ___sys_sendmsg+0x236/0x2e0
[  124.341224][ T6193]  ? __sys_sendmsg+0x290/0x290
[  124.345996][ T6193]  __se_sys_sendmsg+0x1b7/0x2a0
[  124.350839][ T6193]  ? __x64_sys_sendmsg+0x80/0x80
[  124.355776][ T6193]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  124.361751][ T6193]  ? lockdep_hardirqs_on+0x94/0x140
[  124.367025][ T6193]  do_syscall_64+0x4c/0xa0
[  124.371428][ T6193]  ? clear_bhb_loop+0x30/0x80
[  124.376111][ T6193]  ? clear_bhb_loop+0x30/0x80
[  124.380775][ T6193]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  124.386652][ T6193] RIP: 0033:0x7f37b2675f99
[  124.391165][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.410878][ T6193] RSP: 002b:00007f37b08ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.419277][ T6193] RAX: ffffffffffffffda RBX: 00007f37b28fdfa0 RCX: 00007f37b2675f99
[  124.427261][ T6193] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  124.435241][ T6193] RBP: 00007f37b08ce090 R08: 0000000000000000 R09: 0000000000000000
[  124.443280][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.451241][ T6193] R13: 00007f37b28fe038 R14: 00007f37b28fdfa0 R15: 00007ffc81550308
[  124.459209][ T6193]  </TASK>
[  124.610478][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.669'.
[  124.637250][ T6209] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  124.654497][ T6209] netlink: 6 bytes leftover after parsing attributes in process `syz.3.669'.
[  124.813974][ T6220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.673'.
[  124.910350][ T6220] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.673'.
[  125.045811][ T6237] netlink: 'syz.3.678': attribute type 1 has an invalid length.
[  125.395218][ T6243] netlink: 'syz.1.681': attribute type 39 has an invalid length.
[  125.529880][ T6249] netlink: 'syz.4.685': attribute type 4 has an invalid length.
[  125.843118][ T6259] netlink: 'syz.3.689': attribute type 1 has an invalid length.
[  126.057897][ T6269] netlink: 'syz.1.693': attribute type 1 has an invalid length.
[  127.011833][ T6328] FAULT_INJECTION: forcing a failure.
[  127.011833][ T6328] name failslab, interval 1, probability 0, space 0, times 0
[  127.066170][ T6328] CPU: 0 PID: 6328 Comm: syz.4.715 Not tainted syzkaller #0
[  127.073499][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  127.083621][ T6328] Call Trace:
[  127.086908][ T6328]  <TASK>
[  127.089846][ T6328]  dump_stack_lvl+0x188/0x250
[  127.094538][ T6328]  ? show_regs_print_info+0x20/0x20
[  127.099749][ T6328]  ? load_image+0x410/0x410
[  127.104269][ T6328]  ? __might_sleep+0xf0/0xf0
[  127.108872][ T6328]  ? __lock_acquire+0x7b50/0x7b50
[  127.114267][ T6328]  should_fail+0x383/0x4b0
[  127.118719][ T6328]  should_failslab+0x5/0x20
[  127.123237][ T6328]  slab_pre_alloc_hook+0x51/0xc0
[  127.128226][ T6328]  __kmalloc_node_track_caller+0x68/0x3a0
[  127.133963][ T6328]  ? netlink_ack+0x35c/0xb10
[  127.138568][ T6328]  ? __alloc_skb+0xf4/0x750
[  127.143119][ T6328]  ? netlink_ack+0x35c/0xb10
[  127.147727][ T6328]  __alloc_skb+0x22c/0x750
[  127.152211][ T6328]  netlink_ack+0x35c/0xb10
[  127.156736][ T6328]  ? memcpy+0x3c/0x60
[  127.160733][ T6328]  ? netlink_dump+0xdd0/0xdd0
[  127.165432][ T6328]  ? __copy_skb_header+0x3ba/0x4f0
[  127.170561][ T6328]  netlink_rcv_skb+0x267/0x430
[  127.175345][ T6328]  ? rtnetlink_bind+0x80/0x80
[  127.180040][ T6328]  ? netlink_ack+0xb10/0xb10
[  127.184658][ T6328]  netlink_unicast+0x78f/0x940
[  127.189452][ T6328]  netlink_sendmsg+0x8ba/0xbe0
[  127.194246][ T6328]  ? netlink_getsockopt+0x570/0x570
[  127.199460][ T6328]  ? aa_sock_msg_perm+0x94/0x150
[  127.204417][ T6328]  ? apparmor_socket_sendmsg+0x88/0x230
[  127.210079][ T6328]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  127.215381][ T6328]  ? security_socket_sendmsg+0x7c/0xa0
[  127.220946][ T6328]  ? netlink_getsockopt+0x570/0x570
[  127.226165][ T6328]  ____sys_sendmsg+0x5be/0x8f0
[  127.230949][ T6328]  ? __sys_sendmsg_sock+0x30/0x30
[  127.236085][ T6328]  ? import_iovec+0x6f/0xa0
[  127.240658][ T6328]  ___sys_sendmsg+0x236/0x2e0
[  127.245358][ T6328]  ? __sys_sendmsg+0x290/0x290
[  127.250164][ T6328]  __se_sys_sendmsg+0x1b7/0x2a0
[  127.255028][ T6328]  ? __x64_sys_sendmsg+0x80/0x80
[  127.259964][ T6328]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  127.266145][ T6328]  ? lockdep_hardirqs_on+0x94/0x140
[  127.271366][ T6328]  do_syscall_64+0x4c/0xa0
[  127.275800][ T6328]  ? clear_bhb_loop+0x30/0x80
[  127.280491][ T6328]  ? clear_bhb_loop+0x30/0x80
[  127.285261][ T6328]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  127.291160][ T6328] RIP: 0033:0x7f7c1d328f99
[  127.295588][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.315374][ T6328] RSP: 002b:00007f7c1b581028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.323793][ T6328] RAX: ffffffffffffffda RBX: 00007f7c1d5b0fa0 RCX: 00007f7c1d328f99
[  127.331767][ T6328] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  127.339733][ T6328] RBP: 00007f7c1b581090 R08: 0000000000000000 R09: 0000000000000000
[  127.347711][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.355695][ T6328] R13: 00007f7c1d5b1038 R14: 00007f7c1d5b0fa0 R15: 00007ffe98aa3b08
[  127.363698][ T6328]  </TASK>
[  127.633919][ T6360] __nla_validate_parse: 17 callbacks suppressed
[  127.633955][ T6360] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.728'.
[  127.915006][ T6371] validate_nla: 12 callbacks suppressed
[  127.915052][ T6371] netlink: 'syz.0.731': attribute type 10 has an invalid length.
[  128.058526][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.737'.
[  128.084970][ T6380] netlink: 'syz.3.737': attribute type 1 has an invalid length.
[  128.098378][ T6380] netlink: 6 bytes leftover after parsing attributes in process `syz.3.737'.
[  128.131271][ T6385] netlink: 'syz.0.738': attribute type 39 has an invalid length.
[  128.424869][ T6404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.747'.
[  128.482332][ T6404] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.747'.
[  128.619896][ T6411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.627801][ T6411] IPv6: NLM_F_CREATE should be set when creating new route
[  128.635349][ T6411] IPv6: NLM_F_CREATE should be set when creating new route
[  128.642878][ T6411] IPv6: NLM_F_CREATE should be set when creating new route
[  128.685751][ T6415] netlink: 'syz.3.751': attribute type 29 has an invalid length.
[  128.853004][ T6415] netlink: 'syz.3.751': attribute type 29 has an invalid length.
[  128.900750][ T6418] netlink: 'syz.3.751': attribute type 29 has an invalid length.
[  128.917329][ T6419] netlink: 'syz.3.751': attribute type 29 has an invalid length.
[  129.032531][ T6422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.753'.
[  129.114575][ T6422] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  129.138112][ T6435] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.756'.
[  129.170988][ T6422] netlink: 6 bytes leftover after parsing attributes in process `syz.4.753'.
[  129.223329][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.756'.
[  129.260677][ T6436] netlink: 'syz.1.754': attribute type 39 has an invalid length.
[  129.461630][ T6452] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.761'.
[  129.517739][ T6455] netlink: 'syz.1.762': attribute type 29 has an invalid length.
[  131.306095][ T6537] ref_ctr_offset mismatch. inode: 0x355 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  132.669766][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.676112][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.772703][ T6611] __nla_validate_parse: 22 callbacks suppressed
[  132.772719][ T6611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.819'.
[  135.368732][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.377170][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.487299][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.824'.
[  135.507568][ T6624] validate_nla: 11 callbacks suppressed
[  135.507615][ T6624] netlink: 'syz.4.824': attribute type 1 has an invalid length.
[  135.527258][ T6624] netlink: 6 bytes leftover after parsing attributes in process `syz.4.824'.
[  135.848720][ T6645] netlink: 'syz.3.830': attribute type 39 has an invalid length.
[  135.930814][ T6652] netlink: 132 bytes leftover after parsing attributes in process `syz.1.833'.
[  136.105475][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.836'.
[  136.188563][ T6659] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.836'.
[  136.244286][ T6664] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  136.382309][ T6668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.839'.
[  136.563978][ T6670] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.839'.
[  136.980653][ T6691] netlink: 'syz.4.846': attribute type 39 has an invalid length.
[  137.035897][ T6693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.847'.
[  137.254548][ T6702] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.849'.
[  137.708272][ T1206] wlan1: Trigger new scan to find an IBSS to join
[  137.802270][ T6717] __nla_validate_parse: 3 callbacks suppressed
[  137.802303][ T6717] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.858'.
[  138.203056][ T6727] netlink: 'syz.2.859': attribute type 39 has an invalid length.
[  138.375236][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'.
[  138.430097][ T6733] netlink: 'syz.3.863': attribute type 1 has an invalid length.
[  138.454439][ T6733] netlink: 6 bytes leftover after parsing attributes in process `syz.3.863'.
[  138.631461][ T6743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.865'.
[  139.184196][ T6746] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.866'.
[  139.327937][ T6765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.876'.
[  139.377445][ T6766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.874'.
[  139.404881][ T6765] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.876'.
[  139.644910][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.877'.
[  139.649438][ T6768] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.874'.
[  139.656496][ T6774] netlink: 'syz.4.877': attribute type 1 has an invalid length.
[  139.964364][ T6782] netlink: 'syz.3.880': attribute type 39 has an invalid length.
[  140.476156][ T6809] netlink: 'syz.4.892': attribute type 39 has an invalid length.
[  140.779281][ T6815] netlink: 'syz.1.893': attribute type 1 has an invalid length.
[  141.483097][ T6836] netlink: 'syz.0.898': attribute type 39 has an invalid length.
[  141.713245][  T154] wlan1: Trigger new scan to find an IBSS to join
[  142.101620][ T6869] netlink: 'syz.0.912': attribute type 1 has an invalid length.
[  142.397373][ T6891] tap0: tun_chr_ioctl cmd 1074025673
[  142.441513][ T6888] tap0: tun_chr_ioctl cmd 1074025677
[  142.485506][ T6895] netlink: 'syz.2.922': attribute type 3 has an invalid length.
[  142.497004][ T6888] tap0: linktype set to 270
[  143.030456][ T6922] __nla_validate_parse: 22 callbacks suppressed
[  143.030474][ T6922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'.
[  143.166900][ T6922] netlink: 'syz.1.929': attribute type 1 has an invalid length.
[  143.214055][ T6922] netlink: 6 bytes leftover after parsing attributes in process `syz.1.929'.
[  143.503351][ T6946] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.942'.
[  143.584724][ T6949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.946'.
[  143.638623][ T6956] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.946'.
[  143.692766][ T6958] netlink: 'syz.3.948': attribute type 3 has an invalid length.
[  143.707728][ T1239] wlan1: Creating new IBSS network, BSSID a6:37:b8:50:17:06
[  143.749234][ T6958] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.948'.
[  143.840026][ T6965] FAULT_INJECTION: forcing a failure.
[  143.840026][ T6965] name failslab, interval 1, probability 0, space 0, times 0
[  143.925042][ T6969] netlink: 'syz.0.952': attribute type 39 has an invalid length.
[  143.947781][ T6965] CPU: 1 PID: 6965 Comm: syz.1.951 Not tainted syzkaller #0
[  143.952154][ T6968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.953'.
[  143.955094][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.955108][ T6965] Call Trace:
[  143.955114][ T6965]  <TASK>
[  143.955122][ T6965]  dump_stack_lvl+0x188/0x250
[  143.955151][ T6965]  ? show_regs_print_info+0x20/0x20
[  143.975714][ T6968] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  143.977302][ T6965]  ? load_image+0x410/0x410
[  143.977329][ T6965]  ? __might_sleep+0xf0/0xf0
[  143.977345][ T6965]  ? __lock_acquire+0x7b50/0x7b50
[  143.977368][ T6965]  should_fail+0x383/0x4b0
[  143.977390][ T6965]  should_failslab+0x5/0x20
[  143.977411][ T6965]  slab_pre_alloc_hook+0x51/0xc0
[  143.977428][ T6965]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  143.977443][ T6965]  ? __get_vm_area_node+0x119/0x2d0
[  143.977464][ T6965]  __get_vm_area_node+0x119/0x2d0
[  143.977485][ T6965]  __vmalloc_node_range+0xef/0x8b0
[  143.977501][ T6965]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  143.977521][ T6965]  ? end_current_label_crit_section+0x170/0x170
[  143.977539][ T6965]  ? __lock_acquire+0x7b50/0x7b50
[  143.977558][ T6965]  ? __lock_acquire+0x13dc/0x7b50
[  143.977578][ T6965]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  143.985827][ T6968] netlink: 6 bytes leftover after parsing attributes in process `syz.2.953'.
[  143.990338][ T6965]  __vmalloc+0x76/0x80
[  143.990364][ T6965]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  143.990383][ T6965]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  143.990408][ T6965]  bpf_prog_alloc+0x1a/0x1e0
[  143.990427][ T6965]  bpf_prog_load+0x7d1/0x14e0
[  143.990452][ T6965]  ? map_freeze+0x360/0x360
[  143.990467][ T6965]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  143.990486][ T6965]  ? lockdep_hardirqs_on+0x94/0x140
[  143.990515][ T6965]  ? copy_user_generic_unrolled+0x89/0xc0
[  143.990532][ T6965]  ? bpf_lsm_bpf+0x5/0x10
[  143.990549][ T6965]  ? security_bpf+0x7a/0xa0
[  143.990570][ T6965]  __sys_bpf+0x532/0x6f0
[  143.990589][ T6965]  ? bpf_link_show_fdinfo+0x380/0x380
[  144.147264][ T6965]  ? rcu_nmi_exit+0x6f/0xf0
[  144.151785][ T6965]  __x64_sys_bpf+0x78/0x90
[  144.156199][ T6965]  do_syscall_64+0x4c/0xa0
[  144.160790][ T6965]  ? clear_bhb_loop+0x30/0x80
[  144.165472][ T6965]  ? clear_bhb_loop+0x30/0x80
[  144.170247][ T6965]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  144.176147][ T6965] RIP: 0033:0x7fd8f164ef99
[  144.180554][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.200164][ T6965] RSP: 002b:00007fd8ef8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.208579][ T6965] RAX: ffffffffffffffda RBX: 00007fd8f18d6fa0 RCX: 00007fd8f164ef99
[  144.216547][ T6965] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  144.224520][ T6965] RBP: 00007fd8ef8a7090 R08: 0000000000000000 R09: 0000000000000000
[  144.232498][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.240464][ T6965] R13: 00007fd8f18d7038 R14: 00007fd8f18d6fa0 R15: 00007ffcec3e27d8
[  144.248444][ T6965]  </TASK>
[  144.298062][ T6965] syz.1.951: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  144.318639][ T6965] CPU: 0 PID: 6965 Comm: syz.1.951 Not tainted syzkaller #0
[  144.325951][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  144.336021][ T6965] Call Trace:
[  144.339309][ T6965]  <TASK>
[  144.342298][ T6965]  dump_stack_lvl+0x188/0x250
[  144.347132][ T6965]  ? rcu_lock_release+0x5/0x20
[  144.351906][ T6965]  ? show_regs_print_info+0x20/0x20
[  144.357123][ T6965]  ? load_image+0x410/0x410
[  144.361649][ T6965]  warn_alloc+0x245/0x320
[  144.365990][ T6965]  ? zone_watermark_ok_safe+0x250/0x250
[  144.371548][ T6965]  ? __get_vm_area_node+0x2b5/0x2d0
[  144.376799][ T6965]  __vmalloc_node_range+0x2b1/0x8b0
[  144.382008][ T6965]  ? end_current_label_crit_section+0x170/0x170
[  144.388261][ T6965]  ? __lock_acquire+0x7b50/0x7b50
[  144.393296][ T6965]  ? __lock_acquire+0x13dc/0x7b50
[  144.398324][ T6965]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  144.403873][ T6965]  __vmalloc+0x76/0x80
[  144.407943][ T6965]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  144.413497][ T6965]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  144.418872][ T6965]  bpf_prog_alloc+0x1a/0x1e0
[  144.423466][ T6965]  bpf_prog_load+0x7d1/0x14e0
[  144.428163][ T6965]  ? map_freeze+0x360/0x360
[  144.432676][ T6965]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  144.438835][ T6965]  ? lockdep_hardirqs_on+0x94/0x140
[  144.444052][ T6965]  ? copy_user_generic_unrolled+0x89/0xc0
[  144.449777][ T6965]  ? bpf_lsm_bpf+0x5/0x10
[  144.454109][ T6965]  ? security_bpf+0x7a/0xa0
[  144.458630][ T6965]  __sys_bpf+0x532/0x6f0
[  144.462876][ T6965]  ? bpf_link_show_fdinfo+0x380/0x380
[  144.468229][ T6965]  ? rcu_nmi_exit+0x6f/0xf0
[  144.472761][ T6965]  __x64_sys_bpf+0x78/0x90
[  144.477164][ T6965]  do_syscall_64+0x4c/0xa0
[  144.481584][ T6965]  ? clear_bhb_loop+0x30/0x80
[  144.486243][ T6965]  ? clear_bhb_loop+0x30/0x80
[  144.490902][ T6965]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  144.496780][ T6965] RIP: 0033:0x7fd8f164ef99
[  144.501180][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.520785][ T6965] RSP: 002b:00007fd8ef8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.529200][ T6965] RAX: ffffffffffffffda RBX: 00007fd8f18d6fa0 RCX: 00007fd8f164ef99
[  144.537160][ T6965] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  144.545116][ T6965] RBP: 00007fd8ef8a7090 R08: 0000000000000000 R09: 0000000000000000
[  144.553101][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.561070][ T6965] R13: 00007fd8f18d7038 R14: 00007fd8f18d6fa0 R15: 00007ffcec3e27d8
[  144.569061][ T6965]  </TASK>
[  144.610645][ T6965] Mem-Info:
[  144.613938][ T6965] active_anon:276 inactive_anon:5568 isolated_anon:0
[  144.613938][ T6965]  active_file:13944 inactive_file:39335 isolated_file:0
[  144.613938][ T6965]  unevictable:768 dirty:133 writeback:0
[  144.613938][ T6965]  slab_reclaimable:21670 slab_unreclaimable:97727
[  144.613938][ T6965]  mapped:29760 shmem:1632 pagetables:623 bounce:0
[  144.613938][ T6965]  kernel_misc_reclaimable:0
[  144.613938][ T6965]  free:1374599 free_pcp:12019 free_cma:0
[  144.666359][ T6965] Node 0 active_anon:1072kB inactive_anon:21560kB active_file:55572kB inactive_file:157340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119040kB dirty:532kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10356kB pagetables:2392kB all_unreclaimable? no
[  144.742722][ T6983] netlink: 180 bytes leftover after parsing attributes in process `syz.0.957'.
[  144.796926][ T6983] netlink: 180 bytes leftover after parsing attributes in process `syz.0.957'.
[  144.873890][ T6965] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  144.899255][ T6983] netlink: 'syz.0.957': attribute type 4 has an invalid length.
[  144.923869][ T6983] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[  144.983496][ T6965] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.345090][ T6965] lowmem_reserve[]: 0 2539 2540 2540 2540
[  145.372696][ T6965] Node 0 DMA32 free:1566548kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:21760kB active_file:55572kB inactive_file:157340kB unevictable:1536kB writepending:588kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:43148kB local_pcp:21676kB free_cma:0kB
[  145.612661][ T6965] lowmem_reserve[]: 0 0 0 0 0
[  145.627129][ T6965] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.714891][ T6965] lowmem_reserve[]: 0 0 0 0 0
[  145.725816][ T6965] Node 1 Normal free:3914868kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5768kB local_pcp:3752kB free_cma:0kB
[  145.764511][ T6965] lowmem_reserve[]: 0 0 0 0 0
[  145.770235][ T6965] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  145.797222][ T7025] FAULT_INJECTION: forcing a failure.
[  145.797222][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.817927][ T7025] CPU: 1 PID: 7025 Comm: syz.2.974 Not tainted syzkaller #0
[  145.825251][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  145.835314][ T7025] Call Trace:
[  145.838598][ T7025]  <TASK>
[  145.841545][ T7025]  dump_stack_lvl+0x188/0x250
[  145.846225][ T7025]  ? show_regs_print_info+0x20/0x20
[  145.851419][ T7025]  ? load_image+0x410/0x410
[  145.855912][ T7025]  ? __lock_acquire+0x7b50/0x7b50
[  145.860925][ T7025]  ? rcu_lock_acquire+0x30/0x30
[  145.865765][ T7025]  should_fail+0x383/0x4b0
[  145.870212][ T7025]  _copy_from_user+0x2e/0x170
[  145.874965][ T7025]  ip_tunnel_siocdevprivate+0xbe/0x1e0
[  145.880443][ T7025]  ? ip_tunnel_update+0xc70/0xc70
[  145.885480][ T7025]  ? full_name_hash+0x8e/0xe0
[  145.890160][ T7025]  dev_ifsioc+0xa30/0xd50
[  145.894475][ T7025]  ? dev_ioctl+0xe30/0xe30
[  145.898873][ T7025]  ? full_name_hash+0x8e/0xe0
[  145.903551][ T7025]  dev_ioctl+0x5df/0xe30
[  145.907778][ T7025]  ? get_user_ifreq+0xc7/0x170
[  145.912525][ T7025]  sock_ioctl+0x679/0x700
[  145.916838][ T7025]  ? sock_poll+0x420/0x420
[  145.921242][ T7025]  ? bpf_lsm_file_ioctl+0x5/0x10
[  145.926175][ T7025]  ? security_file_ioctl+0x7c/0xa0
[  145.931268][ T7025]  ? sock_poll+0x420/0x420
[  145.935664][ T7025]  __se_sys_ioctl+0xfa/0x170
[  145.940239][ T7025]  do_syscall_64+0x4c/0xa0
[  145.944635][ T7025]  ? clear_bhb_loop+0x30/0x80
[  145.949291][ T7025]  ? clear_bhb_loop+0x30/0x80
[  145.953948][ T7025]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  145.959832][ T7025] RIP: 0033:0x7fa3438e5f99
[  145.964244][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.983981][ T7025] RSP: 002b:00007fa341b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  145.992465][ T7025] RAX: ffffffffffffffda RBX: 00007fa343b6dfa0 RCX: 00007fa3438e5f99
[  146.000437][ T7025] RDX: 0000200000000900 RSI: 00000000000089f1 RDI: 0000000000000004
[  146.008419][ T7025] RBP: 00007fa341b3e090 R08: 0000000000000000 R09: 0000000000000000
[  146.016375][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.024329][ T7025] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[  146.032302][ T7025]  </TASK>
[  146.055469][ T6965] Node 0 DMA32: 1568*4kB (UME) 1018*8kB (UME) 976*16kB (UME) 428*32kB (UME) 607*64kB (UM) 297*128kB (UM) 107*256kB (UME) 66*512kB (UME) 25*1024kB (UME) 12*2048kB (UM) 326*4096kB (M) = 1567248kB
[  146.084156][ T6965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  146.099861][ T7026] netlink: 'syz.0.971': attribute type 1 has an invalid length.
[  146.112807][ T6965] Node 1 Normal: 121*4kB (UME) 28*8kB (UE) 23*16kB (UME) 128*32kB (UE) 53*64kB (UME) 18*128kB (UME) 6*256kB (UM) 4*512kB (U) 1*1024kB (U) 2*2048kB (UM) 951*4096kB (ME) = 3914868kB
[  146.211589][ T6965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  146.257809][  T154] tipc: Subscription rejected, illegal request
[  146.271039][ T6965] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.313606][ T6965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  146.346174][ T6965] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.356447][ T6965] 54911 total pagecache pages
[  146.374726][ T6965] 0 pages in swap cache
[  146.396099][ T6965] Swap cache stats: add 0, delete 0, find 0/0
[  146.412301][ T6965] Free swap  = 124996kB
[  146.421372][ T6965] Total swap = 124996kB
[  146.435616][ T6965] 2097051 pages RAM
[  146.450093][ T6965] 0 pages HighMem/MovableOnly
[  146.470384][ T6965] 411499 pages reserved
[  146.474723][ T6965] 0 pages cma reserved
[  146.655006][ T7054] -1: renamed from syzkaller0
[  146.815505][ T7061] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[  148.861952][ T7080] __nla_validate_parse: 11 callbacks suppressed
[  148.861985][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.994'.
[  148.906322][ T7078] netlink: 'syz.4.992': attribute type 3 has an invalid length.
[  148.940382][ T7078] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.992'.
[  148.942213][ T7080] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.994'.
[  149.155661][ T7094] netlink: 'syz.3.1000': attribute type 39 has an invalid length.
[  149.464396][ T7112] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1003'.
[  149.613038][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1006'.
[  149.658712][ T7111] netlink: 'syz.3.1006': attribute type 1 has an invalid length.
[  149.681751][ T7111] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1006'.
[  149.862200][ T7127] netlink: 'syz.4.1012': attribute type 23 has an invalid length.
[  151.402209][ T7137] netlink: 'syz.2.1016': attribute type 39 has an invalid length.
[  151.534770][ T7152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1022'.
[  151.597567][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1021'.
[  151.614932][ T7147] netlink: 'syz.4.1021': attribute type 1 has an invalid length.
[  151.623338][ T7147] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1021'.
[  151.681394][ T7154] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1023'.
[  151.819967][ T7165] device bridge_slave_1 left promiscuous mode
[  151.826870][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.477522][ T7165] device bridge_slave_0 left promiscuous mode
[  153.496556][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.669979][ T7190] netlink: 'syz.0.1035': attribute type 39 has an invalid length.
[  153.713690][ T7194] FAULT_INJECTION: forcing a failure.
[  153.713690][ T7194] name failslab, interval 1, probability 0, space 0, times 0
[  153.744640][ T7194] CPU: 1 PID: 7194 Comm: syz.2.1037 Not tainted syzkaller #0
[  153.752066][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  153.762134][ T7194] Call Trace:
[  153.765438][ T7194]  <TASK>
[  153.768374][ T7194]  dump_stack_lvl+0x188/0x250
[  153.773065][ T7194]  ? show_regs_print_info+0x20/0x20
[  153.778311][ T7194]  ? load_image+0x410/0x410
[  153.782829][ T7194]  ? __might_sleep+0xf0/0xf0
[  153.787433][ T7194]  ? __lock_acquire+0x7b50/0x7b50
[  153.792475][ T7194]  should_fail+0x383/0x4b0
[  153.796918][ T7194]  should_failslab+0x5/0x20
[  153.801434][ T7194]  slab_pre_alloc_hook+0x51/0xc0
[  153.806384][ T7194]  __kmalloc_node_track_caller+0x68/0x3a0
[  153.812117][ T7194]  ? netlink_sendmsg+0x654/0xbe0
[  153.817075][ T7194]  ? __alloc_skb+0xf4/0x750
[  153.821598][ T7194]  ? netlink_sendmsg+0x654/0xbe0
[  153.826561][ T7194]  __alloc_skb+0x22c/0x750
[  153.831002][ T7194]  netlink_sendmsg+0x654/0xbe0
[  153.835787][ T7194]  ? netlink_getsockopt+0x570/0x570
[  153.841000][ T7194]  ? aa_sock_msg_perm+0x94/0x150
[  153.845954][ T7194]  ? apparmor_socket_sendmsg+0x88/0x230
[  153.851522][ T7194]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  153.856830][ T7194]  ? security_socket_sendmsg+0x7c/0xa0
[  153.862311][ T7194]  ? netlink_getsockopt+0x570/0x570
[  153.867523][ T7194]  ____sys_sendmsg+0x5be/0x8f0
[  153.872305][ T7194]  ? __sys_sendmsg_sock+0x30/0x30
[  153.877355][ T7194]  ? import_iovec+0x6f/0xa0
[  153.881875][ T7194]  ___sys_sendmsg+0x236/0x2e0
[  153.886581][ T7194]  ? __sys_sendmsg+0x290/0x290
[  153.887374][ T7206] __nla_validate_parse: 2 callbacks suppressed
[  153.887387][ T7206] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1040'.
[  153.891391][ T7194]  __se_sys_sendmsg+0x1b7/0x2a0
[  153.891421][ T7194]  ? __x64_sys_sendmsg+0x80/0x80
[  153.891436][ T7194]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  153.922309][ T7194]  ? lockdep_hardirqs_on+0x94/0x140
[  153.927524][ T7194]  do_syscall_64+0x4c/0xa0
[  153.931952][ T7194]  ? clear_bhb_loop+0x30/0x80
[  153.936636][ T7194]  ? clear_bhb_loop+0x30/0x80
[  153.941331][ T7194]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.947237][ T7194] RIP: 0033:0x7fa3438e5f99
[  153.951669][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.971295][ T7194] RSP: 002b:00007fa341b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.979726][ T7194] RAX: ffffffffffffffda RBX: 00007fa343b6dfa0 RCX: 00007fa3438e5f99
[  153.987709][ T7194] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  153.995693][ T7194] RBP: 00007fa341b3e090 R08: 0000000000000000 R09: 0000000000000000
[  154.003682][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.011665][ T7194] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[  154.019658][ T7194]  </TASK>
[  154.384606][ T7224] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1049'.
[  154.512791][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1053'.
[  154.550964][ T7234] netlink: 'syz.1.1053': attribute type 1 has an invalid length.
[  154.574826][ T7234] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1053'.
[  155.128576][ T7245] ------------[ cut here ]------------
[  155.134135][ T7245] WARNING: CPU: 0 PID: 7245 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480
[  155.143987][ T7245] Modules linked in:
[  155.147933][ T7245] CPU: 0 PID: 7245 Comm: syz.2.1056 Not tainted syzkaller #0
[  155.155442][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.165560][ T7245] RIP: 0010:perf_pending_task+0x353/0x480
[  155.171335][ T7245] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 bc c3 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  155.191425][ T7245] RSP: 0018:ffffc9000325f9c0 EFLAGS: 00010293
[  155.197549][ T7245] RAX: ffffffff819ab973 RBX: ffff88805ff10a48 RCX: ffff88802bf21dc0
[  155.205535][ T7245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  155.213762][ T7245] RBP: ffff88805ff10818 R08: ffff88802bf227d3 R09: 1ffff110057e44fa
[  155.221870][ T7245] R10: dffffc0000000000 R11: ffffed10057e44fb R12: ffff88802bf21dc0
[  155.229986][ T7245] R13: ffff8880771b5558 R14: 0000000000000000 R15: 1ffff1100bfe2103
[  155.238005][ T7245] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  155.247360][ T7245] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  155.253945][ T7245] CR2: 00007fa3416db000 CR3: 000000007a937000 CR4: 00000000003506f0
[  155.261986][ T7245] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  155.270004][ T7245] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  155.278034][ T7245] Call Trace:
[  155.281309][ T7245]  <TASK>
[  155.284229][ T7245]  task_work_run+0x125/0x1a0
[  155.288894][ T7245]  do_exit+0x635/0x2110
[  155.293059][ T7245]  ? put_task_struct+0x80/0x80
[  155.297875][ T7245]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  155.304310][ T7245]  do_group_exit+0x12c/0x2f0
[  155.308968][ T7245]  get_signal+0x7eb/0x12e0
[  155.313398][ T7245]  arch_do_signal_or_restart+0xe6/0x12a0
[  155.319128][ T7245]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.325260][ T7245]  ? kasan_quarantine_put+0x84/0x210
[  155.330768][ T7245]  ? get_sigframe_size+0x10/0x10
[  155.335726][ T7245]  ? rcu_is_watching+0x11/0xa0
[  155.340568][ T7245]  ? do_mkdirat+0x52d/0x5c0
[  155.345089][ T7245]  ? exit_to_user_mode_loop+0x3b/0x130
[  155.350691][ T7245]  exit_to_user_mode_loop+0x9e/0x130
[  155.356008][ T7245]  exit_to_user_mode_prepare+0xee/0x180
[  155.361633][ T7245]  syscall_exit_to_user_mode+0x16/0x40
[  155.367423][ T7245]  do_syscall_64+0x58/0xa0
[  155.371848][ T7245]  ? clear_bhb_loop+0x30/0x80
[  155.376506][ T7245]  ? clear_bhb_loop+0x30/0x80
[  155.381222][ T7245]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.387182][ T7245] RIP: 0033:0x7fa3438e5f99
[  155.392384][ T7245] Code: Unable to access opcode bytes at RIP 0x7fa3438e5f6f.
[  155.399832][ T7245] RSP: 002b:00007fa341b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  155.408403][ T7245] RAX: ffffffffffffffef RBX: 00007fa343b6dfa0 RCX: 00007fa3438e5f99
[  155.416367][ T7245] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  155.424378][ T7245] RBP: 00007fa34397cec4 R08: 0000000000000000 R09: 0000000000000000
[  155.432400][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.440440][ T7245] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[  155.448486][ T7245]  </TASK>
[  155.451522][ T7245] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  155.458783][ T7245] CPU: 0 PID: 7245 Comm: syz.2.1056 Not tainted syzkaller #0
[  155.466174][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.476215][ T7245] Call Trace:
[  155.479482][ T7245]  <TASK>
[  155.482414][ T7245]  dump_stack_lvl+0x188/0x250
[  155.487243][ T7245]  ? show_regs_print_info+0x20/0x20
[  155.492447][ T7245]  ? load_image+0x410/0x410
[  155.496963][ T7245]  panic+0x2f8/0x850
[  155.500853][ T7245]  ? bpf_jit_dump+0xd0/0xd0
[  155.505349][ T7245]  ? perf_pending_task+0x353/0x480
[  155.510460][ T7245]  __warn+0x248/0x2b0
[  155.514449][ T7245]  ? perf_pending_task+0x353/0x480
[  155.519555][ T7245]  report_bug+0x1b9/0x2e0
[  155.523891][ T7245]  handle_bug+0x3a/0x70
[  155.528043][ T7245]  exc_invalid_op+0x16/0x40
[  155.532541][ T7245]  asm_exc_invalid_op+0x16/0x20
[  155.537376][ T7245] RIP: 0010:perf_pending_task+0x353/0x480
[  155.543101][ T7245] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 bc c3 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  155.562693][ T7245] RSP: 0018:ffffc9000325f9c0 EFLAGS: 00010293
[  155.568755][ T7245] RAX: ffffffff819ab973 RBX: ffff88805ff10a48 RCX: ffff88802bf21dc0
[  155.576809][ T7245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  155.584773][ T7245] RBP: ffff88805ff10818 R08: ffff88802bf227d3 R09: 1ffff110057e44fa
[  155.592761][ T7245] R10: dffffc0000000000 R11: ffffed10057e44fb R12: ffff88802bf21dc0
[  155.601358][ T7245] R13: ffff8880771b5558 R14: 0000000000000000 R15: 1ffff1100bfe2103
[  155.609349][ T7245]  ? perf_pending_task+0x353/0x480
[  155.614481][ T7245]  task_work_run+0x125/0x1a0
[  155.619064][ T7245]  do_exit+0x635/0x2110
[  155.623254][ T7245]  ? put_task_struct+0x80/0x80
[  155.628005][ T7245]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  155.634152][ T7245]  do_group_exit+0x12c/0x2f0
[  155.638746][ T7245]  get_signal+0x7eb/0x12e0
[  155.643172][ T7245]  arch_do_signal_or_restart+0xe6/0x12a0
[  155.648823][ T7245]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.654881][ T7245]  ? kasan_quarantine_put+0x84/0x210
[  155.660164][ T7245]  ? get_sigframe_size+0x10/0x10
[  155.665113][ T7245]  ? rcu_is_watching+0x11/0xa0
[  155.669875][ T7245]  ? do_mkdirat+0x52d/0x5c0
[  155.674380][ T7245]  ? exit_to_user_mode_loop+0x3b/0x130
[  155.679855][ T7245]  exit_to_user_mode_loop+0x9e/0x130
[  155.685158][ T7245]  exit_to_user_mode_prepare+0xee/0x180
[  155.690706][ T7245]  syscall_exit_to_user_mode+0x16/0x40
[  155.696158][ T7245]  do_syscall_64+0x58/0xa0
[  155.700587][ T7245]  ? clear_bhb_loop+0x30/0x80
[  155.705255][ T7245]  ? clear_bhb_loop+0x30/0x80
[  155.709979][ T7245]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.715911][ T7245] RIP: 0033:0x7fa3438e5f99
[  155.720318][ T7245] Code: Unable to access opcode bytes at RIP 0x7fa3438e5f6f.
[  155.727676][ T7245] RSP: 002b:00007fa341b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  155.736240][ T7245] RAX: ffffffffffffffef RBX: 00007fa343b6dfa0 RCX: 00007fa3438e5f99
[  155.744196][ T7245] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  155.752198][ T7245] RBP: 00007fa34397cec4 R08: 0000000000000000 R09: 0000000000000000
[  155.760227][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.768331][ T7245] R13: 00007fa343b6e038 R14: 00007fa343b6dfa0 R15: 00007fff9bb9c228
[  155.776401][ T7245]  </TASK>
[  155.779651][ T7245] Kernel Offset: disabled
[  155.783984][ T7245] Rebooting in 86400 seconds..