last executing test programs:

31.373041003s ago: executing program 4 (id=3334):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f610d0000000000000003041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f610d0000000000000003041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})

30.759059772s ago: executing program 4 (id=3336):
r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x17, 0x7, 0xfe, 0x0, 0x81, 0x4282, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x8184, 0x1, 0x6, 0x1, 0x401, 0x6, 0x8, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
socket$kcm(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000000), 0x90)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x380000}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
r5 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xfffffffe, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0x4044454)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}], 0x2}, 0x200ce0c0)

30.214566338s ago: executing program 4 (id=3340):
r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x17, 0x7, 0xfe, 0x0, 0x81, 0x4282, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x8184, 0x1, 0x6, 0x1, 0x401, 0x6, 0x8, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
socket$kcm(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000000), 0x90)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x380000}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xfffffffe, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0x4044454)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0xc, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)

29.467720821s ago: executing program 4 (id=3345):
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
close(0x3)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x112c0a, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @loopback}, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113b0000000d40b76b9ecf33cc040000000000101f00009500001200000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x20, 0x0, 0xc2ba, 0x0, 0x5a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1e, 0x0, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x1000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x61, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r5)

28.81521284s ago: executing program 4 (id=3352):
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x70, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x389, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000ac5107d8c7efe07900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94)
openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94)

28.668667095s ago: executing program 4 (id=3353):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0xe7abbf036fa8159b}, 0x18)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

24.280126737s ago: executing program 0 (id=3379):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x402)

23.881197889s ago: executing program 0 (id=3373):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x10, 0x5, 0x0) (async)
socket$kcm(0x10, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0) (async)
r0 = socket$kcm(0x23, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000340d000000313051e05607cf080000040000000000000e03000000000000000082b86a1b34a30031e2885c1511885a506d2d485e215000000000000d04000000000000000a02000000000000006100000000"], 0x0, 0x46}, 0x28)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
gettid()
syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7f, 0xfd, 0xfff, 0x291, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x3, 0x4, 0xc}, 0x50)

22.87378881s ago: executing program 3 (id=3377):
r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x17, 0x7, 0xfe, 0x0, 0x81, 0x4282, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x8184, 0x1, 0x6, 0x1, 0x401, 0x6, 0x8, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
socket$kcm(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000000), 0x90)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x380000}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
r5 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xfffffffe, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0x4044454)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}], 0x2}, 0x200ce0c0)

22.132254242s ago: executing program 3 (id=3382):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000040000"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29)

21.756007263s ago: executing program 1 (id=3385):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)

21.56156361s ago: executing program 3 (id=3386):
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6, 0x10000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r2, @ANYBLOB="000000f90800000000000011cc97a30000000000e6517345c85339ac47b87ad54a7d1ec497b4134734ab83941cb59418543e4d838cbc8aa1ac5a5466ecf6b145aca993591fa55425f2784a87ce4a243d0cc5347673f60118eb7122da5e670e76bf67bb0c2925e9423f75f6928dc31f47570000e07420c717b204b5f94a94d6a7ba72fae003ba1974cbe8b913faa043b14ede176ddac618b83455ad71ae00a4be2698b00bc83037092f591d4d389dbf4da2f7f5bc59b091fbbabe5dd9fa1cf422b4efa5427ba4199f0ed410e844cf02a308a98a73af03e7697bf2a3afba02592d8fb4e3c9cdd558aa2c32bcc85f046a5918c5e60f864cd8bf3a4c65557e1cccb92bb146", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000003000000ff01000000800000505e0100", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0500000002000000010000000600"/24, @ANYRES32=r5, @ANYBLOB="11620905591b749cad627f0d5bf6690ec84aa44ecba9e909fb333af42bdb81ed49646e6660e2a2ed66a296f414"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)

21.405166534s ago: executing program 1 (id=3388):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x103c78, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$kcm(0x23, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}], 0x18}, 0x20004044) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
recvmsg(r0, 0x0, 0x40012060)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000006, 0x0) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0xaa32, 0x6, 0xfffffffd, 0x0, 0x7f, 0x0, 0x4}) (async)
ioctl$TUNGETVNETLE(r2, 0x8955, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000)={r0})
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) (async)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0}, 0x0)

21.145211512s ago: executing program 1 (id=3390):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r1, 0x14, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000003c0)="b9ff0307680093", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

20.648969957s ago: executing program 1 (id=3391):
r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x17, 0x7, 0xfe, 0x0, 0x81, 0x4282, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x8184, 0x1, 0x6, 0x1, 0x401, 0x6, 0x8, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
socket$kcm(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000000), 0x90)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x380000}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
r5 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xfffffffe, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0x4044454)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}], 0x2}, 0x200ce0c0)

20.54111259s ago: executing program 3 (id=3393):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

20.54067691s ago: executing program 0 (id=3394):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x73)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040)="ad", 0x0}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)

20.323438236s ago: executing program 2 (id=3395):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000071113500000000008510000002000000850000000500000095000000000000009500a505006b8af4ffa0845f107c3d75fb52a0000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0xc004, r0}, 0x18)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f]}}, &(0x7f00000006c0)=""/34, 0x33, 0x22, 0x0, 0x401}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x8, 0x5, 0x101, 0x12000, r1, 0x40, '\x00', 0x0, r2, 0x0, 0x3, 0x1, 0xf, @void, @value, @value=r3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5)
write$cgroup_subtree(r5, 0x0, 0xfdef)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000940)='tasks\x00', 0x2, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000042100000a00000000000000", @ANYRES32=r4, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xa14, 0x0, r7, 0x7ff, '\x00', 0x0, r4, 0x5, 0x3, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800cae4003c4f03000000fe846ef82eddbf042a2da7a8702be82fc66a1e927294dfdbba7e8fe8aee2c6fbf7aadccbe6c6741721ad420c5946aa006172d3940d4a49677d18f004f074acb8c7287342dd2ff54ab63d262036862eae7888c4a830842b1a1cb86f6c687752251a5acb04ee", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3, &(0x7f0000003ac0), 0x4)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r10, 0x1d, 0x1, 0xfffffffb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40)

20.232923449s ago: executing program 0 (id=3396):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000040000"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29)

20.077222404s ago: executing program 2 (id=3397):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638977fbac141416ac14141683189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

19.754329674s ago: executing program 0 (id=3398):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)

19.280237368s ago: executing program 2 (id=3399):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x20, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.237705559s ago: executing program 2 (id=3400):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r1, 0x14, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000003c0)="b9ff0307680093f0460426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

16.098640394s ago: executing program 2 (id=3401):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)
sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1200}, 0x40040040)

15.89064475s ago: executing program 2 (id=3402):
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6, 0x10000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000003000000ff01000000800000505e0100", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0500000002000000010000000600"/24, @ANYRES32=r5, @ANYBLOB="11620905591b749cad627f0d5bf6690ec84aa44ecba9e909fb333af42bdb81ed49646e6660e2a2ed66a296f414"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)

15.696124116s ago: executing program 3 (id=3403):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x2, 0x3, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfec07a000000ad6e911b51818462b4003b00", 0x30}], 0x1}, 0x0)

15.616799068s ago: executing program 1 (id=3404):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf5, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="896c0500", 0xfe16}, {&(0x7f0000000340)="27ca500974dfb0a46b0444a76942c6ebdea65655e875790500"/36, 0x24}], 0x2, 0x0, 0x0, 0x900}, 0x0)

15.5503335s ago: executing program 3 (id=3405):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0xe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000006f00a101c61e00006f00000009000000040000000100000f03000000fdffffff0000000000000000a53aff0a00000006000084010001000300000003000000020000000400000000000000010400000200000002000000ca0000000100000001000000090000000e00000000000000030000000c000000040000000700000000000000002e2e5f1800"], &(0x7f0000000c40)=""/4096, 0x91, 0x1000, 0x1}, 0x28)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x80000000, 0xd}, 0x401, 0xc8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00032f"], 0xfdef)
close(r3)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180))
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400100}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)

15.54929192s ago: executing program 0 (id=3406):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x480, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7008, 0x0, @perf_bp={0x0}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x3)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB='\"\x00\n'], 0x9a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff8085000000c700000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)

15.304824338s ago: executing program 1 (id=3407):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0x4}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r3, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10}, 0x3e8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 32 (id=3407):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0x4}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r3, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10}, 0x3e8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

12160]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  426.300478][T12160]  ? security_socket_sendmsg+0x7c/0xa0
[  426.305964][T12160]  ? inet_send_prepare+0x260/0x260
[  426.311098][T12160]  ____sys_sendmsg+0x5be/0x970
[  426.315890][T12160]  ? __sys_sendmsg_sock+0x30/0x30
[  426.320929][T12160]  ? __import_iovec+0x315/0x500
[  426.325807][T12160]  ? import_iovec+0x6f/0xa0
[  426.330331][T12160]  ___sys_sendmsg+0x2a2/0x360
[  426.335032][T12160]  ? __sys_sendmsg+0x290/0x290
[  426.339840][T12160]  ? __lock_acquire+0x7d10/0x7d10
[  426.344902][T12160]  __se_sys_sendmsg+0x1bb/0x2a0
[  426.349753][T12160]  ? __x64_sys_sendmsg+0x80/0x80
[  426.354704][T12160]  ? lockdep_hardirqs_on+0x94/0x140
[  426.359900][T12160]  do_syscall_64+0x4c/0xa0
[  426.364309][T12160]  ? clear_bhb_loop+0x60/0xb0
[  426.368983][T12160]  ? clear_bhb_loop+0x60/0xb0
[  426.373655][T12160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.379542][T12160] RIP: 0033:0x7f9b08f9ce59
[  426.383952][T12160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.403565][T12160] RSP: 002b:00007f9b09d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.411984][T12160] RAX: ffffffffffffffda RBX: 00007f9b09215fa0 RCX: 00007f9b08f9ce59
[  426.419951][T12160] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  426.427918][T12160] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  426.435883][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  426.443848][T12160] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  426.451830][T12160]  </TASK>
[  427.480124][T12188] validate_nla: 1 callbacks suppressed
[  427.480140][T12188] netlink: 'syz.3.2697': attribute type 1 has an invalid length.
[  427.589443][T12188] netlink: 'syz.3.2697': attribute type 4 has an invalid length.
[  427.660772][T12188] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2697'.
[  428.605293][T12216] netlink: 'syz.1.2709': attribute type 15 has an invalid length.
[  428.638525][T12216] netlink: 'syz.1.2709': attribute type 7 has an invalid length.
[  428.830557][T12222] netlink: 'syz.2.2712': attribute type 15 has an invalid length.
[  428.865686][T12222] netlink: 'syz.2.2712': attribute type 7 has an invalid length.
[  428.941856][T12222] netlink: 'syz.2.2712': attribute type 39 has an invalid length.
[  429.429138][T12235] netlink: 'syz.1.2716': attribute type 2 has an invalid length.
[  429.452114][T12235] netlink: 'syz.1.2716': attribute type 8 has an invalid length.
[  429.525486][T12235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2716'.
[  430.903047][ T5572] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.796555][T12309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2742'.
[  432.916548][T12312] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  433.064133][T12319] netlink: 'syz.2.2745': attribute type 3 has an invalid length.
[  433.100603][T12319] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2745'.
[  433.477440][T12326] netlink: 'syz.4.2747': attribute type 10 has an invalid length.
[  433.522092][T12326] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2747'.
[  433.834810][T12336] netlink: 'syz.4.2754': attribute type 16 has an invalid length.
[  433.889588][T12336] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2754'.
[  434.626130][T12347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2756'.
[  435.445552][T12380] netlink: 'syz.1.2765': attribute type 15 has an invalid length.
[  435.514209][T12380] netlink: 'syz.1.2765': attribute type 7 has an invalid length.
[  435.589415][T12387] netlink: 'syz.1.2765': attribute type 39 has an invalid length.
[  435.616933][T12378] FAULT_INJECTION: forcing a failure.
[  435.616933][T12378] name failslab, interval 1, probability 0, space 0, times 0
[  435.703938][T12378] CPU: 0 PID: 12378 Comm: syz.0.2764 Not tainted syzkaller #0
[  435.711547][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  435.721612][T12378] Call Trace:
[  435.724901][T12378]  <TASK>
[  435.727825][T12378]  dump_stack_lvl+0x188/0x24e
[  435.732499][T12378]  ? show_regs_print_info+0x12/0x12
[  435.737685][T12378]  ? load_image+0x400/0x400
[  435.742184][T12378]  ? __might_sleep+0xd0/0xd0
[  435.746763][T12378]  ? __lock_acquire+0x7d10/0x7d10
[  435.751785][T12378]  should_fail_ex+0x399/0x4d0
[  435.756462][T12378]  should_failslab+0x5/0x20
[  435.760954][T12378]  slab_pre_alloc_hook+0x59/0x310
[  435.765975][T12378]  kmem_cache_alloc+0x56/0x2f0
[  435.770728][T12378]  ? skb_clone+0x1e7/0x370
[  435.775136][T12378]  skb_clone+0x1e7/0x370
[  435.779369][T12378]  pfkey_sendmsg+0x496/0x1090
[  435.784051][T12378]  ? pfkey_release+0x310/0x310
[  435.788813][T12378]  ? aa_sk_perm+0x81f/0x950
[  435.793313][T12378]  ? __might_fault+0xa6/0x120
[  435.797978][T12378]  ? aa_af_perm+0x340/0x340
[  435.802470][T12378]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  435.808887][T12378]  ? aa_sock_msg_perm+0x94/0x150
[  435.813815][T12378]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  435.819090][T12378]  ? security_socket_sendmsg+0x7c/0xa0
[  435.824548][T12378]  ? pfkey_release+0x310/0x310
[  435.829313][T12378]  ____sys_sendmsg+0x5be/0x970
[  435.834071][T12378]  ? __sys_sendmsg_sock+0x30/0x30
[  435.839084][T12378]  ? __import_iovec+0x315/0x500
[  435.843935][T12378]  ? import_iovec+0x6f/0xa0
[  435.848432][T12378]  ___sys_sendmsg+0x2a2/0x360
[  435.853101][T12378]  ? __sys_sendmsg+0x290/0x290
[  435.857873][T12378]  ? __lock_acquire+0x7d10/0x7d10
[  435.862909][T12378]  __se_sys_sendmsg+0x1bb/0x2a0
[  435.867754][T12378]  ? __x64_sys_sendmsg+0x80/0x80
[  435.872690][T12378]  ? lockdep_hardirqs_on+0x94/0x140
[  435.877885][T12378]  do_syscall_64+0x4c/0xa0
[  435.882299][T12378]  ? clear_bhb_loop+0x60/0xb0
[  435.886971][T12378]  ? clear_bhb_loop+0x60/0xb0
[  435.891641][T12378]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.897525][T12378] RIP: 0033:0x7f9b08f9ce59
[  435.901930][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.921527][T12378] RSP: 002b:00007f9b09d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.929931][T12378] RAX: ffffffffffffffda RBX: 00007f9b09215fa0 RCX: 00007f9b08f9ce59
[  435.937890][T12378] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000009
[  435.945848][T12378] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  435.953812][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.961773][T12378] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  435.969748][T12378]  </TASK>
[  436.168209][T12389] device syzkaller0 entered promiscuous mode
[  439.829700][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.836270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  441.412481][T12429] netlink: 'syz.1.2781': attribute type 1 has an invalid length.
[  441.898000][T12455] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2791'.
[  442.625540][T12484] netlink: 'syz.0.2801': attribute type 39 has an invalid length.
[  442.785095][T12491] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2805'.
[  443.007301][T12496] netlink: 'syz.4.2808': attribute type 3 has an invalid length.
[  443.046001][T12494] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  443.064133][T12496] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.2808'.
[  443.501121][T12517] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2814'.
[  444.025702][T12533] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2821'.
[  444.086668][T12536] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2822'.
[  444.314559][T12545] netlink: 'syz.4.2825': attribute type 10 has an invalid length.
[  444.365902][ T4289] Bluetooth: hci1: ISO packet for unknown connection handle 19
[  444.529789][T12551] FAULT_INJECTION: forcing a failure.
[  444.529789][T12551] name failslab, interval 1, probability 0, space 0, times 0
[  444.562158][T12551] CPU: 1 PID: 12551 Comm: syz.4.2828 Not tainted syzkaller #0
[  444.569676][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  444.579759][T12551] Call Trace:
[  444.583033][T12551]  <TASK>
[  444.585955][T12551]  dump_stack_lvl+0x188/0x24e
[  444.590624][T12551]  ? sctp_sendmsg+0x15b0/0x2940
[  444.595464][T12551]  ? ___sys_sendmsg+0x2a2/0x360
[  444.600307][T12551]  ? show_regs_print_info+0x12/0x12
[  444.605496][T12551]  ? load_image+0x400/0x400
[  444.610001][T12551]  should_fail_ex+0x399/0x4d0
[  444.614671][T12551]  should_failslab+0x5/0x20
[  444.619166][T12551]  slab_pre_alloc_hook+0x59/0x310
[  444.624185][T12551]  ? sctp_add_bind_addr+0x89/0x350
[  444.629293][T12551]  __kmem_cache_alloc_node+0x4f/0x260
[  444.634662][T12551]  ? sctp_add_bind_addr+0x89/0x350
[  444.639771][T12551]  kmalloc_trace+0x26/0xe0
[  444.644183][T12551]  sctp_add_bind_addr+0x89/0x350
[  444.649118][T12551]  sctp_copy_local_addr_list+0x311/0x4e0
[  444.654750][T12551]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  444.660465][T12551]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  444.666530][T12551]  ? sctp_v6_is_any+0x60/0x70
[  444.671199][T12551]  ? sctp_copy_one_addr+0x93/0x660
[  444.676307][T12551]  sctp_bind_addr_copy+0xaf/0x3c0
[  444.681328][T12551]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  444.687649][T12551]  sctp_connect_new_asoc+0x2f5/0x6a0
[  444.692931][T12551]  ? __sctp_connect+0xd80/0xd80
[  444.697783][T12551]  ? __local_bh_enable_ip+0x136/0x1c0
[  444.703164][T12551]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  444.708711][T12551]  ? security_sctp_bind_connect+0x85/0xb0
[  444.714430][T12551]  sctp_sendmsg+0x15b0/0x2940
[  444.719118][T12551]  ? sctp_getsockopt+0x8a0/0x8a0
[  444.724053][T12551]  ? __lock_acquire+0x7d10/0x7d10
[  444.729075][T12551]  ? aa_af_perm+0x340/0x340
[  444.733571][T12551]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  444.739990][T12551]  ? inet_sendmsg+0xe5/0x2f0
[  444.744573][T12551]  ? inet_send_prepare+0x260/0x260
[  444.749674][T12551]  ____sys_sendmsg+0x5be/0x970
[  444.754435][T12551]  ? __sys_sendmsg_sock+0x30/0x30
[  444.759448][T12551]  ? __import_iovec+0x315/0x500
[  444.764299][T12551]  ? import_iovec+0x6f/0xa0
[  444.768793][T12551]  ___sys_sendmsg+0x2a2/0x360
[  444.773464][T12551]  ? __sys_sendmsg+0x290/0x290
[  444.778233][T12551]  ? __lock_acquire+0x7d10/0x7d10
[  444.783272][T12551]  __se_sys_sendmsg+0x1bb/0x2a0
[  444.788123][T12551]  ? __x64_sys_sendmsg+0x80/0x80
[  444.793063][T12551]  ? lockdep_hardirqs_on+0x94/0x140
[  444.798254][T12551]  do_syscall_64+0x4c/0xa0
[  444.802662][T12551]  ? clear_bhb_loop+0x60/0xb0
[  444.807333][T12551]  ? clear_bhb_loop+0x60/0xb0
[  444.812004][T12551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.817891][T12551] RIP: 0033:0x7f3e1ad9ce59
[  444.822297][T12551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.841890][T12551] RSP: 002b:00007f3e1bc74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  444.850292][T12551] RAX: ffffffffffffffda RBX: 00007f3e1b015fa0 RCX: 00007f3e1ad9ce59
[  444.858253][T12551] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  444.866217][T12551] RBP: 00007f3e1bc74090 R08: 0000000000000000 R09: 0000000000000000
[  444.874175][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  444.882137][T12551] R13: 00007f3e1b016038 R14: 00007f3e1b015fa0 R15: 00007ffc5a626488
[  444.890107][T12551]  </TASK>
[  446.560794][T12584] netlink: 'syz.1.2841': attribute type 3 has an invalid length.
[  446.591792][T12584] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.2841'.
[  446.815150][T12588] netlink: 'syz.0.2840': attribute type 1 has an invalid length.
[  446.844181][T12588] netlink: 'syz.0.2840': attribute type 4 has an invalid length.
[  446.871747][T12588] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2840'.
[  447.018249][T12592] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  447.114297][ T4289] Bluetooth: hci3: ISO packet for unknown connection handle 19
[  448.247752][T12630] netlink: 'syz.2.2855': attribute type 3 has an invalid length.
[  448.306996][T12630] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.2855'.
[  449.243549][T12655] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  449.618683][T12662] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2866'.
[  449.823108][T12662] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.2866'.
[  450.986493][T12703] FAULT_INJECTION: forcing a failure.
[  450.986493][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.030603][T12703] CPU: 1 PID: 12703 Comm: syz.2.2879 Not tainted syzkaller #0
[  451.038122][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.046426][T12699] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  451.048174][T12703] Call Trace:
[  451.048185][T12703]  <TASK>
[  451.048194][T12703]  dump_stack_lvl+0x188/0x24e
[  451.048222][T12703]  ? show_regs_print_info+0x12/0x12
[  451.048241][T12703]  ? load_image+0x400/0x400
[  451.048267][T12703]  ? __lock_acquire+0x7d10/0x7d10
[  451.048293][T12703]  ? snprintf+0xe5/0x140
[  451.048317][T12703]  should_fail_ex+0x399/0x4d0
[  451.091824][T12703]  _copy_to_user+0x2c/0x130
[  451.096351][T12703]  simple_read_from_buffer+0xe3/0x150
[  451.101776][T12703]  proc_fail_nth_read+0x1a6/0x220
[  451.106824][T12703]  ? proc_fault_inject_write+0x310/0x310
[  451.112476][T12703]  ? fsnotify_perm+0x248/0x550
[  451.117245][T12703]  ? proc_fault_inject_write+0x310/0x310
[  451.122875][T12703]  vfs_read+0x2de/0xa00
[  451.127030][T12703]  ? kernel_read+0x1e0/0x1e0
[  451.131618][T12703]  ? __fget_files+0x28/0x4b0
[  451.136211][T12703]  ? __fget_files+0x28/0x4b0
[  451.140796][T12703]  ? __fget_files+0x43d/0x4b0
[  451.145475][T12703]  ? __fdget_pos+0x2ae/0x360
[  451.150060][T12703]  ? ksys_read+0x71/0x250
[  451.154387][T12703]  ksys_read+0x14c/0x250
[  451.158630][T12703]  ? vfs_write+0xa30/0xa30
[  451.163048][T12703]  ? lockdep_hardirqs_on+0x94/0x140
[  451.168244][T12703]  do_syscall_64+0x4c/0xa0
[  451.172653][T12703]  ? clear_bhb_loop+0x60/0xb0
[  451.177326][T12703]  ? clear_bhb_loop+0x60/0xb0
[  451.181997][T12703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.187886][T12703] RIP: 0033:0x7f7a12b5d68e
[  451.192295][T12703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  451.211895][T12703] RSP: 002b:00007f7a13a58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  451.220302][T12703] RAX: ffffffffffffffda RBX: 00007f7a13a596c0 RCX: 00007f7a12b5d68e
[  451.228271][T12703] RDX: 000000000000000f RSI: 00007f7a13a590a0 RDI: 0000000000000008
[  451.236234][T12703] RBP: 00007f7a13a59090 R08: 0000000000000000 R09: 0000000000000000
[  451.244196][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.252158][T12703] R13: 00007f7a12e16128 R14: 00007f7a12e16090 R15: 00007ffea7011848
[  451.260134][T12703]  </TASK>
[  451.296465][T12705] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2881'.
[  451.311818][T12705] openvswitch: netlink: Flow key attr not present in new flow.
[  451.490513][T12713] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2880'.
[  451.508274][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.525718][T12714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.566352][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.607161][T12714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.745820][T12713] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.2880'.
[  452.655217][ T4289] Bluetooth: hci2: ISO packet for unknown connection handle 19
[  452.967338][T12759] FAULT_INJECTION: forcing a failure.
[  452.967338][T12759] name failslab, interval 1, probability 0, space 0, times 0
[  453.054779][T12759] CPU: 0 PID: 12759 Comm: syz.0.2898 Not tainted syzkaller #0
[  453.062311][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  453.072387][T12759] Call Trace:
[  453.075678][T12759]  <TASK>
[  453.078620][T12759]  dump_stack_lvl+0x188/0x24e
[  453.083319][T12759]  ? show_regs_print_info+0x12/0x12
[  453.088539][T12759]  ? load_image+0x400/0x400
[  453.093069][T12759]  ? __lock_acquire+0x7d10/0x7d10
[  453.098131][T12759]  should_fail_ex+0x399/0x4d0
[  453.102829][T12759]  should_failslab+0x5/0x20
[  453.107348][T12759]  slab_pre_alloc_hook+0x59/0x310
[  453.112401][T12759]  kmem_cache_alloc+0x56/0x2f0
[  453.117183][T12759]  ? security_file_alloc+0x30/0x110
[  453.122402][T12759]  security_file_alloc+0x30/0x110
[  453.127440][T12759]  __alloc_file+0xc2/0x230
[  453.131859][T12759]  alloc_empty_file+0x90/0x180
[  453.136628][T12759]  alloc_file+0x5c/0x5f0
[  453.140870][T12759]  alloc_file_pseudo+0x180/0x200
[  453.145801][T12759]  ? alloc_empty_file_noaccount+0x80/0x80
[  453.151514][T12759]  ? alloc_fd+0x58f/0x630
[  453.155847][T12759]  anon_inode_getfd+0xc6/0x1c0
[  453.160613][T12759]  btf_new_fd+0x5f1/0x780
[  453.164948][T12759]  __sys_bpf+0x612/0x780
[  453.169190][T12759]  ? bpf_link_show_fdinfo+0x380/0x380
[  453.174568][T12759]  ? lock_chain_count+0x20/0x20
[  453.179422][T12759]  __x64_sys_bpf+0x78/0x90
[  453.183834][T12759]  do_syscall_64+0x4c/0xa0
[  453.188242][T12759]  ? clear_bhb_loop+0x60/0xb0
[  453.192922][T12759]  ? clear_bhb_loop+0x60/0xb0
[  453.197594][T12759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.203482][T12759] RIP: 0033:0x7f9b08f9ce59
[  453.207888][T12759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.227485][T12759] RSP: 002b:00007f9b09d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  453.235890][T12759] RAX: ffffffffffffffda RBX: 00007f9b09215fa0 RCX: 00007f9b08f9ce59
[  453.243853][T12759] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012
[  453.251814][T12759] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  453.259774][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.267734][T12759] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  453.275726][T12759]  </TASK>
[  453.401257][T12766] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  453.791796][T12770] netlink: 'syz.1.2900': attribute type 3 has an invalid length.
[  453.799790][T12770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2900'.
[  457.693265][T12811] FAULT_INJECTION: forcing a failure.
[  457.693265][T12811] name failslab, interval 1, probability 0, space 0, times 0
[  457.782035][T12811] CPU: 1 PID: 12811 Comm: syz.1.2914 Not tainted syzkaller #0
[  457.789550][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  457.799599][T12811] Call Trace:
[  457.802869][T12811]  <TASK>
[  457.805789][T12811]  dump_stack_lvl+0x188/0x24e
[  457.810465][T12811]  ? show_regs_print_info+0x12/0x12
[  457.815653][T12811]  ? load_image+0x400/0x400
[  457.820156][T12811]  ? __might_sleep+0xd0/0xd0
[  457.824742][T12811]  ? __lock_acquire+0x7d10/0x7d10
[  457.829767][T12811]  should_fail_ex+0x399/0x4d0
[  457.834439][T12811]  should_failslab+0x5/0x20
[  457.838929][T12811]  slab_pre_alloc_hook+0x59/0x310
[  457.843948][T12811]  ? apparmor_sk_alloc_security+0x74/0x100
[  457.849746][T12811]  __kmem_cache_alloc_node+0x4f/0x260
[  457.855111][T12811]  ? apparmor_sk_alloc_security+0x74/0x100
[  457.860905][T12811]  kmalloc_trace+0x26/0xe0
[  457.865320][T12811]  apparmor_sk_alloc_security+0x74/0x100
[  457.870942][T12811]  security_sk_alloc+0x6a/0xa0
[  457.875696][T12811]  sk_prot_alloc+0x101/0x210
[  457.880282][T12811]  ? sk_alloc+0x20/0x340
[  457.884518][T12811]  sk_alloc+0x36/0x340
[  457.888581][T12811]  ? bpf_ctx_init+0x163/0x1a0
[  457.893248][T12811]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  457.898789][T12811]  bpf_prog_test_run_skb+0x35e/0x12a0
[  457.904151][T12811]  ? __fget_files+0x28/0x4b0
[  457.908737][T12811]  ? __fget_files+0x43d/0x4b0
[  457.913415][T12811]  ? cpu_online+0xa0/0xa0
[  457.917759][T12811]  bpf_prog_test_run+0x31e/0x390
[  457.922707][T12811]  __sys_bpf+0x62b/0x780
[  457.926956][T12811]  ? bpf_link_show_fdinfo+0x380/0x380
[  457.932330][T12811]  ? lock_chain_count+0x20/0x20
[  457.937179][T12811]  __x64_sys_bpf+0x78/0x90
[  457.941590][T12811]  do_syscall_64+0x4c/0xa0
[  457.946002][T12811]  ? clear_bhb_loop+0x60/0xb0
[  457.950677][T12811]  ? clear_bhb_loop+0x60/0xb0
[  457.955354][T12811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  457.961247][T12811] RIP: 0033:0x7f599599ce59
[  457.965651][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.985246][T12811] RSP: 002b:00007f599685e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  457.993650][T12811] RAX: ffffffffffffffda RBX: 00007f5995c15fa0 RCX: 00007f599599ce59
[  458.001615][T12811] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a
[  458.009580][T12811] RBP: 00007f599685e090 R08: 0000000000000000 R09: 0000000000000000
[  458.017540][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.025501][T12811] R13: 00007f5995c16038 R14: 00007f5995c15fa0 R15: 00007ffe977591d8
[  458.033474][T12811]  </TASK>
[  458.313941][T12818] netlink: 'syz.2.2915': attribute type 3 has an invalid length.
[  458.353130][T12818] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.2915'.
[  458.658530][T12826] device syzkaller0 entered promiscuous mode
[  458.734174][T12831] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  459.545227][T12852] netlink: 'syz.2.2927': attribute type 10 has an invalid length.
[  461.041982][T12869] netlink: 'syz.0.2933': attribute type 3 has an invalid length.
[  461.060298][T12869] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.2933'.
[  463.679457][T12876] FAULT_INJECTION: forcing a failure.
[  463.679457][T12876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  463.724951][T12876] CPU: 1 PID: 12876 Comm: syz.1.2935 Not tainted syzkaller #0
[  463.732479][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  463.742553][T12876] Call Trace:
[  463.745847][T12876]  <TASK>
[  463.748796][T12876]  dump_stack_lvl+0x188/0x24e
[  463.753496][T12876]  ? show_regs_print_info+0x12/0x12
[  463.758704][T12876]  ? load_image+0x400/0x400
[  463.763225][T12876]  ? __lock_acquire+0x7d10/0x7d10
[  463.768266][T12876]  should_fail_ex+0x399/0x4d0
[  463.772957][T12876]  _copy_from_user+0x2c/0x170
[  463.777644][T12876]  bpf_prog_test_run_skb+0x262/0x12a0
[  463.783030][T12876]  ? __fget_files+0x28/0x4b0
[  463.787634][T12876]  ? __fget_files+0x28/0x4b0
[  463.792236][T12876]  ? __fget_files+0x43d/0x4b0
[  463.796931][T12876]  ? cpu_online+0xa0/0xa0
[  463.801270][T12876]  bpf_prog_test_run+0x31e/0x390
[  463.806220][T12876]  __sys_bpf+0x62b/0x780
[  463.810494][T12876]  ? bpf_link_show_fdinfo+0x380/0x380
[  463.815888][T12876]  ? lock_chain_count+0x20/0x20
[  463.820759][T12876]  __x64_sys_bpf+0x78/0x90
[  463.825185][T12876]  do_syscall_64+0x4c/0xa0
[  463.829602][T12876]  ? clear_bhb_loop+0x60/0xb0
[  463.834285][T12876]  ? clear_bhb_loop+0x60/0xb0
[  463.838974][T12876]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.844873][T12876] RIP: 0033:0x7f599599ce59
[  463.849290][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.868904][T12876] RSP: 002b:00007f599685e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  463.877322][T12876] RAX: ffffffffffffffda RBX: 00007f5995c15fa0 RCX: 00007f599599ce59
[  463.885296][T12876] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  463.893266][T12876] RBP: 00007f599685e090 R08: 0000000000000000 R09: 0000000000000000
[  463.901238][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.909209][T12876] R13: 00007f5995c16038 R14: 00007f5995c15fa0 R15: 00007ffe977591d8
[  463.917199][T12876]  </TASK>
[  464.837655][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  464.848692][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  464.853825][T12908] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2949'.
[  464.865360][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  464.873382][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  464.881467][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  464.889544][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  464.931256][ T5572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.102939][T12911] device syzkaller0 entered promiscuous mode
[  465.238862][ T5572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.484879][ T5572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.820311][T12933] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2960'.
[  466.943108][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  467.329137][ T5572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.349439][T12940] netlink: 'syz.4.2959': attribute type 11 has an invalid length.
[  467.554698][ T5572] device 0 left promiscuous mode
[  468.005617][T12906] chnl_net:caif_netlink_parms(): no params data found
[  468.147724][ T5572] tipc: Left network mode
[  468.206965][T12983] netlink: 'syz.0.2969': attribute type 11 has an invalid length.
[  468.221486][T12983] FAULT_INJECTION: forcing a failure.
[  468.221486][T12983] name failslab, interval 1, probability 0, space 0, times 0
[  468.240096][T12983] CPU: 0 PID: 12983 Comm: syz.0.2969 Not tainted syzkaller #0
[  468.247596][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  468.257666][T12983] Call Trace:
[  468.260956][T12983]  <TASK>
[  468.263896][T12983]  dump_stack_lvl+0x188/0x24e
[  468.268593][T12983]  ? show_regs_print_info+0x12/0x12
[  468.273805][T12983]  ? load_image+0x400/0x400
[  468.278327][T12983]  ? __might_sleep+0xd0/0xd0
[  468.282929][T12983]  ? __lock_acquire+0x7d10/0x7d10
[  468.287977][T12983]  should_fail_ex+0x399/0x4d0
[  468.292676][T12983]  should_failslab+0x5/0x20
[  468.297193][T12983]  slab_pre_alloc_hook+0x59/0x310
[  468.302231][T12983]  ? call_usermodehelper_setup+0x8a/0x260
[  468.307974][T12983]  __kmem_cache_alloc_node+0x4f/0x260
[  468.313368][T12983]  ? call_usermodehelper_setup+0x8a/0x260
[  468.319121][T12983]  kmalloc_trace+0x26/0xe0
[  468.323565][T12983]  call_usermodehelper_setup+0x8a/0x260
[  468.329130][T12983]  ? __request_module+0xa00/0xa00
[  468.334175][T12983]  __request_module+0x406/0xa00
[  468.339046][T12983]  ? try_to_wake_up+0x67c/0x1080
[  468.344006][T12983]  ? copy_regset_to_user+0x1e0/0x1e0
[  468.349313][T12983]  ? __mutex_unlock_slowpath+0x658/0x6c0
[  468.354971][T12983]  ? __lock_acquire+0x7d10/0x7d10
[  468.360012][T12983]  ? __schedule+0x11d9/0x40e0
[  468.364719][T12983]  ? lwtunnel_valid_encap_type+0x8c/0x5e0
[  468.370458][T12983]  lwtunnel_valid_encap_type+0x36c/0x5e0
[  468.376107][T12983]  ? lwtunnel_valid_encap_type+0x8c/0x5e0
[  468.381849][T12983]  lwtunnel_valid_encap_type_attr+0x126/0x290
[  468.387954][T12983]  rtm_to_fib_config+0x88f/0x1380
[  468.393016][T12983]  inet_rtm_newroute+0x112/0x230
[  468.397971][T12983]  ? __mutex_lock+0x3b2/0xaf0
[  468.402664][T12983]  ? rcu_read_unlock+0xa0/0xa0
[  468.407467][T12983]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  468.412589][T12983]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  468.417716][T12983]  ? rcu_read_unlock+0xa0/0xa0
[  468.422495][T12983]  rtnetlink_rcv_msg+0x87c/0xfc0
[  468.427460][T12983]  ? rtnetlink_bind+0x80/0x80
[  468.432147][T12983]  ? mark_lock+0x94/0x320
[  468.436496][T12983]  ? __lock_acquire+0x12f4/0x7d10
[  468.441555][T12983]  ? verify_lock_unused+0x140/0x140
[  468.446772][T12983]  ? netlink_sendmsg+0x654/0xbd0
[  468.451729][T12983]  ? verify_lock_unused+0x140/0x140
[  468.456977][T12983]  netlink_rcv_skb+0x1fb/0x450
[  468.461759][T12983]  ? rtnetlink_bind+0x80/0x80
[  468.466454][T12983]  ? netlink_ack+0x1170/0x1170
[  468.471240][T12983]  ? netlink_deliver_tap+0x2e/0x1b0
[  468.476455][T12983]  netlink_unicast+0x74d/0x8d0
[  468.481245][T12983]  netlink_sendmsg+0x8ad/0xbd0
[  468.486031][T12983]  ? netlink_getsockopt+0x550/0x550
[  468.491247][T12983]  ? aa_sock_msg_perm+0x94/0x150
[  468.496211][T12983]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  468.501513][T12983]  ? security_socket_sendmsg+0x7c/0xa0
[  468.507001][T12983]  ? netlink_getsockopt+0x550/0x550
[  468.512225][T12983]  ____sys_sendmsg+0x5be/0x970
[  468.517023][T12983]  ? __sys_sendmsg_sock+0x30/0x30
[  468.522068][T12983]  ? __import_iovec+0x315/0x500
[  468.526947][T12983]  ? import_iovec+0x6f/0xa0
[  468.531476][T12983]  ___sys_sendmsg+0x2a2/0x360
[  468.536179][T12983]  ? __sys_sendmsg+0x290/0x290
[  468.540984][T12983]  ? __lock_acquire+0x7d10/0x7d10
[  468.546055][T12983]  __se_sys_sendmsg+0x1bb/0x2a0
[  468.550922][T12983]  ? ct_nmi_exit+0x145/0x1c0
[  468.555538][T12983]  ? __x64_sys_sendmsg+0x80/0x80
[  468.560505][T12983]  ? lockdep_hardirqs_on+0x94/0x140
[  468.565725][T12983]  do_syscall_64+0x4c/0xa0
[  468.570156][T12983]  ? clear_bhb_loop+0x60/0xb0
[  468.574854][T12983]  ? clear_bhb_loop+0x60/0xb0
[  468.579552][T12983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.585460][T12983] RIP: 0033:0x7f9b08f9ce59
[  468.589888][T12983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.609508][T12983] RSP: 002b:00007f9b09d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.617938][T12983] RAX: ffffffffffffffda RBX: 00007f9b09215fa0 RCX: 00007f9b08f9ce59
[  468.625936][T12983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  468.633930][T12983] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  468.641929][T12983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.649917][T12983] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  468.657926][T12983]  </TASK>
[  468.811241][T12906] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.824405][T12906] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.845201][T12906] device bridge_slave_0 entered promiscuous mode
[  469.021909][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  469.064665][T12906] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.072158][T12906] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.080535][T12906] device bridge_slave_1 entered promiscuous mode
[  469.088572][T12996] netlink: 'syz.1.2971': attribute type 1 has an invalid length.
[  469.096965][T12996] netlink: 'syz.1.2971': attribute type 4 has an invalid length.
[  469.105724][T12996] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2971'.
[  469.245048][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.264737][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.396887][T13012] netlink: 'syz.3.2975': attribute type 6 has an invalid length.
[  469.482932][T13008] device syzkaller0 entered promiscuous mode
[  469.493399][T12906] team0: Port device team_slave_0 added
[  469.547611][T12906] team0: Port device team_slave_1 added
[  469.606731][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.625042][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.685590][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.102013][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  472.769915][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.777182][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.805417][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.845419][T13026] netlink: 'syz.3.2977': attribute type 11 has an invalid length.
[  473.185226][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[  474.838396][T13053] netlink: 'syz.0.2985': attribute type 1 has an invalid length.
[  474.848169][T13053] netlink: 'syz.0.2985': attribute type 4 has an invalid length.
[  474.856767][T13053] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2985'.
[  474.870249][T13056] netlink: 'syz.3.2986': attribute type 27 has an invalid length.
[  474.879329][T13056] netlink: 'syz.3.2986': attribute type 4 has an invalid length.
[  474.891145][T13056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2986'.
[  474.916280][T12906] device hsr_slave_0 entered promiscuous mode
[  474.923760][T12906] device hsr_slave_1 entered promiscuous mode
[  475.036874][T13062] FAULT_INJECTION: forcing a failure.
[  475.036874][T13062] name failslab, interval 1, probability 0, space 0, times 0
[  475.103684][T13066] netlink: 'syz.0.2989': attribute type 30 has an invalid length.
[  475.111996][T13062] CPU: 1 PID: 13062 Comm: syz.1.2996 Not tainted syzkaller #0
[  475.119487][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  475.129560][T13062] Call Trace:
[  475.132845][T13062]  <TASK>
[  475.135782][T13062]  dump_stack_lvl+0x188/0x24e
[  475.140479][T13062]  ? show_regs_print_info+0x12/0x12
[  475.145693][T13062]  ? load_image+0x400/0x400
[  475.150208][T13062]  ? __might_sleep+0xd0/0xd0
[  475.154806][T13062]  ? __lock_acquire+0x7d10/0x7d10
[  475.159849][T13062]  should_fail_ex+0x399/0x4d0
[  475.164536][T13062]  should_failslab+0x5/0x20
[  475.169044][T13062]  slab_pre_alloc_hook+0x59/0x310
[  475.174074][T13062]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  475.179806][T13062]  __kmem_cache_alloc_node+0x4f/0x260
[  475.185195][T13062]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  475.190920][T13062]  __kmalloc+0xa0/0x240
[  475.195091][T13062]  tomoyo_realpath_from_path+0xdf/0x5d0
[  475.200653][T13062]  ? tomoyo_path_number_perm+0x205/0x650
[  475.206291][T13062]  tomoyo_path_number_perm+0x22f/0x650
[  475.211758][T13062]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  475.217227][T13062]  ? ksys_write+0x1c0/0x250
[  475.221738][T13062]  ? common_file_perm+0x171/0x1c0
[  475.226794][T13062]  ? __fget_files+0x28/0x4b0
[  475.231387][T13062]  ? __fget_files+0x28/0x4b0
[  475.235998][T13062]  security_file_ioctl+0x6c/0xa0
[  475.240944][T13062]  __se_sys_ioctl+0x48/0x170
[  475.245550][T13062]  do_syscall_64+0x4c/0xa0
[  475.249970][T13062]  ? clear_bhb_loop+0x60/0xb0
[  475.254659][T13062]  ? clear_bhb_loop+0x60/0xb0
[  475.259343][T13062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.265243][T13062] RIP: 0033:0x7f599599ce59
[  475.269660][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.289271][T13062] RSP: 002b:00007f599685e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.297690][T13062] RAX: ffffffffffffffda RBX: 00007f5995c15fa0 RCX: 00007f599599ce59
[  475.305665][T13062] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  475.313639][T13062] RBP: 00007f599685e090 R08: 0000000000000000 R09: 0000000000000000
[  475.321613][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.329585][T13062] R13: 00007f5995c16038 R14: 00007f5995c15fa0 R15: 00007ffe977591d8
[  475.337575][T13062]  </TASK>
[  475.401858][T13062] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.705171][T13100] netlink: 'syz.1.2995': attribute type 10 has an invalid length.
[  476.720507][T13100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2995'.
[  476.783087][ T5572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.818241][ T5572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.855889][ T5572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.867034][ T5572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.889785][ T5572] device team0 left promiscuous mode
[  476.905477][ T5572] device team_slave_0 left promiscuous mode
[  476.923405][ T5572] device team_slave_1 left promiscuous mode
[  476.935276][T13115] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3000'.
[  476.948855][ T5572] bridge0: port 4(team0) entered disabled state
[  476.964043][ T5572] bridge0: port 3(dummy0) entered disabled state
[  476.983736][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.006052][ T5572] device bridge_slave_0 left promiscuous mode
[  477.012917][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.156180][ T5572] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  477.332700][ T5572] team0 (unregistering): Port device team_slave_1 removed
[  477.370439][ T5572] team0 (unregistering): Port device team_slave_0 removed
[  477.406856][ T5572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.447790][ T5572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.696915][ T5572] bond0 (unregistering): Released all slaves
[  477.784937][T13111] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2999'.
[  477.802014][T13115] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3000'.
[  477.814460][T13117] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3001'.
[  477.842303][T13117] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3001'.
[  477.983423][T12906] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  478.022762][T12906] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  478.075985][T12906] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  478.147135][T12906] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  478.327831][T13144] netlink: 'syz.3.3008': attribute type 1 has an invalid length.
[  478.361261][T13144] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3008'.
[  478.414684][T12906] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.448824][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  478.462537][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  478.483622][T12906] 8021q: adding VLAN 0 to HW filter on device team0
[  478.501081][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  478.525958][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  478.572265][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.579406][ T5576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.608131][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  478.698818][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  478.728902][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  478.756986][T13158] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3013'.
[  478.767290][T12993] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.774466][T12993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.795027][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  478.813547][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  478.849792][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  478.873028][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  478.888701][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  478.904899][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  478.918043][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  478.937163][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  478.950176][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  478.974322][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  478.990380][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  479.017125][T12906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  479.357343][T13178] netlink: 'syz.3.3017': attribute type 21 has an invalid length.
[  479.791348][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  479.810362][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  479.829127][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.879187][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  479.898176][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  479.968710][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  479.977892][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  480.006369][T12906] device veth0_vlan entered promiscuous mode
[  480.014140][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  480.038300][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  480.077078][T12906] device veth1_vlan entered promiscuous mode
[  480.127124][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  480.150031][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  480.195170][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  480.210919][T13207] __nla_validate_parse: 3 callbacks suppressed
[  480.210957][T13207] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3026'.
[  480.232213][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  480.248403][T12906] device veth0_macvtap entered promiscuous mode
[  480.275560][T12906] device veth1_macvtap entered promiscuous mode
[  480.295994][T13212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3025'.
[  480.335846][T13207] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.3026'.
[  480.414368][T12906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.454876][T12906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.455702][T13219] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3027'.
[  480.493058][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.533480][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  480.552165][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  480.575158][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  480.606726][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  480.648562][T13227] FAULT_INJECTION: forcing a failure.
[  480.648562][T13227] name failslab, interval 1, probability 0, space 0, times 0
[  480.671986][T13221] device lo entered promiscuous mode
[  480.678572][T13227] CPU: 1 PID: 13227 Comm: syz.4.3029 Not tainted syzkaller #0
[  480.686066][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  480.696143][T13227] Call Trace:
[  480.699435][T13227]  <TASK>
[  480.702469][T13227]  dump_stack_lvl+0x188/0x24e
[  480.707171][T13227]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  480.713353][T13227]  ? show_regs_print_info+0x12/0x12
[  480.718578][T13227]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  480.724758][T13227]  ? dump_stack+0x5/0x12
[  480.725464][T13221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  480.729004][T13227]  should_fail_ex+0x399/0x4d0
[  480.729033][T13227]  should_failslab+0x5/0x20
[  480.753312][T13227]  slab_pre_alloc_hook+0x59/0x310
[  480.758363][T13227]  ? sk_prot_alloc+0xe7/0x210
[  480.763064][T13227]  __kmem_cache_alloc_node+0x4f/0x260
[  480.768462][T13227]  ? sk_prot_alloc+0xe7/0x210
[  480.773174][T13227]  __kmalloc+0xa0/0x240
[  480.777359][T13227]  sk_prot_alloc+0xe7/0x210
[  480.781882][T13227]  ? sk_alloc+0x20/0x340
[  480.786147][T13227]  sk_alloc+0x36/0x340
[  480.790236][T13227]  ? bpf_ctx_init+0x163/0x1a0
[  480.794931][T13227]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  480.800509][T13227]  bpf_prog_test_run_skb+0x35e/0x12a0
[  480.805902][T13227]  ? lockdep_hardirqs_on+0x94/0x140
[  480.811122][T13227]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  480.817307][T13227]  ? cpu_online+0xa0/0xa0
[  480.821657][T13227]  bpf_prog_test_run+0x31e/0x390
[  480.826620][T13227]  __sys_bpf+0x62b/0x780
[  480.830889][T13227]  ? bpf_link_show_fdinfo+0x380/0x380
[  480.836297][T13227]  ? lock_chain_count+0x20/0x20
[  480.841169][T13227]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  480.847182][T13227]  __x64_sys_bpf+0x78/0x90
[  480.851626][T13227]  do_syscall_64+0x4c/0xa0
[  480.856057][T13227]  ? clear_bhb_loop+0x60/0xb0
[  480.860757][T13227]  ? clear_bhb_loop+0x60/0xb0
[  480.865462][T13227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.871382][T13227] RIP: 0033:0x7f3e1ad9ce59
[  480.875810][T13227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.895436][T13227] RSP: 002b:00007f3e1bc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  480.903870][T13227] RAX: ffffffffffffffda RBX: 00007f3e1b015fa0 RCX: 00007f3e1ad9ce59
[  480.911863][T13227] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[  480.919850][T13227] RBP: 00007f3e1bc74090 R08: 0000000000000000 R09: 0000000000000000
[  480.927835][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.935816][T13227] R13: 00007f3e1b016038 R14: 00007f3e1b015fa0 R15: 00007ffc5a626488
[  480.943814][T13227]  </TASK>
[  480.987336][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.004659][T13219] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3027'.
[  481.038492][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  481.057810][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  481.091991][T12906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.110979][T12906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.121389][T12906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.144183][T12906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.303801][ T5576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.331673][ T5576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.352079][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  481.410352][ T5528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.447791][ T5528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.477864][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  481.693071][T13250] netlink: 'syz.2.2940': attribute type 4 has an invalid length.
[  483.208377][T13270] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  483.273058][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  483.287006][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  483.295962][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  483.307725][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  483.315666][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  483.324832][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  484.275770][T13279] chnl_net:caif_netlink_parms(): no params data found
[  484.781288][T13279] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.831919][T13279] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.893232][T13279] device bridge_slave_0 entered promiscuous mode
[  484.923250][T13279] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.950852][T13279] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.976374][T13279] device bridge_slave_1 entered promiscuous mode
[  485.144029][T13279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.176257][T13279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.262091][T12993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  485.384456][T13279] team0: Port device team_slave_0 added
[  485.422483][ T4291] Bluetooth: hci5: command 0x0409 tx timeout
[  485.587904][T13279] team0: Port device team_slave_1 added
[  486.003484][T13322] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3047'.
[  486.050345][ T5572] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.152337][T13279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.179802][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.290065][T13279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.502810][ T4291] Bluetooth: hci5: command 0x041b tx timeout
[  489.090839][T13279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.106880][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.194851][T13279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.313752][ T5572] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.524827][ T5572] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.581726][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  489.657137][T13279] device hsr_slave_0 entered promiscuous mode
[  489.720709][T13279] device hsr_slave_1 entered promiscuous mode
[  490.695954][T13279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  490.715138][T13279] Cannot create hsr debugfs directory
[  491.673329][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  492.597253][ T5572] device netdevsim0 left promiscuous mode
[  492.620268][ T5572] bridge0: port 4(netdevsim0) entered disabled state
[  492.645332][ T5572] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.680978][T13362] netlink: 'syz.2.3054': attribute type 11 has an invalid length.
[  493.010762][T13390] netlink: 'syz.4.3061': attribute type 3 has an invalid length.
[  493.091728][T13390] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3061'.
[  493.337971][T13398] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3064'.
[  493.933569][ T5572] device 0 left promiscuous mode
[  494.154967][T13413] netlink: 'syz.4.3066': attribute type 19 has an invalid length.
[  495.030964][T13279] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  495.250724][T13279] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  495.333792][T13279] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  495.354696][T13279] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  495.433847][T13438] netlink: 'syz.2.3074': attribute type 10 has an invalid length.
[  495.450875][T13438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3074'.
[  495.465692][T13438] device ipvlan1 entered promiscuous mode
[  495.477463][T13438] bridge0: port 3(ipvlan1) entered blocking state
[  495.508825][T13438] bridge0: port 3(ipvlan1) entered disabled state
[  495.522703][T13438] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  495.603139][T13438] netlink: 'syz.2.3074': attribute type 10 has an invalid length.
[  495.648276][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.667355][T13438] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  495.955384][T13279] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.173440][ T5572] team0: Port device wlan1 removed
[  496.218143][T13460] netlink: 'syz.2.3079': attribute type 10 has an invalid length.
[  496.421433][T13460] team0: Device wg1 is of different type
[  496.506872][T13279] 8021q: adding VLAN 0 to HW filter on device team0
[  496.519136][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  496.548464][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  496.960205][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  496.978227][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  497.036186][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.043443][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.104528][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  497.143748][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  497.183510][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.190659][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.218983][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  497.357989][ T5572] device hsr_slave_0 left promiscuous mode
[  497.372011][ T5572] device hsr_slave_1 left promiscuous mode
[  497.396395][ T5572] bridge0: port 3(dummy0) entered disabled state
[  497.425992][ T5572] device bridge_slave_1 left promiscuous mode
[  497.446887][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.485228][ T5572] device bridge_slave_0 left promiscuous mode
[  497.491493][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.585994][ T5572] device veth1_vlan left promiscuous mode
[  497.592521][ T5572] device veth0_vlan left promiscuous mode
[  497.633555][T13506] FAULT_INJECTION: forcing a failure.
[  497.633555][T13506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.696701][T13506] CPU: 0 PID: 13506 Comm: syz.0.3090 Not tainted syzkaller #0
[  497.704233][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  497.714318][T13506] Call Trace:
[  497.717625][T13506]  <TASK>
[  497.720570][T13506]  dump_stack_lvl+0x188/0x24e
[  497.725272][T13506]  ? show_regs_print_info+0x12/0x12
[  497.730488][T13506]  ? load_image+0x400/0x400
[  497.735012][T13506]  ? __lock_acquire+0x7d10/0x7d10
[  497.740066][T13506]  should_fail_ex+0x399/0x4d0
[  497.744768][T13506]  _copy_from_user+0x2c/0x170
[  497.749470][T13506]  kstrtouint_from_user+0xda/0x170
[  497.754605][T13506]  ? kstrtol_from_user+0x190/0x190
[  497.759778][T13506]  proc_fail_nth_write+0x8b/0x200
[  497.764817][T13506]  ? proc_fail_nth_read+0x220/0x220
[  497.770020][T13506]  ? common_file_perm+0x171/0x1c0
[  497.775048][T13506]  ? proc_fail_nth_read+0x220/0x220
[  497.780244][T13506]  vfs_write+0x2e6/0xa30
[  497.784491][T13506]  ? file_end_write+0x250/0x250
[  497.789338][T13506]  ? __fget_files+0x28/0x4b0
[  497.793925][T13506]  ? __fget_files+0x28/0x4b0
[  497.798510][T13506]  ? __fget_files+0x43d/0x4b0
[  497.803193][T13506]  ? __fdget_pos+0x2ae/0x360
[  497.807778][T13506]  ? ksys_write+0x71/0x250
[  497.812194][T13506]  ksys_write+0x14c/0x250
[  497.816521][T13506]  ? __ia32_sys_read+0x80/0x80
[  497.821285][T13506]  ? lockdep_hardirqs_on+0x94/0x140
[  497.826479][T13506]  do_syscall_64+0x4c/0xa0
[  497.830884][T13506]  ? clear_bhb_loop+0x60/0xb0
[  497.835556][T13506]  ? clear_bhb_loop+0x60/0xb0
[  497.840229][T13506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.846117][T13506] RIP: 0033:0x7f9b08f5d68e
[  497.850523][T13506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  497.870117][T13506] RSP: 002b:00007f9b09d96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  497.878523][T13506] RAX: ffffffffffffffda RBX: 00007f9b09d976c0 RCX: 00007f9b08f5d68e
[  497.886486][T13506] RDX: 0000000000000001 RSI: 00007f9b09d970a0 RDI: 0000000000000004
[  497.894448][T13506] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  497.902409][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.910367][T13506] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  497.918342][T13506]  </TASK>
[  498.019095][ T5572] team0 (unregistering): Port device geneve1 removed
[  498.087235][ T5572] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  498.106344][T13512] FAULT_INJECTION: forcing a failure.
[  498.106344][T13512] name failslab, interval 1, probability 0, space 0, times 0
[  498.120959][T13512] CPU: 0 PID: 13512 Comm: syz.0.3092 Not tainted syzkaller #0
[  498.128456][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  498.138524][T13512] Call Trace:
[  498.141817][T13512]  <TASK>
[  498.144761][T13512]  dump_stack_lvl+0x188/0x24e
[  498.149457][T13512]  ? sctp_sendmsg+0x15b0/0x2940
[  498.154326][T13512]  ? ___sys_sendmsg+0x2a2/0x360
[  498.159191][T13512]  ? show_regs_print_info+0x12/0x12
[  498.164405][T13512]  ? load_image+0x400/0x400
[  498.168939][T13512]  should_fail_ex+0x399/0x4d0
[  498.173635][T13512]  should_failslab+0x5/0x20
[  498.178138][T13512]  slab_pre_alloc_hook+0x59/0x310
[  498.183167][T13512]  ? sctp_add_bind_addr+0x89/0x350
[  498.188287][T13512]  __kmem_cache_alloc_node+0x4f/0x260
[  498.193657][T13512]  ? sctp_add_bind_addr+0x89/0x350
[  498.198768][T13512]  kmalloc_trace+0x26/0xe0
[  498.203183][T13512]  sctp_add_bind_addr+0x89/0x350
[  498.208122][T13512]  sctp_copy_local_addr_list+0x311/0x4e0
[  498.213759][T13512]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  498.219475][T13512]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  498.225543][T13512]  ? sctp_v4_is_any+0x31/0x50
[  498.230209][T13512]  ? sctp_copy_one_addr+0x93/0x660
[  498.235319][T13512]  sctp_bind_addr_copy+0xaf/0x3c0
[  498.240343][T13512]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  498.246664][T13512]  sctp_connect_new_asoc+0x2f5/0x6a0
[  498.251942][T13512]  ? __sctp_connect+0xd80/0xd80
[  498.256780][T13512]  ? __local_bh_enable_ip+0x136/0x1c0
[  498.262142][T13512]  ? _local_bh_enable+0xa0/0xa0
[  498.266980][T13512]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  498.272778][T13512]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  498.278576][T13512]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  498.284113][T13512]  ? security_sctp_bind_connect+0x85/0xb0
[  498.289827][T13512]  sctp_sendmsg+0x15b0/0x2940
[  498.294504][T13512]  ? aa_sk_perm+0x811/0x950
[  498.299001][T13512]  ? sctp_getsockopt+0x8a0/0x8a0
[  498.303928][T13512]  ? __might_fault+0xa6/0x120
[  498.308594][T13512]  ? aa_af_perm+0x340/0x340
[  498.313087][T13512]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  498.319500][T13512]  ? inet_sendmsg+0x78/0x2f0
[  498.324081][T13512]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  498.329357][T13512]  ? security_socket_sendmsg+0x7c/0xa0
[  498.334814][T13512]  ? inet_send_prepare+0x260/0x260
[  498.339915][T13512]  ____sys_sendmsg+0x5be/0x970
[  498.344676][T13512]  ? __sys_sendmsg_sock+0x30/0x30
[  498.349692][T13512]  ? __import_iovec+0x315/0x500
[  498.354545][T13512]  ? import_iovec+0x6f/0xa0
[  498.359041][T13512]  ___sys_sendmsg+0x2a2/0x360
[  498.363716][T13512]  ? __sys_sendmsg+0x290/0x290
[  498.368485][T13512]  ? __lock_acquire+0x7d10/0x7d10
[  498.373524][T13512]  __se_sys_sendmsg+0x1bb/0x2a0
[  498.378365][T13512]  ? __x64_sys_sendmsg+0x80/0x80
[  498.383302][T13512]  ? lockdep_hardirqs_on+0x94/0x140
[  498.388497][T13512]  do_syscall_64+0x4c/0xa0
[  498.392903][T13512]  ? clear_bhb_loop+0x60/0xb0
[  498.397574][T13512]  ? clear_bhb_loop+0x60/0xb0
[  498.402246][T13512]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  498.408137][T13512] RIP: 0033:0x7f9b08f9ce59
[  498.412543][T13512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.432143][T13512] RSP: 002b:00007f9b09d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  498.440547][T13512] RAX: ffffffffffffffda RBX: 00007f9b09215fa0 RCX: 00007f9b08f9ce59
[  498.448510][T13512] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  498.456478][T13512] RBP: 00007f9b09d97090 R08: 0000000000000000 R09: 0000000000000000
[  498.464437][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  498.472398][T13512] R13: 00007f9b09216038 R14: 00007f9b09215fa0 R15: 00007ffc42d54458
[  498.480372][T13512]  </TASK>
[  499.047886][T13533] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  499.443969][ T5572] team0 (unregistering): Port device team_slave_1 removed
[  499.507778][ T5572] team0 (unregistering): Port device team_slave_0 removed
[  499.564321][ T5572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  499.635462][ T5572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.841032][ T5572] team0 (unregistering): Port device bridge0 removed
[  499.870485][ T5572] bond0 (unregistering): Released all slaves
[  499.953558][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  499.961710][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  499.985854][T13499] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.3087'.
[  500.011736][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  500.043295][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  500.059167][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  500.085928][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  500.121438][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  500.158760][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  500.178408][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  500.187791][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  500.199748][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  500.225399][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  500.374624][T13545] netlink: 'syz.1.3106': attribute type 10 has an invalid length.
[  500.476666][T13545] 8021q: adding VLAN 0 to HW filter on device team0
[  500.479079][T13554] FAULT_INJECTION: forcing a failure.
[  500.479079][T13554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.496784][T13545] bond0: (slave team0): Enslaving as an active interface with an up link
[  500.520741][T13554] CPU: 1 PID: 13554 Comm: syz.2.3107 Not tainted syzkaller #0
[  500.536689][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  500.546750][T13554] Call Trace:
[  500.546763][T13554]  <TASK>
[  500.546772][T13554]  dump_stack_lvl+0x188/0x24e
[  500.546802][T13554]  ? show_regs_print_info+0x12/0x12
[  500.546823][T13554]  ? load_image+0x400/0x400
[  500.546854][T13554]  ? __lock_acquire+0x7d10/0x7d10
[  500.546895][T13554]  should_fail_ex+0x399/0x4d0
[  500.546925][T13554]  _copy_from_user+0x2c/0x170
[  500.581912][T13554]  generic_map_update_batch+0x4f3/0x810
[  500.587524][T13554]  ? rcu_read_unlock+0xa0/0xa0
[  500.592320][T13554]  ? __fdget+0x17c/0x200
[  500.596577][T13554]  ? rcu_read_unlock+0xa0/0xa0
[  500.601353][T13554]  bpf_map_do_batch+0x466/0x600
[  500.606218][T13554]  __sys_bpf+0x6f7/0x780
[  500.610469][T13554]  ? bpf_link_show_fdinfo+0x380/0x380
[  500.615867][T13554]  ? lock_chain_count+0x20/0x20
[  500.620731][T13554]  __x64_sys_bpf+0x78/0x90
[  500.625152][T13554]  do_syscall_64+0x4c/0xa0
[  500.629560][T13554]  ? clear_bhb_loop+0x60/0xb0
[  500.634242][T13554]  ? clear_bhb_loop+0x60/0xb0
[  500.638925][T13554]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  500.644820][T13554] RIP: 0033:0x7fcb3ad9ce59
[  500.649233][T13554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.668843][T13554] RSP: 002b:00007fcb3bb7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  500.677254][T13554] RAX: ffffffffffffffda RBX: 00007fcb3b015fa0 RCX: 00007fcb3ad9ce59
[  500.685219][T13554] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  500.693198][T13554] RBP: 00007fcb3bb7c090 R08: 0000000000000000 R09: 0000000000000000
[  500.701164][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  500.709131][T13554] R13: 00007fcb3b016038 R14: 00007fcb3b015fa0 R15: 00007ffe6c69b188
[  500.717122][T13554]  </TASK>
[  500.954970][T13563] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  500.985416][T13563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3110'.
[  501.001786][T13563] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  501.029959][T13563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3110'.
[  501.076703][T13564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3110'.
[  501.143760][T13564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.161149][T13564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.176797][T13564] bond0 (unregistering): (slave team0): Releasing backup interface
[  501.193488][T13564] bond0 (unregistering): Released all slaves
[  501.225723][T13279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.235459][T13570] netlink: 'syz.0.3112': attribute type 10 has an invalid length.
[  501.272899][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.279235][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.352732][T13570] team0: Device wg1 is of different type
[  501.418909][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  501.436316][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  501.522585][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  501.579193][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  501.687625][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  501.702180][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  501.715652][T13279] device veth0_vlan entered promiscuous mode
[  501.729620][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  501.753762][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  501.776637][T13279] device veth1_vlan entered promiscuous mode
[  501.798374][T13590] netlink: 'syz.0.3118': attribute type 10 has an invalid length.
[  502.075835][T13590] team0 (unregistering): Port device team_slave_0 removed
[  502.141303][T13590] team0 (unregistering): Port device team_slave_1 removed
[  502.202153][T13590] team0 (unregistering): Port device wlan1 removed
[  502.269389][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  502.279589][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  502.297139][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  502.309843][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  502.323167][T13279] device veth0_macvtap entered promiscuous mode
[  502.346939][T13279] device veth1_macvtap entered promiscuous mode
[  502.387575][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  502.405019][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.417506][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  502.430727][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.451204][T13279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.471854][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  502.480873][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  502.490062][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  502.524881][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  502.553619][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.591993][T13279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.602729][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  502.640590][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  502.657499][T13606] netlink: 'syz.2.3123': attribute type 10 has an invalid length.
[  502.867680][T13279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.892037][T13279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.900863][T13279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.925938][T13279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.966634][T13623] netlink: 'syz.4.3128': attribute type 10 has an invalid length.
[  503.035449][T13623] team0: Device wg1 is of different type
[  503.239308][ T5576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.267290][ T5576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.342144][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  503.391651][ T5559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.399518][ T5559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.462686][T12993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  504.048052][T13652] netlink: 'syz.3.3137': attribute type 10 has an invalid length.
[  504.551252][T13643] delete_channel: no stack
[  504.727106][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  504.736781][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  504.745529][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  504.755510][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  504.765871][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  504.791376][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.176665][T13652] team0 (unregistering): Port device team_slave_0 removed
[  505.254089][T13652] team0 (unregistering): Port device team_slave_1 removed
[  505.373964][ T5570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.530747][ T5570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.557448][T13676] netlink: 'syz.3.3146': attribute type 21 has an invalid length.
[  505.571831][T13676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3146'.
[  505.581141][T13676] netlink: 'syz.3.3146': attribute type 1 has an invalid length.
[  505.690307][ T5570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.996484][T13663] chnl_net:caif_netlink_parms(): no params data found
[  506.121389][ T5570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.289910][T13663] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.321057][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.355062][T13663] device bridge_slave_0 entered promiscuous mode
[  506.455307][T13663] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.470415][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.502008][T13663] device bridge_slave_1 entered promiscuous mode
[  506.679415][T13663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.749833][T13663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.181848][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[  507.195869][T13663] team0: Port device team_slave_0 added
[  507.255607][T13663] team0: Port device team_slave_1 added
[  507.540324][T13722] netlink: 'syz.2.3156': attribute type 10 has an invalid length.
[  508.376193][T13722] team0 (unregistering): Port device team_slave_0 removed
[  508.559371][T13722] team0 (unregistering): Port device team_slave_1 removed
[  508.934893][T13663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.949063][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.999357][T13663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.175588][T13769] netlink: 'syz.2.3167': attribute type 3 has an invalid length.
[  509.221322][T13769] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3167'.
[  509.278548][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[  509.706031][T13663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.721934][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.779136][T13663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.179193][T13780] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  510.205659][T13663] device hsr_slave_0 entered promiscuous mode
[  510.283869][T13663] device hsr_slave_1 entered promiscuous mode
[  510.296522][T13663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  510.313746][T13663] Cannot create hsr debugfs directory
[  511.351734][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[  512.173467][ T5570] device hsr_slave_0 left promiscuous mode
[  512.205391][ T5570] device hsr_slave_1 left promiscuous mode
[  512.223734][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.231197][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.257146][ T5570] bridge0: port 4(bond0) entered disabled state
[  512.303592][ T5570] bridge0: port 3(dummy0) entered disabled state
[  512.336937][ T5570] device bridge_slave_1 left promiscuous mode
[  512.341682][T13831] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  512.352348][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.413187][ T5570] device bridge_slave_0 left promiscuous mode
[  512.421960][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.168680][T13847] netlink: 'syz.4.3193': attribute type 2 has an invalid length.
[  513.189674][T13847] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3193'.
[  513.432636][ T4291] Bluetooth: hci1: command 0x0419 tx timeout
[  513.699522][T13856] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  513.773341][ T5570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  513.800466][ T5570] device bond_slave_1 left promiscuous mode
[  513.884120][ T5570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  513.893553][ T5570] device bond_slave_0 left promiscuous mode
[  514.121371][ T5570] bond0 (unregistering): Released all slaves
[  514.723347][T13876] netlink: 'syz.4.3203': attribute type 10 has an invalid length.
[  515.090642][T13876] team0 (unregistering): Port device team_slave_0 removed
[  515.162674][T13876] team0 (unregistering): Port device team_slave_1 removed
[  515.221826][T13876] team0 (unregistering): Port device wlan1 removed
[  515.259145][T13889] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  515.275307][T13876] team0 (unregistering): Port device macvlan1 removed
[  515.493773][T13663] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  515.554600][T13663] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  515.585095][T13663] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  515.609320][T13663] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  515.832017][T13663] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.859890][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  515.877768][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  515.919941][T13663] 8021q: adding VLAN 0 to HW filter on device team0
[  515.935648][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  515.945262][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  515.963344][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.970505][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.023864][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  516.035650][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  516.082585][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  516.125181][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.132414][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.152420][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  516.166800][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  516.223848][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  516.254517][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  516.286235][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  516.309436][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  516.338365][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  516.358887][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  516.398172][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  516.416306][T13935] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  516.443031][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  516.471352][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  516.508323][T13663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  516.589206][T13943] FAULT_INJECTION: forcing a failure.
[  516.589206][T13943] name failslab, interval 1, probability 0, space 0, times 0
[  516.651927][T13943] CPU: 0 PID: 13943 Comm: syz.1.3222 Not tainted syzkaller #0
[  516.659452][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  516.669530][T13943] Call Trace:
[  516.672832][T13943]  <TASK>
[  516.675775][T13943]  dump_stack_lvl+0x188/0x24e
[  516.680485][T13943]  ? show_regs_print_info+0x12/0x12
[  516.685704][T13943]  ? load_image+0x400/0x400
[  516.690233][T13943]  ? __might_sleep+0xd0/0xd0
[  516.694845][T13943]  ? __lock_acquire+0x7d10/0x7d10
[  516.699899][T13943]  should_fail_ex+0x399/0x4d0
[  516.704593][T13943]  should_failslab+0x5/0x20
[  516.709106][T13943]  slab_pre_alloc_hook+0x59/0x310
[  516.714145][T13943]  ? apparmor_sk_alloc_security+0x74/0x100
[  516.719974][T13943]  __kmem_cache_alloc_node+0x4f/0x260
[  516.725369][T13943]  ? apparmor_sk_alloc_security+0x74/0x100
[  516.731192][T13943]  kmalloc_trace+0x26/0xe0
[  516.735642][T13943]  apparmor_sk_alloc_security+0x74/0x100
[  516.741294][T13943]  security_sk_alloc+0x6a/0xa0
[  516.746083][T13943]  sk_prot_alloc+0x101/0x210
[  516.750693][T13943]  ? sk_alloc+0x20/0x340
[  516.754964][T13943]  sk_alloc+0x36/0x340
[  516.759062][T13943]  ? bpf_ctx_init+0x163/0x1a0
[  516.763762][T13943]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  516.769341][T13943]  bpf_prog_test_run_skb+0x35e/0x12a0
[  516.774739][T13943]  ? __fget_files+0x28/0x4b0
[  516.779351][T13943]  ? __fget_files+0x43d/0x4b0
[  516.784059][T13943]  ? cpu_online+0xa0/0xa0
[  516.788419][T13943]  bpf_prog_test_run+0x31e/0x390
[  516.793388][T13943]  __sys_bpf+0x62b/0x780
[  516.797658][T13943]  ? bpf_link_show_fdinfo+0x380/0x380
[  516.803067][T13943]  ? lock_chain_count+0x20/0x20
[  516.807945][T13943]  __x64_sys_bpf+0x78/0x90
[  516.812378][T13943]  do_syscall_64+0x4c/0xa0
[  516.816807][T13943]  ? clear_bhb_loop+0x60/0xb0
[  516.821503][T13943]  ? clear_bhb_loop+0x60/0xb0
[  516.826210][T13943]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.826372][T13950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  516.832115][T13943] RIP: 0033:0x7f599599ce59
[  516.832139][T13943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.832153][T13943] RSP: 002b:00007f599683d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  516.832173][T13943] RAX: ffffffffffffffda RBX: 00007f5995c16090 RCX: 00007f599599ce59
[  516.832185][T13943] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  516.832196][T13943] RBP: 00007f599683d090 R08: 0000000000000000 R09: 0000000000000000
[  516.832207][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.832217][T13943] R13: 00007f5995c16128 R14: 00007f5995c16090 R15: 00007ffe977591d8
[  516.832244][T13943]  </TASK>
[  517.501594][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  517.509234][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  517.545740][T13974] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3228'.
[  517.626328][T13974] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  517.641018][T13663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.718697][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  517.739420][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  517.879581][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  517.917721][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  517.968954][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  517.995909][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  518.015360][T13663] device veth0_vlan entered promiscuous mode
[  518.049975][T13663] device veth1_vlan entered promiscuous mode
[  518.164031][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  518.174608][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  518.199999][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  518.233433][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  518.255820][T13663] device veth0_macvtap entered promiscuous mode
[  518.290079][T13663] device veth1_macvtap entered promiscuous mode
[  518.343855][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.371070][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.395302][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.416600][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.436251][T13663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.455981][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  518.475867][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  518.535741][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  518.559284][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  518.588638][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.629911][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.648237][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.697484][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.762000][T13663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.772288][T14005] netlink: 'syz.3.3237': attribute type 10 has an invalid length.
[  518.790934][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  518.822584][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  518.867314][T13663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.896899][T13663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.926041][T13663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.961686][T13663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.100551][T14025] netlink: 'syz.1.3242': attribute type 3 has an invalid length.
[  519.134146][T14025] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.3242'.
[  519.254861][ T5562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.284954][ T5562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.327537][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  519.428859][ T5576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.450523][ T5576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.489549][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  519.530948][T14040] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  519.716276][T14042] netlink: 'syz.3.3245': attribute type 11 has an invalid length.
[  519.745855][T14042] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3245'.
[  519.824567][ T5572] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  519.859471][T14035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  520.758509][T14065] netlink: 'syz.3.3251': attribute type 1 has an invalid length.
[  520.794339][T14065] netlink: 'syz.3.3251': attribute type 4 has an invalid length.
[  520.879177][T14065] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3251'.
[  520.990974][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  521.012151][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  521.021102][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  521.034519][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  521.043381][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  521.050631][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  521.259367][T14070] chnl_net:caif_netlink_parms(): no params data found
[  522.382551][T12993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.490819][T14080] netlink: 'syz.0.3253': attribute type 3 has an invalid length.
[  522.502574][T14080] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3253'.
[  522.548079][T12993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.686013][T14088] netlink: 'syz.0.3253': attribute type 1 has an invalid length.
[  522.718597][T14070] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.736211][T14070] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.763041][T14070] device bridge_slave_0 entered promiscuous mode
[  522.794510][T14070] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.813200][T14070] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.833997][T14070] device bridge_slave_1 entered promiscuous mode
[  522.927708][T14099] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  522.928069][T12993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.027681][T14070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.086803][T12993] device netdevsim0 left promiscuous mode
[  523.098904][T12993] bridge0: port 3(netdevsim0) entered disabled state
[  523.108955][ T4291] Bluetooth: hci2: command 0x0409 tx timeout
[  523.175966][T12993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.219337][T14070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.310598][T14070] team0: Port device team_slave_0 added
[  523.449871][T14070] team0: Port device team_slave_1 added
[  523.529789][T14125] netlink: 'syz.3.3266': attribute type 1 has an invalid length.
[  523.548567][T14125] netlink: 'syz.3.3266': attribute type 4 has an invalid length.
[  523.583053][T14125] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3266'.
[  523.621478][T14070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.658523][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.740765][T14070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.787463][T14070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.815519][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.887533][T14070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.121574][T14070] device hsr_slave_0 entered promiscuous mode
[  524.162998][T14070] device hsr_slave_1 entered promiscuous mode
[  524.166631][T14145] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  524.347821][T14070] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.356004][T14070] Cannot create hsr debugfs directory
[  524.379584][T14151] netlink: 'syz.0.3275': attribute type 21 has an invalid length.
[  524.409972][T14151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3275'.
[  524.429737][T14151] netlink: 'syz.0.3275': attribute type 1 has an invalid length.
[  524.774171][T14164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  524.879635][T14169] netlink: 'syz.2.3280': attribute type 10 has an invalid length.
[  525.125127][T14175] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  525.147318][T14175] netlink: 'syz.2.3281': attribute type 4 has an invalid length.
[  525.162367][T14175] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3281'.
[  525.199879][ T4291] Bluetooth: hci2: command 0x041b tx timeout
[  525.738975][T14197] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  525.801002][T14191] netlink: 'syz.3.3283': attribute type 10 has an invalid length.
[  526.252201][T14215] netlink: 'syz.4.3289': attribute type 3 has an invalid length.
[  526.272178][T14215] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3289'.
[  526.742979][T14220] netlink: 'syz.4.3289': attribute type 1 has an invalid length.
[  527.047493][T14232] netlink: 'syz.2.3290': attribute type 11 has an invalid length.
[  527.108128][T14232] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3290'.
[  527.116230][T14241] FAULT_INJECTION: forcing a failure.
[  527.116230][T14241] name failslab, interval 1, probability 0, space 0, times 0
[  527.141150][T14241] CPU: 1 PID: 14241 Comm: syz.0.3294 Not tainted syzkaller #0
[  527.148672][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  527.158754][T14241] Call Trace:
[  527.162056][T14241]  <TASK>
[  527.165004][T14241]  dump_stack_lvl+0x188/0x24e
[  527.169719][T14241]  ? show_regs_print_info+0x12/0x12
[  527.174942][T14241]  ? load_image+0x400/0x400
[  527.179476][T14241]  ? __might_sleep+0xd0/0xd0
[  527.184088][T14241]  ? __lock_acquire+0x7d10/0x7d10
[  527.189141][T14241]  ? trace_event_raw_event_lock+0x250/0x250
[  527.195068][T14241]  should_fail_ex+0x399/0x4d0
[  527.199777][T14241]  should_failslab+0x5/0x20
[  527.204309][T14241]  slab_pre_alloc_hook+0x59/0x310
[  527.209358][T14241]  ? sk_prot_alloc+0xe7/0x210
[  527.214064][T14241]  __kmem_cache_alloc_node+0x4f/0x260
[  527.219472][T14241]  ? sk_prot_alloc+0xe7/0x210
[  527.224184][T14241]  __kmalloc+0xa0/0x240
[  527.228376][T14241]  sk_prot_alloc+0xe7/0x210
[  527.232904][T14241]  ? sk_alloc+0x20/0x340
[  527.237174][T14241]  sk_alloc+0x36/0x340
[  527.241269][T14241]  ? bpf_ctx_init+0x163/0x1a0
[  527.245963][T14241]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  527.251519][T14241]  bpf_prog_test_run_skb+0x35e/0x12a0
[  527.256893][T14241]  ? __fget_files+0x28/0x4b0
[  527.261488][T14241]  ? __fget_files+0x43d/0x4b0
[  527.266177][T14241]  ? cpu_online+0xa0/0xa0
[  527.270504][T14241]  bpf_prog_test_run+0x31e/0x390
[  527.275443][T14241]  __sys_bpf+0x62b/0x780
[  527.279684][T14241]  ? bpf_link_show_fdinfo+0x380/0x380
[  527.285070][T14241]  ? lock_chain_count+0x20/0x20
[  527.289929][T14241]  __x64_sys_bpf+0x78/0x90
[  527.294347][T14241]  do_syscall_64+0x4c/0xa0
[  527.298755][T14241]  ? clear_bhb_loop+0x60/0xb0
[  527.303432][T14241]  ? clear_bhb_loop+0x60/0xb0
[  527.308108][T14241]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  527.314005][T14241] RIP: 0033:0x7f3ff419ce59
[  527.318416][T14241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  527.338022][T14241] RSP: 002b:00007f3ff5133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  527.346435][T14241] RAX: ffffffffffffffda RBX: 00007f3ff4415fa0 RCX: 00007f3ff419ce59
[  527.354415][T14241] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  527.362379][T14241] RBP: 00007f3ff5133090 R08: 0000000000000000 R09: 0000000000000000
[  527.370348][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.378315][T14241] R13: 00007f3ff4416038 R14: 00007f3ff4415fa0 R15: 00007ffc384a7398
[  527.386314][T14241]  </TASK>
[  527.400041][T14221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.410359][ T4291] Bluetooth: hci2: command 0x040f tx timeout
[  527.439184][T14070] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  527.637577][T14070] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  527.783972][T14254] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  529.102152][T14259] netlink: 'syz.3.3299': attribute type 10 has an invalid length.
[  529.256251][T14070] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  529.270982][T14269] FAULT_INJECTION: forcing a failure.
[  529.270982][T14269] name failslab, interval 1, probability 0, space 0, times 0
[  529.288995][T14267] netlink: 'syz.4.3302': attribute type 10 has an invalid length.
[  529.320889][T14070] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  529.349730][T14269] CPU: 0 PID: 14269 Comm: syz.2.3300 Not tainted syzkaller #0
[  529.357253][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  529.367339][T14269] Call Trace:
[  529.370647][T14269]  <TASK>
[  529.373598][T14269]  dump_stack_lvl+0x188/0x24e
[  529.378311][T14269]  ? show_regs_print_info+0x12/0x12
[  529.383539][T14269]  ? load_image+0x400/0x400
[  529.388076][T14269]  ? __might_sleep+0xd0/0xd0
[  529.392691][T14269]  ? __lock_acquire+0x7d10/0x7d10
[  529.397751][T14269]  should_fail_ex+0x399/0x4d0
[  529.402460][T14269]  should_failslab+0x5/0x20
[  529.406972][T14269]  slab_pre_alloc_hook+0x59/0x310
[  529.412003][T14269]  kmem_cache_alloc+0x56/0x2f0
[  529.416763][T14269]  ? skb_clone+0x1e7/0x370
[  529.421182][T14269]  skb_clone+0x1e7/0x370
[  529.425426][T14269]  pfkey_sendmsg+0x496/0x1090
[  529.430110][T14269]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  529.436265][T14269]  ? pfkey_release+0x310/0x310
[  529.441029][T14269]  ? aa_sk_perm+0x81f/0x950
[  529.445537][T14269]  ? aa_af_perm+0x340/0x340
[  529.450035][T14269]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  529.456455][T14269]  ? aa_sock_msg_perm+0x94/0x150
[  529.461388][T14269]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  529.466668][T14269]  ? security_socket_sendmsg+0x7c/0xa0
[  529.472126][T14269]  ? pfkey_release+0x310/0x310
[  529.476887][T14269]  ____sys_sendmsg+0x5be/0x970
[  529.481654][T14269]  ? __sys_sendmsg_sock+0x30/0x30
[  529.486673][T14269]  ? __import_iovec+0x315/0x500
[  529.491527][T14269]  ? import_iovec+0x6f/0xa0
[  529.496029][T14269]  ___sys_sendmsg+0x2a2/0x360
[  529.500703][T14269]  ? migrate_enable+0x148/0x220
[  529.505557][T14269]  ? __sys_sendmsg+0x290/0x290
[  529.510351][T14269]  __se_sys_sendmsg+0x1bb/0x2a0
[  529.515198][T14269]  ? __x64_sys_sendmsg+0x80/0x80
[  529.520142][T14269]  ? syscall_enter_from_user_mode+0x2a/0x80
[  529.526034][T14269]  do_syscall_64+0x4c/0xa0
[  529.530441][T14269]  ? clear_bhb_loop+0x60/0xb0
[  529.535118][T14269]  ? clear_bhb_loop+0x60/0xb0
[  529.539796][T14269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.545689][T14269] RIP: 0033:0x7fcb3ad9ce59
[  529.550097][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.569716][T14269] RSP: 002b:00007fcb3bb7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.578134][T14269] RAX: ffffffffffffffda RBX: 00007fcb3b015fa0 RCX: 00007fcb3ad9ce59
[  529.586103][T14269] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 000000000000000f
[  529.594068][T14269] RBP: 00007fcb3bb7c090 R08: 0000000000000000 R09: 0000000000000000
[  529.602038][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.610008][T14269] R13: 00007fcb3b016038 R14: 00007fcb3b015fa0 R15: 00007ffe6c69b188
[  529.617988][T14269]  </TASK>
[  529.634970][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[  529.832961][T14274] netlink: 'syz.3.3303': attribute type 7 has an invalid length.
[  530.764196][T14291] netlink: 'syz.0.3306': attribute type 10 has an invalid length.
[  530.779607][T14291] device veth1_macvtap left promiscuous mode
[  530.876567][T14292] netlink: 'syz.4.3307': attribute type 10 has an invalid length.
[  531.025831][T14070] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.740920][T14331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  531.880101][T14336] netlink: 'syz.4.3310': attribute type 11 has an invalid length.
[  531.932221][T14336] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3310'.
[  532.160389][T14318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  532.221565][T14332] netlink: 'syz.0.3321': attribute type 10 has an invalid length.
[  532.396745][T14332] team0 (unregistering): Port device team_slave_0 removed
[  532.458460][T14332] team0 (unregistering): Port device team_slave_1 removed
[  532.498288][T14329] netlink: 'syz.3.3309': attribute type 10 has an invalid length.
[  532.531885][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  532.549663][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  532.629367][T14346] netlink: 'syz.2.3312': attribute type 10 has an invalid length.
[  532.683808][T14070] 8021q: adding VLAN 0 to HW filter on device team0
[  532.876709][T14359] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3314'.
[  532.904524][T14359] ksmbd: Unknown IPC event: 10, ignore.
[  532.984135][T14364] netlink: 'syz.4.3315': attribute type 10 has an invalid length.
[  533.043538][T14366] netlink: 'syz.0.3317': attribute type 10 has an invalid length.
[  533.065497][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  533.078867][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  533.118347][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.125570][ T5578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.207125][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  533.236008][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  533.276415][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  533.313049][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.320283][ T5578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.370516][T12993] device bridge_slave_1 left promiscuous mode
[  533.397501][T12993] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.286216][T12993] device bridge_slave_0 left promiscuous mode
[  534.297804][T12993] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.340183][T12993] device veth0_macvtap left promiscuous mode
[  534.888214][T12993] team0 (unregistering): Port device team_slave_1 removed
[  534.932543][T12993] team0 (unregistering): Port device team_slave_0 removed
[  535.320771][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  535.335854][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  535.363842][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  535.385501][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  535.398448][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  535.407273][T14408] FAULT_INJECTION: forcing a failure.
[  535.407273][T14408] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.410279][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  535.434097][T14389] netlink: 'syz.0.3323': attribute type 21 has an invalid length.
[  535.444455][T14389] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3323'.
[  535.451237][T14408] CPU: 0 PID: 14408 Comm: syz.4.3328 Not tainted syzkaller #0
[  535.460961][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  535.471044][T14408] Call Trace:
[  535.474335][T14408]  <TASK>
[  535.477279][T14408]  dump_stack_lvl+0x188/0x24e
[  535.481979][T14408]  ? show_regs_print_info+0x12/0x12
[  535.487201][T14408]  ? load_image+0x400/0x400
[  535.491736][T14408]  ? __lock_acquire+0x7d10/0x7d10
[  535.496794][T14408]  should_fail_ex+0x399/0x4d0
[  535.501490][T14408]  _copy_from_user+0x2c/0x170
[  535.502081][T14404] netlink: 'syz.2.3326': attribute type 10 has an invalid length.
[  535.506180][T14408]  iovec_from_user+0x143/0x360
[  535.506213][T14408]  __import_iovec+0x6d/0x500
[  535.506235][T14408]  import_iovec+0x6f/0xa0
[  535.506254][T14408]  ___sys_sendmsg+0x252/0x360
[  535.506277][T14408]  ? __sys_sendmsg+0x290/0x290
[  535.506307][T14408]  ? __lock_acquire+0x7d10/0x7d10
[  535.506350][T14408]  __se_sys_sendmsg+0x1bb/0x2a0
[  535.506369][T14408]  ? __x64_sys_sendmsg+0x80/0x80
[  535.506399][T14408]  ? lockdep_hardirqs_on+0x94/0x140
[  535.506419][T14408]  do_syscall_64+0x4c/0xa0
[  535.506433][T14408]  ? clear_bhb_loop+0x60/0xb0
[  535.506455][T14408]  ? clear_bhb_loop+0x60/0xb0
[  535.506478][T14408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.506499][T14408] RIP: 0033:0x7f3e1ad9ce59
[  535.506516][T14408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.506532][T14408] RSP: 002b:00007f3e1bc74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.506551][T14408] RAX: ffffffffffffffda RBX: 00007f3e1b015fa0 RCX: 00007f3e1ad9ce59
[  535.506564][T14408] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000005
[  535.625156][T14408] RBP: 00007f3e1bc74090 R08: 0000000000000000 R09: 0000000000000000
[  535.633123][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.641084][T14408] R13: 00007f3e1b016038 R14: 00007f3e1b015fa0 R15: 00007ffc5a626488
[  535.649064][T14408]  </TASK>
[  535.680643][T14070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  535.719346][T14070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  535.746292][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  535.790048][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  535.826756][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  535.847799][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  535.857621][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  535.869164][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  535.947495][T14412] netlink: 'syz.0.3329': attribute type 39 has an invalid length.
[  535.980962][T14419] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3330'.
[  536.018946][T14419] ksmbd: Unknown IPC event: 10, ignore.
[  536.320915][T14430] netlink: 'syz.3.3333': attribute type 10 has an invalid length.
[  536.879382][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  536.898399][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  536.927065][T14070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.987487][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  536.998182][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  537.021199][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  537.031233][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  537.043495][T14070] device veth0_vlan entered promiscuous mode
[  537.055322][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  537.063967][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  537.077287][T14070] device veth1_vlan entered promiscuous mode
[  537.148714][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  537.169554][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  537.186826][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  537.196803][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  537.211256][T14070] device veth0_macvtap entered promiscuous mode
[  537.220269][T14451] netlink: 'syz.3.3348': attribute type 10 has an invalid length.
[  537.238901][T14451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3348'.
[  537.276591][T14451] device ipvlan1 entered promiscuous mode
[  537.298798][T14451] bridge0: port 3(ipvlan1) entered blocking state
[  537.317804][T14451] bridge0: port 3(ipvlan1) entered disabled state
[  537.340168][T14451] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  537.404585][T14070] device veth1_macvtap entered promiscuous mode
[  537.467414][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  537.484480][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  537.520179][T14461] netlink: 'syz.4.3340': attribute type 10 has an invalid length.
[  537.614991][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.662837][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.681734][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.697540][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.709711][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.732492][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.748660][T14070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.767096][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  537.800485][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  537.832446][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.843590][T14471] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3344'.
[  537.853573][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.864766][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.876019][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.907439][T14070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.924889][T14070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.939514][T14070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.951871][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  537.968787][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  537.982395][T14070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.999334][T14070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.009848][T14070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.025699][T14070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.122076][T14477] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3345'.
[  538.162151][T14477] ksmbd: Unknown IPC event: 10, ignore.
[  538.184250][T14480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.270630][ T5578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.303333][ T5578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.351801][T14075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  538.407664][T14075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.428164][T14482] netlink: 'syz.3.3347': attribute type 39 has an invalid length.
[  538.441749][T14075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.597581][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  538.750237][T14484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.792738][T14486] netlink: 'syz.2.3349': attribute type 10 has an invalid length.
[  539.751349][T14513] netlink: 'syz.2.3355': attribute type 10 has an invalid length.
[  539.789411][T14515] netlink: 'syz.0.3356': attribute type 10 has an invalid length.
[  540.619342][T14526] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3360'.
[  540.664041][T14526] ksmbd: Unknown IPC event: 10, ignore.
[  540.690470][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  540.703586][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  540.712434][T14532] netlink: 'syz.1.3362': attribute type 11 has an invalid length.
[  540.712516][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  540.735512][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  540.744389][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  540.751692][T14532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3362'.
[  540.753907][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  540.791209][T12993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.812589][T14532] netlink: 'syz.1.3362': attribute type 11 has an invalid length.
[  540.820800][T14532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3362'.
[  540.851590][T14530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.985858][T12993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.095542][T12993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.267770][T12993] device netdevsim0 left promiscuous mode
[  541.330225][T12993] bridge0: port 4(netdevsim0) entered disabled state
[  541.369771][T12993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.669670][T14531] chnl_net:caif_netlink_parms(): no params data found
[  542.781937][ T4289] Bluetooth: hci0: command 0x0409 tx timeout
[  543.107762][T14562] netlink: 'syz.1.3369': attribute type 10 has an invalid length.
[  543.557686][T14562] team0 (unregistering): Port device team_slave_0 removed
[  543.578233][T14583] FAULT_INJECTION: forcing a failure.
[  543.578233][T14583] name failslab, interval 1, probability 0, space 0, times 0
[  543.673944][T14583] CPU: 1 PID: 14583 Comm: syz.3.3372 Not tainted syzkaller #0
[  543.681470][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  543.691543][T14583] Call Trace:
[  543.694842][T14583]  <TASK>
[  543.697790][T14583]  dump_stack_lvl+0x188/0x24e
[  543.698392][T14562] team0 (unregistering): Port device team_slave_1 removed
[  543.702470][T14583]  ? show_regs_print_info+0x12/0x12
[  543.702492][T14583]  ? load_image+0x400/0x400
[  543.702515][T14583]  ? __might_sleep+0xd0/0xd0
[  543.702531][T14583]  ? __lock_acquire+0x7d10/0x7d10
[  543.702559][T14583]  should_fail_ex+0x399/0x4d0
[  543.702580][T14583]  should_failslab+0x5/0x20
[  543.702596][T14583]  slab_pre_alloc_hook+0x59/0x310
[  543.702617][T14583]  ? sk_prot_alloc+0xe7/0x210
[  543.702640][T14583]  __kmem_cache_alloc_node+0x4f/0x260
[  543.702662][T14583]  ? sk_prot_alloc+0xe7/0x210
[  543.702696][T14583]  __kmalloc+0xa0/0x240
[  543.702728][T14583]  sk_prot_alloc+0xe7/0x210
[  543.702748][T14583]  ? sk_alloc+0x20/0x340
[  543.702770][T14583]  sk_alloc+0x36/0x340
[  543.702790][T14583]  ? bpf_ctx_init+0x163/0x1a0
[  543.702810][T14583]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  543.785107][T14583]  bpf_prog_test_run_skb+0x35e/0x12a0
[  543.790481][T14583]  ? __fget_files+0x28/0x4b0
[  543.795070][T14583]  ? __fget_files+0x43d/0x4b0
[  543.799748][T14583]  ? cpu_online+0xa0/0xa0
[  543.804070][T14583]  bpf_prog_test_run+0x31e/0x390
[  543.809005][T14583]  __sys_bpf+0x62b/0x780
[  543.813244][T14583]  ? bpf_link_show_fdinfo+0x380/0x380
[  543.818620][T14583]  ? lock_chain_count+0x20/0x20
[  543.823475][T14583]  __x64_sys_bpf+0x78/0x90
[  543.827884][T14583]  do_syscall_64+0x4c/0xa0
[  543.832295][T14583]  ? clear_bhb_loop+0x60/0xb0
[  543.836967][T14583]  ? clear_bhb_loop+0x60/0xb0
[  543.841640][T14583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  543.847528][T14583] RIP: 0033:0x7fa22a59ce59
[  543.851936][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.871535][T14583] RSP: 002b:00007fa22b419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  543.879942][T14583] RAX: ffffffffffffffda RBX: 00007fa22a815fa0 RCX: 00007fa22a59ce59
[  543.887912][T14583] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  543.895890][T14583] RBP: 00007fa22b419090 R08: 0000000000000000 R09: 0000000000000000
[  543.903870][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.911856][T14583] R13: 00007fa22a816038 R14: 00007fa22a815fa0 R15: 00007ffe4a3b3608
[  543.919840][T14583]  </TASK>
[  543.991578][T14531] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.998847][T14531] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.042568][T14531] device bridge_slave_0 entered promiscuous mode
[  544.111102][T14531] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.123022][T14531] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.164296][T14531] device bridge_slave_1 entered promiscuous mode
[  544.287728][T14593] device bridge0 entered promiscuous mode
[  544.474070][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.612157][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.629619][T14606] netlink: 'syz.3.3377': attribute type 10 has an invalid length.
[  544.696064][T14610] netlink: 'syz.1.3380': attribute type 11 has an invalid length.
[  544.736794][T14610] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3380'.
[  544.778677][T14613] FAULT_INJECTION: forcing a failure.
[  544.778677][T14613] name failslab, interval 1, probability 0, space 0, times 0
[  544.849164][T14531] team0: Port device team_slave_0 added
[  544.861302][T14613] CPU: 0 PID: 14613 Comm: syz.1.3380 Not tainted syzkaller #0
[  544.868812][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.873319][T14531] team0: Port device team_slave_1 added
[  544.878863][T14613] Call Trace:
[  544.878872][T14613]  <TASK>
[  544.878880][T14613]  dump_stack_lvl+0x188/0x24e
[  544.878904][T14613]  ? show_regs_print_info+0x12/0x12
[  544.878920][T14613]  ? load_image+0x400/0x400
[  544.878945][T14613]  ? __might_sleep+0xd0/0xd0
[  544.878962][T14613]  ? __lock_acquire+0x7d10/0x7d10
[  544.878989][T14613]  should_fail_ex+0x399/0x4d0
[  544.879010][T14613]  should_failslab+0x5/0x20
[  544.879027][T14613]  slab_pre_alloc_hook+0x59/0x310
[  544.879048][T14613]  ? sk_prot_alloc+0xe7/0x210
[  544.879072][T14613]  __kmem_cache_alloc_node+0x4f/0x260
[  544.879095][T14613]  ? sk_prot_alloc+0xe7/0x210
[  544.879114][T14613]  __kmalloc+0xa0/0x240
[  544.879141][T14613]  sk_prot_alloc+0xe7/0x210
[  544.879159][T14613]  ? sk_alloc+0x20/0x340
[  544.879181][T14613]  sk_alloc+0x36/0x340
[  544.879199][T14613]  ? bpf_ctx_init+0x163/0x1a0
[  544.879219][T14613]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  544.879248][T14613]  bpf_prog_test_run_skb+0x35e/0x12a0
[  544.879269][T14613]  ? __fget_files+0x28/0x4b0
[  544.879292][T14613]  ? __fget_files+0x43d/0x4b0
[  544.879324][T14613]  ? cpu_online+0xa0/0xa0
[  544.879345][T14613]  bpf_prog_test_run+0x31e/0x390
[  544.879373][T14613]  __sys_bpf+0x62b/0x780
[  544.879397][T14613]  ? bpf_link_show_fdinfo+0x380/0x380
[  544.879433][T14613]  ? lock_chain_count+0x20/0x20
[  544.879463][T14613]  __x64_sys_bpf+0x78/0x90
[  544.879486][T14613]  do_syscall_64+0x4c/0xa0
[  544.879501][T14613]  ? clear_bhb_loop+0x60/0xb0
[  544.879523][T14613]  ? clear_bhb_loop+0x60/0xb0
[  544.879547][T14613]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.879569][T14613] RIP: 0033:0x7f5bdb99ce59
[  544.879587][T14613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.879602][T14613] RSP: 002b:00007f5bdc8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  544.879622][T14613] RAX: ffffffffffffffda RBX: 00007f5bdbc16090 RCX: 00007f5bdb99ce59
[  544.901791][ T4289] Bluetooth: hci0: command 0x041b tx timeout
[  544.905695][T14613] RDX: 0000000000000050 RSI: 00002000000018c0 RDI: 000000000000000a
[  544.905711][T14613] RBP: 00007f5bdc8f5090 R08: 0000000000000000 R09: 0000000000000000
[  544.905722][T14613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.905733][T14613] R13: 00007f5bdbc16128 R14: 00007f5bdbc16090 R15: 00007ffc0e080da8
[  544.992431][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.995150][T14613]  </TASK>
[  544.999366][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.178932][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.223557][T14607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.247654][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.266619][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.373637][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.628832][T14531] device hsr_slave_0 entered promiscuous mode
[  545.642944][T14531] device hsr_slave_1 entered promiscuous mode
[  545.649937][T14531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.666024][T14531] Cannot create hsr debugfs directory
[  545.893094][T14632] netlink: 'syz.1.3385': attribute type 10 has an invalid length.
[  546.198265][T14647] FAULT_INJECTION: forcing a failure.
[  546.198265][T14647] name failslab, interval 1, probability 0, space 0, times 0
[  546.252493][T14647] CPU: 0 PID: 14647 Comm: syz.2.3389 Not tainted syzkaller #0
[  546.260018][T14647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  546.270091][T14647] Call Trace:
[  546.273390][T14647]  <TASK>
[  546.276329][T14647]  dump_stack_lvl+0x188/0x24e
[  546.281025][T14647]  ? show_regs_print_info+0x12/0x12
[  546.286240][T14647]  ? load_image+0x400/0x400
[  546.290765][T14647]  ? __might_sleep+0xd0/0xd0
[  546.295367][T14647]  ? __lock_acquire+0x7d10/0x7d10
[  546.300414][T14647]  should_fail_ex+0x399/0x4d0
[  546.305115][T14647]  should_failslab+0x5/0x20
[  546.309632][T14647]  slab_pre_alloc_hook+0x59/0x310
[  546.314672][T14647]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  546.320671][T14647]  kmem_cache_alloc_node+0x5a/0x320
[  546.325883][T14647]  ? __alloc_skb+0xfc/0x7e0
[  546.330405][T14647]  __alloc_skb+0xfc/0x7e0
[  546.334743][T14647]  ? lockdep_hardirqs_on+0x94/0x140
[  546.339961][T14647]  alloc_skb_with_frags+0xa7/0x710
[  546.345144][T14647]  sock_alloc_send_pskb+0x87f/0x9a0
[  546.350377][T14647]  ? sock_kzfree_s+0x50/0x50
[  546.354992][T14647]  ? dev_get_by_index+0x1e/0x2d0
[  546.359946][T14647]  ? dev_get_by_index+0x1e/0x2d0
[  546.364898][T14647]  packet_sendmsg+0x32b0/0x4e60
[  546.369754][T14647]  ? __might_sleep+0xd0/0xd0
[  546.374337][T14647]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  546.380311][T14647]  ? lock_chain_count+0x20/0x20
[  546.385158][T14647]  ? aa_sk_perm+0x81f/0x950
[  546.389651][T14647]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  546.395889][T14647]  ? packet_getsockopt+0x9a0/0x9a0
[  546.400993][T14647]  ? fsm_init+0xf0/0x4d0
[  546.405223][T14647]  ? aa_sock_msg_perm+0x94/0x150
[  546.410154][T14647]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  546.415436][T14647]  ? security_socket_sendmsg+0x7c/0xa0
[  546.420894][T14647]  ? packet_getsockopt+0x9a0/0x9a0
[  546.425998][T14647]  ____sys_sendmsg+0x5be/0x970
[  546.430757][T14647]  ? __sys_sendmsg_sock+0x30/0x30
[  546.435766][T14647]  ? __import_iovec+0x315/0x500
[  546.440615][T14647]  ? import_iovec+0x6f/0xa0
[  546.445113][T14647]  ___sys_sendmsg+0x2a2/0x360
[  546.449783][T14647]  ? __sys_sendmsg+0x290/0x290
[  546.454551][T14647]  ? ktime_get_real_ts64+0x440/0x440
[  546.459843][T14647]  __se_sys_sendmsg+0x1bb/0x2a0
[  546.464684][T14647]  ? __x64_sys_sendmsg+0x80/0x80
[  546.469620][T14647]  ? lockdep_hardirqs_on+0x94/0x140
[  546.474811][T14647]  do_syscall_64+0x4c/0xa0
[  546.479214][T14647]  ? clear_bhb_loop+0x60/0xb0
[  546.483884][T14647]  ? clear_bhb_loop+0x60/0xb0
[  546.488556][T14647]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.494444][T14647] RIP: 0033:0x7fcb3ad9ce59
[  546.498847][T14647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.518442][T14647] RSP: 002b:00007fcb3bb7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.526844][T14647] RAX: ffffffffffffffda RBX: 00007fcb3b015fa0 RCX: 00007fcb3ad9ce59
[  546.534803][T14647] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000005
[  546.542764][T14647] RBP: 00007fcb3bb7c090 R08: 0000000000000000 R09: 0000000000000000
[  546.550720][T14647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.558677][T14647] R13: 00007fcb3b016038 R14: 00007fcb3b015fa0 R15: 00007ffe6c69b188
[  546.566649][T14647]  </TASK>
[  546.588953][T12993] bridge0: port 5(bond0) entered disabled state
[  546.618675][T12993] bridge0: port 3(dummy0) entered disabled state
[  546.650089][T12993] device bridge_slave_1 left promiscuous mode
[  546.665479][T12993] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.718008][T12993] device bridge_slave_0 left promiscuous mode
[  546.741939][T12993] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.793750][T12993] device veth1_vlan left promiscuous mode
[  546.799630][T12993] device veth0_vlan left promiscuous mode
[  546.952023][ T4289] Bluetooth: hci0: command 0x040f tx timeout
[  548.121291][T12993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.031734][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[  551.070143][T12993] device bond_slave_1 left promiscuous mode
[  551.138753][T12993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.148489][T12993] device bond_slave_0 left promiscuous mode
[  551.500671][T12993] bond0 (unregistering): Released all slaves
[  551.606136][T14666] netlink: 'syz.3.3393': attribute type 10 has an invalid length.
[  551.626446][T14669] netlink: 'syz.1.3391': attribute type 10 has an invalid length.
[  551.660257][T14685] netlink: 'syz.0.3398': attribute type 10 has an invalid length.
[  551.942768][T14705] device sit0 entered promiscuous mode
[  562.705307][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.711808][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  579.343017][ T4318] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2639 jiffies s: 51521 root: 0x2/.
[  579.401645][ T4318] rcu: blocking rcu_node structures (internal RCU debug):
[  579.408825][ T4318] Sending NMI from CPU 0 to CPUs 1:
[  579.414268][    C1] NMI backtrace for cpu 1
[  579.414278][    C1] CPU: 1 PID: 14713 Comm: syz.1.3407 Not tainted syzkaller #0
[  579.414292][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  579.414300][    C1] RIP: 0010:kasan_check_range+0x44/0x290
[  579.414325][    C1] Code: 82 0e 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 fa 01 00 00 49 bc 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 <49> ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1
[  579.414338][    C1] RSP: 0018:ffffc900001dfcf0 EFLAGS: 00000806
[  579.414352][    C1] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff81645972
[  579.414362][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90afd240
[  579.414372][    C1] RBP: ffffc900001dff70 R08: 000000000001ffff R09: 1ffffffff215fa48
[  579.414382][    C1] R10: dffffc0000000000 R11: fffffbfff215fa49 R12: dffffc0000000001
[  579.414394][    C1] R13: 0000000000000000 R14: 1ffffffff215fa48 R15: ffff8880241d64b8
[  579.414404][    C1] FS:  00007f5bdc9166c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  579.414417][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.414428][    C1] CR2: 00007f0145125490 CR3: 0000000059299000 CR4: 00000000003506e0
[  579.414441][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  579.414450][    C1] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  579.414460][    C1] Call Trace:
[  579.414465][    C1]  <IRQ>
[  579.414478][    C1]  __lock_acquire+0x5f2/0x7d10
[  579.414516][    C1]  ? perf_event_output_forward+0x282/0x2f0
[  579.414565][    C1]  ? mark_lock+0x94/0x320
[  579.414591][    C1]  ? verify_lock_unused+0x140/0x140
[  579.414607][    C1]  ? __lock_acquire+0x12f4/0x7d10
[  579.414624][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  579.414674][    C1]  ? perf_swevent_overflow+0x20c/0x230
[  579.414712][    C1]  lock_acquire+0x1bb/0x4a0
[  579.414729][    C1]  ? perf_output_begin_forward+0xa7/0xa80
[  579.414771][    C1]  ? read_lock_is_recursive+0x10/0x10
[  579.414795][    C1]  ? perf_tp_event+0xaac/0xc30
[  579.414815][    C1]  ? perf_tp_event+0xc30/0xc30
[  579.414857][    C1]  perf_output_begin_forward+0xc3/0xa80
[  579.414874][    C1]  ? perf_output_begin_forward+0xa7/0xa80
[  579.414920][    C1]  ? __perf_cgroup_move+0x150/0x150
[  579.414940][    C1]  ? perf_callchain+0x190/0x190
[  579.414982][    C1]  perf_event_output_forward+0x1ad/0x2f0
[  579.415005][    C1]  ? perf_event_output_forward+0xbe/0x2f0
[  579.415025][    C1]  ? perf_get_page_size+0x430/0x430
[  579.415059][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  579.415072][    C1]  ? sched_clock_cpu+0x6e/0x260
[  579.415100][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  579.415128][    C1]  __perf_event_overflow+0x448/0x610
[  579.415165][    C1]  perf_swevent_hrtimer+0x472/0x630
[  579.415198][    C1]  ? cpu_clock_event_read+0x50/0x50
[  579.415272][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  579.415296][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  579.415315][    C1]  ? _raw_spin_unlock+0x40/0x40
[  579.415356][    C1]  __hrtimer_run_queues+0x50b/0xd50
[  579.415390][    C1]  ? cpu_clock_event_read+0x50/0x50
[  579.415429][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  579.415449][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  579.415486][    C1]  hrtimer_interrupt+0x3c5/0x9c0
[  579.415560][    C1]  __sysvec_apic_timer_interrupt+0x153/0x5a0
[  579.415588][    C1]  sysvec_apic_timer_interrupt+0x4d/0xc0
[  579.415607][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  579.415625][    C1] RIP: 0010:kcov_remote_stop+0x24/0x6e0
[  579.415642][    C1] Code: e9 45 89 e0 eb 8c 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 65 4c 8b 35 2a d8 7f 7e 65 8b 05 2b d8 7f 7e a9 00 00 ff 00 74 0f <48> 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00
[  579.415653][    C1] RSP: 0018:ffffc900001e0970 EFLAGS: 00000206
[  579.415664][    C1] RAX: ca80d613d0c8d200 RBX: 00000000ffffffff RCX: ca80d613d0c8d200
[  579.415675][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60
[  579.415685][    C1] RBP: ffffc900001e0bf0 R08: ffffffff90afd247 R09: 1ffffffff215fa48
[  579.415696][    C1] R10: dffffc0000000000 R11: fffffbfff215fa49 R12: 0000000000000246
[  579.415706][    C1] R13: ffffffff8182976f R14: ffff8880241d5940 R15: ffff8880b8f2b170
[  579.415721][    C1]  ? kcov_remote_stop+0x6f/0x6e0
[  579.415771][    C1]  ? sta_info_hash_lookup+0x4a/0x60
[  579.415799][    C1]  ieee80211_rx_list+0x265c/0x2e60
[  579.415867][    C1]  ? ieee80211_check_fast_rx_iface+0x210/0x210
[  579.415905][    C1]  ? read_lock_is_recursive+0x10/0x10
[  579.415951][    C1]  ? ieee80211_rx_napi+0xd0/0x3d0
[  579.415966][    C1]  ieee80211_rx_napi+0x1ae/0x3d0
[  579.415989][    C1]  ? ieee80211_rx_list+0x2e60/0x2e60
[  579.416013][    C1]  ? skb_dequeue+0x120/0x150
[  579.416039][    C1]  ieee80211_handle_queued_frames+0x105/0x1b0
[  579.416066][    C1]  tasklet_action_common+0x2fe/0x4d0
[  579.416081][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  579.416101][    C1]  ? lockdep_hardirqs_on+0x11/0x140
[  579.416126][    C1]  ? trace_raw_output_tasklet+0xc0/0xc0
[  579.416172][    C1]  handle_softirqs+0x2a1/0x930
[  579.416205][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  579.416231][    C1]  ? do_softirq+0x210/0x210
[  579.416259][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  579.416281][    C1]  __irq_exit_rcu+0x13b/0x230
[  579.416297][    C1]  ? irq_exit_rcu+0x20/0x20
[  579.416338][    C1]  irq_exit_rcu+0x5/0x20
[  579.416350][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  579.416366][    C1]  </IRQ>
[  579.416370][    C1]  <TASK>
[  579.416377][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  579.416395][    C1] RIP: 0010:lock_acquire+0x225/0x4a0
[  579.416412][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04
[  579.416423][    C1] RSP: 0018:ffffc900043672e0 EFLAGS: 00000206
[  579.416434][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ca80d613d0c8d200
[  579.416443][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf1b60
[  579.416453][    C1] RBP: ffffc90004367400 R08: dffffc0000000000 R09: 1ffffffff215fa48
[  579.416463][    C1] R10: dffffc0000000000 R11: fffffbfff215fa49 R12: 0000000000000001
[  579.416473][    C1] R13: 1ffff9200086ce68 R14: 0000000000000246 R15: dffffc0000000000
[  579.416528][    C1]  ? __alloc_pages+0x294/0x4f0
[  579.416549][    C1]  ? trace_event_raw_event_lock+0x250/0x250
[  579.416568][    C1]  ? read_lock_is_recursive+0x10/0x10
[  579.416621][    C1]  _raw_spin_lock+0x2a/0x40
[  579.416635][    C1]  ? kasan_populate_vmalloc_pte+0x7f/0xf0
[  579.416652][    C1]  kasan_populate_vmalloc_pte+0x7f/0xf0
[  579.416665][    C1]  ? __apply_to_page_range+0x977/0xd10
[  579.416685][    C1]  __apply_to_page_range+0x989/0xd10
[  579.416718][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[  579.416748][    C1]  alloc_vmap_area+0x178f/0x18c0
[  579.416806][    C1]  ? vm_map_ram+0xab0/0xab0
[  579.416834][    C1]  ? rcu_is_watching+0x11/0xa0
[  579.416868][    C1]  __get_vm_area_node+0x158/0x330
[  579.416886][    C1]  ? __local_bh_enable_ip+0x136/0x1c0
[  579.416911][    C1]  __vmalloc_node_range+0x357/0x13b0
[  579.416930][    C1]  ? netlink_sendmsg+0x5ec/0xbd0
[  579.416959][    C1]  ? netlink_insert+0x1034/0x13c0
[  579.417017][    C1]  ? free_vm_area+0x50/0x50
[  579.417055][    C1]  ? netlink_sendmsg+0x5ec/0xbd0
[  579.417072][    C1]  vmalloc+0x75/0x80
[  579.417089][    C1]  ? netlink_sendmsg+0x5ec/0xbd0
[  579.417105][    C1]  netlink_sendmsg+0x5ec/0xbd0
[  579.417140][    C1]  ? netlink_getsockopt+0x550/0x550
[  579.417163][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  579.417187][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  579.417200][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  579.417226][    C1]  ? netlink_getsockopt+0x550/0x550
[  579.417240][    C1]  ____sys_sendmsg+0x5be/0x970
[  579.417276][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  579.417289][    C1]  ? __import_iovec+0x315/0x500
[  579.417325][    C1]  ? import_iovec+0x6f/0xa0
[  579.417351][    C1]  ___sys_sendmsg+0x2a2/0x360
[  579.417367][    C1]  ? try_to_wake_up+0x67c/0x1080
[  579.417397][    C1]  ? __sys_sendmsg+0x290/0x290
[  579.417520][    C1]  __se_sys_sendmsg+0x1bb/0x2a0
[  579.417533][    C1]  ? ct_nmi_exit+0x145/0x1c0
[  579.417555][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  579.417607][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  579.417635][    C1]  do_syscall_64+0x4c/0xa0
[  579.417647][    C1]  ? clear_bhb_loop+0x60/0xb0
[  579.417663][    C1]  ? clear_bhb_loop+0x60/0xb0
[  579.417687][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.417704][    C1] RIP: 0033:0x7f5bdb99ce59
[  579.417720][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.417732][    C1] RSP: 002b:00007f5bdc916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.417746][    C1] RAX: ffffffffffffffda RBX: 00007f5bdbc15fa0 RCX: 00007f5bdb99ce59
[  579.417756][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  579.417766][    C1] RBP: 00007f5bdba32d6f R08: 0000000000000000 R09: 0000000000000000
[  579.417775][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.417783][    C1] R13: 00007f5bdbc16038 R14: 00007f5bdbc15fa0 R15: 00007ffc0e080da8
[  579.417832][    C1]  </TASK>