last executing test programs:

5.841007405s ago: executing program 3 (id=3621):
r0 = socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/183, 0xb7}, 0x40000020)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r4 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r6 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r6, 0x2, 0x0, 0x9, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&\t0\x00+7')
close(0xffffffffffffffff)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
socket$kcm(0x23, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5.781699557s ago: executing program 4 (id=3623):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x23, 0x5, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000003a00)='ns/net\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

5.459016027s ago: executing program 0 (id=3624):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x24, 0x0, 0x25)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720800ff000000006600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x13d, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x0, 0x1, 0xd, 0x4, 0x5, 0xc, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x25, &(0x7f0000000280)=""/37, 0x40f00, 0x2, '\x00', r3, @fallback=0x1f, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, &(0x7f0000000700)=[r8, r9, r10, r11], 0x0, 0x10, 0x3}, 0x94)

5.336839391s ago: executing program 2 (id=3625):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB], 0x90}, 0x40010)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x102)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000200006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socket$kcm(0x2, 0x1, 0x84)

5.265167033s ago: executing program 4 (id=3626):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.151587407s ago: executing program 0 (id=3627):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.079207139s ago: executing program 4 (id=3629):
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f00000000c0), 0xb9)
sendmsg(r2, &(0x7f0000000e80)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x651, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000001c0)="d18131f3e5e07c85356ea403793b371761c5862e3e47f9cd484448aff414a4c49b809a9e4f1b0bef04cee2788586ba50b2335d303b8cbd3c374df696f57b0936e7c2f7e2b55aaa3d1d3e5dbd2b867d309b36e52df3636cb9979b33a4ea31326ccb7da0710c08ee0dce3747b6cf1a0d12121ff1cf57d19e5c16e7e56b6bae003dd02df484737701b869b10ef261a522f9006e9c243cdd6b508f0a96bb79aa8d88e32feb91c1576cee3ed8ef0136dca3a1f8a5666d79f3bed4e4690b9b39f98bcbae65ecc116a29ca7a5ea6e", 0xcb}, {&(0x7f0000000340)="4b53e05abc6931e60d0bc92897cb0a", 0xf}, {0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="b30c1c072c0de028fe5b9909bf564044035e329e0837ef28970ce4f1139d019395d17494dac10576649c09", 0x2b}], 0x5, &(0x7f0000000d00)=[{0x48, 0x0, 0x10001, "33eea5da8c0115070e75392f03ded51c33a41aa624c2f23c0ec5db60280eab5e219cc78eb4bb4f924c86ae776e4d3d51c45302"}, {0xb0, 0x101, 0xf, "bdaf54534061c7b592fd70eb0a785034d0d18f8c18f1381424c8cd4e8fba2cc90643978cb3488549d46b23738df00169f68670e07ce5c3b3ff20d519276599cad2a5b6eab2adfd4aa233382cbfdde9ec3a760ef29f26c5c0c7383d38d21d8480a421679257692683a9cd5bc1898773dd66cea20af65e4f4892598b170f17b7e3c1d7df223657839f09e991893e4bafdcc27fbda42303d980756fc10deddac184"}], 0xf8}, 0x20040000)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x1, 0xc4, 0x1, 0x4, 0x0, 0x1, 0x8040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x4}, 0xa013, 0x530, 0x3, 0x8, 0x7, 0x40, 0x4, 0x0, 0x80000001, 0x0, 0x5}, r5, 0x7, r0, 0xa)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5}, 0x94)

4.969083592s ago: executing program 2 (id=3630):
socket$kcm(0x29, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffd, 0x6}, 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xa, 0x0, 0x0, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x2, @perf_bp={&(0x7f0000000400), 0x6}, 0x10c002, 0xac5b, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000000400000004000000090000000008"], 0x50)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12)
r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x11, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)

4.73074951s ago: executing program 3 (id=3631):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)='O', 0x1}], 0x1}, 0x4008000)

4.542400256s ago: executing program 4 (id=3632):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)}], 0x1}, 0x0)

4.463754759s ago: executing program 0 (id=3633):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYBLOB='\x00'/16, @ANYRESHEX=r1], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0))
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f0000000000), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'tunl0\x00'})

4.40126236s ago: executing program 3 (id=3634):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022007d033840253ada4785391f890b0f", 0x14}], 0x1}, 0x8810)
r1 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9b, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590101080a97b960ace1cd8816", 0xffeb}], 0x1}, 0x0)

4.40035309s ago: executing program 1 (id=3635):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES64=r2, @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0, 0x97, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x85, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)

4.317876093s ago: executing program 2 (id=3636):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x23, 0x5, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000003a00)='ns/net\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

4.141941849s ago: executing program 3 (id=3637):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040ead95667e006dcdf63951f225ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000580)="f1f2a8e261f1af420d90849e4c2d44d5d133ff828535a5fddb1b28", 0x1b}], 0x2, 0x0, 0x0, 0x7400}, 0x4040000)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400814002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8804)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12160)

4.141282738s ago: executing program 4 (id=3638):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000040000b, 0x954b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) (fail_nth: 8)

4.140659809s ago: executing program 0 (id=3639):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1, 0x2, 0x9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108020f9becdb4cb92e0a", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r2=>r0})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185b000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0x21, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bde44a53db7bc61376b55f", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3.953101345s ago: executing program 2 (id=3640):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB], 0x90}, 0x40010)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x102)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000200006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socket$kcm(0x2, 0x1, 0x84)

3.908971396s ago: executing program 1 (id=3641):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x660, 0x0, @perf_bp={&(0x7f0000000200)}, 0xc112, 0xac5c, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000500))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000380), 0x12)
write$cgroup_int(r7, &(0x7f0000000040), 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)="d80000001c0081034e81f782db44b904021d08040e000000020d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace815de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xce}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3.505257009s ago: executing program 0 (id=3642):
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f00000000c0), 0xb9)
sendmsg(r2, &(0x7f0000000e80)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x651, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000001c0)="d18131f3e5e07c85356ea403793b371761c5862e3e47f9cd484448aff414a4c49b809a9e4f1b0bef04cee2788586ba50b2335d303b8cbd3c374df696f57b0936e7c2f7e2b55aaa3d1d3e5dbd2b867d309b36e52df3636cb9979b33a4ea31326ccb7da0710c08ee0dce3747b6cf1a0d12121ff1cf57d19e5c16e7e56b6bae003dd02df484737701b869b10ef261a522f9006e9c243cdd6b508f0a96bb79aa8d88e32feb91c1576cee3ed8ef0136dca3a1f8a5666d79f3bed4e4690b9b39f98bcbae65ecc116a29ca7a5ea6e", 0xcb}, {&(0x7f0000000340)="4b53e05abc6931e60d0bc92897cb0a", 0xf}, {0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="b30c1c072c0de028fe5b9909bf564044035e329e0837ef28970ce4f1139d019395d17494dac10576649c09", 0x2b}], 0x5, &(0x7f0000000d00)=[{0x48, 0x0, 0x10001, "33eea5da8c0115070e75392f03ded51c33a41aa624c2f23c0ec5db60280eab5e219cc78eb4bb4f924c86ae776e4d3d51c45302"}, {0xb0, 0x101, 0xf, "bdaf54534061c7b592fd70eb0a785034d0d18f8c18f1381424c8cd4e8fba2cc90643978cb3488549d46b23738df00169f68670e07ce5c3b3ff20d519276599cad2a5b6eab2adfd4aa233382cbfdde9ec3a760ef29f26c5c0c7383d38d21d8480a421679257692683a9cd5bc1898773dd66cea20af65e4f4892598b170f17b7e3c1d7df223657839f09e991893e4bafdcc27fbda42303d980756fc10deddac184"}], 0xf8}, 0x20040000)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x1, 0xc4, 0x1, 0x4, 0x0, 0x1, 0x8040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x4}, 0xa013, 0x530, 0x3, 0x8, 0x7, 0x40, 0x4, 0x0, 0x80000001, 0x0, 0x5}, r5, 0x7, r0, 0xa)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5}, 0x94)

2.595397558s ago: executing program 4 (id=3643):
socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x8, 0xc, 0x3, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000640)=""/4096, 0x401, 0x0, 0x1, 0x0, &(0x7f0000001640)='\x00', 0x0, 0x2, 0x0, 0x1}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x19, 0x0, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r6, &(0x7f00000000c0)=0x4, 0x12)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r7}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020780000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000800850000000600000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.548312939s ago: executing program 3 (id=3644):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x8, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1})
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}, {&(0x7f0000000380)="095b25c9386c", 0x6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="90000000000000000d01000007000000ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81b3dae2d2b9e845b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d00000000000050000000000000000100000001000100e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab67908000000000000505e74a1961d59ecc813a9ee976b9ab09e2e000000000093f7f718adb357a9e56c1bbbd02c7d6a3980aca76a41826d5a466afe74f91f5cc89b124193d95fc9f870bba2017e566e5516f2b3ba58c67cffe1302a09bfda6074a85788742980919e720ec976cee9660202894496f3931b6c1c5a87c51d259e1d6be4079a1e457bf10de9beb514c7bc891d"], 0xe0}, 0xc000)

2.547212619s ago: executing program 2 (id=3645):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x64, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0x0)

2.451633832s ago: executing program 0 (id=3646):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000006c0), 0x0}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

2.328819816s ago: executing program 2 (id=3647):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffd, 0x6}, 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xa, 0x0, 0x0, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x2, @perf_bp={&(0x7f0000000400), 0x6}, 0x10c002, 0xac5b, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000000400000004000000090000000008"], 0x50)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12)
r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x11, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)

2.327348336s ago: executing program 1 (id=3657):
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f00000000c0), 0xb9)
sendmsg(r2, &(0x7f0000000e80)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x651, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000001c0)="d18131f3e5e07c85356ea403793b371761c5862e3e47f9cd484448aff414a4c49b809a9e4f1b0bef04cee2788586ba50b2335d303b8cbd3c374df696f57b0936e7c2f7e2b55aaa3d1d3e5dbd2b867d309b36e52df3636cb9979b33a4ea31326ccb7da0710c08ee0dce3747b6cf1a0d12121ff1cf57d19e5c16e7e56b6bae003dd02df484737701b869b10ef261a522f9006e9c243cdd6b508f0a96bb79aa8d88e32feb91c1576cee3ed8ef0136dca3a1f8a5666d79f3bed4e4690b9b39f98bcbae65ecc116a29ca7a5ea6e", 0xcb}, {&(0x7f0000000340)="4b53e05abc6931e60d0bc92897cb0a", 0xf}, {0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="b30c1c072c0de028fe5b9909bf564044035e329e0837ef28970ce4f1139d019395d17494dac10576649c09", 0x2b}], 0x5, &(0x7f0000000d00)=[{0x48, 0x0, 0x10001, "33eea5da8c0115070e75392f03ded51c33a41aa624c2f23c0ec5db60280eab5e219cc78eb4bb4f924c86ae776e4d3d51c45302"}, {0xb0, 0x101, 0xf, "bdaf54534061c7b592fd70eb0a785034d0d18f8c18f1381424c8cd4e8fba2cc90643978cb3488549d46b23738df00169f68670e07ce5c3b3ff20d519276599cad2a5b6eab2adfd4aa233382cbfdde9ec3a760ef29f26c5c0c7383d38d21d8480a421679257692683a9cd5bc1898773dd66cea20af65e4f4892598b170f17b7e3c1d7df223657839f09e991893e4bafdcc27fbda42303d980756fc10deddac184"}], 0xf8}, 0x20040000)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x1, 0xc4, 0x1, 0x4, 0x0, 0x1, 0x8040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x4}, 0xa013, 0x530, 0x3, 0x8, 0x7, 0x40, 0x4, 0x0, 0x80000001, 0x0, 0x5}, r5, 0x7, r0, 0xa)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5}, 0x94)

590.799761ms ago: executing program 1 (id=3648):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) (async)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
close(r0) (async)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

547.416093ms ago: executing program 3 (id=3649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4", 0x6c}], 0x1}, 0x0)

252.781032ms ago: executing program 1 (id=3650):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="16007d028000000000000000ae800000082a0000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000050000000500"/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="546edcdd0623e14a410c6f292ed59df24e6cd0ffd75b2f148ee4eae106df034bc342370f75db1d665aaf91ecd11f670ecdd0cbf0934b2332640b056b7bb988cafbc8e19b6b2c991639e565a8206647635979caeccf34707adf1abe24a1941eae133972772f34dac844d5996e33eda75e9dd570f7246bf3bc6aedf97759946d37a277a421226588eac00e93bbf6dc23c271238eeea4d0442a", 0x98}], 0x1, &(0x7f00000005c0)=[{0x78, 0x111, 0x4, "f82b3287a4526b1e5d9d50732c3c12ff5ceb1ca92386b6e13c5ab7a1426fcab747bf32fc512c56d8c855dfba382bba95b021aef4953fd1bfbf029044d2f0d751135f7b5c34ad3b4a04a6e5dd5803ab10bae063f7764b47c4f1fada0f36165896d3ed94"}, {0xc0, 0x112, 0x80000000, "04a928dd064dafdc7b0f4982c573a6b36f89aaa2bf389ff484b096e44771cdb5134ec9c2c91779cf967ebee99137c01e3ff6b4f4ae0c0fbd914324bfd72f226864b51c312677eb33d07dcf3b43c6790095153615b8e2576cfff594a439455c1e6a70e4c0ce1fb8f60699c10cb94bd0ad6fcc27f50ddf8d55b18451df17a8bc95121c41c82ae875f38270a6738268c325e57f2615d801319957a1a4fca3a52e8378ebe3c59df234849655a191d2"}, {0xe8, 0x1, 0x2, "6d77b22ac941d7ef314735b1006cf7adfebeda040ceab82d49ba71b2075728c467fe89b708686483152fe29d91e4ffd79a6f3a9006e110151e3df26e4e888e2565a26a18f8395c88db9f0e230594258270ef43ea1a27acd4833df0b175df7b17c377138fe50b6e5082c139add693cc7b0bf7aa26898a4232f4fd6320fe157024b05d2247eeddcb43604643047fb7d8e872056edc792eb30d288c45ff5d3e95a01a086e701ea713c5505cc429c4f9a3c35e4c034158e67154d1f988d63f70600b89166da88fdc853b64f992fe8c01124a090e3a4f"}], 0x220}, 0x20008080)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32, @ANYBLOB="0100000005000000000000000000000000000000e8a2000000000000"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b06000000000000000000160000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, r8}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e00", 0x22}], 0x1}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r11 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)

0s ago: executing program 1 (id=3651):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES64=r2, @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0, 0x97, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x85, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

ter): interface not active
[  676.389677][T12703] Bluetooth: hci5: command 0x0409 tx timeout
[  676.405289][T12760] FAULT_INJECTION: forcing a failure.
[  676.405289][T12760] name failslab, interval 1, probability 0, space 0, times 0
[  676.418226][T12760] CPU: 1 PID: 12760 Comm: syz.2.2822 Not tainted syzkaller #0
[  676.425760][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  676.435867][T12760] Call Trace:
[  676.439186][T12760]  <TASK>
[  676.442171][T12760]  dump_stack_lvl+0x188/0x24e
[  676.446919][T12760]  ? show_regs_print_info+0x12/0x12
[  676.452444][T12760]  ? load_image+0x400/0x400
[  676.457044][T12760]  ? kasan_set_track+0x60/0x70
[  676.461974][T12760]  ? kasan_set_track+0x4b/0x70
[  676.466792][T12760]  ? __kasan_slab_alloc+0x6b/0x80
[  676.471896][T12760]  ? slab_post_alloc_hook+0x4b/0x480
[  676.477341][T12760]  should_fail_ex+0x399/0x4d0
[  676.482074][T12760]  should_failslab+0x5/0x20
[  676.486622][T12760]  slab_pre_alloc_hook+0x59/0x310
[  676.491693][T12760]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  676.497822][T12760]  ? ref_tracker_alloc+0x14e/0x4b0
[  676.503030][T12760]  __kmem_cache_alloc_node+0x4f/0x260
[  676.508491][T12760]  ? ref_tracker_alloc+0x14e/0x4b0
[  676.513666][T12760]  kmalloc_trace+0x26/0xe0
[  676.518134][T12760]  ref_tracker_alloc+0x14e/0x4b0
[  676.523124][T12760]  ? ref_tracker_dir_print+0x150/0x150
[  676.528746][T12760]  ? __kasan_slab_alloc+0x6b/0x80
[  676.533835][T12760]  ? slab_post_alloc_hook+0x67/0x480
[  676.539260][T12760]  ? slab_pre_alloc_hook+0x59/0x310
[  676.544519][T12760]  dst_init+0xda/0x410
[  676.548634][T12760]  dst_alloc+0x12a/0x160
[  676.552927][T12760]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[  676.559060][T12760]  ? ip_route_output_key_hash+0x139/0x330
[  676.564833][T12760]  ip_route_output_key_hash+0x1ef/0x330
[  676.570438][T12760]  ? ip_route_input_rcu+0x3160/0x3160
[  676.575862][T12760]  ? memset+0x1e/0x40
[  676.579894][T12760]  ip_route_output_flow+0x26/0x150
[  676.585057][T12760]  ip_tunnel_xmit+0x993/0x2440
[  676.589874][T12760]  ? ip_tunnel_xmit+0xb0/0x2440
[  676.594795][T12760]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  676.599876][T12760]  ? skb_push+0x8a/0xd0
[  676.604091][T12760]  ? gre_build_header+0x25b/0x9a0
[  676.609176][T12760]  ipgre_xmit+0x79d/0xb20
[  676.613573][T12760]  dev_hard_start_xmit+0x262/0x870
[  676.618757][T12760]  __dev_queue_xmit+0x1aa3/0x37c0
[  676.623837][T12760]  ? __dev_queue_xmit+0x26b/0x37c0
[  676.629005][T12760]  ? netdev_core_pick_tx+0x340/0x340
[  676.634364][T12760]  ? skb_release_data+0x1d2/0x7c0
[  676.639452][T12760]  __bpf_redirect+0x917/0x1180
[  676.644279][T12760]  bpf_clone_redirect+0x30b/0x4a0
[  676.649365][T12760]  bpf_prog_208b094576c80b22+0x56/0x5b
[  676.654867][T12760]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  676.660909][T12760]  ? lock_chain_count+0x20/0x20
[  676.665813][T12760]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  676.672105][T12760]  ? lockdep_hardirqs_on+0x94/0x140
[  676.677352][T12760]  ? ktime_get+0x7b/0x270
[  676.681726][T12760]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  676.688018][T12760]  ? ktime_get_real_ts64+0x440/0x440
[  676.693353][T12760]  ? read_lock_is_recursive+0x10/0x10
[  676.698797][T12760]  bpf_test_run+0x4c1/0x830
[  676.703363][T12760]  ? convert___skb_to_skb+0x580/0x580
[  676.708784][T12760]  ? eth_get_headlen+0x200/0x200
[  676.713777][T12760]  ? __build_skb+0x257/0x3c0
[  676.718440][T12760]  ? convert___skb_to_skb+0x3d/0x580
[  676.723774][T12760]  bpf_prog_test_run_skb+0xaa6/0x12a0
[  676.729229][T12760]  ? cpu_online+0xa0/0xa0
[  676.733605][T12760]  bpf_prog_test_run+0x31e/0x390
[  676.738605][T12760]  __sys_bpf+0x62b/0x780
[  676.742912][T12760]  ? bpf_link_show_fdinfo+0x380/0x380
[  676.748353][T12760]  ? lock_chain_count+0x20/0x20
[  676.753263][T12760]  __x64_sys_bpf+0x78/0x90
[  676.757733][T12760]  do_syscall_64+0x4c/0xa0
[  676.762284][T12760]  ? clear_bhb_loop+0x60/0xb0
[  676.767015][T12760]  ? clear_bhb_loop+0x60/0xb0
[  676.771742][T12760]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  676.777687][T12760] RIP: 0033:0x7fa1bd19ce59
[  676.782143][T12760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.801801][T12760] RSP: 002b:00007fa1be11e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  676.810268][T12760] RAX: ffffffffffffffda RBX: 00007fa1bd415fa0 RCX: 00007fa1bd19ce59
[  676.818285][T12760] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  676.826308][T12760] RBP: 00007fa1be11e090 R08: 0000000000000000 R09: 0000000000000000
[  676.834328][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  676.842343][T12760] R13: 00007fa1bd416038 R14: 00007fa1bd415fa0 R15: 00007ffda9acf8d8
[  676.850374][T12760]  </TASK>
[  677.583332][T12702] device hsr_slave_0 entered promiscuous mode
[  677.620925][T12702] device hsr_slave_1 entered promiscuous mode
[  677.647720][T12702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  677.681202][T12702] Cannot create hsr debugfs directory
[  677.691764][T12779] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2828'.
[  677.748430][T12779] openvswitch: netlink: Message has 6 unknown bytes.
[  678.456557][T12703] Bluetooth: hci5: command 0x041b tx timeout
[  679.080956][T12828] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2839'.
[  679.173584][T12825] netlink: 'syz.2.2838': attribute type 10 has an invalid length.
[  679.199047][T12825] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2838'.
[  680.493469][T12702] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  680.504022][T12864] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2849'.
[  680.530314][T12702] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  680.546778][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[  680.585588][T12702] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  680.637476][    T9] device hsr_slave_0 left promiscuous mode
[  680.662440][    T9] device hsr_slave_1 left promiscuous mode
[  680.972969][T12872] netlink: 'syz.0.2852': attribute type 1 has an invalid length.
[  680.973522][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.989586][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  681.024649][T12872] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2852'.
[  681.054654][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.081322][    T9] device bridge_slave_0 left promiscuous mode
[  681.092693][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.160984][    T9] device veth1_macvtap left promiscuous mode
[  681.169412][    T9] device veth0_macvtap left promiscuous mode
[  682.120278][T12702] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  682.136617][T12874] device bond_slave_1 entered promiscuous mode
[  682.153654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  682.566527][T12702] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.626424][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[  682.651851][T12702] 8021q: adding VLAN 0 to HW filter on device team0
[  682.689117][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  682.703377][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  682.737779][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  682.751982][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  682.762695][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.769914][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.814389][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  682.830438][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  682.843347][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.850634][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.881980][T12901] netlink: 'syz.3.2860': attribute type 10 has an invalid length.
[  682.890444][T12901] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2860'.
[  682.915231][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  682.935857][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  682.951977][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  682.977194][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  683.001982][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  683.016761][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  683.043025][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  683.117087][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  683.147276][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  683.171383][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  683.192293][T12702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.338190][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  683.347492][T12913] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2861'.
[  683.362587][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  683.871513][T12927] netlink: 'syz.2.2867': attribute type 1 has an invalid length.
[  683.890101][T12927] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2867'.
[  683.921969][T12933] device bond_slave_1 entered promiscuous mode
[  683.943976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  684.204801][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  684.217144][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  684.297124][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.533204][T12948] netlink: 'syz.2.2872': attribute type 10 has an invalid length.
[  684.578988][T12948] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2872'.
[  684.791243][T12956] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2876'.
[  685.522749][ T4286] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  685.658866][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.672612][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  685.790661][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  685.819874][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  685.913071][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  685.929284][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  685.970177][T12702] device veth0_vlan entered promiscuous mode
[  686.006974][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  686.032331][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  686.070840][T12702] device veth1_vlan entered promiscuous mode
[  686.135663][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  686.153985][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  686.175709][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  686.202864][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  686.232681][T12702] device veth0_macvtap entered promiscuous mode
[  686.258238][T12702] device veth1_macvtap entered promiscuous mode
[  686.280258][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.291614][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.302887][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.333735][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.370479][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.438308][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  686.463415][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  686.501346][T13011] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2891'.
[  686.515486][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  686.545282][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  686.586084][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.622322][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.676200][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.722395][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.756780][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.790954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  686.857293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  686.876230][T12703] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  686.879813][T12702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.904470][T12702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.923793][T12702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.964481][T12702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.045711][T13026] netlink: 'syz.0.2897': attribute type 10 has an invalid length.
[  687.065996][T13026] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2897'.
[  687.226511][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.251782][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.302150][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  687.335759][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.363800][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.407412][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  688.042890][T13057] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2906'.
[  688.903660][T12703] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9
[  689.221495][T13086] netlink: 'syz.4.2915': attribute type 10 has an invalid length.
[  689.268435][T13086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2915'.
[  689.286719][T13086] device bond0 entered promiscuous mode
[  689.327271][T13086] device bond_slave_0 entered promiscuous mode
[  689.378376][T13086] device bond_slave_1 entered promiscuous mode
[  689.409285][T13086] bridge0: port 3(bond0) entered blocking state
[  689.440367][T13086] bridge0: port 3(bond0) entered disabled state
[  689.463357][T13099] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2920'.
[  689.523775][T13086] bridge0: port 3(bond0) entered blocking state
[  689.531176][T13086] bridge0: port 3(bond0) entered forwarding state
[  690.058692][T12703] Bluetooth: hci5: ISO packet for unknown connection handle 2622
[  690.456569][T13133] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2930'.
[  690.534779][T13132] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2930'.
[  690.598636][T13139] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2932'.
[  691.067692][T13149] netlink: 'syz.2.2935': attribute type 10 has an invalid length.
[  691.098859][T13149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2935'.
[  691.557400][T13166] tipc: Started in network mode
[  691.577469][T13166] tipc: Node identity 9215a268, cluster identity 4711
[  691.604282][T13166] tipc: Node number set to 2450891368
[  692.090550][T13177] FAULT_INJECTION: forcing a failure.
[  692.090550][T13177] name failslab, interval 1, probability 0, space 0, times 0
[  692.162386][T13179] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2946'.
[  692.186451][T13177] CPU: 1 PID: 13177 Comm: syz.0.2945 Not tainted syzkaller #0
[  692.194151][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  692.204245][T13177] Call Trace:
[  692.207556][T13177]  <TASK>
[  692.210508][T13177]  dump_stack_lvl+0x188/0x24e
[  692.215221][T13177]  ? show_regs_print_info+0x12/0x12
[  692.220454][T13177]  ? load_image+0x400/0x400
[  692.224997][T13177]  ? __might_sleep+0xd0/0xd0
[  692.229618][T13177]  ? __lock_acquire+0x7d10/0x7d10
[  692.234686][T13177]  ? free_unref_page+0x19f/0x3f0
[  692.239672][T13177]  should_fail_ex+0x399/0x4d0
[  692.244383][T13177]  should_failslab+0x5/0x20
[  692.248912][T13177]  slab_pre_alloc_hook+0x59/0x310
[  692.253970][T13177]  ? __netdev_printk+0x3d0/0x3d0
[  692.258940][T13177]  ? register_netdevice+0x552/0x1b10
[  692.264257][T13177]  __kmem_cache_alloc_node+0x4f/0x260
[  692.269661][T13177]  ? register_netdevice+0x552/0x1b10
[  692.274979][T13177]  kmalloc_trace+0x26/0xe0
[  692.279473][T13177]  register_netdevice+0x552/0x1b10
[  692.284623][T13177]  ? __kmem_cache_alloc_node+0x140/0x260
[  692.290289][T13177]  ? kvmalloc_node+0x6c/0x180
[  692.295006][T13177]  ? netif_stacked_transfer_operstate+0x200/0x200
[  692.301457][T13177]  ? memset+0x1e/0x40
[  692.305465][T13177]  ? alloc_netdev_mqs+0xae4/0xf00
[  692.310532][T13177]  ? memcpy+0x3c/0x60
[  692.314554][T13177]  ? __ip_tunnel_create+0x310/0x450
[  692.319790][T13177]  __ip_tunnel_create+0x346/0x450
[  692.324852][T13177]  ? ip_tunnel_init_net+0x780/0x780
[  692.330082][T13177]  ? bpf_lsm_capable+0x5/0x10
[  692.334791][T13177]  ip_tunnel_ctl+0xad3/0x1910
[  692.339508][T13177]  ipgre_tunnel_ctl+0x2b0/0xb30
[  692.344387][T13177]  ? __might_fault+0xa6/0x120
[  692.349103][T13177]  ip_tunnel_siocdevprivate+0x134/0x1e0
[  692.354858][T13177]  ? ip_tunnel_update+0xaa0/0xaa0
[  692.359928][T13177]  ? full_name_hash+0x8e/0xe0
[  692.364642][T13177]  dev_ifsioc+0xa4a/0xd40
[  692.369003][T13177]  ? dev_ioctl+0xe80/0xe80
[  692.373449][T13177]  ? __lock_acquire+0x7d10/0x7d10
[  692.378517][T13177]  ? full_name_hash+0x8e/0xe0
[  692.383225][T13177]  ? dev_load+0x1d/0x1e0
[  692.387495][T13177]  ? dev_load+0x1d/0x1e0
[  692.391782][T13177]  dev_ioctl+0x5f8/0xe80
[  692.396053][T13177]  ? get_user_ifreq+0xc7/0x170
[  692.400862][T13177]  sock_ioctl+0x691/0x710
[  692.405222][T13177]  ? sock_poll+0x410/0x410
[  692.409688][T13177]  ? bpf_lsm_file_ioctl+0x5/0x10
[  692.414662][T13177]  ? security_file_ioctl+0x7c/0xa0
[  692.419807][T13177]  ? sock_poll+0x410/0x410
[  692.424250][T13177]  __se_sys_ioctl+0xfa/0x170
[  692.428872][T13177]  do_syscall_64+0x4c/0xa0
[  692.433318][T13177]  ? clear_bhb_loop+0x60/0xb0
[  692.438025][T13177]  ? clear_bhb_loop+0x60/0xb0
[  692.442735][T13177]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  692.448658][T13177] RIP: 0033:0x7fc6de79ce59
[  692.453102][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.472732][T13177] RSP: 002b:00007fc6df706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  692.481266][T13177] RAX: ffffffffffffffda RBX: 00007fc6dea15fa0 RCX: 00007fc6de79ce59
[  692.489291][T13177] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007
[  692.497381][T13177] RBP: 00007fc6df706090 R08: 0000000000000000 R09: 0000000000000000
[  692.505374][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  692.513376][T13177] R13: 00007fc6dea16038 R14: 00007fc6dea15fa0 R15: 00007ffdb5724b08
[  692.521394][T13177]  </TASK>
[  692.917434][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  692.930115][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  692.940999][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  692.952018][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  692.959611][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  692.967012][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  693.056746][T13192] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2949'.
[  693.176431][T13197] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2949'.
[  693.716025][T13187] chnl_net:caif_netlink_parms(): no params data found
[  693.887656][T13187] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.895058][T13187] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.904299][T13187] device bridge_slave_0 entered promiscuous mode
[  693.914210][T13187] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.921846][T13187] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.930529][T13187] device bridge_slave_1 entered promiscuous mode
[  693.971515][T13224] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2958'.
[  694.021375][T13187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.041945][T13187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.108283][T13187] team0: Port device team_slave_0 added
[  694.121213][T13187] team0: Port device team_slave_1 added
[  694.182594][T13187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.199918][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.233393][T13187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.252475][T13187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.259701][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.291299][T13187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.403830][T13187] device hsr_slave_0 entered promiscuous mode
[  694.423676][T13187] device hsr_slave_1 entered promiscuous mode
[  694.444916][T13187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  694.460556][T13187] Cannot create hsr debugfs directory
[  694.696006][T13244] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2966'.
[  694.768155][T13248] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2966'.
[  695.027080][ T4282] Bluetooth: hci0: command 0x0409 tx timeout
[  695.195975][T13251] netlink: 'syz.4.2969': attribute type 10 has an invalid length.
[  695.255254][T13251] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2969'.
[  695.504440][T13187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.698165][T13259] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2970'.
[  695.742350][T13187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.779413][T13260] FAULT_INJECTION: forcing a failure.
[  695.779413][T13260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.794365][T13260] CPU: 1 PID: 13260 Comm: syz.0.2972 Not tainted syzkaller #0
[  695.801886][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  695.811998][T13260] Call Trace:
[  695.815327][T13260]  <TASK>
[  695.818328][T13260]  dump_stack_lvl+0x188/0x24e
[  695.823062][T13260]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  695.829289][T13260]  ? show_regs_print_info+0x12/0x12
[  695.834563][T13260]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  695.840815][T13260]  should_fail_ex+0x399/0x4d0
[  695.845541][T13260]  _copy_from_user+0x2c/0x170
[  695.850276][T13260]  ___sys_sendmsg+0x1c3/0x360
[  695.855031][T13260]  ? __sys_sendmsg+0x290/0x290
[  695.859838][T13260]  ? irqentry_enter+0x33/0x50
[  695.864653][T13260]  __se_sys_sendmsg+0x1bb/0x2a0
[  695.869535][T13260]  ? __x64_sys_sendmsg+0x80/0x80
[  695.874519][T13260]  ? syscall_enter_from_user_mode+0x2a/0x80
[  695.880436][T13260]  do_syscall_64+0x4c/0xa0
[  695.884896][T13260]  ? clear_bhb_loop+0x60/0xb0
[  695.889604][T13260]  ? clear_bhb_loop+0x60/0xb0
[  695.894306][T13260]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  695.900231][T13260] RIP: 0033:0x7fc6de79ce59
[  695.904670][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.924299][T13260] RSP: 002b:00007fc6df706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  695.932743][T13260] RAX: ffffffffffffffda RBX: 00007fc6dea15fa0 RCX: 00007fc6de79ce59
[  695.940743][T13260] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000006
[  695.948732][T13260] RBP: 00007fc6df706090 R08: 0000000000000000 R09: 0000000000000000
[  695.956726][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.964719][T13260] R13: 00007fc6dea16038 R14: 00007fc6dea15fa0 R15: 00007ffdb5724b08
[  695.972725][T13260]  </TASK>
[  695.994701][T13257] netlink: 'syz.1.2971': attribute type 10 has an invalid length.
[  696.006969][T13257] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2971'.
[  696.079575][T13187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.270746][T13187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.533613][T13187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  696.547005][T13187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  696.557899][T13187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  696.581867][T13187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  696.691627][T13283] netlink: 'syz.1.2981': attribute type 10 has an invalid length.
[  696.703178][T13283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2981'.
[  696.800553][T13187] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.839829][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  696.854263][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  696.868756][T13187] 8021q: adding VLAN 0 to HW filter on device team0
[  696.886962][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  696.899471][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  696.913564][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.920832][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.961822][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  696.975785][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  696.991079][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  697.017873][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.025186][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.043513][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  697.096703][ T4282] Bluetooth: hci0: command 0x041b tx timeout
[  697.097287][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  697.132389][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  697.203952][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  697.219632][T13293] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2984'.
[  697.263105][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  697.288942][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  697.317610][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  697.348672][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  697.380465][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  697.407196][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  697.432636][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  697.462269][T13187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  697.954576][T13311] netlink: 'syz.2.2991': attribute type 10 has an invalid length.
[  698.006634][T13311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2991'.
[  698.133367][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  698.143095][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  698.159632][T13187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.195289][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  698.205354][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  698.248512][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  698.262053][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  698.275454][T13187] device veth0_vlan entered promiscuous mode
[  698.301434][T13187] device veth1_vlan entered promiscuous mode
[  698.313823][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  698.339136][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  698.352162][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  698.420550][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  698.461703][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  698.491868][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  698.507924][T13187] device veth0_macvtap entered promiscuous mode
[  698.527619][T13187] device veth1_macvtap entered promiscuous mode
[  698.542249][T13324] netlink: 'syz.2.2994': attribute type 29 has an invalid length.
[  698.561315][T13324] netlink: 'syz.2.2994': attribute type 29 has an invalid length.
[  698.591974][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.616286][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.630703][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.641995][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.652787][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.698882][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.714625][T13187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.725770][T13324] netlink: 'syz.2.2994': attribute type 29 has an invalid length.
[  698.745914][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.761522][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.772941][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.790674][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.805053][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.820581][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.832924][T13187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.855923][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  698.871151][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  698.892920][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  698.938521][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  698.963968][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  698.989833][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  699.022940][T13325] netlink: 'syz.2.2994': attribute type 29 has an invalid length.
[  699.054219][T13329] device virt_wifi0 entered promiscuous mode
[  699.142674][T13335] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2998'.
[  699.154926][T13187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.176342][ T4282] Bluetooth: hci0: command 0x040f tx timeout
[  699.220879][T13187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.242811][T13187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.270803][T13187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.563623][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.592442][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.660869][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  699.702039][ T6266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.733746][ T6266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.777312][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  699.961713][T13350] netlink: 'syz.2.3004': attribute type 10 has an invalid length.
[  699.999766][T13350] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3004'.
[  700.212809][T13360] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3005'.
[  700.265196][T13360] openvswitch: netlink: Message has 6 unknown bytes.
[  700.561034][T13366] netlink: 'syz.4.3009': attribute type 29 has an invalid length.
[  700.600054][T13366] netlink: 'syz.4.3009': attribute type 29 has an invalid length.
[  700.625962][T13369] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3010'.
[  700.645672][T13366] netlink: 'syz.4.3009': attribute type 29 has an invalid length.
[  700.979071][T13376] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3014'.
[  701.005663][T13376] device bond0 entered promiscuous mode
[  701.012029][T13376] device bond_slave_0 entered promiscuous mode
[  701.035910][T13376] device bond_slave_1 entered promiscuous mode
[  701.047850][T13376] bridge0: port 3(bond0) entered blocking state
[  701.054905][T13376] bridge0: port 3(bond0) entered disabled state
[  701.087463][T12703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  701.097093][T12703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  701.105233][T12703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  701.113984][T12703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  701.121810][T12703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  701.129745][T12703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  701.147421][T13376] bridge0: port 3(bond0) entered blocking state
[  701.154191][T13376] bridge0: port 3(bond0) entered forwarding state
[  701.256870][T12703] Bluetooth: hci0: command 0x0419 tx timeout
[  701.477609][T13386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3017'.
[  701.828346][T13378] chnl_net:caif_netlink_parms(): no params data found
[  701.893179][T13397] validate_nla: 3 callbacks suppressed
[  701.893211][T13397] netlink: 'syz.0.3020': attribute type 10 has an invalid length.
[  701.948332][T13397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3020'.
[  702.052196][T13378] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.059890][T13378] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.068574][T13378] device bridge_slave_0 entered promiscuous mode
[  702.082067][T13378] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.089548][T13378] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.098051][T13378] device bridge_slave_1 entered promiscuous mode
[  702.126385][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.138414][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.197119][T13378] team0: Port device team_slave_0 added
[  702.255430][T13378] team0: Port device team_slave_1 added
[  702.318903][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.326049][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.330142][T13404] netlink: 'syz.4.3023': attribute type 29 has an invalid length.
[  702.386284][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.408342][T13408] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3024'.
[  702.433215][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.448430][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.487913][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.505900][T13404] netlink: 'syz.4.3023': attribute type 29 has an invalid length.
[  702.524558][T13412] netlink: 'syz.3.3022': attribute type 2 has an invalid length.
[  702.563612][T13410] netlink: 'syz.4.3023': attribute type 29 has an invalid length.
[  702.650193][T13413] netlink: 'syz.4.3023': attribute type 29 has an invalid length.
[  702.738553][T13378] device hsr_slave_0 entered promiscuous mode
[  702.745670][T13378] device hsr_slave_1 entered promiscuous mode
[  702.800725][T13378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  702.813421][T13378] Cannot create hsr debugfs directory
[  702.920181][T13421] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3028'.
[  702.959267][T13421] openvswitch: netlink: Message has 6 unknown bytes.
[  703.177460][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[  703.580222][T13378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.749382][T13378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.816570][T13439] netlink: 'syz.1.3035': attribute type 10 has an invalid length.
[  703.835030][T13439] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3035'.
[  703.854695][T13446] netlink: 'syz.3.3036': attribute type 29 has an invalid length.
[  703.917688][T13378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.931189][T13446] netlink: 'syz.3.3036': attribute type 29 has an invalid length.
[  703.944835][T13447] netlink: 'syz.3.3036': attribute type 29 has an invalid length.
[  704.029632][T13378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.065488][T13449] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3037'.
[  704.267705][T13454] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3040'.
[  704.295881][T13378] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  704.338894][T13378] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  704.353326][T13378] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  704.389729][T13378] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  704.435216][T13457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3041'.
[  704.447957][T13457] openvswitch: netlink: Message has 6 unknown bytes.
[  704.594633][T13378] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.683811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  704.697402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  704.738040][T13378] 8021q: adding VLAN 0 to HW filter on device team0
[  704.838389][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  704.866002][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  704.894170][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.901452][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.917652][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  704.927865][T13466] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3045'.
[  704.946850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  704.974942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  705.015511][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.022744][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.119218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  705.154048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  705.197892][T13475] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3048'.
[  705.211975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  705.233995][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  705.251596][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  705.259114][T12703] Bluetooth: hci2: command 0x041b tx timeout
[  705.303686][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  705.332861][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  705.367441][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  705.404628][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  705.439319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  705.471796][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  705.482190][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  706.051436][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  706.064336][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  706.092013][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.134872][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  706.158880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  706.204688][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  706.223381][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  706.235962][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  706.262048][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  706.287411][T13378] device veth0_vlan entered promiscuous mode
[  706.333832][T13378] device veth1_vlan entered promiscuous mode
[  706.406025][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  706.422103][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  706.434083][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  706.450061][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  706.480062][T13378] device veth0_macvtap entered promiscuous mode
[  706.503121][T13378] device veth1_macvtap entered promiscuous mode
[  706.560329][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.577122][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.592392][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.605324][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.644726][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.659663][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.670045][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.681244][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.693451][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.705352][T13487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3051'.
[  706.737621][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  706.758379][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  706.769713][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  706.797704][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  706.821880][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.851094][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.867460][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.878397][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.890407][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.903742][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.919847][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.933124][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.955406][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.991518][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  707.014986][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  707.037917][T13378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.056633][T13378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.085866][T13378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.104000][T13378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.336371][T12703] Bluetooth: hci2: command 0x040f tx timeout
[  708.106297][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.114181][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.161602][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  708.240006][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.272176][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.287958][T13493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3054'.
[  708.322885][T13493] openvswitch: netlink: Message has 6 unknown bytes.
[  708.327689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  708.538478][T13498] validate_nla: 9 callbacks suppressed
[  708.538516][T13498] netlink: 'syz.4.3057': attribute type 10 has an invalid length.
[  708.594330][T13498] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3057'.
[  708.641798][T13503] netlink: 'syz.0.3058': attribute type 29 has an invalid length.
[  708.650956][T13502] tipc: Started in network mode
[  708.662273][T13502] tipc: Node identity 9215a268, cluster identity 4711
[  708.681455][T13502] tipc: Node number set to 2450891368
[  708.692510][T13503] netlink: 'syz.0.3058': attribute type 29 has an invalid length.
[  708.726927][T13503] netlink: 'syz.0.3058': attribute type 29 has an invalid length.
[  708.755873][T13503] netlink: 'syz.0.3058': attribute type 29 has an invalid length.
[  708.947293][T13508] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3060'.
[  709.003720][T12703] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  709.417132][T12703] Bluetooth: hci2: command 0x0419 tx timeout
[  709.434496][T12703] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9
[  709.470049][T13525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3069'.
[  709.488814][T13525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3069'.
[  709.556883][T13527] FAULT_INJECTION: forcing a failure.
[  709.556883][T13527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  709.659707][T13527] CPU: 0 PID: 13527 Comm: syz.1.3069 Not tainted syzkaller #0
[  709.667267][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  709.677391][T13527] Call Trace:
[  709.680762][T13527]  <TASK>
[  709.683756][T13527]  dump_stack_lvl+0x188/0x24e
[  709.688519][T13527]  ? show_regs_print_info+0x12/0x12
[  709.693774][T13527]  ? load_image+0x400/0x400
[  709.698331][T13527]  ? __lock_acquire+0x7d10/0x7d10
[  709.703416][T13527]  should_fail_ex+0x399/0x4d0
[  709.708151][T13527]  _copy_from_user+0x2c/0x170
[  709.712877][T13527]  ___sys_recvmsg+0x172/0x590
[  709.717623][T13527]  ? __sys_recvmsg+0x290/0x290
[  709.722459][T13527]  ? common_file_perm+0x171/0x1c0
[  709.727547][T13527]  ? __fget_files+0x43d/0x4b0
[  709.732305][T13527]  __x64_sys_recvmsg+0x205/0x2e0
[  709.737325][T13527]  ? ___sys_recvmsg+0x590/0x590
[  709.742247][T13527]  ? lockdep_hardirqs_on+0x94/0x140
[  709.747489][T13527]  do_syscall_64+0x4c/0xa0
[  709.751958][T13527]  ? clear_bhb_loop+0x60/0xb0
[  709.756691][T13527]  ? clear_bhb_loop+0x60/0xb0
[  709.761432][T13527]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  709.767383][T13527] RIP: 0033:0x7f375859ce59
[  709.771844][T13527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.791592][T13527] RSP: 002b:00007f37593ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  709.800155][T13527] RAX: ffffffffffffffda RBX: 00007f3758816090 RCX: 00007f375859ce59
[  709.808168][T13527] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000003
[  709.816178][T13527] RBP: 00007f37593ac090 R08: 0000000000000000 R09: 0000000000000000
[  709.824190][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.832198][T13527] R13: 00007f3758816128 R14: 00007f3758816090 R15: 00007fff4ee37d18
[  709.840225][T13527]  </TASK>
[  710.103855][T13531] netlink: 'syz.4.3071': attribute type 10 has an invalid length.
[  710.126413][T13531] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3071'.
[  710.144931][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  710.154873][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  710.170299][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  710.195811][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  710.207239][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  710.218388][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  710.615020][   T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.809024][   T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.960740][   T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.984515][T13553] FAULT_INJECTION: forcing a failure.
[  710.984515][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  710.997933][T13555] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3080'.
[  710.997957][T13555] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3080'.
[  711.016878][T13553] CPU: 1 PID: 13553 Comm: syz.4.3081 Not tainted syzkaller #0
[  711.024390][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  711.034469][T13553] Call Trace:
[  711.037776][T13553]  <TASK>
[  711.040738][T13553]  dump_stack_lvl+0x188/0x24e
[  711.045460][T13553]  ? show_regs_print_info+0x12/0x12
[  711.050707][T13553]  ? load_image+0x400/0x400
[  711.055244][T13553]  ? __lock_acquire+0x7d10/0x7d10
[  711.060308][T13553]  ? snprintf+0xe5/0x140
[  711.064586][T13553]  should_fail_ex+0x399/0x4d0
[  711.069295][T13553]  _copy_to_user+0x2c/0x130
[  711.073845][T13553]  simple_read_from_buffer+0xe3/0x150
[  711.079243][T13553]  proc_fail_nth_read+0x1a6/0x220
[  711.084296][T13553]  ? proc_fault_inject_write+0x310/0x310
[  711.089960][T13553]  ? fsnotify_perm+0x248/0x550
[  711.094749][T13553]  ? proc_fault_inject_write+0x310/0x310
[  711.100423][T13553]  vfs_read+0x2de/0xa00
[  711.104618][T13553]  ? kernel_read+0x1e0/0x1e0
[  711.109242][T13553]  ? __fget_files+0x28/0x4b0
[  711.113858][T13553]  ? __fget_files+0x28/0x4b0
[  711.118480][T13553]  ? __fget_files+0x43d/0x4b0
[  711.123200][T13553]  ? __fdget_pos+0x2ae/0x360
[  711.127821][T13553]  ? ksys_read+0x71/0x250
[  711.132183][T13553]  ksys_read+0x14c/0x250
[  711.136462][T13553]  ? vfs_write+0xa30/0xa30
[  711.140910][T13553]  ? lockdep_hardirqs_on+0x94/0x140
[  711.146138][T13553]  do_syscall_64+0x4c/0xa0
[  711.150584][T13553]  ? clear_bhb_loop+0x60/0xb0
[  711.155289][T13553]  ? clear_bhb_loop+0x60/0xb0
[  711.159993][T13553]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  711.165921][T13553] RIP: 0033:0x7f6887b5d68e
[  711.170361][T13553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  711.189997][T13553] RSP: 002b:00007f6888af7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  711.198428][T13553] RAX: ffffffffffffffda RBX: 00007f6888af86c0 RCX: 00007f6887b5d68e
[  711.206425][T13553] RDX: 000000000000000f RSI: 00007f6888af80a0 RDI: 0000000000000005
[  711.214414][T13553] RBP: 00007f6888af8090 R08: 0000000000000000 R09: 0000000000000000
[  711.222404][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.230394][T13553] R13: 00007f6887e16038 R14: 00007f6887e15fa0 R15: 00007fff27677c58
[  711.238427][T13553]  </TASK>
[  711.359900][   T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.484904][T13562] netlink: 'syz.3.3082': attribute type 10 has an invalid length.
[  711.508699][T13562] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3082'.
[  711.556072][T13532] chnl_net:caif_netlink_parms(): no params data found
[  711.742675][   T33] device 0 left promiscuous mode
[  711.866010][   T33] device 1 left promiscuous mode
[  712.060239][T13532] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.099462][T13532] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.129099][T13532] device bridge_slave_0 entered promiscuous mode
[  712.164211][   T33] tipc: Left network mode
[  712.166022][T13532] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.222471][T13532] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.229983][T13588] netlink: 'syz.2.3088': attribute type 2 has an invalid length.
[  712.257492][T13532] device bridge_slave_1 entered promiscuous mode
[  712.306888][ T4282] Bluetooth: hci4: command 0x0409 tx timeout
[  712.372933][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.400722][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.452875][T13532] team0: Port device team_slave_0 added
[  712.477780][T13532] team0: Port device team_slave_1 added
[  712.540622][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.564615][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.633143][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.646845][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.653933][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.680355][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.915526][T13599] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3093'.
[  712.986462][T13599] openvswitch: netlink: Message has 6 unknown bytes.
[  712.994228][T12703] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  713.160707][T13532] device hsr_slave_0 entered promiscuous mode
[  713.191150][T13532] device hsr_slave_1 entered promiscuous mode
[  713.226187][T13532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  713.247681][T13532] Cannot create hsr debugfs directory
[  713.329550][T12703] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  713.539424][T12703] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  714.055808][T13632] FAULT_INJECTION: forcing a failure.
[  714.055808][T13632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  714.106501][T13632] CPU: 0 PID: 13632 Comm: syz.1.3105 Not tainted syzkaller #0
[  714.114128][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  714.124247][T13632] Call Trace:
[  714.127570][T13632]  <TASK>
[  714.130586][T13632]  dump_stack_lvl+0x188/0x24e
[  714.135327][T13632]  ? show_regs_print_info+0x12/0x12
[  714.140582][T13632]  ? load_image+0x400/0x400
[  714.145147][T13632]  ? __lock_acquire+0x7d10/0x7d10
[  714.150288][T13632]  ? __lock_acquire+0x7d10/0x7d10
[  714.155379][T13632]  should_fail_ex+0x399/0x4d0
[  714.160104][T13632]  _copy_from_user+0x2c/0x170
[  714.164835][T13632]  ___sys_sendmsg+0x1c3/0x360
[  714.169576][T13632]  ? __sys_sendmsg+0x290/0x290
[  714.174422][T13632]  ? __fget_files+0x3d1/0x4b0
[  714.179175][T13632]  __se_sys_sendmsg+0x1bb/0x2a0
[  714.184104][T13632]  ? __x64_sys_sendmsg+0x80/0x80
[  714.189123][T13632]  ? lockdep_hardirqs_on+0x94/0x140
[  714.194374][T13632]  do_syscall_64+0x4c/0xa0
[  714.198848][T13632]  ? clear_bhb_loop+0x60/0xb0
[  714.203577][T13632]  ? clear_bhb_loop+0x60/0xb0
[  714.208301][T13632]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  714.214237][T13632] RIP: 0033:0x7f375859ce59
[  714.218677][T13632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.238320][T13632] RSP: 002b:00007f37593cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.246759][T13632] RAX: ffffffffffffffda RBX: 00007f3758815fa0 RCX: 00007f375859ce59
[  714.254754][T13632] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003
[  714.262751][T13632] RBP: 00007f37593cd090 R08: 0000000000000000 R09: 0000000000000000
[  714.270744][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.278737][T13632] R13: 00007f3758816038 R14: 00007f3758815fa0 R15: 00007fff4ee37d18
[  714.286781][T13632]  </TASK>
[  714.380767][T12703] Bluetooth: hci4: command 0x041b tx timeout
[  714.711742][T13647] netlink: 'syz.2.3108': attribute type 10 has an invalid length.
[  714.737369][T13647] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3108'.
[  714.776770][T13647] device bond0 entered promiscuous mode
[  714.813791][T13647] device bond_slave_0 entered promiscuous mode
[  714.842543][T13647] device bond_slave_1 entered promiscuous mode
[  714.864227][T13647] bridge0: port 3(bond0) entered blocking state
[  714.897883][T13647] bridge0: port 3(bond0) entered disabled state
[  714.922728][T13647] bridge0: port 3(bond0) entered blocking state
[  714.929794][T13647] bridge0: port 3(bond0) entered forwarding state
[  715.018222][T13656] netlink: 'syz.4.3110': attribute type 10 has an invalid length.
[  715.064572][T13656] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3110'.
[  715.305776][T12703] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[  716.264389][   T33] device hsr_slave_0 left promiscuous mode
[  716.434509][   T33] device hsr_slave_1 left promiscuous mode
[  716.456886][T12703] Bluetooth: hci4: command 0x040f tx timeout
[  716.469897][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.506352][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.546534][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.554060][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.587433][   T33] bridge0: port 3(hsr0) entered disabled state
[  716.618578][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.647988][   T33] device bridge_slave_0 left promiscuous mode
[  716.654272][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.709330][   T33] device veth1_macvtap left promiscuous mode
[  718.081053][T13532] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  718.129996][T13532] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  718.192277][T13532] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  718.241060][T13532] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  718.300238][T13706] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3124'.
[  718.344542][T12703] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9
[  718.346720][T13706] openvswitch: netlink: Message has 6 unknown bytes.
[  718.546383][T12703] Bluetooth: hci4: command 0x0419 tx timeout
[  718.756668][T13532] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.797351][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  718.805913][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  718.831323][T13532] 8021q: adding VLAN 0 to HW filter on device team0
[  718.863222][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  718.884658][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  718.923333][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.930575][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.001543][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  719.023632][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  719.036912][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  719.045871][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.053142][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.063832][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  719.096078][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  719.142358][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  719.187782][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  719.221494][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  719.232532][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  719.249710][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  719.289849][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  719.345357][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  719.398120][T13532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  719.437758][T13532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  719.519735][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  719.540473][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  719.590778][T13735] netlink: 'syz.3.3132': attribute type 10 has an invalid length.
[  719.611612][T13735] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3132'.
[  720.212877][T12703] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  720.523753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  720.575603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  720.611564][T13532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.700521][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  720.720241][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  720.791395][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  720.818247][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  720.843385][T13532] device veth0_vlan entered promiscuous mode
[  720.853668][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  720.865268][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  720.900250][T13532] device veth1_vlan entered promiscuous mode
[  721.020160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  721.035513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  721.045134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  721.059592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  721.076994][T13532] device veth0_macvtap entered promiscuous mode
[  721.104582][T13532] device veth1_macvtap entered promiscuous mode
[  721.143149][T13780] netlink: 'syz.2.3146': attribute type 10 has an invalid length.
[  721.155769][T13780] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3146'.
[  721.212010][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.243086][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.266578][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.297585][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.328887][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.344671][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.364985][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.376214][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.388288][T13532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.403471][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  721.412756][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  721.424946][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  721.437015][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.466888][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.479225][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.509934][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.520253][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.552000][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.568583][T13532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.585138][T13532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.629003][T13532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.653505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  721.667242][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  721.694202][T13532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.706092][T13532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.747744][T13532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.763218][T13532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.926059][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.944824][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.024490][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  722.071825][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.086763][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.109203][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  722.175176][T12703] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[  722.554703][T13815] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  723.192164][T13826] netlink: 'syz.4.3157': attribute type 10 has an invalid length.
[  723.216602][T13826] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3157'.
[  723.598145][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.751915][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  723.762603][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  723.771393][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  723.781675][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  723.791190][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  723.798777][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  723.832364][T12703] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  723.950022][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.105168][T13854] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3164'.
[  724.140735][T13854] openvswitch: netlink: Message has 6 unknown bytes.
[  724.254400][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.371105][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.493873][T13863] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3168'.
[  724.859814][T13872] FAULT_INJECTION: forcing a failure.
[  724.859814][T13872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  724.883389][T13872] CPU: 0 PID: 13872 Comm: syz.2.3170 Not tainted syzkaller #0
[  724.890952][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  724.901080][T13872] Call Trace:
[  724.904416][T13872]  <TASK>
[  724.907408][T13872]  dump_stack_lvl+0x188/0x24e
[  724.912187][T13872]  ? show_regs_print_info+0x12/0x12
[  724.917467][T13872]  ? load_image+0x400/0x400
[  724.922036][T13872]  ? __lock_acquire+0x7d10/0x7d10
[  724.927123][T13872]  ? snprintf+0xe5/0x140
[  724.931423][T13872]  should_fail_ex+0x399/0x4d0
[  724.936229][T13872]  _copy_to_user+0x2c/0x130
[  724.940807][T13872]  simple_read_from_buffer+0xe3/0x150
[  724.946256][T13872]  proc_fail_nth_read+0x1a6/0x220
[  724.951346][T13872]  ? proc_fault_inject_write+0x310/0x310
[  724.957045][T13872]  ? fsnotify_perm+0x248/0x550
[  724.961861][T13872]  ? proc_fault_inject_write+0x310/0x310
[  724.967538][T13872]  vfs_read+0x2de/0xa00
[  724.971782][T13872]  ? kernel_read+0x1e0/0x1e0
[  724.976486][T13872]  ? __fget_files+0x28/0x4b0
[  724.981134][T13872]  ? __fget_files+0x28/0x4b0
[  724.985779][T13872]  ? __fget_files+0x43d/0x4b0
[  724.990534][T13872]  ? __fdget_pos+0x2ae/0x360
[  724.995175][T13872]  ? ksys_read+0x71/0x250
[  724.999580][T13872]  ksys_read+0x14c/0x250
[  725.003886][T13872]  ? vfs_write+0xa30/0xa30
[  725.008374][T13872]  ? lockdep_hardirqs_on+0x94/0x140
[  725.013634][T13872]  do_syscall_64+0x4c/0xa0
[  725.018103][T13872]  ? clear_bhb_loop+0x60/0xb0
[  725.022824][T13872]  ? clear_bhb_loop+0x60/0xb0
[  725.027554][T13872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.033492][T13872] RIP: 0033:0x7fa02455d68e
[  725.037965][T13872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  725.057608][T13872] RSP: 002b:00007fa0254c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  725.066117][T13872] RAX: ffffffffffffffda RBX: 00007fa0254c96c0 RCX: 00007fa02455d68e
[  725.074397][T13872] RDX: 000000000000000f RSI: 00007fa0254c90a0 RDI: 0000000000000004
[  725.082403][T13872] RBP: 00007fa0254c9090 R08: 0000000000000000 R09: 0000000000000000
[  725.090416][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.098441][T13872] R13: 00007fa024816038 R14: 00007fa024815fa0 R15: 00007fff39492978
[  725.106507][T13872]  </TASK>
[  725.281203][   T11] device 0 left promiscuous mode
[  725.418386][   T11] tipc: Left network mode
[  725.642939][T13843] chnl_net:caif_netlink_parms(): no params data found
[  725.817806][T12703] Bluetooth: hci1: command 0x0409 tx timeout
[  726.178967][T12703] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[  726.433315][T13843] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.454671][T13843] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.477496][T13843] device bridge_slave_0 entered promiscuous mode
[  726.519173][T13843] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.539313][T13843] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.554905][T13843] device bridge_slave_1 entered promiscuous mode
[  726.596743][T13912] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3178'.
[  726.607890][T13912] openvswitch: netlink: Message has 6 unknown bytes.
[  726.761719][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.878552][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.982264][T13919] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3180'.
[  726.994218][T13920] netlink: 'syz.4.3181': attribute type 29 has an invalid length.
[  727.025387][T13843] team0: Port device team_slave_0 added
[  727.046996][T13922] tipc: Started in network mode
[  727.051993][T13922] tipc: Node identity 9215a268, cluster identity 4711
[  727.059197][T13922] tipc: Node number set to 2450891368
[  727.066807][T13920] netlink: 'syz.4.3181': attribute type 29 has an invalid length.
[  727.085240][T13843] team0: Port device team_slave_1 added
[  727.154409][T13923] netlink: 'syz.4.3181': attribute type 29 has an invalid length.
[  727.172191][T13924] netlink: 'syz.4.3181': attribute type 29 has an invalid length.
[  727.212474][T13920] netlink: 'syz.4.3181': attribute type 29 has an invalid length.
[  727.269682][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.304790][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  727.401222][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.684214][T13926] device virt_wifi0 entered promiscuous mode
[  727.897719][T12703] Bluetooth: hci1: command 0x041b tx timeout
[  727.909829][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.920793][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  727.947726][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  728.050278][T13843] device hsr_slave_0 entered promiscuous mode
[  728.081083][T13843] device hsr_slave_1 entered promiscuous mode
[  728.225627][T13938] netlink: 'syz.4.3188': attribute type 29 has an invalid length.
[  728.328211][T12703] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9
[  728.400867][T13938] netlink: 'syz.4.3188': attribute type 29 has an invalid length.
[  728.446663][   T11] device hsr_slave_0 left promiscuous mode
[  728.455012][   T11] device hsr_slave_1 left promiscuous mode
[  728.479292][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  728.494059][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  728.524487][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  728.534152][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  728.607725][   T11] device veth1_macvtap left promiscuous mode
[  728.628614][   T11] device veth0_macvtap left promiscuous mode
[  729.800445][T13941] netlink: 'syz.4.3188': attribute type 29 has an invalid length.
[  729.977123][T12703] Bluetooth: hci1: command 0x040f tx timeout
[  730.049643][T13965] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3192'.
[  730.071957][T13963] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3191'.
[  730.082816][T13963] openvswitch: netlink: Message has 6 unknown bytes.
[  730.395969][T13975] netlink: 'syz.0.3195': attribute type 29 has an invalid length.
[  730.502009][T13975] netlink: 'syz.0.3195': attribute type 29 has an invalid length.
[  730.833606][T13982] tipc: Started in network mode
[  730.839728][T13982] tipc: Node identity 9215a268, cluster identity 4711
[  730.857384][T13982] tipc: Node number set to 2450891368
[  731.627917][T13995] device virt_wifi0 entered promiscuous mode
[  731.805661][T13843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  731.951697][T13843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  731.983006][T13843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  731.997941][T12703] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9
[  732.043288][T13843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  732.056655][T12703] Bluetooth: hci1: command 0x0419 tx timeout
[  732.845833][T14012] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3205'.
[  733.207960][T14020] validate_nla: 3 callbacks suppressed
[  733.207978][T14020] netlink: 'syz.3.3206': attribute type 29 has an invalid length.
[  733.240848][T14020] netlink: 'syz.3.3206': attribute type 29 has an invalid length.
[  733.282233][T14021] netlink: 'syz.3.3206': attribute type 29 has an invalid length.
[  733.303669][T14020] netlink: 'syz.3.3206': attribute type 29 has an invalid length.
[  733.349860][T12703] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9
[  733.357545][T14017] bridge0: port 3(bond0) entered disabled state
[  733.371182][T14017] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.378808][T14017] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.434369][T13843] 8021q: adding VLAN 0 to HW filter on device bond0
[  733.479164][T14023] bridge0: port 3(bond0) entered disabled state
[  733.505222][T14023] device bridge_slave_1 left promiscuous mode
[  733.521420][T14023] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.536790][T14023] device bridge_slave_0 left promiscuous mode
[  733.543440][T14023] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.675346][T14021] netlink: 'syz.3.3206': attribute type 29 has an invalid length.
[  733.737840][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  733.756301][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  733.801337][T13843] 8021q: adding VLAN 0 to HW filter on device team0
[  733.843712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  733.909833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  733.952973][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.960183][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  734.029489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  734.037996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  734.055566][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  734.070439][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.077633][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  734.109777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  734.129280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  734.155719][T14041] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3211'.
[  734.200486][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  734.237930][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  734.296082][T13843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  734.337163][T13843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  734.360199][T14053] FAULT_INJECTION: forcing a failure.
[  734.360199][T14053] name failslab, interval 1, probability 0, space 0, times 0
[  734.373516][T14053] CPU: 1 PID: 14053 Comm: syz.4.3215 Not tainted syzkaller #0
[  734.381034][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  734.391139][T14053] Call Trace:
[  734.394446][T14053]  <TASK>
[  734.397397][T14053]  dump_stack_lvl+0x188/0x24e
[  734.402112][T14053]  ? show_regs_print_info+0x12/0x12
[  734.407356][T14053]  ? load_image+0x400/0x400
[  734.411898][T14053]  ? mark_lock+0x94/0x320
[  734.416286][T14053]  ? __lock_acquire+0x13cf/0x7d10
[  734.421363][T14053]  should_fail_ex+0x399/0x4d0
[  734.426072][T14053]  should_failslab+0x5/0x20
[  734.430632][T14053]  slab_pre_alloc_hook+0x59/0x310
[  734.435688][T14053]  kmem_cache_alloc+0x56/0x2f0
[  734.440512][T14053]  ? radix_tree_node_alloc+0x7e/0x3a0
[  734.445962][T14053]  radix_tree_node_alloc+0x7e/0x3a0
[  734.451220][T14053]  idr_get_free+0x2af/0xa60
[  734.455781][T14053]  idr_alloc_cyclic+0x277/0x5c0
[  734.460683][T14053]  ? idr_alloc+0x2e0/0x2e0
[  734.465132][T14053]  ? do_raw_spin_lock+0x128/0x2f0
[  734.470205][T14053]  ? __radix_tree_preload+0x82/0x880
[  734.475541][T14053]  ? sctp_assoc_set_id+0x9d/0x350
[  734.480614][T14053]  sctp_assoc_set_id+0xb9/0x350
[  734.485511][T14053]  __sctp_connect+0x89f/0xd80
[  734.490257][T14053]  ? sctp_send_asconf+0x170/0x170
[  734.495322][T14053]  ? __local_bh_enable_ip+0x136/0x1c0
[  734.500825][T14053]  ? lockdep_hardirqs_on+0x94/0x140
[  734.506069][T14053]  ? __local_bh_enable_ip+0x136/0x1c0
[  734.511473][T14053]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  734.517047][T14053]  ? security_sctp_bind_connect+0x85/0xb0
[  734.522798][T14053]  sctp_setsockopt_connectx+0x101/0x1a0
[  734.528383][T14053]  sctp_setsockopt+0x8f4/0xf90
[  734.533536][T14053]  ? sock_common_recvmsg+0x190/0x190
[  734.538856][T14053]  __sys_setsockopt+0x2bf/0x3d0
[  734.543746][T14053]  __x64_sys_setsockopt+0xb1/0xc0
[  734.548821][T14053]  do_syscall_64+0x4c/0xa0
[  734.553274][T14053]  ? clear_bhb_loop+0x60/0xb0
[  734.557984][T14053]  ? clear_bhb_loop+0x60/0xb0
[  734.562690][T14053]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  734.568622][T14053] RIP: 0033:0x7f6887b9ce59
[  734.573083][T14053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.592913][T14053] RSP: 002b:00007f6888af8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  734.601370][T14053] RAX: ffffffffffffffda RBX: 00007f6887e15fa0 RCX: 00007f6887b9ce59
[  734.609372][T14053] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005
[  734.617376][T14053] RBP: 00007f6888af8090 R08: 0000000000000010 R09: 0000000000000000
[  734.625371][T14053] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  734.633370][T14053] R13: 00007f6887e16038 R14: 00007f6887e15fa0 R15: 00007fff27677c58
[  734.641391][T14053]  </TASK>
[  734.649296][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  734.669245][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  734.693527][T14054] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3214'.
[  734.697988][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  734.732529][T14054] openvswitch: netlink: Message has 6 unknown bytes.
[  734.739237][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  734.757174][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  734.766606][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  734.780428][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  734.789462][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  735.076488][T14066] device virt_wifi0 entered promiscuous mode
[  735.901293][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  735.924650][T14087] netlink: 'syz.3.3222': attribute type 29 has an invalid length.
[  735.946400][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  735.966837][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.032795][T14092] FAULT_INJECTION: forcing a failure.
[  736.032795][T14092] name failslab, interval 1, probability 0, space 0, times 0
[  736.086460][T14092] CPU: 1 PID: 14092 Comm: syz.2.3224 Not tainted syzkaller #0
[  736.094001][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  736.104100][T14092] Call Trace:
[  736.107418][T14092]  <TASK>
[  736.110390][T14092]  dump_stack_lvl+0x188/0x24e
[  736.115137][T14092]  ? show_regs_print_info+0x12/0x12
[  736.120386][T14092]  ? load_image+0x400/0x400
[  736.124957][T14092]  ? __might_sleep+0xd0/0xd0
[  736.129591][T14092]  ? __lock_acquire+0x7d10/0x7d10
[  736.134679][T14092]  should_fail_ex+0x399/0x4d0
[  736.139420][T14092]  should_failslab+0x5/0x20
[  736.143976][T14092]  slab_pre_alloc_hook+0x59/0x310
[  736.149065][T14092]  kmem_cache_alloc_node+0x5a/0x320
[  736.154332][T14092]  ? __alloc_skb+0xfc/0x7e0
[  736.158904][T14092]  __alloc_skb+0xfc/0x7e0
[  736.163302][T14092]  ? netlink_autobind+0xda/0x300
[  736.168302][T14092]  netlink_sendmsg+0x654/0xbd0
[  736.173139][T14092]  ? netlink_getsockopt+0x550/0x550
[  736.178400][T14092]  ? aa_sock_msg_perm+0x94/0x150
[  736.183400][T14092]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  736.188737][T14092]  ? security_socket_sendmsg+0x7c/0xa0
[  736.194255][T14092]  ? netlink_getsockopt+0x550/0x550
[  736.199522][T14092]  ____sys_sendmsg+0x5be/0x970
[  736.204361][T14092]  ? __sys_sendmsg_sock+0x30/0x30
[  736.209443][T14092]  ? __import_iovec+0x315/0x500
[  736.214354][T14092]  ? import_iovec+0x6f/0xa0
[  736.218906][T14092]  ___sys_sendmsg+0x2a2/0x360
[  736.223683][T14092]  ? __sys_sendmsg+0x290/0x290
[  736.228523][T14092]  ? __lock_acquire+0x7d10/0x7d10
[  736.233630][T14092]  __se_sys_sendmsg+0x1bb/0x2a0
[  736.238548][T14092]  ? __x64_sys_sendmsg+0x80/0x80
[  736.243558][T14092]  ? lockdep_hardirqs_on+0x94/0x140
[  736.248829][T14092]  do_syscall_64+0x4c/0xa0
[  736.253304][T14092]  ? clear_bhb_loop+0x60/0xb0
[  736.258034][T14092]  ? clear_bhb_loop+0x60/0xb0
[  736.262770][T14092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.268727][T14092] RIP: 0033:0x7fa02459ce59
[  736.273183][T14092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.292842][T14092] RSP: 002b:00007fa0254c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  736.301317][T14092] RAX: ffffffffffffffda RBX: 00007fa024815fa0 RCX: 00007fa02459ce59
[  736.307569][T14087] netlink: 'syz.3.3222': attribute type 29 has an invalid length.
[  736.309317][T14092] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003
[  736.309336][T14092] RBP: 00007fa0254c9090 R08: 0000000000000000 R09: 0000000000000000
[  736.309350][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  736.309364][T14092] R13: 00007fa024816038 R14: 00007fa024815fa0 R15: 00007fff39492978
[  736.349272][T14092]  </TASK>
[  736.350072][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  736.438642][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  736.483816][T14090] netlink: 'syz.3.3222': attribute type 29 has an invalid length.
[  736.502837][T14095] netlink: 'syz.3.3222': attribute type 29 has an invalid length.
[  736.623363][T13843] device veth0_vlan entered promiscuous mode
[  736.714469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  736.752869][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  736.801914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  736.891229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  736.957500][T13843] device veth1_vlan entered promiscuous mode
[  737.273975][T14103] netlink: 'syz.0.3226': attribute type 4 has an invalid length.
[  737.320553][T13843] device veth0_macvtap entered promiscuous mode
[  737.336475][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  737.351658][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  737.440205][T13843] device veth1_macvtap entered promiscuous mode
[  737.454440][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3227'.
[  737.474419][T14109] device dummy0 entered promiscuous mode
[  737.499451][T14109] bridge0: port 4(dummy0) entered blocking state
[  737.546357][T14109] bridge0: port 4(dummy0) entered disabled state
[  737.584087][T14109] bridge0: port 4(dummy0) entered blocking state
[  737.590639][T14109] bridge0: port 4(dummy0) entered forwarding state
[  737.623392][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  737.667228][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  737.731430][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  737.759587][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.794258][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  737.822530][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.895169][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  737.932338][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.959484][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  737.993790][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.025631][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  738.055524][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  738.077154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  738.083989][T14121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3230'.
[  738.118540][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.137832][T14121] openvswitch: netlink: Message has 6 unknown bytes.
[  738.176208][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.186094][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.236193][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.266725][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.290326][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.319130][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.350721][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.374529][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.395350][T14128] validate_nla: 1 callbacks suppressed
[  738.395369][T14128] netlink: 'syz.4.3232': attribute type 10 has an invalid length.
[  738.473018][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3232'.
[  738.494121][T14128] device team0 entered promiscuous mode
[  738.556467][T14128] device team_slave_0 entered promiscuous mode
[  738.563000][T14128] device team_slave_1 entered promiscuous mode
[  738.589543][T14128] bridge0: port 4(team0) entered blocking state
[  738.596001][T14128] bridge0: port 4(team0) entered disabled state
[  738.634466][T14128] bridge0: port 4(team0) entered blocking state
[  738.640924][T14128] bridge0: port 4(team0) entered forwarding state
[  738.692701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  738.719203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  738.745449][T13843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.763554][T13843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.781646][T13843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.799213][T13843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.909053][T14140] netlink: 'syz.4.3236': attribute type 29 has an invalid length.
[  738.971588][T14140] netlink: 'syz.4.3236': attribute type 29 has an invalid length.
[  739.012363][T14141] netlink: 'syz.4.3236': attribute type 29 has an invalid length.
[  739.050899][T14141] netlink: 'syz.4.3236': attribute type 29 has an invalid length.
[  739.093884][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  739.133156][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.228652][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  739.288352][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  739.325048][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.364927][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  739.618870][T14162] sock: sock_timestamping_bind_phc: sock not bind to device
[  742.042462][T14180] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3246'.
[  742.235512][T14186] netlink: 'syz.3.3248': attribute type 29 has an invalid length.
[  742.258829][T14186] netlink: 'syz.3.3248': attribute type 29 has an invalid length.
[  742.269794][T14186] netlink: 'syz.3.3248': attribute type 29 has an invalid length.
[  742.290903][T14186] netlink: 'syz.3.3248': attribute type 29 has an invalid length.
[  742.313777][T14189] netlink: 'syz.2.3249': attribute type 15 has an invalid length.
[  742.378752][T14189] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3249'.
[  743.272389][T14215] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3259'.
[  743.813410][T14224] validate_nla: 1 callbacks suppressed
[  743.813434][T14224] netlink: 'syz.4.3262': attribute type 29 has an invalid length.
[  744.002647][T14224] netlink: 'syz.4.3262': attribute type 29 has an invalid length.
[  744.029481][T14229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3264'.
[  744.058930][T14229] openvswitch: netlink: Message has 6 unknown bytes.
[  744.067165][T14227] netlink: 'syz.4.3262': attribute type 29 has an invalid length.
[  744.103547][T14230] netlink: 'syz.4.3262': attribute type 29 has an invalid length.
[  744.209041][T14233] tipc: Started in network mode
[  744.232104][T14233] tipc: Node identity 9215a268, cluster identity 4711
[  744.264401][T14233] tipc: Node number set to 2450891368
[  744.402843][T14237] FAULT_INJECTION: forcing a failure.
[  744.402843][T14237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  744.464046][T14237] CPU: 1 PID: 14237 Comm: syz.2.3267 Not tainted syzkaller #0
[  744.471600][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.481706][T14237] Call Trace:
[  744.485024][T14237]  <TASK>
[  744.487996][T14237]  dump_stack_lvl+0x188/0x24e
[  744.492733][T14237]  ? show_regs_print_info+0x12/0x12
[  744.497989][T14237]  ? load_image+0x400/0x400
[  744.502556][T14237]  ? __lock_acquire+0x7d10/0x7d10
[  744.507648][T14237]  should_fail_ex+0x399/0x4d0
[  744.512380][T14237]  _copy_from_user+0x2c/0x170
[  744.517119][T14237]  __sys_bpf+0x2ea/0x780
[  744.521419][T14237]  ? bpf_link_show_fdinfo+0x380/0x380
[  744.526869][T14237]  ? __sys_bpf+0x1/0x780
[  744.531157][T14237]  __x64_sys_bpf+0x78/0x90
[  744.535620][T14237]  do_syscall_64+0x4c/0xa0
[  744.540076][T14237]  ? clear_bhb_loop+0x60/0xb0
[  744.544801][T14237]  ? clear_bhb_loop+0x60/0xb0
[  744.549515][T14237]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.555449][T14237] RIP: 0033:0x7fa02459ce59
[  744.559898][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.579547][T14237] RSP: 002b:00007fa0254c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  744.588014][T14237] RAX: ffffffffffffffda RBX: 00007fa024815fa0 RCX: 00007fa02459ce59
[  744.596017][T14237] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[  744.604013][T14237] RBP: 00007fa0254c9090 R08: 0000000000000000 R09: 0000000000000000
[  744.612005][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.620000][T14237] R13: 00007fa024816038 R14: 00007fa024815fa0 R15: 00007fff39492978
[  744.628018][T14237]  </TASK>
[  745.015756][T14248] netlink: 'syz.3.3272': attribute type 10 has an invalid length.
[  745.095499][T14248] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3272'.
[  745.389778][T14259] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3277'.
[  745.426786][T14259] openvswitch: netlink: Message has 6 unknown bytes.
[  745.903436][T14279] netlink: 'syz.3.3282': attribute type 10 has an invalid length.
[  745.944008][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3282'.
[  745.971144][T14279] device batadv0 entered promiscuous mode
[  745.985244][T14279] bridge0: port 5(batadv0) entered blocking state
[  745.993665][T14279] bridge0: port 5(batadv0) entered disabled state
[  746.010470][    T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  746.019642][T14279] bridge0: port 5(batadv0) entered blocking state
[  746.019936][T14279] bridge0: port 5(batadv0) entered forwarding state
[  746.026348][    T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  747.103076][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.110309][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  748.693309][T14289] netlink: 'syz.1.3288': attribute type 10 has an invalid length.
[  748.703575][T14289] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3288'.
[  748.720885][T14289] device bond0 entered promiscuous mode
[  748.730289][T14289] device bond_slave_0 entered promiscuous mode
[  748.751377][T14289] device bond_slave_1 entered promiscuous mode
[  748.761370][T14289] bridge0: port 3(bond0) entered blocking state
[  748.769082][T14289] bridge0: port 3(bond0) entered disabled state
[  748.858632][T14289] bridge0: port 3(bond0) entered blocking state
[  748.865338][T14289] bridge0: port 3(bond0) entered forwarding state
[  749.111353][T14293] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3292'.
[  749.161510][T14293] openvswitch: netlink: Message has 6 unknown bytes.
[  749.575777][T14314] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3299'.
[  749.941515][T14318] netlink: 'syz.0.3300': attribute type 7 has an invalid length.
[  749.962530][T14318] netlink: 'syz.0.3300': attribute type 1 has an invalid length.
[  750.004646][T14318] netlink: 'syz.0.3300': attribute type 1 has an invalid length.
[  750.051325][T14318] netlink: 'syz.0.3300': attribute type 2 has an invalid length.
[  750.061951][T14323] netlink: 'syz.4.3303': attribute type 10 has an invalid length.
[  750.080801][T14318] netlink: 'syz.0.3300': attribute type 14 has an invalid length.
[  750.096546][T14323] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3303'.
[  750.110474][T14318] netlink: 'syz.0.3300': attribute type 3 has an invalid length.
[  750.129302][T14318] netlink: 'syz.0.3300': attribute type 4 has an invalid length.
[  750.154030][T14318] netlink: 'syz.0.3300': attribute type 6 has an invalid length.
[  750.178398][T14318] netlink: 'syz.0.3300': attribute type 7 has an invalid length.
[  750.202213][T14318] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.3300'.
[  750.675051][T14335] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3307'.
[  750.742888][T14335] openvswitch: netlink: Message has 6 unknown bytes.
[  753.587864][T14349] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3314'.
[  754.000681][T14361] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3318'.
[  754.853048][T14389] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3329'.
[  755.251434][T14402] device virt_wifi0 entered promiscuous mode
[  755.341829][T14398] validate_nla: 6 callbacks suppressed
[  755.341868][T14398] netlink: 'syz.0.3333': attribute type 10 has an invalid length.
[  755.358806][T14398] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3333'.
[  755.369658][T14398] device bond0 entered promiscuous mode
[  755.386479][T14398] device bond_slave_0 entered promiscuous mode
[  755.401540][T14398] device bond_slave_1 entered promiscuous mode
[  755.421831][T14398] bridge0: port 3(bond0) entered blocking state
[  755.441850][T14398] bridge0: port 3(bond0) entered disabled state
[  755.480136][T14398] bridge0: port 3(bond0) entered blocking state
[  755.487127][T14398] bridge0: port 3(bond0) entered forwarding state
[  756.684049][T14440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3345'.
[  757.135559][T14451] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3352'.
[  758.415261][T14469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3359'.
[  758.427967][T14465] netlink: 'syz.2.3357': attribute type 10 has an invalid length.
[  758.451527][T14469] openvswitch: netlink: Message has 6 unknown bytes.
[  758.461266][T14465] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3357'.
[  758.672475][T14477] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3362'.
[  758.794395][T14477] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  759.825932][T14521] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3381'.
[  760.307513][T14534] netlink: 'syz.4.3387': attribute type 10 has an invalid length.
[  760.338965][T14534] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3387'.
[  760.356763][T14536] netlink: 'syz.1.3389': attribute type 29 has an invalid length.
[  760.404410][T14536] netlink: 'syz.1.3389': attribute type 29 has an invalid length.
[  760.480990][T14543] netlink: 'syz.1.3389': attribute type 29 has an invalid length.
[  760.510879][T14536] netlink: 'syz.1.3389': attribute type 29 has an invalid length.
[  760.530531][T14536] netlink: 'syz.1.3389': attribute type 29 has an invalid length.
[  761.022604][T14560] netlink: 'syz.3.3396': attribute type 3 has an invalid length.
[  761.180032][T14560] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3396'.
[  761.445956][T14576] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3403'.
[  761.653198][T14580] netlink: 'syz.1.3404': attribute type 10 has an invalid length.
[  761.679516][T14582] netlink: 'syz.4.3406': attribute type 29 has an invalid length.
[  761.696355][T14580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3404'.
[  761.727455][T14582] netlink: 'syz.4.3406': attribute type 29 has an invalid length.
[  761.741562][T14586] netlink: 'syz.4.3406': attribute type 29 has an invalid length.
[  762.357191][T14602] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3415'.
[  762.913347][T14611] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3418'.
[  763.363536][T14622] sctp: [Deprecated]: syz.4.3420 (pid 14622) Use of int in maxseg socket option.
[  763.363536][T14622] Use struct sctp_assoc_value instead
[  763.639957][T14615] device geneve1 entered promiscuous mode
[  763.689435][T14615] team0: Port device geneve1 added
[  763.814886][T14620] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3421'.
[  765.664858][T14654] validate_nla: 9 callbacks suppressed
[  765.664897][T14654] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  765.726241][T14654] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3433'.
[  766.046076][T14670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3439'.
[  766.052351][T14669] netlink: 'syz.0.3438': attribute type 29 has an invalid length.
[  766.123177][T14670] bond0: (slave bond_slave_0): Releasing backup interface
[  766.156005][T14670] device bond_slave_0 left promiscuous mode
[  766.196055][T14670] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  766.243595][T14669] netlink: 'syz.0.3438': attribute type 29 has an invalid length.
[  766.299303][T14672] netlink: 'syz.0.3438': attribute type 29 has an invalid length.
[  766.346362][T14675] netlink: 'syz.0.3438': attribute type 29 has an invalid length.
[  766.378687][T14676] netlink: 'syz.0.3438': attribute type 29 has an invalid length.
[  766.885393][T14693] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3447'.
[  766.939170][T14693] openvswitch: netlink: Message has 6 unknown bytes.
[  767.102236][T14698] netlink: 'syz.0.3449': attribute type 10 has an invalid length.
[  767.125596][T14698] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3449'.
[  767.328526][T14709] netlink: 'syz.2.3451': attribute type 3 has an invalid length.
[  767.386292][T14709] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3451'.
[  767.543803][T14716] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3456'.
[  767.604860][T14716] openvswitch: netlink: Message has 6 unknown bytes.
[  768.245660][T14736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3464'.
[  768.258099][T14736] openvswitch: netlink: Message has 6 unknown bytes.
[  768.360887][T14740] netlink: 'syz.2.3466': attribute type 10 has an invalid length.
[  768.374957][T14740] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3466'.
[  768.570232][T14746] netlink: 'syz.1.3469': attribute type 10 has an invalid length.
[  768.702237][T14749] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3470'.
[  769.152856][T14752] sctp: [Deprecated]: syz.1.3469 (pid 14752) Use of int in maxseg socket option.
[  769.152856][T14752] Use struct sctp_assoc_value instead
[  769.604064][T14746] team0: Port device geneve1 added
[  770.431902][T14777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3479'.
[  770.483823][T14777] openvswitch: netlink: Message has 6 unknown bytes.
[  770.499078][T14779] openvswitch: netlink: Message has 6 unknown bytes.
[  770.548254][T14782] bond0: (slave bond_slave_0): Releasing backup interface
[  770.575530][T14782] device bond_slave_0 left promiscuous mode
[  770.634276][T14782] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  771.154842][T14800] netlink: 'syz.3.3489': attribute type 29 has an invalid length.
[  771.164103][T14798] netlink: 'syz.1.3488': attribute type 10 has an invalid length.
[  771.179031][T14798] __nla_validate_parse: 2 callbacks suppressed
[  771.179102][T14798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3488'.
[  771.273283][T14800] netlink: 'syz.3.3489': attribute type 29 has an invalid length.
[  771.300070][T14803] netlink: 'syz.3.3489': attribute type 29 has an invalid length.
[  771.331526][T14806] netlink: 'syz.3.3489': attribute type 29 has an invalid length.
[  771.398536][T14800] netlink: 'syz.3.3489': attribute type 29 has an invalid length.
[  771.609965][T14818] netlink: 'syz.0.3493': attribute type 16 has an invalid length.
[  771.648836][T14815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3494'.
[  771.656316][T14818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3493'.
[  771.707635][T14815] openvswitch: netlink: Message has 6 unknown bytes.
[  771.813567][T14824] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3497'.
[  771.843711][T14824] openvswitch: netlink: Message has 6 unknown bytes.
[  772.550492][T14844] netlink: 'syz.3.3506': attribute type 10 has an invalid length.
[  772.572007][T14844] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3506'.
[  773.132122][T14863] netlink: 'syz.3.3511': attribute type 10 has an invalid length.
[  773.271976][T14863] team0: Port device geneve1 added
[  773.985171][T14878] netlink: 'syz.4.3521': attribute type 10 has an invalid length.
[  773.994437][T14878] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3521'.
[  774.434712][T14888] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3526'.
[  774.456679][T14888] openvswitch: netlink: Message has 6 unknown bytes.
[  774.569348][T14859] sctp: [Deprecated]: syz.3.3511 (pid 14859) Use of int in maxseg socket option.
[  774.569348][T14859] Use struct sctp_assoc_value instead
[  775.187724][T14914] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3536'.
[  775.270582][T14916] device syzkaller0 entered promiscuous mode
[  775.304614][T14918] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3538'.
[  776.023369][T14940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3544'.
[  776.038918][T14940] openvswitch: netlink: Message has 6 unknown bytes.
[  776.512282][T12703] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  778.446331][   T47] tipc: Left network mode
[  778.743880][T14961] validate_nla: 1 callbacks suppressed
[  778.743917][T14961] netlink: 'syz.0.3552': attribute type 10 has an invalid length.
[  778.796435][T14961] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3552'.
[  778.935742][T14972] netlink: 'syz.1.3558': attribute type 2 has an invalid length.
[  778.997977][T14972] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3558'.
[  779.031254][T14972] FAULT_INJECTION: forcing a failure.
[  779.031254][T14972] name failslab, interval 1, probability 0, space 0, times 0
[  779.088212][T14972] CPU: 0 PID: 14972 Comm: syz.1.3558 Not tainted syzkaller #0
[  779.095761][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  779.105875][T14972] Call Trace:
[  779.109188][T14972]  <TASK>
[  779.112150][T14972]  dump_stack_lvl+0x188/0x24e
[  779.116905][T14972]  ? show_regs_print_info+0x12/0x12
[  779.122167][T14972]  ? load_image+0x400/0x400
[  779.126724][T14972]  ? __might_sleep+0xd0/0xd0
[  779.131369][T14972]  ? __lock_acquire+0x7d10/0x7d10
[  779.136467][T14972]  should_fail_ex+0x399/0x4d0
[  779.141224][T14972]  should_failslab+0x5/0x20
[  779.145784][T14972]  slab_pre_alloc_hook+0x59/0x310
[  779.150956][T14972]  kmem_cache_alloc_node+0x5a/0x320
[  779.156190][T14972]  ? __alloc_skb+0xfc/0x7e0
[  779.160750][T14972]  __alloc_skb+0xfc/0x7e0
[  779.165152][T14972]  ovs_dp_cmd_del+0x64/0x360
[  779.169945][T14972]  genl_family_rcv_msg_doit+0x22a/0x330
[  779.175531][T14972]  ? end_current_label_crit_section+0x170/0x170
[  779.181819][T14972]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  779.187758][T14972]  ? bpf_lsm_capable+0x5/0x10
[  779.192477][T14972]  ? security_capable+0x85/0xb0
[  779.197377][T14972]  genl_rcv_msg+0x604/0x790
[  779.201918][T14972]  ? genl_bind+0x360/0x360
[  779.206369][T14972]  ? ovs_dp_cmd_new+0xba0/0xba0
[  779.211267][T14972]  netlink_rcv_skb+0x1fb/0x450
[  779.216076][T14972]  ? genl_bind+0x360/0x360
[  779.220544][T14972]  ? netlink_ack+0x1170/0x1170
[  779.225351][T14972]  ? down_read+0x1a8/0x2d0
[  779.229840][T14972]  genl_rcv+0x24/0x40
[  779.233851][T14972]  netlink_unicast+0x74d/0x8d0
[  779.238670][T14972]  netlink_sendmsg+0x8ad/0xbd0
[  779.243488][T14972]  ? netlink_getsockopt+0x550/0x550
[  779.248817][T14972]  ? aa_sock_msg_perm+0x94/0x150
[  779.253791][T14972]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  779.259107][T14972]  ? security_socket_sendmsg+0x7c/0xa0
[  779.264635][T14972]  ? netlink_getsockopt+0x550/0x550
[  779.269882][T14972]  ____sys_sendmsg+0x5be/0x970
[  779.274693][T14972]  ? __sys_sendmsg_sock+0x30/0x30
[  779.279755][T14972]  ? __import_iovec+0x315/0x500
[  779.284652][T14972]  ? import_iovec+0x6f/0xa0
[  779.289189][T14972]  ___sys_sendmsg+0x2a2/0x360
[  779.293910][T14972]  ? __sys_sendmsg+0x290/0x290
[  779.298762][T14972]  __se_sys_sendmsg+0x1bb/0x2a0
[  779.303655][T14972]  ? ct_nmi_exit+0x145/0x1c0
[  779.308283][T14972]  ? __x64_sys_sendmsg+0x80/0x80
[  779.313292][T14972]  ? lockdep_hardirqs_on+0x94/0x140
[  779.318541][T14972]  do_syscall_64+0x4c/0xa0
[  779.323006][T14972]  ? clear_bhb_loop+0x60/0xb0
[  779.327719][T14972]  ? clear_bhb_loop+0x60/0xb0
[  779.332445][T14972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  779.338409][T14972] RIP: 0033:0x7f6377d9ce59
[  779.342846][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  779.362482][T14972] RSP: 002b:00007f6378c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  779.370929][T14972] RAX: ffffffffffffffda RBX: 00007f6378015fa0 RCX: 00007f6377d9ce59
[  779.378925][T14972] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005
[  779.386922][T14972] RBP: 00007f6378c7e090 R08: 0000000000000000 R09: 0000000000000000
[  779.394918][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  779.402919][T14972] R13: 00007f6378016038 R14: 00007f6378015fa0 R15: 00007ffe7b3a22d8
[  779.410949][T14972]  </TASK>
[  780.099324][T14991] netlink: 'syz.1.3565': attribute type 10 has an invalid length.
[  780.172385][T14991] 8021q: adding VLAN 0 to HW filter on device team0
[  780.234090][T14991] device team0 entered promiscuous mode
[  780.251027][T14991] device team_slave_0 entered promiscuous mode
[  780.282135][T14991] device team_slave_1 entered promiscuous mode
[  780.313080][T14991] device geneve1 entered promiscuous mode
[  781.600494][   T47] device hsr_slave_0 left promiscuous mode
[  781.625375][   T47] device hsr_slave_1 left promiscuous mode
[  781.675806][T15037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3583'.
[  781.710350][   T47] device veth1_macvtap left promiscuous mode
[  781.717801][T15037] openvswitch: netlink: Message has 6 unknown bytes.
[  781.756759][   T47] device veth1_vlan left promiscuous mode
[  784.297727][T15091] netlink: 'syz.2.3602': attribute type 17 has an invalid length.
[  784.343242][T15091] netlink: 'syz.2.3602': attribute type 16 has an invalid length.
[  784.393527][T15091] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3602'.
[  784.761963][T15097] netlink: 'syz.2.3602': attribute type 21 has an invalid length.
[  785.057466][T15110] netlink: 'syz.4.3606': attribute type 10 has an invalid length.
[  785.067135][T15108] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3607'.
[  785.093321][T15110] bridge0: port 4(team0) entered disabled state
[  785.103025][T15108] openvswitch: netlink: Message has 6 unknown bytes.
[  785.183580][T15110] device team0 left promiscuous mode
[  785.195140][T15110] device team_slave_0 left promiscuous mode
[  785.215220][T15110] device team_slave_1 left promiscuous mode
[  785.228374][T15110] device geneve1 left promiscuous mode
[  785.234361][T15110] bridge0: port 4(team0) entered disabled state
[  785.250084][T15110] 8021q: adding VLAN 0 to HW filter on device team0
[  785.267166][T15110] device team0 entered promiscuous mode
[  785.285794][T15110] device team_slave_0 entered promiscuous mode
[  785.300571][T15110] device team_slave_1 entered promiscuous mode
[  785.321664][T15110] device geneve1 entered promiscuous mode
[  785.717245][T15128] FAULT_INJECTION: forcing a failure.
[  785.717245][T15128] name failslab, interval 1, probability 0, space 0, times 0
[  785.802403][T15126] netlink: 'syz.2.3614': attribute type 10 has an invalid length.
[  785.826396][T15128] CPU: 0 PID: 15128 Comm: syz.4.3615 Not tainted syzkaller #0
[  785.833934][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  785.836794][T15126] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3614'.
[  785.844017][T15128] Call Trace:
[  785.844028][T15128]  <TASK>
[  785.844037][T15128]  dump_stack_lvl+0x188/0x24e
[  785.844092][T15128]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  785.844123][T15128]  ? show_regs_print_info+0x12/0x12
[  785.844158][T15128]  ? load_image+0x400/0x400
[  785.844201][T15128]  should_fail_ex+0x399/0x4d0
[  785.844232][T15128]  should_failslab+0x5/0x20
[  785.889633][T15128]  slab_pre_alloc_hook+0x59/0x310
[  785.894713][T15128]  ? __lock_acquire+0x7d10/0x7d10
[  785.899798][T15128]  ? find_exception+0x171/0xa30
[  785.904706][T15128]  kmem_cache_alloc+0x56/0x2f0
[  785.909506][T15128]  ? dst_alloc+0x101/0x160
[  785.914001][T15128]  dst_alloc+0x101/0x160
[  785.918382][T15128]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[  785.924503][T15128]  ? ip_route_output_key_hash_rcu+0x12e1/0x23f0
[  785.930903][T15128]  ? ip_route_output_key_hash+0x139/0x330
[  785.936674][T15128]  ip_route_output_key_hash+0x1ef/0x330
[  785.942271][T15128]  ? ip_route_input_rcu+0x3160/0x3160
[  785.947701][T15128]  ? __lock_acquire+0x7d10/0x7d10
[  785.952794][T15128]  ip_route_output_flow+0x26/0x150
[  785.957950][T15128]  ? security_sk_classify_flow+0x77/0x90
[  785.963644][T15128]  raw_sendmsg+0x116d/0x1b20
[  785.968367][T15128]  ? raw_sendmsg+0x540/0x1b20
[  785.973102][T15128]  ? compat_raw_ioctl+0x60/0x60
[  785.978044][T15128]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  785.984700][T15128]  ? sock_rps_record_flow+0x19/0x3f0
[  785.990038][T15128]  ? inet_sendmsg+0x78/0x2f0
[  785.994669][T15128]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  786.000093][T15128]  ? security_socket_sendmsg+0x7c/0xa0
[  786.005612][T15128]  ? inet_send_prepare+0x260/0x260
[  786.010770][T15128]  ____sys_sendmsg+0x5be/0x970
[  786.015610][T15128]  ? __sys_sendmsg_sock+0x30/0x30
[  786.020693][T15128]  ? __import_iovec+0x315/0x500
[  786.025597][T15128]  ? import_iovec+0x6f/0xa0
[  786.030148][T15128]  ___sys_sendmsg+0x2a2/0x360
[  786.034893][T15128]  ? __sys_sendmsg+0x290/0x290
[  786.039746][T15128]  ? __lock_acquire+0x7d10/0x7d10
[  786.044856][T15128]  __se_sys_sendmsg+0x1bb/0x2a0
[  786.049770][T15128]  ? __x64_sys_sendmsg+0x80/0x80
[  786.054788][T15128]  ? lockdep_hardirqs_on+0x94/0x140
[  786.060217][T15128]  do_syscall_64+0x4c/0xa0
[  786.064689][T15128]  ? clear_bhb_loop+0x60/0xb0
[  786.069428][T15128]  ? clear_bhb_loop+0x60/0xb0
[  786.074157][T15128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.080103][T15128] RIP: 0033:0x7f6887b9ce59
[  786.084560][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.104243][T15128] RSP: 002b:00007f6888af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  786.112718][T15128] RAX: ffffffffffffffda RBX: 00007f6887e15fa0 RCX: 00007f6887b9ce59
[  786.120738][T15128] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  786.128757][T15128] RBP: 00007f6888af8090 R08: 0000000000000000 R09: 0000000000000000
[  786.136770][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.144782][T15128] R13: 00007f6887e16038 R14: 00007f6887e15fa0 R15: 00007fff27677c58
[  786.152818][T15128]  </TASK>
[  786.686618][T15142] netlink: 'syz.1.3618': attribute type 17 has an invalid length.
[  786.715200][T15142] netlink: 'syz.1.3618': attribute type 16 has an invalid length.
[  786.792671][T15142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3618'.
[  786.974477][T15143] netlink: 'syz.1.3618': attribute type 21 has an invalid length.
[  787.480682][T15160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3625'.
[  787.497952][T15160] openvswitch: netlink: Message has 6 unknown bytes.
[  787.588206][T15163] netlink: 'syz.0.3627': attribute type 10 has an invalid length.
[  787.648266][T15163] 8021q: adding VLAN 0 to HW filter on device team0
[  787.704873][T15163] device team0 entered promiscuous mode
[  787.737701][T15163] device team_slave_0 entered promiscuous mode
[  787.744063][T15163] device team_slave_1 entered promiscuous mode
[  787.808872][T15164] netlink: 'syz.1.3628': attribute type 10 has an invalid length.
[  787.907019][T15164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3628'.
[  788.286047][T15180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3633'.
[  788.552853][T15188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3637'.
[  788.845421][T15196] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3640'.
[  788.939871][T15196] openvswitch: netlink: Message has 6 unknown bytes.
[  789.117454][T15191] FAULT_INJECTION: forcing a failure.
[  789.117454][T15191] name failslab, interval 1, probability 0, space 0, times 0
[  789.137680][T15191] CPU: 0 PID: 15191 Comm: syz.4.3638 Not tainted syzkaller #0
[  789.145283][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  789.155430][T15191] Call Trace:
[  789.158836][T15191]  <TASK>
[  789.161865][T15191]  dump_stack_lvl+0x188/0x24e
[  789.166688][T15191]  ? show_regs_print_info+0x12/0x12
[  789.172011][T15191]  ? load_image+0x400/0x400
[  789.176725][T15191]  should_fail_ex+0x399/0x4d0
[  789.181536][T15191]  should_failslab+0x5/0x20
[  789.186137][T15191]  slab_pre_alloc_hook+0x59/0x310
[  789.191266][T15191]  ? br_netlink_fini+0x30/0x30
[  789.196155][T15191]  kmem_cache_alloc_node+0x5a/0x320
[  789.201461][T15191]  ? __alloc_skb+0xfc/0x7e0
[  789.206108][T15191]  __alloc_skb+0xfc/0x7e0
[  789.210576][T15191]  rtmsg_ifinfo_build_skb+0x80/0x190
[  789.216018][T15191]  rtmsg_ifinfo+0xc4/0x200
[  789.220701][T15191]  __dev_notify_flags+0xef/0x310
[  789.225761][T15191]  ? __dev_change_flags+0x6a0/0x6a0
[  789.231061][T15191]  ? __dev_change_flags+0x4d0/0x6a0
[  789.236397][T15191]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  789.242490][T15191]  ? dev_get_flags+0x1c0/0x1c0
[  789.247362][T15191]  ? lock_chain_count+0x20/0x20
[  789.252371][T15191]  dev_change_flags+0xe4/0x1a0
[  789.257289][T15191]  do_setlink+0xba1/0x3e60
[  789.261871][T15191]  ? ___ratelimit+0x45e/0x5f0
[  789.266687][T15191]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  789.272972][T15191]  ? radix_tree_cpu_dead+0x160/0x160
[  789.278389][T15191]  ? __stack_depot_save+0x35/0x460
[  789.283705][T15191]  ? __nla_validate_parse+0x2072/0x2ac0
[  789.289361][T15191]  ? netlink_rcv_skb+0x1fb/0x450
[  789.294405][T15191]  ? netlink_unicast+0x74d/0x8d0
[  789.299452][T15191]  ? netlink_sendmsg+0x8ad/0xbd0
[  789.304630][T15191]  ? __nla_validate+0x50/0x50
[  789.309559][T15191]  ? validate_linkmsg+0x3db/0x4c0
[  789.314733][T15191]  rtnl_newlink+0x17d9/0x20a0
[  789.319651][T15191]  ? rtnl_newlink+0x561/0x20a0
[  789.324617][T15191]  ? rtnl_setlink+0x510/0x510
[  789.329399][T15191]  ? __rwlock_init+0x140/0x140
[  789.334288][T15191]  ? do_raw_spin_unlock+0x11d/0x230
[  789.339626][T15191]  ? __mutex_lock+0x810/0xaf0
[  789.344437][T15191]  ? __mutex_lock+0x3b2/0xaf0
[  789.349328][T15191]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  789.354548][T15191]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  789.359749][T15191]  ? rtnl_setlink+0x510/0x510
[  789.364526][T15191]  rtnetlink_rcv_msg+0x87c/0xfc0
[  789.369604][T15191]  ? rtnetlink_bind+0x80/0x80
[  789.374457][T15191]  ? __dev_queue_xmit+0x1cd2/0x37c0
[  789.379803][T15191]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  789.385660][T15191]  ? perf_trace_lock+0x301/0x390
[  789.390736][T15191]  ? __copy_skb_header+0x3ba/0x4f0
[  789.396022][T15191]  ? trace_event_raw_event_lock+0x250/0x250
[  789.402038][T15191]  ? __skb_clone+0x480/0x790
[  789.406814][T15191]  netlink_rcv_skb+0x1fb/0x450
[  789.411671][T15191]  ? rtnetlink_bind+0x80/0x80
[  789.416467][T15191]  ? netlink_ack+0x1170/0x1170
[  789.421470][T15191]  ? netlink_deliver_tap+0x2e/0x1b0
[  789.426781][T15191]  netlink_unicast+0x74d/0x8d0
[  789.431695][T15191]  netlink_sendmsg+0x8ad/0xbd0
[  789.436620][T15191]  ? netlink_getsockopt+0x550/0x550
[  789.442029][T15191]  ? aa_sock_msg_perm+0x94/0x150
[  789.447063][T15191]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  789.452419][T15191]  ? security_socket_sendmsg+0x7c/0xa0
[  789.458089][T15191]  ? netlink_getsockopt+0x550/0x550
[  789.463393][T15191]  ____sys_sendmsg+0x5be/0x970
[  789.468299][T15191]  ? __sys_sendmsg_sock+0x30/0x30
[  789.473402][T15191]  ? __import_iovec+0x315/0x500
[  789.478389][T15191]  ? import_iovec+0x6f/0xa0
[  789.483002][T15191]  ___sys_sendmsg+0x2a2/0x360
[  789.487796][T15191]  ? __sys_sendmsg+0x290/0x290
[  789.492820][T15191]  ? __lock_acquire+0x7d10/0x7d10
[  789.498056][T15191]  __se_sys_sendmsg+0x1bb/0x2a0
[  789.503013][T15191]  ? __x64_sys_sendmsg+0x80/0x80
[  789.508128][T15191]  ? lockdep_hardirqs_on+0x94/0x140
[  789.513507][T15191]  do_syscall_64+0x4c/0xa0
[  789.518139][T15191]  ? clear_bhb_loop+0x60/0xb0
[  789.522891][T15191]  ? clear_bhb_loop+0x60/0xb0
[  789.527738][T15191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  789.533704][T15191] RIP: 0033:0x7f6887b9ce59
[  789.538198][T15191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.557899][T15191] RSP: 002b:00007f6888af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  789.566407][T15191] RAX: ffffffffffffffda RBX: 00007f6887e15fa0 RCX: 00007f6887b9ce59
[  789.574449][T15191] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007
[  789.582489][T15191] RBP: 00007f6888af8090 R08: 0000000000000000 R09: 0000000000000000
[  789.590521][T15191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  789.598572][T15191] R13: 00007f6887e16038 R14: 00007f6887e15fa0 R15: 00007fff27677c58
[  789.606706][T15191]  </TASK>
[  789.758581][T15191] bridge0: port 4(netdevsim0) entered blocking state
[  789.782401][T15191] bridge0: port 4(netdevsim0) entered disabled state
[  789.898507][T15191] device netdevsim0 entered promiscuous mode
[  789.905454][T15192] validate_nla: 3 callbacks suppressed
[  789.905469][T15192] netlink: 'syz.3.3637': attribute type 21 has an invalid length.
[  800.546587][ T4282] Bluetooth: hci5: command 0x0406 tx timeout
[  808.957512][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.963968][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  817.496891][T12906] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2667 jiffies s: 39385 root: 0x2/.
[  817.521436][T12906] rcu: blocking rcu_node structures (internal RCU debug):
[  817.529035][T12906] Sending NMI from CPU 0 to CPUs 1:
[  817.534313][    C1] NMI backtrace for cpu 1
[  817.534324][    C1] CPU: 1 PID: 15212 Comm: syz.4.3643 Not tainted syzkaller #0
[  817.534342][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  817.534352][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60
[  817.534379][    C1] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 70 77 9d 0c 48 89 de 5b e9 b7 42 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 84 e8 7f 7e 65 8b 15 85 e8 7f 7e 81 e2 00 01 ff 00 74
[  817.534394][    C1] RSP: 0018:ffffc900001e05b8 EFLAGS: 00000002
[  817.534409][    C1] RAX: ffffffff813a224e RBX: 0000000000000001 RCX: da6dd05a90d96300
[  817.534423][    C1] RDX: ffff888079423b80 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40
[  817.534436][    C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff215f448
[  817.534449][    C1] R10: dffffc0000000000 R11: fffffbfff215f449 R12: dffffc0000000000
[  817.534462][    C1] R13: 0000000000000008 R14: ffffffff813a2008 R15: ffff88813fff92e0
[  817.534474][    C1] FS:  00007f6888ad76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  817.534491][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  817.534503][    C1] CR2: 00007f6888ab5ff8 CR3: 0000000059ce8000 CR4: 00000000003506e0
[  817.534518][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  817.534529][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  817.534540][    C1] Call Trace:
[  817.534546][    C1]  <IRQ>
[  817.534552][    C1]  __virt_addr_valid+0x3ce/0x540
[  817.534582][    C1]  kasan_addr_to_slab+0x9/0xc0
[  817.534606][    C1]  __kasan_record_aux_stack+0xf/0xc0
[  817.534624][    C1]  irq_work_queue_on+0x10f/0x260
[  817.534654][    C1]  rcu_read_unlock_special+0x3c9/0x510
[  817.534678][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  817.534697][    C1]  ? __cant_sleep+0x220/0x220
[  817.534719][    C1]  __rcu_read_unlock+0x78/0xd0
[  817.534735][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.534760][    C1]  trace_call_bpf+0x5bb/0x6b0
[  817.534784][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.534819][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  817.534847][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  817.534863][    C1]  ? sched_clock_cpu+0x6e/0x260
[  817.534888][    C1]  perf_trace_run_bpf_submit+0x79/0x1c0
[  817.534919][    C1]  perf_trace_preemptirq_template+0x268/0x320
[  817.534945][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  817.534971][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  817.534998][    C1]  ? __irq_exit_rcu+0x147/0x230
[  817.535014][    C1]  ? irq_exit_rcu+0x20/0x20
[  817.535034][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  817.535057][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[  817.535084][    C1]  trace_hardirqs_on+0x24/0x40
[  817.535106][    C1]  asm_sysvec_irq_work+0x16/0x20
[  817.535130][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  817.535149][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 82 22 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  817.535163][    C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206
[  817.535177][    C1] RAX: da6dd05a90d96300 RBX: 1ffff9200003c160 RCX: da6dd05a90d96300
[  817.535191][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0
[  817.535205][    C1] RBP: ffffc900001e0bb0 R08: ffffffff90afa2ef R09: 1ffffffff215f45d
[  817.535218][    C1] R10: dffffc0000000000 R11: fffffbfff215f45e R12: 0000000000000246
[  817.535231][    C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002
[  817.535255][    C1]  ? mac80211_hwsim_beacon_tx+0x61e/0xae0
[  817.535279][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  817.535305][    C1]  __rcu_read_unlock+0x78/0xd0
[  817.535321][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  817.535350][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  817.535370][    C1]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[  817.535399][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  817.535430][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  817.535456][    C1]  ? hw_scan_work+0xf50/0xf50
[  817.535488][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  817.535508][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  817.535537][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  817.535561][    C1]  handle_softirqs+0x2a1/0x930
[  817.535583][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  817.535603][    C1]  ? do_softirq+0x210/0x210
[  817.535626][    C1]  __irq_exit_rcu+0x13b/0x230
[  817.535643][    C1]  ? irq_exit_rcu+0x20/0x20
[  817.535667][    C1]  irq_exit_rcu+0x5/0x20
[  817.535683][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  817.535703][    C1]  </IRQ>
[  817.535708][    C1]  <TASK>
[  817.535715][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  817.535739][    C1] RIP: 0010:mas_mab_cp+0x1e8/0x8c0
[  817.535763][    C1] Code: 44 24 30 48 8d 98 c0 9d b1 8b 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 67 06 00 00 0f b6 03 <41> 38 c7 89 44 24 28 41 0f 42 c7 0f b6 d8 89 ef 89 de e8 c1 37 66
[  817.535779][    C1] RSP: 0018:ffffc90005706d20 EFLAGS: 00000293
[  817.535800][    C1] RAX: 000000000000000f RBX: ffffffff8bb19dc1 RCX: 000000008bb19d01
[  817.535812][    C1] RDX: ffffc9001cb76000 RSI: 0000000000010f73 RDI: 0000000000010f74
[  817.535825][    C1] RBP: 0000000000000001 R08: ffff888079423b80 R09: 0000000000000003
[  817.535836][    C1] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000
[  817.535847][    C1] R13: ffffc900057072a0 R14: 000000110c22ffff R15: 000000000000000e
[  817.535880][    C1]  ? __lock_acquire+0x12f4/0x7d10
[  817.535920][    C1]  mas_store_b_node+0xde/0xff0
[  817.535951][    C1]  mas_wr_modify+0x136c/0x55c0
[  817.535980][    C1]  ? perf_tp_event+0xc30/0xc30
[  817.536013][    C1]  ? perf_tp_event+0xaac/0xc30
[  817.536042][    C1]  ? mas_new_root+0xa10/0xa10
[  817.536069][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536098][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  817.536128][    C1]  ? migrate_enable+0x148/0x220
[  817.536150][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536172][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536196][    C1]  ? trace_call_bpf+0x5d6/0x6b0
[  817.536219][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536247][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  817.536271][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536293][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536317][    C1]  ? trace_call_bpf+0x5d6/0x6b0
[  817.536342][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  817.536417][    C1]  ? mas_wr_walk+0x72b/0x780
[  817.536439][    C1]  ? mark_lock+0x94/0x320
[  817.536472][    C1]  ? mas_wr_store_entry+0x8c1/0xcc0
[  817.536495][    C1]  ? rcu_is_watching+0x11/0xa0
[  817.536525][    C1]  mas_store+0x58a/0x6a0
[  817.536547][    C1]  ? mas_empty_area_rev+0x1910/0x1910
[  817.536576][    C1]  ? up_write+0x1bb/0x420
[  817.536595][    C1]  ? vma_interval_tree_insert_after+0x245/0x2a0
[  817.536620][    C1]  copy_mm+0xe4c/0x1690
[  817.536649][    C1]  ? copy_signal+0x680/0x680
[  817.536666][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  817.536696][    C1]  ? __init_rwsem+0x11e/0x160
[  817.536718][    C1]  ? copy_signal+0x556/0x680
[  817.536738][    C1]  copy_process+0x1979/0x4030
[  817.536765][    C1]  ? copy_process+0x94d/0x4030
[  817.536797][    C1]  ? idle_dummy+0x10/0x10
[  817.536813][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536837][    C1]  ? trace_call_bpf+0x5d6/0x6b0
[  817.536860][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  817.536889][    C1]  kernel_clone+0x24b/0x900
[  817.536925][    C1]  ? trace_call_bpf+0x5d6/0x6b0
[  817.536951][    C1]  ? create_io_thread+0x170/0x170
[  817.536981][    C1]  __x64_sys_clone+0x1a7/0x220
[  817.537015][    C1]  ? __ia32_sys_vfork+0x140/0x140
[  817.537048][    C1]  ? syscall_enter_from_user_mode+0x2e/0x80
[  817.537071][    C1]  do_syscall_64+0x4c/0xa0
[  817.537095][    C1]  ? clear_bhb_loop+0x60/0xb0
[  817.537135][    C1]  ? clear_bhb_loop+0x60/0xb0
[  817.537159][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  817.537182][    C1] RIP: 0033:0x7f6887b9ce59
[  817.537198][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.537212][    C1] RSP: 002b:00007f6888ad6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  817.537230][    C1] RAX: ffffffffffffffda RBX: 00007f6887e16090 RCX: 00007f6887b9ce59
[  817.537243][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000
[  817.537254][    C1] RBP: 00007f6887c32d6f R08: 0000000000000000 R09: 0000000000000000
[  817.537265][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  817.537275][    C1] R13: 00007f6887e16128 R14: 00007f6887e16090 R15: 00007fff27677c58
[  817.537298][    C1]  </TASK>