last executing test programs:

3m15.490479191s ago: executing program 3 (id=1901):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0xf, 0x3, 0x2)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}, 0x4001)

3m15.180346922s ago: executing program 3 (id=1902):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x4000000)
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000)
close(r6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m14.498345328s ago: executing program 3 (id=1906):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)

3m14.405253274s ago: executing program 3 (id=1909):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 46)

3m13.44392051s ago: executing program 3 (id=1911):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4)
r3 = socket$kcm(0xa, 0x2, 0x88) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe845, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x1, 0xbb6ed56, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x4ea}], 0x1}, 0x48800)

3m13.209705026s ago: executing program 3 (id=1912):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0xfe33)
recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_pid(r6, &(0x7f0000000000), 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x1, 0x8, r3, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x5}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getpid()
syz_clone(0x1040800, &(0x7f0000000380)="bbd3c9ba58569752b5d2cf33351ca0d130118d194d348fe582f424cdf6434eb65b5a89bfad93add16eda2757829786e1345dfacaa6353a90a3cd5ab90c450464aaad3075dab49a57ba9170956d4ecab160f3a54fe3e0cfd23f3286b0311326b124df7eff990dd38608d2e70f0a84756e73dcce8578e93e6326ea4db8ae9a8ba871d7c002aea9e3aaf7178bc4a9d475b82a1dd864de370c76b29235d5099a198b853285d28acdd23fb1bd882bdf4505ddb0fc7f78b5b7e943638994baed293a9e115561d3494ef3a1ad8005e3203e3bb6e90ba4a2f580ac171ddb2ef1f7e0563711c335", 0xe3, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="9185dead146476fed962a35986f9b1de048960e5c2a76749dcbf59d676638ad44de76cb9c4d7b14b8c11b25e562af2330a3dc23a2477a4834babd96994100f581a57f11109138a2db4bb9c65a3816f1b80834016ab02a6a8befe191432749fa316c7e29630d385b09a5bde1d6e5fb3a4e3ad7cb8b0e8124d72a791ce80e72c88584793272fc88edcfdb13f4ce99bb46223449340bb1f7fb879cbe6332dc4b28052046748530bbc6d43cb454f788d152d36d55bd817cfe3a964858303f5b30f5bfa22ce9282a51a730f330625c2b22873ca71")
syz_clone(0x400c0000, &(0x7f0000000700)="42b054d3dbfd466fe7f939c587077c42c2d5e355c8b353bc1f3c4961b2fe65045ba835a76b92177a05d3c8575349f6969426e3ad6603dae5416f7385d6ce3ac075de415b5d09b110d835afd3fadcaa7a774ca8a1439c8911e5edf4fdd32a5ce6a38a4861ac9b36574e6ce2d59f35165f33b2fbf39f4985e6cd367e17b1e629b80a3c35624f87e41d2fee44d8a35c993460173eca884cfcbfd22bb30d99d5a9484810f4b36d6813a2173e5a00442ef76be8bae2a734a30d170172a776f37fee68c9c78d8fed49ac3c317415e677a84496ef2acc61011833d62e99c058e5a3c24c3646517a8e44d8c7ae6cac9b70473bfaf793a45db0", 0xf5, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="38e4f790058674381030cbdbb6bf71126c04da3fdfc07ff92d2c4f27066610d250090085bef70dd9070f9515951350df32022519f95e32761abc45ec9930004c05a34072daacb41d40e488c8902d6be7")
socket$kcm(0x10, 0x400000002, 0x0)

2m57.542539914s ago: executing program 32 (id=1912):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0xfe33)
recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_pid(r6, &(0x7f0000000000), 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x1, 0x8, r3, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x5}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getpid()
syz_clone(0x1040800, &(0x7f0000000380)="bbd3c9ba58569752b5d2cf33351ca0d130118d194d348fe582f424cdf6434eb65b5a89bfad93add16eda2757829786e1345dfacaa6353a90a3cd5ab90c450464aaad3075dab49a57ba9170956d4ecab160f3a54fe3e0cfd23f3286b0311326b124df7eff990dd38608d2e70f0a84756e73dcce8578e93e6326ea4db8ae9a8ba871d7c002aea9e3aaf7178bc4a9d475b82a1dd864de370c76b29235d5099a198b853285d28acdd23fb1bd882bdf4505ddb0fc7f78b5b7e943638994baed293a9e115561d3494ef3a1ad8005e3203e3bb6e90ba4a2f580ac171ddb2ef1f7e0563711c335", 0xe3, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="9185dead146476fed962a35986f9b1de048960e5c2a76749dcbf59d676638ad44de76cb9c4d7b14b8c11b25e562af2330a3dc23a2477a4834babd96994100f581a57f11109138a2db4bb9c65a3816f1b80834016ab02a6a8befe191432749fa316c7e29630d385b09a5bde1d6e5fb3a4e3ad7cb8b0e8124d72a791ce80e72c88584793272fc88edcfdb13f4ce99bb46223449340bb1f7fb879cbe6332dc4b28052046748530bbc6d43cb454f788d152d36d55bd817cfe3a964858303f5b30f5bfa22ce9282a51a730f330625c2b22873ca71")
syz_clone(0x400c0000, &(0x7f0000000700)="42b054d3dbfd466fe7f939c587077c42c2d5e355c8b353bc1f3c4961b2fe65045ba835a76b92177a05d3c8575349f6969426e3ad6603dae5416f7385d6ce3ac075de415b5d09b110d835afd3fadcaa7a774ca8a1439c8911e5edf4fdd32a5ce6a38a4861ac9b36574e6ce2d59f35165f33b2fbf39f4985e6cd367e17b1e629b80a3c35624f87e41d2fee44d8a35c993460173eca884cfcbfd22bb30d99d5a9484810f4b36d6813a2173e5a00442ef76be8bae2a734a30d170172a776f37fee68c9c78d8fed49ac3c317415e677a84496ef2acc61011833d62e99c058e5a3c24c3646517a8e44d8c7ae6cac9b70473bfaf793a45db0", 0xf5, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="38e4f790058674381030cbdbb6bf71126c04da3fdfc07ff92d2c4f27066610d250090085bef70dd9070f9515951350df32022519f95e32761abc45ec9930004c05a34072daacb41d40e488c8902d6be7")
socket$kcm(0x10, 0x400000002, 0x0)

31.760150985s ago: executing program 0 (id=2526):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x68}, 0x4000000)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x97, 0x4, 0x8, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x15, 0xa, 0x5, 0x80, 0xfffffffffffffff0}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1b, &(0x7f00000002c0)=""/27, 0x40f00, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0xe, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0x7fffffff}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000400)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

31.612343415s ago: executing program 0 (id=2527):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000300)="bef19b49ea639a168a1c8804df269096674d64d8932afdb84249c88107b650b26fb3e9e246e8724c4a52e9862d834dd07c232adc441fb91d5649d9c39b079b95bec2293f5707c774614ba70c2af84de439f908f2c9fe584ebdbf4ebbdee28f8cafa760f0e25066d02e92c976653aeb316bac8559f6643878e33a2261ed2e8d89237f2b63173daa3547201c6278ad9415f4c5a8265567aeedaeec08fed7cba77a037541ec05730bd89fb881da417ca1a6f285da9777c5e3eef6258320e4227c320f6f97461a42cda6ba90922f9a3268f2cd118495ad72af426c9ddb547ae8bd3d4c8d504fc20515dd2d0daf50971fb476fd7f1b871ce3", 0xf6}, {&(0x7f0000000400)="8890800c40ae8f7b8c1639cc6b8b0f64538843ba5b6f27507106d9c84b24ff54e0b601cdffa6278f67c5c6244e430db29a699dbbc4a1cd3167cbef608b8c3c9456f041030ee6dc5aee1fc2ae069657d217b284780b2b4a56e927199d4b4aec85b6771202ce10b5e5bb5e6652c052b36f3ece774d57e894fc0f44febce5ad27e6b5c3e119f9c4197cd4751e738bc93594b99ba7e59b7e5030dc5af3e87f779cc02ada332d30ac7ca72da30cd69b2b3acab2b95e62a43da415472451f104", 0xbd}, {&(0x7f00000004c0)="788438bf41f720ac1798bfd69ba0dd3129f800789cc58add60d500087e9208c014e1fdcb74eb6e856290bda21cb249564ec2f779c088eb8c53253bbb9160b92cee060cfa5cd4218003a267f271baad586c9b0453279b3599e465027553e3cd9e1ed8645bae364db4388940eb995188e6700efa397f92e8ac79e302beb280e346d852d28a9ea50bafc75832f497f387099516685fb2c98024438ded7d2f5a863c6dab72893c01e93bf132127c3762d5090eba5739936478024993f290507894fd38bfd52e9d0a5748e6f18be72f32f879d03bf06567ca403ca7b1b93e", 0xdc}, {&(0x7f00000005c0)="7f6e7c36af81303d13591bb1fbb0f4d8e86836052c7b15e676b01f6d0b2fea", 0x1f}, {&(0x7f0000000600)="6e9741f130ed4b763807a158d587d2a5eee973ab7362cd3171", 0x19}, {&(0x7f0000000640)="148417538ae62f0625e90909c4ec", 0xe}, {&(0x7f00000006c0)="da29dc765aab5f89e0332e88e525510a61365f4c9ac3213a8c60cd3f2aafc769ff72adc947899b03c6a75b9a192dd660b0d3dc8d8027cf59aba5302b7f4442fa9d5d314d7297c3a0045f39cd37b29adbbd25c2c488e3f7bdde76fcc9a508d390adf1f529eaf13e15a38bcb4e75150fefb0109a1623a90d42450c3a7d5959083fbfdac4b066cdf864515a42cafa5da037b6b6c00f8857dfbaf4dfc80fb841d45d2a2f66d67b9acf6b3bbe13d55217736cc64e6a12", 0xb4}], 0x7}, 0x40)
sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
r5 = socket$kcm(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0xd, 0x2, 0x100, r2, 0xfffffffb, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x8}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0x8, 0x2}, 0x8010, 0x2, 0x3, 0x8, 0x4, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5})

29.414899734s ago: executing program 0 (id=2528):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180003000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0)

29.134536043s ago: executing program 0 (id=2530):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x68}, 0x4000000)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x97, 0x4, 0x8, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x15, 0xa, 0x5, 0x80, 0xfffffffffffffff0}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1b, &(0x7f00000002c0)=""/27, 0x40f00, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0xe, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0x7fffffff}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)
openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000400)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

28.631574258s ago: executing program 0 (id=2535):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x68}, 0x4000000)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x97, 0x4, 0x8, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x15, 0xa, 0x5, 0x80, 0xfffffffffffffff0}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1b, &(0x7f00000002c0)=""/27, 0x40f00, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0xe, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0x7fffffff}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000400)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

28.215600866s ago: executing program 0 (id=2538):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

21.84765197s ago: executing program 1 (id=2566):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400050000", @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_type(r0, &(0x7f0000000040), 0x9)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2)

21.470172936s ago: executing program 1 (id=2567):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3e971d"], 0x9a)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b40)=r6}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x42101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4308348387c002c731014000000000062010200000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8)
close(r10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19.224968819s ago: executing program 1 (id=2568):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

18.688028466s ago: executing program 4 (id=2571):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8170)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (fail_nth: 9)

18.567662844s ago: executing program 1 (id=2572):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)='/N', 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000c80)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400110003ab2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0)

18.338602959s ago: executing program 1 (id=2574):
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 39)

18.222231557s ago: executing program 4 (id=2575):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x8, r0}, 0x38)

18.122935404s ago: executing program 1 (id=2576):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb70200ed07000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2e, 0x5e, 0x0, 0x0}, 0x40)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x4000000)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000100e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

17.997607662s ago: executing program 4 (id=2578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ea000000000000000700000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff0085000000b4000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
r3 = openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375eeb8a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='0,0'], 0x79)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000f711154000000000006000000444f3702fce3000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000240081064e81f782db44b9040a02080006", 0x15}], 0x1}, 0x40008d1)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000600)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xfeb, &(0x7f0000000880)=""/4075, 0x41000}, 0x94)

17.794367637s ago: executing program 4 (id=2579):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

17.658826256s ago: executing program 4 (id=2580):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xb1}, @ldst={0x0, 0x3, 0x3, 0x1, 0x4, 0xffffffffffffffff, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x39, &(0x7f0000000440)=""/57, 0x41100, 0xe391b84ef581eb02, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x2, 0xc8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5, 0xffffffffffffffff], 0x0, 0x10, 0x1, @value=r5}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x8)

16.958678174s ago: executing program 2 (id=2582):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff921, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x2, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0x8000000000000000, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x91ff}, 0x3000c041)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb44b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)

16.904163897s ago: executing program 4 (id=2583):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x6, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3e8)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x200040c0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000140))

16.017013138s ago: executing program 2 (id=2584):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x68}, 0x4000000)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x97, 0x4, 0x8, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x15, 0xa, 0x5, 0x80, 0xfffffffffffffff0}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1b, &(0x7f00000002c0)=""/27, 0x40f00, 0x40, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0xe, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0x7fffffff}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)
openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000400)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

15.935248233s ago: executing program 2 (id=2585):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1, 0x0, 0x0, 0x2000000}, 0x41)

15.857159139s ago: executing program 2 (id=2586):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1000, 0x5681}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func_proto={0x2100, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x4f, 0x61, 0x30, 0x2e, 0x5f, 0x61, 0x5f]}}, 0x0, 0x39, 0x0, 0x1}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x11, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

15.742732466s ago: executing program 2 (id=2587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

15.717492568s ago: executing program 2 (id=2588):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = socket$kcm(0x28, 0x5, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x5, 0x1, 0x5, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r10, <r11=>0xffffffffffffffff}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r8, r3})
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r13 = gettid()
r14 = syz_clone(0x4000, &(0x7f0000000740)="5393005107620bda6da4e4a4321e26390873bed7c4994edf71ab360ee1bda159d0e6c7ce467fa9f89a42250a404bc4c1043ddd94c835e55209044bfee9459b940fe9f17f9039b013408126698116c5cf214d72a2997849860f9131fd961982ead4c12032f9c1532f86fb834f115f429c085fb97ece12956803e4085a1a4b9b58a9f343f1a089d42038a1061c97aa1296d1875d7580ff37a6082c74b2cfcde7c48c41920c5fb6c060150c0837038a2590", 0xb0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="a3a5114e5671de06a6568e3d29e9b14201fb5017faa2ea8a22a093e9e23ee5ace2e820a8db59da6171696dac843d9ab80a286f46859e88b65d9e54edeeabe3607c06b000beb8c117bde8aece5e28c60ffde33f86c97430b96844ba13a152e59048acf000ac28481ff7fb24892dc32f5e1d4bba5903d6b6772225e6c8d9a6")
r15 = getpid()
r16 = getpid()
sendmsg$unix(r5, &(0x7f00000009c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000003c0)="8ce3946987d70576eed8e61b05d223beddc3e5087516e7ee53d19e8abe5b9eb805542e88eb8532812d58bc81be921116cd2f524ec6fab8e234f376026eb1c39e15c13092aa8c857c828c7384c9274d2fd455884c564ca596e1e75387b6b6b117993c5b488e8be17145c71457e0270c4e436d50af2c04e2400e14d1a7b7d13141452833608d1fa5abec40c82a4f2a2597cfb5065a5b4eabbdb6cd0abc1a8de7f0836d5da3f3e7d2ffc2", 0xa9}, {&(0x7f00000005c0)="5c7b69d0c7b5d58ff30994e854124ba7ca424fb18bcb7664da056eb5e38bdea8001c5670e36c8b1b56e093093c087bac888dcaf55ffce01ff8db40f2c3f72036c57216c770725db17fc990847d53fd6c5a", 0x51}], 0x2, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r11, r7, 0xffffffffffffffff, r2, r6, r12]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee01}}}], 0xc0, 0x48040}, 0x5)
write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.051868481s ago: executing program 33 (id=2576):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb70200ed07000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2e, 0x5e, 0x0, 0x0}, 0x40)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x4000000)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000100e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1.043851129s ago: executing program 34 (id=2583):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x6, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3e8)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x200040c0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000140))

0s ago: executing program 35 (id=2588):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = socket$kcm(0x28, 0x5, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x5, 0x1, 0x5, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r10, <r11=>0xffffffffffffffff}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r8, r3})
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r13 = gettid()
r14 = syz_clone(0x4000, &(0x7f0000000740)="5393005107620bda6da4e4a4321e26390873bed7c4994edf71ab360ee1bda159d0e6c7ce467fa9f89a42250a404bc4c1043ddd94c835e55209044bfee9459b940fe9f17f9039b013408126698116c5cf214d72a2997849860f9131fd961982ead4c12032f9c1532f86fb834f115f429c085fb97ece12956803e4085a1a4b9b58a9f343f1a089d42038a1061c97aa1296d1875d7580ff37a6082c74b2cfcde7c48c41920c5fb6c060150c0837038a2590", 0xb0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="a3a5114e5671de06a6568e3d29e9b14201fb5017faa2ea8a22a093e9e23ee5ace2e820a8db59da6171696dac843d9ab80a286f46859e88b65d9e54edeeabe3607c06b000beb8c117bde8aece5e28c60ffde33f86c97430b96844ba13a152e59048acf000ac28481ff7fb24892dc32f5e1d4bba5903d6b6772225e6c8d9a6")
r15 = getpid()
r16 = getpid()
sendmsg$unix(r5, &(0x7f00000009c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000003c0)="8ce3946987d70576eed8e61b05d223beddc3e5087516e7ee53d19e8abe5b9eb805542e88eb8532812d58bc81be921116cd2f524ec6fab8e234f376026eb1c39e15c13092aa8c857c828c7384c9274d2fd455884c564ca596e1e75387b6b6b117993c5b488e8be17145c71457e0270c4e436d50af2c04e2400e14d1a7b7d13141452833608d1fa5abec40c82a4f2a2597cfb5065a5b4eabbdb6cd0abc1a8de7f0836d5da3f3e7d2ffc2", 0xa9}, {&(0x7f00000005c0)="5c7b69d0c7b5d58ff30994e854124ba7ca424fb18bcb7664da056eb5e38bdea8001c5670e36c8b1b56e093093c087bac888dcaf55ffce01ff8db40f2c3f72036c57216c770725db17fc990847d53fd6c5a", 0x51}], 0x2, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r11, r7, 0xffffffffffffffff, r2, r6, r12]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee01}}}], 0xc0, 0x48040}, 0x5)
write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

T10522]  ? bpf_test_run+0x174/0x870
[  389.130586][T10522]  ? convert___skb_to_skb+0x590/0x590
[  389.136562][T10522]  ? eth_get_headlen+0x210/0x210
[  389.142013][T10522]  ? slab_build_skb+0x25f/0x3f0
[  389.147364][T10522]  ? convert___skb_to_skb+0x3d/0x590
[  389.153134][T10522]  bpf_prog_test_run_skb+0xad2/0x12b0
[  389.158742][T10522]  ? cpu_online+0x60/0x60
[  389.163541][T10522]  bpf_prog_test_run+0x321/0x390
[  389.168949][T10522]  __sys_bpf+0x49d/0x890
[  389.173759][T10522]  ? bpf_link_show_fdinfo+0x390/0x390
[  389.179909][T10522]  ? lock_chain_count+0x20/0x20
[  389.185163][T10522]  __x64_sys_bpf+0x7c/0x90
[  389.189870][T10522]  do_syscall_64+0x55/0xa0
[  389.195085][T10522]  ? clear_bhb_loop+0x40/0x90
[  389.200832][T10522]  ? clear_bhb_loop+0x40/0x90
[  389.206703][T10522]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.213422][T10522] RIP: 0033:0x7f64e599c819
[  389.218658][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.241855][T10522] RSP: 002b:00007f64e3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  389.250773][T10522] RAX: ffffffffffffffda RBX: 00007f64e5c15fa0 RCX: 00007f64e599c819
[  389.259503][T10522] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  389.268202][T10522] RBP: 00007f64e3bf6090 R08: 0000000000000000 R09: 0000000000000000
[  389.276623][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  389.284979][T10522] R13: 00007f64e5c16038 R14: 00007f64e5c15fa0 R15: 00007ffc1e431e58
[  389.293427][T10522]  </TASK>
[  389.621150][T10537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1775'.
[  389.631549][T10537] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1775'.
[  389.671031][T10537] FAULT_INJECTION: forcing a failure.
[  389.671031][T10537] name failslab, interval 1, probability 0, space 0, times 0
[  389.685320][T10537] CPU: 1 PID: 10537 Comm: syz.0.1775 Not tainted syzkaller #0
[  389.693597][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  389.704891][T10537] Call Trace:
[  389.708393][T10537]  <TASK>
[  389.711852][T10537]  dump_stack_lvl+0x18c/0x250
[  389.718011][T10537]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  389.725114][T10537]  ? show_regs_print_info+0x20/0x20
[  389.730734][T10537]  ? load_image+0x420/0x420
[  389.735755][T10537]  should_fail_ex+0x39d/0x4d0
[  389.741217][T10537]  should_failslab+0x9/0x20
[  389.746043][T10537]  slab_pre_alloc_hook+0x59/0x310
[  389.751719][T10537]  kmem_cache_alloc+0x5a/0x2d0
[  389.756894][T10537]  ? dst_alloc+0x105/0x170
[  389.761456][T10537]  dst_alloc+0x105/0x170
[  389.766171][T10537]  ip_route_output_key_hash_rcu+0x14f6/0x2370
[  389.773435][T10537]  ? ip_route_output_key_hash_rcu+0x12b1/0x2370
[  389.780343][T10537]  ? ip_route_output_key_hash+0x13d/0x330
[  389.787126][T10537]  ip_route_output_key_hash+0x1f3/0x330
[  389.793094][T10537]  ? ip_route_input_rcu+0x30f0/0x30f0
[  389.799037][T10537]  ? dst_release+0x121/0x1a0
[  389.804441][T10537]  ? dst_cache_per_cpu_get+0x260/0x2d0
[  389.810203][T10537]  ip_route_output_flow+0x2a/0x150
[  389.815609][T10537]  geneve_get_v4_rt+0x7f4/0xcd0
[  389.821028][T10537]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  389.827911][T10537]  ? jhash+0x430/0x430
[  389.832233][T10537]  ? geneve_xmit+0x657/0x3540
[  389.836974][T10537]  geneve_xmit+0x6fc/0x3540
[  389.841570][T10537]  ? geneve_xmit+0x15e/0x3540
[  389.846535][T10537]  ? skb_network_protocol+0x529/0x780
[  389.852591][T10537]  ? __siphash_unaligned+0x25f/0x3a0
[  389.858533][T10537]  ? geneve_stop+0x1b0/0x1b0
[  389.863889][T10537]  ? validate_xmit_xfrm+0xbc/0x12c0
[  389.869484][T10537]  ? xfrm_init_replay+0x2a0/0x2a0
[  389.875004][T10537]  ? passthru_features_check+0x20/0x20
[  389.880896][T10537]  dev_hard_start_xmit+0x246/0x740
[  389.887311][T10537]  __dev_queue_xmit+0x19a3/0x3660
[  389.892756][T10537]  ? __dev_queue_xmit+0x265/0x3660
[  389.898597][T10537]  ? lockdep_hardirqs_on+0x98/0x150
[  389.904083][T10537]  ? read_seqbegin+0x1c8/0x270
[  389.908866][T10537]  ? lockdep_hardirqs_on+0x98/0x150
[  389.914267][T10537]  ? neigh_event_send+0x110/0x110
[  389.919407][T10537]  ? netdev_core_pick_tx+0x340/0x340
[  389.925153][T10537]  ? __asan_memcpy+0x40/0x70
[  389.930251][T10537]  ? eth_header+0x11b/0x200
[  389.934866][T10537]  ? llc_sysctl_exit+0x70/0x70
[  389.939741][T10537]  ? neigh_resolve_output+0x618/0x730
[  389.947424][T10537]  ? ip_finish_output2+0x457/0x11e0
[  389.953092][T10537]  ip_finish_output2+0xd3a/0x11e0
[  389.958704][T10537]  ? ip_finish_output2+0x457/0x11e0
[  389.964471][T10537]  ? ip_fragment+0x210/0x210
[  389.969628][T10537]  ? ip_options_fragment+0x1ae/0x290
[  389.975728][T10537]  ? ip_do_fragment+0x7e2/0x1760
[  389.981554][T10537]  ip_do_fragment+0x877/0x1760
[  389.986538][T10537]  ? __ip_local_out+0x5f0/0x5f0
[  389.992029][T10537]  ? ip_fragment+0x210/0x210
[  389.997102][T10537]  ? ip_skb_dst_mtu+0x58a/0x9c0
[  390.002527][T10537]  ip_output+0x2a1/0x3b0
[  390.007144][T10537]  ? ip_output+0x60/0x3b0
[  390.011773][T10537]  iptunnel_xmit+0x4f0/0x920
[  390.017018][T10537]  ip_tunnel_xmit+0x1cbc/0x2410
[  390.022571][T10537]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  390.027984][T10537]  ? gre_build_header+0x6d/0x990
[  390.033038][T10537]  ? gre_build_header+0x25b/0x990
[  390.038538][T10537]  ipgre_xmit+0x7a6/0xb20
[  390.043113][T10537]  dev_hard_start_xmit+0x246/0x740
[  390.048618][T10537]  __dev_queue_xmit+0x19a3/0x3660
[  390.054008][T10537]  ? perf_trace_preemptirq_template+0x269/0x330
[  390.061023][T10537]  ? __dev_queue_xmit+0x265/0x3660
[  390.067230][T10537]  ? lock_chain_count+0x20/0x20
[  390.072321][T10537]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  390.078744][T10537]  ? netdev_core_pick_tx+0x340/0x340
[  390.084250][T10537]  ? skb_release_data+0x1cf/0x800
[  390.089511][T10537]  ? pskb_expand_head+0xbfe/0x1230
[  390.094945][T10537]  __bpf_tx_skb+0x189/0x250
[  390.099929][T10537]  bpf_clone_redirect+0x30f/0x4a0
[  390.105343][T10537]  bpf_prog_208b094576c80b22+0x5e/0x63
[  390.111193][T10537]  ? __static_call_text_end+0xf8c00/0xf8c00
[  390.117563][T10537]  ? lockdep_hardirqs_on+0x98/0x150
[  390.123222][T10537]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  390.129503][T10537]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  390.135943][T10537]  ? lockdep_softirqs_on+0x580/0x580
[  390.141895][T10537]  ? seqcount_lockdep_reader_access+0x19a/0x1d0
[  390.148510][T10537]  ? ktime_get_real_ts64+0x440/0x440
[  390.154521][T10537]  ? __x64_sys_bpf+0x7c/0x90
[  390.159522][T10537]  ? __local_bh_disable_ip+0x108/0x1a0
[  390.165521][T10537]  ? __cant_sleep+0x220/0x220
[  390.171087][T10537]  ? read_tsc+0x9/0x20
[  390.175445][T10537]  ? ktime_get+0x24b/0x280
[  390.180251][T10537]  ? bpf_test_run+0x174/0x870
[  390.185215][T10537]  bpf_test_run+0x2df/0x870
[  390.190339][T10537]  ? bpf_test_run+0x174/0x870
[  390.195300][T10537]  ? convert___skb_to_skb+0x590/0x590
[  390.200892][T10537]  ? eth_get_headlen+0x210/0x210
[  390.206386][T10537]  ? slab_build_skb+0x25f/0x3f0
[  390.212440][T10537]  ? convert___skb_to_skb+0x3d/0x590
[  390.218684][T10537]  bpf_prog_test_run_skb+0xad2/0x12b0
[  390.224906][T10537]  ? cpu_online+0x60/0x60
[  390.229645][T10537]  bpf_prog_test_run+0x321/0x390
[  390.235044][T10537]  __sys_bpf+0x49d/0x890
[  390.239672][T10537]  ? bpf_link_show_fdinfo+0x390/0x390
[  390.245874][T10537]  ? lock_chain_count+0x20/0x20
[  390.251191][T10537]  __x64_sys_bpf+0x7c/0x90
[  390.255630][T10537]  do_syscall_64+0x55/0xa0
[  390.260061][T10537]  ? clear_bhb_loop+0x40/0x90
[  390.265103][T10537]  ? clear_bhb_loop+0x40/0x90
[  390.269811][T10537]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  390.276189][T10537] RIP: 0033:0x7fbdd2b9c819
[  390.280888][T10537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.302664][T10537] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  390.311942][T10537] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  390.321043][T10537] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  390.330374][T10537] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  390.338997][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  390.347366][T10537] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  390.355855][T10537]  </TASK>
[  390.428664][ T7007] wlan1: Trigger new scan to find an IBSS to join
[  391.763385][ T7007] wlan1: Creating new IBSS network, BSSID 52:dc:df:18:1b:f4
[  391.898095][T10568] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1789'.
[  392.201053][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'.
[  392.801891][T10608] delete_channel: no stack
[  393.555436][T10624] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1810'.
[  393.855568][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'.
[  394.017776][T10638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1814'.
[  394.040553][T10638] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1814'.
[  394.059344][T10625] netlink: 'syz.2.1808': attribute type 10 has an invalid length.
[  394.077853][T10625] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1808'.
[  394.987984][T10649] netlink: 'syz.2.1817': attribute type 21 has an invalid length.
[  394.997588][T10649] IPv6: NLM_F_CREATE should be specified when creating new route
[  395.060987][T10651] netlink: 'syz.2.1817': attribute type 10 has an invalid length.
[  395.071954][T10651] bridge0: port 3(hsr0) entered disabled state
[  395.079158][T10651] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.087447][T10651] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.206915][T10682] netlink: 'syz.3.1829': attribute type 10 has an invalid length.
[  396.214571][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1829'.
[  396.215953][T10682] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1829'.
[  396.244137][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1829'.
[  397.515651][T10733] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  397.580163][T10733] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  397.702006][T10729] netlink: 'syz.2.1849': attribute type 10 has an invalid length.
[  397.898895][T10746] FAULT_INJECTION: forcing a failure.
[  397.898895][T10746] name failslab, interval 1, probability 0, space 0, times 0
[  397.915662][T10746] CPU: 0 PID: 10746 Comm: syz.3.1855 Not tainted syzkaller #0
[  397.923542][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  397.933906][T10746] Call Trace:
[  397.937765][T10746]  <TASK>
[  397.940827][T10746]  dump_stack_lvl+0x18c/0x250
[  397.946108][T10746]  ? show_regs_print_info+0x20/0x20
[  397.951785][T10746]  ? load_image+0x420/0x420
[  397.956794][T10746]  should_fail_ex+0x39d/0x4d0
[  397.961550][T10746]  should_failslab+0x9/0x20
[  397.966812][T10746]  slab_pre_alloc_hook+0x59/0x310
[  397.972431][T10746]  kmem_cache_alloc+0x5a/0x2d0
[  397.977530][T10746]  ? __nf_conntrack_alloc+0x99/0x380
[  397.983574][T10746]  __nf_conntrack_alloc+0x99/0x380
[  397.990918][T10746]  init_conntrack+0x177/0xf10
[  397.995906][T10746]  ? early_drop+0x7f0/0x7f0
[  398.001658][T10746]  ? nf_conntrack_find_get+0x650/0x650
[  398.007230][T10746]  ? __siphash_unaligned+0x22e/0x3a0
[  398.013172][T10746]  nf_conntrack_in+0xc06/0x15c0
[  398.018507][T10746]  ? nf_ct_pernet+0x270/0x270
[  398.024491][T10746]  ? ip6t_do_table+0x1d9/0x1510
[  398.030325][T10746]  ? ip6t_alloc_initial_table+0x640/0x640
[  398.036616][T10746]  ? ipv6_defrag+0x2d6/0x3a0
[  398.041669][T10746]  ? ipv6_conntrack_in+0x20/0x20
[  398.048403][T10746]  nf_hook_slow+0xbd/0x200
[  398.053477][T10746]  ? rawv6_send_hdrinc+0xb5a/0x1640
[  398.059243][T10746]  rawv6_send_hdrinc+0x14f3/0x1640
[  398.065886][T10746]  ? txopt_get+0x3f0/0x3f0
[  398.070863][T10746]  ? rawv6_push_pending_frames+0x8d0/0x8d0
[  398.078104][T10746]  ? ip6_dst_hoplimit+0x96/0x350
[  398.083205][T10746]  ? ip6_dst_hoplimit+0x96/0x350
[  398.088446][T10746]  rawv6_sendmsg+0x12cc/0x1770
[  398.093610][T10746]  ? verify_lock_unused+0x140/0x140
[  398.099375][T10746]  ? compat_rawv6_ioctl+0x70/0x70
[  398.104995][T10746]  ? aa_sk_perm+0x83c/0x970
[  398.110228][T10746]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  398.117585][T10746]  ? inet_sendmsg+0x7c/0x2f0
[  398.122543][T10746]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  398.128222][T10746]  ? security_socket_sendmsg+0x80/0xa0
[  398.133901][T10746]  ? inet_send_prepare+0x260/0x260
[  398.140498][T10746]  ____sys_sendmsg+0x5ba/0x960
[  398.145385][T10746]  ? __lock_acquire+0x7d40/0x7d40
[  398.151231][T10746]  ? __asan_memset+0x22/0x40
[  398.156814][T10746]  ? __sys_sendmsg_sock+0x30/0x30
[  398.162331][T10746]  ? __import_iovec+0x5f2/0x850
[  398.167994][T10746]  ? import_iovec+0x73/0xa0
[  398.173563][T10746]  ___sys_sendmsg+0x2a6/0x360
[  398.179785][T10746]  ? get_pid_task+0x20/0x1e0
[  398.185392][T10746]  ? __sys_sendmsg+0x2a0/0x2a0
[  398.191168][T10746]  ? __lock_acquire+0x7d40/0x7d40
[  398.197165][T10746]  __se_sys_sendmsg+0x1c2/0x2b0
[  398.202924][T10746]  ? __x64_sys_sendmsg+0x80/0x80
[  398.208516][T10746]  ? lockdep_hardirqs_on+0x98/0x150
[  398.214542][T10746]  do_syscall_64+0x55/0xa0
[  398.220495][T10746]  ? clear_bhb_loop+0x40/0x90
[  398.225454][T10746]  ? clear_bhb_loop+0x40/0x90
[  398.230673][T10746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.236865][T10746] RIP: 0033:0x7f3f51d9c819
[  398.241767][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.264276][T10746] RSP: 002b:00007f3f52cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.273250][T10746] RAX: ffffffffffffffda RBX: 00007f3f52015fa0 RCX: 00007f3f51d9c819
[  398.282377][T10746] RDX: 0000000000040800 RSI: 00002000000008c0 RDI: 0000000000000003
[  398.291009][T10746] RBP: 00007f3f52cde090 R08: 0000000000000000 R09: 0000000000000000
[  398.299617][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.308498][T10746] R13: 00007f3f52016038 R14: 00007f3f52015fa0 R15: 00007ffe507e98d8
[  398.317580][T10746]  </TASK>
[  398.619921][T10752] FAULT_INJECTION: forcing a failure.
[  398.619921][T10752] name failslab, interval 1, probability 0, space 0, times 0
[  398.636654][T10752] CPU: 1 PID: 10752 Comm: syz.0.1858 Not tainted syzkaller #0
[  398.645266][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  398.656578][T10752] Call Trace:
[  398.660394][T10752]  <TASK>
[  398.663421][T10752]  dump_stack_lvl+0x18c/0x250
[  398.668490][T10752]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.674948][T10752]  ? show_regs_print_info+0x20/0x20
[  398.680446][T10752]  ? load_image+0x420/0x420
[  398.685620][T10752]  should_fail_ex+0x39d/0x4d0
[  398.690584][T10752]  should_failslab+0x9/0x20
[  398.695381][T10752]  slab_pre_alloc_hook+0x59/0x310
[  398.700975][T10752]  ? kvmalloc_node+0x70/0x180
[  398.706034][T10752]  ? kvmalloc_node+0x70/0x180
[  398.710919][T10752]  __kmem_cache_alloc_node+0x53/0x250
[  398.716765][T10752]  ? kvmalloc_node+0x70/0x180
[  398.722172][T10752]  __kmalloc_node+0xa4/0x230
[  398.727401][T10752]  kvmalloc_node+0x70/0x180
[  398.732269][T10752]  page_pool_create+0x1eb/0x5c0
[  398.737779][T10752]  __veth_napi_enable_range+0x195/0x700
[  398.743658][T10752]  ? __local_bh_enable_ip+0x142/0x1c0
[  398.749862][T10752]  ? __skb_frag_ref+0x1c0/0x1c0
[  398.755196][T10752]  ? netif_napi_add_weight+0xa22/0xdf0
[  398.761222][T10752]  veth_napi_enable_range+0xd0/0x150
[  398.767244][T10752]  veth_set_features+0x1c8/0x2a0
[  398.772767][T10752]  __netdev_update_features+0x9cb/0x18e0
[  398.779044][T10752]  ? mark_lock+0x94/0x320
[  398.783824][T10752]  ? dev_xdp_attach+0x1030/0x1030
[  398.789038][T10752]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  398.795556][T10752]  ? lock_chain_count+0x20/0x20
[  398.800708][T10752]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.807244][T10752]  ? lockdep_hardirqs_on+0x98/0x150
[  398.812662][T10752]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.819281][T10752]  ? ethtool_set_one_feature+0xcf/0x2f0
[  398.825365][T10752]  ethtool_set_one_feature+0x2a8/0x2f0
[  398.831138][T10752]  ? ethtool_get_one_feature+0x280/0x280
[  398.837671][T10752]  ? security_capable+0x89/0xb0
[  398.843000][T10752]  dev_ethtool+0xfd7/0x18d0
[  398.848218][T10752]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  398.856410][T10752]  ? __lock_acquire+0x7d40/0x7d40
[  398.861903][T10752]  ? dev_load+0x21/0x1f0
[  398.866263][T10752]  dev_ioctl+0x392/0x1140
[  398.870706][T10752]  sock_do_ioctl+0x239/0x310
[  398.876551][T10752]  ? sock_show_fdinfo+0xb0/0xb0
[  398.881776][T10752]  sock_ioctl+0x5ba/0x7e0
[  398.886394][T10752]  ? sock_poll+0x3e0/0x3e0
[  398.891118][T10752]  ? bpf_lsm_file_ioctl+0x9/0x10
[  398.896334][T10752]  ? security_file_ioctl+0x80/0xa0
[  398.901650][T10752]  ? sock_poll+0x3e0/0x3e0
[  398.906341][T10752]  __se_sys_ioctl+0xfd/0x170
[  398.911150][T10752]  do_syscall_64+0x55/0xa0
[  398.916205][T10752]  ? clear_bhb_loop+0x40/0x90
[  398.921317][T10752]  ? clear_bhb_loop+0x40/0x90
[  398.926361][T10752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.932791][T10752] RIP: 0033:0x7fbdd2b9c819
[  398.937478][T10752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.957798][T10752] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  398.966419][T10752] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  398.975008][T10752] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d
[  398.984227][T10752] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  398.992992][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.001674][T10752] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  399.010244][T10752]  </TASK>
[  399.030910][T10752] page_pool_create() gave up with errno -12
[  399.042160][T10752] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9
[  399.173255][T10748] netlink: 'syz.1.1856': attribute type 10 has an invalid length.
[  399.182620][T10748] __nla_validate_parse: 1 callbacks suppressed
[  399.182635][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'.
[  399.216980][T10748] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  399.389362][T10763] syzkaller0: entered promiscuous mode
[  399.395608][T10763] syzkaller0: entered allmulticast mode
[  401.517087][T10771] veth1_vlan: entered allmulticast mode
[  401.765820][T10785] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1867'.
[  401.790778][T10787] netlink: 'syz.0.1869': attribute type 10 has an invalid length.
[  402.267960][T10804] syzkaller0: entered promiscuous mode
[  402.274090][T10804] syzkaller0: entered allmulticast mode
[  402.642105][T10806] netlink: 'syz.2.1876': attribute type 3 has an invalid length.
[  402.667685][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1876'.
[  406.979101][T10852] netlink: 'syz.3.1888': attribute type 4 has an invalid length.
[  407.469408][T10863] syzkaller0: entered promiscuous mode
[  407.508522][T10863] syzkaller0: entered allmulticast mode
[  407.529637][T10858] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP)
[  407.566327][T10860] netlink: 'syz.1.1890': attribute type 21 has an invalid length.
[  407.597823][T10860] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1890'.
[  410.286281][T10885] netlink: 'syz.3.1897': attribute type 10 has an invalid length.
[  410.356859][T10884] netlink: 'syz.3.1897': attribute type 9 has an invalid length.
[  410.398419][T10884] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1897'.
[  412.596473][T10910] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 (while UP)
[  412.652207][T10911] netlink: 'syz.2.1904': attribute type 21 has an invalid length.
[  412.660934][T10911] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1904'.
[  412.914646][T10924] FAULT_INJECTION: forcing a failure.
[  412.914646][T10924] name failslab, interval 1, probability 0, space 0, times 0
[  413.025998][T10924] CPU: 0 PID: 10924 Comm: syz.3.1909 Not tainted syzkaller #0
[  413.034110][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  413.045010][T10924] Call Trace:
[  413.048618][T10924]  <TASK>
[  413.051669][T10924]  dump_stack_lvl+0x18c/0x250
[  413.056825][T10924]  ? sctp_sendmsg+0x1575/0x28c0
[  413.062101][T10924]  ? ___sys_sendmsg+0x2a6/0x360
[  413.067233][T10924]  ? show_regs_print_info+0x20/0x20
[  413.072629][T10924]  ? load_image+0x420/0x420
[  413.077346][T10924]  should_fail_ex+0x39d/0x4d0
[  413.082259][T10924]  should_failslab+0x9/0x20
[  413.087322][T10924]  slab_pre_alloc_hook+0x59/0x310
[  413.092808][T10924]  ? sctp_add_bind_addr+0x8c/0x360
[  413.099004][T10924]  __kmem_cache_alloc_node+0x53/0x250
[  413.105103][T10924]  ? sctp_add_bind_addr+0x8c/0x360
[  413.110598][T10924]  kmalloc_trace+0x2a/0xe0
[  413.115719][T10924]  sctp_add_bind_addr+0x8c/0x360
[  413.120776][T10924]  sctp_copy_local_addr_list+0x315/0x4f0
[  413.126704][T10924]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  413.132843][T10924]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  413.139631][T10924]  ? sctp_v4_is_any+0x35/0x60
[  413.144512][T10924]  ? sctp_copy_one_addr+0x8c/0x350
[  413.150209][T10924]  sctp_bind_addr_copy+0xb3/0x3c0
[  413.155488][T10924]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  413.162206][T10924]  sctp_connect_new_asoc+0x2f9/0x6a0
[  413.167987][T10924]  ? __sctp_connect+0xd80/0xd80
[  413.173040][T10924]  ? __local_bh_enable_ip+0x13a/0x1c0
[  413.178804][T10924]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  413.184845][T10924]  ? security_sctp_bind_connect+0x89/0xb0
[  413.190779][T10924]  sctp_sendmsg+0x1575/0x28c0
[  413.195751][T10924]  ? sctp_getsockopt+0xb60/0xb60
[  413.201031][T10924]  ? aa_sk_perm+0x83c/0x970
[  413.206298][T10924]  ? aa_af_perm+0x330/0x330
[  413.211043][T10924]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  413.218575][T10924]  ? sock_rps_record_flow+0x19/0x3f0
[  413.224237][T10924]  ? inet_sendmsg+0xe9/0x2f0
[  413.229210][T10924]  ? inet_send_prepare+0x260/0x260
[  413.234958][T10924]  ____sys_sendmsg+0x5ba/0x960
[  413.239841][T10924]  ? __lock_acquire+0x7d40/0x7d40
[  413.245581][T10924]  ? __asan_memset+0x22/0x40
[  413.250363][T10924]  ? __sys_sendmsg_sock+0x30/0x30
[  413.255606][T10924]  ? __import_iovec+0x5f2/0x850
[  413.261110][T10924]  ? import_iovec+0x73/0xa0
[  413.266179][T10924]  ___sys_sendmsg+0x2a6/0x360
[  413.271485][T10924]  ? get_pid_task+0x20/0x1e0
[  413.277071][T10924]  ? __sys_sendmsg+0x2a0/0x2a0
[  413.282527][T10924]  ? __lock_acquire+0x7d40/0x7d40
[  413.287961][T10924]  __se_sys_sendmsg+0x1c2/0x2b0
[  413.294582][T10924]  ? __x64_sys_sendmsg+0x80/0x80
[  413.300727][T10924]  ? lockdep_hardirqs_on+0x98/0x150
[  413.306668][T10924]  do_syscall_64+0x55/0xa0
[  413.311480][T10924]  ? clear_bhb_loop+0x40/0x90
[  413.316369][T10924]  ? clear_bhb_loop+0x40/0x90
[  413.321565][T10924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.328205][T10924] RIP: 0033:0x7f3f51d9c819
[  413.333509][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.355697][T10924] RSP: 002b:00007f3f52cbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.365010][T10924] RAX: ffffffffffffffda RBX: 00007f3f52016090 RCX: 00007f3f51d9c819
[  413.373548][T10924] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004
[  413.381971][T10924] RBP: 00007f3f52cbd090 R08: 0000000000000000 R09: 0000000000000000
[  413.390744][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.399087][T10924] R13: 00007f3f52016128 R14: 00007f3f52016090 R15: 00007ffe507e98d8
[  413.407529][T10924]  </TASK>
[  413.629728][T10922] netlink: 'syz.2.1907': attribute type 10 has an invalid length.
[  413.651667][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1907'.
[  413.679503][T10922] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  413.826002][T10923] netlink: 'syz.0.1908': attribute type 10 has an invalid length.
[  413.836163][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1908'.
[  413.865345][T10923] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  414.241917][T10941] netlink: 'syz.3.1912': attribute type 3 has an invalid length.
[  414.277328][T10941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1912'.
[  414.294220][T10944] FAULT_INJECTION: forcing a failure.
[  414.294220][T10944] name failslab, interval 1, probability 0, space 0, times 0
[  414.337100][T10944] CPU: 1 PID: 10944 Comm: syz.1.1914 Not tainted syzkaller #0
[  414.344839][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  414.355416][T10944] Call Trace:
[  414.359108][T10944]  <TASK>
[  414.362168][T10944]  dump_stack_lvl+0x18c/0x250
[  414.366996][T10944]  ? show_regs_print_info+0x20/0x20
[  414.372425][T10944]  ? load_image+0x420/0x420
[  414.377242][T10944]  ? inet6_netconf_fill_devconf+0x54e/0x760
[  414.383456][T10944]  should_fail_ex+0x39d/0x4d0
[  414.388451][T10944]  should_failslab+0x9/0x20
[  414.393175][T10944]  slab_pre_alloc_hook+0x59/0x310
[  414.398457][T10944]  kmem_cache_alloc+0x5a/0x2d0
[  414.403653][T10944]  ? skb_clone+0x1eb/0x370
[  414.408383][T10944]  skb_clone+0x1eb/0x370
[  414.413023][T10944]  __netlink_deliver_tap+0x41c/0x830
[  414.418562][T10944]  ? netlink_deliver_tap+0x2e/0x1b0
[  414.424001][T10944]  netlink_deliver_tap+0x19c/0x1b0
[  414.429770][T10944]  netlink_dump+0x94b/0xe50
[  414.434518][T10944]  ? netlink_lookup+0x200/0x200
[  414.439619][T10944]  ? slab_free_freelist_hook+0x130/0x1a0
[  414.445359][T10944]  ? netlink_recvmsg+0x5e7/0xe60
[  414.450458][T10944]  ? kmem_cache_free+0xf8/0x270
[  414.455529][T10944]  netlink_recvmsg+0x693/0xe60
[  414.460452][T10944]  ? netlink_sendmsg+0xbf0/0xbf0
[  414.465670][T10944]  ? aa_af_perm+0x330/0x330
[  414.470418][T10944]  ? __lock_acquire+0x1273/0x7d40
[  414.475626][T10944]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  414.481058][T10944]  ? security_socket_recvmsg+0x89/0xb0
[  414.486872][T10944]  ? netlink_sendmsg+0xbf0/0xbf0
[  414.492068][T10944]  ____sys_recvmsg+0x2ce/0x5e0
[  414.497438][T10944]  ? __sys_recvmsg_sock+0x50/0x50
[  414.503155][T10944]  ? import_iovec+0x73/0xa0
[  414.508248][T10944]  ___sys_recvmsg+0x216/0x590
[  414.513323][T10944]  ? __sys_recvmsg+0x2a0/0x2a0
[  414.518979][T10944]  ? trace_call_bpf+0xc3/0x6c0
[  414.524488][T10944]  ? trace_call_bpf+0x5e9/0x6c0
[  414.529503][T10944]  ? __fget_files+0x43d/0x4b0
[  414.534277][T10944]  __x64_sys_recvmsg+0x20c/0x2e0
[  414.539638][T10944]  ? ___sys_recvmsg+0x590/0x590
[  414.545010][T10944]  ? lockdep_hardirqs_on+0x98/0x150
[  414.550364][T10944]  do_syscall_64+0x55/0xa0
[  414.555276][T10944]  ? clear_bhb_loop+0x40/0x90
[  414.560524][T10944]  ? clear_bhb_loop+0x40/0x90
[  414.565340][T10944]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  414.571741][T10944] RIP: 0033:0x7f105eb9c819
[  414.576550][T10944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.597343][T10944] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  414.606335][T10944] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  414.614992][T10944] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  414.623755][T10944] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  414.633627][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.642346][T10944] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  414.651193][T10944]  </TASK>
[  414.673080][T10952] netlink: 'syz.2.1920': attribute type 10 has an invalid length.
[  414.707114][T10952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1920'.
[  414.719338][T10952] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  415.983087][T10961] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP)
[  416.378497][T10966] netlink: 'syz.0.1916': attribute type 21 has an invalid length.
[  416.607757][T10966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1916'.
[  418.917271][T10988] netlink: 'syz.1.1924': attribute type 29 has an invalid length.
[  418.952501][T10988] netlink: 'syz.1.1924': attribute type 29 has an invalid length.
[  421.800582][ T7007] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  421.902783][T10998] netlink: 'syz.2.1927': attribute type 10 has an invalid length.
[  421.923026][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1927'.
[  421.937479][T10998] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  421.962979][T10989] netlink: 'syz.1.1924': attribute type 29 has an invalid length.
[  423.797084][T11006] netlink: 'syz.0.1937': attribute type 10 has an invalid length.
[  423.806337][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1937'.
[  423.827659][T11006] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  424.270831][T11008] netlink: 'syz.2.1929': attribute type 10 has an invalid length.
[  424.287481][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1929'.
[  424.305734][T11008] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  427.131958][T11054] netlink: 'syz.2.1940': attribute type 10 has an invalid length.
[  427.141301][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1940'.
[  427.157787][T11054] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  432.441935][T11089] netlink: 'syz.1.1951': attribute type 10 has an invalid length.
[  432.489107][T11089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1951'.
[  432.578356][T11089] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  432.810045][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  432.821958][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  432.832148][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  432.888185][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  432.932308][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  432.940414][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  434.102342][T11113] netlink: 'syz.2.1955': attribute type 8 has an invalid length.
[  434.137603][T11113] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1955'.
[  434.331292][T11110] syzkaller0: entered promiscuous mode
[  434.341489][T11110] syzkaller0: entered allmulticast mode
[  435.000476][ T5082] Bluetooth: hci4: command tx timeout
[  436.819717][T11131] FAULT_INJECTION: forcing a failure.
[  436.819717][T11131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.834644][T11131] CPU: 0 PID: 11131 Comm: syz.1.1959 Not tainted syzkaller #0
[  436.843934][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  436.855070][T11131] Call Trace:
[  436.858737][T11131]  <TASK>
[  436.861957][T11131]  dump_stack_lvl+0x18c/0x250
[  436.867064][T11131]  ? show_regs_print_info+0x20/0x20
[  436.873312][T11131]  ? load_image+0x420/0x420
[  436.878249][T11131]  ? __might_fault+0xaa/0x120
[  436.883868][T11131]  ? __lock_acquire+0x7d40/0x7d40
[  436.889739][T11131]  should_fail_ex+0x39d/0x4d0
[  436.895355][T11131]  _copy_from_user+0x2f/0xe0
[  436.900201][T11131]  ___sys_sendmsg+0x1c7/0x360
[  436.904944][T11131]  ? __sys_sendmsg+0x2a0/0x2a0
[  436.910393][T11131]  ? __lock_acquire+0x7d40/0x7d40
[  436.915582][T11131]  __se_sys_sendmsg+0x1c2/0x2b0
[  436.921544][T11131]  ? __x64_sys_sendmsg+0x80/0x80
[  436.926819][T11131]  ? lockdep_hardirqs_on+0x98/0x150
[  436.932512][T11131]  do_syscall_64+0x55/0xa0
[  436.937391][T11131]  ? clear_bhb_loop+0x40/0x90
[  436.942104][T11131]  ? clear_bhb_loop+0x40/0x90
[  436.947084][T11131]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  436.953354][T11131] RIP: 0033:0x7f105eb9c819
[  436.958099][T11131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.980706][T11131] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.989714][T11131] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  436.997932][T11131] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004
[  437.006385][T11131] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  437.014849][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.023643][T11131] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  437.031962][T11131]  </TASK>
[  437.068178][ T5082] Bluetooth: hci4: command tx timeout
[  437.187753][T11132] syzkaller0: entered promiscuous mode
[  437.193954][T11132] syzkaller0: entered allmulticast mode
[  437.206019][T11094] chnl_net:caif_netlink_parms(): no params data found
[  439.142191][T11094] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.155973][T11094] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.164573][T11094] bridge_slave_0: entered allmulticast mode
[  439.167078][ T5082] Bluetooth: hci4: command tx timeout
[  439.173299][T11094] bridge_slave_0: entered promiscuous mode
[  439.198372][T11094] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.212706][T11094] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.227881][T11094] bridge_slave_1: entered allmulticast mode
[  439.235650][T11094] bridge_slave_1: entered promiscuous mode
[  439.402863][T11094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.446675][T11094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.630552][T11094] team0: Port device team_slave_0 added
[  439.671675][T11094] team0: Port device team_slave_1 added
[  439.772773][T11094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.815250][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.903094][T11094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.924482][T11148] netlink: 'syz.2.1969': attribute type 10 has an invalid length.
[  440.005815][T11148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1969'.
[  440.058712][T11148] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  440.098964][T11094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.115603][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.148738][T11094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.236670][T11094] hsr_slave_0: entered promiscuous mode
[  440.251216][T11094] hsr_slave_1: entered promiscuous mode
[  440.265980][T11094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.281669][T11094] Cannot create hsr debugfs directory
[  440.624578][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  440.635655][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  441.209828][T11094] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  441.237184][ T5082] Bluetooth: hci4: command tx timeout
[  441.348302][T11094] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  441.428826][T11180] netlink: 'syz.0.1968': attribute type 10 has an invalid length.
[  441.441764][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'.
[  441.498165][T11180] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  441.535072][T11094] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  441.591122][T11184] syzkaller0: entered promiscuous mode
[  441.599005][T11184] syzkaller0: entered allmulticast mode
[  441.611642][T11094] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  442.224997][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1977'.
[  444.088101][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1977'.
[  444.099237][T11195] netlink: 'syz.0.1975': attribute type 10 has an invalid length.
[  444.115114][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1975'.
[  444.126847][T11195] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  444.280519][T11094] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.315789][T11094] 8021q: adding VLAN 0 to HW filter on device team0
[  444.345645][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.353131][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.470091][T11206] netlink: 'syz.2.1978': attribute type 10 has an invalid length.
[  444.499526][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1978'.
[  444.516614][T11206] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  444.620486][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.628239][ T7007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.826868][T11216] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  444.877308][T11216] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  444.923552][T11216] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1988'.
[  444.948127][T11216] openvswitch: netlink: Message has 4 unknown bytes.
[  445.111859][T11214] netlink: 'syz.1.1981': attribute type 10 has an invalid length.
[  445.138905][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1981'.
[  445.160706][T11214] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  445.196839][T11225] netlink: 'syz.2.1983': attribute type 3 has an invalid length.
[  445.255666][T11225] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1983'.
[  445.499634][T11233] syzkaller0: entered promiscuous mode
[  445.505521][T11233] syzkaller0: entered allmulticast mode
[  445.539251][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.367675][T11259] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1994'.
[  449.131414][T11256] netlink: 'syz.1.1992': attribute type 10 has an invalid length.
[  449.140300][T11256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'.
[  449.153336][T11256] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  449.423588][T11265] netlink: 'syz.1.1995': attribute type 21 has an invalid length.
[  449.594053][T11265] netlink: 'syz.1.1995': attribute type 1 has an invalid length.
[  449.689572][T11094] veth0_vlan: entered promiscuous mode
[  449.733304][T11094] veth1_vlan: entered promiscuous mode
[  449.780556][T11267] netlink: 'syz.2.1996': attribute type 10 has an invalid length.
[  449.807452][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1996'.
[  449.832604][T11267] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  449.942456][T11094] veth0_macvtap: entered promiscuous mode
[  449.955828][T11094] veth1_macvtap: entered promiscuous mode
[  450.098431][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.132692][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.165651][T11094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.179682][T11094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.189585][T11094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.200060][T11094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.558658][ T7032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.627020][ T7032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.761008][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.788005][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.951985][T11291] delete_channel: no stack
[  450.965770][T11291] delete_channel: no stack
[  451.011117][T11282] netlink: 'syz.1.2000': attribute type 10 has an invalid length.
[  451.041099][T11291] delete_channel: no stack
[  451.047233][T11282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2000'.
[  451.061086][T11291] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2004'.
[  451.076521][T11282] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  451.177582][T11290] delete_channel: no stack
[  451.502429][T11296] syzkaller0: entered promiscuous mode
[  451.521677][T11296] syzkaller0: entered allmulticast mode
[  451.803085][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'.
[  451.815151][T11307] syzkaller0: entered promiscuous mode
[  451.821851][T11307] syzkaller0: entered allmulticast mode
[  451.875636][T11314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.173142][ T3495] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  454.793340][T11324] netlink: 'syz.1.2012': attribute type 21 has an invalid length.
[  454.808419][T11322] netlink: 'syz.4.2011': attribute type 10 has an invalid length.
[  454.816871][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2011'.
[  454.848458][T11322] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  454.857196][T11322] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.910035][T11322] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  454.966481][T11334] netlink: 'syz.1.2014': attribute type 21 has an invalid length.
[  455.928886][T11359] syzkaller0: entered promiscuous mode
[  455.935562][T11359] syzkaller0: entered allmulticast mode
[  456.215752][T11367] netlink: 'syz.2.2023': attribute type 1 has an invalid length.
[  456.239255][T11367] netlink: 'syz.2.2023': attribute type 3 has an invalid length.
[  456.263731][T11367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2023'.
[  460.605243][T11378] netlink: 'syz.2.2025': attribute type 10 has an invalid length.
[  460.614355][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2025'.
[  460.624499][T11378] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  460.896448][T11435] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2041'.
[  461.126619][T11445] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2043'.
[  461.186241][T11438] netlink: 'syz.4.2042': attribute type 2 has an invalid length.
[  461.202414][T11438] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2042'.
[  461.337601][T11442] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2043'.
[  461.953331][T11453] FAULT_INJECTION: forcing a failure.
[  461.953331][T11453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.051439][T11453] CPU: 0 PID: 11453 Comm: syz.1.2046 Not tainted syzkaller #0
[  462.059795][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  462.069768][T11449] netlink: 'syz.4.2045': attribute type 10 has an invalid length.
[  462.070494][T11453] Call Trace:
[  462.070511][T11453]  <TASK>
[  462.070522][T11453]  dump_stack_lvl+0x18c/0x250
[  462.070563][T11453]  ? show_regs_print_info+0x20/0x20
[  462.070606][T11453]  ? load_image+0x420/0x420
[  462.070635][T11453]  ? __lock_acquire+0x7d40/0x7d40
[  462.070655][T11453]  ? lockdep_hardirqs_on+0x98/0x150
[  462.070679][T11453]  ? full_name_hash+0x92/0xe0
[  462.070713][T11453]  should_fail_ex+0x39d/0x4d0
[  462.070747][T11453]  _copy_to_user+0x2f/0xa0
[  462.070774][T11453]  put_user_ifreq+0x78/0xb0
[  462.070800][T11453]  sock_do_ioctl+0x268/0x310
[  462.070825][T11453]  ? sock_show_fdinfo+0xb0/0xb0
[  462.070866][T11453]  sock_ioctl+0x5ba/0x7e0
[  462.070890][T11453]  ? sock_poll+0x3e0/0x3e0
[  462.070936][T11453]  ? bpf_lsm_file_ioctl+0x9/0x10
[  462.070957][T11453]  ? security_file_ioctl+0x80/0xa0
[  462.070976][T11453]  ? sock_poll+0x3e0/0x3e0
[  462.070998][T11453]  __se_sys_ioctl+0xfd/0x170
[  462.071026][T11453]  do_syscall_64+0x55/0xa0
[  462.071044][T11453]  ? clear_bhb_loop+0x40/0x90
[  462.071067][T11453]  ? clear_bhb_loop+0x40/0x90
[  462.071093][T11453]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.071116][T11453] RIP: 0033:0x7f105eb9c819
[  462.071147][T11453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.071164][T11453] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  462.071188][T11453] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  462.071203][T11453] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002c
[  462.071216][T11453] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  462.071229][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.071242][T11453] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  462.071274][T11453]  </TASK>
[  462.389547][T11449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2045'.
[  462.457997][T11457] syzkaller0: entered promiscuous mode
[  462.464638][T11457] syzkaller0: entered allmulticast mode
[  462.589742][T11462] netlink: 'syz.2.2049': attribute type 28 has an invalid length.
[  462.608559][T11462] netlink: 'syz.2.2049': attribute type 3 has an invalid length.
[  462.637091][T11462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'.
[  464.942571][T11464] netlink: 'syz.1.2048': attribute type 8 has an invalid length.
[  464.951583][T11464] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2048'.
[  464.962198][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2048'.
[  464.976088][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.061601][T11468] bridge_slave_0 (unregistering): left allmulticast mode
[  465.069667][T11468] bridge_slave_0 (unregistering): left promiscuous mode
[  465.082006][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.121945][T11477] tap0: tun_chr_ioctl cmd 1074025677
[  465.127985][T11477] tap0: linktype set to 6
[  465.133016][T11476] netlink: 'syz.4.2053': attribute type 5 has an invalid length.
[  465.278313][T11486] FAULT_INJECTION: forcing a failure.
[  465.278313][T11486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.297733][T11486] CPU: 1 PID: 11486 Comm: syz.0.2057 Not tainted syzkaller #0
[  465.306367][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  465.318229][T11486] Call Trace:
[  465.321767][T11486]  <TASK>
[  465.325007][T11486]  dump_stack_lvl+0x18c/0x250
[  465.330161][T11486]  ? show_regs_print_info+0x20/0x20
[  465.335907][T11486]  ? load_image+0x420/0x420
[  465.341041][T11486]  ? __might_fault+0xaa/0x120
[  465.345906][T11486]  ? __lock_acquire+0x7d40/0x7d40
[  465.351279][T11486]  should_fail_ex+0x39d/0x4d0
[  465.356431][T11486]  _copy_from_user+0x2f/0xe0
[  465.361506][T11486]  ___sys_sendmsg+0x1c7/0x360
[  465.366523][T11486]  ? __sys_sendmsg+0x2a0/0x2a0
[  465.371978][T11486]  ? __lock_acquire+0x7d40/0x7d40
[  465.377874][T11486]  __se_sys_sendmsg+0x1c2/0x2b0
[  465.383291][T11486]  ? __x64_sys_sendmsg+0x80/0x80
[  465.388914][T11486]  ? lockdep_hardirqs_on+0x98/0x150
[  465.394710][T11486]  do_syscall_64+0x55/0xa0
[  465.399383][T11486]  ? clear_bhb_loop+0x40/0x90
[  465.404743][T11486]  ? clear_bhb_loop+0x40/0x90
[  465.409683][T11486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  465.416453][T11486] RIP: 0033:0x7fbdd2b9c819
[  465.421501][T11486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.442154][T11486] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.451133][T11486] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  465.459991][T11486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  465.468479][T11486] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  465.476861][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.485743][T11486] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  465.494263][T11486]  </TASK>
[  466.576749][T11496] netlink: 'syz.0.2060': attribute type 10 has an invalid length.
[  466.627017][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'.
[  466.712021][T11496] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  467.145497][T11508] syzkaller0: entered promiscuous mode
[  467.153087][T11508] syzkaller0: entered allmulticast mode
[  470.970326][T11523] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2067'.
[  471.811676][T11555] netlink: 'syz.2.2073': attribute type 10 has an invalid length.
[  471.858570][T11555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2073'.
[  471.956425][T11555] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  472.335196][T11565] netlink: 'syz.1.2079': attribute type 39 has an invalid length.
[  475.617787][T11576] netlink: 'syz.0.2082': attribute type 2 has an invalid length.
[  476.048773][T11576] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2082'.
[  476.225365][T11584] netlink: 'syz.4.2085': attribute type 3 has an invalid length.
[  476.235419][T11584] netlink: 'syz.4.2085': attribute type 1 has an invalid length.
[  476.244114][T11584] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2085'.
[  476.283537][T11587] netlink: 'syz.0.2086': attribute type 3 has an invalid length.
[  476.292777][T11587] netlink: 'syz.0.2086': attribute type 1 has an invalid length.
[  476.292998][T11582] syzkaller0: entered promiscuous mode
[  476.301147][T11587] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2086'.
[  476.324128][T11582] syzkaller0: entered allmulticast mode
[  479.694195][T11612] veth1_to_bond: entered promiscuous mode
[  479.713300][T11612] veth1_to_bond: entered allmulticast mode
[  479.979982][T11619] syzkaller0: entered promiscuous mode
[  479.995852][T11619] syzkaller0: entered allmulticast mode
[  480.015287][T11609] netlink: 'syz.1.2091': attribute type 10 has an invalid length.
[  480.068923][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2091'.
[  480.118969][T11609] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  482.985880][T11635] netlink: 'syz.1.2095': attribute type 2 has an invalid length.
[  482.994344][T11635] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2095'.
[  483.007128][T11637] netlink: 'syz.4.2097': attribute type 8 has an invalid length.
[  483.015855][T11637] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2097'.
[  483.037628][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2097'.
[  483.092349][T11641] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.190357][T11641] bridge_slave_0 (unregistering): left allmulticast mode
[  483.199103][T11641] bridge_slave_0 (unregistering): left promiscuous mode
[  483.206875][T11641] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.264502][T11644] netlink: 'syz.0.2098': attribute type 10 has an invalid length.
[  484.211105][ T3495] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  484.540437][T11674] syzkaller0: entered promiscuous mode
[  484.547647][T11674] syzkaller0: entered allmulticast mode
[  488.266807][T11689] netlink: 'syz.4.2116': attribute type 39 has an invalid length.
[  488.994928][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.015483][T11740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.035961][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.067432][T11740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.082965][T11740] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  489.099573][T11740] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  489.198818][T11750] FAULT_INJECTION: forcing a failure.
[  489.198818][T11750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.213734][T11750] CPU: 1 PID: 11750 Comm: syz.0.2134 Not tainted syzkaller #0
[  489.221819][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  489.232974][T11750] Call Trace:
[  489.236319][T11750]  <TASK>
[  489.239479][T11750]  dump_stack_lvl+0x18c/0x250
[  489.244604][T11750]  ? show_regs_print_info+0x20/0x20
[  489.250148][T11750]  ? load_image+0x420/0x420
[  489.254722][T11750]  ? __might_fault+0xaa/0x120
[  489.259637][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  489.264829][T11750]  should_fail_ex+0x39d/0x4d0
[  489.270003][T11750]  _copy_from_iter+0x1d9/0x12e0
[  489.275081][T11750]  ? rep_movs_alternative+0x4a/0x90
[  489.280584][T11750]  ? _copy_from_iter+0x24e/0x12e0
[  489.285911][T11750]  ? __virt_addr_valid+0x18c/0x540
[  489.291506][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  489.297081][T11750]  ? copyout_mc+0x70/0x70
[  489.302006][T11750]  ? copyout_mc+0x70/0x70
[  489.306934][T11750]  ? __virt_addr_valid+0x18c/0x540
[  489.312288][T11750]  ? page_copy_sane+0x16a/0x270
[  489.317641][T11750]  copy_page_from_iter+0x7b/0x100
[  489.322849][T11750]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  489.329439][T11750]  unix_stream_sendmsg+0x562/0xbf0
[  489.335001][T11750]  ? unix_show_fdinfo+0x270/0x270
[  489.340171][T11750]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  489.346889][T11750]  ? __might_fault+0xaa/0x120
[  489.351702][T11750]  ? aa_sock_msg_perm+0x94/0x150
[  489.357054][T11750]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  489.362655][T11750]  ? security_socket_sendmsg+0x80/0xa0
[  489.368431][T11750]  ? unix_show_fdinfo+0x270/0x270
[  489.373681][T11750]  ____sys_sendmsg+0x5ba/0x960
[  489.378751][T11750]  ? __sys_sendmsg_sock+0x30/0x30
[  489.384169][T11750]  ? __import_iovec+0x5f2/0x850
[  489.389186][T11750]  ? import_iovec+0x73/0xa0
[  489.393929][T11750]  ___sys_sendmsg+0x2a6/0x360
[  489.398972][T11750]  ? __sys_sendmsg+0x2a0/0x2a0
[  489.404048][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  489.409223][T11750]  __se_sys_sendmsg+0x1c2/0x2b0
[  489.414360][T11750]  ? __x64_sys_sendmsg+0x80/0x80
[  489.419619][T11750]  ? lockdep_hardirqs_on+0x98/0x150
[  489.425259][T11750]  do_syscall_64+0x55/0xa0
[  489.429970][T11750]  ? clear_bhb_loop+0x40/0x90
[  489.434934][T11750]  ? clear_bhb_loop+0x40/0x90
[  489.440080][T11750]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  489.446547][T11750] RIP: 0033:0x7fbdd2b9c819
[  489.451354][T11750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.472413][T11750] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.481557][T11750] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  489.490622][T11750] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000004
[  489.499072][T11750] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  489.507695][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  489.517363][T11750] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  489.525773][T11750]  </TASK>
[  489.772827][T11753] syzkaller0: entered promiscuous mode
[  489.788276][T11753] syzkaller0: entered allmulticast mode
[  492.593412][T11796] FAULT_INJECTION: forcing a failure.
[  492.593412][T11796] name failslab, interval 1, probability 0, space 0, times 0
[  492.647937][T11794] netlink: 'syz.2.2145': attribute type 3 has an invalid length.
[  492.659900][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2145'.
[  492.741106][T11796] CPU: 1 PID: 11796 Comm: syz.1.2146 Not tainted syzkaller #0
[  492.750394][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  492.761458][T11796] Call Trace:
[  492.765298][T11796]  <TASK>
[  492.768619][T11796]  dump_stack_lvl+0x18c/0x250
[  492.774702][T11796]  ? show_regs_print_info+0x20/0x20
[  492.780240][T11796]  ? load_image+0x420/0x420
[  492.785394][T11796]  ? __might_sleep+0xe0/0xe0
[  492.790649][T11796]  ? __lock_acquire+0x7d40/0x7d40
[  492.796014][T11796]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  492.803213][T11796]  should_fail_ex+0x39d/0x4d0
[  492.808491][T11796]  should_failslab+0x9/0x20
[  492.813423][T11796]  slab_pre_alloc_hook+0x59/0x310
[  492.818961][T11796]  ? lockdep_hardirqs_on+0x98/0x150
[  492.825174][T11796]  ? __get_vm_area_node+0x125/0x370
[  492.830714][T11796]  __kmem_cache_alloc_node+0x53/0x250
[  492.836772][T11796]  ? __get_vm_area_node+0x125/0x370
[  492.842301][T11796]  kmalloc_node_trace+0x26/0xe0
[  492.847484][T11796]  __get_vm_area_node+0x125/0x370
[  492.853305][T11796]  __vmalloc_node_range+0x36e/0x1330
[  492.859184][T11796]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  492.865248][T11796]  ? perf_trace_preemptirq_template+0x269/0x330
[  492.871690][T11796]  ? perf_trace_preemptirq_template+0xac/0x330
[  492.878410][T11796]  ? lock_chain_count+0x20/0x20
[  492.883410][T11796]  ? free_vm_area+0x50/0x50
[  492.888149][T11796]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  492.892976][T11806] netlink: 'syz.2.2149': attribute type 10 has an invalid length.
[  492.895128][T11796]  ? lockdep_hardirqs_on+0x98/0x150
[  492.895162][T11796]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  492.905053][T11806] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2149'.
[  492.908894][T11796]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  492.908925][T11796]  __vmalloc+0x7a/0x90
[  492.908951][T11796]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  492.908980][T11796]  bpf_prog_alloc_no_stats+0x47/0x440
[  492.909001][T11796]  ? bpf_prog_alloc+0x2b/0x1a0
[  492.909024][T11796]  bpf_prog_alloc+0x3d/0x1a0
[  492.909050][T11796]  bpf_prog_load+0x6eb/0x1670
[  492.909083][T11796]  ? map_freeze+0x420/0x420
[  492.909111][T11796]  ? __might_fault+0xaa/0x120
[  492.909133][T11796]  ? __lock_acquire+0x7d40/0x7d40
[  492.909154][T11796]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  492.909183][T11796]  ? __might_fault+0xaa/0x120
[  492.909201][T11796]  ? __might_fault+0xc6/0x120
[  492.909218][T11796]  ? __might_fault+0xaa/0x120
[  492.997635][T11796]  ? bpf_lsm_bpf+0x9/0x10
[  493.002095][T11796]  ? security_bpf+0x7e/0xa0
[  493.007092][T11796]  __sys_bpf+0x5ba/0x890
[  493.011720][T11796]  ? bpf_link_show_fdinfo+0x390/0x390
[  493.017217][T11796]  ? lock_chain_count+0x20/0x20
[  493.022475][T11796]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  493.028577][T11796]  __x64_sys_bpf+0x7c/0x90
[  493.033531][T11796]  do_syscall_64+0x55/0xa0
[  493.038308][T11796]  ? clear_bhb_loop+0x40/0x90
[  493.043264][T11796]  ? clear_bhb_loop+0x40/0x90
[  493.048330][T11796]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.054714][T11796] RIP: 0033:0x7f105eb9c819
[  493.059495][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.080739][T11796] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.089450][T11796] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  493.097443][T11796] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  493.105774][T11796] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  493.113846][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.122979][T11796] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  493.131429][T11796]  </TASK>
[  493.152958][T11796] syz.1.2146: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  493.172831][T11796] CPU: 0 PID: 11796 Comm: syz.1.2146 Not tainted syzkaller #0
[  493.181109][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  493.191711][T11796] Call Trace:
[  493.195012][T11796]  <TASK>
[  493.198916][T11796]  dump_stack_lvl+0x18c/0x250
[  493.203801][T11796]  ? show_regs_print_info+0x20/0x20
[  493.209840][T11796]  ? load_image+0x420/0x420
[  493.214640][T11796]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  493.222040][T11796]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  493.229138][T11796]  warn_alloc+0x246/0x340
[  493.234033][T11796]  ? zone_watermark_ok_safe+0x230/0x230
[  493.240909][T11796]  ? lockdep_hardirqs_on+0x98/0x150
[  493.246498][T11796]  __vmalloc_node_range+0x393/0x1330
[  493.252169][T11796]  ? perf_trace_preemptirq_template+0x269/0x330
[  493.259050][T11796]  ? perf_trace_preemptirq_template+0xac/0x330
[  493.265866][T11796]  ? lock_chain_count+0x20/0x20
[  493.271220][T11796]  ? free_vm_area+0x50/0x50
[  493.276319][T11796]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  493.282809][T11796]  ? lockdep_hardirqs_on+0x98/0x150
[  493.288473][T11796]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  493.295008][T11796]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  493.300826][T11796]  __vmalloc+0x7a/0x90
[  493.305225][T11796]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  493.310996][T11796]  bpf_prog_alloc_no_stats+0x47/0x440
[  493.316831][T11796]  ? bpf_prog_alloc+0x2b/0x1a0
[  493.321818][T11796]  bpf_prog_alloc+0x3d/0x1a0
[  493.327001][T11796]  bpf_prog_load+0x6eb/0x1670
[  493.332105][T11796]  ? map_freeze+0x420/0x420
[  493.336938][T11796]  ? __might_fault+0xaa/0x120
[  493.341890][T11796]  ? __lock_acquire+0x7d40/0x7d40
[  493.347025][T11796]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  493.353643][T11796]  ? __might_fault+0xaa/0x120
[  493.358431][T11796]  ? __might_fault+0xc6/0x120
[  493.363407][T11796]  ? __might_fault+0xaa/0x120
[  493.368375][T11796]  ? bpf_lsm_bpf+0x9/0x10
[  493.373002][T11796]  ? security_bpf+0x7e/0xa0
[  493.378382][T11796]  __sys_bpf+0x5ba/0x890
[  493.382903][T11796]  ? bpf_link_show_fdinfo+0x390/0x390
[  493.388565][T11796]  ? lock_chain_count+0x20/0x20
[  493.393605][T11796]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  493.399698][T11796]  __x64_sys_bpf+0x7c/0x90
[  493.404142][T11796]  do_syscall_64+0x55/0xa0
[  493.408973][T11796]  ? clear_bhb_loop+0x40/0x90
[  493.413978][T11796]  ? clear_bhb_loop+0x40/0x90
[  493.418694][T11796]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.424719][T11796] RIP: 0033:0x7f105eb9c819
[  493.429255][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.450275][T11796] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.459576][T11796] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  493.468434][T11796] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  493.476765][T11796] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  493.485218][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.493727][T11796] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  493.502259][T11796]  </TASK>
[  493.527081][T11796] Mem-Info:
[  493.530735][T11796] active_anon:9771 inactive_anon:0 isolated_anon:0
[  493.530735][T11796]  active_file:18504 inactive_file:40089 isolated_file:0
[  493.530735][T11796]  unevictable:768 dirty:255 writeback:0
[  493.530735][T11796]  slab_reclaimable:10084 slab_unreclaimable:94037
[  493.530735][T11796]  mapped:24542 shmem:1361 pagetables:536
[  493.530735][T11796]  sec_pagetables:0 bounce:0
[  493.530735][T11796]  kernel_misc_reclaimable:0
[  493.530735][T11796]  free:1341436 free_pcp:9690 free_cma:0
[  493.579660][T11796] Node 0 active_anon:39084kB inactive_anon:0kB active_file:74016kB inactive_file:160156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98168kB dirty:1020kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no
[  493.627151][T11796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  493.705325][T11796] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  493.740766][T11796] lowmem_reserve[]: 0 2521 2522 2522 2522
[  493.746896][T11796] Node 0 DMA32 free:1447552kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38948kB inactive_anon:0kB active_file:74016kB inactive_file:159328kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:23880kB local_pcp:16472kB free_cma:0kB
[  493.779669][T11796] lowmem_reserve[]: 0 0 0 0 0
[  493.787385][T11796] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  493.827272][T11796] lowmem_reserve[]: 0 0 0 0 0
[  493.829346][T11809] netlink: 'syz.2.2151': attribute type 10 has an invalid length.
[  493.832295][T11796] Node 1 Normal free:3902824kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16160kB local_pcp:8224kB free_cma:0kB
[  493.902865][T11809] team0: Device hsr_slave_0 failed to register rx_handler
[  493.969191][T11796] lowmem_reserve[]: 0 0 0 0 0
[  493.989038][T11796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  494.069083][T11814] netlink: 'syz.4.2152': attribute type 10 has an invalid length.
[  494.097122][T11796] Node 0 DMA32: 231*4kB (ME) 267*8kB (UME) 477*16kB (M) 728*32kB (UME) 339*64kB (UME) 204*128kB (UME) 86*256kB (UME) 24*512kB (UM) 10*1024kB (UME) 3*2048kB (ME) 321*4096kB (UM) = 1447300kB
[  494.123308][T11814] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.165073][T11814] bridge_slave_1: left allmulticast mode
[  494.169090][T11796] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  494.187929][T11814] bridge_slave_1: left promiscuous mode
[  494.188276][T11814] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.214759][T11796] Node 1 Normal: 204*4kB (UME) 47*8kB (UME) 30*16kB (UME) 61*32kB (UME) 23*64kB (UME) 11*128kB (UME) 2*256kB (ME) 1*512kB (U) 0*1024kB 2*2048kB (UE) 950*4096kB (M) = 3902824kB
[  494.268777][T11814] team0: Port device bridge_slave_1 added
[  494.305806][T11796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  494.359845][T11796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  494.388014][T11796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  494.417225][T11796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  494.432846][T11818] syzkaller0: entered promiscuous mode
[  494.455752][T11818] syzkaller0: entered allmulticast mode
[  494.457232][T11796] 60122 total pagecache pages
[  494.467032][T11796] 0 pages in swap cache
[  494.471537][T11796] Free swap  = 124996kB
[  494.475962][T11796] Total swap = 124996kB
[  494.497662][T11796] 2097051 pages RAM
[  494.501850][T11796] 0 pages HighMem/MovableOnly
[  494.533403][T11796] 416926 pages reserved
[  494.547053][T11796] 0 pages cma reserved
[  497.483067][T11825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2154'.
[  497.745455][T11844] netlink: 'syz.0.2162': attribute type 10 has an invalid length.
[  497.867890][T11844] team0: Device hsr_slave_0 failed to register rx_handler
[  498.084663][T11854] netlink: 'syz.1.2165': attribute type 10 has an invalid length.
[  498.112714][T11854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.119999][T11844] syz.0.2162 (11844) used greatest stack depth: 18792 bytes left
[  498.137235][T11854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.167498][T11854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.211206][T11854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.373311][T11851] netlink: 'syz.2.2164': attribute type 10 has an invalid length.
[  498.469099][T11851] bridge_slave_1: left allmulticast mode
[  498.477978][T11851] bridge_slave_1: left promiscuous mode
[  498.489959][T11851] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.550405][T11851] team0: Port device bridge_slave_1 added
[  498.782599][T11873] netlink: set zone limit has 8 unknown bytes
[  498.850899][T11872] syzkaller0: entered promiscuous mode
[  498.887016][T11872] syzkaller0: entered allmulticast mode
[  501.086564][T11884] netlink: 'syz.2.2176': attribute type 4 has an invalid length.
[  501.102000][T11889] netlink: 'syz.4.2178': attribute type 10 has an invalid length.
[  501.120055][T11889] team0: Device hsr_slave_0 failed to register rx_handler
[  501.573171][T11905] netlink: 'syz.1.2183': attribute type 10 has an invalid length.
[  501.668181][T11905] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.797665][T11905] bridge_slave_1: left allmulticast mode
[  501.804103][T11905] bridge_slave_1: left promiscuous mode
[  501.838131][T11905] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.983438][T11905] team0: Port device bridge_slave_1 added
[  502.031596][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  502.038797][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  503.719787][T11975] netlink: 'syz.1.2207': attribute type 10 has an invalid length.
[  503.729453][T11975] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2207'.
[  504.669266][T11985] syzkaller0: entered promiscuous mode
[  504.676366][T11985] syzkaller0: entered allmulticast mode
[  505.231636][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2214'.
[  505.234684][T11994] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2214'.
[  505.255609][T11994] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  507.055147][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2214'.
[  507.466632][T12019] netlink: 'syz.2.2219': attribute type 29 has an invalid length.
[  507.499387][T12019] netlink: 'syz.2.2219': attribute type 29 has an invalid length.
[  508.047663][T12036] IPv6: NLM_F_CREATE should be specified when creating new route
[  508.068790][T12036] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2234'.
[  508.871917][T12051] netlink: 'syz.2.2229': attribute type 21 has an invalid length.
[  509.039426][T12058] netlink: 'syz.4.2233': attribute type 8 has an invalid length.
[  509.048546][T12058] netlink: 'syz.4.2233': attribute type 1 has an invalid length.
[  509.059382][T12058] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2233'.
[  509.782568][T12074] netlink: 'syz.1.2237': attribute type 29 has an invalid length.
[  509.843206][T12074] netlink: 'syz.1.2237': attribute type 29 has an invalid length.
[  510.048803][T12066] syzkaller0: entered promiscuous mode
[  510.070481][T12066] syzkaller0: entered allmulticast mode
[  510.429239][T12090] FAULT_INJECTION: forcing a failure.
[  510.429239][T12090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  510.442953][T12090] CPU: 0 PID: 12090 Comm: syz.1.2243 Not tainted syzkaller #0
[  510.450609][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  510.461071][T12090] Call Trace:
[  510.464624][T12090]  <TASK>
[  510.467779][T12090]  dump_stack_lvl+0x18c/0x250
[  510.472888][T12090]  ? show_regs_print_info+0x20/0x20
[  510.478505][T12090]  ? load_image+0x420/0x420
[  510.483234][T12090]  ? __might_fault+0xaa/0x120
[  510.488211][T12090]  ? __lock_acquire+0x7d40/0x7d40
[  510.493636][T12090]  should_fail_ex+0x39d/0x4d0
[  510.498954][T12090]  _copy_from_user+0x2f/0xe0
[  510.503850][T12090]  ___sys_sendmsg+0x1c7/0x360
[  510.508819][T12090]  ? __sys_sendmsg+0x2a0/0x2a0
[  510.514719][T12090]  ? __lock_acquire+0x7d40/0x7d40
[  510.520063][T12090]  __se_sys_sendmsg+0x1c2/0x2b0
[  510.525231][T12090]  ? __x64_sys_sendmsg+0x80/0x80
[  510.530218][T12090]  ? lockdep_hardirqs_on+0x98/0x150
[  510.535646][T12090]  do_syscall_64+0x55/0xa0
[  510.540537][T12090]  ? clear_bhb_loop+0x40/0x90
[  510.545543][T12090]  ? clear_bhb_loop+0x40/0x90
[  510.550364][T12090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  510.556913][T12090] RIP: 0033:0x7f105eb9c819
[  510.561448][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.582153][T12090] RSP: 002b:00007f105fa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.591043][T12090] RAX: ffffffffffffffda RBX: 00007f105ee15fa0 RCX: 00007f105eb9c819
[  510.599826][T12090] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003
[  510.608510][T12090] RBP: 00007f105fa4c090 R08: 0000000000000000 R09: 0000000000000000
[  510.616850][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.625262][T12090] R13: 00007f105ee16038 R14: 00007f105ee15fa0 R15: 00007ffd1059b438
[  510.633613][T12090]  </TASK>
[  512.801494][T12088] veth1_to_bond: entered allmulticast mode
[  513.004290][T12106] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2251'.
[  513.322568][T12121] syzkaller0: entered promiscuous mode
[  513.328788][T12121] syzkaller0: entered allmulticast mode
[  515.223087][ T7022] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  516.284448][T12159] FAULT_INJECTION: forcing a failure.
[  516.284448][T12159] name failslab, interval 1, probability 0, space 0, times 0
[  516.307371][T12159] CPU: 1 PID: 12159 Comm: syz.0.2268 Not tainted syzkaller #0
[  516.315279][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  516.326077][T12159] Call Trace:
[  516.329660][T12159]  <TASK>
[  516.332806][T12159]  dump_stack_lvl+0x18c/0x250
[  516.337889][T12159]  ? lockdep_hardirqs_on+0x98/0x150
[  516.344094][T12159]  ? show_regs_print_info+0x20/0x20
[  516.349646][T12159]  ? _printk+0x121/0x130
[  516.354052][T12159]  should_fail_ex+0x39d/0x4d0
[  516.359057][T12159]  should_failslab+0x9/0x20
[  516.363703][T12159]  slab_pre_alloc_hook+0x59/0x310
[  516.369060][T12159]  ? __lock_acquire+0x7d40/0x7d40
[  516.374142][T12159]  ? kvmalloc_node+0x70/0x180
[  516.379142][T12159]  ? kvmalloc_node+0x70/0x180
[  516.383961][T12159]  __kmem_cache_alloc_node+0x53/0x250
[  516.389564][T12159]  ? __schedule_delayed_monitor_work+0x200/0x200
[  516.396214][T12159]  ? kvmalloc_node+0x70/0x180
[  516.401129][T12159]  __kmalloc_node+0xa4/0x230
[  516.406279][T12159]  kvmalloc_node+0x70/0x180
[  516.410997][T12159]  bpf_test_run_xdp_live+0x1c2/0x1b20
[  516.416680][T12159]  ? 0xffffffffa0004080
[  516.421039][T12159]  ? 0xffffffffa0004080
[  516.425561][T12159]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  516.431823][T12159]  ? 0xffffffffa0004080
[  516.436001][T12159]  ? xdp_convert_md_to_buff+0x330/0x330
[  516.441766][T12159]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  516.448114][T12159]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  516.454654][T12159]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  516.460051][T12159]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  516.466924][T12159]  ? lockdep_hardirqs_on+0x98/0x150
[  516.472545][T12159]  ? dev_put+0x80/0x80
[  516.476903][T12159]  ? dev_put+0x80/0x80
[  516.481530][T12159]  bpf_prog_test_run+0x321/0x390
[  516.486834][T12159]  __sys_bpf+0x49d/0x890
[  516.491304][T12159]  ? bpf_link_show_fdinfo+0x390/0x390
[  516.496880][T12159]  ? lock_chain_count+0x20/0x20
[  516.502162][T12159]  __x64_sys_bpf+0x7c/0x90
[  516.506682][T12159]  do_syscall_64+0x55/0xa0
[  516.511721][T12159]  ? clear_bhb_loop+0x40/0x90
[  516.516849][T12159]  ? clear_bhb_loop+0x40/0x90
[  516.522024][T12159]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.528023][T12159] RIP: 0033:0x7fbdd2b9c819
[  516.532635][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.553041][T12159] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  516.561768][T12159] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  516.569844][T12159] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  516.578277][T12159] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  516.586699][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.594830][T12159] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  516.603207][T12159]  </TASK>
[  516.894328][T12175] syzkaller0: entered promiscuous mode
[  516.900098][T12175] syzkaller0: entered allmulticast mode
[  516.915335][T12177] netlink: 'syz.1.2276': attribute type 10 has an invalid length.
[  517.009299][T12179] syzkaller0: entered promiscuous mode
[  517.015185][T12179] syzkaller0: entered allmulticast mode
[  519.322627][T12186] netlink: 'syz.4.2280': attribute type 10 has an invalid length.
[  519.331914][T12186] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2280'.
[  523.082043][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2296'.
[  523.100078][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2296'.
[  523.112095][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2296'.
[  523.122775][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2296'.
[  523.916108][T12257] IPv6: Can't replace route, no match found
[  524.200773][T12254] netlink: 'syz.4.2304': attribute type 40 has an invalid length.
[  524.218038][T12264] FAULT_INJECTION: forcing a failure.
[  524.218038][T12264] name failslab, interval 1, probability 0, space 0, times 0
[  524.260378][T12264] CPU: 0 PID: 12264 Comm: syz.0.2307 Not tainted syzkaller #0
[  524.268383][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  524.278658][T12264] Call Trace:
[  524.282151][T12264]  <TASK>
[  524.285385][T12264]  dump_stack_lvl+0x18c/0x250
[  524.290440][T12264]  ? show_regs_print_info+0x20/0x20
[  524.295936][T12264]  ? load_image+0x420/0x420
[  524.300462][T12264]  ? __might_sleep+0xe0/0xe0
[  524.305243][T12264]  ? __lock_acquire+0x7d40/0x7d40
[  524.310461][T12264]  should_fail_ex+0x39d/0x4d0
[  524.315431][T12264]  should_failslab+0x9/0x20
[  524.320058][T12264]  slab_pre_alloc_hook+0x59/0x310
[  524.325567][T12264]  kmem_cache_alloc+0x5a/0x2d0
[  524.330540][T12264]  ? skb_clone+0x1eb/0x370
[  524.335214][T12264]  skb_clone+0x1eb/0x370
[  524.339573][T12264]  ? pfkey_broadcast_one+0x7d/0x340
[  524.344971][T12264]  pfkey_broadcast_one+0x9b/0x340
[  524.350008][T12264]  ? pfkey_broadcast+0x39c/0x3e0
[  524.355312][T12264]  pfkey_broadcast+0x3a9/0x3e0
[  524.360455][T12264]  ? pfkey_broadcast+0x48/0x3e0
[  524.365499][T12264]  pfkey_sendmsg+0xe92/0x10e0
[  524.370333][T12264]  ? __lock_acquire+0x1273/0x7d40
[  524.375671][T12264]  ? pfkey_release+0x320/0x320
[  524.380701][T12264]  ? aa_sock_msg_perm+0x94/0x150
[  524.385764][T12264]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  524.391190][T12264]  ? security_socket_sendmsg+0x80/0xa0
[  524.397014][T12264]  ? pfkey_release+0x320/0x320
[  524.401817][T12264]  ____sys_sendmsg+0x5ba/0x960
[  524.406960][T12264]  ? __asan_memset+0x22/0x40
[  524.411836][T12264]  ? __sys_sendmsg_sock+0x30/0x30
[  524.417312][T12264]  ? __import_iovec+0x5f2/0x850
[  524.422286][T12264]  ? import_iovec+0x73/0xa0
[  524.426982][T12264]  ___sys_sendmsg+0x2a6/0x360
[  524.432129][T12264]  ? __sys_sendmsg+0x2a0/0x2a0
[  524.437804][T12264]  ? __lock_acquire+0x7d40/0x7d40
[  524.443321][T12264]  __se_sys_sendmsg+0x1c2/0x2b0
[  524.448559][T12264]  ? __x64_sys_sendmsg+0x80/0x80
[  524.453617][T12264]  ? lockdep_hardirqs_on+0x98/0x150
[  524.458924][T12264]  do_syscall_64+0x55/0xa0
[  524.463704][T12264]  ? clear_bhb_loop+0x40/0x90
[  524.468749][T12264]  ? clear_bhb_loop+0x40/0x90
[  524.473534][T12264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.479966][T12264] RIP: 0033:0x7fbdd2b9c819
[  524.484585][T12264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.506405][T12264] RSP: 002b:00007fbdd3a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  524.515718][T12264] RAX: ffffffffffffffda RBX: 00007fbdd2e15fa0 RCX: 00007fbdd2b9c819
[  524.524636][T12264] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003
[  524.533495][T12264] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  524.541745][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.550189][T12264] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  524.559222][T12264]  </TASK>
[  524.619496][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  524.632503][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  524.642771][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  524.681717][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  524.691947][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  524.700672][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  525.340712][T12265] chnl_net:caif_netlink_parms(): no params data found
[  525.577082][T12288] syzkaller0: entered promiscuous mode
[  525.597719][T12288] syzkaller0: entered allmulticast mode
[  526.753528][ T5082] Bluetooth: hci3: command tx timeout
[  528.562752][T12265] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.571858][T12265] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.582326][T12265] bridge_slave_0: entered allmulticast mode
[  528.619472][T12265] bridge_slave_0: entered promiscuous mode
[  528.650243][T12265] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.665002][T12265] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.679197][T12265] bridge_slave_1: entered allmulticast mode
[  528.689120][T12265] bridge_slave_1: entered promiscuous mode
[  528.779582][T12307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2320'.
[  528.792927][T12307] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2320'.
[  528.812017][T12265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.831177][ T5082] Bluetooth: hci3: command tx timeout
[  528.899591][T12265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.917595][T12310] netlink: 'syz.0.2319': attribute type 1 has an invalid length.
[  528.940978][T12310] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2319'.
[  529.015000][T12265] team0: Port device team_slave_0 added
[  529.033933][T12265] team0: Port device team_slave_1 added
[  529.113073][T12265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.122126][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.152080][T12265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.166635][T12265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.174665][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.203781][T12265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.220196][T12316] netlink: 'syz.4.2322': attribute type 4 has an invalid length.
[  529.305680][T12265] hsr_slave_0: entered promiscuous mode
[  529.354410][T12265] hsr_slave_1: entered promiscuous mode
[  529.365354][T12265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.386369][T12265] Cannot create hsr debugfs directory
[  529.454328][T12321] netlink: 'syz.2.2324': attribute type 10 has an invalid length.
[  529.467260][T12321] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2324'.
[  529.526261][T12322] syzkaller0: entered promiscuous mode
[  529.532263][T12322] syzkaller0: entered allmulticast mode
[  530.913940][ T5082] Bluetooth: hci3: command tx timeout
[  531.990549][T12339] netlink: 'syz.2.2336': attribute type 3 has an invalid length.
[  532.006467][T12339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2336'.
[  532.776368][T12265] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  532.798332][T12265] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  532.829069][T12265] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  532.853591][T12265] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  532.987643][ T5082] Bluetooth: hci3: command tx timeout
[  533.121200][T12359] syzkaller0: entered promiscuous mode
[  533.126885][T12359] syzkaller0: entered allmulticast mode
[  535.357294][T12265] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.393083][T12265] 8021q: adding VLAN 0 to HW filter on device team0
[  535.452355][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.460536][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.501481][T12371] netlink: 'syz.2.2341': attribute type 10 has an invalid length.
[  535.517271][T12371] veth0_vlan: left promiscuous mode
[  535.524655][T12371] veth0_vlan: entered promiscuous mode
[  535.535597][T12371] team0: Device veth0_vlan failed to register rx_handler
[  536.443913][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.451450][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.710290][T12394] syzkaller0: entered promiscuous mode
[  536.718126][T12394] syzkaller0: entered allmulticast mode
[  539.064297][T12265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.206445][T12265] veth0_vlan: entered promiscuous mode
[  539.242793][T12265] veth1_vlan: entered promiscuous mode
[  539.321775][T12265] veth0_macvtap: entered promiscuous mode
[  539.334903][T12265] veth1_macvtap: entered promiscuous mode
[  539.380883][T12265] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.409946][T12265] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.430496][T12265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.440794][T12265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.452908][T12265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.465483][T12265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.655519][ T7022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.683337][ T7022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.742112][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.753717][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.000532][T12421] FAULT_INJECTION: forcing a failure.
[  540.000532][T12421] name failslab, interval 1, probability 0, space 0, times 0
[  540.079209][T12421] CPU: 0 PID: 12421 Comm: syz.1.2301 Not tainted syzkaller #0
[  540.088401][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  540.101470][T12421] Call Trace:
[  540.105242][T12421]  <TASK>
[  540.109013][T12421]  dump_stack_lvl+0x18c/0x250
[  540.114478][T12421]  ? show_regs_print_info+0x20/0x20
[  540.120526][T12421]  ? load_image+0x420/0x420
[  540.125227][T12421]  ? __might_sleep+0xe0/0xe0
[  540.129877][T12421]  ? __lock_acquire+0x7d40/0x7d40
[  540.135205][T12421]  should_fail_ex+0x39d/0x4d0
[  540.140226][T12421]  should_failslab+0x9/0x20
[  540.144957][T12421]  slab_pre_alloc_hook+0x59/0x310
[  540.150306][T12421]  ? sctp_association_new+0x89/0x25c0
[  540.156210][T12421]  __kmem_cache_alloc_node+0x53/0x250
[  540.161903][T12421]  ? sctp_association_new+0x89/0x25c0
[  540.167586][T12421]  kmalloc_trace+0x2a/0xe0
[  540.172274][T12421]  sctp_association_new+0x89/0x25c0
[  540.178264][T12421]  ? sctp_do_bind+0x6bd/0x990
[  540.183185][T12421]  sctp_connect_new_asoc+0x2de/0x6a0
[  540.188760][T12421]  ? __sctp_connect+0xd80/0xd80
[  540.194215][T12421]  ? __local_bh_enable_ip+0x13a/0x1c0
[  540.199841][T12421]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  540.205698][T12421]  ? security_sctp_bind_connect+0x89/0xb0
[  540.211559][T12421]  sctp_sendmsg+0x1575/0x28c0
[  540.216731][T12421]  ? sctp_getsockopt+0xb60/0xb60
[  540.222211][T12421]  ? aa_sk_perm+0x83c/0x970
[  540.227057][T12421]  ? aa_af_perm+0x330/0x330
[  540.231913][T12421]  ? aa_sock_msg_perm+0x82/0x150
[  540.237286][T12421]  ? sock_rps_record_flow+0x19/0x3f0
[  540.242954][T12421]  ? inet_sendmsg+0xe9/0x2f0
[  540.247766][T12421]  ? inet_send_prepare+0x260/0x260
[  540.252957][T12421]  ____sys_sendmsg+0x5ba/0x960
[  540.257848][T12421]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  540.264148][T12421]  ? __asan_memset+0x22/0x40
[  540.269173][T12421]  ? __sys_sendmsg_sock+0x30/0x30
[  540.274591][T12421]  ? __import_iovec+0x5f2/0x850
[  540.280177][T12421]  ? import_iovec+0x73/0xa0
[  540.285078][T12421]  ___sys_sendmsg+0x2a6/0x360
[  540.289898][T12421]  ? __sys_sendmsg+0x2a0/0x2a0
[  540.295251][T12421]  ? __lock_acquire+0x7d40/0x7d40
[  540.300706][T12421]  __se_sys_sendmsg+0x1c2/0x2b0
[  540.305784][T12421]  ? __x64_sys_sendmsg+0x80/0x80
[  540.310789][T12421]  ? lockdep_hardirqs_on+0x98/0x150
[  540.316437][T12421]  do_syscall_64+0x55/0xa0
[  540.321089][T12421]  ? clear_bhb_loop+0x40/0x90
[  540.326005][T12421]  ? clear_bhb_loop+0x40/0x90
[  540.331254][T12421]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.337554][T12421] RIP: 0033:0x7fca9079c819
[  540.342189][T12421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.363064][T12421] RSP: 002b:00007fca916c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.372232][T12421] RAX: ffffffffffffffda RBX: 00007fca90a15fa0 RCX: 00007fca9079c819
[  540.380990][T12421] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000007
[  540.389369][T12421] RBP: 00007fca916c8090 R08: 0000000000000000 R09: 0000000000000000
[  540.397574][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.405689][T12421] R13: 00007fca90a16038 R14: 00007fca90a15fa0 R15: 00007ffe23567288
[  540.413912][T12421]  </TASK>
[  540.576154][T12431] netlink: 'syz.1.2358': attribute type 4 has an invalid length.
[  540.771078][T12439] FAULT_INJECTION: forcing a failure.
[  540.771078][T12439] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  540.818122][T12439] CPU: 0 PID: 12439 Comm: syz.1.2362 Not tainted syzkaller #0
[  540.826254][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  540.837118][T12439] Call Trace:
[  540.840639][T12439]  <TASK>
[  540.843761][T12439]  dump_stack_lvl+0x18c/0x250
[  540.849000][T12439]  ? show_regs_print_info+0x20/0x20
[  540.854489][T12439]  ? load_image+0x420/0x420
[  540.859278][T12439]  ? __lock_acquire+0x7d40/0x7d40
[  540.864536][T12439]  should_fail_ex+0x39d/0x4d0
[  540.869430][T12439]  prepare_alloc_pages+0x1e2/0x5f0
[  540.874831][T12439]  __alloc_pages+0x134/0x460
[  540.879528][T12439]  ? zone_statistics+0x170/0x170
[  540.884664][T12439]  ? alloc_pages+0x4dc/0x740
[  540.889725][T12439]  ? do_raw_spin_unlock+0x121/0x230
[  540.894950][T12439]  __get_free_pages+0xc/0x30
[  540.899731][T12439]  kasan_populate_vmalloc_pte+0x35/0x100
[  540.905822][T12439]  __apply_to_page_range+0x860/0xdd0
[  540.911337][T12439]  ? kasan_populate_vmalloc+0x70/0x70
[  540.917003][T12439]  ? apply_to_page_range+0x50/0x50
[  540.922497][T12439]  ? do_raw_spin_unlock+0x121/0x230
[  540.927815][T12439]  alloc_vmap_area+0x1d0c/0x1e30
[  540.932966][T12439]  ? vm_map_ram+0xcb0/0xcb0
[  540.937925][T12439]  ? rcu_is_watching+0x15/0xb0
[  540.942815][T12439]  __get_vm_area_node+0x162/0x370
[  540.948152][T12439]  __vmalloc_node_range+0x36e/0x1330
[  540.953718][T12439]  ? sock_hash_alloc+0x261/0x4d0
[  540.959393][T12439]  ? free_vm_area+0x50/0x50
[  540.964179][T12439]  ? bpf_map_area_alloc+0x5e/0x110
[  540.969490][T12439]  ? rcu_is_watching+0x15/0xb0
[  540.974928][T12439]  ? bpf_map_area_alloc+0x5e/0x110
[  540.980883][T12439]  bpf_map_area_alloc+0xf1/0x110
[  540.986395][T12439]  ? sock_hash_alloc+0x261/0x4d0
[  540.992145][T12439]  sock_hash_alloc+0x261/0x4d0
[  540.997456][T12439]  map_create+0x877/0x12f0
[  541.002262][T12439]  ? bpf_lsm_bpf+0x9/0x10
[  541.006709][T12439]  __sys_bpf+0x651/0x890
[  541.011272][T12439]  ? bpf_link_show_fdinfo+0x390/0x390
[  541.017010][T12439]  ? lock_chain_count+0x20/0x20
[  541.022271][T12439]  __x64_sys_bpf+0x7c/0x90
[  541.026903][T12439]  do_syscall_64+0x55/0xa0
[  541.031872][T12439]  ? clear_bhb_loop+0x40/0x90
[  541.036748][T12439]  ? clear_bhb_loop+0x40/0x90
[  541.041802][T12439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.048090][T12439] RIP: 0033:0x7fca9079c819
[  541.052640][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.073337][T12439] RSP: 002b:00007fca916c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  541.082388][T12439] RAX: ffffffffffffffda RBX: 00007fca90a15fa0 RCX: 00007fca9079c819
[  541.090678][T12439] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000
[  541.099456][T12439] RBP: 00007fca916c8090 R08: 0000000000000000 R09: 0000000000000000
[  541.108048][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  541.116896][T12439] R13: 00007fca90a16038 R14: 00007fca90a15fa0 R15: 00007ffe23567288
[  541.125094][T12439]  </TASK>
[  544.391585][T12527] syzkaller0: entered promiscuous mode
[  544.400901][T12527] syzkaller0: entered allmulticast mode
[  545.189423][T12543] delete_channel: no stack
[  545.194246][T12543] delete_channel: no stack
[  546.148776][   T12] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  547.812064][T12543] netlink: 'syz.2.2399': attribute type 2 has an invalid length.
[  547.821455][T12543] netlink: 'syz.2.2399': attribute type 4 has an invalid length.
[  547.829676][T12543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2399'.
[  548.625482][T12582] syzkaller0: entered promiscuous mode
[  548.632852][T12582] syzkaller0: entered allmulticast mode
[  548.674717][T12586] netlink: 'syz.1.2415': attribute type 21 has an invalid length.
[  548.692248][T12586] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2415'.
[  549.083163][T12602] netlink: 'syz.2.2420': attribute type 9 has an invalid length.
[  549.092557][T12602] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2420'.
[  552.067777][T12628] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2429'.
[  552.755206][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  552.770108][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  552.779057][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  552.811793][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  552.824168][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  552.843385][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  553.179559][T12643] syzkaller0: entered promiscuous mode
[  553.185216][T12643] syzkaller0: entered allmulticast mode
[  553.346451][ T7005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.734864][T12637] chnl_net:caif_netlink_parms(): no params data found
[  553.768684][ T7005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.908921][ T5082] Bluetooth: hci0: command tx timeout
[  555.324734][ T5082] Bluetooth: hci4: command 0x0406 tx timeout
[  557.000918][ T5082] Bluetooth: hci0: command tx timeout
[  557.095079][ T7005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.331481][ T7005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.546035][T12637] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.584581][T12637] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.650003][T12637] bridge_slave_0: entered allmulticast mode
[  557.673371][T12637] bridge_slave_0: entered promiscuous mode
[  557.684574][T12637] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.704399][T12637] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.720060][T12637] bridge_slave_1: entered allmulticast mode
[  557.742909][T12637] bridge_slave_1: entered promiscuous mode
[  557.955367][T12637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.996134][T12637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.178547][T12637] team0: Port device team_slave_0 added
[  558.318183][T12637] team0: Port device team_slave_1 added
[  558.324621][T12719] 6: renamed from veth0_vlan (while UP)
[  558.702054][T12722] syzkaller0: entered promiscuous mode
[  558.712049][T12722] syzkaller0: entered allmulticast mode
[  558.724094][T12637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.737388][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.766592][T12637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.079768][ T5082] Bluetooth: hci0: command tx timeout
[  561.100318][T12637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.107893][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  561.135671][T12637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  561.158011][ T5082] Bluetooth: hci0: command tx timeout
[  561.330078][T12637] hsr_slave_0: entered promiscuous mode
[  561.347440][T12637] hsr_slave_1: entered promiscuous mode
[  561.355005][T12637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  561.363286][T12637] Cannot create hsr debugfs directory
[  561.862886][T12762] Dead loop on virtual device ip6_vti0, fix it urgently!
[  562.189926][T12637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.388590][T12637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.701183][T12774] syzkaller0: entered promiscuous mode
[  562.710514][T12774] syzkaller0: entered allmulticast mode
[  562.769360][T12637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.986322][T12637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.480600][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  563.487605][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  563.833238][T12806] FAULT_INJECTION: forcing a failure.
[  563.833238][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.846770][T12806] CPU: 0 PID: 12806 Comm: syz.0.2477 Not tainted syzkaller #0
[  563.854440][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  563.865115][T12806] Call Trace:
[  563.868559][T12806]  <TASK>
[  563.871601][T12806]  dump_stack_lvl+0x18c/0x250
[  563.876500][T12806]  ? show_regs_print_info+0x20/0x20
[  563.881860][T12806]  ? load_image+0x420/0x420
[  563.886473][T12806]  ? __lock_acquire+0x7d40/0x7d40
[  563.891507][T12806]  ? snprintf+0xe9/0x140
[  563.895898][T12806]  should_fail_ex+0x39d/0x4d0
[  563.900956][T12806]  _copy_to_user+0x2f/0xa0
[  563.905505][T12806]  simple_read_from_buffer+0xe7/0x150
[  563.911009][T12806]  proc_fail_nth_read+0x1e8/0x260
[  563.916355][T12806]  ? proc_fault_inject_write+0x360/0x360
[  563.922205][T12806]  ? fsnotify_perm+0x271/0x5e0
[  563.927341][T12806]  ? proc_fault_inject_write+0x360/0x360
[  563.933085][T12806]  vfs_read+0x28b/0x970
[  563.937478][T12806]  ? kernel_read+0x1e0/0x1e0
[  563.942317][T12806]  ? __fget_files+0x28/0x4b0
[  563.947117][T12806]  ? __fget_files+0x28/0x4b0
[  563.952293][T12806]  ? __fget_files+0x43d/0x4b0
[  563.957617][T12806]  ? __fdget_pos+0x2a3/0x330
[  563.962416][T12806]  ? ksys_read+0x75/0x260
[  563.967455][T12806]  ksys_read+0x150/0x260
[  563.972898][T12806]  ? vfs_write+0x990/0x990
[  563.977516][T12806]  ? lockdep_hardirqs_on+0x98/0x150
[  563.983277][T12806]  do_syscall_64+0x55/0xa0
[  563.988143][T12806]  ? clear_bhb_loop+0x40/0x90
[  563.993087][T12806]  ? clear_bhb_loop+0x40/0x90
[  563.998140][T12806]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  564.004411][T12806] RIP: 0033:0x7fbdd2b5d04e
[  564.009208][T12806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  564.030406][T12806] RSP: 002b:00007fbdd3a09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  564.039173][T12806] RAX: ffffffffffffffda RBX: 00007fbdd3a0a6c0 RCX: 00007fbdd2b5d04e
[  564.047714][T12806] RDX: 000000000000000f RSI: 00007fbdd3a0a0a0 RDI: 0000000000000004
[  564.056236][T12806] RBP: 00007fbdd3a0a090 R08: 0000000000000000 R09: 0000000000000000
[  564.064927][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.073595][T12806] R13: 00007fbdd2e16038 R14: 00007fbdd2e15fa0 R15: 00007ffec25f9538
[  564.082058][T12806]  </TASK>
[  566.229193][T12823] netlink: 'syz.0.2484': attribute type 2 has an invalid length.
[  566.239031][T12823] netlink: 'syz.0.2484': attribute type 9 has an invalid length.
[  566.250224][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2484'.
[  566.290083][ T7005] hsr_slave_0: left promiscuous mode
[  566.310778][ T7005] hsr_slave_1: left promiscuous mode
[  566.346520][ T7005] bridge_slave_1: left allmulticast mode
[  566.352814][ T7005] bridge_slave_1: left promiscuous mode
[  566.360876][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.378555][ T7005] bridge_slave_0: left allmulticast mode
[  566.384543][ T7005] bridge_slave_0: left promiscuous mode
[  566.397072][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.436076][ T7005] veth1_macvtap: left promiscuous mode
[  566.445225][ T7005] veth0_macvtap: left promiscuous mode
[  566.457567][ T7005] veth0_vlan: left promiscuous mode
[  566.564840][T12833] sctp: [Deprecated]: syz.1.2488 (pid 12833) Use of int in max_burst socket option deprecated.
[  566.564840][T12833] Use struct sctp_assoc_value instead
[  567.395151][ T7005] team0 (unregistering): Port device team_slave_1 removed
[  567.479947][ T7005] team0 (unregistering): Port device team_slave_0 removed
[  568.168540][T12832] netlink: 16026 bytes leftover after parsing attributes in process `syz.0.2487'.
[  568.279452][T12849] syzkaller0: entered promiscuous mode
[  568.285541][T12849] syzkaller0: entered allmulticast mode
[  572.553247][T12938] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2515'.
[  572.566127][T12637] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  572.606083][T12637] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  572.645484][T12637] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  572.675551][T12637] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  573.149524][T12637] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.209194][T12637] 8021q: adding VLAN 0 to HW filter on device team0
[  573.271985][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.279908][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.317686][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.325470][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.801826][T12965] syzkaller0: entered promiscuous mode
[  573.830845][T12965] syzkaller0: entered allmulticast mode
[  577.180008][ T3495] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  577.863817][T12637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.983130][T12637] veth0_vlan: entered promiscuous mode
[  578.011679][T12637] veth1_vlan: entered promiscuous mode
[  578.083276][T12637] veth0_macvtap: entered promiscuous mode
[  578.127196][T12637] veth1_macvtap: entered promiscuous mode
[  578.235624][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.268489][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.285479][T12637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.331316][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.356657][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.396714][T12637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.474161][T12637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.540017][T12637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.596146][T12637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.652029][T12637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.917732][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.938293][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.018352][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.026250][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.905868][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  580.928923][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  580.938057][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  580.946341][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  580.954718][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  580.962831][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  582.336721][ T7005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.536395][ T7005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.750222][ T7005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.076152][   T51] Bluetooth: hci1: command tx timeout
[  583.192347][ T7005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.235725][T13078] chnl_net:caif_netlink_parms(): no params data found
[  583.876215][T13078] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.911364][T13078] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.931171][T13078] bridge_slave_0: entered allmulticast mode
[  583.961859][T13078] bridge_slave_0: entered promiscuous mode
[  584.042945][T13078] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.063979][T13078] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.077426][T13078] bridge_slave_1: entered allmulticast mode
[  584.088499][T13078] bridge_slave_1: entered promiscuous mode
[  584.176756][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.228143][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.487987][T13078] team0: Port device team_slave_0 added
[  584.495046][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'.
[  584.729353][T13078] team0: Port device team_slave_1 added
[  584.833428][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.851896][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.887839][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.938728][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.961321][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.012837][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.147467][   T51] Bluetooth: hci1: command tx timeout
[  585.177764][T13173] syzkaller0: entered promiscuous mode
[  585.184298][T13173] syzkaller0: entered allmulticast mode
[  585.382385][T13078] hsr_slave_0: entered promiscuous mode
[  585.390585][T13078] hsr_slave_1: entered promiscuous mode
[  585.399615][T13078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  585.409507][T13078] Cannot create hsr debugfs directory
[  587.229193][   T51] Bluetooth: hci1: command tx timeout
[  588.042914][T13187] FAULT_INJECTION: forcing a failure.
[  588.042914][T13187] name failslab, interval 1, probability 0, space 0, times 0
[  588.064124][T13187] CPU: 0 PID: 13187 Comm: syz.4.2569 Not tainted syzkaller #0
[  588.072477][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  588.083203][T13187] Call Trace:
[  588.086985][T13187]  <TASK>
[  588.089980][T13187]  dump_stack_lvl+0x18c/0x250
[  588.095089][T13187]  ? show_regs_print_info+0x20/0x20
[  588.100717][T13187]  ? load_image+0x420/0x420
[  588.105838][T13187]  should_fail_ex+0x39d/0x4d0
[  588.111238][T13187]  should_failslab+0x9/0x20
[  588.115974][T13187]  slab_pre_alloc_hook+0x59/0x310
[  588.121408][T13187]  kmem_cache_alloc+0x5a/0x2d0
[  588.126586][T13187]  ? __nf_conntrack_alloc+0x99/0x380
[  588.132115][T13187]  __nf_conntrack_alloc+0x99/0x380
[  588.137641][T13187]  init_conntrack+0x177/0xf10
[  588.142511][T13187]  ? early_drop+0x7f0/0x7f0
[  588.147168][T13187]  ? nf_conntrack_find_get+0x650/0x650
[  588.153121][T13187]  ? __siphash_unaligned+0x22e/0x3a0
[  588.158829][T13187]  nf_conntrack_in+0xc06/0x15c0
[  588.164194][T13187]  ? nf_ct_pernet+0x270/0x270
[  588.169358][T13187]  ? ip6t_do_table+0x1d9/0x1510
[  588.174366][T13187]  ? ip6t_alloc_initial_table+0x640/0x640
[  588.180408][T13187]  ? ipv6_defrag+0x2d6/0x3a0
[  588.185045][T13187]  ? ipv6_conntrack_in+0x20/0x20
[  588.190663][T13187]  nf_hook_slow+0xbd/0x200
[  588.195623][T13187]  ? rawv6_send_hdrinc+0xb5a/0x1640
[  588.200978][T13187]  rawv6_send_hdrinc+0x14f3/0x1640
[  588.206319][T13187]  ? txopt_get+0x3f0/0x3f0
[  588.210790][T13187]  ? rawv6_push_pending_frames+0x8d0/0x8d0
[  588.217066][T13187]  ? ip6_dst_hoplimit+0x96/0x350
[  588.222370][T13187]  ? ip6_dst_hoplimit+0x96/0x350
[  588.227612][T13187]  rawv6_sendmsg+0x12cc/0x1770
[  588.233116][T13187]  ? verify_lock_unused+0x140/0x140
[  588.238861][T13187]  ? compat_rawv6_ioctl+0x70/0x70
[  588.244443][T13187]  ? aa_sk_perm+0x83c/0x970
[  588.249161][T13187]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  588.256209][T13187]  ? inet_sendmsg+0x7c/0x2f0
[  588.261027][T13187]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  588.266531][T13187]  ? security_socket_sendmsg+0x80/0xa0
[  588.272006][T13187]  ? inet_send_prepare+0x260/0x260
[  588.277399][T13187]  ____sys_sendmsg+0x5ba/0x960
[  588.282352][T13187]  ? __lock_acquire+0x7d40/0x7d40
[  588.288101][T13187]  ? __asan_memset+0x22/0x40
[  588.292895][T13187]  ? __sys_sendmsg_sock+0x30/0x30
[  588.298206][T13187]  ? __import_iovec+0x5f2/0x850
[  588.303166][T13187]  ? import_iovec+0x73/0xa0
[  588.307877][T13187]  ___sys_sendmsg+0x2a6/0x360
[  588.313271][T13187]  ? get_pid_task+0x20/0x1e0
[  588.318092][T13187]  ? __sys_sendmsg+0x2a0/0x2a0
[  588.322997][T13187]  ? __lock_acquire+0x7d40/0x7d40
[  588.328547][T13187]  __se_sys_sendmsg+0x1c2/0x2b0
[  588.333856][T13187]  ? __x64_sys_sendmsg+0x80/0x80
[  588.338922][T13187]  ? lockdep_hardirqs_on+0x98/0x150
[  588.344315][T13187]  do_syscall_64+0x55/0xa0
[  588.348924][T13187]  ? clear_bhb_loop+0x40/0x90
[  588.353639][T13187]  ? clear_bhb_loop+0x40/0x90
[  588.358341][T13187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  588.364422][T13187] RIP: 0033:0x7f951cf9c819
[  588.368873][T13187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.390951][T13187] RSP: 002b:00007f951dd8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.399480][T13187] RAX: ffffffffffffffda RBX: 00007f951d215fa0 RCX: 00007f951cf9c819
[  588.407727][T13187] RDX: 0000000000040800 RSI: 00002000000008c0 RDI: 0000000000000003
[  588.415895][T13187] RBP: 00007f951dd8d090 R08: 0000000000000000 R09: 0000000000000000
[  588.424074][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.432390][T13187] R13: 00007f951d216038 R14: 00007f951d215fa0 R15: 00007ffd8d017538
[  588.440754][T13187]  </TASK>
[  589.296698][T13217] netlink: 'syz.1.2576': attribute type 10 has an invalid length.
[  589.316454][   T51] Bluetooth: hci1: command tx timeout
[  589.363861][ T7005] hsr_slave_0: left promiscuous mode
[  589.385039][ T7005] hsr_slave_1: left promiscuous mode
[  589.403382][ T7005] bridge_slave_1: left allmulticast mode
[  589.417056][ T7005] bridge_slave_1: left promiscuous mode
[  589.431485][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.445714][ T7005] bridge_slave_0: left allmulticast mode
[  589.453710][ T7005] bridge_slave_0: left promiscuous mode
[  589.460348][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.496358][ T7005] veth1_macvtap: left promiscuous mode
[  589.503885][ T7005] veth0_macvtap: left promiscuous mode
[  589.511859][ T7005] veth1_vlan: left promiscuous mode
[  589.523067][ T7005] veth0_vlan: left promiscuous mode
[  604.446147][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  604.458438][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  604.468254][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  604.481671][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  604.490406][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  604.498256][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  606.543855][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  606.554903][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  606.565530][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  606.575542][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  606.585107][   T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  606.593419][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  606.601366][   T51] Bluetooth: hci2: command tx timeout
[  607.572657][ T5082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  607.582978][ T5082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  607.594046][ T5082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  607.603673][ T5082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  607.612459][ T5082] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  607.620606][ T5082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  608.202656][ T2958] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  608.667275][ T5082] Bluetooth: hci5: command tx timeout
[  608.673806][ T5082] Bluetooth: hci2: command tx timeout
[  609.716048][ T5082] Bluetooth: hci6: command tx timeout
[  610.757351][   T51] Bluetooth: hci5: command tx timeout
[  610.765798][ T5082] Bluetooth: hci2: command tx timeout
[  611.787208][ T5082] Bluetooth: hci6: command tx timeout
[  612.827217][   T51] Bluetooth: hci5: command tx timeout
[  612.833423][ T5082] Bluetooth: hci2: command tx timeout
[  613.867449][ T5082] Bluetooth: hci6: command tx timeout
[  614.907505][ T5082] Bluetooth: hci5: command tx timeout
[  615.949971][ T5082] Bluetooth: hci6: command tx timeout
[  624.911562][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  624.918449][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  639.229988][ T2958] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  640.048933][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  640.060030][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  640.068790][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  640.079233][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  640.090365][   T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  640.098903][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  642.188587][ T5082] Bluetooth: hci7: command tx timeout
[  644.267152][ T5082] Bluetooth: hci7: command tx timeout
[  646.347082][   T51] Bluetooth: hci7: command tx timeout
[  647.467087][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  648.427218][ T5082] Bluetooth: hci7: command tx timeout
[  665.034370][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  665.047531][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  665.056408][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  665.065307][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  665.075657][   T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  665.084304][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  666.468142][ T5082] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  666.477049][ T5082] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  666.485757][ T5082] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  666.500226][ T5082] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  666.509143][ T5082] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  666.518040][T13268] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  667.147240][   T51] Bluetooth: hci8: command tx timeout
[  667.967625][   T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  667.980704][   T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  667.993066][   T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  668.005953][   T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  668.015417][   T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  668.024975][   T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  668.597398][T13268] Bluetooth: hci9: command tx timeout
[  669.227069][T13268] Bluetooth: hci8: command tx timeout
[  670.107373][T13268] Bluetooth: hci10: command tx timeout
[  670.257344][ T2958] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  670.667396][T13268] Bluetooth: hci9: command tx timeout
[  671.307176][T13268] Bluetooth: hci8: command tx timeout
[  672.187356][T13268] Bluetooth: hci10: command tx timeout
[  672.747164][T13268] Bluetooth: hci9: command tx timeout
[  673.387053][T13268] Bluetooth: hci8: command tx timeout
[  674.267402][T13268] Bluetooth: hci10: command tx timeout
[  674.827202][T13268] Bluetooth: hci9: command tx timeout
[  676.347295][   T51] Bluetooth: hci10: command tx timeout
[  678.187181][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  686.359920][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  686.366405][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  700.582645][   T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  700.599596][   T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  700.608515][   T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  700.619452][   T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  700.629457][   T51] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  700.640248][   T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  701.181721][T12369] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  702.667224][T13268] Bluetooth: hci11: command tx timeout
[  703.790158][T13268] Bluetooth: hci1: command 0x0406 tx timeout
[  704.759574][   T51] Bluetooth: hci11: command tx timeout
[  706.839375][   T51] Bluetooth: hci11: command tx timeout
[  708.906956][   T51] Bluetooth: hci11: command tx timeout
[  725.596159][T13268] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  725.613069][T13268] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  725.623230][T13268] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  725.637277][T13268] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  725.646541][T13268] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  725.656358][T13268] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  726.544185][   T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  726.554168][   T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  726.563391][   T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  726.574143][   T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  726.584808][   T51] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  726.592860][   T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  727.717080][ T5082] Bluetooth: hci12: command tx timeout
[  728.572153][T12267] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  728.582165][T12267] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  728.593098][T12267] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  728.604147][T12267] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  728.613396][T12267] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  728.621738][T12267] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  728.677189][T12267] Bluetooth: hci13: command tx timeout
[  729.387111][T12267] Bluetooth: hci5: command 0x0406 tx timeout
[  729.397254][ T5082] Bluetooth: hci2: command 0x0406 tx timeout
[  729.787001][T13268] Bluetooth: hci12: command tx timeout
[  730.667117][T13268] Bluetooth: hci14: command tx timeout
[  730.747043][T13268] Bluetooth: hci13: command tx timeout
[  731.867067][T13268] Bluetooth: hci12: command tx timeout
[  732.208982][ T7007] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  732.747076][T13268] Bluetooth: hci14: command tx timeout
[  732.837063][T13268] Bluetooth: hci13: command tx timeout
[  733.947337][T13268] Bluetooth: hci12: command tx timeout
[  734.516999][T13268] Bluetooth: hci6: command 0x0406 tx timeout
[  734.827137][ T5082] Bluetooth: hci14: command tx timeout
[  734.907108][ T5082] Bluetooth: hci13: command tx timeout
[  734.989747][   T29] INFO: task dhcpcd:5433 blocked for more than 143 seconds.
[  734.997955][   T29]       Not tainted syzkaller #0
[  735.003199][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.014284][   T29] task:dhcpcd          state:D stack:20968 pid:5433  ppid:5432   flags:0x00004002
[  735.024806][   T29] Call Trace:
[  735.028648][   T29]  <TASK>
[  735.031796][   T29]  __schedule+0x1553/0x45a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  735.036543][   T29]  ? asan.module_dtor+0x20/0x20
[  735.056933][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  735.061874][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  735.068366][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  735.076031][   T29]  schedule+0xbd/0x170
[  735.080895][   T29]  schedule_preempt_disabled+0x13/0x20
[  735.087473][   T29]  __mutex_lock+0x6a9/0xcc0
[  735.092532][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  735.098119][   T29]  ? devinet_ioctl+0x30c/0x1c40
[  735.103423][   T29]  ? mutex_lock_nested+0x20/0x20
[  735.109166][   T29]  ? bpf_lsm_capable+0x9/0x10
[  735.114238][   T29]  ? security_capable+0x89/0xb0
[  735.119922][   T29]  devinet_ioctl+0x30c/0x1c40
[  735.125258][   T29]  ? inet_ifa_byprefix+0x2a0/0x2a0
[  735.131028][   T29]  ? _copy_from_user+0xa5/0xe0
[  735.136111][   T29]  ? get_user_ifreq+0x12b/0x180
[  735.141991][   T29]  inet_ioctl+0x42b/0x560
[  735.147702][   T29]  ? tomoyo_path_number_perm+0x217/0x620
[  735.153847][   T29]  ? inet_shutdown+0x370/0x370
[  735.159661][   T29]  ? slab_free_freelist_hook+0x130/0x1a0
[  735.167210][   T29]  ? tomoyo_path_number_perm+0x500/0x620
[  735.173471][   T29]  ? __kmem_cache_free+0xba/0x1e0
[  735.180101][   T29]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  735.186081][   T29]  sock_do_ioctl+0xfc/0x310
[  735.192123][   T29]  ? sock_show_fdinfo+0xb0/0xb0
[  735.197524][   T29]  sock_ioctl+0x5ba/0x7e0
[  735.202358][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[  735.234786][   T29]  ? sock_poll+0x3e0/0x3e0
[  735.246511][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  735.258017][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  735.263873][   T29]  ? security_file_ioctl+0x80/0xa0
[  735.271522][   T29]  ? sock_poll+0x3e0/0x3e0
[  735.276152][   T29]  __se_sys_ioctl+0xfd/0x170
[  735.282452][   T29]  do_syscall_64+0x55/0xa0
[  735.287544][   T29]  ? clear_bhb_loop+0x40/0x90
[  735.292655][   T29]  ? clear_bhb_loop+0x40/0x90
[  735.298023][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  735.305957][   T29] RIP: 0033:0x7f654a67a378
[  735.311345][   T29] RSP: 002b:00007ffd82baa228 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  735.321655][   T29] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00007f654a67a378
[  735.330644][   T29] RDX: 00007ffd82bba420 RSI: 0000000000008914 RDI: 0000000000000019
[  735.339219][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  735.348086][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd82bca5c0
[  735.356859][   T29] R13: 00007f654a57a6c8 R14: 0000000000000028 R15: 0000000000008914
[  735.365008][   T29]  </TASK>
[  735.368256][   T29] INFO: task kworker/u4:19:7022 blocked for more than 143 seconds.
[  735.376365][   T29]       Not tainted syzkaller #0
[  735.381512][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.391499][   T29] task:kworker/u4:19   state:D stack:23368 pid:7022  ppid:2      flags:0x00004000
[  735.401669][   T29] Workqueue: events_unbound linkwatch_event
[  735.408180][   T29] Call Trace:
[  735.411607][   T29]  <TASK>
[  735.414676][   T29]  __schedule+0x1553/0x45a0
[  735.419540][   T29]  ? asan.module_dtor+0x20/0x20
[  735.424531][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  735.430042][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  735.436146][   T29]  ? kthread_data+0x4f/0xc0
[  735.441063][   T29]  ? wq_worker_sleeping+0x63/0x240
[  735.446465][   T29]  schedule+0xbd/0x170
[  735.451229][   T29]  schedule_preempt_disabled+0x13/0x20
[  735.456991][   T29]  __mutex_lock+0x6a9/0xcc0
[  735.463050][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  735.476277][   T29]  ? linkwatch_event+0xe/0x60
[  735.481484][   T29]  ? mutex_lock_nested+0x20/0x20
[  735.487843][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  735.493670][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  735.499948][   T29]  linkwatch_event+0xe/0x60
[  735.504683][   T29]  process_scheduled_works+0xa5d/0x15d0
[  735.510831][   T29]  ? worker_attach_to_pool+0x380/0x380
[  735.517373][   T29]  ? assign_work+0x3d2/0x5d0
[  735.522227][   T29]  worker_thread+0xa55/0xfc0
[  735.527610][   T29]  kthread+0x2fa/0x390
[  735.531851][   T29]  ? pr_cont_work+0x560/0x560
[  735.538611][   T29]  ? kthread_blkcg+0xd0/0xd0
[  735.543471][   T29]  ret_from_fork+0x48/0x80
[  735.548642][   T29]  ? kthread_blkcg+0xd0/0xd0
[  735.553529][   T29]  ret_from_fork_asm+0x11/0x20
[  735.559112][   T29]  </TASK>
[  735.562406][   T29] INFO: task kworker/1:4:12101 blocked for more than 143 seconds.
[  735.570366][   T29]       Not tainted syzkaller #0
[  735.575809][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.585047][   T29] task:kworker/1:4     state:D stack:26376 pid:12101 ppid:2      flags:0x00004000
[  735.596021][   T29] Workqueue: events switchdev_deferred_process_work
[  735.603882][   T29] Call Trace:
[  735.607311][   T29]  <TASK>
[  735.610569][   T29]  __schedule+0x1553/0x45a0
[  735.615516][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[  735.620943][   T29]  ? mark_lock+0x94/0x320
[  735.625599][   T29]  ? asan.module_dtor+0x20/0x20
[  735.630911][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  735.636288][   T29]  schedule+0xbd/0x170
[  735.640807][   T29]  schedule_preempt_disabled+0x13/0x20
[  735.647229][   T29]  __mutex_lock+0x6a9/0xcc0
[  735.651995][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  735.656750][   T29]  ? switchdev_deferred_process_work+0xe/0x20
[  735.663251][   T29]  ? mutex_lock_nested+0x20/0x20
[  735.668809][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  735.674603][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  735.680605][   T29]  switchdev_deferred_process_work+0xe/0x20
[  735.687194][   T29]  process_scheduled_works+0xa5d/0x15d0
[  735.693450][   T29]  ? worker_attach_to_pool+0x380/0x380
[  735.699318][   T29]  ? assign_work+0x3d2/0x5d0
[  735.704255][   T29]  worker_thread+0xa55/0xfc0
[  735.709316][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  735.716769][   T29]  ? _raw_spin_unlock+0x40/0x40
[  735.722177][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  735.729012][   T29]  kthread+0x2fa/0x390
[  735.733331][   T29]  ? pr_cont_work+0x560/0x560
[  735.738763][   T29]  ? kthread_blkcg+0xd0/0xd0
[  735.743701][   T29]  ret_from_fork+0x48/0x80
[  735.748447][   T29]  ? kthread_blkcg+0xd0/0xd0
[  735.753355][   T29]  ret_from_fork_asm+0x11/0x20
[  735.759036][   T29]  </TASK>
[  735.762483][   T29] INFO: task syz-executor:13078 blocked for more than 144 seconds.
[  735.774231][   T29]       Not tainted syzkaller #0
[  735.779295][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.788416][   T29] task:syz-executor    state:D stack:22216 pid:13078 ppid:1      flags:0x00004006
[  735.799902][   T29] Call Trace:
[  735.804402][   T29]  <TASK>
[  735.807773][   T29]  __schedule+0x1553/0x45a0
[  735.812478][   T29]  ? stack_trace_snprint+0xf0/0xf0
[  735.818154][   T29]  ? asan.module_dtor+0x20/0x20
[  735.823795][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  735.830255][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  735.836217][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  735.843663][   T29]  schedule+0xbd/0x170
[  735.848062][   T29]  schedule_preempt_disabled+0x13/0x20
[  735.853740][   T29]  __mutex_lock+0x6a9/0xcc0
[  735.859045][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  735.864130][   T29]  ? nsim_destroy+0x3f/0x180
[  735.869238][   T29]  ? mutex_lock_nested+0x20/0x20
[  735.874412][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  735.880892][   T29]  nsim_destroy+0x3f/0x180
[  735.885652][   T29]  __nsim_dev_port_del+0x14d/0x1b0
[  735.893650][   T29]  nsim_dev_reload_destroy+0x283/0x480
[  735.900928][   T29]  nsim_drv_remove+0x58/0x170
[  735.905910][   T29]  ? nsim_bus_probe+0x20/0x20
[  735.913476][   T29]  device_release_driver_internal+0x468/0x7a0
[  735.919938][   T29]  bus_remove_device+0x342/0x400
[  735.925483][   T29]  device_del+0x522/0x910
[  735.933028][   T29]  ? kill_device+0x160/0x160
[  735.938026][   T29]  device_unregister+0x20/0xc0
[  735.942954][   T29]  del_device_store+0x2b1/0x370
[  735.951485][   T29]  ? del_port_store+0x170/0x170
[  735.956563][   T29]  ? sysfs_kf_write+0x187/0x2a0
[  735.961526][   T29]  ? sysfs_kf_read+0x310/0x310
[  735.966522][   T29]  kernfs_fop_write_iter+0x3b6/0x520
[  735.976039][   T29]  vfs_write+0x46c/0x990
[  735.980854][   T29]  ? file_end_write+0x250/0x250
[  735.986110][   T29]  ? do_sys_openat2+0x170/0x1d0
[  735.991443][   T29]  ? __fdget_pos+0x2ba/0x330
[  735.996375][   T29]  ksys_write+0x150/0x260
[  736.001462][   T29]  ? __ia32_sys_read+0x90/0x90
[  736.006302][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  736.011841][   T29]  do_syscall_64+0x55/0xa0
[  736.016658][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.022048][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.027116][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.033235][   T29] RIP: 0033:0x7effa895d04e
[  736.037934][   T29] RSP: 002b:00007ffe44d71978 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  736.046683][   T29] RAX: ffffffffffffffda RBX: 0000555563d42500 RCX: 00007effa895d04e
[  736.054851][   T29] RDX: 0000000000000001 RSI: 00007ffe44d71a00 RDI: 0000000000000005
[  736.063453][   T29] RBP: 00007effa8a33514 R08: 0000000000000000 R09: 0000000000000000
[  736.071882][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  736.080443][   T29] R13: 00007ffe44d71a00 R14: 00007effa9744620 R15: 0000000000000003
[  736.089213][   T29]  </TASK>
[  736.092503][   T29] INFO: task syz.1.2576:13216 blocked for more than 144 seconds.
[  736.101745][   T29]       Not tainted syzkaller #0
[  736.107639][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  736.117199][   T29] task:syz.1.2576      state:D stack:27016 pid:13216 ppid:12265  flags:0x00004004
[  736.126752][   T29] Call Trace:
[  736.130383][   T29]  <TASK>
[  736.133632][   T29]  __schedule+0x1553/0x45a0
[  736.138783][   T29]  ? kasan_save_stack+0x3e/0x60
[  736.143774][   T29]  ? __kasan_record_aux_stack+0xaf/0xc0
[  736.149913][   T29]  ? call_rcu+0x153/0x950
[  736.154622][   T29]  ? exit_to_user_mode_prepare+0xee/0x180
[  736.160956][   T29]  ? asan.module_dtor+0x20/0x20
[  736.165867][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  736.171084][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  736.176937][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  736.184031][   T29]  schedule+0xbd/0x170
[  736.189197][   T29]  schedule_preempt_disabled+0x13/0x20
[  736.196089][   T29]  __mutex_lock+0x6a9/0xcc0
[  736.202216][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  736.207181][   T29]  ? bpf_xdp_link_release+0x7f/0x4d0
[  736.212830][   T29]  ? mutex_lock_nested+0x20/0x20
[  736.218238][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  736.224736][   T29]  ? lock_chain_count+0x20/0x20
[  736.230202][   T29]  bpf_xdp_link_release+0x7f/0x4d0
[  736.235520][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  736.241056][   T29]  ? __netdev_adjacent_dev_remove+0x5c0/0x5c0
[  736.247866][   T29]  ? __local_bh_enable_ip+0x13a/0x1c0
[  736.253633][   T29]  ? _local_bh_enable+0xa0/0xa0
[  736.260191][   T29]  bpf_link_free+0x131/0x310
[  736.265112][   T29]  ? idr_preload_end+0x200/0x200
[  736.271453][   T29]  bpf_link_release+0x6e/0x80
[  736.276668][   T29]  __fput+0x234/0x970
[  736.282126][   T29]  task_work_run+0x1d4/0x260
[  736.287638][   T29]  ? task_work_cancel+0x220/0x220
[  736.293163][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  736.299153][   T29]  exit_to_user_mode_loop+0xe6/0x110
[  736.305823][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  736.312135][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  736.318085][   T29]  do_syscall_64+0x61/0xa0
[  736.322735][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.327630][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.332969][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.339318][   T29] RIP: 0033:0x7fca9079c819
[  736.343874][   T29] RSP: 002b:00007ffe235673e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  736.353060][   T29] RAX: 0000000000000000 RBX: 00007fca90a17da0 RCX: 00007fca9079c819
[  736.361639][   T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  736.370397][   T29] RBP: 00007fca90a17da0 R08: 00007fca90a16038 R09: 0000000000000000
[  736.378750][   T29] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 0000000000090073
[  736.387542][   T29] R13: 00007fca90a15fac R14: 000000000008fdd2 R15: 00007ffe235674f0
[  736.396002][   T29]  </TASK>
[  736.399493][   T29] INFO: task syz.4.2583:13241 blocked for more than 144 seconds.
[  736.408315][   T29]       Not tainted syzkaller #0
[  736.413447][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  736.422702][   T29] task:syz.4.2583      state:D stack:26472 pid:13241 ppid:11094  flags:0x00004004
[  736.432511][   T29] Call Trace:
[  736.436050][   T29]  <TASK>
[  736.439186][   T29]  __schedule+0x1553/0x45a0
[  736.443920][   T29]  ? asan.module_dtor+0x20/0x20
[  736.449146][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  736.453947][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  736.459631][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  736.465930][   T29]  schedule+0xbd/0x170
[  736.470212][   T29]  schedule_preempt_disabled+0x13/0x20
[  736.476094][   T29]  __mutex_lock+0x6a9/0xcc0
[  736.480863][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  736.485763][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  736.491479][   T29]  ? mutex_lock_nested+0x20/0x20
[  736.496586][   T29]  ? __might_fault+0xaa/0x120
[  736.501626][   T29]  ? __might_fault+0xc6/0x120
[  736.506562][   T29]  ? __might_fault+0xaa/0x120
[  736.520395][   T29]  __tun_chr_ioctl+0x400/0x2000
[  736.525696][   T29]  ? tun_flow_create+0x310/0x310
[  736.531218][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  736.536684][   T29]  ? security_file_ioctl+0x80/0xa0
[  736.542534][   T29]  ? tun_chr_poll+0x630/0x630
[  736.547671][   T29]  __se_sys_ioctl+0xfd/0x170
[  736.552835][   T29]  do_syscall_64+0x55/0xa0
[  736.557692][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.562524][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.567995][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.574316][   T29] RIP: 0033:0x7f951cf9c819
[  736.579653][   T29] RSP: 002b:00007f951dd8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  736.588856][   T29] RAX: ffffffffffffffda RBX: 00007f951d215fa0 RCX: 00007f951cf9c819
[  736.597098][   T29] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000005
[  736.605475][   T29] RBP: 00007f951d032c91 R08: 0000000000000000 R09: 0000000000000000
[  736.614658][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.624066][   T29] R13: 00007f951d216038 R14: 00007f951d215fa0 R15: 00007ffd8d017538
[  736.632613][   T29]  </TASK>
[  736.635861][   T29] INFO: task syz.4.2583:13243 blocked for more than 145 seconds.
[  736.644146][   T29]       Not tainted syzkaller #0
[  736.649434][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  736.658967][   T29] task:syz.4.2583      state:D stack:29128 pid:13243 ppid:11094  flags:0x00004004
[  736.671062][   T29] Call Trace:
[  736.674805][   T29]  <TASK>
[  736.678004][   T29]  __schedule+0x1553/0x45a0
[  736.683307][   T29]  ? asan.module_dtor+0x20/0x20
[  736.688470][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  736.693547][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  736.699512][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  736.705910][   T29]  schedule+0xbd/0x170
[  736.710254][   T29]  schedule_preempt_disabled+0x13/0x20
[  736.716554][   T29]  __mutex_lock+0x6a9/0xcc0
[  736.721648][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  736.726759][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  736.732117][   T29]  ? mutex_lock_nested+0x20/0x20
[  736.737462][   T29]  __tun_chr_ioctl+0x400/0x2000
[  736.742477][   T29]  ? tun_flow_create+0x310/0x310
[  736.747825][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  736.753167][   T29]  ? security_file_ioctl+0x80/0xa0
[  736.758873][   T29]  ? tun_chr_poll+0x630/0x630
[  736.763775][   T29]  __se_sys_ioctl+0xfd/0x170
[  736.768840][   T29]  do_syscall_64+0x55/0xa0
[  736.773707][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.779042][   T29]  ? clear_bhb_loop+0x40/0x90
[  736.783865][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.790409][   T29] RIP: 0033:0x7f951cf9c819
[  736.795170][   T29] RSP: 002b:00007f951b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  736.803752][   T29] RAX: ffffffffffffffda RBX: 00007f951d216090 RCX: 00007f951cf9c819
[  736.812281][   T29] RDX: 0000200000000140 RSI: 00000000400454dc RDI: 0000000000000005
[  736.821430][   T29] RBP: 00007f951d032c91 R08: 0000000000000000 R09: 0000000000000000
[  736.830560][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.838909][   T29] R13: 00007f951d216128 R14: 00007f951d216090 R15: 00007ffd8d017538
[  736.847660][   T29]  </TASK>
[  736.851058][   T29] INFO: task syz.2.2588:13255 blocked for more than 145 seconds.
[  736.859347][   T29]       Not tainted syzkaller #0
[  736.864863][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  736.874479][   T29] task:syz.2.2588      state:D stack:26536 pid:13255 ppid:12637  flags:0x00004004
[  736.884535][   T29] Call Trace:
[  736.888174][   T29]  <TASK>
[  736.891336][   T29]  __schedule+0x1553/0x45a0
[  736.896015][   T29]  ? asan.module_dtor+0x20/0x20
[  736.901569][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  736.906298][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  736.912048][ T5082] Bluetooth: hci14: command tx timeout
[  736.917977][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  736.925148][   T29]  schedule+0xbd/0x170
[  736.929677][   T29]  schedule_preempt_disabled+0x13/0x20
[  736.935497][   T29]  __mutex_lock+0x6a9/0xcc0
[  736.940569][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  736.945686][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  736.951054][   T29]  ? mutex_lock_nested+0x20/0x20
[  736.957039][   T29]  ? __might_fault+0xaa/0x120
[  736.961773][   T29]  ? __might_fault+0xc6/0x120
[  736.967501][   T29]  ? __might_fault+0xaa/0x120
[  736.973057][   T29]  __tun_chr_ioctl+0x400/0x2000
[  736.978484][   T29]  ? tun_flow_create+0x310/0x310
[  736.983974][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  736.989804][   T29]  ? security_file_ioctl+0x80/0xa0
[  736.995643][   T29]  ? tun_chr_poll+0x630/0x630
[  737.001030][   T29]  __se_sys_ioctl+0xfd/0x170
[  737.006493][   T29]  do_syscall_64+0x55/0xa0
[  737.012663][   T29]  ? clear_bhb_loop+0x40/0x90
[  737.018417][   T29]  ? clear_bhb_loop+0x40/0x90
[  737.024675][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.031174][   T29] RIP: 0033:0x7fbf2a19c819
[  737.035916][   T29] RSP: 002b:00007fbf2b0ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  737.045257][   T29] RAX: ffffffffffffffda RBX: 00007fbf2a415fa0 RCX: 00007fbf2a19c819
[  737.053905][   T29] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000004
[  737.062798][   T29] RBP: 00007fbf2a232c91 R08: 0000000000000000 R09: 0000000000000000
[  737.072055][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  737.081694][   T29] R13: 00007fbf2a416038 R14: 00007fbf2a415fa0 R15: 00007ffc91a659d8
[  737.090255][   T29]  </TASK>
[  737.093787][   T29] 
[  737.093787][   T29] Showing all locks held in the system:
[  737.102480][   T29] 1 lock held by khungtaskd/29:
[  737.108589][   T29]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  737.119174][   T29] 3 locks held by kworker/u4:9/3495:
[  737.125467][   T29]  #0: ffff88802cc2a538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.137784][   T29]  #1: ffffc9000c927d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.153225][   T29]  #2: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  737.163680][   T29] 1 lock held by dhcpcd/5433:
[  737.168818][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40
[  737.178573][   T29] 2 locks held by getty/5528:
[  737.183830][   T29]  #0: ffff88802d5630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  737.197189][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  737.208901][   T29] 3 locks held by kworker/1:5/5842:
[  737.214682][   T29]  #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.229726][   T29]  #1: ffffc90004a7fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.241491][   T29]  #2: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[  737.252367][   T29] 4 locks held by kworker/u4:12/7005:
[  737.258100][   T29] 2 locks held by kworker/u4:13/7007:
[  737.263798][   T29]  #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  737.274617][   T29]  #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0
[  737.283826][   T29] 3 locks held by kworker/u4:19/7022:
[  737.290135][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.303741][   T29]  #1: ffffc9000c8afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.315705][   T29]  #2: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  737.325507][   T29] 3 locks held by kworker/1:4/12101:
[  737.331800][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.343126][   T29]  #1: ffffc900129bfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  737.354712][   T29]  #2: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  737.366125][   T29] 7 locks held by syz-executor/13078:
[  737.372114][   T29]  #0: ffff88802d080418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990
[  737.381685][   T29]  #1: ffff88802b94d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520
[  737.392413][   T29]  #2: ffff88802508e008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520
[  737.403239][   T29]  #3: ffffffff8dca2828 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370
[  737.414358][   T29]  #4: ffff88807a72d0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x7a0
[  737.425850][   T29]  #5: ffff88807a72e250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170
[  737.437548][   T29]  #6: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180
[  737.446706][   T29] 1 lock held by syz.1.2576/13216:
[  737.452048][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_release+0x7f/0x4d0
[  737.462622][   T29] 1 lock held by syz.4.2583/13241:
[  737.468096][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  737.478506][   T29] 1 lock held by syz.4.2583/13243:
[  737.483943][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  737.495267][   T29] 1 lock held by syz.2.2588/13255:
[  737.500744][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  737.510617][   T29] 1 lock held by syz-executor/13262:
[  737.516642][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.527005][   T29] 1 lock held by syz-executor/13266:
[  737.532524][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.543932][   T29] 1 lock held by syz-executor/13270:
[  737.562030][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.573735][   T29] 3 locks held by kworker/u4:2/13272:
[  737.580096][   T29]  #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  737.591076][   T29]  #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0
[  737.600244][   T29]  #2: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  737.610617][   T29] 1 lock held by syz-executor/13276:
[  737.616353][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.626425][   T29] 1 lock held by syz-executor/13282:
[  737.632503][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.643693][   T29] 1 lock held by syz-executor/13286:
[  737.649501][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.659854][   T29] 1 lock held by syz-executor/13290:
[  737.665797][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.675965][   T29] 1 lock held by syz-executor/13294:
[  737.681541][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.691555][   T29] 1 lock held by syz-executor/13300:
[  737.697169][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.707404][   T29] 1 lock held by syz-executor/13305:
[  737.713016][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.723352][   T29] 1 lock held by syz-executor/13308:
[  737.729978][   T29]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  737.740969][   T29] 
[  737.743789][   T29] =============================================
[  737.743789][   T29] 
[  737.753130][   T29] NMI backtrace for cpu 1
[  737.758110][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  737.765779][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  737.776228][   T29] Call Trace:
[  737.779671][   T29]  <TASK>
[  737.782663][   T29]  dump_stack_lvl+0x18c/0x250
[  737.787833][   T29]  ? preempt_count_add+0x91/0x1a0
[  737.793208][   T29]  ? show_regs_print_info+0x20/0x20
[  737.798720][   T29]  ? load_image+0x420/0x420
[  737.803358][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  737.808607][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  737.815272][   T29]  ? _printk+0xde/0x130
[  737.819801][   T29]  ? load_image+0x420/0x420
[  737.824632][   T29]  ? load_image+0x420/0x420
[  737.829512][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  737.836047][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  737.842796][   T29]  watchdog+0xf3d/0xf80
[  737.847401][   T29]  ? watchdog+0x1e1/0xf80
[  737.852113][   T29]  kthread+0x2fa/0x390
[  737.856374][   T29]  ? hungtask_pm_notify+0x90/0x90
[  737.861506][   T29]  ? kthread_blkcg+0xd0/0xd0
[  737.866202][   T29]  ret_from_fork+0x48/0x80
[  737.871744][   T29]  ? kthread_blkcg+0xd0/0xd0
[  737.876805][   T29]  ret_from_fork_asm+0x11/0x20
[  737.881874][   T29]  </TASK>
[  737.885971][   T29] Sending NMI from CPU 1 to CPUs 0:
[  737.891597][    C0] NMI backtrace for cpu 0
[  737.891609][    C0] CPU: 0 PID: 5126 Comm: klogd Not tainted syzkaller #0
[  737.891624][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  737.891632][    C0] RIP: 0010:lock_acquire+0x118/0x420
[  737.891656][    C0] Code: 84 0c 01 00 00 65 8b 05 ee 5e 9a 7e 85 c0 0f 85 44 01 00 00 65 4c 8b 35 b6 8a 9b 7e 49 81 c6 dc 0a 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 09 02 00 00 41 83 3e 00 0f 85 17 01 00
[  737.891669][    C0] RSP: 0018:ffffc90000007c40 EFLAGS: 00000803
[  737.891683][    C0] RAX: 1ffff1100fdd8c9b RBX: 0000000000000000 RCX: e4d51ad3d37aee00
[  737.891694][    C0] RDX: 0000000000000000 RSI: ffffffff8b1c8dc0 RDI: ffffffff8b1c8d80
[  737.891704][    C0] RBP: ffffc90000007d48 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185
[  737.891715][    C0] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 1ffff92000000f94
[  737.891725][    C0] R13: ffffffff8d14bb48 R14: ffff88807eec64dc R15: dffffc0000000000
[  737.891736][    C0] FS:  00007f748766ec80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  737.891749][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  737.891759][    C0] CR2: 000055663ea68d08 CR3: 000000007f3d9000 CR4: 00000000003506f0
[  737.891775][    C0] DR0: 0000000000000008 DR1: 0000200000000300 DR2: 0000000000000000
[  737.891784][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  737.891794][    C0] Call Trace:
[  737.891799][    C0]  <IRQ>
[  737.891808][    C0]  ? ktime_get+0x35/0x280
[  737.891826][    C0]  ? read_lock_is_recursive+0x20/0x20
[  737.891846][    C0]  ? ktime_get+0x7f/0x280
[  737.891862][    C0]  seqcount_lockdep_reader_access+0xd1/0x1d0
[  737.891879][    C0]  ? ktime_get+0x7f/0x280
[  737.891894][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  737.891913][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  737.891934][    C0]  ktime_get+0x7f/0x280
[  737.891952][    C0]  clockevents_program_event+0xe6/0x310
[  737.891971][    C0]  hrtimer_interrupt+0x5a1/0x9c0
[  737.892000][    C0]  __sysvec_apic_timer_interrupt+0xfb/0x3b0
[  737.892019][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  737.892037][    C0]  </IRQ>
[  737.892041][    C0]  <TASK>
[  737.892046][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  737.892065][    C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x10/0x90
[  737.892084][    C0] Code: 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 60 92 7c 7e <65> 8b 0d 61 92 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75
[  737.892095][    C0] RSP: 0018:ffffc900032b7390 EFLAGS: 00000246
[  737.892107][    C0] RAX: ffffffff813b5407 RBX: ffffc900032b74a0 RCX: ffff88807eec5a00
[  737.892117][    C0] RDX: ffff88807eec5a00 RSI: 0000000000000001 RDI: 0000000000000001
[  737.892127][    C0] RBP: 0000000000000001 R08: ffff88807eec5a00 R09: 0000000000000003
[  737.892136][    C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900032b7468
[  737.892145][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8f8a4d94
[  737.892159][    C0]  ? unwind_next_frame+0x1c47/0x2970
[  737.892177][    C0]  unwind_next_frame+0x1c47/0x2970
[  737.892197][    C0]  ? alloc_skb_with_frags+0xca/0x7b0
[  737.892216][    C0]  ? alloc_skb_with_frags+0xca/0x7b0
[  737.892234][    C0]  ? stack_trace_save+0x100/0x100
[  737.892251][    C0]  arch_stack_walk+0x144/0x190
[  737.892268][    C0]  ? sock_alloc_send_pskb+0x883/0x9a0
[  737.892289][    C0]  stack_trace_save+0xaa/0x100
[  737.892306][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  737.892326][    C0]  ? kasan_set_track+0x5f/0x70
[  737.892341][    C0]  ? kasan_set_track+0x4e/0x70
[  737.892356][    C0]  kasan_set_track+0x4e/0x70
[  737.892371][    C0]  ? kasan_set_track+0x4e/0x70
[  737.892385][    C0]  ? __kasan_kmalloc+0x8f/0xa0
[  737.892400][    C0]  ? __kmalloc_node_track_caller+0xb2/0x230
[  737.892419][    C0]  ? kmalloc_reserve+0x116/0x240
[  737.892431][    C0]  ? __alloc_skb+0x138/0x2c0
[  737.892443][    C0]  ? alloc_skb_with_frags+0xca/0x7b0
[  737.892490][    C0]  ? __kmem_cache_alloc_node+0x13a/0x250
[  737.892511][    C0]  __kasan_kmalloc+0x8f/0xa0
[  737.892528][    C0]  ? __alloc_skb+0x138/0x2c0
[  737.892540][    C0]  __kmalloc_node_track_caller+0xb2/0x230
[  737.892559][    C0]  ? rcu_is_watching+0x15/0xb0
[  737.892579][    C0]  ? __alloc_skb+0x138/0x2c0
[  737.892591][    C0]  kmalloc_reserve+0x116/0x240
[  737.892607][    C0]  __alloc_skb+0x138/0x2c0
[  737.892623][    C0]  alloc_skb_with_frags+0xca/0x7b0
[  737.892647][    C0]  sock_alloc_send_pskb+0x883/0x9a0
[  737.892675][    C0]  ? sock_kzfree_s+0x50/0x50
[  737.892692][    C0]  ? do_raw_spin_lock+0x11f/0x2c0
[  737.892711][    C0]  ? __rwlock_init+0x150/0x150
[  737.892730][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  737.892751][    C0]  unix_dgram_sendmsg+0x5a2/0x16d0
[  737.892771][    C0]  ? aa_sk_perm+0x83c/0x970
[  737.892796][    C0]  ? unix_dgram_poll+0x680/0x680
[  737.892809][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  737.892828][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  737.892846][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  737.892863][    C0]  ? security_socket_sendmsg+0x80/0xa0
[  737.892881][    C0]  __sys_sendto+0x4a9/0x6b0
[  737.892897][    C0]  ? __ia32_sys_getpeername+0x90/0x90
[  737.892917][    C0]  ? log_buf_vmcoreinfo_setup+0x450/0x450
[  737.892940][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  737.892957][    C0]  ? lock_chain_count+0x20/0x20
[  737.892976][    C0]  __x64_sys_sendto+0xde/0xf0
[  737.892992][    C0]  do_syscall_64+0x55/0xa0
[  737.893004][    C0]  ? clear_bhb_loop+0x40/0x90
[  737.893021][    C0]  ? clear_bhb_loop+0x40/0x90
[  737.893038][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.893054][    C0] RIP: 0033:0x7f74877be407
[  737.893066][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  737.893077][    C0] RSP: 002b:00007ffeddc09640 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  737.893092][    C0] RAX: ffffffffffffffda RBX: 00007f748766ec80 RCX: 00007f74877be407
[  737.893102][    C0] RDX: 0000000000000053 RSI: 00007ffeddc09780 RDI: 0000000000000003
[  737.893112][    C0] RBP: 00007ffeddc09bb0 R08: 0000000000000000 R09: 0000000000000000
[  737.893121][    C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffeddc09bc8
[  737.893131][    C0] R13: 00007ffeddc09780 R14: 0000000000000038 R15: 00007ffeddc09780
[  737.893149][    C0]  </TASK>
[  737.899601][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  737.899615][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  737.899633][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  737.899643][   T29] Call Trace:
[  737.899650][   T29]  <TASK>
[  737.899657][   T29]  dump_stack_lvl+0x18c/0x250
[  737.899691][   T29]  ? show_regs_print_info+0x20/0x20
[  737.899716][   T29]  ? load_image+0x420/0x420
[  737.899749][   T29]  panic+0x2dc/0x730
[  737.899768][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  737.899796][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  737.899816][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  737.899840][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  737.899864][   T29]  watchdog+0xf7c/0xf80
[  737.899887][   T29]  ? watchdog+0x1e1/0xf80
[  737.899914][   T29]  kthread+0x2fa/0x390
[  737.899930][   T29]  ? hungtask_pm_notify+0x90/0x90
[  737.899952][   T29]  ? kthread_blkcg+0xd0/0xd0
[  737.899968][   T29]  ret_from_fork+0x48/0x80
[  737.899987][   T29]  ? kthread_blkcg+0xd0/0xd0
[  737.900004][   T29]  ret_from_fork_asm+0x11/0x20
[  737.900037][   T29]  </TASK>
[  737.901792][   T29] Kernel Offset: disabled
[  738.680569][   T29] Rebooting in 86400 seconds..