last executing test programs:

25.116978315s ago: executing program 0 (id=2248):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0x4840)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x91}, 0x80, 0x0}, 0x20000001)

24.232907686s ago: executing program 0 (id=2269):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xe, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

24.230288876s ago: executing program 0 (id=2270):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x4, 0x0, 0x46fa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

23.949668473s ago: executing program 0 (id=2271):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x435, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x9)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

23.018551275s ago: executing program 0 (id=2286):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

22.360445191s ago: executing program 0 (id=2293):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x8, 0x9c6}, 0x40, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff)

17.986575374s ago: executing program 1 (id=2358):
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x9e7bbdebec26e2de)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.915738676s ago: executing program 4 (id=2359):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = getpid()
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0]}}], 0x38}, 0x8841)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x2f}, 0x28)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0xa}, 0x100410, 0x200, 0x2, 0x7, 0x4, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

17.915507106s ago: executing program 1 (id=2360):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x570, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000001e40), 0x4)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full', 0x20, 0x39, 0x20, 0xffffffff}, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

17.846018047s ago: executing program 1 (id=2362):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x1100, 0x0, 0x200000c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000df0000000000000000000001ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xf7)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r4 = openat$cgroup_pressure(r1, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x32)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x20000000}, @alu={0x4, 0x0, 0x4, 0x6, 0xb, 0x10, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x246, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x5, 0xc, 0xb}, {0x3, 0x3, 0x10, 0x7}, {0x3, 0x1, 0x10, 0x6}, {0x1, 0x4, 0x5, 0xb}, {0x3, 0x2, 0xe, 0x9}, {0x3, 0x5, 0x6, 0x1}, {0x4, 0x5, 0x4, 0x1}], 0x10, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f00000000c0), &(0x7f0000000400)=r8}, 0x20)
close(r2)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000241)

17.701733921s ago: executing program 2 (id=2363):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x16, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r9=>0x0})
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000)
r11 = socket$kcm(0x10, 0x3, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000500000004000000dd0a000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004000004000e"], 0x50)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000301000003000000003000000010000000000000700000000000000000000000d040017ffffffffffffff000400000000010000000000000843650000006100"], 0x0, 0x4b}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x10b8}, 0x20004c40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x92, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ff000000000000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000020000b702000014000000b7030000000000060000000000000000bf0900000000000055090100000000009500000000000000183d0000030000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000016a7879400000000"], &(0x7f00000004c0)='syzkaller\x00', 0x10, 0x1b, &(0x7f0000000500)=""/27, 0x20680, 0x40, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r12, r12], &(0x7f0000000900)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x5, 0x3, 0x1}, {0x0, 0x3, 0xa, 0x3}, {0x4, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x1, 0x9}, {0x1, 0x2, 0xc, 0x6}, {0x2, 0x3, 0xb}], 0x10, 0x7}, 0x94)

17.671035692s ago: executing program 3 (id=2364):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x20, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095000000000000002020e4bd8503f8ab2215f80bc72d5b764d019741c507000000920a5fea5629126f02f22fbe444467069b956e57cdd4b3434573eae5fb148b55fe50ecc9bb6eecf85aab6369"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)

17.568922064s ago: executing program 4 (id=2366):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2c00000011000000000000000700000007"], 0x30}, 0x24048090)

17.568469804s ago: executing program 4 (id=2367):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001440)=""/177, 0xb1}, {&(0x7f0000001040)}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/12, 0xc}, {&(0x7f0000001600)=""/2, 0x2}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/49, 0x31}, {&(0x7f0000001740)=""/11, 0xb}], 0x9}, 0x400100f4)

17.565915094s ago: executing program 3 (id=2368):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.oom.group\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='K'], 0x31)

17.503612605s ago: executing program 3 (id=2369):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000004000)=""/4099, 0x1003}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000240)=""/253, 0xfd}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x7}, 0xc3ffffffffffffff)

17.494262835s ago: executing program 2 (id=2370):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

17.459027166s ago: executing program 4 (id=2371):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)

17.374705078s ago: executing program 3 (id=2372):
socket$kcm(0x22, 0x2, 0x21)
close(0x3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x10, 0x0, 0x0, 0xb, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @perf_config_ext={0x8000000000000001, 0x8081}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000001)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40040)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0xfe33)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x33, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000400000000303030306100"/44], &(0x7f00000006c0)=""/248, 0x2c, 0xf8, 0x1, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ldst={0x3, 0x2, 0x0, 0x2, 0x0, 0x30, 0x12}, @map_val={0x18, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0xfc6b, 0x37, &(0x7f0000000500)=""/55, 0x41100, 0x28, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000008c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x10, 0x1, 0xf}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r3], &(0x7f0000000980)=[{0x4, 0x2, 0x0, 0xea992bf839f9741}, {0x1, 0x4, 0xd, 0xb}, {0x5, 0x3, 0x10, 0x2}, {0x4, 0x3, 0x11, 0xc}, {0x1, 0x4, 0xe, 0xa}], 0x10, 0xf}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc0880ead5b66fbcdce3d9eab556a705251e618294a83651f60a84c9f5d1938837e786a6d0bdd7fcf50e", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

17.372736398s ago: executing program 2 (id=2373):
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x9e7bbdebec26e2de)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.30747075s ago: executing program 4 (id=2374):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
r1 = socket$kcm(0x10, 0x7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000020000000000000000008500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000076"], 0xfe33)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
r4 = getpid()
syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/pid_for_children\x00')
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x40, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xe1f, 0x7ff}, 0x100000, 0x10001, 0x9, 0x5, 0xe0c, 0x3ff, 0xfff, 0x0, 0x5, 0x0, 0x8}, r4, 0x3, r3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000002081afb0a000200", 0x20}, {0x0}], 0x2, 0x0, 0x0, 0x5865}, 0x40000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
socket$kcm(0x10, 0x400000002, 0x0)

17.30649135s ago: executing program 3 (id=2375):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\t\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000300"/25], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000940)={r0, &(0x7f0000000780)="b563fa5fc7f6949ea62badca113a257d04ccf878ba29da8be80e86a6c7dae5e7acd525210098743f59018a92e1008a4c68316e1ea603bf8d90779efc41ac9efb9399248d5a0a313b2dd2fecf49d2", &(0x7f0000000840)=""/63, 0x4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000070085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64], 0x30}, 0x40880)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000002c0)="bae6064e230c7f7a4e4fc9db2dc058a6f289d54f05209d3e4317408ecb900355d14b45b3d3b7655e8845c2acde4e4063b0d4ea52131067884d84ad10e029ac59b51c6dedfec2235fabbc9b063782122fe228a64c3d7abbfe41b9b5f03348c8abdb26e179da46bda7e47d2a673624beddca9fb5688d51f486364bf507c60614cebca116cff768d8243ad8ff15034a8d1d5eecce4fdbdfec06d84813f037c51e891750c5f44dd651c43a1c9b0ebdcc3f03f245ff1f61eb6c1137982ae62c993b5d65f3aac743511b615f6b2fb54e87daef6dcd95e18d09a846fc95c8b86e6c17e99a", &(0x7f00000003c0)=""/14, &(0x7f0000000400)="396e41dd35be5340107b9537a228a4ce981c6ed0dd856a5480047f7d261be9b9c103c28c1005a3714cba907849d8f1af8ce4fd9e8c069218666705c34afc9539b6ba94b2469e830d9e2cf7bc01281788d600274d9e921e4d32995c61c06c6a48c20544cd68396a6c4d414e78430c5e0de7684715b3c251106eb58c7e06da0dddeb7ba88ba2218e66c8ad98b65b8b7f77373a", &(0x7f00000004c0)="5393d77a72e78ec50201715b1eb78f060ad4190f6d3e84b08c7377e5b13e9a6e5b6a22bedfbe4f25b9c2e705d9a8d38deab177c18694255a52df1f770ce8920648300723bf3c3467ccea008c308d40e8ef3e16887aa2a4efed73b0dad0b70c45809914558a9d937654c694c2b5f60f24f4dd23ab12a974576ff60a1df80dce91524fe3392a51efd3f8bb102e9a03fe2677ef84b16988e5", 0xd4fd, r5}, 0x38)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x4, 0x80000000}, {0xa, 0x1, 0x0, 0xc}], 0x10, 0x40004}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
close(0x3)
r10 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

17.119479055s ago: executing program 2 (id=2376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x5}, 0x114905, 0x4, 0x0, 0x4, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x3, 0xcc}, 0x80, 0x0}, 0x88010)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpid()
sendmsg$unix(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000500)="3f6f4413a7d85133dd7d4d19a5128cdb1e3dbfd72d47d514cbd4d21f97842087ffb097fd023e5d6a970780a5be6e8eb2eaa40ac35de98ece3aae32eaa868168947955efebc527ce9b0fd68c191ea96b3af6b280d06c2d5c3863781ee3566778419e40e68260ffd3d4ac79ab97dbaeb78204fe3acdb029a0330827cb9b96f726919df511d6248346e1c7b7c55f221133086b6ab3b93c667d646d87479be7093a90b58eaa2655ad2307a921cb0d1f39a7ad979b6a3a871192be973918505898d9a8b9048533546e8efabe92b562a614fae355b", 0xd2}, {&(0x7f0000000600)="824ec9da1fa35fbc6e5bd20b51e16b00a3915db88b60cf8ffcd52432b5ce20ad945f4ef2def72197c93e66c9bad0466afa838f69473e0055b81a3cf38e4d4605e5ab34291773ce754c49e5f7e1ca061c72a967aa7f3c00ccb6d98a5cdfb60aa37b4ad5ff087ece", 0x67}, {&(0x7f0000000680)}, {&(0x7f0000000700)="c3d76eecf96d44208a5dd6bd22f8ab818a1efb39343ea2dc6bdc63a73a66b6ac45a06914ee0cbc24fb8e75fee3afa85d6aeda096fec2f37b45a6961f6c98a4f78c9c5375ee5ac1c7f6a0b24a2e02661062d0ad188c94abe90675d712712de3aabccfd591675c6f629a304c7c3e3c32880bcdbe80b117f1518f35bdeaddc47f9addb22d3ba64ddf5ece7b3e3d50ad955f", 0x90}, {&(0x7f00000008c0)="40cbc618d1d7911769570746bb75df64bebb0598e57bb83f44361323a5b73338d6f350ec7a91e57b22ff59331f575899fb987261a1de814c7a4c78807322a435f3b8b5915db9f123a11d62217ed15574916e252dc106ebdf711e8580f7c2a566b9be0aa99d68112cab94578386ed29465153ecadbeee7ee1a1d0cd0b55", 0x7d}, {&(0x7f0000000a00)="b7d7d5b84b0397738a264579db0731232d35ba6ef6990190c49756741475e4693e5a89d871948d8ae5b9678689b67592c046f5bf6b892dd582bcadd06359ce205963ee34aadfd170252fd13c51c1df799c539c5cbdd2641107c487931d9f0d0e1703ca4da952759f4df2ded78c4d0c089edd23af4fd381d88894975ab8a8b05fdcef1ccf7ac03145dd0b343ec57f1d88a82735e7364b1870a4503cf6987bb63e5ee57c1ed69be46978ece14fb54d79fd5e79b16e878cc64670ba20b2641a99f1ce2506437c2faef71453a2eca680dfb85b3a2255076b37bbc742fba649b23fe4982e2c24b22f660c0476b0ce2e97900178ffa7464f", 0xf5}, {&(0x7f0000000b00)="575666eb9367731bc3036e227c07c2983d95378d4c7b60fdd96193a48edc6bf3e3edc176c557456e55b540882c774b188215268c32ff52a9e8d8373b06ac3bda6a4487e2c4c706222820d958b8ac55f3ed53933fe7cdb0d56715d8cd99689bd7080aab897b96f8f29d410bd09493c6b5fe82556d0f3f9e6642375a23e7a5eae700eed05f230799858811ffc7e5438b3669e54e897d59c512805bc071440b2f57739f12201e379da209a0e9db4df00a221942b94e", 0xb4}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xffffffffffffffff}}}], 0x20, 0x1}, 0x400c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000cc0)={r0, &(0x7f00000007c0)="f5543338cbea75acc04978c456a14aa1a54ce0dd56efd7637e06ae14092ce633a126d0f779d015a6364b33a8af510f4ecd2672ec0fabe47569e23e94bf0e3d0ea6637fd54f51d31f787cfc85d2d32bbc2234b5eafc94d08f5e519adb9b7cef962629a72786339f36dd9e61b86e21ea8d9e017a79c1767e0d0fe1d46195527a4d672f5f1a99490b07f47256aadfc08b222405537c984b4cc5950af9ad236503a2113f80351f98bace93c6", &(0x7f0000000c40)=""/103, 0x4}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e2", 0x68}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000c30d0000000000000000f02130d300"/28], 0x48)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r9, &(0x7f00000003c0)="64afad5984a23cd987a8f3d68f4dd2c4d4a0b58733a0251c1b357a356e30bba48f6a5ef7a0d8a05de5c1fc058fa91e2d68d45429d75f"}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000090850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc)

17.112473364s ago: executing program 4 (id=2377):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x6, 0x4, 0x7, 0x6, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, @perf_config_ext={0x2}, 0x111094, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) (async, rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) (async, rerun: 64)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x4, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x0, 0xfffffffffffffbf4, 0x0, 0x0, 0x401, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, @perf_config_ext={0x401d, 0xffffffffffffffff}, 0x0, 0x0, 0xfe}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) (async)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
close(r2) (async)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x11, 0x2, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async, rerun: 64)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r8 = socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000), 0x4)

17.044754317s ago: executing program 2 (id=2378):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x20, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095000000000000002020e4bd8503f8ab2215f80bc72d5b764d019741c507000000920a5fea5629126f02f22fbe444467069b956e57cdd4b3434573eae5fb148b55fe50ecc9bb6eecf85aab6369"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)

16.90896398s ago: executing program 1 (id=2379):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{}, [@exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x20}, 0x94)

16.9071527s ago: executing program 2 (id=2380):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x16, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r9=>0x0})
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000)
r11 = socket$kcm(0x10, 0x3, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000500000004000000dd0a000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004000004000e"], 0x50)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000301000003000000003000000010000000000000700000000000000000000000d040017ffffffffffffff000400000000010000000000000843650000006100"], 0x0, 0x4b}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x10b8}, 0x20004c40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x92, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ff000000000000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000020000b702000014000000b7030000000000060000000000000000bf0900000000000055090100000000009500000000000000183d0000030000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000016a7879400000000"], &(0x7f00000004c0)='syzkaller\x00', 0x10, 0x1b, &(0x7f0000000500)=""/27, 0x20680, 0x40, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r12, r12], &(0x7f0000000900)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x5, 0x3, 0x1}, {0x0, 0x3, 0xa, 0x3}, {0x4, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x1, 0x9}, {0x1, 0x2, 0xc, 0x6}, {0x2, 0x3, 0xb}], 0x10, 0x7}, 0x94)

16.87528724s ago: executing program 1 (id=2381):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001440)=""/177, 0xb1}, {&(0x7f0000001040)}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/12, 0xc}, {&(0x7f0000001600)=""/2, 0x2}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/49, 0x31}, {&(0x7f0000001740)=""/11, 0xb}], 0x9}, 0x400100f4)

16.632964336s ago: executing program 1 (id=2382):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000001640)=r2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea608641626f3650400390038000a007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c53b5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)

15.784407556s ago: executing program 3 (id=2383):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

1.439197286s ago: executing program 32 (id=2382):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000001640)=r2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea608641626f3650400390038000a007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c53b5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)

1.25273546s ago: executing program 33 (id=2380):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x16, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r9=>0x0})
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000)
r11 = socket$kcm(0x10, 0x3, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000500000004000000dd0a000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004000004000e"], 0x50)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000301000003000000003000000010000000000000700000000000000000000000d040017ffffffffffffff000400000000010000000000000843650000006100"], 0x0, 0x4b}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x10b8}, 0x20004c40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x92, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ff000000000000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000020000b702000014000000b7030000000000060000000000000000bf0900000000000055090100000000009500000000000000183d0000030000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000016a7879400000000"], &(0x7f00000004c0)='syzkaller\x00', 0x10, 0x1b, &(0x7f0000000500)=""/27, 0x20680, 0x40, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r12, r12], &(0x7f0000000900)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x5, 0x3, 0x1}, {0x0, 0x3, 0xa, 0x3}, {0x4, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x1, 0x9}, {0x1, 0x2, 0xc, 0x6}, {0x2, 0x3, 0xb}], 0x10, 0x7}, 0x94)

1.172830582s ago: executing program 34 (id=2377):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x6, 0x4, 0x7, 0x6, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, @perf_config_ext={0x2}, 0x111094, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) (async, rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) (async, rerun: 64)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x4, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x0, 0xfffffffffffffbf4, 0x0, 0x0, 0x401, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, @perf_config_ext={0x401d, 0xffffffffffffffff}, 0x0, 0x0, 0xfe}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) (async)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
close(r2) (async)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x11, 0x2, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async, rerun: 64)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r8 = socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000), 0x4)

0s ago: executing program 35 (id=2383):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

kernel console output (not intermixed with test programs):

T6743] netlink: 'syz.4.883': attribute type 10 has an invalid length.
[  128.211006][ T6746] netlink: 'syz.2.884': attribute type 3 has an invalid length.
[  128.271167][ T6749] netlink: 'syz.2.884': attribute type 3 has an invalid length.
[  128.567586][ T6768] netlink: 'syz.3.892': attribute type 9 has an invalid length.
[  128.650004][ T6772] netlink: 'syz.2.894': attribute type 10 has an invalid length.
[  128.788254][ T6772] bridge0: port 3(bond0) entered disabled state
[  128.825901][ T6772] device bond0 left promiscuous mode
[  128.835324][ T6772] device bond_slave_0 left promiscuous mode
[  128.847448][ T6772] device bond_slave_1 left promiscuous mode
[  128.862161][ T6772] bridge0: port 3(bond0) entered disabled state
[  128.959548][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.063082][ T6772] team0: Port device bond0 added
[  130.561901][ T6817] netlink: 'syz.3.909': attribute type 2 has an invalid length.
[  130.619401][ T6817] netlink: 'syz.3.909': attribute type 2 has an invalid length.
[  130.722490][ T6817] __nla_validate_parse: 10 callbacks suppressed
[  130.722535][ T6817] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.909'.
[  130.750600][ T6821] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.911'.
[  130.817465][ T6822] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[  130.822260][ T6817] openvswitch: netlink: Tunnel attr 255 out of range max 16
[  131.039717][ T6822] bridge0: port 3(bond0) entered disabled state
[  131.071880][ T6822] device bond0 left promiscuous mode
[  131.092923][ T6822] device bond_slave_1 left promiscuous mode
[  131.137476][ T6822] bridge0: port 3(bond0) entered disabled state
[  131.954743][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.981348][ T6822] team0: Port device bond0 added
[  132.000301][ T6835] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.210563][ T6854] device sit0 entered promiscuous mode
[  132.356842][ T6863] netlink: 195052 bytes leftover after parsing attributes in process `syz.3.923'.
[  132.460276][ T6869] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.924'.
[  132.534352][ T6869] openvswitch: netlink: Tunnel attr 16383 out of range max 16
[  132.621143][ T6867] netlink: 192 bytes leftover after parsing attributes in process `syz.0.922'.
[  132.636558][ T6873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  132.698811][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.705500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.927945][ T6881] validate_nla: 3 callbacks suppressed
[  132.927963][ T6881] netlink: 'syz.2.927': attribute type 8 has an invalid length.
[  133.001335][ T6881] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.927'.
[  133.103255][ T6889] netlink: 144 bytes leftover after parsing attributes in process `syz.4.930'.
[  134.007563][ T6909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.937'.
[  134.231281][ T6919] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.943'.
[  134.262766][ T6921] syz.3.944 uses obsolete (PF_INET,SOCK_PACKET)
[  134.456407][ T6931] netlink: 'syz.4.947': attribute type 2 has an invalid length.
[  134.466367][ T6931] netlink: 'syz.4.947': attribute type 2 has an invalid length.
[  134.489266][ T6931] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.947'.
[  134.508001][ T6931] openvswitch: netlink: Tunnel attr 16383 out of range max 16
[  134.659364][ T6934] netlink: 'syz.1.948': attribute type 10 has an invalid length.
[  134.742841][ T6934] device veth0_vlan left promiscuous mode
[  134.785694][ T6934] device veth0_vlan entered promiscuous mode
[  134.848389][ T6934] team0: Device veth0_vlan failed to register rx_handler
[  135.773153][ T6958] __nla_validate_parse: 2 callbacks suppressed
[  135.773168][ T6958] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.957'.
[  135.853105][ T6967] FAULT_INJECTION: forcing a failure.
[  135.853105][ T6967] name failslab, interval 1, probability 0, space 0, times 0
[  135.871928][ T6965] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.883934][ T6967] CPU: 1 PID: 6967 Comm: syz.4.961 Not tainted syzkaller #0
[  135.891255][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  135.901410][ T6967] Call Trace:
[  135.904707][ T6967]  <TASK>
[  135.907653][ T6967]  dump_stack_lvl+0x188/0x250
[  135.912436][ T6967]  ? show_regs_print_info+0x20/0x20
[  135.917647][ T6967]  ? load_image+0x410/0x410
[  135.922170][ T6967]  ? __lock_acquire+0x7d40/0x7d40
[  135.927248][ T6967]  ? mark_lock+0x94/0x320
[  135.931597][ T6967]  should_fail+0x383/0x4b0
[  135.936038][ T6967]  should_failslab+0x5/0x20
[  135.940560][ T6967]  slab_pre_alloc_hook+0x51/0xc0
[  135.945532][ T6967]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  135.951436][ T6967]  ? __get_vm_area_node+0x119/0x2d0
[  135.956730][ T6967]  __get_vm_area_node+0x119/0x2d0
[  135.961855][ T6967]  __vmalloc_node_range+0xef/0x8b0
[  135.966976][ T6967]  ? stack_map_alloc+0x305/0x550
[  135.971919][ T6967]  ? apparmor_capable+0x12c/0x190
[  135.976948][ T6967]  ? bpf_lsm_capable+0x5/0x10
[  135.981626][ T6967]  bpf_map_area_alloc+0xd4/0xe0
[  135.986557][ T6967]  ? stack_map_alloc+0x305/0x550
[  135.991513][ T6967]  stack_map_alloc+0x305/0x550
[  135.996273][ T6967]  map_create+0x481/0x2330
[  136.000783][ T6967]  ? bpf_lsm_bpf+0x5/0x10
[  136.005109][ T6967]  __sys_bpf+0x30a/0x6f0
[  136.009339][ T6967]  ? bpf_link_show_fdinfo+0x380/0x380
[  136.014714][ T6967]  __x64_sys_bpf+0x78/0x90
[  136.019207][ T6967]  do_syscall_64+0x4c/0xa0
[  136.023797][ T6967]  ? clear_bhb_loop+0x30/0x80
[  136.028463][ T6967]  ? clear_bhb_loop+0x30/0x80
[  136.033149][ T6967]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  136.039031][ T6967] RIP: 0033:0x7f1df4b65199
[  136.043436][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.063123][ T6967] RSP: 002b:00007f1df2dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  136.071535][ T6967] RAX: ffffffffffffffda RBX: 00007f1df4decfa0 RCX: 00007f1df4b65199
[  136.079507][ T6967] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000
[  136.087467][ T6967] RBP: 00007f1df2dbd090 R08: 0000000000000000 R09: 0000000000000000
[  136.095426][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.103385][ T6967] R13: 00007f1df4ded038 R14: 00007f1df4decfa0 R15: 00007ffdf4c4d9c8
[  136.111379][ T6967]  </TASK>
[  136.539928][ T6980] netlink: 'syz.3.966': attribute type 2 has an invalid length.
[  136.560133][ T6980] netlink: 'syz.3.966': attribute type 2 has an invalid length.
[  136.621650][ T6980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.966'.
[  136.637011][ T6980] openvswitch: netlink: Tunnel attr 16128 out of range max 16
[  137.401984][ T7010] netlink: 'syz.2.978': attribute type 2 has an invalid length.
[  137.417145][ T7010] netlink: 'syz.2.978': attribute type 2 has an invalid length.
[  137.485486][ T7010] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.978'.
[  137.495946][ T7010] openvswitch: netlink: Tunnel attr 16128 out of range max 16
[  137.653337][ T7021] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.984'.
[  137.805393][ T7024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.985'.
[  138.367087][ T7031] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.987'.
[  138.496826][ T7037] netlink: 'syz.2.991': attribute type 10 has an invalid length.
[  138.549961][ T7041] FAULT_INJECTION: forcing a failure.
[  138.549961][ T7041] name failslab, interval 1, probability 0, space 0, times 0
[  138.618579][ T7043] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.993'.
[  138.625162][ T7041] CPU: 0 PID: 7041 Comm: syz.3.992 Not tainted syzkaller #0
[  138.632666][ T7043] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.993'.
[  138.635154][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  138.635167][ T7041] Call Trace:
[  138.635174][ T7041]  <TASK>
[  138.635182][ T7041]  dump_stack_lvl+0x188/0x250
[  138.635207][ T7041]  ? show_regs_print_info+0x20/0x20
[  138.635224][ T7041]  ? load_image+0x410/0x410
[  138.635245][ T7041]  ? __lock_acquire+0x7d40/0x7d40
[  138.635272][ T7041]  should_fail+0x383/0x4b0
[  138.635298][ T7041]  should_failslab+0x5/0x20
[  138.635315][ T7041]  slab_pre_alloc_hook+0x51/0xc0
[  138.635336][ T7041]  __kmalloc+0x6b/0x340
[  138.697922][ T7041]  ? security_sk_alloc+0x47/0x130
[  138.703026][ T7041]  security_sk_alloc+0x47/0x130
[  138.707896][ T7041]  sk_prot_alloc+0x101/0x210
[  138.712514][ T7041]  ? sk_alloc+0x1d/0x310
[  138.716764][ T7041]  sk_alloc+0x2f/0x310
[  138.720838][ T7041]  bpf_prog_test_run_skb+0x23c/0x1190
[  138.726213][ T7041]  ? __fget_files+0x402/0x470
[  138.731109][ T7041]  ? cpu_online+0x60/0x60
[  138.735439][ T7041]  bpf_prog_test_run+0x31c/0x390
[  138.740384][ T7041]  __sys_bpf+0x5a5/0x6f0
[  138.744631][ T7041]  ? bpf_link_show_fdinfo+0x380/0x380
[  138.750024][ T7041]  __x64_sys_bpf+0x78/0x90
[  138.754449][ T7041]  do_syscall_64+0x4c/0xa0
[  138.758868][ T7041]  ? clear_bhb_loop+0x30/0x80
[  138.763549][ T7041]  ? clear_bhb_loop+0x30/0x80
[  138.768238][ T7041]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  138.774132][ T7041] RIP: 0033:0x7f2688f10199
[  138.778635][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.798239][ T7041] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  138.806656][ T7041] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  138.814623][ T7041] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  138.822588][ T7041] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  138.830559][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.838526][ T7041] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  138.846512][ T7041]  </TASK>
[  138.922352][ T7050] netlink: 132 bytes leftover after parsing attributes in process `syz.1.996'.
[  138.968717][ T7062] netlink: 'syz.3.999': attribute type 1 has an invalid length.
[  138.978651][ T7062] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.999'.
[  139.084429][ T7071] netlink: 'syz.2.1001': attribute type 10 has an invalid length.
[  139.974019][ T7085] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  140.030471][ T7090] FAULT_INJECTION: forcing a failure.
[  140.030471][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.044164][ T7090] CPU: 1 PID: 7090 Comm: syz.3.1009 Not tainted syzkaller #0
[  140.051554][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  140.061624][ T7090] Call Trace:
[  140.064908][ T7090]  <TASK>
[  140.067845][ T7090]  dump_stack_lvl+0x188/0x250
[  140.072532][ T7090]  ? show_regs_print_info+0x20/0x20
[  140.077738][ T7090]  ? load_image+0x410/0x410
[  140.082251][ T7090]  ? __lock_acquire+0x7d40/0x7d40
[  140.087435][ T7090]  ? lockdep_hardirqs_on+0x94/0x140
[  140.092646][ T7090]  should_fail+0x383/0x4b0
[  140.097076][ T7090]  _copy_to_user+0x2e/0x130
[  140.101587][ T7090]  simple_read_from_buffer+0xe3/0x150
[  140.106968][ T7090]  proc_fail_nth_read+0x1a6/0x220
[  140.112087][ T7090]  ? proc_fault_inject_write+0x310/0x310
[  140.117730][ T7090]  ? fsnotify_perm+0x254/0x560
[  140.122622][ T7090]  ? proc_fault_inject_write+0x310/0x310
[  140.128270][ T7090]  vfs_read+0x2ff/0xd50
[  140.132553][ T7090]  ? __lock_acquire+0x7d40/0x7d40
[  140.137595][ T7090]  ? kernel_read+0x1e0/0x1e0
[  140.142189][ T7090]  ? lockdep_hardirqs_on+0x94/0x140
[  140.147411][ T7090]  ? mutex_lock_nested+0x17/0x20
[  140.152353][ T7090]  ? __fdget_pos+0x2bf/0x370
[  140.156943][ T7090]  ? ksys_read+0x70/0x260
[  140.161279][ T7090]  ksys_read+0x153/0x260
[  140.165525][ T7090]  ? vfs_write+0xd70/0xd70
[  140.169944][ T7090]  ? lockdep_hardirqs_on+0x94/0x140
[  140.175147][ T7090]  do_syscall_64+0x4c/0xa0
[  140.179568][ T7090]  ? clear_bhb_loop+0x30/0x80
[  140.184254][ T7090]  ? clear_bhb_loop+0x30/0x80
[  140.188934][ T7090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.194915][ T7090] RIP: 0033:0x7f2688ed09ce
[  140.199330][ T7090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.218931][ T7090] RSP: 002b:00007f2687167fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.227361][ T7090] RAX: ffffffffffffffda RBX: 00007f26871686c0 RCX: 00007f2688ed09ce
[  140.235331][ T7090] RDX: 000000000000000f RSI: 00007f26871680a0 RDI: 0000000000000005
[  140.243302][ T7090] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  140.251272][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.259240][ T7090] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  140.267227][ T7090]  </TASK>
[  140.313555][ T7075] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  140.360846][ T7082] netlink: 'syz.1.1006': attribute type 10 has an invalid length.
[  140.470485][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.487817][ T7082] device bond0 entered promiscuous mode
[  140.493429][ T7082] device bond_slave_1 entered promiscuous mode
[  140.520281][ T7082] device bridge_slave_1 entered promiscuous mode
[  140.561679][ T7082] team0: Port device bond0 added
[  140.798509][ T7102] netlink: 'syz.2.1015': attribute type 21 has an invalid length.
[  140.816604][ T7102] __nla_validate_parse: 2 callbacks suppressed
[  140.816618][ T7102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1015'.
[  140.855935][ T7102] netlink: 'syz.2.1015': attribute type 1 has an invalid length.
[  140.907981][ T7105] netlink: 'syz.1.1014': attribute type 21 has an invalid length.
[  140.935200][ T7105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1014'.
[  141.848079][ T7119] netlink: 'syz.0.1019': attribute type 3 has an invalid length.
[  142.017972][ T7123] delete_channel: no stack
[  142.028064][ T7119] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.1019'.
[  142.058222][ T7128] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1022'.
[  142.147982][ T7134] netlink: 'syz.1.1021': attribute type 10 has an invalid length.
[  142.172975][ T7134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'.
[  144.321205][ T7170] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1036'.
[  144.523184][ T7175] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1038'.
[  144.856948][ T7180] delete_channel: no stack
[  145.088858][ T7180] netlink: 'syz.0.1039': attribute type 10 has an invalid length.
[  145.135159][ T7180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1039'.
[  145.756088][ T7196] FAULT_INJECTION: forcing a failure.
[  145.756088][ T7196] name failslab, interval 1, probability 0, space 0, times 0
[  145.871408][ T7196] CPU: 0 PID: 7196 Comm: syz.3.1047 Not tainted syzkaller #0
[  145.878848][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  145.889037][ T7196] Call Trace:
[  145.892340][ T7196]  <TASK>
[  145.895297][ T7196]  dump_stack_lvl+0x188/0x250
[  145.900050][ T7196]  ? show_regs_print_info+0x20/0x20
[  145.905283][ T7196]  ? load_image+0x410/0x410
[  145.909826][ T7196]  ? __might_sleep+0xf0/0xf0
[  145.914456][ T7196]  ? __lock_acquire+0x7d40/0x7d40
[  145.919530][ T7196]  should_fail+0x383/0x4b0
[  145.924001][ T7196]  should_failslab+0x5/0x20
[  145.928534][ T7196]  slab_pre_alloc_hook+0x51/0xc0
[  145.933516][ T7196]  kmem_cache_alloc_trace+0x47/0x290
[  145.938819][ T7196]  ? tcp_sendmsg_fastopen+0x1d5/0x600
[  145.944234][ T7196]  tcp_sendmsg_fastopen+0x1d5/0x600
[  145.949490][ T7196]  tcp_sendmsg_locked+0x2efb/0x3330
[  145.954771][ T7196]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  145.961412][ T7196]  ? mark_lock+0x94/0x320
[  145.965777][ T7196]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  145.971803][ T7196]  ? lock_chain_count+0x20/0x20
[  145.976684][ T7196]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  145.982709][ T7196]  ? tcp_free_fastopen_req+0x70/0x70
[  145.988069][ T7196]  tcp_sendmsg+0x2b/0x40
[  145.992329][ T7196]  ? inet_send_prepare+0x250/0x250
[  145.997463][ T7196]  ____sys_sendmsg+0x5be/0x8f0
[  146.002284][ T7196]  ? __sys_sendmsg_sock+0x30/0x30
[  146.007348][ T7196]  ? import_iovec+0x6f/0xa0
[  146.011877][ T7196]  ___sys_sendmsg+0x236/0x2e0
[  146.016604][ T7196]  ? __sys_sendmsg+0x290/0x290
[  146.021493][ T7196]  __se_sys_sendmsg+0x1b7/0x2a0
[  146.026466][ T7196]  ? __x64_sys_sendmsg+0x80/0x80
[  146.031416][ T7196]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  146.037459][ T7196]  ? lockdep_hardirqs_on+0x94/0x140
[  146.042680][ T7196]  do_syscall_64+0x4c/0xa0
[  146.047119][ T7196]  ? clear_bhb_loop+0x30/0x80
[  146.051813][ T7196]  ? clear_bhb_loop+0x30/0x80
[  146.056595][ T7196]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  146.062502][ T7196] RIP: 0033:0x7f2688f10199
[  146.066944][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.086565][ T7196] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.094990][ T7196] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  146.102977][ T7196] RDX: 0000000020000241 RSI: 00002000000006c0 RDI: 0000000000000003
[  146.110978][ T7196] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  146.118971][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.127131][ T7196] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  146.135184][ T7196]  </TASK>
[  146.660899][ T7212] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1052'.
[  147.096113][ T7219] delete_channel: no stack
[  147.346954][ T7227] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1059'.
[  147.527413][ T7232] netlink: 'syz.0.1060': attribute type 29 has an invalid length.
[  147.577896][ T7232] netlink: 'syz.0.1060': attribute type 29 has an invalid length.
[  147.755248][ T7235] netlink: 'syz.0.1060': attribute type 29 has an invalid length.
[  148.078854][ T7240] netlink: 'syz.1.1064': attribute type 10 has an invalid length.
[  149.107144][ T7255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1070'.
[  150.447496][ T7292] netlink: 'syz.2.1083': attribute type 13 has an invalid length.
[  150.583776][ T7292] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1083'.
[  150.945746][ T7298] FAULT_INJECTION: forcing a failure.
[  150.945746][ T7298] name failslab, interval 1, probability 0, space 0, times 0
[  151.006480][ T7298] CPU: 1 PID: 7298 Comm: syz.3.1087 Not tainted syzkaller #0
[  151.013915][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  151.023997][ T7298] Call Trace:
[  151.027300][ T7298]  <TASK>
[  151.030253][ T7298]  dump_stack_lvl+0x188/0x250
[  151.034960][ T7298]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  151.041578][ T7298]  ? show_regs_print_info+0x20/0x20
[  151.046807][ T7298]  ? load_image+0x410/0x410
[  151.051389][ T7298]  should_fail+0x383/0x4b0
[  151.055855][ T7298]  should_failslab+0x5/0x20
[  151.060377][ T7298]  slab_pre_alloc_hook+0x51/0xc0
[  151.065350][ T7298]  kmem_cache_alloc_node+0x47/0x2c0
[  151.070563][ T7298]  ? __alloc_skb+0xf4/0x750
[  151.075120][ T7298]  __alloc_skb+0xf4/0x750
[  151.079493][ T7298]  wireless_send_event+0x2ad/0xb60
[  151.084644][ T7298]  ? __cfg80211_wext_siwmode+0x158/0x290
[  151.090323][ T7298]  ? wireless_nlevent_flush+0x100/0x100
[  151.095917][ T7298]  ? apparmor_capable+0x12c/0x190
[  151.100965][ T7298]  ? full_name_hash+0x8e/0xe0
[  151.105692][ T7298]  ioctl_standard_call+0x126/0x250
[  151.110833][ T7298]  ? __cfg80211_wext_giwfreq+0x770/0x770
[  151.116581][ T7298]  ? __cfg80211_wext_giwfreq+0x770/0x770
[  151.122251][ T7298]  wext_ioctl_dispatch+0x3da/0x470
[  151.127385][ T7298]  ? wext_ioctl_dispatch+0x470/0x470
[  151.132825][ T7298]  ? iw_handler_get_private+0x1e0/0x1e0
[  151.138417][ T7298]  wext_handle_ioctl+0x114/0x1d0
[  151.143395][ T7298]  ? call_commit_handler+0xf0/0xf0
[  151.148586][ T7298]  sock_ioctl+0x143/0x700
[  151.153063][ T7298]  ? sock_poll+0x420/0x420
[  151.157551][ T7298]  ? bpf_lsm_file_ioctl+0x5/0x10
[  151.162603][ T7298]  ? security_file_ioctl+0x7c/0xa0
[  151.167753][ T7298]  ? sock_poll+0x420/0x420
[  151.172199][ T7298]  __se_sys_ioctl+0xfa/0x170
[  151.176822][ T7298]  do_syscall_64+0x4c/0xa0
[  151.181262][ T7298]  ? clear_bhb_loop+0x30/0x80
[  151.185959][ T7298]  ? clear_bhb_loop+0x30/0x80
[  151.190672][ T7298]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.196584][ T7298] RIP: 0033:0x7f2688f10199
[  151.201024][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.220658][ T7298] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  151.229194][ T7298] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  151.237210][ T7298] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000008
[  151.245294][ T7298] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  151.253276][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.261249][ T7298] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  151.269360][ T7298]  </TASK>
[  153.043779][ T7333] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1101'.
[  153.134249][ T7333] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  153.164281][ T7333] CPU: 0 PID: 7333 Comm: syz.3.1101 Not tainted syzkaller #0
[  153.171717][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  153.181796][ T7333] Call Trace:
[  153.185097][ T7333]  <TASK>
[  153.188072][ T7333]  dump_stack_lvl+0x188/0x250
[  153.192787][ T7333]  ? show_regs_print_info+0x20/0x20
[  153.198021][ T7333]  ? load_image+0x410/0x410
[  153.202591][ T7333]  sysfs_warn_dup+0x8a/0xa0
[  153.207128][ T7333]  sysfs_do_create_link_sd+0xc0/0x110
[  153.212549][ T7333]  device_add+0x83b/0x1050
[  153.217019][ T7333]  wiphy_register+0x1e74/0x2c40
[  153.221961][ T7333]  ? cfg80211_event_work+0x40/0x40
[  153.227104][ T7333]  ? minstrel_ht_alloc+0x807/0x980
[  153.232375][ T7333]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  153.238502][ T7333]  ieee80211_register_hw+0x2a03/0x3a60
[  153.244010][ T7333]  ? ieee80211_register_hw+0xb11/0x3a60
[  153.249582][ T7333]  ? ieee80211_tasklet_handler+0x20/0x20
[  153.255231][ T7333]  ? rcu_is_watching+0x11/0xa0
[  153.260005][ T7333]  ? hrtimer_init+0x10c/0x220
[  153.264718][ T7333]  mac80211_hwsim_new_radio+0x209d/0x4050
[  153.270519][ T7333]  hwsim_new_radio_nl+0xa7d/0xc50
[  153.275596][ T7333]  genl_rcv_msg+0xd0b/0xfa0
[  153.280162][ T7333]  ? genl_bind+0x370/0x370
[  153.284619][ T7333]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  153.290966][ T7333]  ? verify_lock_unused+0x140/0x140
[  153.296174][ T7333]  ? perf_trace_lock_acquire+0x341/0x3f0
[  153.301838][ T7333]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  153.308442][ T7333]  ? dev_queue_xmit+0x20/0x20
[  153.313123][ T7333]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  153.319484][ T7333]  netlink_rcv_skb+0x1e9/0x430
[  153.324257][ T7333]  ? genl_bind+0x370/0x370
[  153.328678][ T7333]  ? netlink_ack+0xb10/0xb10
[  153.333292][ T7333]  ? down_read+0x1aa/0x2e0
[  153.337715][ T7333]  genl_rcv+0x24/0x40
[  153.341710][ T7333]  netlink_unicast+0x78f/0x940
[  153.346534][ T7333]  netlink_sendmsg+0x8ba/0xbe0
[  153.351321][ T7333]  ? netlink_getsockopt+0x570/0x570
[  153.356521][ T7333]  ? aa_sock_msg_perm+0x94/0x150
[  153.361466][ T7333]  ? apparmor_socket_sendmsg+0x88/0x230
[  153.367016][ T7333]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  153.372303][ T7333]  ? security_socket_sendmsg+0x7c/0xa0
[  153.377766][ T7333]  ? netlink_getsockopt+0x570/0x570
[  153.382979][ T7333]  ____sys_sendmsg+0x5be/0x8f0
[  153.387770][ T7333]  ? __sys_sendmsg_sock+0x30/0x30
[  153.392842][ T7333]  ? import_iovec+0x6f/0xa0
[  153.397377][ T7333]  ___sys_sendmsg+0x236/0x2e0
[  153.402074][ T7333]  ? __sys_sendmsg+0x290/0x290
[  153.407096][ T7333]  __se_sys_sendmsg+0x1b7/0x2a0
[  153.411968][ T7333]  ? __x64_sys_sendmsg+0x80/0x80
[  153.416936][ T7333]  ? syscall_enter_from_user_mode+0x2a/0x70
[  153.422849][ T7333]  do_syscall_64+0x4c/0xa0
[  153.427274][ T7333]  ? clear_bhb_loop+0x30/0x80
[  153.431958][ T7333]  ? clear_bhb_loop+0x30/0x80
[  153.436664][ T7333]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.442574][ T7333] RIP: 0033:0x7f2688f10199
[  153.446994][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.466601][ T7333] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.475020][ T7333] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  153.482986][ T7333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  153.490960][ T7333] RBP: 00007f2688fa7888 R08: 0000000000000000 R09: 0000000000000000
[  153.498956][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.506923][ T7333] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  153.515016][ T7333]  </TASK>
[  153.680013][ T7346] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1103'.
[  153.714250][ T7346] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  153.755370][ T7340] netlink: 'syz.1.1103': attribute type 2 has an invalid length.
[  153.848048][ T7345] netlink: 'syz.1.1103': attribute type 2 has an invalid length.
[  154.141720][ T7357] FAULT_INJECTION: forcing a failure.
[  154.141720][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.275154][ T7357] CPU: 0 PID: 7357 Comm: syz.1.1108 Not tainted syzkaller #0
[  154.282587][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  154.292684][ T7357] Call Trace:
[  154.295990][ T7357]  <TASK>
[  154.298938][ T7357]  dump_stack_lvl+0x188/0x250
[  154.303625][ T7357]  ? show_regs_print_info+0x20/0x20
[  154.308829][ T7357]  ? load_image+0x410/0x410
[  154.313336][ T7357]  ? __lock_acquire+0x7d40/0x7d40
[  154.318366][ T7357]  should_fail+0x383/0x4b0
[  154.322787][ T7357]  _copy_from_user+0x2e/0x170
[  154.327468][ T7357]  __copy_msghdr_from_user+0xc9/0x630
[  154.332849][ T7357]  ? verify_lock_unused+0x140/0x140
[  154.338153][ T7357]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  154.343451][ T7357]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  154.349362][ T7357]  ___sys_sendmsg+0x19a/0x2e0
[  154.354078][ T7357]  ? __sys_sendmsg+0x290/0x290
[  154.358924][ T7357]  __se_sys_sendmsg+0x1b7/0x2a0
[  154.363864][ T7357]  ? __x64_sys_sendmsg+0x80/0x80
[  154.368797][ T7357]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  154.374811][ T7357]  ? lockdep_hardirqs_on+0x94/0x140
[  154.380029][ T7357]  do_syscall_64+0x4c/0xa0
[  154.384446][ T7357]  ? clear_bhb_loop+0x30/0x80
[  154.389121][ T7357]  ? clear_bhb_loop+0x30/0x80
[  154.393814][ T7357]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  154.399701][ T7357] RIP: 0033:0x7fc704055199
[  154.404116][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.423718][ T7357] RSP: 002b:00007fc7022ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.432137][ T7357] RAX: ffffffffffffffda RBX: 00007fc7042dcfa0 RCX: 00007fc704055199
[  154.440105][ T7357] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000003
[  154.448076][ T7357] RBP: 00007fc7022ad090 R08: 0000000000000000 R09: 0000000000000000
[  154.456138][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.464288][ T7357] R13: 00007fc7042dd038 R14: 00007fc7042dcfa0 R15: 00007ffe39be6248
[  154.472300][ T7357]  </TASK>
[  155.329007][ T7380] netlink: 'syz.1.1118': attribute type 2 has an invalid length.
[  155.381459][ T7380] netlink: 'syz.1.1118': attribute type 2 has an invalid length.
[  155.577280][ T7380] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1118'.
[  155.605610][ T7380] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  156.489749][ T7393] device syzkaller0 entered promiscuous mode
[  156.570423][ T7410] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1127'.
[  156.604364][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  156.636794][ T7410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.701461][ T7411] netlink: 'syz.2.1129': attribute type 39 has an invalid length.
[  156.715167][ T7411] device macvlan0 entered promiscuous mode
[  156.973267][ T7422] netlink: 'syz.2.1133': attribute type 39 has an invalid length.
[  157.042759][ T7425] netlink: 'syz.4.1134': attribute type 2 has an invalid length.
[  157.083446][ T7425] netlink: 'syz.4.1134': attribute type 2 has an invalid length.
[  157.221702][ T7425] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1134'.
[  157.284603][ T7425] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  158.146258][ T7453] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1142'.
[  158.315253][ T7478] netlink: 'syz.3.1148': attribute type 2 has an invalid length.
[  158.365652][ T7479] netlink: 'syz.3.1148': attribute type 2 has an invalid length.
[  158.437683][ T7478] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1148'.
[  158.447524][ T7478] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  159.624592][ T7505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  159.709457][ T7515] netlink: 'syz.1.1164': attribute type 10 has an invalid length.
[  159.788971][ T7517] netlink: 'syz.2.1165': attribute type 2 has an invalid length.
[  159.804896][ T7522] netlink: 'syz.2.1165': attribute type 2 has an invalid length.
[  159.850427][ T7517] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1165'.
[  159.891015][ T7517] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  159.990310][ T7528] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1169'.
[  160.629457][ T7527] delete_channel: no stack
[  160.899034][ T7545] netlink: 'syz.3.1177': attribute type 39 has an invalid length.
[  160.951341][ T7557] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1182'.
[  161.038772][ T7567] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1181'.
[  161.051669][ T7567] openvswitch: netlink: Tunnel attr 4 has unexpected len 8 expected 1
[  161.793249][ T7553] netlink: 'syz.0.1181': attribute type 2 has an invalid length.
[  161.810608][ T7563] netlink: 'syz.0.1181': attribute type 2 has an invalid length.
[  162.153026][ T7580] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1189'.
[  162.186262][ T7580] netlink: zone id is out of range
[  162.191749][ T7580] netlink: zone id is out of range
[  162.234434][ T7580] netlink: zone id is out of range
[  162.258025][ T7580] netlink: zone id is out of range
[  162.282474][ T7580] netlink: zone id is out of range
[  162.295699][ T7580] netlink: zone id is out of range
[  162.312667][ T7580] netlink: zone id is out of range
[  162.347369][ T7580] netlink: zone id is out of range
[  162.411904][ T7598] netlink: 'syz.2.1196': attribute type 2 has an invalid length.
[  162.430660][ T7598] netlink: 'syz.2.1196': attribute type 2 has an invalid length.
[  162.492744][ T7598] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1196'.
[  162.767504][ T7609] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1199'.
[  163.294656][ T7619] netlink: 'syz.4.1202': attribute type 10 has an invalid length.
[  163.344378][ T7619] device vxcan1 entered promiscuous mode
[  163.356695][ T7619] team0: Device vxcan1 is of different type
[  163.473865][ T7630] netlink: 'syz.3.1209': attribute type 2 has an invalid length.
[  163.502463][ T7630] netlink: 'syz.3.1209': attribute type 2 has an invalid length.
[  163.546019][ T7630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1209'.
[  164.162807][ T7622] delete_channel: no stack
[  164.534304][ T7669] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1219'.
[  164.680067][ T7680] netlink: 'syz.2.1226': attribute type 2 has an invalid length.
[  164.700437][ T7680] netlink: 'syz.2.1226': attribute type 2 has an invalid length.
[  164.782557][ T7680] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1226'.
[  165.439040][ T7714] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1237'.
[  165.765666][ T7717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1238'.
[  165.794455][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  165.893073][ T7717] net_ratelimit: 166 callbacks suppressed
[  165.893107][ T7717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.994632][ T7722] netlink: 'syz.1.1240': attribute type 2 has an invalid length.
[  166.080943][ T7725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1242'.
[  166.222398][ T7722] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1240'.
[  166.254933][ T7722] openvswitch: netlink: Tunnel attr 255 out of range max 16
[  166.805557][ T7750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1252'.
[  166.816513][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  166.840143][ T7750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.613362][ T7774] validate_nla: 1 callbacks suppressed
[  167.613382][ T7774] netlink: 'syz.4.1258': attribute type 21 has an invalid length.
[  167.684020][ T7771] netlink: 'syz.3.1259': attribute type 21 has an invalid length.
[  167.728635][ T7771] netlink: 'syz.3.1259': attribute type 6 has an invalid length.
[  167.765500][ T7771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1259'.
[  169.461612][ T7863] device syzkaller0 entered promiscuous mode
[  170.250326][ T7879] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1312'.
[  170.415289][ T7893] FAULT_INJECTION: forcing a failure.
[  170.415289][ T7893] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.470414][ T7893] CPU: 1 PID: 7893 Comm: syz.3.1307 Not tainted syzkaller #0
[  170.477827][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  170.487921][ T7893] Call Trace:
[  170.491213][ T7893]  <TASK>
[  170.494156][ T7893]  dump_stack_lvl+0x188/0x250
[  170.498848][ T7893]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  170.505022][ T7893]  ? show_regs_print_info+0x20/0x20
[  170.510241][ T7893]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  170.513581][ T7898] netlink: 'syz.1.1310': attribute type 2 has an invalid length.
[  170.516422][ T7893]  ? dump_stack+0x5/0x20
[  170.516481][ T7893]  should_fail+0x383/0x4b0
[  170.516506][ T7893]  _copy_to_user+0x2e/0x130
[  170.516525][ T7893]  simple_read_from_buffer+0xe3/0x150
[  170.516548][ T7893]  proc_fail_nth_read+0x1a6/0x220
[  170.516571][ T7893]  ? proc_fault_inject_write+0x310/0x310
[  170.516594][ T7893]  ? fsnotify_perm+0x254/0x560
[  170.516621][ T7893]  ? proc_fault_inject_write+0x310/0x310
[  170.516649][ T7893]  vfs_read+0x2ff/0xd50
[  170.516676][ T7893]  ? __lock_acquire+0x7d40/0x7d40
[  170.516706][ T7893]  ? kernel_read+0x1e0/0x1e0
[  170.516721][ T7893]  ? rcu_nmi_exit+0x6f/0xf0
[  170.516769][ T7893]  ? mutex_lock_nested+0x17/0x20
[  170.516786][ T7893]  ? __fdget_pos+0x2bf/0x370
[  170.516801][ T7893]  ? ksys_read+0x70/0x260
[  170.516827][ T7893]  ksys_read+0x153/0x260
[  170.516846][ T7893]  ? vfs_write+0xd70/0xd70
[  170.516865][ T7893]  ? syscall_enter_from_user_mode+0x2a/0x70
[  170.516895][ T7893]  do_syscall_64+0x4c/0xa0
[  170.516917][ T7893]  ? clear_bhb_loop+0x30/0x80
[  170.516936][ T7893]  ? clear_bhb_loop+0x30/0x80
[  170.516955][ T7893]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  170.516974][ T7893] RIP: 0033:0x7f2688ed09ce
[  170.516992][ T7893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  170.517007][ T7893] RSP: 002b:00007f2687167fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.517027][ T7893] RAX: ffffffffffffffda RBX: 00007f26871686c0 RCX: 00007f2688ed09ce
[  170.517040][ T7893] RDX: 000000000000000f RSI: 00007f26871680a0 RDI: 0000000000000005
[  170.517051][ T7893] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  170.517063][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.517073][ T7893] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  170.517098][ T7893]  </TASK>
[  170.721501][ T7909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1310'.
[  170.731116][ T7909] openvswitch: netlink: Tunnel attr 4 has unexpected len 8 expected 1
[  170.743778][ T7903] netlink: 'syz.1.1310': attribute type 2 has an invalid length.
[  170.830213][ T7906] netlink: 'syz.3.1311': attribute type 21 has an invalid length.
[  170.993007][ T7900] device syzkaller0 entered promiscuous mode
[  171.355597][ T7924] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1318'.
[  171.489631][ T7937] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1321'.
[  171.503882][ T7940] netlink: 'syz.4.1324': attribute type 2 has an invalid length.
[  171.530469][ T7940] netlink: 'syz.4.1324': attribute type 2 has an invalid length.
[  171.565396][ T7940] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1324'.
[  171.584999][ T7940] openvswitch: netlink: Tunnel attr 16383 out of range max 16
[  171.765701][ T7953] netlink: 'syz.3.1326': attribute type 2 has an invalid length.
[  171.805742][ T7953] netlink: 'syz.3.1326': attribute type 2 has an invalid length.
[  171.842709][ T7961] delete_channel: no stack
[  171.871195][ T7953] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1326'.
[  171.881308][ T7953] openvswitch: netlink: Tunnel attr 4 has unexpected len 8 expected 1
[  171.905241][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'.
[  171.933680][ T7958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.951576][ T7958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  172.043571][ T7967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1332'.
[  172.142622][ T7977] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1337'.
[  172.233115][ T7981] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1338'.
[  172.242529][ T7981] device hsr_slave_0 left promiscuous mode
[  172.286766][ T7981] device hsr_slave_1 left promiscuous mode
[  172.410963][ T7995] delete_channel: no stack
[  172.788853][ T8016] validate_nla: 3 callbacks suppressed
[  172.788871][ T8016] netlink: 'syz.4.1354': attribute type 10 has an invalid length.
[  173.003815][ T8025] netlink: 'syz.0.1355': attribute type 2 has an invalid length.
[  173.011930][ T8025] netlink: 'syz.0.1355': attribute type 9 has an invalid length.
[  173.021186][ T8025] netlink: 'syz.0.1355': attribute type 10 has an invalid length.
[  173.033918][ T8020] 
€Â: renamed from syzkaller0
[  173.093835][ T8027] delete_channel: no stack
[  173.150467][ T8029] netlink: 'syz.3.1358': attribute type 3 has an invalid length.
[  173.151116][ T8027] netlink: 'syz.2.1357': attribute type 10 has an invalid length.
[  173.169310][ T8029] netlink: 'syz.3.1358': attribute type 1 has an invalid length.
[  174.240966][ T8055] netlink: 'syz.3.1370': attribute type 10 has an invalid length.
[  174.355784][ T8058] netlink: 'syz.0.1369': attribute type 9 has an invalid length.
[  174.435064][ T8067] netlink: 'syz.1.1372': attribute type 7 has an invalid length.
[  175.566848][ T8102] __nla_validate_parse: 16 callbacks suppressed
[  175.566865][ T8102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1384'.
[  175.609886][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  175.623997][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.723309][ T8105] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1387'.
[  175.735057][ T4725] Bluetooth: hci3: command 0x0406 tx timeout
[  175.741103][ T4725] Bluetooth: hci2: command 0x0406 tx timeout
[  175.748160][ T5378] Bluetooth: hci0: command 0x0406 tx timeout
[  175.751414][ T4725] Bluetooth: hci1: command 0x0406 tx timeout
[  175.761625][ T4725] Bluetooth: hci4: command 0x0406 tx timeout
[  175.942864][ T8125] delete_channel: no stack
[  175.976968][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  176.085390][ T8133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1398'.
[  176.233783][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1400'.
[  177.950680][ T8181] validate_nla: 6 callbacks suppressed
[  177.950702][ T8181] netlink: 'syz.1.1415': attribute type 2 has an invalid length.
[  177.974492][ T8181] netlink: 'syz.1.1415': attribute type 9 has an invalid length.
[  177.994866][ T8181] netlink: 'syz.1.1415': attribute type 10 has an invalid length.
[  178.017507][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'.
[  178.039716][ T8184] 
€Â: renamed from syzkaller0
[  178.380169][ T8202] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1426'.
[  178.498691][ T8203] netlink: 'syz.3.1426': attribute type 1 has an invalid length.
[  178.527068][ T8203] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1426'.
[  179.493679][ T8238] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1436'.
[  180.642137][ T8262] syz.2.1444 (8262) used greatest stack depth: 16336 bytes left
[  180.862631][ T8292] Dead loop on virtual device ip6_vti0, fix it urgently!
[  180.931129][ T8294] netlink: 'syz.1.1457': attribute type 10 has an invalid length.
[  180.953585][ T8298] FAULT_INJECTION: forcing a failure.
[  180.953585][ T8298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.993535][ T8294] device geneve0 left promiscuous mode
[  181.009434][ T8298] CPU: 1 PID: 8298 Comm: syz.3.1459 Not tainted syzkaller #0
[  181.016854][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  181.027097][ T8298] Call Trace:
[  181.030390][ T8298]  <TASK>
[  181.033329][ T8298]  dump_stack_lvl+0x188/0x250
[  181.038026][ T8298]  ? show_regs_print_info+0x20/0x20
[  181.043234][ T8298]  ? load_image+0x410/0x410
[  181.047779][ T8298]  ? __lock_acquire+0x7d40/0x7d40
[  181.052822][ T8298]  ? perf_trace_lock+0xe4/0x390
[  181.057691][ T8298]  should_fail+0x383/0x4b0
[  181.062132][ T8298]  _copy_from_user+0x2e/0x170
[  181.066830][ T8298]  __copy_msghdr_from_user+0xc9/0x630
[  181.072212][ T8298]  ? verify_lock_unused+0x140/0x140
[  181.077425][ T8298]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  181.082756][ T8298]  ? perf_trace_lock+0xe4/0x390
[  181.087623][ T8298]  ___sys_sendmsg+0x19a/0x2e0
[  181.092322][ T8298]  ? __sys_sendmsg+0x290/0x290
[  181.097109][ T8298]  ? trace_event_raw_event_lock+0x250/0x250
[  181.103039][ T8298]  __se_sys_sendmsg+0x1b7/0x2a0
[  181.107901][ T8298]  ? __x64_sys_sendmsg+0x80/0x80
[  181.112849][ T8298]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  181.118857][ T8298]  ? lockdep_hardirqs_on+0x94/0x140
[  181.124075][ T8298]  do_syscall_64+0x4c/0xa0
[  181.128497][ T8298]  ? clear_bhb_loop+0x30/0x80
[  181.133206][ T8298]  ? clear_bhb_loop+0x30/0x80
[  181.137887][ T8298]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.143798][ T8298] RIP: 0033:0x7f2688f10199
[  181.148228][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.168341][ T8298] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.176864][ T8298] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  181.184847][ T8298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  181.192822][ T8298] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  181.200806][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.208785][ T8298] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  181.216782][ T8298]  </TASK>
[  181.242867][ T8294] team0: Port device geneve0 removed
[  181.330422][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.356124][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.389371][ T8299] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.408684][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.418860][ T8299] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.460466][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.479668][ T8299] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1457'.
[  181.533315][ T8305] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1462'.
[  182.889865][ T8362] FAULT_INJECTION: forcing a failure.
[  182.889865][ T8362] name failslab, interval 1, probability 0, space 0, times 0
[  182.930061][ T8362] CPU: 0 PID: 8362 Comm: syz.0.1485 Not tainted syzkaller #0
[  182.937480][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  182.947543][ T8362] Call Trace:
[  182.950825][ T8362]  <TASK>
[  182.953752][ T8362]  dump_stack_lvl+0x188/0x250
[  182.958433][ T8362]  ? show_regs_print_info+0x20/0x20
[  182.963629][ T8362]  ? load_image+0x410/0x410
[  182.968128][ T8362]  ? __might_sleep+0xf0/0xf0
[  182.972712][ T8362]  ? __lock_acquire+0x7d40/0x7d40
[  182.977745][ T8362]  should_fail+0x383/0x4b0
[  182.982159][ T8362]  should_failslab+0x5/0x20
[  182.986657][ T8362]  slab_pre_alloc_hook+0x51/0xc0
[  182.991682][ T8362]  kmem_cache_alloc_node+0x47/0x2c0
[  182.996872][ T8362]  ? alloc_vmap_area+0x199/0x1b30
[  183.001900][ T8362]  alloc_vmap_area+0x199/0x1b30
[  183.006877][ T8362]  ? vm_map_ram+0xba0/0xba0
[  183.011463][ T8362]  __get_vm_area_node+0x14f/0x2d0
[  183.016474][ T8362]  __vmalloc_node_range+0xef/0x8b0
[  183.021571][ T8362]  ? stack_map_alloc+0x305/0x550
[  183.026502][ T8362]  ? apparmor_capable+0x12c/0x190
[  183.031513][ T8362]  ? bpf_lsm_capable+0x5/0x10
[  183.036181][ T8362]  bpf_map_area_alloc+0xd4/0xe0
[  183.041021][ T8362]  ? stack_map_alloc+0x305/0x550
[  183.045966][ T8362]  stack_map_alloc+0x305/0x550
[  183.050721][ T8362]  map_create+0x481/0x2330
[  183.055128][ T8362]  ? bpf_lsm_bpf+0x5/0x10
[  183.059448][ T8362]  __sys_bpf+0x30a/0x6f0
[  183.063702][ T8362]  ? bpf_link_show_fdinfo+0x380/0x380
[  183.069101][ T8362]  __x64_sys_bpf+0x78/0x90
[  183.073530][ T8362]  do_syscall_64+0x4c/0xa0
[  183.077947][ T8362]  ? clear_bhb_loop+0x30/0x80
[  183.082614][ T8362]  ? clear_bhb_loop+0x30/0x80
[  183.087315][ T8362]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.093217][ T8362] RIP: 0033:0x7f0fb9d4c199
[  183.097650][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.117265][ T8362] RSP: 002b:00007f0fb7fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  183.125671][ T8362] RAX: ffffffffffffffda RBX: 00007f0fb9fd3fa0 RCX: 00007f0fb9d4c199
[  183.133641][ T8362] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000
[  183.141607][ T8362] RBP: 00007f0fb7fa4090 R08: 0000000000000000 R09: 0000000000000000
[  183.149568][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.157529][ T8362] R13: 00007f0fb9fd4038 R14: 00007f0fb9fd3fa0 R15: 00007ffe59537728
[  183.165511][ T8362]  </TASK>
[  183.196649][ T8366] netlink: 'syz.4.1486': attribute type 2 has an invalid length.
[  183.223097][ T8366] netlink: 'syz.4.1486': attribute type 2 has an invalid length.
[  183.315599][ T8370] netlink: 'syz.3.1488': attribute type 21 has an invalid length.
[  183.330679][ T8370] netlink: 'syz.3.1488': attribute type 6 has an invalid length.
[  183.339269][ T8370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1488'.
[  183.990388][ T8406] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1501'.
[  184.103920][ T8406] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  184.231288][ T8412] delete_channel: no stack
[  184.260218][ T8412] delete_channel: no stack
[  184.427182][ T8424] netlink: 'syz.2.1509': attribute type 2 has an invalid length.
[  184.484649][ T8424] netlink: 'syz.2.1509': attribute type 2 has an invalid length.
[  184.894914][ T8443] FAULT_INJECTION: forcing a failure.
[  184.894914][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.956879][ T8443] CPU: 1 PID: 8443 Comm: syz.4.1517 Not tainted syzkaller #0
[  184.964303][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  184.974376][ T8443] Call Trace:
[  184.977665][ T8443]  <TASK>
[  184.980605][ T8443]  dump_stack_lvl+0x188/0x250
[  184.985308][ T8443]  ? show_regs_print_info+0x20/0x20
[  184.990539][ T8443]  ? load_image+0x410/0x410
[  184.995077][ T8443]  ? __lock_acquire+0x7d40/0x7d40
[  185.000127][ T8443]  should_fail+0x383/0x4b0
[  185.004565][ T8443]  _copy_from_iter+0x234/0x1160
[  185.009444][ T8443]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  185.014979][ T8443]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  185.021163][ T8443]  ? __check_object_size+0x30c/0x410
[  185.026484][ T8443]  netlink_sendmsg+0x758/0xbe0
[  185.031286][ T8443]  ? netlink_getsockopt+0x570/0x570
[  185.036499][ T8443]  ? aa_sock_msg_perm+0x94/0x150
[  185.041460][ T8443]  ? apparmor_socket_sendmsg+0x88/0x230
[  185.047120][ T8443]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  185.052420][ T8443]  ? security_socket_sendmsg+0x7c/0xa0
[  185.057893][ T8443]  ? netlink_getsockopt+0x570/0x570
[  185.063125][ T8443]  ____sys_sendmsg+0x5be/0x8f0
[  185.067921][ T8443]  ? __sys_sendmsg_sock+0x30/0x30
[  185.072974][ T8443]  ? import_iovec+0x6f/0xa0
[  185.077494][ T8443]  ___sys_sendmsg+0x236/0x2e0
[  185.082201][ T8443]  ? __sys_sendmsg+0x290/0x290
[  185.086995][ T8443]  ? trace_event_raw_event_lock+0x250/0x250
[  185.092904][ T8443]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  185.099183][ T8443]  __se_sys_sendmsg+0x1b7/0x2a0
[  185.104224][ T8443]  ? __x64_sys_sendmsg+0x80/0x80
[  185.109190][ T8443]  ? syscall_enter_from_user_mode+0x2a/0x70
[  185.115103][ T8443]  do_syscall_64+0x4c/0xa0
[  185.119529][ T8443]  ? clear_bhb_loop+0x30/0x80
[  185.124222][ T8443]  ? clear_bhb_loop+0x30/0x80
[  185.129003][ T8443]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  185.134993][ T8443] RIP: 0033:0x7f1df4b65199
[  185.139430][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.159102][ T8443] RSP: 002b:00007f1df2dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.167536][ T8443] RAX: ffffffffffffffda RBX: 00007f1df4decfa0 RCX: 00007f1df4b65199
[  185.175532][ T8443] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000006
[  185.183614][ T8443] RBP: 00007f1df2dbd090 R08: 0000000000000000 R09: 0000000000000000
[  185.191601][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.199674][ T8443] R13: 00007f1df4ded038 R14: 00007f1df4decfa0 R15: 00007ffdf4c4d9c8
[  185.207687][ T8443]  </TASK>
[  185.978972][ T8466] FAULT_INJECTION: forcing a failure.
[  185.978972][ T8466] name failslab, interval 1, probability 0, space 0, times 0
[  186.028654][ T8466] CPU: 1 PID: 8466 Comm: syz.4.1526 Not tainted syzkaller #0
[  186.036075][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  186.046170][ T8466] Call Trace:
[  186.049466][ T8466]  <TASK>
[  186.052396][ T8466]  dump_stack_lvl+0x188/0x250
[  186.057085][ T8466]  ? show_regs_print_info+0x20/0x20
[  186.062300][ T8466]  ? load_image+0x410/0x410
[  186.066810][ T8466]  ? __lock_acquire+0x7d40/0x7d40
[  186.071857][ T8466]  should_fail+0x383/0x4b0
[  186.076300][ T8466]  should_failslab+0x5/0x20
[  186.080809][ T8466]  slab_pre_alloc_hook+0x51/0xc0
[  186.085761][ T8466]  __kmalloc+0x6b/0x340
[  186.090020][ T8466]  ? security_sk_alloc+0x47/0x130
[  186.095065][ T8466]  security_sk_alloc+0x47/0x130
[  186.099932][ T8466]  sk_prot_alloc+0x101/0x210
[  186.104528][ T8466]  ? sk_alloc+0x1d/0x310
[  186.108777][ T8466]  sk_alloc+0x2f/0x310
[  186.112854][ T8466]  bpf_prog_test_run_skb+0x23c/0x1190
[  186.118241][ T8466]  ? __fget_files+0x402/0x470
[  186.122934][ T8466]  ? cpu_online+0x60/0x60
[  186.127271][ T8466]  bpf_prog_test_run+0x31c/0x390
[  186.132222][ T8466]  __sys_bpf+0x5a5/0x6f0
[  186.136483][ T8466]  ? bpf_link_show_fdinfo+0x380/0x380
[  186.141876][ T8466]  ? rcu_nmi_exit+0x6f/0xf0
[  186.146417][ T8466]  __x64_sys_bpf+0x78/0x90
[  186.150854][ T8466]  do_syscall_64+0x4c/0xa0
[  186.155287][ T8466]  ? clear_bhb_loop+0x30/0x80
[  186.159979][ T8466]  ? clear_bhb_loop+0x30/0x80
[  186.164699][ T8466]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.170593][ T8466] RIP: 0033:0x7f1df4b65199
[  186.175015][ T8466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.194798][ T8466] RSP: 002b:00007f1df2dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  186.203220][ T8466] RAX: ffffffffffffffda RBX: 00007f1df4decfa0 RCX: 00007f1df4b65199
[  186.211198][ T8466] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  186.219176][ T8466] RBP: 00007f1df2dbd090 R08: 0000000000000000 R09: 0000000000000000
[  186.227151][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.235139][ T8466] R13: 00007f1df4ded038 R14: 00007f1df4decfa0 R15: 00007ffdf4c4d9c8
[  186.243130][ T8466]  </TASK>
[  186.275485][ T8468] netlink: 'syz.1.1527': attribute type 2 has an invalid length.
[  186.308158][ T8468] netlink: 'syz.1.1527': attribute type 2 has an invalid length.
[  186.333140][ T8471] netlink: 'syz.2.1525': attribute type 3 has an invalid length.
[  186.723513][ T8485] FAULT_INJECTION: forcing a failure.
[  186.723513][ T8485] name failslab, interval 1, probability 0, space 0, times 0
[  186.766156][ T8485] CPU: 0 PID: 8485 Comm: syz.2.1532 Not tainted syzkaller #0
[  186.773671][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  186.783832][ T8485] Call Trace:
[  186.787123][ T8485]  <TASK>
[  186.790059][ T8485]  dump_stack_lvl+0x188/0x250
[  186.794748][ T8485]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  186.800947][ T8485]  ? show_regs_print_info+0x20/0x20
[  186.806155][ T8485]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  186.812330][ T8485]  should_fail+0x383/0x4b0
[  186.816756][ T8485]  should_failslab+0x5/0x20
[  186.821267][ T8485]  slab_pre_alloc_hook+0x51/0xc0
[  186.826302][ T8485]  ? __build_skb+0x26/0x2e0
[  186.830813][ T8485]  kmem_cache_alloc+0x3d/0x280
[  186.835604][ T8485]  __build_skb+0x26/0x2e0
[  186.839951][ T8485]  build_skb+0x1e/0x160
[  186.844110][ T8485]  bpf_prog_test_run_skb+0x25c/0x1190
[  186.849583][ T8485]  ? bpf_prog_test_run+0x251/0x390
[  186.854720][ T8485]  ? cpu_online+0x60/0x60
[  186.859062][ T8485]  bpf_prog_test_run+0x31c/0x390
[  186.864021][ T8485]  __sys_bpf+0x5a5/0x6f0
[  186.868278][ T8485]  ? bpf_link_show_fdinfo+0x380/0x380
[  186.873705][ T8485]  __x64_sys_bpf+0x78/0x90
[  186.878132][ T8485]  do_syscall_64+0x4c/0xa0
[  186.882559][ T8485]  ? clear_bhb_loop+0x30/0x80
[  186.887239][ T8485]  ? clear_bhb_loop+0x30/0x80
[  186.891930][ T8485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.897847][ T8485] RIP: 0033:0x7f9f4b7f8199
[  186.902274][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.921891][ T8485] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  186.930323][ T8485] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  186.938309][ T8485] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  186.946298][ T8485] RBP: 00007f9f49a50090 R08: 0000000000000000 R09: 0000000000000000
[  186.954282][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.962267][ T8485] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  186.970531][ T8485]  </TASK>
[  187.717319][ T8509] netlink: 'syz.3.1542': attribute type 2 has an invalid length.
[  188.622698][ T8516] __nla_validate_parse: 1 callbacks suppressed
[  188.622720][ T8516] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1543'.
[  188.794913][ T8530] validate_nla: 1 callbacks suppressed
[  188.794946][ T8530] netlink: 'syz.3.1549': attribute type 21 has an invalid length.
[  190.595052][ T8545] netlink: 'syz.0.1555': attribute type 2 has an invalid length.
[  190.642536][ T8545] netlink: 'syz.0.1555': attribute type 2 has an invalid length.
[  191.946087][ T8556] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1560'.
[  192.092015][ T8567] netlink: 'syz.3.1566': attribute type 2 has an invalid length.
[  192.145521][ T8567] netlink: 'syz.3.1566': attribute type 2 has an invalid length.
[  193.302032][ T8597] device syzkaller0 entered promiscuous mode
[  193.324038][ T8601] netlink: 'syz.4.1577': attribute type 2 has an invalid length.
[  193.356909][ T8601] netlink: 'syz.4.1577': attribute type 8 has an invalid length.
[  193.366448][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1577'.
[  193.388946][ T8602] netlink: 'syz.1.1579': attribute type 2 has an invalid length.
[  193.411735][ T8606] netlink: 'syz.4.1577': attribute type 2 has an invalid length.
[  193.444809][ T8606] netlink: 'syz.4.1577': attribute type 8 has an invalid length.
[  193.472982][ T8606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1577'.
[  194.147921][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.154225][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.332304][ T8618] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1585'.
[  194.409909][ T8607] netlink: 'syz.1.1579': attribute type 2 has an invalid length.
[  194.786756][ T8652] netlink: 'syz.3.1599': attribute type 2 has an invalid length.
[  194.818615][ T8652] netlink: 'syz.3.1599': attribute type 2 has an invalid length.
[  195.044689][ T8660] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1602'.
[  195.281519][ T8668] netlink: 'syz.1.1606': attribute type 29 has an invalid length.
[  195.317161][ T8668] netlink: 'syz.1.1606': attribute type 29 has an invalid length.
[  195.372331][ T8673] netlink: 'syz.1.1606': attribute type 29 has an invalid length.
[  195.554693][ T8683] netlink: 'syz.4.1613': attribute type 2 has an invalid length.
[  195.586245][ T8683] netlink: 'syz.4.1613': attribute type 2 has an invalid length.
[  196.519705][ T8718] delete_channel: no stack
[  196.540001][ T8707] netlink: 'syz.4.1619': attribute type 17 has an invalid length.
[  196.570998][ T8707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1619'.
[  196.582178][ T8707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.627662][ T8721] delete_channel: no stack
[  196.651178][ T8722] netlink: 'syz.0.1630': attribute type 2 has an invalid length.
[  196.865854][ T8731] delete_channel: no stack
[  196.903993][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1633'.
[  196.924206][ T8731] FAULT_INJECTION: forcing a failure.
[  196.924206][ T8731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.946444][ T8731] CPU: 1 PID: 8731 Comm: syz.3.1635 Not tainted syzkaller #0
[  196.953869][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  196.963939][ T8731] Call Trace:
[  196.967230][ T8731]  <TASK>
[  196.970165][ T8731]  dump_stack_lvl+0x188/0x250
[  196.974867][ T8731]  ? show_regs_print_info+0x20/0x20
[  196.980074][ T8731]  ? load_image+0x410/0x410
[  196.984604][ T8731]  ? __lock_acquire+0x7d40/0x7d40
[  196.989657][ T8731]  should_fail+0x383/0x4b0
[  196.994106][ T8731]  _copy_to_user+0x2e/0x130
[  196.998625][ T8731]  simple_read_from_buffer+0xe3/0x150
[  197.004017][ T8731]  proc_fail_nth_read+0x1a6/0x220
[  197.009065][ T8731]  ? proc_fault_inject_write+0x310/0x310
[  197.014726][ T8731]  ? fsnotify_perm+0x254/0x560
[  197.019504][ T8731]  ? proc_fault_inject_write+0x310/0x310
[  197.025152][ T8731]  vfs_read+0x2ff/0xd50
[  197.029333][ T8731]  ? __lock_acquire+0x7d40/0x7d40
[  197.034376][ T8731]  ? kernel_read+0x1e0/0x1e0
[  197.038995][ T8731]  ? mutex_lock_nested+0x17/0x20
[  197.044031][ T8731]  ? __fdget_pos+0x2bf/0x370
[  197.048641][ T8731]  ? ksys_read+0x70/0x260
[  197.052989][ T8731]  ksys_read+0x153/0x260
[  197.057251][ T8731]  ? vfs_write+0xd70/0xd70
[  197.061714][ T8731]  ? lockdep_hardirqs_on+0x94/0x140
[  197.066932][ T8731]  do_syscall_64+0x4c/0xa0
[  197.071358][ T8731]  ? clear_bhb_loop+0x30/0x80
[  197.076042][ T8731]  ? clear_bhb_loop+0x30/0x80
[  197.080733][ T8731]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.086642][ T8731] RIP: 0033:0x7f2688ed09ce
[  197.091077][ T8731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.110697][ T8731] RSP: 002b:00007f2687167fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.119113][ T8731] RAX: ffffffffffffffda RBX: 00007f26871686c0 RCX: 00007f2688ed09ce
[  197.127166][ T8731] RDX: 000000000000000f RSI: 00007f26871680a0 RDI: 0000000000000004
[  197.135128][ T8731] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  197.143276][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.151270][ T8731] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  197.159257][ T8731]  </TASK>
[  197.525326][ T8765] FAULT_INJECTION: forcing a failure.
[  197.525326][ T8765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.638056][ T8765] CPU: 0 PID: 8765 Comm: syz.4.1645 Not tainted syzkaller #0
[  197.645483][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  197.655548][ T8765] Call Trace:
[  197.658839][ T8765]  <TASK>
[  197.661778][ T8765]  dump_stack_lvl+0x188/0x250
[  197.666476][ T8765]  ? show_regs_print_info+0x20/0x20
[  197.671700][ T8765]  ? load_image+0x410/0x410
[  197.676344][ T8765]  ? __lock_acquire+0x7d40/0x7d40
[  197.681410][ T8765]  ? perf_trace_lock+0xe4/0x390
[  197.686283][ T8765]  should_fail+0x383/0x4b0
[  197.690717][ T8765]  _copy_from_user+0x2e/0x170
[  197.695419][ T8765]  iovec_from_user+0x142/0x370
[  197.700288][ T8765]  __import_iovec+0x70/0x490
[  197.704897][ T8765]  ? perf_trace_lock+0xe4/0x390
[  197.709879][ T8765]  import_iovec+0x6f/0xa0
[  197.714219][ T8765]  ___sys_sendmsg+0x1fd/0x2e0
[  197.719000][ T8765]  ? __sys_sendmsg+0x290/0x290
[  197.723782][ T8765]  ? trace_event_raw_event_lock+0x250/0x250
[  197.729794][ T8765]  __se_sys_sendmsg+0x1b7/0x2a0
[  197.734653][ T8765]  ? __x64_sys_sendmsg+0x80/0x80
[  197.739591][ T8765]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  197.745690][ T8765]  ? lockdep_hardirqs_on+0x94/0x140
[  197.750946][ T8765]  do_syscall_64+0x4c/0xa0
[  197.755362][ T8765]  ? clear_bhb_loop+0x30/0x80
[  197.760040][ T8765]  ? clear_bhb_loop+0x30/0x80
[  197.764743][ T8765]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.770639][ T8765] RIP: 0033:0x7f1df4b65199
[  197.775062][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.794683][ T8765] RSP: 002b:00007f1df2dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.803113][ T8765] RAX: ffffffffffffffda RBX: 00007f1df4decfa0 RCX: 00007f1df4b65199
[  197.811097][ T8765] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000003
[  197.819068][ T8765] RBP: 00007f1df2dbd090 R08: 0000000000000000 R09: 0000000000000000
[  197.827045][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.835018][ T8765] R13: 00007f1df4ded038 R14: 00007f1df4decfa0 R15: 00007ffdf4c4d9c8
[  197.843011][ T8765]  </TASK>
[  198.475267][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'.
[  201.649622][ T8836] validate_nla: 13 callbacks suppressed
[  201.649637][ T8836] netlink: 'syz.1.1669': attribute type 39 has an invalid length.
[  201.667408][ T8840] netlink: 'syz.4.1666': attribute type 21 has an invalid length.
[  201.680674][ T8840] netlink: 'syz.4.1666': attribute type 4 has an invalid length.
[  201.689014][ T8840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1666'.
[  201.709853][ T8843] netlink: 'syz.2.1668': attribute type 39 has an invalid length.
[  201.773087][ T8845] netlink: 'syz.1.1671': attribute type 2 has an invalid length.
[  201.791569][ T8845] netlink: 'syz.1.1671': attribute type 8 has an invalid length.
[  201.824175][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1671'.
[  201.857247][ T8852] netlink: 'syz.1.1671': attribute type 2 has an invalid length.
[  201.892583][ T8852] netlink: 'syz.1.1671': attribute type 8 has an invalid length.
[  201.932584][ T8852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1671'.
[  202.012823][ T8855] netlink: 'syz.2.1675': attribute type 2 has an invalid length.
[  202.037384][ T8859] netlink: 'syz.2.1675': attribute type 2 has an invalid length.
[  202.053438][ T8865] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1678'.
[  202.221339][ T8875] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1681'.
[  202.273828][ T8875] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1681'.
[  202.626675][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1690'.
[  202.672477][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1690'.
[  203.221145][ T8904] team0: Device veth1_vlan is already a lower device of the team interface
[  205.485551][ T8911] device veth0_vlan left promiscuous mode
[  205.510335][ T8911] device veth0_vlan entered promiscuous mode
[  205.528146][ T8911] team0: Device veth0_vlan failed to register rx_handler
[  205.957280][ T8940] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1709'.
[  205.993699][ T8940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  206.036457][ T8940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.461980][ T8968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'.
[  206.727450][ T8987] validate_nla: 14 callbacks suppressed
[  206.727466][ T8987] netlink: 'syz.3.1724': attribute type 10 has an invalid length.
[  206.781393][ T8985] sctp: [Deprecated]: syz.4.1723 (pid 8985) Use of int in maxseg socket option.
[  206.781393][ T8985] Use struct sctp_assoc_value instead
[  206.806832][ T8987] team0: Device vxcan1 is of different type
[  209.589379][ T9020] netlink: 'syz.2.1735': attribute type 2 has an invalid length.
[  209.603311][ T9020] netlink: 'syz.2.1735': attribute type 2 has an invalid length.
[  209.925648][ T9041] __nla_validate_parse: 1 callbacks suppressed
[  209.925681][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1745'.
[  210.069107][ T9048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1749'.
[  210.541504][ T9081] netlink: 'syz.2.1763': attribute type 21 has an invalid length.
[  210.568943][ T9081] netlink: 'syz.2.1763': attribute type 6 has an invalid length.
[  210.592273][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1763'.
[  210.707098][ T9082] netlink: 'syz.1.1762': attribute type 21 has an invalid length.
[  210.858144][ T9088] netlink: 'syz.2.1765': attribute type 2 has an invalid length.
[  210.891043][ T9088] netlink: 'syz.2.1765': attribute type 2 has an invalid length.
[  211.416004][ T9120] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1773'.
[  211.519658][ T9120] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  211.548514][ T9120] CPU: 1 PID: 9120 Comm: syz.1.1773 Not tainted syzkaller #0
[  211.555933][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  211.566006][ T9120] Call Trace:
[  211.569298][ T9120]  <TASK>
[  211.572242][ T9120]  dump_stack_lvl+0x188/0x250
[  211.576936][ T9120]  ? show_regs_print_info+0x20/0x20
[  211.582146][ T9120]  ? load_image+0x410/0x410
[  211.586675][ T9120]  sysfs_warn_dup+0x8a/0xa0
[  211.591194][ T9120]  sysfs_do_create_link_sd+0xc0/0x110
[  211.596581][ T9120]  device_add+0x83b/0x1050
[  211.601005][ T9120]  wiphy_register+0x1e74/0x2c40
[  211.605918][ T9120]  ? cfg80211_event_work+0x40/0x40
[  211.611036][ T9120]  ? minstrel_ht_alloc+0x807/0x980
[  211.616154][ T9120]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  211.622219][ T9120]  ieee80211_register_hw+0x2a03/0x3a60
[  211.627675][ T9120]  ? ieee80211_register_hw+0xb11/0x3a60
[  211.633219][ T9120]  ? ieee80211_tasklet_handler+0x20/0x20
[  211.638858][ T9120]  ? rcu_is_watching+0x11/0xa0
[  211.643614][ T9120]  ? hrtimer_init+0x10c/0x220
[  211.648295][ T9120]  mac80211_hwsim_new_radio+0x209d/0x4050
[  211.654029][ T9120]  hwsim_new_radio_nl+0xa7d/0xc50
[  211.659062][ T9120]  genl_rcv_msg+0xd0b/0xfa0
[  211.663565][ T9120]  ? genl_bind+0x370/0x370
[  211.667973][ T9120]  ? __dev_queue_xmit+0x1b64/0x2e50
[  211.673159][ T9120]  ? verify_lock_unused+0x140/0x140
[  211.678358][ T9120]  ? perf_trace_lock+0xe4/0x390
[  211.683200][ T9120]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  211.689821][ T9120]  netlink_rcv_skb+0x1e9/0x430
[  211.694590][ T9120]  ? genl_bind+0x370/0x370
[  211.698995][ T9120]  ? netlink_ack+0xb10/0xb10
[  211.703579][ T9120]  ? down_read+0x1aa/0x2e0
[  211.708001][ T9120]  genl_rcv+0x24/0x40
[  211.711991][ T9120]  netlink_unicast+0x78f/0x940
[  211.716757][ T9120]  netlink_sendmsg+0x8ba/0xbe0
[  211.721523][ T9120]  ? netlink_getsockopt+0x570/0x570
[  211.726727][ T9120]  ? aa_sock_msg_perm+0x94/0x150
[  211.731656][ T9120]  ? apparmor_socket_sendmsg+0x88/0x230
[  211.737186][ T9120]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  211.742461][ T9120]  ? security_socket_sendmsg+0x7c/0xa0
[  211.747907][ T9120]  ? netlink_getsockopt+0x570/0x570
[  211.753096][ T9120]  ____sys_sendmsg+0x5be/0x8f0
[  211.757867][ T9120]  ? __sys_sendmsg_sock+0x30/0x30
[  211.762904][ T9120]  ? import_iovec+0x6f/0xa0
[  211.767575][ T9120]  ___sys_sendmsg+0x236/0x2e0
[  211.772251][ T9120]  ? __sys_sendmsg+0x290/0x290
[  211.777019][ T9120]  ? trace_event_raw_event_lock+0x250/0x250
[  211.782951][ T9120]  __se_sys_sendmsg+0x1b7/0x2a0
[  211.787800][ T9120]  ? __x64_sys_sendmsg+0x80/0x80
[  211.792725][ T9120]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  211.798705][ T9120]  ? lockdep_hardirqs_on+0x94/0x140
[  211.803906][ T9120]  do_syscall_64+0x4c/0xa0
[  211.808313][ T9120]  ? clear_bhb_loop+0x30/0x80
[  211.812977][ T9120]  ? clear_bhb_loop+0x30/0x80
[  211.817644][ T9120]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  211.823533][ T9120] RIP: 0033:0x7fc704055199
[  211.827940][ T9120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.847647][ T9120] RSP: 002b:00007fc70228c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.856056][ T9120] RAX: ffffffffffffffda RBX: 00007fc7042dd090 RCX: 00007fc704055199
[  211.864014][ T9120] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  211.871987][ T9120] RBP: 00007fc7040ec888 R08: 0000000000000000 R09: 0000000000000000
[  211.879945][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.887902][ T9120] R13: 00007fc7042dd128 R14: 00007fc7042dd090 R15: 00007ffe39be6248
[  211.895876][ T9120]  </TASK>
[  212.113780][ T9137] netlink: 'syz.0.1778': attribute type 2 has an invalid length.
[  212.141458][ T9137] netlink: 'syz.0.1778': attribute type 2 has an invalid length.
[  213.251833][ T9186] netlink: 'syz.4.1796': attribute type 2 has an invalid length.
[  213.269808][ T9186] netlink: 'syz.4.1796': attribute type 2 has an invalid length.
[  213.854785][ T9200] device syzkaller0 entered promiscuous mode
[  213.866062][ T9196] delete_channel: no stack
[  214.933124][ T9213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1808'.
[  215.147937][ T9234] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1818'.
[  215.261716][ T9244] netlink: 'syz.3.1822': attribute type 10 has an invalid length.
[  215.285826][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1822'.
[  216.371600][ T9276] netlink: 'syz.1.1835': attribute type 33 has an invalid length.
[  216.386847][ T9276] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1835'.
[  216.431150][ T9281] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1837'.
[  216.540606][ T9291] netlink: 'syz.2.1841': attribute type 10 has an invalid length.
[  216.549763][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1841'.
[  217.072961][ T9333] netlink: 'syz.1.1859': attribute type 10 has an invalid length.
[  217.092516][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1859'.
[  217.253759][ T9352] netlink: 'syz.2.1866': attribute type 21 has an invalid length.
[  217.343898][ T9360] netlink: 'syz.4.1872': attribute type 29 has an invalid length.
[  217.369497][ T9358] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.1873'.
[  217.370227][ T9360] netlink: 'syz.4.1872': attribute type 29 has an invalid length.
[  217.422763][ T9365] netlink: 'syz.4.1872': attribute type 29 has an invalid length.
[  217.916280][ T9395] sctp: [Deprecated]: syz.2.1886 (pid 9395) Use of int in maxseg socket option.
[  217.916280][ T9395] Use struct sctp_assoc_value instead
[  218.150765][ T9408] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1893'.
[  218.241138][ T9408] netlink: 'syz.3.1893': attribute type 9 has an invalid length.
[  218.261876][ T9408] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1893'.
[  218.611010][ T9418] netlink: 'syz.0.1895': attribute type 10 has an invalid length.
[  218.625119][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1895'.
[  221.339763][ T9469] netlink: 'syz.0.1914': attribute type 46 has an invalid length.
[  221.360889][ T9469] netlink: 'syz.0.1914': attribute type 46 has an invalid length.
[  221.822951][ T9481] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1919'.
[  221.858966][ T9481] netlink: 22796 bytes leftover after parsing attributes in process `syz.1.1919'.
[  222.209183][ T9497] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1925'.
[  222.518149][ T9506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1930'.
[  222.530082][ T9510] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1931'.
[  222.540228][ T9510] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[  222.851085][ T9529] delete_channel: no stack
[  222.862139][ T9529] netlink: 'syz.2.1939': attribute type 10 has an invalid length.
[  222.863094][ T9531] netlink: 'syz.4.1940': attribute type 3 has an invalid length.
[  222.870703][ T9529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1939'.
[  222.885137][ T9531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1940'.
[  222.964444][ T9536] device wlan1 entered promiscuous mode
[  223.067543][ T9535] Dead loop on virtual device ip6_vti0, fix it urgently!
[  223.116746][ T9541] netlink: 'syz.1.1944': attribute type 3 has an invalid length.
[  223.125453][ T9541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1944'.
[  223.153322][ T9541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1944'.
[  223.208025][ T9545] device syzkaller0 entered promiscuous mode
[  223.216121][ T9545] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  223.273565][ T9549] FAULT_INJECTION: forcing a failure.
[  223.273565][ T9549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.287436][ T9549] CPU: 0 PID: 9549 Comm: syz.1.1948 Not tainted syzkaller #0
[  223.294822][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  223.304889][ T9549] Call Trace:
[  223.308166][ T9549]  <TASK>
[  223.311090][ T9549]  dump_stack_lvl+0x188/0x250
[  223.315760][ T9549]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  223.321927][ T9549]  ? show_regs_print_info+0x20/0x20
[  223.327117][ T9549]  ? load_image+0x410/0x410
[  223.331626][ T9549]  should_fail+0x383/0x4b0
[  223.336068][ T9549]  _copy_from_user+0x2e/0x170
[  223.340741][ T9549]  __copy_msghdr_from_user+0x48a/0x630
[  223.346210][ T9549]  ? verify_lock_unused+0x140/0x140
[  223.351433][ T9549]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  223.356731][ T9549]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  223.362546][ T9549]  ___sys_sendmsg+0x19a/0x2e0
[  223.367243][ T9549]  ? __sys_sendmsg+0x290/0x290
[  223.372022][ T9549]  __se_sys_sendmsg+0x1b7/0x2a0
[  223.376876][ T9549]  ? __x64_sys_sendmsg+0x80/0x80
[  223.381825][ T9549]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  223.387801][ T9549]  ? lockdep_hardirqs_on+0x94/0x140
[  223.393018][ T9549]  do_syscall_64+0x4c/0xa0
[  223.397432][ T9549]  ? clear_bhb_loop+0x30/0x80
[  223.402121][ T9549]  ? clear_bhb_loop+0x30/0x80
[  223.406796][ T9549]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  223.412683][ T9549] RIP: 0033:0x7fc704055199
[  223.417087][ T9549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.436772][ T9549] RSP: 002b:00007fc7022ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.445189][ T9549] RAX: ffffffffffffffda RBX: 00007fc7042dcfa0 RCX: 00007fc704055199
[  223.453176][ T9549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  223.461161][ T9549] RBP: 00007fc7022ad090 R08: 0000000000000000 R09: 0000000000000000
[  223.469152][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.477143][ T9549] R13: 00007fc7042dd038 R14: 00007fc7042dcfa0 R15: 00007ffe39be6248
[  223.485143][ T9549]  </TASK>
[  223.602702][ T9559] delete_channel: no stack
[  223.643234][ T9559] netlink: 'syz.0.1952': attribute type 10 has an invalid length.
[  223.659821][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1952'.
[  223.840656][ T9578] FAULT_INJECTION: forcing a failure.
[  223.840656][ T9578] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  223.884175][ T9578] CPU: 1 PID: 9578 Comm: syz.4.1961 Not tainted syzkaller #0
[  223.891622][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  223.901703][ T9578] Call Trace:
[  223.904981][ T9578]  <TASK>
[  223.907908][ T9578]  dump_stack_lvl+0x188/0x250
[  223.912664][ T9578]  ? show_regs_print_info+0x20/0x20
[  223.917849][ T9578]  ? load_image+0x410/0x410
[  223.922340][ T9578]  ? __lock_acquire+0x7d40/0x7d40
[  223.927359][ T9578]  should_fail+0x383/0x4b0
[  223.931766][ T9578]  prepare_alloc_pages+0x1e3/0x5b0
[  223.936871][ T9578]  __alloc_pages+0x11b/0x480
[  223.941449][ T9578]  ? zone_statistics+0x170/0x170
[  223.946380][ T9578]  ? alloc_pages+0x452/0x560
[  223.950962][ T9578]  __get_free_pages+0x8/0x30
[  223.955657][ T9578]  kasan_populate_vmalloc_pte+0x21/0xc0
[  223.961210][ T9578]  __apply_to_page_range+0x987/0xd10
[  223.966499][ T9578]  ? kasan_populate_vmalloc+0x70/0x70
[  223.971869][ T9578]  alloc_vmap_area+0x19e8/0x1b30
[  223.976817][ T9578]  ? vm_map_ram+0xba0/0xba0
[  223.981316][ T9578]  __get_vm_area_node+0x14f/0x2d0
[  223.986339][ T9578]  __vmalloc_node_range+0xef/0x8b0
[  223.991439][ T9578]  ? stack_map_alloc+0x305/0x550
[  223.996455][ T9578]  ? apparmor_capable+0x12c/0x190
[  224.001469][ T9578]  ? bpf_lsm_capable+0x5/0x10
[  224.006141][ T9578]  bpf_map_area_alloc+0xd4/0xe0
[  224.010979][ T9578]  ? stack_map_alloc+0x305/0x550
[  224.015903][ T9578]  stack_map_alloc+0x305/0x550
[  224.020658][ T9578]  map_create+0x481/0x2330
[  224.025065][ T9578]  ? bpf_lsm_bpf+0x5/0x10
[  224.029385][ T9578]  __sys_bpf+0x30a/0x6f0
[  224.033624][ T9578]  ? bpf_link_show_fdinfo+0x380/0x380
[  224.039001][ T9578]  __x64_sys_bpf+0x78/0x90
[  224.043517][ T9578]  do_syscall_64+0x4c/0xa0
[  224.047923][ T9578]  ? clear_bhb_loop+0x30/0x80
[  224.052601][ T9578]  ? clear_bhb_loop+0x30/0x80
[  224.057369][ T9578]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  224.063254][ T9578] RIP: 0033:0x7f1df4b65199
[  224.067659][ T9578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.087258][ T9578] RSP: 002b:00007f1df2dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  224.095749][ T9578] RAX: ffffffffffffffda RBX: 00007f1df4decfa0 RCX: 00007f1df4b65199
[  224.103711][ T9578] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000
[  224.111850][ T9578] RBP: 00007f1df2dbd090 R08: 0000000000000000 R09: 0000000000000000
[  224.119904][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.127863][ T9578] R13: 00007f1df4ded038 R14: 00007f1df4decfa0 R15: 00007ffdf4c4d9c8
[  224.135926][ T9578]  </TASK>
[  224.244306][ T9589] delete_channel: no stack
[  224.276341][ T9589] netlink: 'syz.4.1966': attribute type 10 has an invalid length.
[  224.386539][ T9598] netlink: 'syz.4.1970': attribute type 16 has an invalid length.
[  224.611579][ T9623] delete_channel: no stack
[  224.622004][ T9624] netlink: 'syz.3.1981': attribute type 10 has an invalid length.
[  224.716721][ T9624] device veth0_vlan left promiscuous mode
[  224.744632][ T9624] device veth0_vlan entered promiscuous mode
[  224.764476][ T9624] team0: Device veth0_vlan failed to register rx_handler
[  224.833638][ T9625] netlink: 'syz.4.1980': attribute type 10 has an invalid length.
[  225.263832][ T9647] netlink: 'syz.4.1991': attribute type 1 has an invalid length.
[  225.295679][ T9652] FAULT_INJECTION: forcing a failure.
[  225.295679][ T9652] name failslab, interval 1, probability 0, space 0, times 0
[  225.360603][ T9654] FAULT_INJECTION: forcing a failure.
[  225.360603][ T9654] name failslab, interval 1, probability 0, space 0, times 0
[  225.380025][ T9652] CPU: 1 PID: 9652 Comm: syz.3.1993 Not tainted syzkaller #0
[  225.387438][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.397496][ T9652] Call Trace:
[  225.400779][ T9652]  <TASK>
[  225.403733][ T9652]  dump_stack_lvl+0x188/0x250
[  225.408417][ T9652]  ? show_regs_print_info+0x20/0x20
[  225.413612][ T9652]  ? load_image+0x410/0x410
[  225.418116][ T9652]  ? debug_object_init+0x10/0x10
[  225.423056][ T9652]  should_fail+0x383/0x4b0
[  225.427475][ T9652]  should_failslab+0x5/0x20
[  225.431979][ T9652]  slab_pre_alloc_hook+0x51/0xc0
[  225.436916][ T9652]  ? __build_skb+0x26/0x2e0
[  225.441418][ T9652]  kmem_cache_alloc+0x3d/0x280
[  225.446185][ T9652]  __build_skb+0x26/0x2e0
[  225.450511][ T9652]  build_skb+0x1e/0x160
[  225.454667][ T9652]  bpf_prog_test_run_skb+0x25c/0x1190
[  225.460039][ T9652]  ? __fget_files+0x402/0x470
[  225.464721][ T9652]  ? cpu_online+0x60/0x60
[  225.469056][ T9652]  bpf_prog_test_run+0x31c/0x390
[  225.473994][ T9652]  __sys_bpf+0x5a5/0x6f0
[  225.478235][ T9652]  ? bpf_link_show_fdinfo+0x380/0x380
[  225.483707][ T9652]  __x64_sys_bpf+0x78/0x90
[  225.488211][ T9652]  do_syscall_64+0x4c/0xa0
[  225.492678][ T9652]  ? clear_bhb_loop+0x30/0x80
[  225.497358][ T9652]  ? clear_bhb_loop+0x30/0x80
[  225.502040][ T9652]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.507932][ T9652] RIP: 0033:0x7f2688f10199
[  225.512351][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.531954][ T9652] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.540368][ T9652] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  225.548335][ T9652] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  225.556305][ T9652] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  225.564269][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.572234][ T9652] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  225.580226][ T9652]  </TASK>
[  225.593546][ T9654] CPU: 0 PID: 9654 Comm: syz.1.1994 Not tainted syzkaller #0
[  225.601000][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.611069][ T9654] Call Trace:
[  225.614361][ T9654]  <TASK>
[  225.617308][ T9654]  dump_stack_lvl+0x188/0x250
[  225.622003][ T9654]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  225.628175][ T9654]  ? show_regs_print_info+0x20/0x20
[  225.633405][ T9654]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  225.639600][ T9654]  ? dump_stack+0x5/0x20
[  225.643868][ T9654]  should_fail+0x383/0x4b0
[  225.648306][ T9654]  should_failslab+0x5/0x20
[  225.652819][ T9654]  slab_pre_alloc_hook+0x51/0xc0
[  225.657773][ T9654]  ? skb_clone+0x1bd/0x350
[  225.662203][ T9654]  kmem_cache_alloc+0x3d/0x280
[  225.666976][ T9654]  skb_clone+0x1bd/0x350
[  225.671226][ T9654]  bpf_clone_redirect+0x166/0x460
[  225.676261][ T9654]  bpf_prog_a2ed790a9c099f5a+0x19/0x810
[  225.681803][ T9654]  bpf_test_run+0x2a8/0x800
[  225.686325][ T9654]  ? convert___skb_to_skb+0x4c0/0x4c0
[  225.691797][ T9654]  ? eth_get_headlen+0x200/0x200
[  225.696726][ T9654]  ? convert___skb_to_skb+0x3d/0x4c0
[  225.702012][ T9654]  bpf_prog_test_run_skb+0x9fb/0x1190
[  225.707391][ T9654]  ? cpu_online+0x60/0x60
[  225.711727][ T9654]  bpf_prog_test_run+0x31c/0x390
[  225.716658][ T9654]  __sys_bpf+0x5a5/0x6f0
[  225.720977][ T9654]  ? bpf_link_show_fdinfo+0x380/0x380
[  225.726351][ T9654]  __x64_sys_bpf+0x78/0x90
[  225.730770][ T9654]  do_syscall_64+0x4c/0xa0
[  225.735173][ T9654]  ? clear_bhb_loop+0x30/0x80
[  225.739837][ T9654]  ? clear_bhb_loop+0x30/0x80
[  225.744498][ T9654]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.750385][ T9654] RIP: 0033:0x7fc704055199
[  225.754792][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.774471][ T9654] RSP: 002b:00007fc7022ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.783051][ T9654] RAX: ffffffffffffffda RBX: 00007fc7042dcfa0 RCX: 00007fc704055199
[  225.791011][ T9654] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  225.799058][ T9654] RBP: 00007fc7022ad090 R08: 0000000000000000 R09: 0000000000000000
[  225.807015][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.814973][ T9654] R13: 00007fc7042dd038 R14: 00007fc7042dcfa0 R15: 00007ffe39be6248
[  225.822940][ T9654]  </TASK>
[  225.939652][ T9661] device syzkaller0 entered promiscuous mode
[  226.634172][ T9704] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  227.793039][ T9767] __nla_validate_parse: 14 callbacks suppressed
[  227.793073][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2027'.
[  227.933393][ T9771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2028'.
[  227.970287][ T9783] netlink: 'syz.3.2032': attribute type 21 has an invalid length.
[  227.989896][ T9783] netlink: 'syz.3.2032': attribute type 6 has an invalid length.
[  228.060145][ T9783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2032'.
[  228.491207][ T9803] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2040'.
[  228.579712][ T9808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2039'.
[  228.633828][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2042'.
[  228.836100][ T9821] delete_channel: no stack
[  228.909844][ T9821] netlink: 'syz.4.2047': attribute type 10 has an invalid length.
[  228.928865][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2047'.
[  229.179671][ T9834] netlink: 'syz.3.2052': attribute type 29 has an invalid length.
[  229.251134][ T9834] netlink: 'syz.3.2052': attribute type 29 has an invalid length.
[  229.305347][ T9835] netlink: 'syz.3.2052': attribute type 29 has an invalid length.
[  229.362821][ T9838] netlink: 'syz.0.2053': attribute type 10 has an invalid length.
[  229.423115][ T9838] device hsr0 entered promiscuous mode
[  229.465712][ T9838] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  229.541210][ T9838] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  229.599390][ T9838] hsr0: mtu greater than device maximum
[  229.611526][ T9838] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  229.646035][ T9843] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.2054'.
[  229.654316][ T9842] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2055'.
[  230.070818][ T9858] delete_channel: no stack
[  230.182538][ T9858] netlink: 'syz.4.2060': attribute type 10 has an invalid length.
[  230.253746][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2060'.
[  230.276378][ T9862] delete_channel: no stack
[  230.346281][ T9865] delete_channel: no stack
[  230.724125][ T9878] FAULT_INJECTION: forcing a failure.
[  230.724125][ T9878] name failslab, interval 1, probability 0, space 0, times 0
[  230.770575][ T9878] CPU: 1 PID: 9878 Comm: syz.3.2069 Not tainted syzkaller #0
[  230.778100][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  230.788171][ T9878] Call Trace:
[  230.791459][ T9878]  <TASK>
[  230.794397][ T9878]  dump_stack_lvl+0x188/0x250
[  230.799088][ T9878]  ? show_regs_print_info+0x20/0x20
[  230.804369][ T9878]  ? load_image+0x410/0x410
[  230.808866][ T9878]  ? __might_sleep+0xf0/0xf0
[  230.813460][ T9878]  ? __lock_acquire+0x7d40/0x7d40
[  230.818474][ T9878]  ? netlink_insert+0xe90/0x11f0
[  230.823406][ T9878]  should_fail+0x383/0x4b0
[  230.827817][ T9878]  should_failslab+0x5/0x20
[  230.832311][ T9878]  slab_pre_alloc_hook+0x51/0xc0
[  230.837251][ T9878]  kmem_cache_alloc_node+0x47/0x2c0
[  230.842449][ T9878]  ? __alloc_skb+0xf4/0x750
[  230.846958][ T9878]  __alloc_skb+0xf4/0x750
[  230.851283][ T9878]  netlink_sendmsg+0x654/0xbe0
[  230.856049][ T9878]  ? netlink_getsockopt+0x570/0x570
[  230.861231][ T9878]  ? aa_sock_msg_perm+0x94/0x150
[  230.866161][ T9878]  ? apparmor_socket_sendmsg+0x88/0x230
[  230.871814][ T9878]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  230.877087][ T9878]  ? security_socket_sendmsg+0x7c/0xa0
[  230.882531][ T9878]  ? netlink_getsockopt+0x570/0x570
[  230.887862][ T9878]  ____sys_sendmsg+0x5be/0x8f0
[  230.892643][ T9878]  ? __sys_sendmsg_sock+0x30/0x30
[  230.897665][ T9878]  ? import_iovec+0x6f/0xa0
[  230.902164][ T9878]  ___sys_sendmsg+0x236/0x2e0
[  230.906852][ T9878]  ? __sys_sendmsg+0x290/0x290
[  230.911629][ T9878]  __se_sys_sendmsg+0x1b7/0x2a0
[  230.916475][ T9878]  ? __x64_sys_sendmsg+0x80/0x80
[  230.921431][ T9878]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  230.927410][ T9878]  ? lockdep_hardirqs_on+0x94/0x140
[  230.932596][ T9878]  do_syscall_64+0x4c/0xa0
[  230.936999][ T9878]  ? clear_bhb_loop+0x30/0x80
[  230.941659][ T9878]  ? clear_bhb_loop+0x30/0x80
[  230.946329][ T9878]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  230.952209][ T9878] RIP: 0033:0x7f2688f10199
[  230.956609][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.976206][ T9878] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.984608][ T9878] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  230.992571][ T9878] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000003
[  231.000530][ T9878] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  231.008489][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.016455][ T9878] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  231.024435][ T9878]  </TASK>
[  231.065772][ T9888] delete_channel: no stack
[  231.082681][ T9888] netlink: 'syz.0.2073': attribute type 10 has an invalid length.
[  231.362558][ T9904] netlink: 'syz.2.2079': attribute type 39 has an invalid length.
[  231.747621][ T9919] delete_channel: no stack
[  232.349300][ T9954] delete_channel: no stack
[  233.060014][ T9984] __nla_validate_parse: 8 callbacks suppressed
[  233.060051][ T9984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2112'.
[  233.160098][ T9990] delete_channel: no stack
[  233.206448][ T9990] validate_nla: 7 callbacks suppressed
[  233.206477][ T9990] netlink: 'syz.4.2113': attribute type 10 has an invalid length.
[  233.221919][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2113'.
[  233.709058][T10024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2127'.
[  234.388723][T10032] delete_channel: no stack
[  236.616000][T10034] netlink: 'syz.1.2129': attribute type 10 has an invalid length.
[  236.633995][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'.
[  237.092478][T10053] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2138'.
[  237.211345][T10068] delete_channel: no stack
[  237.323298][T10068] netlink: 'syz.3.2144': attribute type 10 has an invalid length.
[  237.353379][T10068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2144'.
[  238.192595][T10095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2154'.
[  238.333359][T10100] delete_channel: no stack
[  238.359417][T10093] device syzkaller0 entered promiscuous mode
[  238.410304][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2153'.
[  238.507598][T10100] netlink: 'syz.3.2157': attribute type 10 has an invalid length.
[  238.540173][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2157'.
[  241.297904][T10102] bridge0: port 3(team0) entered disabled state
[  241.305005][T10102] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.525103][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2166'.
[  241.557679][T10124] delete_channel: no stack
[  241.611334][T10126] delete_channel: no stack
[  241.646905][T10124] netlink: 'syz.0.2167': attribute type 10 has an invalid length.
[  241.676965][T10124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'.
[  241.728331][T10130] netlink: 'syz.3.2168': attribute type 10 has an invalid length.
[  241.748036][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2168'.
[  242.081188][T10138] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.2172'.
[  242.189931][T10144] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2175'.
[  242.273191][T10152] netlink: 'syz.1.2179': attribute type 2 has an invalid length.
[  242.302475][T10152] netlink: 'syz.1.2179': attribute type 2 has an invalid length.
[  242.331870][T10152] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2179'.
[  242.362032][T10152] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  242.396579][T10158] netlink: 'syz.0.2181': attribute type 10 has an invalid length.
[  242.414076][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2181'.
[  242.437702][T10158] device ipvlan1 entered promiscuous mode
[  242.446236][T10161] delete_channel: no stack
[  242.467206][T10158] bridge0: port 3(ipvlan1) entered blocking state
[  242.469727][T10163] delete_channel: no stack
[  242.478847][T10158] bridge0: port 3(ipvlan1) entered disabled state
[  242.494014][T10158] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  242.529505][T10166] netlink: 'syz.3.2184': attribute type 10 has an invalid length.
[  242.545519][T10163] netlink: 'syz.1.2183': attribute type 10 has an invalid length.
[  242.714775][T10178] FAULT_INJECTION: forcing a failure.
[  242.714775][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.765005][T10178] CPU: 0 PID: 10178 Comm: syz.3.2189 Not tainted syzkaller #0
[  242.772773][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  242.782932][T10178] Call Trace:
[  242.786217][T10178]  <TASK>
[  242.789157][T10178]  dump_stack_lvl+0x188/0x250
[  242.793854][T10178]  ? show_regs_print_info+0x20/0x20
[  242.799149][T10178]  ? load_image+0x410/0x410
[  242.803676][T10178]  ? __lock_acquire+0x7d40/0x7d40
[  242.808717][T10178]  should_fail+0x383/0x4b0
[  242.813151][T10178]  _copy_from_user+0x2e/0x170
[  242.817832][T10178]  __copy_msghdr_from_user+0xc9/0x630
[  242.823210][T10178]  ? verify_lock_unused+0x140/0x140
[  242.828514][T10178]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  242.833836][T10178]  ___sys_sendmsg+0x19a/0x2e0
[  242.838529][T10178]  ? __sys_sendmsg+0x290/0x290
[  242.843330][T10178]  __se_sys_sendmsg+0x1b7/0x2a0
[  242.848193][T10178]  ? __x64_sys_sendmsg+0x80/0x80
[  242.850990][T10186] delete_channel: no stack
[  242.853133][T10178]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  242.863509][T10178]  ? lockdep_hardirqs_on+0x94/0x140
[  242.868807][T10178]  do_syscall_64+0x4c/0xa0
[  242.872998][T10186] delete_channel: no stack
[  242.873220][T10178]  ? clear_bhb_loop+0x30/0x80
[  242.882381][T10178]  ? clear_bhb_loop+0x30/0x80
[  242.887119][T10178]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  242.893028][T10178] RIP: 0033:0x7f2688f10199
[  242.897454][T10178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.917083][T10178] RSP: 002b:00007f2687168028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.925517][T10178] RAX: ffffffffffffffda RBX: 00007f2689197fa0 RCX: 00007f2688f10199
[  242.933510][T10178] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003
[  242.941492][T10178] RBP: 00007f2687168090 R08: 0000000000000000 R09: 0000000000000000
[  242.949519][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.957493][T10178] R13: 00007f2689198038 R14: 00007f2689197fa0 R15: 00007fff45231d18
[  242.965480][T10178]  </TASK>
[  243.065482][T10193] netlink: 'syz.4.2194': attribute type 2 has an invalid length.
[  243.091220][T10193] netlink: 'syz.4.2194': attribute type 2 has an invalid length.
[  243.164374][T10193] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  243.381684][T10205] __nla_validate_parse: 5 callbacks suppressed
[  243.381702][T10205] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2199'.
[  243.541141][T10221] validate_nla: 1 callbacks suppressed
[  243.541160][T10221] netlink: 'syz.1.2206': attribute type 10 has an invalid length.
[  243.711523][T10235] netlink: 'syz.0.2210': attribute type 2 has an invalid length.
[  243.741787][T10235] netlink: 'syz.0.2210': attribute type 2 has an invalid length.
[  243.839032][T10235] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2210'.
[  243.882709][T10235] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  244.039940][T10254] netlink: 212400 bytes leftover after parsing attributes in process `syz.4.2219'.
[  244.282842][T10269] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.2226'.
[  244.484119][T10284] delete_channel: no stack
[  244.495636][T10282] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2232'.
[  244.532896][T10284] netlink: 'syz.3.2233': attribute type 10 has an invalid length.
[  244.542199][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2233'.
[  244.699431][T10295] FAULT_INJECTION: forcing a failure.
[  244.699431][T10295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.733284][T10295] CPU: 0 PID: 10295 Comm: syz.2.2237 Not tainted syzkaller #0
[  244.740787][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  244.750938][T10295] Call Trace:
[  244.754220][T10295]  <TASK>
[  244.757145][T10295]  dump_stack_lvl+0x188/0x250
[  244.761821][T10295]  ? show_regs_print_info+0x20/0x20
[  244.767012][T10295]  ? load_image+0x410/0x410
[  244.771501][T10295]  ? __lock_acquire+0x7d40/0x7d40
[  244.776524][T10295]  should_fail+0x383/0x4b0
[  244.780939][T10295]  _copy_from_user+0x2e/0x170
[  244.785665][T10295]  __copy_msghdr_from_user+0xc9/0x630
[  244.791042][T10295]  ? verify_lock_unused+0x140/0x140
[  244.796230][T10295]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  244.801516][T10295]  ___sys_sendmsg+0x19a/0x2e0
[  244.806195][T10295]  ? __sys_sendmsg+0x290/0x290
[  244.811073][T10295]  __se_sys_sendmsg+0x1b7/0x2a0
[  244.815919][T10295]  ? __x64_sys_sendmsg+0x80/0x80
[  244.820845][T10295]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  244.826921][T10295]  ? lockdep_hardirqs_on+0x94/0x140
[  244.832113][T10295]  do_syscall_64+0x4c/0xa0
[  244.836521][T10295]  ? clear_bhb_loop+0x30/0x80
[  244.841202][T10295]  ? clear_bhb_loop+0x30/0x80
[  244.845869][T10295]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  244.851751][T10295] RIP: 0033:0x7f9f4b7f8199
[  244.856155][T10295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.876012][T10295] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.884484][T10295] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  244.892444][T10295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  244.900409][T10295] RBP: 00007f9f49a50090 R08: 0000000000000000 R09: 0000000000000000
[  244.908376][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.916335][T10295] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  244.924309][T10295]  </TASK>
[  244.960208][T10301] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2238'.
[  245.008685][T10300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2239'.
[  245.049362][T10308] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2241'.
[  245.245663][T10312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2242'.
[  245.592227][T10324] delete_channel: no stack
[  245.635845][T10324] netlink: 'syz.3.2247': attribute type 10 has an invalid length.
[  245.788680][T10332] netlink: 'syz.3.2249': attribute type 21 has an invalid length.
[  245.856812][T10332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  245.883076][T10332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.931409][T10338] FAULT_INJECTION: forcing a failure.
[  245.931409][T10338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.965146][T10338] CPU: 0 PID: 10338 Comm: syz.2.2254 Not tainted syzkaller #0
[  245.972756][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  245.982822][T10338] Call Trace:
[  245.986124][T10338]  <TASK>
[  245.989048][T10338]  dump_stack_lvl+0x188/0x250
[  245.993809][T10338]  ? show_regs_print_info+0x20/0x20
[  245.998999][T10338]  ? load_image+0x410/0x410
[  246.003491][T10338]  ? __lock_acquire+0x7d40/0x7d40
[  246.008509][T10338]  should_fail+0x383/0x4b0
[  246.012929][T10338]  _copy_from_user+0x2e/0x170
[  246.017606][T10338]  iovec_from_user+0x142/0x370
[  246.022378][T10338]  __import_iovec+0x70/0x490
[  246.026979][T10338]  import_iovec+0x6f/0xa0
[  246.031304][T10338]  ___sys_sendmsg+0x1fd/0x2e0
[  246.035976][T10338]  ? __sys_sendmsg+0x290/0x290
[  246.040737][T10338]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  246.046457][T10338]  __se_sys_sendmsg+0x1b7/0x2a0
[  246.051303][T10338]  ? __x64_sys_sendmsg+0x80/0x80
[  246.056236][T10338]  ? syscall_enter_from_user_mode+0x2a/0x70
[  246.062123][T10338]  do_syscall_64+0x4c/0xa0
[  246.066631][T10338]  ? clear_bhb_loop+0x30/0x80
[  246.071295][T10338]  ? clear_bhb_loop+0x30/0x80
[  246.075956][T10338]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  246.081839][T10338] RIP: 0033:0x7f9f4b7f8199
[  246.086254][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.105870][T10338] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.114293][T10338] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  246.122264][T10338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  246.130230][T10338] RBP: 00007f9f49a50090 R08: 0000000000000000 R09: 0000000000000000
[  246.138194][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.146153][T10338] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  246.154126][T10338]  </TASK>
[  246.238030][T10358] delete_channel: no stack
[  246.249195][T10357] netlink: 'syz.4.2259': attribute type 2 has an invalid length.
[  246.280895][T10358] netlink: 'syz.2.2260': attribute type 10 has an invalid length.
[  246.294300][T10357] netlink: 'syz.4.2259': attribute type 2 has an invalid length.
[  246.317334][T10362] netlink: 'syz.1.2262': attribute type 2 has an invalid length.
[  246.355284][T10357] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  246.403904][T10362] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  246.408258][T10368] FAULT_INJECTION: forcing a failure.
[  246.408258][T10368] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  246.577308][T10368] CPU: 0 PID: 10368 Comm: syz.2.2265 Not tainted syzkaller #0
[  246.584838][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  246.594908][T10368] Call Trace:
[  246.598204][T10368]  <TASK>
[  246.601154][T10368]  dump_stack_lvl+0x188/0x250
[  246.605853][T10368]  ? show_regs_print_info+0x20/0x20
[  246.611158][T10368]  ? load_image+0x410/0x410
[  246.615680][T10368]  ? __lock_acquire+0x7d40/0x7d40
[  246.620817][T10368]  should_fail+0x383/0x4b0
[  246.625252][T10368]  prepare_alloc_pages+0x1e3/0x5b0
[  246.630390][T10368]  __alloc_pages+0x11b/0x480
[  246.634976][T10368]  ? zone_statistics+0x170/0x170
[  246.639929][T10368]  ? __rwlock_init+0x140/0x140
[  246.644706][T10368]  ? alloc_pages+0x452/0x560
[  246.649311][T10368]  __get_free_pages+0x8/0x30
[  246.653891][T10368]  kasan_populate_vmalloc_pte+0x21/0xc0
[  246.659461][T10368]  __apply_to_page_range+0x987/0xd10
[  246.664753][T10368]  ? kasan_populate_vmalloc+0x70/0x70
[  246.670141][T10368]  alloc_vmap_area+0x19e8/0x1b30
[  246.675081][T10368]  ? vm_map_ram+0xba0/0xba0
[  246.679578][T10368]  __get_vm_area_node+0x14f/0x2d0
[  246.684589][T10368]  __vmalloc_node_range+0xef/0x8b0
[  246.689691][T10368]  ? stack_map_alloc+0x305/0x550
[  246.694730][T10368]  ? apparmor_capable+0x12c/0x190
[  246.699751][T10368]  ? bpf_lsm_capable+0x5/0x10
[  246.704440][T10368]  bpf_map_area_alloc+0xd4/0xe0
[  246.709281][T10368]  ? stack_map_alloc+0x305/0x550
[  246.714211][T10368]  stack_map_alloc+0x305/0x550
[  246.718978][T10368]  map_create+0x481/0x2330
[  246.723382][T10368]  ? bpf_lsm_bpf+0x5/0x10
[  246.727798][T10368]  __sys_bpf+0x30a/0x6f0
[  246.732035][T10368]  ? bpf_link_show_fdinfo+0x380/0x380
[  246.737423][T10368]  __x64_sys_bpf+0x78/0x90
[  246.741847][T10368]  do_syscall_64+0x4c/0xa0
[  246.746272][T10368]  ? clear_bhb_loop+0x30/0x80
[  246.750945][T10368]  ? clear_bhb_loop+0x30/0x80
[  246.755608][T10368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  246.761495][T10368] RIP: 0033:0x7f9f4b7f8199
[  246.765904][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.785768][T10368] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  246.794200][T10368] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  246.802162][T10368] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000
[  246.810121][T10368] RBP: 00007f9f49a50090 R08: 0000000000000000 R09: 0000000000000000
[  246.818088][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.826050][T10368] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  246.834042][T10368]  </TASK>
[  246.972888][T10392] cgroup: fork rejected by pids controller in /syz0
[  247.192260][T10401] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  247.370946][T10403] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  247.498582][T10409] Dead loop on virtual device ip6_vti0, fix it urgently!
[  247.658994][T10414] device veth0_vlan left promiscuous mode
[  247.666911][T10414] device veth0_vlan entered promiscuous mode
[  247.676392][T10414] team0: Device veth0_vlan failed to register rx_handler
[  248.257763][T10430] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  248.429591][T10435] __nla_validate_parse: 12 callbacks suppressed
[  248.429632][T10435] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2291'.
[  248.458368][T10438] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.2292'.
[  248.485458][T10435] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  248.591354][T10446] validate_nla: 11 callbacks suppressed
[  248.591369][T10446] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  248.649600][T10446] batman_adv: batadv0: Adding interface: netdevsim0
[  248.663148][T10446] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.696772][T10446] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  248.725611][T10449] netlink: 'syz.1.2295': attribute type 21 has an invalid length.
[  248.734684][T10452] netlink: 'syz.2.2296': attribute type 14 has an invalid length.
[  248.742751][T10452] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2296'.
[  248.766057][T10453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2295'.
[  248.782840][T10453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  248.796961][T10453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.075605][T10467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2304'.
[  249.201853][T10475] netlink: 'syz.2.2307': attribute type 2 has an invalid length.
[  249.226619][T10478] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2308'.
[  249.245738][T10457] chnl_net:caif_netlink_parms(): no params data found
[  249.296462][T10475] netlink: 'syz.2.2307': attribute type 2 has an invalid length.
[  249.330707][T10478] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  249.432853][T10475] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2307'.
[  249.490303][T10475] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  249.600502][T10457] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.612154][T10457] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.635514][T10457] device bridge_slave_0 entered promiscuous mode
[  249.665051][T10457] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.697859][T10457] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.716560][T10457] device bridge_slave_1 entered promiscuous mode
[  249.778315][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.799317][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.899824][T10503] netlink: 'syz.2.2317': attribute type 21 has an invalid length.
[  249.938265][T10457] team0: Port device team_slave_0 added
[  249.967648][T10457] team0: Port device team_slave_1 added
[  249.982610][T10503] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2317'.
[  250.003429][T10503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  250.058475][T10503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.175182][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.200245][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.252088][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.282362][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.307022][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.397158][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.445780][T10512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2322'.
[  250.465147][T10515] netlink: 'syz.1.2323': attribute type 2 has an invalid length.
[  250.473828][T10517] netlink: 'syz.1.2323': attribute type 2 has an invalid length.
[  250.553481][T10515] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2323'.
[  250.577764][T10515] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  250.618768][T10457] device hsr_slave_0 entered promiscuous mode
[  250.647887][T10457] device hsr_slave_1 entered promiscuous mode
[  250.675785][T10457] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.713111][T10457] Cannot create hsr debugfs directory
[  250.819199][T10526] netlink: 'syz.4.2328': attribute type 1 has an invalid length.
[  250.863449][ T4700] Bluetooth: hci1: command 0x0409 tx timeout
[  251.063068][T10457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.068097][T10535] delete_channel: no stack
[  251.141808][T10535] netlink: 'syz.4.2330': attribute type 10 has an invalid length.
[  251.167251][T10457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.203275][T10540] delete_channel: no stack
[  251.303725][T10545] delete_channel: no stack
[  251.341419][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  251.373571][T10543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.424586][T10457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.549295][T10457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.813424][  T154] tipc: Left network mode
[  251.836508][T10570] delete_channel: no stack
[  251.991476][T10457] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  252.010215][T10457] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  252.065653][T10457] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  252.084331][T10457] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  252.328720][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.365840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  252.394372][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  252.418745][T10457] 8021q: adding VLAN 0 to HW filter on device team0
[  252.484933][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  252.506124][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  252.525641][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.532746][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.553511][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.564068][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  252.580412][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.587576][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.620272][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  252.709615][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  252.719990][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  252.728098][T10594] delete_channel: no stack
[  252.753933][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  252.782947][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  252.808732][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  252.833058][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  252.851306][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  252.903831][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  252.930371][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  252.934948][ T4722] Bluetooth: hci1: command 0x041b tx timeout
[  252.970702][T10457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.004415][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  253.034377][T10602] device wlan1 left promiscuous mode
[  253.066092][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  253.082179][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  253.232018][T10615] net_ratelimit: 2 callbacks suppressed
[  253.232060][T10615] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  253.398800][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  253.406976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  253.423254][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.444520][T10634] delete_channel: no stack
[  253.473045][T10634] __nla_validate_parse: 16 callbacks suppressed
[  253.473077][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2372'.
[  253.553094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  253.571892][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  253.634062][T10639] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2374'.
[  253.702377][T10457] device veth0_vlan entered promiscuous mode
[  253.725742][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  253.736223][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  253.750348][T10457] device veth1_vlan entered promiscuous mode
[  253.758873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  253.775879][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  253.798047][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  253.885045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  253.903799][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  253.943191][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  253.956112][T10457] device veth0_macvtap entered promiscuous mode
[  254.010258][T10457] device veth1_macvtap entered promiscuous mode
[  254.114219][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.162800][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.215045][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.252335][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.275684][T10663] validate_nla: 18 callbacks suppressed
[  254.275701][T10663] netlink: 'syz.1.2382': attribute type 10 has an invalid length.
[  254.299067][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.313707][T10664] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2380'.
[  254.323767][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.345416][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.373131][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.408303][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.424358][T10664] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  254.453044][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.502590][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.541375][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.573409][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.605605][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.646288][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.670643][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.692348][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.722909][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.734754][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.760290][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.784201][T10658] netlink: 'syz.2.2380': attribute type 2 has an invalid length.
[  271.814956][ T5378] Bluetooth: hci5: command 0x0409 tx timeout
[  272.055609][ T5378] Bluetooth: hci6: command 0x0409 tx timeout
[  272.135220][ T5378] Bluetooth: hci7: command 0x0409 tx timeout
[  273.014934][ T5378] Bluetooth: hci8: command 0x0409 tx timeout
[  273.894902][ T5378] Bluetooth: hci5: command 0x041b tx timeout
[  274.135007][ T5378] Bluetooth: hci6: command 0x041b tx timeout
[  274.225182][ T5378] Bluetooth: hci7: command 0x041b tx timeout
[  275.094928][ T5378] Bluetooth: hci8: command 0x041b tx timeout
[  275.975041][ T5378] Bluetooth: hci5: command 0x040f tx timeout
[  276.215622][ T5378] Bluetooth: hci6: command 0x040f tx timeout
[  276.305205][ T5378] Bluetooth: hci7: command 0x040f tx timeout
[  277.184915][ T5378] Bluetooth: hci8: command 0x040f tx timeout
[  278.064921][ T5378] Bluetooth: hci5: command 0x0419 tx timeout
[  278.304909][ T5378] Bluetooth: hci6: command 0x0419 tx timeout
[  278.385198][ T5378] Bluetooth: hci7: command 0x0419 tx timeout
[  279.265102][ T5378] Bluetooth: hci8: command 0x0419 tx timeout
[  311.655182][ T4687] Bluetooth: hci9: command 0x0409 tx timeout
[  313.735167][ T5378] Bluetooth: hci9: command 0x041b tx timeout
[  315.825186][ T5378] Bluetooth: hci9: command 0x040f tx timeout
[  317.895838][ T5378] Bluetooth: hci9: command 0x0419 tx timeout
[  331.753380][ T5379] Bluetooth: hci10: command 0x0409 tx timeout
[  332.854854][ T4233] Bluetooth: hci11: command 0x0409 tx timeout
[  332.945031][ T4233] Bluetooth: hci12: command 0x0409 tx timeout
[  333.814747][ T4233] Bluetooth: hci10: command 0x041b tx timeout
[  333.894807][ T4233] Bluetooth: hci13: command 0x0409 tx timeout
[  334.935649][ T4233] Bluetooth: hci11: command 0x041b tx timeout
[  335.015715][ T4233] Bluetooth: hci12: command 0x041b tx timeout
[  335.894839][ T4233] Bluetooth: hci10: command 0x040f tx timeout
[  335.974957][ T4233] Bluetooth: hci13: command 0x041b tx timeout
[  337.014938][ T4233] Bluetooth: hci11: command 0x040f tx timeout
[  337.095193][ T4233] Bluetooth: hci12: command 0x040f tx timeout
[  337.984877][ T4233] Bluetooth: hci10: command 0x0419 tx timeout
[  338.054918][ T4233] Bluetooth: hci13: command 0x040f tx timeout
[  339.104888][ T4233] Bluetooth: hci11: command 0x0419 tx timeout
[  339.175070][ T4233] Bluetooth: hci12: command 0x0419 tx timeout
[  340.134893][ T4233] Bluetooth: hci13: command 0x0419 tx timeout
[  359.794814][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  359.794831][    C0] 	(detected by 0, t=10502 jiffies, g=28241, q=1023)
[  359.794840][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294973110-4294962608), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  359.794852][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g28241 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x402
[  359.794862][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=20233
[  359.794868][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g28241 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  359.794878][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  359.794882][    C0] rcu: RCU grace-period kthread stack dump:
[  359.794886][    C0] task:rcu_preempt     state:I stack:27472 pid:   15 ppid:     2 flags:0x00004000
[  359.794930][    C0] Call Trace:
[  359.794967][    C0]  <TASK>
[  359.795027][    C0]  __schedule+0x11c3/0x4350
[  359.795141][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  359.795154][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  359.795194][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  359.795204][    C0]  ? _raw_spin_unlock+0x40/0x40
[  359.795214][    C0]  ? rcu_is_watching+0x11/0xa0
[  359.795267][    C0]  ? release_firmware_map_entry+0x190/0x190
[  359.795284][    C0]  schedule+0x11b/0x1e0
[  359.795294][    C0]  schedule_timeout+0x184/0x2d0
[  359.795304][    C0]  ? console_conditional_schedule+0x40/0x40
[  359.795314][    C0]  ? update_process_times+0x200/0x200
[  359.795365][    C0]  ? prepare_to_swait_event+0x33d/0x360
[  359.795419][    C0]  rcu_gp_fqs_loop+0x2be/0x11f0
[  359.795430][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  359.795442][    C0]  ? rcu_gp_init+0xd72/0x10f0
[  359.795453][    C0]  ? rcu_gp_init+0x10f0/0x10f0
[  359.795463][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  359.795473][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  359.795482][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  359.795493][    C0]  rcu_gp_kthread+0x9a/0x370
[  359.795504][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  359.795514][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  359.795525][    C0]  ? __kthread_parkme+0x14e/0x1b0
[  359.795562][    C0]  kthread+0x42e/0x520
[  359.795571][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  359.795583][    C0]  ? kthread_blkcg+0xd0/0xd0
[  359.795592][    C0]  ret_from_fork+0x1f/0x30
[  359.795614][    C0]  </TASK>
[  359.795637][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  359.795646][    C0] NMI backtrace for cpu 0
[  359.795656][    C0] CPU: 0 PID: 10658 Comm: syz.2.2380 Not tainted syzkaller #0
[  359.795668][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  359.795674][    C0] Call Trace:
[  359.795678][    C0]  <IRQ>
[  359.795682][    C0]  dump_stack_lvl+0x188/0x250
[  359.795697][    C0]  ? __printk_safe_exit+0x5/0x10
[  359.795731][    C0]  ? show_regs_print_info+0x20/0x20
[  359.795741][    C0]  ? load_image+0x410/0x410
[  359.795753][    C0]  ? irq_work_queue+0xbf/0x140
[  359.795802][    C0]  nmi_cpu_backtrace+0x3a2/0x3d0
[  359.795839][    C0]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  359.795848][    C0]  ? _printk+0xda/0x130
[  359.795857][    C0]  ? cpu_online+0x1d/0x30
[  359.795866][    C0]  ? load_image+0x410/0x410
[  359.795876][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  359.795910][    C0]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  359.795921][    C0]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  359.795933][    C0]  print_other_cpu_stall+0x1110/0x1270
[  359.795948][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  359.795957][    C0]  ? timekeeping_advance+0x82c/0xb20
[  359.795968][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  359.795983][    C0]  rcu_sched_clock_irq+0x845/0x1120
[  359.795995][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  359.796005][    C0]  ? hrtimer_run_queues+0x162/0x400
[  359.796015][    C0]  ? account_process_tick+0x22a/0x3a0
[  359.796046][    C0]  update_process_times+0x193/0x200
[  359.796058][    C0]  tick_sched_timer+0x37d/0x560
[  359.796091][    C0]  ? tick_setup_sched_timer+0x2b0/0x2b0
[  359.796101][    C0]  __hrtimer_run_queues+0x4b0/0xb60
[  359.796119][    C0]  ? hrtimer_interrupt+0x8b0/0x8b0
[  359.796134][    C0]  hrtimer_interrupt+0x397/0x8b0
[  359.796154][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  359.796170][    C0]  sysvec_apic_timer_interrupt+0x4d/0xc0
[  359.796181][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  359.796216][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  359.796228][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 5f ce 86 f7 65 8b 05 e0 e4 36 76 85 c0 74 3c 48 c7 04 24 0e 36
[  359.796262][    C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000206
[  359.796293][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: be6c9ad82e05a500
[  359.796300][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001
[  359.796307][    C0] RBP: ffffc90000007bd8 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[  359.796313][    C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: dffffc0000000000
[  359.796320][    C0] R13: 0000000000000001 R14: ffffffff8d123400 R15: 1ffff92000000f68
[  359.796336][    C0]  ? _raw_spin_unlock+0x40/0x40
[  359.796351][    C0]  rcu_report_qs_rsp+0xad/0x1a0
[  359.796360][    C0]  rcu_core+0x11c5/0x1650
[  359.796373][    C0]  ? rcu_lock_acquire+0x30/0x30
[  359.796382][    C0]  ? local_bh_disable+0x20/0x20
[  359.796391][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  359.796408][    C0]  ? rebalance_domains+0x892/0x9b0
[  359.796424][    C0]  handle_softirqs+0x336/0x830
[  359.796457][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  359.796468][    C0]  ? do_softirq+0x210/0x210
[  359.796476][    C0]  ? hrtimer_interrupt+0x781/0x8b0
[  359.796487][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  359.796498][    C0]  __irq_exit_rcu+0x13b/0x230
[  359.796507][    C0]  ? irq_exit_rcu+0x20/0x20
[  359.796520][    C0]  irq_exit_rcu+0x5/0x20
[  359.796528][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  359.796539][    C0]  </IRQ>
[  359.796542][    C0]  <TASK>
[  359.796545][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  359.796555][    C0] RIP: 0010:snprintf+0xbf/0x140
[  359.796565][    C0] Code: c7 44 25 04 00 00 43 c6 44 25 06 00 ba 18 00 00 00 48 89 df 31 f6 e8 b0 ce b1 fd 48 b8 18 00 00 00 30 00 00 00 48 89 44 24 60 <48> 8d 45 10 48 89 44 24 68 48 8d 44 24 10 48 89 44 24 70 4c 89 ff
[  359.796572][    C0] RSP: 0018:ffffc90003f7eb80 EFLAGS: 00000202
[  359.796581][    C0] RAX: 0000003000000018 RBX: ffffc90003f7ebe0 RCX: 0000000000000000
[  359.796587][    C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90003f7ebf8
[  359.796593][    C0] RBP: ffffc90003f7ec70 R08: ffffc90003f7ebf7 R09: ffffc90003f7ebe0
[  359.796600][    C0] R10: dffffc0000000000 R11: fffff520007efd7f R12: dffffc0000000000
[  359.796606][    C0] R13: 1ffff920007efd78 R14: 000000000000000c R15: ffffc90003f7ecc0
[  359.796624][    C0]  ? vscnprintf+0x80/0x80
[  359.796635][    C0]  ? prb_read_valid+0x60/0x60
[  359.796647][    C0]  info_print_prefix+0x1fa/0x360
[  359.796658][    C0]  ? trace_raw_output_console+0xd0/0xd0
[  359.796674][    C0]  console_unlock+0x650/0x10f0
[  359.796683][    C0]  ? read_lock_is_recursive+0x10/0x10
[  359.796696][    C0]  ? console_trylock_spinning+0x370/0x370
[  359.796707][    C0]  ? __down_trylock_console_sem+0x19f/0x1f0
[  359.796716][    C0]  ? vprintk_emit+0xa7/0x150
[  359.796727][    C0]  ? printk_parse_prefix+0x310/0x310
[  359.796737][    C0]  ? vprintk_emit+0xa7/0x150
[  359.796745][    C0]  ? console_trylock+0x70/0x70
[  359.796752][    C0]  ? mark_lock+0x94/0x320
[  359.796762][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  359.796777][    C0]  ? vprintk_emit+0x150/0x150
[  359.796788][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  359.796798][    C0]  ? _raw_spin_unlock+0x40/0x40
[  359.796806][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  359.796818][    C0]  vprintk_emit+0xc0/0x150
[  359.796828][    C0]  _printk+0xda/0x130
[  359.796840][    C0]  ? load_image+0x410/0x410
[  359.796855][    C0]  __nla_validate_parse+0xc7f/0x27b0
[  359.796916][    C0]  ? __nla_validate+0x50/0x50
[  359.796929][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  359.796939][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  359.796950][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  359.796963][    C0]  __nla_parse+0x3c/0x50
[  359.796974][    C0]  addr_doit+0x1fc/0x4e0
[  359.797006][    C0]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  359.797062][    C0]  ? fill_route+0x5e0/0x5e0
[  359.797079][    C0]  ? fill_route+0x5e0/0x5e0
[  359.797087][    C0]  rtnetlink_rcv_msg+0x7f1/0xf10
[  359.797101][    C0]  ? rtnetlink_bind+0x80/0x80
[  359.797123][    C0]  ? perf_trace_lock+0xe4/0x390
[  359.797132][    C0]  ? verify_lock_unused+0x140/0x140
[  359.797143][    C0]  ? verify_lock_unused+0x140/0x140
[  359.797153][    C0]  ? perf_trace_lock+0xe4/0x390
[  359.797169][    C0]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  359.797207][    C0]  ? rcu_nmi_exit+0x6f/0xf0
[  359.797219][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  359.797233][    C0]  netlink_rcv_skb+0x1e9/0x430
[  359.797262][    C0]  ? rtnetlink_bind+0x80/0x80
[  359.797273][    C0]  ? netlink_ack+0xb10/0xb10
[  359.797290][    C0]  netlink_unicast+0x78f/0x940
[  359.797327][    C0]  netlink_sendmsg+0x8ba/0xbe0
[  359.797335][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  359.797349][    C0]  ? netlink_getsockopt+0x570/0x570
[  359.797359][    C0]  ? security_socket_sendmsg+0x70/0xa0
[  359.797409][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  359.797438][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  359.797448][    C0]  ? netlink_getsockopt+0x570/0x570
[  359.797457][    C0]  ____sys_sendmsg+0x5be/0x8f0
[  359.797494][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[  359.797509][    C0]  ? import_iovec+0x6f/0xa0
[  359.797525][    C0]  ___sys_sendmsg+0x236/0x2e0
[  359.797539][    C0]  ? __sys_sendmsg+0x290/0x290
[  359.797568][    C0]  __se_sys_sendmsg+0x1b7/0x2a0
[  359.797579][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  359.797594][    C0]  ? syscall_enter_from_user_mode+0x2a/0x70
[  359.797606][    C0]  do_syscall_64+0x4c/0xa0
[  359.797615][    C0]  ? clear_bhb_loop+0x30/0x80
[  359.797624][    C0]  ? clear_bhb_loop+0x30/0x80
[  359.797634][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.797644][    C0] RIP: 0033:0x7f9f4b7f8199
[  359.797657][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.797665][    C0] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.797677][    C0] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  359.797684][    C0] RDX: 0000000020000800 RSI: 0000200000000080 RDI: 0000000000000005
[  359.797690][    C0] RBP: 00007f9f4b88f888 R08: 0000000000000000 R09: 0000000000000000
[  359.797696][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.797702][    C0] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  359.797715][    C0]  </TASK>
[  363.095063][ T4700] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10831 jiffies s: 15985 root: 0x1/.
[  363.095167][ T4700] rcu: blocking rcu_node structures (internal RCU debug):
[  363.095261][ T4700] Task dump for CPU 0:
[  363.095272][ T4700] task:syz.2.2380      state:R  running task     stack:24112 pid:10658 ppid:  4186 flags:0x0000400c
[  363.095317][ T4700] Call Trace:
[  363.095325][ T4700]  <TASK>
[  363.095336][ T4700]  ? load_image+0x410/0x410
[  363.095383][ T4700]  ? __nla_validate_parse+0xc7f/0x27b0
[  363.095424][ T4700]  ? __nla_validate+0x50/0x50
[  363.095450][ T4700]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  363.095474][ T4700]  ? lockdep_hardirqs_on+0x94/0x140
[  363.095498][ T4700]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  363.095526][ T4700]  ? __nla_parse+0x3c/0x50
[  363.095549][ T4700]  ? addr_doit+0x1fc/0x4e0
[  363.095569][ T4700]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  363.095596][ T4700]  ? fill_route+0x5e0/0x5e0
[  363.095630][ T4700]  ? fill_route+0x5e0/0x5e0
[  363.095649][ T4700]  ? rtnetlink_rcv_msg+0x7f1/0xf10
[  363.095678][ T4700]  ? rtnetlink_bind+0x80/0x80
[  363.095722][ T4700]  ? perf_trace_lock+0xe4/0x390
[  363.095743][ T4700]  ? verify_lock_unused+0x140/0x140
[  363.095765][ T4700]  ? verify_lock_unused+0x140/0x140
[  363.095788][ T4700]  ? perf_trace_lock+0xe4/0x390
[  363.095810][ T4700]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  363.095838][ T4700]  ? rcu_nmi_exit+0x6f/0xf0
[  363.095862][ T4700]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  363.095890][ T4700]  ? netlink_rcv_skb+0x1e9/0x430
[  363.095910][ T4700]  ? rtnetlink_bind+0x80/0x80
[  363.095933][ T4700]  ? netlink_ack+0xb10/0xb10
[  363.095968][ T4700]  ? netlink_unicast+0x78f/0x940
[  363.095999][ T4700]  ? netlink_sendmsg+0x8ba/0xbe0
[  363.096017][ T4700]  ? lockdep_hardirqs_on+0x94/0x140
[  363.096045][ T4700]  ? netlink_getsockopt+0x570/0x570
[  363.096068][ T4700]  ? security_socket_sendmsg+0x70/0xa0
[  363.096090][ T4700]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  363.096110][ T4700]  ? security_socket_sendmsg+0x7c/0xa0
[  363.096130][ T4700]  ? netlink_getsockopt+0x570/0x570
[  363.096151][ T4700]  ? ____sys_sendmsg+0x5be/0x8f0
[  363.096180][ T4700]  ? __sys_sendmsg_sock+0x30/0x30
[  363.096210][ T4700]  ? import_iovec+0x6f/0xa0
[  363.096234][ T4700]  ? ___sys_sendmsg+0x236/0x2e0
[  363.096262][ T4700]  ? __sys_sendmsg+0x290/0x290
[  363.096319][ T4700]  ? __se_sys_sendmsg+0x1b7/0x2a0
[  363.096343][ T4700]  ? __x64_sys_sendmsg+0x80/0x80
[  363.096382][ T4700]  ? syscall_enter_from_user_mode+0x2a/0x70
[  363.096408][ T4700]  ? do_syscall_64+0x4c/0xa0
[  363.096426][ T4700]  ? clear_bhb_loop+0x30/0x80
[  363.096445][ T4700]  ? clear_bhb_loop+0x30/0x80
[  363.096467][ T4700]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.096501][ T4700]  </TASK>
[  371.985141][ T5379] Bluetooth: hci14: command 0x0409 tx timeout
[  374.065242][ T5379] Bluetooth: hci14: command 0x041b tx timeout
[  376.145282][ T5379] Bluetooth: hci14: command 0x040f tx timeout
[  378.215237][ T5379] Bluetooth: hci14: command 0x0419 tx timeout
[  392.064892][ T4233] Bluetooth: hci15: command 0x0409 tx timeout
[  393.255016][ T5379] Bluetooth: hci17: command 0x0409 tx timeout
[  393.255064][ T5379] Bluetooth: hci16: command 0x0409 tx timeout
[  394.144863][ T5379] Bluetooth: hci15: command 0x041b tx timeout
[  394.214867][ T5379] Bluetooth: hci18: command 0x0409 tx timeout
[  395.334945][ T5379] Bluetooth: hci16: command 0x041b tx timeout
[  395.334994][ T5379] Bluetooth: hci17: command 0x041b tx timeout
[  395.894942][ T5379] Bluetooth: hci5: command 0x0406 tx timeout
[  395.894989][ T5379] Bluetooth: hci6: command 0x0406 tx timeout
[  395.895012][ T5379] Bluetooth: hci7: command 0x0406 tx timeout
[  395.895034][ T5379] Bluetooth: hci8: command 0x0406 tx timeout
[  396.214736][ T5379] Bluetooth: hci15: command 0x040f tx timeout
[  396.304909][ T5379] Bluetooth: hci18: command 0x041b tx timeout
[  397.425112][ T5379] Bluetooth: hci17: command 0x040f tx timeout
[  397.425159][ T5379] Bluetooth: hci16: command 0x040f tx timeout
[  398.304946][   T27] INFO: task kworker/u4:1:144 blocked for more than 143 seconds.
[  398.304981][   T27]       Not tainted syzkaller #0
[  398.304993][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.305001][   T27] task:kworker/u4:1    state:D stack:21904 pid:  144 ppid:     2 flags:0x00004000
[  398.305041][   T27] Workqueue: events_unbound linkwatch_event
[  398.305070][   T27] Call Trace:
[  398.305078][   T27]  <TASK>
[  398.305092][   T27]  __schedule+0x11c3/0x4350
[  398.305117][   T27]  ? __lock_acquire+0x13b3/0x7d40
[  398.305154][   T27]  ? rcu_lock_acquire+0x30/0x30
[  398.305175][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  398.305195][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.305215][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.305234][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.305257][   T27]  ? kthread_data+0x4b/0xc0
[  398.305282][   T27]  schedule+0x11b/0x1e0
[  398.305301][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.305319][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.305347][   T27]  ? linkwatch_event+0xa/0x50
[  398.305372][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.305390][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.305414][   T27]  ? read_lock_is_recursive+0x10/0x10
[  398.305434][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.305458][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.305477][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.305514][   T27]  mutex_lock_nested+0x17/0x20
[  398.305531][   T27]  linkwatch_event+0xa/0x50
[  398.305550][   T27]  process_one_work+0x867/0xff0
[  398.305662][   T27]  ? worker_detach_from_pool+0x240/0x240
[  398.305681][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  398.305707][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  398.305726][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  398.305749][   T27]  ? wq_worker_running+0x97/0x170
[  398.305771][   T27]  worker_thread+0xad7/0x12a0
[  398.305817][   T27]  kthread+0x42e/0x520
[  398.305834][   T27]  ? rcu_lock_release+0x20/0x20
[  398.305860][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.305879][   T27]  ret_from_fork+0x1f/0x30
[  398.305914][   T27]  </TASK>
[  398.305927][   T27] INFO: task kworker/u4:2:154 blocked for more than 143 seconds.
[  398.305940][   T27]       Not tainted syzkaller #0
[  398.305950][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.305960][   T27] task:kworker/u4:2    state:D stack:21232 pid:  154 ppid:     2 flags:0x00004000
[  398.305996][   T27] Workqueue: netns cleanup_net
[  398.306059][   T27] Call Trace:
[  398.306067][   T27]  <TASK>
[  398.306078][   T27]  __schedule+0x11c3/0x4350
[  398.306117][   T27]  ? rcu_lock_acquire+0x30/0x30
[  398.306137][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  398.306157][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.306177][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.306196][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.306219][   T27]  ? kthread_data+0x4b/0xc0
[  398.306242][   T27]  schedule+0x11b/0x1e0
[  398.306262][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.306279][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.306308][   T27]  ? ieee80211_unregister_hw+0x4d/0x220
[  398.306399][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.306416][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.306442][   T27]  ? up_write+0x1b6/0x410
[  398.306469][   T27]  mutex_lock_nested+0x17/0x20
[  398.306487][   T27]  ieee80211_unregister_hw+0x4d/0x220
[  398.306510][   T27]  mac80211_hwsim_del_radio+0x282/0x470
[  398.306594][   T27]  ? rhashtable_remove_fast+0xa70/0xa70
[  398.306624][   T27]  hwsim_exit_net+0x589/0x650
[  398.306645][   T27]  ? hwsim_init_net+0x80/0x80
[  398.306667][   T27]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[  398.306719][   T27]  cleanup_net+0x703/0xba0
[  398.306742][   T27]  ? ops_free_list+0x330/0x330
[  398.306759][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.306779][   T27]  ? _raw_spin_unlock+0x40/0x40
[  398.306801][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.306825][   T27]  process_one_work+0x867/0xff0
[  398.306866][   T27]  ? worker_detach_from_pool+0x240/0x240
[  398.306885][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  398.306909][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  398.306928][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  398.306951][   T27]  ? wq_worker_running+0x97/0x170
[  398.306972][   T27]  worker_thread+0xad7/0x12a0
[  398.307018][   T27]  kthread+0x42e/0x520
[  398.307035][   T27]  ? rcu_lock_release+0x20/0x20
[  398.307053][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.307073][   T27]  ret_from_fork+0x1f/0x30
[  398.307105][   T27]  </TASK>
[  398.307252][   T27] INFO: task kworker/0:34:4722 blocked for more than 143 seconds.
[  398.307266][   T27]       Not tainted syzkaller #0
[  398.307276][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.307285][   T27] task:kworker/0:34    state:D stack:25616 pid: 4722 ppid:     2 flags:0x00004000
[  398.307323][   T27] Workqueue: ipv6_addrconf addrconf_dad_work
[  398.307384][   T27] Call Trace:
[  398.307392][   T27]  <TASK>
[  398.307404][   T27]  __schedule+0x11c3/0x4350
[  398.307423][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.307467][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.307488][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.307509][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.307529][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.307548][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.307571][   T27]  schedule+0x11b/0x1e0
[  398.307591][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.307608][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.307638][   T27]  ? addrconf_dad_work+0xc4/0x1530
[  398.307662][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.307685][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.307709][   T27]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  398.307735][   T27]  mutex_lock_nested+0x17/0x20
[  398.307753][   T27]  addrconf_dad_work+0xc4/0x1530
[  398.307779][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.307801][   T27]  ? rcu_lock_release+0x20/0x20
[  398.307820][   T27]  ? read_lock_is_recursive+0x10/0x10
[  398.307846][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.307870][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.307890][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.307914][   T27]  process_one_work+0x867/0xff0
[  398.307947][   T27]  ? worker_detach_from_pool+0x240/0x240
[  398.307966][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  398.307990][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  398.308009][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  398.308032][   T27]  ? wq_worker_running+0x97/0x170
[  398.308053][   T27]  worker_thread+0xad7/0x12a0
[  398.308099][   T27]  kthread+0x42e/0x520
[  398.308116][   T27]  ? rcu_lock_release+0x20/0x20
[  398.308133][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.308153][   T27]  ret_from_fork+0x1f/0x30
[  398.308186][   T27]  </TASK>
[  398.308200][   T27] INFO: task kworker/1:36:5380 blocked for more than 143 seconds.
[  398.308213][   T27]       Not tainted syzkaller #0
[  398.308223][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.308231][   T27] task:kworker/1:36    state:D stack:25200 pid: 5380 ppid:     2 flags:0x00004000
[  398.308268][   T27] Workqueue: ipv6_addrconf addrconf_dad_work
[  398.308288][   T27] Call Trace:
[  398.308295][   T27]  <TASK>
[  398.308307][   T27]  __schedule+0x11c3/0x4350
[  398.308325][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.308368][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.308389][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.308410][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.308430][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.308449][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.308473][   T27]  schedule+0x11b/0x1e0
[  398.308492][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.308509][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.308538][   T27]  ? addrconf_dad_work+0xc4/0x1530
[  398.308562][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.308584][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.308616][   T27]  mutex_lock_nested+0x17/0x20
[  398.308634][   T27]  addrconf_dad_work+0xc4/0x1530
[  398.308660][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.308681][   T27]  ? rcu_lock_release+0x20/0x20
[  398.308701][   T27]  ? read_lock_is_recursive+0x10/0x10
[  398.308721][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.308744][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.308764][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  398.308788][   T27]  process_one_work+0x867/0xff0
[  398.308821][   T27]  ? worker_detach_from_pool+0x240/0x240
[  398.308848][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  398.308872][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  398.308891][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  398.308914][   T27]  ? wq_worker_running+0x97/0x170
[  398.308935][   T27]  worker_thread+0xad7/0x12a0
[  398.308981][   T27]  kthread+0x42e/0x520
[  398.308998][   T27]  ? rcu_lock_release+0x20/0x20
[  398.309016][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.309035][   T27]  ret_from_fork+0x1f/0x30
[  398.309068][   T27]  </TASK>
[  398.309079][   T27] INFO: task syz.4.2377:10644 blocked for more than 143 seconds.
[  398.309092][   T27]       Not tainted syzkaller #0
[  398.309102][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.309110][   T27] task:syz.4.2377      state:D stack:27184 pid:10644 ppid:  4195 flags:0x00004004
[  398.309145][   T27] Call Trace:
[  398.309152][   T27]  <TASK>
[  398.309164][   T27]  __schedule+0x11c3/0x4350
[  398.309185][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.309210][   T27]  ? lock_chain_count+0x20/0x20
[  398.309235][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  398.309255][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  398.309276][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.309299][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.309319][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.309336][   T27]  ? queue_work_on+0x196/0x1f0
[  398.309354][   T27]  ? __might_sleep+0xf0/0xf0
[  398.309373][   T27]  ? wq_worker_last_func+0x40/0x40
[  398.309399][   T27]  schedule+0x11b/0x1e0
[  398.309419][   T27]  synchronize_rcu_expedited+0x5c1/0x750
[  398.309443][   T27]  ? synchronize_rcu+0x1e0/0x1e0
[  398.309465][   T27]  ? packet_release+0x94f/0xc40
[  398.309528][   T27]  ? rcu_exp_sel_wait_wake+0x1d30/0x1d30
[  398.309561][   T27]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  398.309583][   T27]  ? __might_sleep+0xf0/0xf0
[  398.309599][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  398.309620][   T27]  ? init_wait_entry+0xd0/0xd0
[  398.309641][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  398.309660][   T27]  ? _local_bh_enable+0xa0/0xa0
[  398.309686][   T27]  packet_release+0x954/0xc40
[  398.309716][   T27]  sock_close+0xbf/0x210
[  398.309738][   T27]  ? sock_mmap+0x90/0x90
[  398.309758][   T27]  __fput+0x212/0x8c0
[  398.309851][   T27]  task_work_run+0x125/0x1a0
[  398.309876][   T27]  exit_to_user_mode_loop+0x10f/0x130
[  398.309896][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  398.309916][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  398.309935][   T27]  do_syscall_64+0x58/0xa0
[  398.309953][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.309973][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.309994][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  398.310015][   T27] RIP: 0033:0x7f1df4b65199
[  398.310032][   T27] RSP: 002b:00007ffdf4c4db28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  398.310054][   T27] RAX: 0000000000000000 RBX: 00007f1df4deeda0 RCX: 00007f1df4b65199
[  398.310067][   T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  398.310080][   T27] RBP: 00007f1df4deeda0 R08: 0000000000000006 R09: 0000000000000000
[  398.310093][   T27] R10: 00007f1df4deecb0 R11: 0000000000000246 R12: 000000000003e247
[  398.310107][   T27] R13: 00007f1df4ded45c R14: 000000000003e06a R15: 00007f1df4ded450
[  398.310135][   T27]  </TASK>
[  398.310144][   T27] INFO: task syz.4.2377:10647 blocked for more than 143 seconds.
[  398.310157][   T27]       Not tainted syzkaller #0
[  398.310167][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.310176][   T27] task:syz.4.2377      state:D stack:25520 pid:10647 ppid:  4195 flags:0x00004004
[  398.310209][   T27] Call Trace:
[  398.310216][   T27]  <TASK>
[  398.310228][   T27]  __schedule+0x11c3/0x4350
[  398.310266][   T27]  ? rcu_lock_acquire+0x30/0x30
[  398.310286][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  398.310305][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.310325][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.310344][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.310367][   T27]  ? rcu_lock_release+0x20/0x20
[  398.310392][   T27]  schedule+0x11b/0x1e0
[  398.310411][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.310428][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.310457][   T27]  ? register_nexthop_notifier+0x84/0x240
[  398.310491][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.310508][   T27]  ? kernel_clone+0x23f/0x990
[  398.310574][   T27]  mutex_lock_nested+0x17/0x20
[  398.310592][   T27]  register_nexthop_notifier+0x84/0x240
[  398.310612][   T27]  ? free_zapped_rcu+0x1f0/0x1f0
[  398.310634][   T27]  ? fib_check_nexthop+0x550/0x550
[  398.310660][   T27]  ? memset+0x1e/0x40
[  398.310709][   T27]  ops_init+0x360/0x5f0
[  398.310737][   T27]  setup_net+0x39e/0xa10
[  398.310758][   T27]  ? copy_net_ns+0x5b0/0x5b0
[  398.310784][   T27]  ? down_read_killable+0x1ce/0x340
[  398.310807][   T27]  copy_net_ns+0x33e/0x5b0
[  398.310830][   T27]  create_new_namespaces+0x3ce/0x700
[  398.310895][   T27]  copy_namespaces+0x378/0x3d0
[  398.310919][   T27]  copy_process+0x17f0/0x3e70
[  398.310966][   T27]  ? __pidfd_prepare+0x140/0x140
[  398.310988][   T27]  ? verify_lock_unused+0x140/0x140
[  398.311016][   T27]  kernel_clone+0x23f/0x990
[  398.311043][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.311065][   T27]  ? create_io_thread+0x180/0x180
[  398.311102][   T27]  __x64_sys_clone+0x19a/0x210
[  398.311124][   T27]  ? __ia32_sys_vfork+0x130/0x130
[  398.311159][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.311183][   T27]  do_syscall_64+0x4c/0xa0
[  398.311202][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.311220][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.311241][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  398.311262][   T27] RIP: 0033:0x7f1df4b65199
[  398.311277][   T27] RSP: 002b:00007f1df2d7afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  398.311299][   T27] RAX: ffffffffffffffda RBX: 00007f1df4ded180 RCX: 00007f1df4b65199
[  398.311313][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000061000600
[  398.311326][   T27] RBP: 00007f1df4bfc888 R08: 0000000000000000 R09: 0000000000000000
[  398.311339][   T27] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  398.311351][   T27] R13: 00007f1df4ded218 R14: 00007f1df4ded180 R15: 00007ffdf4c4d9c8
[  398.311380][   T27]  </TASK>
[  398.311391][   T27] INFO: task syz.2.2380:10661 blocked for more than 143 seconds.
[  398.311404][   T27]       Not tainted syzkaller #0
[  398.311414][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.311423][   T27] task:syz.2.2380      state:D stack:27344 pid:10661 ppid:  4186 flags:0x00004004
[  398.311458][   T27] Call Trace:
[  398.311466][   T27]  <TASK>
[  398.311478][   T27]  __schedule+0x11c3/0x4350
[  398.311516][   T27]  ? rcu_lock_acquire+0x30/0x30
[  398.311536][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  398.311556][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.311575][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.311595][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.311618][   T27]  ? rcu_lock_release+0x20/0x20
[  398.311642][   T27]  schedule+0x11b/0x1e0
[  398.311661][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.311679][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.311707][   T27]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  398.311733][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.311755][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.311787][   T27]  mutex_lock_nested+0x17/0x20
[  398.311805][   T27]  rtnetlink_rcv_msg+0x79f/0xf10
[  398.311834][   T27]  ? rtnetlink_bind+0x80/0x80
[  398.311863][   T27]  ? __lock_acquire+0x12df/0x7d40
[  398.311886][   T27]  ? __lock_acquire+0x12df/0x7d40
[  398.311922][   T27]  ? perf_trace_lock+0xe4/0x390
[  398.311942][   T27]  ? verify_lock_unused+0x140/0x140
[  398.311963][   T27]  ? verify_lock_unused+0x140/0x140
[  398.311986][   T27]  ? perf_trace_lock+0xe4/0x390
[  398.312009][   T27]  ? perf_trace_lock+0xe4/0x390
[  398.312035][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.312068][   T27]  netlink_rcv_skb+0x1e9/0x430
[  398.312087][   T27]  ? rtnetlink_bind+0x80/0x80
[  398.312110][   T27]  ? netlink_ack+0xb10/0xb10
[  398.312143][   T27]  netlink_unicast+0x78f/0x940
[  398.312175][   T27]  netlink_sendmsg+0x8ba/0xbe0
[  398.312202][   T27]  ? netlink_getsockopt+0x570/0x570
[  398.312219][   T27]  ? aa_sock_msg_perm+0x94/0x150
[  398.312282][   T27]  ? apparmor_socket_sendmsg+0x88/0x230
[  398.312302][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  398.312323][   T27]  ? security_socket_sendmsg+0x7c/0xa0
[  398.312343][   T27]  ? netlink_getsockopt+0x570/0x570
[  398.312364][   T27]  ____sys_sendmsg+0x5be/0x8f0
[  398.312393][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  398.312422][   T27]  ? import_iovec+0x6f/0xa0
[  398.312447][   T27]  ___sys_sendmsg+0x236/0x2e0
[  398.312475][   T27]  ? __sys_sendmsg+0x290/0x290
[  398.312532][   T27]  __se_sys_sendmsg+0x1b7/0x2a0
[  398.312556][   T27]  ? __x64_sys_sendmsg+0x80/0x80
[  398.312575][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.312608][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.312632][   T27]  do_syscall_64+0x4c/0xa0
[  398.312650][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.312669][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.312690][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  398.312710][   T27] RIP: 0033:0x7f9f4b7f8199
[  398.312726][   T27] RSP: 002b:00007f9f49a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.312747][   T27] RAX: ffffffffffffffda RBX: 00007f9f4ba80090 RCX: 00007f9f4b7f8199
[  398.312761][   T27] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  398.312774][   T27] RBP: 00007f9f4b88f888 R08: 0000000000000000 R09: 0000000000000000
[  398.312788][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.312800][   T27] R13: 00007f9f4ba80128 R14: 00007f9f4ba80090 R15: 00007fffd39d0fe8
[  398.312829][   T27]  </TASK>
[  398.312846][   T27] INFO: task syz.1.2382:10663 blocked for more than 143 seconds.
[  398.312859][   T27]       Not tainted syzkaller #0
[  398.312869][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.312878][   T27] task:syz.1.2382      state:D stack:26704 pid:10663 ppid:  4188 flags:0x00004004
[  398.312912][   T27] Call Trace:
[  398.312919][   T27]  <TASK>
[  398.312931][   T27]  __schedule+0x11c3/0x4350
[  398.312968][   T27]  ? rcu_lock_acquire+0x30/0x30
[  398.312989][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  398.313009][   T27]  ? release_firmware_map_entry+0x190/0x190
[  398.313029][   T27]  ? __lock_acquire+0x7d40/0x7d40
[  398.313048][   T27]  ? __mutex_trylock_common+0x86/0x260
[  398.313071][   T27]  ? rcu_lock_release+0x20/0x20
[  398.313095][   T27]  schedule+0x11b/0x1e0
[  398.313115][   T27]  schedule_preempt_disabled+0xf/0x20
[  398.313132][   T27]  __mutex_lock_common+0xdf5/0x2400
[  398.313161][   T27]  ? netlink_dump+0x70a/0xdd0
[  398.313184][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  398.313213][   T27]  ? __alloc_skb+0x473/0x750
[  398.313236][   T27]  mutex_lock_nested+0x17/0x20
[  398.313254][   T27]  netlink_dump+0x70a/0xdd0
[  398.313282][   T27]  ? netlink_lookup+0x1d0/0x1d0
[  398.313316][   T27]  __netlink_dump_start+0x4e4/0x720
[  398.313340][   T27]  rtnetlink_rcv_msg+0xd91/0xf10
[  398.313363][   T27]  ? rtnl_getlink+0xb90/0xb90
[  398.313386][   T27]  ? rtnetlink_bind+0x80/0x80
[  398.313449][   T27]  ? rtnl_getlink+0xb90/0xb90
[  398.313480][   T27]  netlink_rcv_skb+0x1e9/0x430
[  398.313499][   T27]  ? rtnetlink_bind+0x80/0x80
[  398.313522][   T27]  ? netlink_ack+0xb10/0xb10
[  398.313556][   T27]  netlink_unicast+0x78f/0x940
[  398.313586][   T27]  netlink_sendmsg+0x8ba/0xbe0
[  398.313613][   T27]  ? netlink_getsockopt+0x570/0x570
[  398.313630][   T27]  ? aa_sock_msg_perm+0x94/0x150
[  398.313651][   T27]  ? apparmor_socket_sendmsg+0x88/0x230
[  398.313672][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  398.313691][   T27]  ? security_socket_sendmsg+0x7c/0xa0
[  398.313711][   T27]  ? netlink_getsockopt+0x570/0x570
[  398.313731][   T27]  ____sys_sendmsg+0x5be/0x8f0
[  398.313760][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  398.313789][   T27]  ? import_iovec+0x6f/0xa0
[  398.313811][   T27]  ___sys_sendmsg+0x236/0x2e0
[  398.313847][   T27]  ? __sys_sendmsg+0x290/0x290
[  398.313879][   T27]  ? trace_event_raw_event_lock+0x250/0x250
[  398.313923][   T27]  __se_sys_sendmsg+0x1b7/0x2a0
[  398.313946][   T27]  ? __x64_sys_sendmsg+0x80/0x80
[  398.313965][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.313998][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  398.314023][   T27]  do_syscall_64+0x4c/0xa0
[  398.314041][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.314059][   T27]  ? clear_bhb_loop+0x30/0x80
[  398.314080][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  398.314101][   T27] RIP: 0033:0x7fc704055199
[  398.314116][   T27] RSP: 002b:00007fc7022ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.314136][   T27] RAX: ffffffffffffffda RBX: 00007fc7042dcfa0 RCX: 00007fc704055199
[  398.314151][   T27] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  398.314164][   T27] RBP: 00007fc7040ec888 R08: 0000000000000000 R09: 0000000000000000
[  398.314177][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.314190][   T27] R13: 00007fc7042dd038 R14: 00007fc7042dcfa0 R15: 00007ffe39be6248
[  398.314219][   T27]  </TASK>
[  398.314281][   T27] 
[  398.314281][   T27] Showing all locks held in the system:
[  398.314297][   T27] 1 lock held by khungtaskd/27:
[  398.314309][   T27]  #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  398.314367][   T27] 3 locks held by kworker/u4:1/144:
[  398.314379][   T27]  #0: ffff888017879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.314433][   T27]  #1: ffffc9000170fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.314487][   T27]  #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  398.314543][   T27] 4 locks held by kworker/u4:2/154:
[  398.314555][   T27]  #0: ffff8880179cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.314608][   T27]  #1: ffffc9000160fd00
[  398.316628][ T5379] Bluetooth: hci15: command 0x0419 tx timeout
[  398.339089][   T27]  (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.339142][   T27]  #2: ffffffff8e241690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[  398.339197][   T27]  #3: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x220
[  398.339300][   T27] 1 lock held by klogd/3548:
[  398.339315][   T27] 2 locks held by getty/3945:
[  398.339325][   T27]  #0: ffff88814d132098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  398.339444][   T27]  #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  398.339539][   T27] 3 locks held by kworker/1:17/4687:
[  398.339551][   T27]  #0: ffff888017871938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.339605][   T27]  #1: ffffc900033efd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.339657][   T27]  #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xa90
[  398.339765][   T27] 3 locks held by kworker/1:19/4691:
[  398.339778][   T27]  #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.339831][   T27]  #1: ffffc9000341fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.339893][   T27]  #2: ffffffff8d123930 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0
[  398.339948][   T27] 2 locks held by kworker/1:23/4700:
[  398.339960][   T27]  #0: ffff888017872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.340012][   T27]  #1: ffffc900034bfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.340069][   T27] 3 locks held by kworker/0:34/4722:
[  398.340081][   T27]  #0: ffff88802be2ad38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.340134][   T27]  #1: ffffc9000331fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.340188][   T27]  #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530
[  398.340244][   T27] 3 locks held by kworker/1:34/5378:
[  398.340256][   T27]  #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.340308][   T27]  #1: ffffc90002fafd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.340360][   T27]  #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[  398.340442][   T27] 3 locks held by kworker/1:36/5380:
[  398.340454][   T27]  #0: ffff88802be2ad38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  398.340507][   T27]  #1: ffffc900031ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  398.340561][   T27]  #2: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530
[  398.340613][   T27] 1 lock held by syz-executor/10457:
[  398.340625][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.340680][   T27] 2 locks held by syz.4.2377/10644:
[  398.340692][   T27]  #0: ffff88805778ac10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  398.340752][   T27]  #1: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750
[  398.340806][   T27] 2 locks held by syz.4.2377/10647:
[  398.340817][   T27]  #0: ffffffff8e241690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0
[  398.340876][   T27]  #1: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240
[  398.340931][   T27] 2 locks held by syz.2.2380/10658:
[  398.340944][   T27] 1 lock held by syz.2.2380/10661:
[  398.340955][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341009][   T27] 2 locks held by syz.1.2382/10663:
[  398.341020][   T27]  #0: ffff8880209fc690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf5/0x720
[  398.341077][   T27]  #1: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x70a/0xdd0
[  398.341129][   T27] 1 lock held by syz.3.2383/10667:
[  398.341140][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0xaf/0x470
[  398.341195][   T27] 1 lock held by syz-executor/10669:
[  398.341206][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341260][   T27] 1 lock held by syz-executor/10674:
[  398.341271][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341324][   T27] 1 lock held by syz-executor/10675:
[  398.341336][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341390][   T27] 1 lock held by syz-executor/10681:
[  398.341401][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341455][   T27] 2 locks held by dhcpcd/10683:
[  398.341466][   T27]  #0: ffff88805b5c0120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341529][   T27]  #1: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750
[  398.341583][   T27] 1 lock held by dhcpcd/10684:
[  398.341594][   T27]  #0: ffff8880260b4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341648][   T27] 1 lock held by dhcpcd/10685:
[  398.341659][   T27]  #0: ffff88805517c120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341713][   T27] 1 lock held by dhcpcd/10686:
[  398.341724][   T27]  #0: ffff88807cd54120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341777][   T27] 1 lock held by dhcpcd/10687:
[  398.341788][   T27]  #0: ffff88807bae4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341848][   T27] 1 lock held by dhcpcd/10688:
[  398.341858][   T27]  #0: ffff88805b5cc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  398.341912][   T27] 1 lock held by syz-executor/10690:
[  398.341923][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.341977][   T27] 1 lock held by syz-executor/10694:
[  398.341988][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342042][   T27] 1 lock held by syz-executor/10699:
[  398.342054][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342108][   T27] 1 lock held by syz-executor/10700:
[  398.342120][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342174][   T27] 1 lock held by syz-executor/10704:
[  398.342185][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342239][   T27] 1 lock held by syz-executor/10707:
[  398.342251][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342305][   T27] 1 lock held by syz-executor/10711:
[  398.342317][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342371][   T27] 1 lock held by syz-executor/10716:
[  398.342382][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342436][   T27] 1 lock held by syz-executor/10717:
[  398.342448][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342500][   T27] 1 lock held by syz-executor/10721:
[  398.342512][   T27]  #0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10
[  398.342567][   T27] 
[  398.342574][   T27] =============================================
[  398.342574][   T27] 
[  398.342583][   T27] NMI backtrace for cpu 1
[  398.342592][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  398.342609][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  398.342619][   T27] Call Trace:
[  398.342626][   T27]  <TASK>
[  398.342634][   T27]  dump_stack_lvl+0x188/0x250
[  398.342657][   T27]  ? show_regs_print_info+0x20/0x20
[  398.342675][   T27]  ? load_image+0x410/0x410
[  398.342692][   T27]  ? rcu_read_unlock_special+0xf0/0x4a0
[  398.342710][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  398.342734][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  398.342754][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  398.342771][   T27]  ? _printk+0xda/0x130
[  398.342787][   T27]  ? load_image+0x410/0x410
[  398.342806][   T27]  ? load_image+0x410/0x410
[  398.342825][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  398.342852][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  398.342873][   T27]  watchdog+0xe1b/0xe60
[  398.342907][   T27]  kthread+0x42e/0x520
[  398.342922][   T27]  ? hungtask_pm_notify+0x40/0x40
[  398.342938][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.342956][   T27]  ret_from_fork+0x1f/0x30
[  398.342987][   T27]  </TASK>
[  398.342995][   T27] Sending NMI from CPU 1 to CPUs 0:
[  398.343020][    C0] NMI backtrace for cpu 0
[  398.343028][    C0] CPU: 0 PID: 10658 Comm: syz.2.2380 Not tainted syzkaller #0
[  398.343042][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  398.343049][    C0] RIP: 0010:kasan_check_range+0x1b0/0x290
[  398.343114][    C0] Code: f3 4d 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b <41> 5c 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff
[  398.343126][    C0] RSP: 0018:ffffc90000006f38 EFLAGS: 00000056
[  398.343138][    C0] RAX: 0000000000000001 RBX: ffff88803b58bb80 RCX: ffffffff815daa54
[  398.343149][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff910150c0
[  398.343158][    C0] RBP: 0000000000000009 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[  398.343168][    C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: dffffc0000000001
[  398.343178][    C0] R13: dffffc0000000000 R14: 1ffffffff2202a18 R15: 0000000000000001
[  398.343188][    C0] FS:  00007f9f49a506c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  398.343201][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.343211][    C0] CR2: 00007f1df2d59ff8 CR3: 00000000201b4000 CR4: 00000000003506f0
[  398.343223][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  398.343232][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  398.343241][    C0] Call Trace:
[  398.343245][    C0]  <IRQ>
[  398.343251][    C0]  mark_lock+0x94/0x320
[  398.343265][    C0]  __lock_acquire+0xdb9/0x7d40
[  398.343288][    C0]  ? mark_lock+0x94/0x320
[  398.343300][    C0]  ? verify_lock_unused+0x140/0x140
[  398.343315][    C0]  ? __lock_acquire+0x12df/0x7d40
[  398.343331][    C0]  ? __lock_acquire+0x13b3/0x7d40
[  398.343359][    C0]  lock_acquire+0x19f/0x400
[  398.343373][    C0]  ? rcu_lock_acquire+0x5/0x30
[  398.343389][    C0]  ? rcu_lock_release+0x5/0x40
[  398.343402][    C0]  ? read_lock_is_recursive+0x10/0x10
[  398.343418][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  398.343433][    C0]  ? llist_add_batch+0x85/0xa0
[  398.343451][    C0]  rcu_lock_acquire+0x2a/0x30
[  398.343463][    C0]  ? rcu_lock_acquire+0x5/0x30
[  398.343474][    C0]  perf_output_begin_forward+0xa5/0xa30
[  398.343487][    C0]  ? kvm_is_in_guest+0x24/0x30
[  398.343568][    C0]  ? perf_prepare_sample+0x1690/0x1cb0
[  398.343585][    C0]  ? __perf_cgroup_move+0x140/0x140
[  398.343598][    C0]  ? perf_callchain+0x190/0x190
[  398.343614][    C0]  perf_event_output_forward+0x19b/0x2e0
[  398.343629][    C0]  ? perf_get_page_size+0x430/0x430
[  398.343647][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  398.343663][    C0]  __perf_event_overflow+0x35f/0x550
[  398.343679][    C0]  perf_swevent_event+0x4b8/0x540
[  398.343694][    C0]  perf_tp_event+0x324/0xbe0
[  398.343710][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  398.343733][    C0]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  398.343747][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  398.343766][    C0]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  398.343782][    C0]  perf_trace_preemptirq_template+0x2aa/0x360
[  398.343826][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  398.343843][    C0]  ? trace_event_raw_event_preemptirq_template+0x290/0x290
[  398.343860][    C0]  ? __irq_exit_rcu+0x147/0x230
[  398.343873][    C0]  ? irq_exit_rcu+0x20/0x20
[  398.343887][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  398.343918][    C0]  trace_irq_enable_rcuidle+0x108/0x180
[  398.343933][    C0]  trace_hardirqs_on+0x57/0x80
[  398.343947][    C0]  asm_sysvec_irq_work+0x16/0x20
[  398.343963][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  398.343979][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 5f ce 86 f7 65 8b 05 e0 e4 36 76 85 c0 74 3c 48 c7 04 24 0e 36
[  398.343990][    C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000206
[  398.344001][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: be6c9ad82e05a500
[  398.344011][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001
[  398.344020][    C0] RBP: ffffc90000007bd8 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[  398.344030][    C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: dffffc0000000000
[  398.344041][    C0] R13: 0000000000000001 R14: ffffffff8d123400 R15: 1ffff92000000f68
[  398.344057][    C0]  ? _raw_spin_unlock+0x40/0x40
[  398.344074][    C0]  rcu_report_qs_rsp+0xad/0x1a0
[  398.344088][    C0]  rcu_core+0x11c5/0x1650
[  398.344104][    C0]  ? rcu_lock_acquire+0x30/0x30
[  398.344117][    C0]  ? local_bh_disable+0x20/0x20
[  398.344131][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  398.344151][    C0]  ? rebalance_domains+0x892/0x9b0
[  398.344168][    C0]  handle_softirqs+0x336/0x830
[  398.344183][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  398.344198][    C0]  ? do_softirq+0x210/0x210
[  398.344210][    C0]  ? hrtimer_interrupt+0x781/0x8b0
[  398.344227][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  398.344243][    C0]  __irq_exit_rcu+0x13b/0x230
[  398.344255][    C0]  ? irq_exit_rcu+0x20/0x20
[  398.344271][    C0]  irq_exit_rcu+0x5/0x20
[  398.344283][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  398.344300][    C0]  </IRQ>
[  398.344304][    C0]  <TASK>
[  398.344308][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  398.344324][    C0] RIP: 0010:snprintf+0xbf/0x140
[  398.344347][    C0] Code: c7 44 25 04 00 00 43 c6 44 25 06 00 ba 18 00 00 00 48 89 df 31 f6 e8 b0 ce b1 fd 48 b8 18 00 00 00 30 00 00 00 48 89 44 24 60 <48> 8d 45 10 48 89 44 24 68 48 8d 44 24 10 48 89 44 24 70 4c 89 ff
[  398.344358][    C0] RSP: 0018:ffffc90003f7eb80 EFLAGS: 00000202
[  398.344370][    C0] RAX: 0000003000000018 RBX: ffffc90003f7ebe0 RCX: 0000000000000000
[  398.344379][    C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90003f7ebf8
[  398.344388][    C0] RBP: ffffc90003f7ec70 R08: ffffc90003f7ebf7 R09: ffffc90003f7ebe0
[  398.344398][    C0] R10: dffffc0000000000 R11: fffff520007efd7f R12: dffffc0000000000
[  398.344408][    C0] R13: 1ffff920007efd78 R14: 000000000000000c R15: ffffc90003f7ecc0
[  398.344425][    C0]  ? vscnprintf+0x80/0x80
[  398.344440][    C0]  ? prb_read_valid+0x60/0x60
[  398.344456][    C0]  info_print_prefix+0x1fa/0x360
[  398.344471][    C0]  ? trace_raw_output_console+0xd0/0xd0
[  398.344487][    C0]  console_unlock+0x650/0x10f0
[  398.344500][    C0]  ? read_lock_is_recursive+0x10/0x10
[  398.344518][    C0]  ? console_trylock_spinning+0x370/0x370
[  398.344532][    C0]  ? __down_trylock_console_sem+0x19f/0x1f0
[  398.344545][    C0]  ? vprintk_emit+0xa7/0x150
[  398.344557][    C0]  ? printk_parse_prefix+0x310/0x310
[  398.344569][    C0]  ? vprintk_emit+0xa7/0x150
[  398.344580][    C0]  ? console_trylock+0x70/0x70
[  398.344592][    C0]  ? mark_lock+0x94/0x320
[  398.344604][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.344623][    C0]  ? vprintk_emit+0x150/0x150
[  398.344635][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  398.344648][    C0]  ? _raw_spin_unlock+0x40/0x40
[  398.344660][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.344675][    C0]  vprintk_emit+0xc0/0x150
[  398.344687][    C0]  _printk+0xda/0x130
[  398.344702][    C0]  ? load_image+0x410/0x410
[  398.344718][    C0]  __nla_validate_parse+0xc7f/0x27b0
[  398.344740][    C0]  ? __nla_validate+0x50/0x50
[  398.344756][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  398.344772][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  398.344787][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  398.344805][    C0]  __nla_parse+0x3c/0x50
[  398.344821][    C0]  addr_doit+0x1fc/0x4e0
[  398.344835][    C0]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  398.344852][    C0]  ? fill_route+0x5e0/0x5e0
[  398.344870][    C0]  ? fill_route+0x5e0/0x5e0
[  398.344883][    C0]  rtnetlink_rcv_msg+0x7f1/0xf10
[  398.344901][    C0]  ? rtnetlink_bind+0x80/0x80
[  398.344923][    C0]  ? perf_trace_lock+0xe4/0x390
[  398.344937][    C0]  ? verify_lock_unused+0x140/0x140
[  398.344953][    C0]  ? verify_lock_unused+0x140/0x140
[  398.344969][    C0]  ? perf_trace_lock+0xe4/0x390
[  398.344984][    C0]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  398.345001][    C0]  ? rcu_nmi_exit+0x6f/0xf0
[  398.345017][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  398.345035][    C0]  netlink_rcv_skb+0x1e9/0x430
[  398.345048][    C0]  ? rtnetlink_bind+0x80/0x80
[  398.345064][    C0]  ? netlink_ack+0xb10/0xb10
[  398.345081][    C0]  netlink_unicast+0x78f/0x940
[  398.345100][    C0]  netlink_sendmsg+0x8ba/0xbe0
[  398.345113][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  398.345130][    C0]  ? netlink_getsockopt+0x570/0x570
[  398.345144][    C0]  ? security_socket_sendmsg+0x70/0xa0
[  398.345161][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  398.345177][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  398.345192][    C0]  ? netlink_getsockopt+0x570/0x570
[  398.345205][    C0]  ____sys_sendmsg+0x5be/0x8f0
[  398.345223][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[  398.345240][    C0]  ? import_iovec+0x6f/0xa0
[  398.345254][    C0]  ___sys_sendmsg+0x236/0x2e0
[  398.345271][    C0]  ? __sys_sendmsg+0x290/0x290
[  398.345298][    C0]  __se_sys_sendmsg+0x1b7/0x2a0
[  398.345314][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  398.345332][    C0]  ? syscall_enter_from_user_mode+0x2a/0x70
[  398.345355][    C0]  do_syscall_64+0x4c/0xa0
[  398.345368][    C0]  ? clear_bhb_loop+0x30/0x80
[  398.345382][    C0]  ? clear_bhb_loop+0x30/0x80
[  398.345397][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  398.345413][    C0] RIP: 0033:0x7f9f4b7f8199
[  398.345427][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.345438][    C0] RSP: 002b:00007f9f49a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.345451][    C0] RAX: ffffffffffffffda RBX: 00007f9f4ba7ffa0 RCX: 00007f9f4b7f8199
[  398.345461][    C0] RDX: 0000000020000800 RSI: 0000200000000080 RDI: 0000000000000005
[  398.345470][    C0] RBP: 00007f9f4b88f888 R08: 0000000000000000 R09: 0000000000000000
[  398.345479][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.345487][    C0] R13: 00007f9f4ba80038 R14: 00007f9f4ba7ffa0 R15: 00007fffd39d0fe8
[  398.345502][    C0]  </TASK>
[  398.363043][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  398.363056][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  398.363073][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  398.363083][   T27] Call Trace:
[  398.363090][   T27]  <TASK>
[  398.363097][   T27]  dump_stack_lvl+0x188/0x250
[  398.363123][   T27]  ? show_regs_print_info+0x20/0x20
[  398.363140][   T27]  ? load_image+0x410/0x410
[  398.363167][   T27]  panic+0x2f8/0x850
[  398.363183][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  398.363204][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  398.363220][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  398.363245][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  398.363269][   T27]  watchdog+0xe5a/0xe60
[  398.363297][   T27]  kthread+0x42e/0x520
[  398.363313][   T27]  ? hungtask_pm_notify+0x40/0x40
[  398.363329][   T27]  ? kthread_blkcg+0xd0/0xd0
[  398.363345][   T27]  ret_from_fork+0x1f/0x30
[  398.363375][   T27]  </TASK>
[  398.363613][   T27] Kernel Offset: disabled
[  404.036473][   T27] Rebooting in 86400 seconds..