last executing test programs:

6.27707914s ago: executing program 4 (id=3647):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

6.118615344s ago: executing program 0 (id=3652):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1800a5dc9e4764fb77ad000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x18, 0x4803e}, 0x8000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="359ccab1fee03aaf4472ee1a524ce6f840fea878b9f2e634d8619945f73c186f56445bf94b2910cf7ed1b1653bbbd97ebebf687cdf33986e211da1c478e8d14ef441e510d968994f1417d8efb71a02b11436c95aca2471bba62b426651307990fdae277354a23954d398bf3aecf4e102f5e45d119c5e009ad35dc7d183209e7921f2ace5ca44a92eeea5c9076ed34c71ffc3f8c3f31141ad6609f9278b0860f028201a37499713", 0xa7}, {&(0x7f0000000240)="369a8623b4", 0x5}], 0x2, 0x0, 0x0, 0x20040001}, 0x4000)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r7, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000c00), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=r8, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640)=r8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

6.109240454s ago: executing program 4 (id=3653):
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0x81, 0x6, 0x9, 0x2, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000280), 0x1}, 0x1, 0x3, 0x9, 0x7, 0x2, 0x101, 0x8, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x31)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x21}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x3f, 0x50, &(0x7f0000000000)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59810352a9415808935423", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e97985845725e41aafae473c8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec605000000ee64af416c29f65e47110b81f6b4da06db5e1aad1f627a", 0x2, 0x3}, 0x50)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0xfe, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

5.579178287s ago: executing program 2 (id=3655):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003fffffe0000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

5.4323633s ago: executing program 3 (id=3656):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800", 0x1e}], 0x1}, 0x20000004)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x2, 0x4, 0x4, 0x3}}, 0x80, 0x0, 0x13}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900112000ef029dd2b97576b11d210a"], 0x33fe0)

5.200767046s ago: executing program 4 (id=3657):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb1, 0xe0, 0x72, 0xb, 0x0, 0x80000000009, 0x5ce10, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_bp={&(0x7f0000000500), 0x4}, 0x104708, 0x8, 0x2, 0x8, 0x6, 0x6, 0xdb7d, 0x0, 0x4, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000002900000034"], 0x10}, 0x40000)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB="07a9d501800000000000001c0000000000000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000000000000000000f00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f00000001c0), 0x0}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

5.087896198s ago: executing program 2 (id=3658):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

5.083163668s ago: executing program 1 (id=3659):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x10043)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e300250002", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000610583000000000085000000270000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0x4)
recvmsg(r6, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close(r8)

4.981060171s ago: executing program 3 (id=3660):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)

4.948990652s ago: executing program 0 (id=3661):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bcfffff400000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x50, 0x0, &(0x7f0000000200)="8e58c4ba9890ca51bce05ada15d016b80e02b9bb186473eb9b9db74abe3ce07ecfc62824d02b1523996a181a7561895aa93ab9cfd6160a3f49d2ac82f71f3fe39c2bfd00be4ba8236e8c03b85336ecf8", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf}, 0x50)

4.856868804s ago: executing program 2 (id=3662):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x2e, 0x0, 0x108)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x6a)

4.759904056s ago: executing program 0 (id=3663):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

4.632617879s ago: executing program 3 (id=3664):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x6}, 0x10e002, 0xf419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x20}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xc94b)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000d010000000000000000000085000000050000001811000041c77b1c69d06dcb48bca0fc4b573da5c825e042f7e8f4118aa7c4543e3fae5136362b4fdd29bfcf56c0812e8ff886b5756bb59a8b39d825766994964ad811d57df5a38008add4", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x7}}, 0x0, 0x3, 0xffffffffffffffff, 0x3)

4.408621154s ago: executing program 4 (id=3665):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
syz_clone(0x48360800, 0x0, 0xffffff62, 0x0, 0x0, 0x0)

4.407577785s ago: executing program 0 (id=3666):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)
write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r6, r5})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

4.18574444s ago: executing program 1 (id=3667):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.18483696s ago: executing program 3 (id=3668):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10000, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x494400, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, 0x0, 0x20040040)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r7, 0x3, 0x1}, 0x50)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032f00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

4.012924584s ago: executing program 4 (id=3669):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x1, 0x1, 0x6, 0x0, 0x1, 0x10, 0xfffffffffffffff0}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1f00}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xffffffffffffffbf, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x35}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
ioctl$SIOCSIFHWADDR(r0, 0x894a, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})

1.091667504s ago: executing program 2 (id=3670):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (fail_nth: 8)

1.086370054s ago: executing program 0 (id=3671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000200850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvlan1\x00', 0x2})
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f0000000000), 0x4)

1.020940075s ago: executing program 4 (id=3672):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1800a5dc9e4764fb77ad000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x18, 0x4803e}, 0x8000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="359ccab1fee03aaf4472ee1a524ce6f840fea878b9f2e634d8619945f73c186f56445bf94b2910cf7ed1b1653bbbd97ebebf687cdf33986e211da1c478e8d14ef441e510d968994f1417d8efb71a02b11436c95aca2471bba62b426651307990fdae277354a23954d398bf3aecf4e102f5e45d119c5e009ad35dc7d183209e7921f2ace5ca44a92eeea5c9076ed34c71ffc3f8c3f31141ad6609f9278b0860f028201a37499713", 0xa7}, {&(0x7f0000000240)="369a8623b4", 0x5}], 0x2, 0x0, 0x0, 0x20040001}, 0x4000)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r7, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000c00), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=r8, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640)=r8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.020326466s ago: executing program 1 (id=3673):
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x421, 0x2, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)=0x14b)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r1 = socket$kcm(0x2, 0x2, 0x106) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x6, 0x0, 0x0, 0x0, 0x2004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfff9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) (async, rerun: 32)
socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[], 0x18}, 0x41) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) (async, rerun: 64)
r4 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95f24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

858.843089ms ago: executing program 1 (id=3674):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
socket$kcm(0x23, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
socketpair(0x3, 0x1, 0x1, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080))
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x7ffffffff000)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x62e, 0xe}, 0x0, 0x5, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x39, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x3, &(0x7f0000000180)=[{0xb, 0x7, 0x6, 0x1}, {0x1, 0x40, 0x5, 0x8}, {0x9, 0xd, 0xe, 0xf167}]})
r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r5})

506.495557ms ago: executing program 3 (id=3675):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x1}, 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0xf0, 0x0, 0x1, 0x4}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r0, 0x0, 0x1, 0x2}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4045)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e29, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x1, 0x7, 0x9, 0x8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x60880, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x100080, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000900), 0x37db, r5}, 0x38)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000003c53123b00000018690000010000000000000001000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)

348.799511ms ago: executing program 2 (id=3676):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

277.833843ms ago: executing program 1 (id=3677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'dvmrp0\x00', 0x102})
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

248.711554ms ago: executing program 0 (id=3678):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf250c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x2006f8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r4)
socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5})
ioctl$TUNGETVNETLE(r4, 0x8955, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000000c0)=r5, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000200213000000000000010000100000000084428174e763a1bee65c3cc9105dc8d9ce7daa6812", @ANYRES32=r6, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000300"/28], 0x50)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b02d25a806f8c6394f90824fc60640004002b000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x2, 0x3, 0x3, 0x7, 0x9, 0xffffffffffffffff, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)

140.649736ms ago: executing program 3 (id=3679):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x6}, 0x10e002, 0xf419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x20}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000980)=ANY=[@ANYBLOB="18000013000000000000000000100000850004040f00000018010000646c6c2400000000000000007b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060008044aa3285bfea91a210ba7f8000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000d010000000000000000000085000000050000001811000041c77b1c69d06dcb48bca0fc4b573da5c825e042f7e8f4118aa7c4543e3fae5136362b4fdd29bfcf56c0812e8ff886b5756bb59a8b39d825766994964ad811d57df5a38008add4", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x7}}, 0x0, 0x3, 0xffffffffffffffff, 0x3)

95.319188ms ago: executing program 2 (id=3680):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x30802, 0x0)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000380))
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x28)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))

0s ago: executing program 1 (id=3681):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x2e, 0x0, 0x108)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000022000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x6a)

kernel console output (not intermixed with test programs):

92.321704][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  492.391755][T12987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  492.433294][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  492.458276][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  492.493954][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  492.541625][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  494.004718][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  494.028085][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  494.081744][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.176447][T13236] netlink: 'syz.3.3053': attribute type 7 has an invalid length.
[  494.309932][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  494.357616][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  494.382386][T12987] device veth0_vlan entered promiscuous mode
[  494.426814][T13218] netlink: 'syz.2.3059': attribute type 7 has an invalid length.
[  494.439121][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  494.466165][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  494.497474][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  494.529781][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  494.555958][T13218] netlink: 'syz.2.3059': attribute type 10 has an invalid length.
[  494.624859][T12987] device veth1_vlan entered promiscuous mode
[  494.793794][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  494.809864][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  494.849920][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  494.875102][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  494.966015][T12987] device veth0_macvtap entered promiscuous mode
[  494.995114][T13260] netlink: 'syz.2.3058': attribute type 7 has an invalid length.
[  495.032639][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  495.062846][T13263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3060'.
[  495.117216][T12987] device veth1_macvtap entered promiscuous mode
[  495.202464][T12987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.259560][T12987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.284623][T12987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.323506][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  495.336941][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  495.381576][T12987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.406495][T12987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.445736][T12987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.492690][T12987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.513340][T12987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.544313][T12987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.581497][T12987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.611970][T13280] netlink: 'syz.4.3066': attribute type 7 has an invalid length.
[  495.620213][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  495.641344][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  496.109309][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.117913][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.182350][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  496.231452][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.259049][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.266675][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  496.522801][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  496.834135][T13313] netlink: 'syz.3.3071': attribute type 7 has an invalid length.
[  496.927350][T13328] FAULT_INJECTION: forcing a failure.
[  496.927350][T13328] name failslab, interval 1, probability 0, space 0, times 0
[  496.986898][T13328] CPU: 1 PID: 13328 Comm: syz.1.3075 Not tainted syzkaller #0
[  496.994448][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  497.004680][T13328] Call Trace:
[  497.007987][T13328]  <TASK>
[  497.010945][T13328]  dump_stack_lvl+0x188/0x24e
[  497.015660][T13328]  ? trace_event_raw_event_lock+0x230/0x230
[  497.021592][T13328]  ? show_regs_print_info+0x12/0x12
[  497.026882][T13328]  ? load_image+0x410/0x410
[  497.031428][T13328]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  497.037734][T13328]  should_fail_ex+0x390/0x4c0
[  497.042466][T13328]  should_failslab+0x5/0x20
[  497.047009][T13328]  slab_pre_alloc_hook+0x59/0x300
[  497.052072][T13328]  ? current_time+0x19b/0x2c0
[  497.056803][T13328]  ? proc_thread_self_get_link+0xf8/0x190
[  497.062576][T13328]  __kmem_cache_alloc_node+0x4f/0x270
[  497.067989][T13328]  ? proc_thread_self_get_link+0xf8/0x190
[  497.073753][T13328]  kmalloc_trace+0x26/0xe0
[  497.078215][T13328]  proc_thread_self_get_link+0xf8/0x190
[  497.084158][T13328]  ? proc_setup_thread_self+0x2d0/0x2d0
[  497.089753][T13328]  pick_link+0x6ed/0xe20
[  497.094045][T13328]  step_into+0xc14/0xee0
[  497.098341][T13328]  ? set_root+0x3a0/0x3a0
[  497.102717][T13328]  ? lookup_fast+0x14a/0x4c0
[  497.107343][T13328]  ? security_inode_permission+0xac/0xf0
[  497.113024][T13328]  link_path_walk+0x744/0xea0
[  497.117783][T13328]  ? handle_lookup_down+0x130/0x130
[  497.123057][T13328]  path_openat+0x285/0x2f10
[  497.127665][T13328]  ? do_filp_open+0x420/0x420
[  497.132396][T13328]  ? perf_trace_lock+0x301/0x390
[  497.137402][T13328]  do_filp_open+0x1ee/0x420
[  497.141962][T13328]  ? vfs_tmpfile+0x470/0x470
[  497.146654][T13328]  ? _raw_spin_unlock+0x24/0x40
[  497.151554][T13328]  ? alloc_fd+0x590/0x640
[  497.155941][T13328]  do_sys_openat2+0x14b/0x4f0
[  497.160665][T13328]  ? ct_nmi_exit+0x145/0x1c0
[  497.165298][T13328]  ? do_sys_open+0xe0/0xe0
[  497.169750][T13328]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  497.175778][T13328]  ? srcu_init_notifier_head+0x90/0x90
[  497.181461][T13328]  ? lock_chain_count+0x20/0x20
[  497.186372][T13328]  __x64_sys_openat+0x135/0x160
[  497.191286][T13328]  do_syscall_64+0x4c/0xa0
[  497.195752][T13328]  ? clear_bhb_loop+0x60/0xb0
[  497.200478][T13328]  ? clear_bhb_loop+0x60/0xb0
[  497.205296][T13328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.211228][T13328] RIP: 0033:0x7f6efdf5e90e
[  497.215696][T13328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  497.235387][T13328] RSP: 002b:00007f6efee36ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  497.243855][T13328] RAX: ffffffffffffffda RBX: 00007f6efee376c0 RCX: 00007f6efdf5e90e
[  497.251876][T13328] RDX: 0000000000000000 RSI: 00007f6efee36f90 RDI: ffffffffffffff9c
[  497.259889][T13328] RBP: 00007f6efee37090 R08: 0000000000000000 R09: 0000000000000000
[  497.267902][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  497.275916][T13328] R13: 00007f6efe226038 R14: 00007f6efe225fa0 R15: 00007ffe41b86bb8
[  497.283967][T13328]  </TASK>
[  497.322941][T13318] netlink: 'syz.3.3071': attribute type 10 has an invalid length.
[  497.333423][T13318] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  497.517156][T10152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.608257][T13336] netlink: 'syz.2.3078': attribute type 7 has an invalid length.
[  497.692422][T10152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.704736][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  497.715519][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  497.729499][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  497.740160][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.747935][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  497.755399][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  497.904010][T10152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.344047][T10152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.069344][T10152] tipc: Left network mode
[  499.097935][T13338] chnl_net:caif_netlink_parms(): no params data found
[  499.502060][T13376] netlink: 'syz.2.3090': attribute type 7 has an invalid length.
[  499.703219][T13386] netlink: 'syz.1.3092': attribute type 7 has an invalid length.
[  499.849458][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[  500.167865][T13338] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.192320][T13338] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.203072][T13338] device bridge_slave_0 entered promiscuous mode
[  500.296757][T13338] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.318683][T13338] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.342520][T13338] device bridge_slave_1 entered promiscuous mode
[  500.474022][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.561524][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.584515][T13416] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3098'.
[  500.773954][T13338] team0: Port device team_slave_0 added
[  500.806200][T13338] team0: Port device team_slave_1 added
[  500.883980][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.908485][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.952258][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.967534][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.974888][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.061434][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.112717][T13426] netlink: 'syz.3.3102': attribute type 21 has an invalid length.
[  501.138592][T13426] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3102'.
[  501.313791][T13338] device hsr_slave_0 entered promiscuous mode
[  501.338321][T13338] device hsr_slave_1 entered promiscuous mode
[  501.380576][T13338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.388257][T13338] Cannot create hsr debugfs directory
[  501.451224][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.457860][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.929168][   T48] Bluetooth: hci1: command 0x041b tx timeout
[  504.009415][   T48] Bluetooth: hci1: command 0x040f tx timeout
[  504.794250][T13484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3114'.
[  505.645481][T13492] netlink: 'syz.0.3116': attribute type 21 has an invalid length.
[  505.659140][T13492] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3116'.
[  506.088976][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[  506.273833][T10152] device hsr_slave_0 left promiscuous mode
[  506.282319][T10152] device bridge_slave_0 left promiscuous mode
[  506.288809][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.362026][T10152] device veth0_macvtap left promiscuous mode
[  506.374199][T10152] device veth1_vlan left promiscuous mode
[  507.157368][T10152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.203755][T10152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.209865][ T4338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  507.487934][T10152] bond0 (unregistering): Released all slaves
[  507.619186][T13531] netlink: 'syz.2.3127': attribute type 10 has an invalid length.
[  507.905614][T13534] netlink: 'syz.3.3128': attribute type 3 has an invalid length.
[  507.928300][T13539] netlink: 'syz.2.3130': attribute type 4 has an invalid length.
[  507.942622][T13534] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3128'.
[  507.953332][T13539] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.3130'.
[  507.988205][T13538] netlink: 'syz.2.3130': attribute type 4 has an invalid length.
[  508.049725][T13538] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.3130'.
[  508.183242][T13338] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  508.253267][T13338] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  508.321717][T13338] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  508.397707][T13338] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  511.996495][T13338] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.105665][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  512.115082][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  512.144561][T13338] 8021q: adding VLAN 0 to HW filter on device team0
[  512.204254][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  512.225335][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  512.256131][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.263359][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.293046][T13626] netlink: 'syz.0.3140': attribute type 21 has an invalid length.
[  512.309615][T13626] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3140'.
[  512.423513][T13634] netlink: 'syz.1.3141': attribute type 21 has an invalid length.
[  512.449691][T13634] netlink: 'syz.1.3141': attribute type 5 has an invalid length.
[  512.482692][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  512.539895][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  512.580297][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  512.631537][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.638685][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.687549][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  512.757414][T13649] netlink: 'syz.2.3145': attribute type 3 has an invalid length.
[  512.826218][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  512.869120][T13649] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3145'.
[  512.962925][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  512.995912][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  513.124357][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  513.177756][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  513.223360][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  513.415005][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  513.442785][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  514.495068][T13677] netlink: 'syz.0.3151': attribute type 7 has an invalid length.
[  514.525065][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  514.538230][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  514.552100][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  514.618148][T13684] netlink: 'syz.3.3154': attribute type 21 has an invalid length.
[  514.639763][T13684] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3154'.
[  515.272351][T10152] device ip6gretap0 left promiscuous mode
[  515.298730][T10152] bridge0: port 3(ip6gretap0) entered disabled state
[  515.711166][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  515.740410][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  515.772813][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.861625][T13725] netlink: 'syz.1.3163': attribute type 3 has an invalid length.
[  515.878076][T13725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3163'.
[  516.518194][T13741] netlink: 'syz.2.3167': attribute type 21 has an invalid length.
[  516.556777][T13741] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3167'.
[  517.266604][T10152] team0: Port device wlan1 removed
[  517.513112][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  517.534341][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  517.774756][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  517.814444][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  517.832535][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  517.845869][T13777] netlink: 'syz.3.3175': attribute type 3 has an invalid length.
[  517.849904][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  517.856954][T13777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3175'.
[  517.886026][T13338] device veth0_vlan entered promiscuous mode
[  518.018577][T10152] device bridge_slave_1 left promiscuous mode
[  518.061986][T10152] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.083820][T10152] device bridge_slave_0 left promiscuous mode
[  518.102392][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.145632][T10152] device veth0_macvtap left promiscuous mode
[  518.155468][T10152] device veth1_vlan left promiscuous mode
[  518.163176][T10152] device veth0_vlan left promiscuous mode
[  518.319623][T10152] team0 (unregistering): Port device geneve1 removed
[  518.741810][T10152] team0 (unregistering): Port device team_slave_1 removed
[  518.785822][T10152] team0 (unregistering): Port device team_slave_0 removed
[  519.234592][T13338] device veth1_vlan entered promiscuous mode
[  519.378379][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  519.398821][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  519.437953][T13338] device veth0_macvtap entered promiscuous mode
[  519.488102][T13338] device veth1_macvtap entered promiscuous mode
[  519.494843][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3178'.
[  519.547828][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3178'.
[  519.559322][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.573859][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.585054][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.597290][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.610355][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.618338][T13794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3178'.
[  519.628609][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  519.637617][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  519.651639][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  519.667918][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  519.699597][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.717161][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.727791][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.742422][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.754917][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.766927][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3178'.
[  519.794655][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  519.804654][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  519.828299][T13338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.841225][T13338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.854542][T13338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.865008][T13338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.882964][T13798] netlink: 'syz.3.3179': attribute type 10 has an invalid length.
[  520.085601][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.110519][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.155936][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  520.205168][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.233813][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.270014][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.108708][T13826] netlink: 'syz.1.3186': attribute type 3 has an invalid length.
[  521.152993][T13826] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3186'.
[  521.236356][T13828] netlink: 'syz.0.3187': attribute type 21 has an invalid length.
[  521.294769][T13828] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3187'.
[  521.658009][T13842] netlink: 'syz.4.3190': attribute type 21 has an invalid length.
[  521.689232][T13842] netlink: 'syz.4.3190': attribute type 7 has an invalid length.
[  521.836575][T13846] netlink: 'syz.0.3191': attribute type 10 has an invalid length.
[  521.863052][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  521.877440][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  521.887219][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  521.887443][T13846] device veth1_macvtap left promiscuous mode
[  521.908114][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  521.927459][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  521.937541][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  522.151355][T10152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.253554][T10152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.544387][T10152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.382851][T13848] chnl_net:caif_netlink_parms(): no params data found
[  523.608636][T10152] device 0 left promiscuous mode
[  523.700883][T13848] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.729590][T13848] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.737873][T13848] device bridge_slave_0 entered promiscuous mode
[  523.776147][T13902] netlink: 'syz.2.3204': attribute type 10 has an invalid length.
[  523.947485][T13848] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.969592][T13848] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.977770][T13848] device bridge_slave_1 entered promiscuous mode
[  524.009421][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[  524.116449][T13848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.179473][T13911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3206'.
[  524.284467][T13848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.023867][T13848] team0: Port device team_slave_0 added
[  525.051428][T13848] team0: Port device team_slave_1 added
[  525.159764][T13848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.166786][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.252538][T13934] netlink: 'syz.0.3211': attribute type 3 has an invalid length.
[  525.271734][T13934] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3211'.
[  525.305058][T13848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.334032][T13848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.351910][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.439233][T13848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.089285][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[  526.431184][T13848] device hsr_slave_0 entered promiscuous mode
[  526.450865][T13848] device hsr_slave_1 entered promiscuous mode
[  528.169319][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[  528.294737][T13974] netlink: 'syz.4.3219': attribute type 13 has an invalid length.
[  529.555503][T14004] netlink: 'syz.4.3224': attribute type 2 has an invalid length.
[  529.568460][T14004] netlink: 135672 bytes leftover after parsing attributes in process `syz.4.3224'.
[  530.256137][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[  530.303215][T14024] FAULT_INJECTION: forcing a failure.
[  530.303215][T14024] name failslab, interval 1, probability 0, space 0, times 0
[  530.316208][T14024] CPU: 1 PID: 14024 Comm: syz.4.3229 Not tainted syzkaller #0
[  530.323756][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  530.333854][T14024] Call Trace:
[  530.337167][T14024]  <TASK>
[  530.340139][T14024]  dump_stack_lvl+0x188/0x24e
[  530.344892][T14024]  ? trace_event_raw_event_lock+0x230/0x230
[  530.350827][T14024]  ? show_regs_print_info+0x12/0x12
[  530.356095][T14024]  ? load_image+0x410/0x410
[  530.360633][T14024]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  530.366931][T14024]  should_fail_ex+0x390/0x4c0
[  530.371640][T14024]  should_failslab+0x5/0x20
[  530.376153][T14024]  slab_pre_alloc_hook+0x59/0x300
[  530.381357][T14024]  ? current_time+0x19b/0x2c0
[  530.386051][T14024]  ? proc_thread_self_get_link+0xf8/0x190
[  530.391790][T14024]  __kmem_cache_alloc_node+0x4f/0x270
[  530.397184][T14024]  ? proc_thread_self_get_link+0xf8/0x190
[  530.402920][T14024]  kmalloc_trace+0x26/0xe0
[  530.407362][T14024]  proc_thread_self_get_link+0xf8/0x190
[  530.412931][T14024]  ? proc_setup_thread_self+0x2d0/0x2d0
[  530.418490][T14024]  pick_link+0x6ed/0xe20
[  530.422758][T14024]  step_into+0xc14/0xee0
[  530.427036][T14024]  ? set_root+0x3a0/0x3a0
[  530.431382][T14024]  ? lookup_fast+0x14a/0x4c0
[  530.435984][T14024]  ? security_inode_permission+0xac/0xf0
[  530.441649][T14024]  link_path_walk+0x744/0xea0
[  530.446362][T14024]  ? handle_lookup_down+0x130/0x130
[  530.451621][T14024]  path_openat+0x285/0x2f10
[  530.456190][T14024]  ? do_filp_open+0x420/0x420
[  530.460887][T14024]  ? perf_trace_lock+0x301/0x390
[  530.465863][T14024]  do_filp_open+0x1ee/0x420
[  530.470382][T14024]  ? vfs_tmpfile+0x470/0x470
[  530.475019][T14024]  ? _raw_spin_unlock+0x24/0x40
[  530.479880][T14024]  ? alloc_fd+0x590/0x640
[  530.484233][T14024]  do_sys_openat2+0x14b/0x4f0
[  530.488926][T14024]  ? do_sys_open+0xe0/0xe0
[  530.493355][T14024]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  530.499344][T14024]  ? srcu_init_notifier_head+0x90/0x90
[  530.504817][T14024]  ? lock_chain_count+0x20/0x20
[  530.509683][T14024]  ? exit_to_user_mode_loop+0xdc/0x110
[  530.515244][T14024]  __x64_sys_openat+0x135/0x160
[  530.520123][T14024]  do_syscall_64+0x4c/0xa0
[  530.524551][T14024]  ? clear_bhb_loop+0x60/0xb0
[  530.529236][T14024]  ? clear_bhb_loop+0x60/0xb0
[  530.533929][T14024]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.539837][T14024] RIP: 0033:0x7f463a15e90e
[  530.544270][T14024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  530.563905][T14024] RSP: 002b:00007f463b055ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  530.572356][T14024] RAX: ffffffffffffffda RBX: 00007f463b0566c0 RCX: 00007f463a15e90e
[  530.580355][T14024] RDX: 0000000000000000 RSI: 00007f463b055f90 RDI: ffffffffffffff9c
[  530.588339][T14024] RBP: 00007f463b056090 R08: 0000000000000000 R09: 0000000000000000
[  530.596313][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  530.604307][T14024] R13: 00007f463a426038 R14: 00007f463a425fa0 R15: 00007ffd8689b0e8
[  530.612341][T14024]  </TASK>
[  530.793566][T13848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  530.898936][T13848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  531.081825][T14033] netlink: 'syz.4.3233': attribute type 3 has an invalid length.
[  531.099044][T14033] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3233'.
[  531.305974][T13848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  531.341093][T13848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  531.468644][T10152] device bridge_slave_0 left promiscuous mode
[  531.510999][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.606062][T10152] device veth0_macvtap left promiscuous mode
[  531.626450][T10152] device veth1_vlan left promiscuous mode
[  532.107181][T10152] team0 (unregistering): Port device geneve1 removed
[  532.695658][T10152] team0 (unregistering): Port device team_slave_1 removed
[  532.746934][T10152] team0 (unregistering): Port device team_slave_0 removed
[  533.133387][T10152] team0 (unregistering): Port device bridge0 removed
[  533.253642][T14042] FAULT_INJECTION: forcing a failure.
[  533.253642][T14042] name failslab, interval 1, probability 0, space 0, times 0
[  533.268121][T14042] CPU: 0 PID: 14042 Comm: syz.2.3235 Not tainted syzkaller #0
[  533.275635][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  533.285739][T14042] Call Trace:
[  533.289045][T14042]  <TASK>
[  533.292003][T14042]  dump_stack_lvl+0x188/0x24e
[  533.296722][T14042]  ? show_regs_print_info+0x12/0x12
[  533.301957][T14042]  ? load_image+0x410/0x410
[  533.306497][T14042]  ? __might_sleep+0xd0/0xd0
[  533.311123][T14042]  ? __lock_acquire+0x7c40/0x7c40
[  533.316196][T14042]  should_fail_ex+0x390/0x4c0
[  533.320918][T14042]  should_failslab+0x5/0x20
[  533.325451][T14042]  slab_pre_alloc_hook+0x59/0x300
[  533.330511][T14042]  ? lock_chain_count+0x20/0x20
[  533.335400][T14042]  ? rtnl_newlink+0x10f/0x1f90
[  533.340189][T14042]  __kmem_cache_alloc_node+0x4f/0x270
[  533.345577][T14042]  ? finish_task_switch+0x262/0x8e0
[  533.350882][T14042]  ? rtnl_newlink+0x10f/0x1f90
[  533.355650][T14042]  kmalloc_trace+0x26/0xe0
[  533.360098][T14042]  rtnl_newlink+0x10f/0x1f90
[  533.364693][T14042]  ? __mutex_lock+0x7ec/0xae0
[  533.369377][T14042]  ? __lock_acquire+0x7c40/0x7c40
[  533.374424][T14042]  ? do_raw_spin_lock+0x128/0x2f0
[  533.379444][T14042]  ? rtnl_setlink+0x510/0x510
[  533.384115][T14042]  ? __rwlock_init+0x140/0x140
[  533.388886][T14042]  ? do_raw_spin_unlock+0x11d/0x230
[  533.394093][T14042]  ? __mutex_lock+0x7f6/0xae0
[  533.398775][T14042]  ? __mutex_lock+0x3ba/0xae0
[  533.403459][T14042]  ? rtnetlink_rcv_msg+0x80d/0xfb0
[  533.408569][T14042]  ? mutex_lock_nested+0x10/0x10
[  533.413510][T14042]  ? rtnl_setlink+0x510/0x510
[  533.418182][T14042]  rtnetlink_rcv_msg+0x863/0xfb0
[  533.423114][T14042]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  533.428213][T14042]  ? rtnetlink_bind+0x80/0x80
[  533.432879][T14042]  ? __local_bh_enable_ip+0x13e/0x1c0
[  533.438242][T14042]  ? _local_bh_enable+0xa0/0xa0
[  533.443121][T14042]  ? __dev_queue_xmit+0x281/0x3810
[  533.448224][T14042]  ? __dev_queue_xmit+0x281/0x3810
[  533.453350][T14042]  ? __dev_queue_xmit+0x1d84/0x3810
[  533.458540][T14042]  ? lockdep_hardirqs_on+0x94/0x140
[  533.463731][T14042]  ? __dev_queue_xmit+0x281/0x3810
[  533.468845][T14042]  ? perf_trace_lock+0xf8/0x390
[  533.473740][T14042]  ? trace_event_raw_event_lock+0x230/0x230
[  533.479631][T14042]  ? __copy_skb_header+0x3ba/0x4f0
[  533.484742][T14042]  ? __skb_clone+0x446/0x6c0
[  533.489328][T14042]  netlink_rcv_skb+0x1ef/0x440
[  533.494090][T14042]  ? rtnetlink_bind+0x80/0x80
[  533.498757][T14042]  ? netlink_ack+0x1160/0x1160
[  533.503548][T14042]  ? netlink_deliver_tap+0x2e/0x1b0
[  533.508774][T14042]  netlink_unicast+0x7ad/0x920
[  533.513555][T14042]  netlink_sendmsg+0x8ad/0xbd0
[  533.518329][T14042]  ? aa_sock_msg_perm+0x94/0x150
[  533.523295][T14042]  ? netlink_getsockopt+0x550/0x550
[  533.528488][T14042]  ? apparmor_socket_sendmsg+0x8a/0x330
[  533.534071][T14042]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  533.539348][T14042]  ? security_socket_sendmsg+0x7c/0xa0
[  533.544821][T14042]  ? netlink_getsockopt+0x550/0x550
[  533.550017][T14042]  ____sys_sendmsg+0x5ed/0x9a0
[  533.554807][T14042]  ? __sys_sendmsg_sock+0x30/0x30
[  533.559846][T14042]  ? __import_iovec+0x306/0x510
[  533.564698][T14042]  ? import_iovec+0x6f/0xa0
[  533.569207][T14042]  ___sys_sendmsg+0x2a2/0x360
[  533.573905][T14042]  ? migrate_enable+0x148/0x220
[  533.578770][T14042]  ? __sys_sendmsg+0x2a0/0x2a0
[  533.583576][T14042]  __se_sys_sendmsg+0x1c3/0x2b0
[  533.588426][T14042]  ? __x64_sys_sendmsg+0x80/0x80
[  533.593363][T14042]  ? syscall_enter_from_user_mode+0x2a/0x80
[  533.599251][T14042]  do_syscall_64+0x4c/0xa0
[  533.603668][T14042]  ? clear_bhb_loop+0x60/0xb0
[  533.608337][T14042]  ? clear_bhb_loop+0x60/0xb0
[  533.613023][T14042]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.618955][T14042] RIP: 0033:0x7f7062f9e0d9
[  533.623378][T14042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.642980][T14042] RSP: 002b:00007f7063f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.651388][T14042] RAX: ffffffffffffffda RBX: 00007f7063225fa0 RCX: 00007f7062f9e0d9
[  533.659360][T14042] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000c
[  533.667366][T14042] RBP: 00007f7063f39090 R08: 0000000000000000 R09: 0000000000000000
[  533.675339][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.683303][T14042] R13: 00007f7063226038 R14: 00007f7063225fa0 R15: 00007ffd1a4ff998
[  533.691307][T14042]  </TASK>
[  534.043594][T13848] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.125394][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  534.155064][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  534.196873][T13848] 8021q: adding VLAN 0 to HW filter on device team0
[  534.237312][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  534.265441][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  534.306131][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.313370][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  534.381730][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  534.404416][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  534.438445][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  534.457144][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.464396][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.507629][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  534.516803][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  534.582047][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  534.601578][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  534.622136][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  534.647211][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  534.670324][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  534.695459][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  534.706553][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  535.242247][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  535.252182][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  535.288261][T13848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  535.571089][T14114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3256'.
[  535.589694][T14114] FAULT_INJECTION: forcing a failure.
[  535.589694][T14114] name failslab, interval 1, probability 0, space 0, times 0
[  535.605165][T14114] CPU: 1 PID: 14114 Comm: syz.1.3256 Not tainted syzkaller #0
[  535.612680][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  535.622758][T14114] Call Trace:
[  535.626060][T14114]  <TASK>
[  535.629013][T14114]  dump_stack_lvl+0x188/0x24e
[  535.633734][T14114]  ? show_regs_print_info+0x12/0x12
[  535.638970][T14114]  ? load_image+0x410/0x410
[  535.643512][T14114]  ? __might_sleep+0xd0/0xd0
[  535.648134][T14114]  ? __lock_acquire+0x7c40/0x7c40
[  535.653208][T14114]  should_fail_ex+0x390/0x4c0
[  535.657931][T14114]  should_failslab+0x5/0x20
[  535.662466][T14114]  slab_pre_alloc_hook+0x59/0x300
[  535.667526][T14114]  ? mutex_lock_nested+0x10/0x10
[  535.672496][T14114]  ? in6_dev_get+0x363/0x410
[  535.677165][T14114]  ? __ipv6_dev_mc_inc+0x47b/0xb20
[  535.682315][T14114]  __kmem_cache_alloc_node+0x4f/0x270
[  535.687819][T14114]  ? __ipv6_dev_mc_inc+0x47b/0xb20
[  535.692966][T14114]  kmalloc_trace+0x26/0xe0
[  535.697433][T14114]  __ipv6_dev_mc_inc+0x47b/0xb20
[  535.702426][T14114]  pndisc_constructor+0x16a/0x230
[  535.707589][T14114]  ? __se_sys_sendmsg+0x1c3/0x2b0
[  535.712670][T14114]  ? do_syscall_64+0x4c/0xa0
[  535.717306][T14114]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.723425][T14114]  ? ndisc_constructor+0x8b0/0x8b0
[  535.728579][T14114]  ? pneigh_lookup+0x223/0x4f0
[  535.733390][T14114]  ? rcu_is_watching+0x11/0xa0
[  535.734486][T14113] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3255'.
[  535.738176][T14114]  ? pneigh_lookup+0x25b/0x4f0
[  535.738265][T14114]  pneigh_lookup+0x32e/0x4f0
[  535.756746][T14114]  neigh_add+0x615/0xdf0
[  535.761029][T14114]  ? rcu_is_watching+0x11/0xa0
[  535.765839][T14114]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  535.772145][T14114]  ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0
[  535.778420][T14114]  rtnetlink_rcv_msg+0x863/0xfb0
[  535.783395][T14114]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  535.788634][T14114]  ? rtnetlink_bind+0x80/0x80
[  535.793349][T14114]  ? __local_bh_enable_ip+0x136/0x1c0
[  535.798766][T14114]  ? lockdep_hardirqs_on+0x94/0x140
[  535.803998][T14114]  ? __local_bh_enable_ip+0x136/0x1c0
[  535.809412][T14114]  ? _local_bh_enable+0xa0/0xa0
[  535.814301][T14114]  ? __dev_queue_xmit+0x281/0x3810
[  535.819448][T14114]  ? __dev_queue_xmit+0x281/0x3810
[  535.824605][T14114]  ? __dev_queue_xmit+0x1d84/0x3810
[  535.829851][T14114]  ? __dev_queue_xmit+0x281/0x3810
[  535.835017][T14114]  ? ref_tracker_free+0x682/0x830
[  535.840087][T14114]  ? refcount_inc+0x70/0x70
[  535.844629][T14114]  ? memcpy+0x3c/0x60
[  535.848644][T14114]  ? __copy_skb_header+0x3ba/0x4f0
[  535.853796][T14114]  ? __skb_clone+0x446/0x6c0
[  535.858441][T14114]  netlink_rcv_skb+0x1ef/0x440
[  535.863245][T14114]  ? rtnetlink_bind+0x80/0x80
[  535.867956][T14114]  ? netlink_ack+0x1160/0x1160
[  535.872768][T14114]  ? netlink_deliver_tap+0x2e/0x1b0
[  535.877999][T14114]  netlink_unicast+0x7ad/0x920
[  535.882832][T14114]  netlink_sendmsg+0x8ad/0xbd0
[  535.887629][T14114]  ? netlink_getsockopt+0x550/0x550
[  535.892831][T14114]  ? apparmor_socket_sendmsg+0x8a/0x330
[  535.898386][T14114]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  535.903669][T14114]  ? security_socket_sendmsg+0x7c/0xa0
[  535.909127][T14114]  ? netlink_getsockopt+0x550/0x550
[  535.914322][T14114]  ____sys_sendmsg+0x5ed/0x9a0
[  535.919103][T14114]  ? __sys_sendmsg_sock+0x30/0x30
[  535.924125][T14114]  ? __import_iovec+0x306/0x510
[  535.928987][T14114]  ? import_iovec+0x6f/0xa0
[  535.933496][T14114]  ___sys_sendmsg+0x2a2/0x360
[  535.938183][T14114]  ? __sys_sendmsg+0x2a0/0x2a0
[  535.942965][T14114]  ? __lock_acquire+0x7c40/0x7c40
[  535.948011][T14114]  __se_sys_sendmsg+0x1c3/0x2b0
[  535.952865][T14114]  ? __x64_sys_sendmsg+0x80/0x80
[  535.957820][T14114]  ? lockdep_hardirqs_on+0x94/0x140
[  535.963018][T14114]  do_syscall_64+0x4c/0xa0
[  535.967437][T14114]  ? clear_bhb_loop+0x60/0xb0
[  535.972117][T14114]  ? clear_bhb_loop+0x60/0xb0
[  535.976800][T14114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.982692][T14114] RIP: 0033:0x7f6efdf9e0d9
[  535.987104][T14114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.006804][T14114] RSP: 002b:00007f6efee37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.015219][T14114] RAX: ffffffffffffffda RBX: 00007f6efe225fa0 RCX: 00007f6efdf9e0d9
[  536.023192][T14114] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  536.031160][T14114] RBP: 00007f6efee37090 R08: 0000000000000000 R09: 0000000000000000
[  536.039128][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.047100][T14114] R13: 00007f6efe226038 R14: 00007f6efe225fa0 R15: 00007ffe41b86bb8
[  536.055086][T14114]  </TASK>
[  536.325748][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  536.341882][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  536.375248][T14129] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3257'.
[  536.416881][T14129] bond0: (slave bond_slave_0): Releasing backup interface
[  536.447607][T14129] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  536.488238][T13848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.543487][T14139] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3260'.
[  536.569204][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  536.587340][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  536.634304][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  536.661805][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  536.702018][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  536.732950][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  536.756819][T13848] device veth0_vlan entered promiscuous mode
[  536.771541][T14139] netlink: 'syz.4.3260': attribute type 1 has an invalid length.
[  536.791224][T14139] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3260'.
[  536.863104][T13848] device veth1_vlan entered promiscuous mode
[  536.913454][T14148] netlink: 'syz.0.3263': attribute type 10 has an invalid length.
[  537.011636][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  537.029974][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  537.058820][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  537.092988][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  537.129500][T14150] netlink: 'syz.2.3264': attribute type 21 has an invalid length.
[  537.139668][T14150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3264'.
[  537.463283][T14167] netlink: 'syz.2.3269': attribute type 3 has an invalid length.
[  537.471555][T13848] device veth0_macvtap entered promiscuous mode
[  537.476836][T13848] device veth1_macvtap entered promiscuous mode
[  537.519910][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  537.539326][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  537.580052][T14167] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3269'.
[  537.664346][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.705064][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.736463][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.767902][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.796738][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.838982][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.889159][T14179] netlink: 'syz.0.3270': attribute type 3 has an invalid length.
[  537.895086][T13848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.897032][T14179] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3270'.
[  537.942996][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  537.972399][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  538.145979][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.213970][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.257063][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.298727][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.335087][T13848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.369494][T13848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.413015][T13848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.787144][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  538.828114][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  539.061015][T13848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.098998][T13848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.118176][T13848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.154807][T13848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.188443][T14201] netlink: 'syz.1.3274': attribute type 10 has an invalid length.
[  539.341043][T14201] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  539.649127][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.657355][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.719756][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  539.760768][T14223] netlink: 'syz.2.3280': attribute type 21 has an invalid length.
[  539.785359][T14223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3280'.
[  539.818747][T14222] netlink: 'syz.0.3279': attribute type 21 has an invalid length.
[  539.852286][T14222] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3279'.
[  539.928503][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.945173][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.996074][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  540.071002][T14229] netlink: zone id is out of range
[  540.120607][T14229] netlink: zone id is out of range
[  540.213789][T14229] netlink: zone id is out of range
[  540.279771][T14236] netlink: 'syz.3.3185': attribute type 7 has an invalid length.
[  540.318569][T14229] netlink: zone id is out of range
[  540.428929][T14229] netlink: zone id is out of range
[  540.434239][T14229] netlink: zone id is out of range
[  540.527631][T14229] netlink: zone id is out of range
[  540.582202][T14229] netlink: zone id is out of range
[  540.633218][T14229] netlink: zone id is out of range
[  540.686999][T14243] netlink: 'syz.0.3283': attribute type 3 has an invalid length.
[  540.799471][T14243] __nla_validate_parse: 4 callbacks suppressed
[  540.799509][T14243] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3283'.
[  540.941114][T14250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.972302][T14250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.995320][T14250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.039231][T14250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.693064][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  541.711486][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  541.720253][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  541.729635][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  541.737322][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  541.745100][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  543.362984][T14281] netlink: 'syz.3.3290': attribute type 3 has an invalid length.
[  543.389167][T14281] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3290'.
[  543.607047][T14284] netlink: 'syz.4.3292': attribute type 21 has an invalid length.
[  543.670503][T14284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3292'.
[  543.777959][ T4285] Bluetooth: hci2: command 0x0409 tx timeout
[  544.346794][T14262] chnl_net:caif_netlink_parms(): no params data found
[  544.587154][ T4338] device 0 left promiscuous mode
[  544.696936][ T4338] device 1 left promiscuous mode
[  544.978416][T14301] netlink: 'syz.4.3294': attribute type 21 has an invalid length.
[  545.038619][T14301] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3294'.
[  545.083625][T14262] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.107213][T14262] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.145925][T14262] device bridge_slave_0 entered promiscuous mode
[  545.166960][ T4338] device 2 left promiscuous mode
[  545.479193][T14310] netlink: 'syz.1.3296': attribute type 7 has an invalid length.
[  545.489019][T14262] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.503317][T14262] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.535302][T14262] device bridge_slave_1 entered promiscuous mode
[  545.597984][ T4338] device 3 left promiscuous mode
[  545.661109][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.735894][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.859397][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[  546.102376][T14262] team0: Port device team_slave_0 added
[  546.234333][T14262] team0: Port device team_slave_1 added
[  546.368213][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.397195][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.471775][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.601563][T14262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.608655][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.648261][T14262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.689534][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.697585][T14344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.722431][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.739554][T14344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.094389][T14262] device hsr_slave_0 entered promiscuous mode
[  547.109793][T14262] device hsr_slave_1 entered promiscuous mode
[  547.119887][T14262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  547.169296][T14262] Cannot create hsr debugfs directory
[  547.272396][T14357] netlink: 'syz.3.3306': attribute type 3 has an invalid length.
[  547.319277][T14357] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3306'.
[  547.938763][T14368] netlink: 'syz.4.3309': attribute type 10 has an invalid length.
[  547.947430][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[  547.982294][T14368] device veth1_macvtap left promiscuous mode
[  548.862033][T14379] netlink: 'syz.3.3311': attribute type 21 has an invalid length.
[  548.889398][T14379] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3311'.
[  549.145638][T14386] netlink: 'syz.1.3323': attribute type 10 has an invalid length.
[  549.174251][T14388] netlink: 'syz.0.3314': attribute type 21 has an invalid length.
[  549.203993][T14388] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3314'.
[  549.245530][T14388] netlink: 'syz.0.3314': attribute type 4 has an invalid length.
[  549.279255][T14388] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3314'.
[  549.522602][T14393] netlink: 'syz.3.3315': attribute type 10 has an invalid length.
[  549.605917][T14393] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  549.720148][ T4338] device hsr_slave_0 left promiscuous mode
[  549.742611][ T4338] device bridge_slave_0 left promiscuous mode
[  549.770010][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.891117][T14405] netlink: 'syz.1.3319': attribute type 3 has an invalid length.
[  549.912458][ T4338] device veth0_macvtap left promiscuous mode
[  549.939900][ T4338] device veth1_vlan left promiscuous mode
[  549.945948][ T4338] device veth0_vlan left promiscuous mode
[  549.954894][T14405] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3319'.
[  550.009337][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  550.287483][T14411] netlink: 'syz.3.3320': attribute type 3 has an invalid length.
[  550.299290][T14411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3320'.
[  550.772911][ T4338] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  550.894361][ T4338] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  551.212213][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.285146][ T4338] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  551.451169][ T4338] bond0 (unregistering): Released all slaves
[  551.553755][T14403] netlink: 'syz.0.3318': attribute type 7 has an invalid length.
[  551.584340][T14262] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  551.639071][T14262] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  551.665085][T14262] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  551.729996][T14262] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  551.863244][T14423] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3325'.
[  552.067903][T14262] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.117622][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  552.130674][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  552.168422][T14262] 8021q: adding VLAN 0 to HW filter on device team0
[  552.208966][T14428] netlink: 'syz.4.3326': attribute type 21 has an invalid length.
[  552.216981][T14428] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3326'.
[  552.289009][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  552.303532][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  552.319347][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.326557][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.364715][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  552.388791][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  552.425256][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  552.459375][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.466858][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.518007][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  552.591172][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  552.607529][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  552.635847][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  552.727359][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  552.746507][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  552.773570][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  552.798464][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  552.824519][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  552.851816][T14445] netlink: 'syz.1.3329': attribute type 10 has an invalid length.
[  553.404120][T14445] team0: Device nlmon0 is of different type
[  553.465379][T14262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.487824][T14262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  553.495930][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  553.505356][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  553.803259][T14459] team0: Port device geneve1 added
[  553.883837][T14466] validate_nla: 2 callbacks suppressed
[  553.883875][T14466] netlink: 'syz.3.3334': attribute type 3 has an invalid length.
[  553.980025][T14466] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3334'.
[  554.248711][T14475] netlink: 'syz.4.3336': attribute type 3 has an invalid length.
[  554.340727][T14475] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3336'.
[  554.698724][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.733332][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.785723][T14482] netlink: 'syz.0.3337': attribute type 21 has an invalid length.
[  554.828598][T14482] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3337'.
[  554.865594][T14262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.227787][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  555.265149][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  555.332595][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  555.381488][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  555.546382][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  555.559546][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  555.579768][T14262] device veth0_vlan entered promiscuous mode
[  555.595741][T14494] netlink: 'syz.0.3340': attribute type 21 has an invalid length.
[  555.615535][T14494] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3340'.
[  555.649345][T14504] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3341'.
[  555.680279][T14504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  555.753381][T14504] net_ratelimit: 18 callbacks suppressed
[  555.753401][T14504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.825384][T14262] device veth1_vlan entered promiscuous mode
[  555.838505][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  555.856578][T14510] netlink: 'syz.3.3343': attribute type 7 has an invalid length.
[  555.937218][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  555.949704][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  555.970825][T14262] device veth0_macvtap entered promiscuous mode
[  555.996743][T14262] device veth1_macvtap entered promiscuous mode
[  556.036650][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  556.051525][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.061732][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  556.072804][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.101248][T14262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.131005][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  556.150055][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  556.184221][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  556.216534][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  556.257218][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.271817][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.288699][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.310802][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.333011][T14262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.346999][T14526] netlink: 'syz.3.3348': attribute type 10 has an invalid length.
[  556.358291][T14526] device veth1_macvtap left promiscuous mode
[  556.437585][T14528] netlink: 'syz.4.3349': attribute type 11 has an invalid length.
[  556.446929][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  556.461898][T10151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  556.482362][T14262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.514732][T14262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.550368][T14262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.561977][T14536] netlink: 'syz.1.3351': attribute type 3 has an invalid length.
[  556.570197][T14262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.579201][T14536] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3351'.
[  559.163627][T14554] netlink: 'syz.4.3356': attribute type 21 has an invalid length.
[  559.174419][T14554] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3356'.
[  559.359219][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.367090][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.393273][T14560] netlink: 'syz.4.3357': attribute type 15 has an invalid length.
[  559.413534][T14560] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3357'.
[  559.432384][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  559.454704][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.467056][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.487547][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  559.516050][T14565] netlink: 'syz.1.3358': attribute type 7 has an invalid length.
[  560.112381][T14572] netlink: 'syz.4.3362': attribute type 12 has an invalid length.
[  560.137776][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3362'.
[  560.516471][T14578] netlink: 'syz.1.3364': attribute type 10 has an invalid length.
[  561.085054][T14600] netlink: 'syz.3.3369': attribute type 10 has an invalid length.
[  561.125338][T14596] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3366'.
[  561.269864][T14596] netlink: zone id is out of range
[  561.288112][T14600] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.295676][T14600] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.323600][T14596] netlink: zone id is out of range
[  561.351904][T14596] netlink: zone id is out of range
[  561.421892][T14600] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.423857][T14596] netlink: zone id is out of range
[  561.429078][T14600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.441692][T14600] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.448913][T14600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.471147][T14608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3371'.
[  561.484672][T14600] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  561.495542][T14596] netlink: get zone limit has 8 unknown bytes
[  561.502800][T14601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3368'.
[  561.516239][T14608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3371'.
[  561.560508][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3371'.
[  561.779212][T14615] IPv6: Can't replace route, no match found
[  561.923059][T14615] tipc: Started in network mode
[  561.952238][T14615] tipc: Node identity 9215a268, cluster identity 4711
[  562.000216][T14615] tipc: Node number set to 2450891368
[  562.068810][T14618] netlink: 'syz.3.3375': attribute type 7 has an invalid length.
[  562.891302][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.898036][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.755473][ T4285] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  563.958384][T14647] netlink: 'syz.3.3384': attribute type 21 has an invalid length.
[  564.002569][T14647] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3384'.
[  564.406250][T14657] netlink: 'syz.1.3386': attribute type 21 has an invalid length.
[  564.439367][T14657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3386'.
[  564.462082][T14658] netlink: 'syz.3.3388': attribute type 10 has an invalid length.
[  564.705567][T14658] team0: Port device geneve1 added
[  564.717625][T14664] netlink: 'syz.0.3390': attribute type 10 has an invalid length.
[  564.765064][T14670] FAULT_INJECTION: forcing a failure.
[  564.765064][T14670] name failslab, interval 1, probability 0, space 0, times 0
[  564.793297][T14670] CPU: 1 PID: 14670 Comm: syz.1.3392 Not tainted syzkaller #0
[  564.800826][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  564.810904][T14670] Call Trace:
[  564.814192][T14670]  <TASK>
[  564.817137][T14670]  dump_stack_lvl+0x188/0x24e
[  564.821848][T14670]  ? show_regs_print_info+0x12/0x12
[  564.827082][T14670]  ? load_image+0x410/0x410
[  564.831616][T14670]  ? __might_sleep+0xd0/0xd0
[  564.836230][T14670]  ? __lock_acquire+0x7c40/0x7c40
[  564.841291][T14670]  should_fail_ex+0x390/0x4c0
[  564.846003][T14670]  should_failslab+0x5/0x20
[  564.850532][T14670]  slab_pre_alloc_hook+0x59/0x300
[  564.855589][T14670]  ? __ipv6_addr_type+0x234/0x2e0
[  564.860732][T14670]  ? inet6_rtm_newroute+0xa37/0x1ca0
[  564.866045][T14670]  __kmem_cache_alloc_node+0x4f/0x270
[  564.871449][T14670]  ? inet6_rtm_newroute+0xa37/0x1ca0
[  564.876767][T14670]  kmalloc_trace+0x26/0xe0
[  564.881199][T14670]  inet6_rtm_newroute+0xa37/0x1ca0
[  564.886324][T14670]  ? ipv6_route_sysctl_init+0x270/0x270
[  564.891881][T14670]  ? trace_contention_end+0x5f/0x170
[  564.897184][T14670]  ? ipv6_route_sysctl_init+0x270/0x270
[  564.902724][T14670]  rtnetlink_rcv_msg+0x863/0xfb0
[  564.907663][T14670]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  564.912774][T14670]  ? rtnetlink_bind+0x80/0x80
[  564.917449][T14670]  ? mark_lock+0x94/0x320
[  564.921783][T14670]  ? __lock_acquire+0x138a/0x7c40
[  564.926813][T14670]  ? __lock_acquire+0x138a/0x7c40
[  564.931835][T14670]  ? verify_lock_unused+0x140/0x140
[  564.937062][T14670]  ? verify_lock_unused+0x140/0x140
[  564.942260][T14670]  ? perf_trace_lock+0xf8/0x390
[  564.947111][T14670]  ? verify_lock_unused+0x140/0x140
[  564.952314][T14670]  ? perf_trace_lock+0xf8/0x390
[  564.957168][T14670]  ? perf_trace_lock+0xf8/0x390
[  564.962021][T14670]  ? trace_event_raw_event_lock+0x230/0x230
[  564.967921][T14670]  netlink_rcv_skb+0x1ef/0x440
[  564.972689][T14670]  ? rtnetlink_bind+0x80/0x80
[  564.977363][T14670]  ? netlink_ack+0x1160/0x1160
[  564.982136][T14670]  ? netlink_deliver_tap+0x2e/0x1b0
[  564.987331][T14670]  netlink_unicast+0x7ad/0x920
[  564.992105][T14670]  netlink_sendmsg+0x8ad/0xbd0
[  564.996870][T14670]  ? netlink_getsockopt+0x550/0x550
[  565.002064][T14670]  ? apparmor_socket_sendmsg+0x8a/0x330
[  565.007615][T14670]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  565.012906][T14670]  ? security_socket_sendmsg+0x7c/0xa0
[  565.018364][T14670]  ? netlink_getsockopt+0x550/0x550
[  565.023562][T14670]  ____sys_sendmsg+0x5ed/0x9a0
[  565.028332][T14670]  ? __sys_sendmsg_sock+0x30/0x30
[  565.033355][T14670]  ? __import_iovec+0x306/0x510
[  565.038214][T14670]  ? import_iovec+0x6f/0xa0
[  565.042717][T14670]  ___sys_sendmsg+0x2a2/0x360
[  565.047400][T14670]  ? __sys_sendmsg+0x2a0/0x2a0
[  565.052176][T14670]  ? __lock_acquire+0x7c40/0x7c40
[  565.057216][T14670]  __se_sys_sendmsg+0x1c3/0x2b0
[  565.062071][T14670]  ? __x64_sys_sendmsg+0x80/0x80
[  565.067019][T14670]  ? lockdep_hardirqs_on+0x94/0x140
[  565.072217][T14670]  do_syscall_64+0x4c/0xa0
[  565.076636][T14670]  ? clear_bhb_loop+0x60/0xb0
[  565.081321][T14670]  ? clear_bhb_loop+0x60/0xb0
[  565.086003][T14670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  565.091918][T14670] RIP: 0033:0x7f6efdf9e0d9
[  565.096332][T14670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.115945][T14670] RSP: 002b:00007f6efee37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.124382][T14670] RAX: ffffffffffffffda RBX: 00007f6efe225fa0 RCX: 00007f6efdf9e0d9
[  565.132351][T14670] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  565.140320][T14670] RBP: 00007f6efee37090 R08: 0000000000000000 R09: 0000000000000000
[  565.148286][T14670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.156254][T14670] R13: 00007f6efe226038 R14: 00007f6efe225fa0 R15: 00007ffe41b86bb8
[  565.164265][T14670]  </TASK>
[  565.321554][T14675] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3394'.
[  565.382013][T14678] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3393'.
[  565.525199][T14678] netlink: zone id is out of range
[  565.609724][T14678] netlink: zone id is out of range
[  565.614961][T14678] netlink: zone id is out of range
[  565.785250][T14678] netlink: zone id is out of range
[  565.906878][T14678] netlink: get zone limit has 8 unknown bytes
[  568.379060][T14685] netlink: 'syz.2.3395': attribute type 21 has an invalid length.
[  568.719914][T14705] netlink: 'syz.4.3402': attribute type 21 has an invalid length.
[  568.762796][T14705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3402'.
[  568.869008][T14711] netlink: 'syz.1.3405': attribute type 7 has an invalid length.
[  569.240951][T14720] netlink: 'syz.4.3407': attribute type 10 has an invalid length.
[  569.356142][T14727] netlink: 'syz.2.3409': attribute type 29 has an invalid length.
[  569.437963][T14720] team0: Port device geneve1 added
[  569.473694][T14727] netlink: 'syz.2.3409': attribute type 29 has an invalid length.
[  569.509667][T14731] netlink: 'syz.1.3408': attribute type 10 has an invalid length.
[  569.548420][T14731] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.556088][T14731] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.611891][T14731] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.619150][T14731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.626650][T14731] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.633886][T14731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.652174][ T4285] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  569.672669][T14731] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  569.699131][T14732] netlink: 'syz.2.3409': attribute type 29 has an invalid length.
[  569.717862][T14735] netlink: 'syz.2.3409': attribute type 29 has an invalid length.
[  569.755701][T14744] netlink: 'syz.2.3409': attribute type 10 has an invalid length.
[  569.800491][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3409'.
[  569.843971][T14744] bridge0: port 3(veth0_vlan) entered blocking state
[  569.865773][T14744] bridge0: port 3(veth0_vlan) entered disabled state
[  569.913177][T14744] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  570.082434][T14752] netlink: 'syz.4.3415': attribute type 10 has an invalid length.
[  570.249648][T14754] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3413'.
[  570.279096][T14754] netlink: zone id is out of range
[  570.294768][T14754] netlink: zone id is out of range
[  570.333949][T14754] netlink: zone id is out of range
[  570.342300][T14754] netlink: zone id is out of range
[  570.348161][T14754] netlink: get zone limit has 8 unknown bytes
[  570.414866][T14765] netlink: 'syz.0.3419': attribute type 7 has an invalid length.
[  570.439408][T14762] netlink: 'syz.1.3418': attribute type 10 has an invalid length.
[  570.503096][T14762] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.513950][T14762] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.766209][ T4285] Bluetooth: hci3: command 0x2016 tx timeout
[  572.552921][T14762] bond0: (slave bridge0): Releasing backup interface
[  572.910370][T14762] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.917854][T14762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.926379][T14762] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.933526][T14762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.949641][T14762] team0: Port device bridge0 added
[  573.177210][T14783] netlink: 'syz.1.3424': attribute type 21 has an invalid length.
[  573.213675][T14783] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3424'.
[  573.233225][T14793] FAULT_INJECTION: forcing a failure.
[  573.233225][T14793] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  573.250343][T14785] netlink: 'syz.0.3425': attribute type 21 has an invalid length.
[  573.270686][T14785] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3425'.
[  573.304790][T14793] CPU: 0 PID: 14793 Comm: syz.3.3428 Not tainted syzkaller #0
[  573.312314][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  573.322392][T14793] Call Trace:
[  573.325693][T14793]  <TASK>
[  573.328637][T14793]  dump_stack_lvl+0x188/0x24e
[  573.333359][T14793]  ? show_regs_print_info+0x12/0x12
[  573.338595][T14793]  ? load_image+0x410/0x410
[  573.343133][T14793]  ? __lock_acquire+0x7c40/0x7c40
[  573.348189][T14793]  should_fail_ex+0x390/0x4c0
[  573.352892][T14793]  prepare_alloc_pages+0x1e1/0x5b0
[  573.358043][T14793]  __alloc_pages+0x130/0x4f0
[  573.362668][T14793]  ? zone_statistics+0x170/0x170
[  573.367711][T14793]  ? __lock_acquire+0x138a/0x7c40
[  573.372737][T14793]  ? verify_lock_unused+0x140/0x140
[  573.377939][T14793]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  573.383766][T14793]  __folio_alloc+0xe/0x30
[  573.388096][T14793]  vma_alloc_folio+0x499/0x900
[  573.392867][T14793]  wp_page_copy+0x24b/0x1660
[  573.397461][T14793]  ? __lock_acquire+0x7c40/0x7c40
[  573.402487][T14793]  ? fault_dirty_shared_page+0x3c0/0x3c0
[  573.408119][T14793]  ? do_raw_spin_unlock+0x11d/0x230
[  573.413316][T14793]  ? _raw_spin_unlock+0x24/0x40
[  573.418166][T14793]  ? do_wp_page+0x678/0x16b0
[  573.422757][T14793]  handle_mm_fault+0x1b1b/0x3d40
[  573.427692][T14793]  ? mt_find+0x157/0x830
[  573.431947][T14793]  ? numa_migrate_prep+0x250/0x250
[  573.437059][T14793]  ? lock_chain_count+0x20/0x20
[  573.441908][T14793]  ? perf_trace_preemptirq_template+0x268/0x320
[  573.448166][T14793]  ? lock_mm_and_find_vma+0xae/0x2f0
[  573.453544][T14793]  do_user_addr_fault+0x58e/0xb20
[  573.458590][T14793]  exc_page_fault+0x60/0x100
[  573.463183][T14793]  asm_exc_page_fault+0x22/0x30
[  573.468032][T14793] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  573.474623][T14793] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  573.494234][T14793] RSP: 0018:ffffc90003fd7ce8 EFLAGS: 00050206
[  573.500298][T14793] RAX: ffffffff8415ed01 RBX: 000000000000ffd0 RCX: 0000000000000750
[  573.508267][T14793] RDX: 000000000000ffd0 RSI: ffff888066fff880 RDI: 0000200000010000
[  573.516237][T14793] RBP: 0000000000000000 R08: ffff888066ffffcf R09: 1ffff1100cdffff9
[  573.524215][T14793] R10: dffffc0000000000 R11: ffffed100cdffffa R12: 00007ffffffef030
[  573.532186][T14793] R13: 000000000000ffd0 R14: 0000200000000780 R15: ffff888066ff0000
[  573.540161][T14793]  ? _copy_from_user+0x161/0x170
[  573.545108][T14793]  _copy_to_user+0xea/0x130
[  573.549619][T14793]  map_lookup_elem+0x481/0x600
[  573.554398][T14793]  __sys_bpf+0x546/0x780
[  573.558646][T14793]  ? bpf_link_show_fdinfo+0x380/0x380
[  573.564027][T14793]  ? lock_chain_count+0x20/0x20
[  573.568892][T14793]  __x64_sys_bpf+0x78/0x90
[  573.573835][T14793]  do_syscall_64+0x4c/0xa0
[  573.578283][T14793]  ? clear_bhb_loop+0x60/0xb0
[  573.582959][T14793]  ? clear_bhb_loop+0x60/0xb0
[  573.587642][T14793]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.593534][T14793] RIP: 0033:0x7fa5aab9e0d9
[  573.597951][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.617567][T14793] RSP: 002b:00007fa5abb20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  573.625980][T14793] RAX: ffffffffffffffda RBX: 00007fa5aae25fa0 RCX: 00007fa5aab9e0d9
[  573.633950][T14793] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000001
[  573.641924][T14793] RBP: 00007fa5abb20090 R08: 0000000000000000 R09: 0000000000000000
[  573.649906][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  573.658052][T14793] R13: 00007fa5aae26038 R14: 00007fa5aae25fa0 R15: 00007ffecbdc6948
[  573.666052][T14793]  </TASK>
[  574.453034][T14815] FAULT_INJECTION: forcing a failure.
[  574.453034][T14815] name failslab, interval 1, probability 0, space 0, times 0
[  574.469007][T14815] CPU: 0 PID: 14815 Comm: syz.0.3436 Not tainted syzkaller #0
[  574.476613][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  574.486685][T14815] Call Trace:
[  574.489976][T14815]  <TASK>
[  574.492925][T14815]  dump_stack_lvl+0x188/0x24e
[  574.497633][T14815]  ? sctp_sendmsg+0x1686/0x2940
[  574.502523][T14815]  ? ___sys_sendmsg+0x2a2/0x360
[  574.507408][T14815]  ? show_regs_print_info+0x12/0x12
[  574.512632][T14815]  ? load_image+0x410/0x410
[  574.517165][T14815]  should_fail_ex+0x390/0x4c0
[  574.521878][T14815]  should_failslab+0x5/0x20
[  574.526412][T14815]  slab_pre_alloc_hook+0x59/0x300
[  574.531487][T14815]  ? sctp_add_bind_addr+0x89/0x350
[  574.536631][T14815]  __kmem_cache_alloc_node+0x4f/0x270
[  574.542030][T14815]  ? sctp_add_bind_addr+0x89/0x350
[  574.547170][T14815]  kmalloc_trace+0x26/0xe0
[  574.551622][T14815]  sctp_add_bind_addr+0x89/0x350
[  574.556599][T14815]  sctp_copy_local_addr_list+0x317/0x4d0
[  574.562264][T14815]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  574.568007][T14815]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  574.574107][T14815]  ? sctp_v4_is_any+0x31/0x50
[  574.578825][T14815]  ? sctp_copy_one_addr+0x93/0x660
[  574.583975][T14815]  sctp_bind_addr_copy+0xaf/0x3c0
[  574.589036][T14815]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  574.595405][T14815]  sctp_connect_new_asoc+0x2f5/0x6a0
[  574.600724][T14815]  ? __sctp_connect+0xd80/0xd80
[  574.605603][T14815]  ? __local_bh_enable_ip+0x136/0x1c0
[  574.611536][T14815]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  574.617113][T14815]  ? security_sctp_bind_connect+0x85/0xb0
[  574.622872][T14815]  sctp_sendmsg+0x1686/0x2940
[  574.627605][T14815]  ? sctp_getsockopt+0x8a0/0x8a0
[  574.632588][T14815]  ? __might_fault+0xa6/0x120
[  574.637295][T14815]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  574.643740][T14815]  ? aa_sock_msg_perm+0x94/0x150
[  574.648709][T14815]  ? inet_sendmsg+0xca/0x2a0
[  574.653314][T14815]  ? inet_send_prepare+0x250/0x250
[  574.658447][T14815]  ____sys_sendmsg+0x5ed/0x9a0
[  574.663242][T14815]  ? __sys_sendmsg_sock+0x30/0x30
[  574.668289][T14815]  ? __import_iovec+0x306/0x510
[  574.673173][T14815]  ? import_iovec+0x6f/0xa0
[  574.677702][T14815]  ___sys_sendmsg+0x2a2/0x360
[  574.682410][T14815]  ? __sys_sendmsg+0x2a0/0x2a0
[  574.687225][T14815]  ? __lock_acquire+0x7c40/0x7c40
[  574.692301][T14815]  __se_sys_sendmsg+0x1c3/0x2b0
[  574.697193][T14815]  ? __x64_sys_sendmsg+0x80/0x80
[  574.702180][T14815]  ? lockdep_hardirqs_on+0x94/0x140
[  574.707403][T14815]  do_syscall_64+0x4c/0xa0
[  574.711846][T14815]  ? clear_bhb_loop+0x60/0xb0
[  574.716547][T14815]  ? clear_bhb_loop+0x60/0xb0
[  574.721247][T14815]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.727163][T14815] RIP: 0033:0x7fcd19f9e0d9
[  574.731596][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.751224][T14815] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.759659][T14815] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  574.767654][T14815] RDX: 000000000000c8d0 RSI: 0000200000000b40 RDI: 000000000000000f
[  574.776087][T14815] RBP: 00007fcd1aef2090 R08: 0000000000000000 R09: 0000000000000000
[  574.784083][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  574.792088][T14815] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  574.800087][T14815]  </TASK>
[  574.905238][T14821] validate_nla: 1 callbacks suppressed
[  574.905256][T14821] netlink: 'syz.2.3439': attribute type 7 has an invalid length.
[  574.976732][T14836] netlink: 'syz.3.3440': attribute type 29 has an invalid length.
[  574.990953][T14836] netlink: 'syz.3.3440': attribute type 29 has an invalid length.
[  575.014842][T14836] netlink: 'syz.3.3440': attribute type 29 has an invalid length.
[  575.043468][T14836] netlink: 'syz.3.3440': attribute type 29 has an invalid length.
[  575.069157][T14838] netlink: 'syz.0.3441': attribute type 3 has an invalid length.
[  575.109006][T14838] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3441'.
[  575.162833][T14842] netlink: 'syz.3.3440': attribute type 10 has an invalid length.
[  575.176045][T14842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3440'.
[  575.204113][T14842] bridge0: port 3(veth0_vlan) entered blocking state
[  575.215580][T14842] bridge0: port 3(veth0_vlan) entered disabled state
[  575.421778][T14842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  575.455352][T14844] netlink: 'syz.4.3443': attribute type 21 has an invalid length.
[  575.495649][T14844] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3443'.
[  575.514178][T14850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3445'.
[  575.532440][T14851] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3445'.
[  575.544386][T14851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  575.574907][T14854] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3445'.
[  575.597403][T14854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  575.614028][T14854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  575.854118][T14865] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3451'.
[  575.867378][T14865] netlink: zone id is out of range
[  575.873358][T14865] netlink: zone id is out of range
[  575.887952][T14865] netlink: zone id is out of range
[  575.896972][T14865] netlink: zone id is out of range
[  575.907332][T14865] netlink: zone id is out of range
[  575.916484][T14865] netlink: get zone limit has 8 unknown bytes
[  576.175715][T14875] netlink: 'syz.4.3454': attribute type 7 has an invalid length.
[  576.352679][T14879] netlink: 'syz.4.3456': attribute type 3 has an invalid length.
[  576.362707][T14879] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3456'.
[  576.554669][T14888] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3459'.
[  577.102764][T14906] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3465'.
[  577.587343][T14910] bridge0: port 3(veth0_vlan) entered blocking state
[  577.607785][T14910] bridge0: port 3(veth0_vlan) entered disabled state
[  577.698391][T14910] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  578.362546][T14938] device veth1_macvtap left promiscuous mode
[  578.853991][T14954] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.874627][T14954] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.654753][T14954] bond0: (slave bridge0): Releasing backup interface
[  580.056559][T14967] validate_nla: 13 callbacks suppressed
[  580.056582][T14967] netlink: 'syz.0.3486': attribute type 21 has an invalid length.
[  580.682694][T14983] netlink: 'syz.3.3492': attribute type 21 has an invalid length.
[  580.701214][T14983] __nla_validate_parse: 7 callbacks suppressed
[  580.701253][T14983] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3492'.
[  580.766848][T14989] cgroup: fork rejected by pids controller in /syz4
[  581.544512][T15015] netlink: 'syz.2.3499': attribute type 3 has an invalid length.
[  581.591999][T15015] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3499'.
[  582.160871][T15025] netlink: 'syz.3.3502': attribute type 21 has an invalid length.
[  582.191600][T15025] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3502'.
[  582.742036][T15035] netlink: 'syz.0.3508': attribute type 3 has an invalid length.
[  582.788982][T15035] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3508'.
[  582.814868][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.859091][T15037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3509'.
[  582.882017][T15037] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3509'.
[  582.902942][T15037] net_ratelimit: 2 callbacks suppressed
[  582.902960][T15037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  582.961681][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.025616][T15037] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3509'.
[  583.044018][T15045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3512'.
[  583.061457][T15037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  583.102643][T15037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  583.173414][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.203942][T15045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3512'.
[  583.218611][T15047] netlink: 'syz.2.3513': attribute type 7 has an invalid length.
[  583.244348][T15048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3512'.
[  583.326787][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.394012][T15051] netlink: 'syz.3.3514': attribute type 21 has an invalid length.
[  583.587791][T15056] netlink: 'syz.2.3516': attribute type 3 has an invalid length.
[  584.035679][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  584.045999][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  584.056618][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  584.067226][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  584.075870][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  584.083759][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  585.449259][ T4286] Bluetooth: hci5: command 0x0406 tx timeout
[  585.675121][T15062] chnl_net:caif_netlink_parms(): no params data found
[  585.816371][T15093] netlink: 'syz.2.3522': attribute type 10 has an invalid length.
[  585.887734][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.919679][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.170935][ T4285] Bluetooth: hci1: command 0x0409 tx timeout
[  586.365988][T15103] __nla_validate_parse: 3 callbacks suppressed
[  586.366010][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3526'.
[  586.560260][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3526'.
[  586.627025][T15104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3526'.
[  586.864314][T15110] netlink: 'syz.3.3527': attribute type 7 has an invalid length.
[  587.197212][T15062] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.227721][T15062] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.245700][T15062] device bridge_slave_0 entered promiscuous mode
[  587.271908][T15122] netlink: 'syz.0.3530': attribute type 21 has an invalid length.
[  587.291091][T15122] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3530'.
[  587.349780][   T50] device hsr_slave_0 left promiscuous mode
[  587.356709][   T50] device hsr_slave_1 left promiscuous mode
[  587.423572][   T50] device bridge_slave_1 left promiscuous mode
[  587.434289][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.460786][   T50] device bridge_slave_0 left promiscuous mode
[  587.467076][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.475068][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3534'.
[  587.635438][   T50] device veth1_vlan left promiscuous mode
[  587.653341][   T50] device veth0_vlan left promiscuous mode
[  587.770439][T15145] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.3535'.
[  587.827844][T15145] openvswitch: netlink: Key type 386 is out of range max 32
[  588.001252][   T50] team0 (unregistering): Port device geneve1 removed
[  588.261029][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  588.286719][T15139] FAULT_INJECTION: forcing a failure.
[  588.286719][T15139] name fail_futex, interval 1, probability 0, space 0, times 1
[  588.312748][T15139] CPU: 1 PID: 15139 Comm: syz.3.3534 Not tainted syzkaller #0
[  588.320367][T15139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  588.330452][T15139] Call Trace:
[  588.333762][T15139]  <TASK>
[  588.336717][T15139]  dump_stack_lvl+0x188/0x24e
[  588.341453][T15139]  ? show_regs_print_info+0x12/0x12
[  588.346694][T15139]  ? load_image+0x410/0x410
[  588.351228][T15139]  ? mark_lock+0x94/0x320
[  588.355617][T15139]  ? __lock_acquire+0x1465/0x7c40
[  588.360772][T15139]  should_fail_ex+0x390/0x4c0
[  588.365495][T15139]  get_futex_key+0x1de/0x1000
[  588.370313][T15139]  ? verify_lock_unused+0x140/0x140
[  588.375591][T15139]  ? futex_setup_timer+0xc0/0xc0
[  588.380571][T15139]  ? perf_trace_lock+0xf8/0x390
[  588.385465][T15139]  futex_wake+0x123/0x4f0
[  588.389825][T15139]  ? futex_wake_mark+0x150/0x150
[  588.394782][T15139]  do_futex+0x2e2/0x320
[  588.398972][T15139]  ? __ia32_sys_get_robust_list+0x100/0x100
[  588.404869][T15139]  ? __might_fault+0xc2/0x120
[  588.409536][T15139]  mm_release+0x20a/0x330
[  588.413859][T15139]  ? exit_robust_list+0x2ce/0x2f0
[  588.418887][T15139]  ? exit_mm_release+0x30/0x30
[  588.423663][T15139]  ? lockdep_hardirqs_on+0x94/0x140
[  588.428885][T15139]  exit_mm+0xa0/0x350
[  588.432889][T15139]  ? sysctl_delayacct+0x220/0x220
[  588.437995][T15139]  ? do_exit+0x2570/0x2570
[  588.442418][T15139]  ? mm_trace_rss_stat+0xa7/0x250
[  588.447441][T15139]  ? sync_mm_rss+0x211/0x350
[  588.452047][T15139]  do_exit+0x958/0x2570
[  588.456232][T15139]  ? put_task_struct+0x80/0x80
[  588.461014][T15139]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  588.467006][T15139]  ? _raw_spin_lock_irq+0x86/0xf0
[  588.472028][T15139]  ? lock_chain_count+0x20/0x20
[  588.476883][T15139]  ? _raw_spin_lock_irq+0xb7/0xf0
[  588.481929][T15139]  do_group_exit+0x229/0x2e0
[  588.486514][T15139]  ? lockdep_hardirqs_on+0x94/0x140
[  588.491712][T15139]  get_signal+0x1259/0x1340
[  588.496325][T15139]  arch_do_signal_or_restart+0xc4/0x1310
[  588.502051][T15139]  ? __fget_files+0x3fc/0x460
[  588.506730][T15139]  ? get_sigframe_size+0x10/0x10
[  588.511663][T15139]  ? fput+0x150/0x1a0
[  588.515644][T15139]  ? exit_to_user_mode_loop+0x3b/0x110
[  588.521119][T15139]  exit_to_user_mode_loop+0x70/0x110
[  588.526467][T15139]  exit_to_user_mode_prepare+0xee/0x180
[  588.532017][T15139]  syscall_exit_to_user_mode+0x16/0x40
[  588.537473][T15139]  do_syscall_64+0x58/0xa0
[  588.541886][T15139]  ? clear_bhb_loop+0x60/0xb0
[  588.546562][T15139]  ? clear_bhb_loop+0x60/0xb0
[  588.551235][T15139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  588.557124][T15139] RIP: 0033:0x7fa5aab9e0d9
[  588.561561][T15139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.581182][T15139] RSP: 002b:00007fa5abaff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  588.589613][T15139] RAX: fffffffffffffe00 RBX: 00007fa5aae26090 RCX: 00007fa5aab9e0d9
[  588.597588][T15139] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003
[  588.605607][T15139] RBP: 00007fa5abaff090 R08: 0000000000000000 R09: 0000000000000000
[  588.613569][T15139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.621533][T15139] R13: 00007fa5aae26128 R14: 00007fa5aae26090 R15: 00007ffecbdc6948
[  588.629509][T15139]  </TASK>
[  588.811150][   T50] team0 (unregistering): Port device team_slave_1 removed
[  588.849679][   T50] team0 (unregistering): Port device team_slave_0 removed
[  588.887688][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.929793][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.185118][   T50] bond0 (unregistering): Released all slaves
[  589.280181][T15062] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.287411][T15062] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.295424][T15062] device bridge_slave_1 entered promiscuous mode
[  589.311712][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3534'.
[  589.358590][T15131] device syzkaller0 entered promiscuous mode
[  590.328917][ T4285] Bluetooth: hci1: command 0x040f tx timeout
[  591.709124][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.751735][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.833972][T15062] team0: Port device team_slave_0 added
[  591.879734][T15062] team0: Port device team_slave_1 added
[  591.924703][T15172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'.
[  591.949321][T15172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'.
[  591.965993][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.974463][T15172] FAULT_INJECTION: forcing a failure.
[  591.974463][T15172] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  592.007926][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.045583][T15172] CPU: 0 PID: 15172 Comm: syz.3.3541 Not tainted syzkaller #0
[  592.053109][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  592.063190][T15172] Call Trace:
[  592.066488][T15172]  <TASK>
[  592.069438][T15172]  dump_stack_lvl+0x188/0x24e
[  592.074156][T15172]  ? show_regs_print_info+0x12/0x12
[  592.079391][T15172]  ? load_image+0x410/0x410
[  592.083928][T15172]  ? __lock_acquire+0x7c40/0x7c40
[  592.088988][T15172]  ? __lock_acquire+0x138a/0x7c40
[  592.094052][T15172]  should_fail_ex+0x390/0x4c0
[  592.098766][T15172]  prepare_alloc_pages+0x1e1/0x5b0
[  592.103926][T15172]  __alloc_pages+0x130/0x4f0
[  592.108551][T15172]  ? lock_chain_count+0x20/0x20
[  592.113435][T15172]  ? zone_statistics+0x170/0x170
[  592.118419][T15172]  ? count_memcg_event_mm+0x8a/0x3c0
[  592.123732][T15172]  ? count_memcg_event_mm+0x36b/0x3c0
[  592.129140][T15172]  ? __lock_acquire+0x7c40/0x7c40
[  592.134197][T15172]  ? count_memcg_event_mm+0x8a/0x3c0
[  592.139512][T15172]  ? put_page+0x270/0x270
[  592.143884][T15172]  __folio_alloc+0xe/0x30
[  592.148254][T15172]  vma_alloc_folio+0x499/0x900
[  592.153241][T15172]  handle_mm_fault+0x1fe3/0x3d40
[  592.158218][T15172]  ? mt_find+0x157/0x830
[  592.162521][T15172]  ? numa_migrate_prep+0x250/0x250
[  592.167681][T15172]  ? lock_chain_count+0x20/0x20
[  592.172567][T15172]  ? perf_trace_preemptirq_template+0x268/0x320
[  592.178845][T15172]  ? lock_mm_and_find_vma+0xae/0x2f0
[  592.184162][T15172]  do_user_addr_fault+0x58e/0xb20
[  592.189234][T15172]  exc_page_fault+0x60/0x100
[  592.193862][T15172]  asm_exc_page_fault+0x22/0x30
[  592.198742][T15172] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  592.205367][T15172] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  592.225004][T15172] RSP: 0018:ffffc90003797628 EFLAGS: 00050202
[  592.231099][T15172] RAX: ffffffff8413ad01 RBX: 0000000000000ae4 RCX: 0000000000000ae4
[  592.239094][T15172] RDX: 0000000000000ae4 RSI: ffff888062e00000 RDI: 0000200000001940
[  592.247270][T15172] RBP: 0000000000000000 R08: ffff888062e00ae3 R09: 1ffff1100c5c015c
[  592.255270][T15172] R10: dffffc0000000000 R11: ffffed100c5c015d R12: 00007fffffffe51c
[  592.263271][T15172] R13: 0000000000000ae4 R14: ffff888062e00000 R15: 0000200000001940
[  592.271283][T15172]  ? copy_pipe_to_iter+0x171/0x180
[  592.276439][T15172]  copyout+0xe7/0x120
[  592.280467][T15172]  _copy_to_iter+0x482/0x1050
[  592.285190][T15172]  ? iov_iter_init+0x1f0/0x1f0
[  592.289993][T15172]  ? __virt_addr_valid+0x188/0x540
[  592.295138][T15172]  ? __virt_addr_valid+0x467/0x540
[  592.299175][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.300265][T15172]  ? __phys_addr_symbol+0x2b/0x70
[  592.300295][T15172]  ? __check_object_size+0x4f6/0xa70
[  592.300322][T15172]  __skb_datagram_iter+0xde/0x740
[  592.320713][T15171] netlink: 'syz.1.3540': attribute type 21 has an invalid length.
[  592.321082][T15172]  ? sock_load_diag_module+0x130/0x130
[  592.321116][T15172]  ? skb_copy_datagram_iter+0x290/0x290
[  592.321146][T15172]  skb_copy_datagram_iter+0xd7/0x290
[  592.321174][T15172]  netlink_recvmsg+0x2d0/0xe00
[  592.326370][T15171] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3540'.
[  592.333979][T15172]  ? netlink_sendmsg+0xbd0/0xbd0
[  592.334012][T15172]  ? aa_af_perm+0x340/0x340
[  592.334035][T15172]  ? __might_fault+0xa6/0x120
[  592.334058][T15172]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  592.334078][T15172]  ? security_socket_recvmsg+0x85/0xb0
[  592.388951][T15172]  ? netlink_sendmsg+0xbd0/0xbd0
[  592.393895][T15172]  ____sys_recvmsg+0x2c8/0x5b0
[  592.398680][T15172]  ? __sys_recvmsg_sock+0x40/0x40
[  592.403718][T15172]  ? import_iovec+0x6f/0xa0
[  592.408225][T15172]  ___sys_recvmsg+0x210/0x590
[  592.412908][T15172]  ? __sys_recvmsg+0x2a0/0x2a0
[  592.417668][T15172]  ? trace_call_bpf+0xbf/0x6b0
[  592.422510][T15172]  ? trace_call_bpf+0x5d6/0x6b0
[  592.427390][T15172]  ? __fget_files+0x3fc/0x460
[  592.432098][T15172]  __x64_sys_recvmsg+0x20d/0x2e0
[  592.437055][T15172]  ? perf_trace_preemptirq_template+0x268/0x320
[  592.443564][T15172]  ? ___sys_recvmsg+0x590/0x590
[  592.448422][T15172]  ? lockdep_hardirqs_on+0x94/0x140
[  592.453623][T15172]  do_syscall_64+0x4c/0xa0
[  592.458044][T15172]  ? clear_bhb_loop+0x60/0xb0
[  592.462720][T15172]  ? clear_bhb_loop+0x60/0xb0
[  592.467400][T15172]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  592.473293][T15172] RIP: 0033:0x7fa5aab9e0d9
[  592.477711][T15172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.497407][T15172] RSP: 002b:00007fa5abb20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  592.505829][T15172] RAX: ffffffffffffffda RBX: 00007fa5aae25fa0 RCX: 00007fa5aab9e0d9
[  592.513801][T15172] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003
[  592.521768][T15172] RBP: 00007fa5abb20090 R08: 0000000000000000 R09: 0000000000000000
[  592.529737][T15172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.537711][T15172] R13: 00007fa5aae26038 R14: 00007fa5aae25fa0 R15: 00007ffecbdc6948
[  592.545694][T15172]  </TASK>
[  592.548768][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[  592.572951][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.580004][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.606102][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.666156][T15172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'.
[  592.756936][T15062] device hsr_slave_0 entered promiscuous mode
[  592.779893][T15062] device hsr_slave_1 entered promiscuous mode
[  592.830562][T15062] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  592.838193][T15062] Cannot create hsr debugfs directory
[  592.950417][T15189] netlink: 'syz.3.3543': attribute type 7 has an invalid length.
[  593.264555][T15194] netlink: 'syz.1.3544': attribute type 21 has an invalid length.
[  593.283111][T15194] netlink: 'syz.1.3544': attribute type 6 has an invalid length.
[  593.299455][T15194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3544'.
[  593.492450][T15196] netlink: 'syz.0.3545': attribute type 21 has an invalid length.
[  593.539569][T15196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3545'.
[  593.664850][T15208] TCP: TCP_TX_DELAY enabled
[  594.431258][T15062] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  594.593639][T15062] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  594.694748][T15062] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  594.746900][T15226] netlink: 'syz.0.3552': attribute type 1 has an invalid length.
[  594.758263][T15062] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  594.770476][T15226] netlink: 'syz.0.3552': attribute type 1 has an invalid length.
[  594.790639][T15226] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3552'.
[  595.338947][T15062] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.691125][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  595.721694][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  595.785094][T15062] 8021q: adding VLAN 0 to HW filter on device team0
[  596.090492][T15253] netlink: 'syz.2.3556': attribute type 3 has an invalid length.
[  596.128810][T15253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3556'.
[  596.163300][T15241] ieee80211 phy47: Failed to add default virtual iface
[  596.283928][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  596.334487][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  596.358357][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.365614][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.381330][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  596.442614][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  596.462183][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  596.529560][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.536795][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.728007][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  596.791606][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  596.950501][T15272] device pim6reg1 entered promiscuous mode
[  597.027943][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  597.077108][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  597.131044][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  597.180099][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  597.226280][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  597.265726][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  597.305156][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  597.350289][T15274] netlink: 'syz.3.3561': attribute type 21 has an invalid length.
[  597.373009][T15274] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3561'.
[  597.389496][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  597.419940][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  597.442584][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  598.439912][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  598.447488][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  598.482002][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.793924][T15302] netlink: 'syz.0.3574': attribute type 21 has an invalid length.
[  598.841485][T15302] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3574'.
[  598.879912][T15307] netlink: 'syz.1.3565': attribute type 1 has an invalid length.
[  598.944041][T15307] netlink: 'syz.1.3565': attribute type 1 has an invalid length.
[  598.973874][T15307] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3565'.
[  599.909637][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  599.919323][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  600.152642][T15340] netlink: 'syz.1.3572': attribute type 19 has an invalid length.
[  600.178499][T15340] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3572'.
[  600.477370][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  600.501747][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  600.558064][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  600.597479][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  600.732650][T15062] device veth0_vlan entered promiscuous mode
[  600.816707][T15062] device veth1_vlan entered promiscuous mode
[  600.929570][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  600.980324][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  601.034525][T15062] device veth0_macvtap entered promiscuous mode
[  601.099928][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  601.119931][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  601.150706][T15062] device veth1_macvtap entered promiscuous mode
[  601.164615][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  601.177790][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  601.209235][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.236706][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.268767][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.312639][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.337856][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.375630][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.408818][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.461805][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.523222][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.547995][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.574753][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.608464][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.633381][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.650044][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.671224][T15368] netlink: 'syz.0.3579': attribute type 21 has an invalid length.
[  601.681132][T15368] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3579'.
[  601.704275][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  601.718304][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  601.737226][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  601.759979][ T9296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  601.789714][T15062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.798488][T15062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.827120][T15062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.845605][T15062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  602.300763][T10148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.318013][T10148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.351304][T15383] netlink: 'syz.2.3583': attribute type 1 has an invalid length.
[  602.391582][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  602.408821][T15383] netlink: 'syz.2.3583': attribute type 1 has an invalid length.
[  602.442806][T15383] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3583'.
[  602.451547][T10148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.494536][T10148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.537437][ T9301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  602.877554][T15396] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3587'.
[  602.925214][T15396] netlink: 'syz.2.3587': attribute type 39 has an invalid length.
[  603.214698][T15401] netlink: 'syz.3.3589': attribute type 3 has an invalid length.
[  603.227343][T15401] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3589'.
[  603.254210][T15400] netlink: 'syz.4.3510': attribute type 21 has an invalid length.
[  603.437055][T15400] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3510'.
[  603.625151][T15408] netlink: 'syz.1.3591': attribute type 3 has an invalid length.
[  603.692095][T15408] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3591'.
[  604.276805][T15419] netlink: 'syz.2.3595': attribute type 21 has an invalid length.
[  604.299416][T15419] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3595'.
[  605.372747][T15447] netlink: 'syz.1.3605': attribute type 10 has an invalid length.
[  605.816099][T15452] netlink: 'syz.2.3607': attribute type 3 has an invalid length.
[  605.849580][T15452] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3607'.
[  605.929220][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  606.063826][T15460] netlink: 'syz.1.3610': attribute type 21 has an invalid length.
[  606.205952][T15460] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3610'.
[  606.248783][T15461] netlink: 'syz.0.3609': attribute type 17 has an invalid length.
[  606.302676][T15461] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3609'.
[  606.317090][T15461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  606.486078][T15461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.333183][T15481] device hsr_slave_1 left promiscuous mode
[  607.470969][T15492] syzkaller1: tun_chr_ioctl cmd 1074025677
[  607.477023][T15492] syzkaller1: linktype set to 825
[  608.002223][T15510] validate_nla: 2 callbacks suppressed
[  608.002262][T15510] netlink: 'syz.1.3627': attribute type 3 has an invalid length.
[  608.035470][T15510] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3627'.
[  608.149648][T15516] FAULT_INJECTION: forcing a failure.
[  608.149648][T15516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.165832][T15516] CPU: 0 PID: 15516 Comm: syz.2.3629 Not tainted syzkaller #0
[  608.173348][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  608.183432][T15516] Call Trace:
[  608.186731][T15516]  <TASK>
[  608.189702][T15516]  dump_stack_lvl+0x188/0x24e
[  608.194425][T15516]  ? show_regs_print_info+0x12/0x12
[  608.199665][T15516]  ? load_image+0x410/0x410
[  608.204212][T15516]  ? __lock_acquire+0x7c40/0x7c40
[  608.209287][T15516]  should_fail_ex+0x390/0x4c0
[  608.214010][T15516]  _copy_from_user+0x2c/0x170
[  608.218734][T15516]  __sys_bpf+0x2ea/0x780
[  608.223024][T15516]  ? bpf_link_show_fdinfo+0x380/0x380
[  608.228451][T15516]  ? lock_chain_count+0x20/0x20
[  608.233349][T15516]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  608.239384][T15516]  __x64_sys_bpf+0x78/0x90
[  608.243840][T15516]  do_syscall_64+0x4c/0xa0
[  608.248299][T15516]  ? clear_bhb_loop+0x60/0xb0
[  608.253008][T15516]  ? clear_bhb_loop+0x60/0xb0
[  608.257722][T15516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  608.263648][T15516] RIP: 0033:0x7f7f88b9e0d9
[  608.268090][T15516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.287725][T15516] RSP: 002b:00007f7f89aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  608.296174][T15516] RAX: ffffffffffffffda RBX: 00007f7f88e25fa0 RCX: 00007f7f88b9e0d9
[  608.304177][T15516] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  608.312179][T15516] RBP: 00007f7f89aaf090 R08: 0000000000000000 R09: 0000000000000000
[  608.320190][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.328191][T15516] R13: 00007f7f88e26038 R14: 00007f7f88e25fa0 R15: 00007ffc4c442628
[  608.336208][T15516]  </TASK>
[  608.575769][T15520] netlink: 'syz.2.3630': attribute type 10 has an invalid length.
[  609.445847][T15549] netlink: 'syz.2.3640': attribute type 3 has an invalid length.
[  609.468496][T15550] FAULT_INJECTION: forcing a failure.
[  609.468496][T15550] name failslab, interval 1, probability 0, space 0, times 0
[  609.490564][T15549] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3640'.
[  609.519172][T15550] CPU: 1 PID: 15550 Comm: syz.0.3641 Not tainted syzkaller #0
[  609.526709][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.536795][T15550] Call Trace:
[  609.540095][T15550]  <TASK>
[  609.543053][T15550]  dump_stack_lvl+0x188/0x24e
[  609.547763][T15550]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  609.553956][T15550]  ? show_regs_print_info+0x12/0x12
[  609.559186][T15550]  ? load_image+0x410/0x410
[  609.563725][T15550]  should_fail_ex+0x390/0x4c0
[  609.568438][T15550]  should_failslab+0x5/0x20
[  609.572966][T15550]  slab_pre_alloc_hook+0x59/0x300
[  609.578102][T15550]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  609.584119][T15550]  kmem_cache_alloc_node+0x5a/0x310
[  609.589350][T15550]  ? __alloc_skb+0xf9/0x7d0
[  609.593887][T15550]  __alloc_skb+0xf9/0x7d0
[  609.598259][T15550]  alloc_skb_with_frags+0xa7/0x710
[  609.603459][T15550]  sock_alloc_send_pskb+0x87f/0x9a0
[  609.608701][T15550]  ? lock_chain_count+0x20/0x20
[  609.613593][T15550]  ? sock_kzfree_s+0x50/0x50
[  609.618298][T15550]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  609.624595][T15550]  tun_get_user+0x800/0x3c20
[  609.629333][T15550]  ? irqentry_enter+0x33/0x50
[  609.634053][T15550]  ? rcu_read_unlock+0xa0/0xa0
[  609.638851][T15550]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  609.644868][T15550]  ? lock_chain_count+0x20/0x20
[  609.649758][T15550]  ? patch_conexant_auto+0xfe0/0x1690
[  609.655164][T15550]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  609.661362][T15550]  ? tun_chr_write_iter+0xf0/0x1f0
[  609.666507][T15550]  tun_chr_write_iter+0x112/0x1f0
[  609.671647][T15550]  vfs_write+0x482/0x9a0
[  609.675942][T15550]  ? file_end_write+0x250/0x250
[  609.680838][T15550]  ? __fget_files+0x3fc/0x460
[  609.685564][T15550]  ? __fdget_pos+0x1d4/0x360
[  609.690187][T15550]  ? ksys_write+0x70/0x260
[  609.694633][T15550]  ksys_write+0x14d/0x260
[  609.698988][T15550]  ? __ia32_sys_read+0x80/0x80
[  609.703787][T15550]  ? lockdep_hardirqs_on+0x94/0x140
[  609.709009][T15550]  do_syscall_64+0x4c/0xa0
[  609.713723][T15550]  ? clear_bhb_loop+0x60/0xb0
[  609.718426][T15550]  ? clear_bhb_loop+0x60/0xb0
[  609.723134][T15550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  609.729054][T15550] RIP: 0033:0x7fcd19f9e0d9
[  609.733528][T15550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.753165][T15550] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  609.761605][T15550] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  609.769603][T15550] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  609.777593][T15550] RBP: 00007fcd1aef2090 R08: 0000000000000000 R09: 0000000000000000
[  609.785587][T15550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.793576][T15550] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  609.801593][T15550]  </TASK>
[  610.293191][T15564] netlink: 'syz.0.3645': attribute type 2 has an invalid length.
[  610.355802][T15564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3645'.
[  610.593753][T15577] netlink: 'syz.3.3651': attribute type 10 has an invalid length.
[  610.613599][T15577] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  610.693028][T15580] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3652'.
[  610.823275][T15580] netlink: 'syz.0.3652': attribute type 39 has an invalid length.
[  611.002351][T15586] netlink: 'syz.3.3654': attribute type 30 has an invalid length.
[  611.029794][T15584] netlink: 'syz.0.3652': attribute type 39 has an invalid length.
[  611.276407][T15588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  611.283858][T15588] IPv6: NLM_F_CREATE should be set when creating new route
[  611.291294][T15588] IPv6: NLM_F_CREATE should be set when creating new route
[  611.298610][T15588] IPv6: NLM_F_CREATE should be set when creating new route
[  611.663354][T15592] netlink: 'syz.4.3657': attribute type 39 has an invalid length.
[  611.821362][T15592] device hsr_slave_1 left promiscuous mode
[  612.171353][T15612] netlink: 'syz.3.3664': attribute type 21 has an invalid length.
[  612.210963][T15612] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3664'.
[  612.477838][T15617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  612.485173][T15617] IPv6: NLM_F_CREATE should be set when creating new route
[  612.492518][T15617] IPv6: NLM_F_CREATE should be set when creating new route
[  612.500014][T15617] IPv6: NLM_F_CREATE should be set when creating new route
[  615.644940][T15628] FAULT_INJECTION: forcing a failure.
[  615.644940][T15628] name failslab, interval 1, probability 0, space 0, times 0
[  615.676664][T15628] CPU: 0 PID: 15628 Comm: syz.2.3670 Not tainted syzkaller #0
[  615.684182][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  615.694268][T15628] Call Trace:
[  615.697573][T15628]  <TASK>
[  615.700532][T15628]  dump_stack_lvl+0x188/0x24e
[  615.705330][T15628]  ? show_regs_print_info+0x12/0x12
[  615.710580][T15628]  ? load_image+0x410/0x410
[  615.715169][T15628]  ? __lock_acquire+0x7c40/0x7c40
[  615.720245][T15628]  should_fail_ex+0x390/0x4c0
[  615.724963][T15628]  should_failslab+0x5/0x20
[  615.729496][T15628]  slab_pre_alloc_hook+0x59/0x300
[  615.734554][T15628]  ? fib6_info_alloc+0x2e/0xe0
[  615.739356][T15628]  __kmem_cache_alloc_node+0x4f/0x270
[  615.744774][T15628]  ? fib6_info_alloc+0x2e/0xe0
[  615.749574][T15628]  __kmalloc+0xa3/0x240
[  615.753760][T15628]  fib6_info_alloc+0x2e/0xe0
[  615.758384][T15628]  ip6_route_info_create+0x455/0x1220
[  615.763832][T15628]  ? nla_memcpy+0x55/0xb0
[  615.768203][T15628]  ? nla_find+0x134/0x150
[  615.772574][T15628]  inet6_rtm_newroute+0x5c0/0x1ca0
[  615.777777][T15628]  ? ipv6_route_sysctl_init+0x270/0x270
[  615.783385][T15628]  ? trace_contention_end+0x5f/0x170
[  615.788739][T15628]  ? ipv6_route_sysctl_init+0x270/0x270
[  615.791227][T15642] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3672'.
[  615.794303][T15628]  rtnetlink_rcv_msg+0x863/0xfb0
[  615.808464][T15628]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  615.813605][T15628]  ? rtnetlink_bind+0x80/0x80
[  615.818287][T15628]  ? __local_bh_enable_ip+0x136/0x1c0
[  615.823662][T15628]  ? lockdep_hardirqs_on+0x94/0x140
[  615.828864][T15628]  ? __local_bh_enable_ip+0x136/0x1c0
[  615.834243][T15628]  ? _local_bh_enable+0xa0/0xa0
[  615.839097][T15628]  ? __dev_queue_xmit+0x281/0x3810
[  615.844209][T15628]  ? __dev_queue_xmit+0x281/0x3810
[  615.849320][T15628]  ? __dev_queue_xmit+0x1d84/0x3810
[  615.854532][T15628]  ? __dev_queue_xmit+0x281/0x3810
[  615.859651][T15628]  ? ref_tracker_free+0x682/0x830
[  615.864677][T15628]  ? refcount_inc+0x70/0x70
[  615.869178][T15628]  ? memcpy+0x3c/0x60
[  615.873158][T15628]  ? __copy_skb_header+0x3ba/0x4f0
[  615.878277][T15628]  ? __skb_clone+0x446/0x6c0
[  615.882879][T15628]  netlink_rcv_skb+0x1ef/0x440
[  615.887647][T15628]  ? rtnetlink_bind+0x80/0x80
[  615.892326][T15628]  ? netlink_ack+0x1160/0x1160
[  615.897098][T15628]  ? netlink_deliver_tap+0x2e/0x1b0
[  615.902293][T15628]  netlink_unicast+0x7ad/0x920
[  615.907073][T15628]  netlink_sendmsg+0x8ad/0xbd0
[  615.911845][T15628]  ? netlink_getsockopt+0x550/0x550
[  615.917044][T15628]  ? apparmor_socket_sendmsg+0x8a/0x330
[  615.922681][T15628]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  615.927964][T15628]  ? security_socket_sendmsg+0x7c/0xa0
[  615.933426][T15628]  ? netlink_getsockopt+0x550/0x550
[  615.938631][T15628]  ____sys_sendmsg+0x5ed/0x9a0
[  615.943407][T15628]  ? __sys_sendmsg_sock+0x30/0x30
[  615.948433][T15628]  ? __import_iovec+0x306/0x510
[  615.953294][T15628]  ? import_iovec+0x6f/0xa0
[  615.957806][T15628]  ___sys_sendmsg+0x2a2/0x360
[  615.962492][T15628]  ? __sys_sendmsg+0x2a0/0x2a0
[  615.967279][T15628]  ? __lock_acquire+0x7c40/0x7c40
[  615.972336][T15628]  __se_sys_sendmsg+0x1c3/0x2b0
[  615.977197][T15628]  ? __x64_sys_sendmsg+0x80/0x80
[  615.982161][T15628]  ? lockdep_hardirqs_on+0x94/0x140
[  615.987371][T15628]  do_syscall_64+0x4c/0xa0
[  615.991821][T15628]  ? clear_bhb_loop+0x60/0xb0
[  615.996502][T15628]  ? clear_bhb_loop+0x60/0xb0
[  616.001218][T15628]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.007116][T15628] RIP: 0033:0x7f7f88b9e0d9
[  616.011532][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.031165][T15628] RSP: 002b:00007f7f89aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  616.039580][T15628] RAX: ffffffffffffffda RBX: 00007f7f88e25fa0 RCX: 00007f7f88b9e0d9
[  616.047571][T15628] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  616.055544][T15628] RBP: 00007f7f89aaf090 R08: 0000000000000000 R09: 0000000000000000
[  616.063516][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.071520][T15628] R13: 00007f7f88e26038 R14: 00007f7f88e25fa0 R15: 00007ffc4c442628
[  616.079511][T15628]  </TASK>
[  616.184874][T15642] netlink: 'syz.4.3672': attribute type 39 has an invalid length.
[  616.273317][T15631] netlink: 'syz.4.3672': attribute type 39 has an invalid length.
[  616.348958][T15650] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3675'.
[  616.614542][T15657] netlink: 'syz.0.3678': attribute type 4 has an invalid length.
[  616.636844][T15657] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3678'.
[  643.529080][T14899] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2687 jiffies s: 63957 root: 0x2/.
[  643.529202][T14899] rcu: blocking rcu_node structures (internal RCU debug):
[  643.529227][T14899] Sending NMI from CPU 0 to CPUs 1:
[  643.529255][    C1] NMI backtrace for cpu 1
[  643.529264][    C1] CPU: 1 PID: 15657 Comm: syz.0.3678 Not tainted syzkaller #0
[  643.529280][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  643.529288][    C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20
[  643.529315][    C1] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 4a c3 f0 ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 1a c8 f0 ff
[  643.529327][    C1] RSP: 0018:ffffc900001e0738 EFLAGS: 00000006
[  643.529339][    C1] RAX: ce44a0838293b200 RBX: 1ffff9200003c0f4 RCX: ce44a0838293b200
[  643.529351][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120
[  643.529362][    C1] RBP: ffffc900001e0860 R08: ffffffff90b12337 R09: 1ffffffff2162466
[  643.529372][    C1] R10: dffffc0000000000 R11: fffffbfff2162467 R12: 0000000000000246
[  643.529383][    C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002
[  643.529393][    C1] FS:  00007fcd1aef26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  643.529406][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  643.529416][    C1] CR2: 0000200000000140 CR3: 000000005f557000 CR4: 00000000003506e0
[  643.529429][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  643.529438][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  643.529447][    C1] Call Trace:
[  643.529453][    C1]  <IRQ>
[  643.529458][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  643.529474][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  643.529486][    C1] RSP: 0018:ffffc900001e0760 EFLAGS: 00000206
[  643.529502][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  643.529518][    C1]  ? nf_hook+0x390/0x390
[  643.529531][    C1]  ? ip6_mtu+0x31a/0x3f0
[  643.529547][    C1]  ? ip6_finish_output+0x563/0x7f0
[  643.529643][    C1]  __rcu_read_unlock+0x78/0xd0
[  643.529658][    C1]  ndisc_send_skb+0xdc2/0x1520
[  643.529678][    C1]  ? ndisc_send_skb+0x1f0/0x1520
[  643.529699][    C1]  ? ndisc_mc_map+0x800/0x800
[  643.529714][    C1]  ? rcu_is_watching+0x11/0xa0
[  643.529735][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  643.529761][    C1]  addrconf_rs_timer+0x367/0x640
[  643.529782][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  643.529804][    C1]  call_timer_fn+0x1ac/0x670
[  643.529818][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  643.529835][    C1]  ? call_timer_fn+0xcf/0x670
[  643.529849][    C1]  ? __run_timers+0x810/0x810
[  643.529866][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  643.529881][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  643.529897][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  643.529912][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  643.529930][    C1]  __run_timers+0x56c/0x810
[  643.529950][    C1]  ? detach_timer+0x350/0x350
[  643.529971][    C1]  run_timer_softirq+0x63/0xf0
[  643.529985][    C1]  handle_softirqs+0x291/0x910
[  643.530002][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  643.530017][    C1]  ? do_softirq+0x210/0x210
[  643.530029][    C1]  ? hrtimer_interrupt+0x775/0x980
[  643.530046][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  643.530062][    C1]  __irq_exit_rcu+0x13b/0x230
[  643.530075][    C1]  ? irq_exit_rcu+0x20/0x20
[  643.530093][    C1]  irq_exit_rcu+0x5/0x20
[  643.530105][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  643.530128][    C1]  </IRQ>
[  643.530133][    C1]  <TASK>
[  643.530138][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  643.530155][    C1] RIP: 0010:console_emit_next_record+0x92f/0xb50
[  643.530186][    C1] Code: 0f 85 af 00 00 00 e8 60 ae 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 51 ae 1a 00 eb 06 e8 4a ae 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06
[  643.530197][    C1] RSP: 0018:ffffc9000370edc0 EFLAGS: 00000283
[  643.530209][    C1] RAX: ffffffff81678346 RBX: 0000000000000001 RCX: 0000000000080000
[  643.530219][    C1] RDX: ffffc900144e8000 RSI: 00000000000163b4 RDI: 00000000000163b5
[  643.530229][    C1] RBP: ffffc9000370efe0 R08: ffffffff90b12247 R09: 1ffffffff2162448
[  643.530240][    C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 1ffff920006e1e03
[  643.530251][    C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920006e1dc4
[  643.530264][    C1]  ? console_emit_next_record+0x926/0xb50
[  643.530287][    C1]  ? console_emit_next_record+0x68f/0xb50
[  643.530309][    C1]  ? info_print_prefix+0x360/0x360
[  643.530332][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  643.530354][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[  643.530374][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[  643.530392][    C1]  ? _printk+0xda/0x130
[  643.530407][    C1]  ? _printk+0xda/0x130
[  643.530421][    C1]  ? console_trylock+0x160/0x160
[  643.530440][    C1]  console_unlock+0x223/0x630
[  643.530459][    C1]  ? _printk+0xda/0x130
[  643.530475][    C1]  vprintk_emit+0x4b3/0x6a0
[  643.530494][    C1]  ? printk_sprint+0x460/0x460
[  643.530511][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  643.530527][    C1]  ? _raw_spin_unlock+0x40/0x40
[  643.530547][    C1]  _printk+0xda/0x130
[  643.530564][    C1]  ? load_image+0x410/0x410
[  643.530578][    C1]  ? kasan_set_track+0x60/0x70
[  643.530596][    C1]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  643.530612][    C1]  ? genl_rcv_msg+0x601/0x790
[  643.530625][    C1]  ? netlink_rcv_skb+0x1ef/0x440
[  643.530643][    C1]  ? genl_rcv+0x24/0x40
[  643.530655][    C1]  ? netlink_sendmsg+0x8ad/0xbd0
[  643.530670][    C1]  __nla_validate_parse+0x20c1/0x2970
[  643.530699][    C1]  ? __nla_validate+0x50/0x50
[  643.530721][    C1]  ? __kmem_cache_alloc_node+0x19d/0x270
[  643.530739][    C1]  __nla_parse+0x3c/0x50
[  643.530758][    C1]  genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  643.530776][    C1]  genl_family_rcv_msg_doit+0xe6/0x350
[  643.530791][    C1]  ? end_current_label_crit_section+0x170/0x170
[  643.530811][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  643.530826][    C1]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  643.530842][    C1]  ? apparmor_capable+0x12c/0x190
[  643.530859][    C1]  ? bpf_lsm_capable+0x5/0x10
[  643.530875][    C1]  ? security_capable+0x85/0xb0
[  643.530897][    C1]  genl_rcv_msg+0x601/0x790
[  643.530915][    C1]  ? genl_bind+0x360/0x360
[  643.530927][    C1]  ? l2tp_nl_cmd_session_modify+0x5e0/0x5e0
[  643.530986][    C1]  ? l2tp_nl_cmd_session_get+0x1e0/0x1e0
[  643.531008][    C1]  netlink_rcv_skb+0x1ef/0x440
[  643.531028][    C1]  ? genl_bind+0x360/0x360
[  643.531042][    C1]  ? netlink_ack+0x1160/0x1160
[  643.531066][    C1]  ? down_read+0x1a8/0x2d0
[  643.531081][    C1]  genl_rcv+0x24/0x40
[  643.531093][    C1]  netlink_unicast+0x7ad/0x920
[  643.531121][    C1]  netlink_sendmsg+0x8ad/0xbd0
[  643.531139][    C1]  ? netlink_getsockopt+0x550/0x550
[  643.531153][    C1]  ? apparmor_socket_sendmsg+0x8a/0x330
[  643.531171][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  643.531185][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  643.531202][    C1]  ? netlink_getsockopt+0x550/0x550
[  643.531216][    C1]  ____sys_sendmsg+0x5ed/0x9a0
[  643.531240][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  643.531258][    C1]  ? __import_iovec+0x306/0x510
[  643.531280][    C1]  ? import_iovec+0x6f/0xa0
[  643.531299][    C1]  ___sys_sendmsg+0x2a2/0x360
[  643.531319][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  643.531359][    C1]  __se_sys_sendmsg+0x1c3/0x2b0
[  643.531376][    C1]  ? ct_nmi_exit+0x145/0x1c0
[  643.531392][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  643.531417][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  643.531434][    C1]  do_syscall_64+0x4c/0xa0
[  643.531452][    C1]  ? clear_bhb_loop+0x60/0xb0
[  643.531470][    C1]  ? clear_bhb_loop+0x60/0xb0
[  643.531488][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.531506][    C1] RIP: 0033:0x7fcd19f9e0d9
[  643.531519][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.531529][    C1] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  643.531543][    C1] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  643.531552][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  643.531561][    C1] RBP: 00007fcd1a035024 R08: 0000000000000000 R09: 0000000000000000
[  643.531571][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  643.531579][    C1] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  643.531596][    C1]  </TASK>
[  708.328969][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  721.648888][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  721.648910][    C0] rcu: 	1-....: (2 ticks this GP) idle=fcdc/1/0x4000000000000000 softirq=57359/57359 fqs=5250
[  721.649495][    C0] 	(detected by 0, t=10502 jiffies, g=79041, q=537 ncpus=2)
[  721.649517][    C0] Sending NMI from CPU 0 to CPUs 1:
[  721.649541][    C1] NMI backtrace for cpu 1
[  721.649551][    C1] CPU: 1 PID: 15657 Comm: syz.0.3678 Not tainted syzkaller #0
[  721.649566][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  721.649575][    C1] RIP: 0010:__virt_addr_valid+0x24/0x540
[  721.649603][    C1] Code: 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 48 89 fb e8 3e 44 48 00 48 bf ff ff ff 7f ff ff ff ff 48 89 de e8 0c 48 48 00 <49> 89 de 49 81 ee 00 00 00 80 0f 83 40 04 00 00 48 b8 00 00 00 00
[  721.649614][    C1] RSP: 0018:ffffc900001dfe80 EFLAGS: 00000046
[  721.649628][    C1] RAX: ffffffff8139ed64 RBX: ffff8880b8f3bbf0 RCX: ffff8880282b8000
[  721.649639][    C1] RDX: 0000000000000100 RSI: ffff8880b8f3bbf0 RDI: ffffffff7fffffff
[  721.649649][    C1] RBP: 0000000000000001 R08: ffff8880b8f3bbfb R09: 1ffff110171e777f
[  721.649659][    C1] R10: dffffc0000000000 R11: ffffed10171e7780 R12: 0000000000000000
[  721.649668][    C1] R13: dffffc0000000001 R14: ffff8880b8f3bbf0 R15: ffff8880b8f3bbf8
[  721.649678][    C1] FS:  00007fcd1aef26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  721.649691][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  721.649701][    C1] CR2: 0000200000000140 CR3: 000000005f557000 CR4: 00000000003506e0
[  721.649714][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  721.649723][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  721.649732][    C1] Call Trace:
[  721.649737][    C1]  <IRQ>
[  721.649745][    C1]  kasan_addr_to_slab+0x9/0xc0
[  721.649765][    C1]  __kasan_record_aux_stack+0xf/0xc0
[  721.649779][    C1]  irq_work_queue_on+0x10f/0x260
[  721.649809][    C1]  rcu_read_unlock_special+0x3c9/0x510
[  721.649827][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  721.649842][    C1]  ? __perf_cgroup_move+0x150/0x150
[  721.649863][    C1]  __rcu_read_unlock+0x78/0xd0
[  721.649877][    C1]  perf_event_output_forward+0x271/0x2f0
[  721.649897][    C1]  ? perf_event_output_forward+0xbe/0x2f0
[  721.649915][    C1]  ? perf_get_page_size+0x430/0x430
[  721.649935][    C1]  ? __update_load_avg_se+0x6dd/0xb40
[  721.649952][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  721.649972][    C1]  __perf_event_overflow+0x457/0x630
[  721.649994][    C1]  perf_swevent_event+0x315/0x570
[  721.650014][    C1]  ? perf_tp_event+0xc10/0xc10
[  721.650033][    C1]  ? perf_trace_buf_alloc+0x300/0x300
[  721.650053][    C1]  perf_tp_event+0x36b/0xc10
[  721.650074][    C1]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  721.650093][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  721.650129][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  721.650142][    C1]  ? sched_clock_cpu+0x6e/0x260
[  721.650159][    C1]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  721.650180][    C1]  perf_trace_preemptirq_template+0x268/0x320
[  721.650199][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  721.650218][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  721.650236][    C1]  ? __irq_exit_rcu+0x147/0x230
[  721.650250][    C1]  ? irq_exit_rcu+0x20/0x20
[  721.650264][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  721.650282][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[  721.650301][    C1]  trace_hardirqs_on+0x24/0x40
[  721.650318][    C1]  asm_sysvec_irq_work+0x16/0x20
[  721.650335][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  721.650350][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  721.650361][    C1] RSP: 0018:ffffc900001e0760 EFLAGS: 00000206
[  721.650372][    C1] RAX: ce44a0838293b200 RBX: 1ffff9200003c0f4 RCX: ce44a0838293b200
[  721.650383][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120
[  721.650393][    C1] RBP: ffffc900001e0860 R08: ffffffff90b12337 R09: 1ffffffff2162466
[  721.650403][    C1] R10: dffffc0000000000 R11: fffffbfff2162467 R12: 0000000000000246
[  721.650413][    C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002
[  721.650433][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  721.650448][    C1]  ? nf_hook+0x390/0x390
[  721.650461][    C1]  ? ip6_mtu+0x31a/0x3f0
[  721.650476][    C1]  ? ip6_finish_output+0x563/0x7f0
[  721.650497][    C1]  __rcu_read_unlock+0x78/0xd0
[  721.650511][    C1]  ndisc_send_skb+0xdc2/0x1520
[  721.650530][    C1]  ? ndisc_send_skb+0x1f0/0x1520
[  721.650550][    C1]  ? ndisc_mc_map+0x800/0x800
[  721.650566][    C1]  ? rcu_is_watching+0x11/0xa0
[  721.650585][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  721.650611][    C1]  addrconf_rs_timer+0x367/0x640
[  721.650630][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  721.650652][    C1]  call_timer_fn+0x1ac/0x670
[  721.650667][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  721.650684][    C1]  ? call_timer_fn+0xcf/0x670
[  721.650697][    C1]  ? __run_timers+0x810/0x810
[  721.650714][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  721.650729][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  721.650745][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  721.650760][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  721.650777][    C1]  __run_timers+0x56c/0x810
[  721.650810][    C1]  ? detach_timer+0x350/0x350
[  721.650831][    C1]  run_timer_softirq+0x63/0xf0
[  721.650844][    C1]  handle_softirqs+0x291/0x910
[  721.650860][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  721.650875][    C1]  ? do_softirq+0x210/0x210
[  721.650886][    C1]  ? hrtimer_interrupt+0x775/0x980
[  721.650903][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  721.650917][    C1]  __irq_exit_rcu+0x13b/0x230
[  721.650930][    C1]  ? irq_exit_rcu+0x20/0x20
[  721.650947][    C1]  irq_exit_rcu+0x5/0x20
[  721.650959][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  721.650974][    C1]  </IRQ>
[  721.650978][    C1]  <TASK>
[  721.650983][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  721.651001][    C1] RIP: 0010:console_emit_next_record+0x92f/0xb50
[  721.651022][    C1] Code: 0f 85 af 00 00 00 e8 60 ae 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 51 ae 1a 00 eb 06 e8 4a ae 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06
[  721.651033][    C1] RSP: 0018:ffffc9000370edc0 EFLAGS: 00000283
[  721.651044][    C1] RAX: ffffffff81678346 RBX: 0000000000000001 RCX: 0000000000080000
[  721.651053][    C1] RDX: ffffc900144e8000 RSI: 00000000000163b4 RDI: 00000000000163b5
[  721.651063][    C1] RBP: ffffc9000370efe0 R08: ffffffff90b12247 R09: 1ffffffff2162448
[  721.651073][    C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 1ffff920006e1e03
[  721.651084][    C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920006e1dc4
[  721.651097][    C1]  ? console_emit_next_record+0x926/0xb50
[  721.651120][    C1]  ? console_emit_next_record+0x68f/0xb50
[  721.651142][    C1]  ? info_print_prefix+0x360/0x360
[  721.651166][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  721.651187][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[  721.651207][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[  721.651225][    C1]  ? _printk+0xda/0x130
[  721.651242][    C1]  ? _printk+0xda/0x130
[  721.651255][    C1]  ? console_trylock+0x160/0x160
[  721.651273][    C1]  console_unlock+0x223/0x630
[  721.651292][    C1]  ? _printk+0xda/0x130
[  721.651307][    C1]  vprintk_emit+0x4b3/0x6a0
[  721.651326][    C1]  ? printk_sprint+0x460/0x460
[  721.651344][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  721.651360][    C1]  ? _raw_spin_unlock+0x40/0x40
[  721.651379][    C1]  _printk+0xda/0x130
[  721.651396][    C1]  ? load_image+0x410/0x410
[  721.651410][    C1]  ? kasan_set_track+0x60/0x70
[  721.651427][    C1]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  721.651442][    C1]  ? genl_rcv_msg+0x601/0x790
[  721.651455][    C1]  ? netlink_rcv_skb+0x1ef/0x440
[  721.651473][    C1]  ? genl_rcv+0x24/0x40
[  721.651486][    C1]  ? netlink_sendmsg+0x8ad/0xbd0
[  721.651499][    C1]  __nla_validate_parse+0x20c1/0x2970
[  721.651528][    C1]  ? __nla_validate+0x50/0x50
[  721.651551][    C1]  ? __kmem_cache_alloc_node+0x19d/0x270
[  721.651567][    C1]  __nla_parse+0x3c/0x50
[  721.651586][    C1]  genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  721.651605][    C1]  genl_family_rcv_msg_doit+0xe6/0x350
[  721.651621][    C1]  ? end_current_label_crit_section+0x170/0x170
[  721.651641][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  721.651655][    C1]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  721.651672][    C1]  ? apparmor_capable+0x12c/0x190
[  721.651688][    C1]  ? bpf_lsm_capable+0x5/0x10
[  721.651704][    C1]  ? security_capable+0x85/0xb0
[  721.651726][    C1]  genl_rcv_msg+0x601/0x790
[  721.651744][    C1]  ? genl_bind+0x360/0x360
[  721.651757][    C1]  ? l2tp_nl_cmd_session_modify+0x5e0/0x5e0
[  721.651775][    C1]  ? l2tp_nl_cmd_session_get+0x1e0/0x1e0
[  721.651802][    C1]  netlink_rcv_skb+0x1ef/0x440
[  721.651822][    C1]  ? genl_bind+0x360/0x360
[  721.651836][    C1]  ? netlink_ack+0x1160/0x1160
[  721.651859][    C1]  ? down_read+0x1a8/0x2d0
[  721.651873][    C1]  genl_rcv+0x24/0x40
[  721.651885][    C1]  netlink_unicast+0x7ad/0x920
[  721.651908][    C1]  netlink_sendmsg+0x8ad/0xbd0
[  721.651925][    C1]  ? netlink_getsockopt+0x550/0x550
[  721.651939][    C1]  ? apparmor_socket_sendmsg+0x8a/0x330
[  721.651957][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  721.651970][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  721.651987][    C1]  ? netlink_getsockopt+0x550/0x550
[  721.652001][    C1]  ____sys_sendmsg+0x5ed/0x9a0
[  721.652026][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  721.652043][    C1]  ? __import_iovec+0x306/0x510
[  721.652066][    C1]  ? import_iovec+0x6f/0xa0
[  721.652085][    C1]  ___sys_sendmsg+0x2a2/0x360
[  721.652106][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  721.652145][    C1]  __se_sys_sendmsg+0x1c3/0x2b0
[  721.652164][    C1]  ? ct_nmi_exit+0x145/0x1c0
[  721.652179][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  721.652204][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  721.652220][    C1]  do_syscall_64+0x4c/0xa0
[  721.652238][    C1]  ? clear_bhb_loop+0x60/0xb0
[  721.652255][    C1]  ? clear_bhb_loop+0x60/0xb0
[  721.652273][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  721.652290][    C1] RIP: 0033:0x7fcd19f9e0d9
[  721.652304][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.652314][    C1] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  721.652329][    C1] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  721.652339][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  721.652348][    C1] RBP: 00007fcd1a035024 R08: 0000000000000000 R09: 0000000000000000
[  721.652357][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  721.652366][    C1] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  721.652383][    C1]  </TASK>
[  726.730329][T14899] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 11007 jiffies s: 63957 root: 0x2/.
[  726.730388][T14899] rcu: blocking rcu_node structures (internal RCU debug):
[  726.730408][T14899] Sending NMI from CPU 0 to CPUs 1:
[  726.730436][    C1] NMI backtrace for cpu 1
[  726.730446][    C1] CPU: 1 PID: 15657 Comm: syz.0.3678 Not tainted syzkaller #0
[  726.730462][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.730470][    C1] RIP: 0010:irq_exit_rcu+0x5/0x20
[  726.730490][    C1] Code: 80 c1 03 38 c1 7c 81 48 89 df e8 46 23 84 00 e9 74 ff ff ff 90 e8 5b c1 e1 08 e9 16 ff ff ff 66 0f 1f 44 00 00 e8 1b 00 00 00 <48> c7 c7 40 0e 8b 8a e8 3f c5 e1 08 65 ff 0d ec 2d b3 7e c3 0f 1f
[  726.730503][    C1] RSP: 0018:ffffc900001e0698 EFLAGS: 00000046
[  726.730515][    C1] RAX: ce44a0838293b200 RBX: ffffc900001e06b8 RCX: ce44a0838293b200
[  726.730526][    C1] RDX: 1ffffffff1f44e08 RSI: ffffffff8adf6100 RDI: ffff8880b8f3b718
[  726.730537][    C1] RBP: 0000000000000000 R08: ffffffff8fa27048 R09: ffffffff8fa27058
[  726.730547][    C1] R10: ffffffff8fa27050 R11: ffffffff8fa27043 R12: 0000000000000000
[  726.730557][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  726.730566][    C1] FS:  00007fcd1aef26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  726.730579][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  726.730589][    C1] CR2: 0000200000000140 CR3: 000000005f557000 CR4: 00000000003506e0
[  726.730603][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  726.730612][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  726.730621][    C1] Call Trace:
[  726.730626][    C1]  <IRQ>
[  726.730631][    C1]  sysvec_irq_work+0x4f/0xc0
[  726.730648][    C1]  asm_sysvec_irq_work+0x16/0x20
[  726.730667][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  726.730683][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  726.730694][    C1] RSP: 0018:ffffc900001e0760 EFLAGS: 00000206
[  726.730705][    C1] RAX: ce44a0838293b200 RBX: 1ffff9200003c0f4 RCX: ce44a0838293b200
[  726.730716][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120
[  726.730726][    C1] RBP: ffffc900001e0860 R08: ffffffff90b12337 R09: 1ffffffff2162466
[  726.730736][    C1] R10: dffffc0000000000 R11: fffffbfff2162467 R12: 0000000000000246
[  726.730746][    C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002
[  726.730767][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  726.730782][    C1]  ? nf_hook+0x390/0x390
[  726.730795][    C1]  ? ip6_mtu+0x31a/0x3f0
[  726.730811][    C1]  ? ip6_finish_output+0x563/0x7f0
[  726.730831][    C1]  __rcu_read_unlock+0x78/0xd0
[  726.730846][    C1]  ndisc_send_skb+0xdc2/0x1520
[  726.730865][    C1]  ? ndisc_send_skb+0x1f0/0x1520
[  726.730886][    C1]  ? ndisc_mc_map+0x800/0x800
[  726.730901][    C1]  ? rcu_is_watching+0x11/0xa0
[  726.730921][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  726.730947][    C1]  addrconf_rs_timer+0x367/0x640
[  726.730967][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  726.730989][    C1]  call_timer_fn+0x1ac/0x670
[  726.731004][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  726.731020][    C1]  ? call_timer_fn+0xcf/0x670
[  726.731034][    C1]  ? __run_timers+0x810/0x810
[  726.731050][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  726.731066][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  726.731082][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  726.731096][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  726.731114][    C1]  __run_timers+0x56c/0x810
[  726.731134][    C1]  ? detach_timer+0x350/0x350
[  726.731155][    C1]  run_timer_softirq+0x63/0xf0
[  726.731169][    C1]  handle_softirqs+0x291/0x910
[  726.731185][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  726.731200][    C1]  ? do_softirq+0x210/0x210
[  726.731212][    C1]  ? hrtimer_interrupt+0x775/0x980
[  726.731228][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  726.731244][    C1]  __irq_exit_rcu+0x13b/0x230
[  726.731257][    C1]  ? irq_exit_rcu+0x20/0x20
[  726.731275][    C1]  irq_exit_rcu+0x5/0x20
[  726.731286][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  726.731302][    C1]  </IRQ>
[  726.731306][    C1]  <TASK>
[  726.731311][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  726.731335][    C1] RIP: 0010:console_emit_next_record+0x92f/0xb50
[  726.731356][    C1] Code: 0f 85 af 00 00 00 e8 60 ae 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 51 ae 1a 00 eb 06 e8 4a ae 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06
[  726.731367][    C1] RSP: 0018:ffffc9000370edc0 EFLAGS: 00000283
[  726.731378][    C1] RAX: ffffffff81678346 RBX: 0000000000000001 RCX: 0000000000080000
[  726.731388][    C1] RDX: ffffc900144e8000 RSI: 00000000000163b4 RDI: 00000000000163b5
[  726.731398][    C1] RBP: ffffc9000370efe0 R08: ffffffff90b12247 R09: 1ffffffff2162448
[  726.731408][    C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 1ffff920006e1e03
[  726.731419][    C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920006e1dc4
[  726.731431][    C1]  ? console_emit_next_record+0x926/0xb50
[  726.731454][    C1]  ? console_emit_next_record+0x68f/0xb50
[  726.731476][    C1]  ? info_print_prefix+0x360/0x360
[  726.731499][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  726.731521][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[  726.731541][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[  726.731559][    C1]  ? _printk+0xda/0x130
[  726.731575][    C1]  ? _printk+0xda/0x130
[  726.731589][    C1]  ? console_trylock+0x160/0x160
[  726.731607][    C1]  console_unlock+0x223/0x630
[  726.731626][    C1]  ? _printk+0xda/0x130
[  726.731641][    C1]  vprintk_emit+0x4b3/0x6a0
[  726.731660][    C1]  ? printk_sprint+0x460/0x460
[  726.731678][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  726.731694][    C1]  ? _raw_spin_unlock+0x40/0x40
[  726.731714][    C1]  _printk+0xda/0x130
[  726.731731][    C1]  ? load_image+0x410/0x410
[  726.731745][    C1]  ? kasan_set_track+0x60/0x70
[  726.731763][    C1]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  726.731778][    C1]  ? genl_rcv_msg+0x601/0x790
[  726.731791][    C1]  ? netlink_rcv_skb+0x1ef/0x440
[  726.731808][    C1]  ? genl_rcv+0x24/0x40
[  726.731821][    C1]  ? netlink_sendmsg+0x8ad/0xbd0
[  726.731836][    C1]  __nla_validate_parse+0x20c1/0x2970
[  726.731865][    C1]  ? __nla_validate+0x50/0x50
[  726.731887][    C1]  ? __kmem_cache_alloc_node+0x19d/0x270
[  726.731905][    C1]  __nla_parse+0x3c/0x50
[  726.731924][    C1]  genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  726.731943][    C1]  genl_family_rcv_msg_doit+0xe6/0x350
[  726.731958][    C1]  ? end_current_label_crit_section+0x170/0x170
[  726.731979][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  726.731993][    C1]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  726.732010][    C1]  ? apparmor_capable+0x12c/0x190
[  726.732026][    C1]  ? bpf_lsm_capable+0x5/0x10
[  726.732043][    C1]  ? security_capable+0x85/0xb0
[  726.732065][    C1]  genl_rcv_msg+0x601/0x790
[  726.732083][    C1]  ? genl_bind+0x360/0x360
[  726.732096][    C1]  ? l2tp_nl_cmd_session_modify+0x5e0/0x5e0
[  726.732114][    C1]  ? l2tp_nl_cmd_session_get+0x1e0/0x1e0
[  726.732136][    C1]  netlink_rcv_skb+0x1ef/0x440
[  726.732156][    C1]  ? genl_bind+0x360/0x360
[  726.732170][    C1]  ? netlink_ack+0x1160/0x1160
[  726.732193][    C1]  ? down_read+0x1a8/0x2d0
[  726.732207][    C1]  genl_rcv+0x24/0x40
[  726.732220][    C1]  netlink_unicast+0x7ad/0x920
[  726.732244][    C1]  netlink_sendmsg+0x8ad/0xbd0
[  726.732262][    C1]  ? netlink_getsockopt+0x550/0x550
[  726.732276][    C1]  ? apparmor_socket_sendmsg+0x8a/0x330
[  726.732294][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  726.732308][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  726.732324][    C1]  ? netlink_getsockopt+0x550/0x550
[  726.732343][    C1]  ____sys_sendmsg+0x5ed/0x9a0
[  726.732368][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  726.732386][    C1]  ? __import_iovec+0x306/0x510
[  726.732407][    C1]  ? import_iovec+0x6f/0xa0
[  726.732426][    C1]  ___sys_sendmsg+0x2a2/0x360
[  726.732448][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  726.732488][    C1]  __se_sys_sendmsg+0x1c3/0x2b0
[  726.732506][    C1]  ? ct_nmi_exit+0x145/0x1c0
[  726.732522][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  726.732547][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  726.732563][    C1]  do_syscall_64+0x4c/0xa0
[  726.732581][    C1]  ? clear_bhb_loop+0x60/0xb0
[  726.732598][    C1]  ? clear_bhb_loop+0x60/0xb0
[  726.732617][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.732634][    C1] RIP: 0033:0x7fcd19f9e0d9
[  726.732648][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.732659][    C1] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  726.732672][    C1] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  726.732683][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  726.732692][    C1] RBP: 00007fcd1a035024 R08: 0000000000000000 R09: 0000000000000000
[  726.732701][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  726.732710][    C1] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  726.732727][    C1]  </TASK>
[  761.289028][   T27] INFO: task rcu_tasks_trace:13 blocked for more than 143 seconds.
[  761.289057][   T27]       Not tainted syzkaller #0
[  761.289071][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.289094][   T27] task:rcu_tasks_trace state:D stack:27392 pid:13    ppid:2      flags:0x00004000
[  761.289140][   T27] Call Trace:
[  761.289150][   T27]  <TASK>
[  761.289165][   T27]  __schedule+0x107f/0x4030
[  761.289211][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  761.289238][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.289265][   T27]  ? _raw_spin_unlock+0x40/0x40
[  761.289290][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.289319][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  761.289348][   T27]  ? prepare_to_wait_event+0x430/0x470
[  761.289379][   T27]  schedule+0xb9/0x180
[  761.289407][   T27]  synchronize_rcu_expedited+0x7ad/0x890
[  761.289441][   T27]  ? synchronize_rcu+0x3f0/0x3f0
[  761.289470][   T27]  ? wake_bit_function+0x200/0x200
[  761.289545][   T27]  synchronize_rcu+0x128/0x3f0
[  761.289574][   T27]  ? schedule_delayed_monitor_work+0x160/0x160
[  761.289648][   T27]  ? cpus_read_unlock+0xa2/0x130
[  761.289673][   T27]  ? rcu_tasks_trace_pregp_step+0x102a/0x1070
[  761.289709][   T27]  ? rcu_tasks_kthread+0x90/0x90
[  761.289739][   T27]  ? mark_lock+0x94/0x320
[  761.289769][   T27]  rcu_tasks_wait_gp+0x49f/0xac0
[  761.289798][   T27]  ? lock_chain_count+0x20/0x20
[  761.289829][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  761.289854][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.289878][   T27]  ? rcu_tasks_invoke_cbs+0x670/0x670
[  761.289903][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  761.289928][   T27]  ? _raw_spin_unlock+0x40/0x40
[  761.289963][   T27]  rcu_tasks_one_gp+0xd27/0xef0
[  761.290000][   T27]  ? rcu_tasks_one_gp+0xe5/0xef0
[  761.290035][   T27]  rcu_tasks_kthread+0x6e/0x90
[  761.290063][   T27]  kthread+0x29d/0x330
[  761.290082][   T27]  ? rcu_tasks_postgp+0x10/0x10
[  761.290167][   T27]  ? kthread_blkcg+0xd0/0xd0
[  761.290189][   T27]  ret_from_fork+0x1f/0x30
[  761.290261][   T27]  </TASK>
[  761.290376][   T27] INFO: task kworker/u4:11:9301 blocked for more than 143 seconds.
[  761.290394][   T27]       Not tainted syzkaller #0
[  761.290407][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.290418][   T27] task:kworker/u4:11   state:D stack:22064 pid:9301  ppid:2      flags:0x00004000
[  761.290461][   T27] Workqueue: events_unbound linkwatch_event
[  761.290527][   T27] Call Trace:
[  761.290537][   T27]  <TASK>
[  761.290551][   T27]  __schedule+0x107f/0x4030
[  761.290602][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.290631][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.290663][   T27]  ? wq_worker_sleeping+0x60/0x280
[  761.290689][   T27]  schedule+0xb9/0x180
[  761.290718][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.290747][   T27]  __mutex_lock+0x548/0xae0
[  761.290770][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.290795][   T27]  ? linkwatch_event+0xa/0x50
[  761.290819][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.290846][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.290870][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.290895][   T27]  ? process_one_work+0x7b4/0x1160
[  761.290921][   T27]  linkwatch_event+0xa/0x50
[  761.290942][   T27]  process_one_work+0x8ab/0x1160
[  761.290980][   T27]  ? worker_detach_from_pool+0x240/0x240
[  761.291002][   T27]  ? _raw_spin_lock_irq+0x86/0xf0
[  761.291031][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  761.291056][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  761.291085][   T27]  ? wq_worker_running+0x97/0x190
[  761.291119][   T27]  worker_thread+0xaf5/0x12a0
[  761.291158][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  761.291194][   T27]  kthread+0x29d/0x330
[  761.291214][   T27]  ? worker_clr_flags+0x1a0/0x1a0
[  761.291237][   T27]  ? kthread_blkcg+0xd0/0xd0
[  761.291262][   T27]  ret_from_fork+0x1f/0x30
[  761.291300][   T27]  </TASK>
[  761.291327][   T27] INFO: task syz.4.3672:15629 blocked for more than 143 seconds.
[  761.291344][   T27]       Not tainted syzkaller #0
[  761.291357][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.291368][   T27] task:syz.4.3672      state:D stack:25264 pid:15629 ppid:15062  flags:0x00004004
[  761.291408][   T27] Call Trace:
[  761.291417][   T27]  <TASK>
[  761.291431][   T27]  __schedule+0x107f/0x4030
[  761.291490][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.291520][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.291549][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.291584][   T27]  schedule+0xb9/0x180
[  761.291613][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.291647][   T27]  __mutex_lock+0x548/0xae0
[  761.291671][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.291696][   T27]  ? synchronize_rcu_expedited+0x3c0/0x890
[  761.291729][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.291750][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  761.291774][   T27]  ? __rwlock_init+0x140/0x140
[  761.291799][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  761.291825][   T27]  synchronize_rcu_expedited+0x3c0/0x890
[  761.291860][   T27]  ? synchronize_rcu+0x3f0/0x3f0
[  761.291890][   T27]  ? __free_object+0x218/0xa60
[  761.291921][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.291962][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  761.291991][   T27]  ? lock_chain_count+0x20/0x20
[  761.292045][   T27]  synchronize_rcu+0x128/0x3f0
[  761.292075][   T27]  ? schedule_delayed_monitor_work+0x160/0x160
[  761.292108][   T27]  ? __synchronize_srcu+0x2bb/0x350
[  761.292137][   T27]  ? synchronize_srcu_expedited+0x20/0x20
[  761.292164][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  761.292191][   T27]  ? rcu_read_lock_any_held+0x130/0x130
[  761.292225][   T27]  ? tracepoint_probe_unregister+0x8e8/0x940
[  761.292257][   T27]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[  761.292286][   T27]  ? synchronize_srcu+0x18f/0x1b0
[  761.292318][   T27]  perf_trace_event_unreg+0xc4/0x1b0
[  761.292345][   T27]  perf_trace_destroy+0x9a/0x140
[  761.292367][   T27]  ? perf_swevent_read+0x10/0x10
[  761.292393][   T27]  _free_event+0xcca/0x1050
[  761.292424][   T27]  perf_event_release_kernel+0x7c4/0x850
[  761.292452][   T27]  ? __might_sleep+0xd0/0xd0
[  761.292477][   T27]  ? calc_timer_values+0x410/0x410
[  761.292534][   T27]  ? __might_sleep+0xd0/0xd0
[  761.292557][   T27]  ? perf_mmap+0x1470/0x1470
[  761.292582][   T27]  perf_release+0x37/0x40
[  761.292606][   T27]  __fput+0x20a/0x8b0
[  761.292638][   T27]  task_work_run+0x1d0/0x260
[  761.292668][   T27]  ? task_work_cancel+0x220/0x220
[  761.292692][   T27]  ? __close_range+0x20c/0x770
[  761.292726][   T27]  ? exit_to_user_mode_loop+0x3b/0x110
[  761.292759][   T27]  exit_to_user_mode_loop+0xe6/0x110
[  761.292788][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  761.292818][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  761.292842][   T27]  do_syscall_64+0x58/0xa0
[  761.292870][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.292896][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.292926][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.292952][   T27] RIP: 0033:0x7f59c559e0d9
[  761.292973][   T27] RSP: 002b:00007ffd35c94ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  761.292999][   T27] RAX: 0000000000000000 RBX: 00007f59c5827da0 RCX: 00007f59c559e0d9
[  761.293016][   T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  761.293032][   T27] RBP: 00007f59c5827da0 R08: 0000000000000006 R09: 0000000000000000
[  761.293047][   T27] R10: 00007f59c5827cb0 R11: 0000000000000246 R12: 0000000000096801
[  761.293063][   T27] R13: 00007f59c5825fac R14: 0000000000096724 R15: 00007ffd35c95100
[  761.293094][   T27]  </TASK>
[  761.293105][   T27] INFO: task syz.4.3672:15631 blocked for more than 143 seconds.
[  761.293122][   T27]       Not tainted syzkaller #0
[  761.293135][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.293146][   T27] task:syz.4.3672      state:D stack:22744 pid:15631 ppid:15062  flags:0x00004004
[  761.293183][   T27] Call Trace:
[  761.293193][   T27]  <TASK>
[  761.293207][   T27]  __schedule+0x107f/0x4030
[  761.293244][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  761.293280][   T27]  ? _raw_spin_unlock+0x40/0x40
[  761.293305][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.293335][   T27]  ? wq_worker_last_func+0x40/0x40
[  761.293354][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  761.293383][   T27]  ? prepare_to_wait_event+0x430/0x470
[  761.293415][   T27]  schedule+0xb9/0x180
[  761.293443][   T27]  synchronize_rcu_expedited+0x6e6/0x890
[  761.293489][   T27]  ? synchronize_rcu+0x3f0/0x3f0
[  761.293526][   T27]  ? finish_task_switch+0x262/0x8e0
[  761.293553][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.293585][   T27]  ? finish_task_switch+0x262/0x8e0
[  761.293614][   T27]  ? sync_rcu_exp_done_unlocked+0x140/0x140
[  761.293652][   T27]  ? ct_nmi_exit+0x145/0x1c0
[  761.293675][   T27]  ? ct_irq_exit_irqson+0x113/0x170
[  761.293770][   T27]  ? ct_irq_enter_irqson+0x170/0x170
[  761.293795][   T27]  ? wake_bit_function+0x200/0x200
[  761.293833][   T27]  synchronize_rcu+0x128/0x3f0
[  761.293863][   T27]  ? schedule_delayed_monitor_work+0x160/0x160
[  761.293893][   T27]  ? lock_chain_count+0x20/0x20
[  761.293927][   T27]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  761.293955][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.293980][   T27]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  761.294020][   T27]  lockdep_unregister_key+0x4d2/0x550
[  761.294051][   T27]  ? lockdep_reset_lock+0x300/0x300
[  761.294079][   T27]  ? lock_chain_count+0x20/0x20
[  761.294104][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  761.294132][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.294156][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.294182][   T27]  destroy_workqueue+0x87b/0xb20
[  761.294205][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.294231][   T27]  wg_destruct+0x1e8/0x300
[  761.294315][   T27]  ? wg_xmit+0xed0/0xed0
[  761.294342][   T27]  netdev_run_todo+0xbe3/0xdb0
[  761.294377][   T27]  ? netdev_refcnt_read+0x50/0x50
[  761.294420][   T27]  rtnetlink_rcv_msg+0xac1/0xfb0
[  761.294442][   T27]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  761.294468][   T27]  ? rtnetlink_bind+0x80/0x80
[  761.294494][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  761.294516][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.294540][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  761.294562][   T27]  ? _local_bh_enable+0xa0/0xa0
[  761.294589][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.294612][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.294637][   T27]  ? __dev_queue_xmit+0x1d84/0x3810
[  761.294668][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.294703][   T27]  ? ref_tracker_free+0x682/0x830
[  761.294733][   T27]  ? refcount_inc+0x70/0x70
[  761.294757][   T27]  ? memcpy+0x3c/0x60
[  761.294781][   T27]  ? __copy_skb_header+0x3ba/0x4f0
[  761.294813][   T27]  ? __skb_clone+0x446/0x6c0
[  761.294846][   T27]  netlink_rcv_skb+0x1ef/0x440
[  761.294877][   T27]  ? rtnetlink_bind+0x80/0x80
[  761.294900][   T27]  ? netlink_ack+0x1160/0x1160
[  761.294938][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[  761.294964][   T27]  netlink_unicast+0x7ad/0x920
[  761.295002][   T27]  netlink_sendmsg+0x8ad/0xbd0
[  761.295032][   T27]  ? netlink_getsockopt+0x550/0x550
[  761.295056][   T27]  ? apparmor_socket_sendmsg+0x8a/0x330
[  761.295086][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  761.295107][   T27]  ? security_socket_sendmsg+0x7c/0xa0
[  761.295133][   T27]  ? netlink_getsockopt+0x550/0x550
[  761.295157][   T27]  ____sys_sendmsg+0x5ed/0x9a0
[  761.295195][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  761.295222][   T27]  ? __import_iovec+0x306/0x510
[  761.295258][   T27]  ? import_iovec+0x6f/0xa0
[  761.295288][   T27]  ___sys_sendmsg+0x2a2/0x360
[  761.295322][   T27]  ? __sys_sendmsg+0x2a0/0x2a0
[  761.295395][   T27]  __se_sys_sendmsg+0x1c3/0x2b0
[  761.295427][   T27]  ? __x64_sys_sendmsg+0x80/0x80
[  761.295471][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.295505][   T27]  do_syscall_64+0x4c/0xa0
[  761.295531][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.295558][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.295587][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.295614][   T27] RIP: 0033:0x7f59c559e0d9
[  761.295633][   T27] RSP: 002b:00007f59c63bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  761.295659][   T27] RAX: ffffffffffffffda RBX: 00007f59c5825fa0 RCX: 00007f59c559e0d9
[  761.295676][   T27] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  761.295692][   T27] RBP: 00007f59c5635024 R08: 0000000000000000 R09: 0000000000000000
[  761.295707][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  761.295722][   T27] R13: 00007f59c5826038 R14: 00007f59c5825fa0 R15: 00007ffd35c94e98
[  761.295753][   T27]  </TASK>
[  761.295765][   T27] INFO: task syz.0.3678:15655 blocked for more than 143 seconds.
[  761.295781][   T27]       Not tainted syzkaller #0
[  761.295793][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.295804][   T27] task:syz.0.3678      state:D stack:26288 pid:15655 ppid:12987  flags:0x00004004
[  761.295844][   T27] Call Trace:
[  761.295853][   T27]  <TASK>
[  761.295867][   T27]  __schedule+0x107f/0x4030
[  761.295916][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.295944][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.295972][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.296003][   T27]  schedule+0xb9/0x180
[  761.296032][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.296059][   T27]  __mutex_lock+0x548/0xae0
[  761.296082][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.296106][   T27]  ? perf_trace_destroy+0x2a/0x140
[  761.296132][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.296152][   T27]  ? perf_addr_filters_splice+0x132/0x530
[  761.296181][   T27]  ? perf_detach_cgroup+0x310/0x310
[  761.296203][   T27]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  761.296226][   T27]  ? perf_swevent_read+0x10/0x10
[  761.296251][   T27]  perf_trace_destroy+0x2a/0x140
[  761.296273][   T27]  ? perf_swevent_read+0x10/0x10
[  761.296298][   T27]  _free_event+0xcca/0x1050
[  761.296328][   T27]  perf_event_release_kernel+0x7c4/0x850
[  761.296356][   T27]  ? __might_sleep+0xd0/0xd0
[  761.296380][   T27]  ? calc_timer_values+0x410/0x410
[  761.296410][   T27]  ? __might_sleep+0xd0/0xd0
[  761.296432][   T27]  ? perf_mmap+0x1470/0x1470
[  761.296456][   T27]  perf_release+0x37/0x40
[  761.296486][   T27]  __fput+0x20a/0x8b0
[  761.296517][   T27]  task_work_run+0x1d0/0x260
[  761.296545][   T27]  ? task_work_cancel+0x220/0x220
[  761.296569][   T27]  ? __close_range+0x20c/0x770
[  761.296601][   T27]  ? exit_to_user_mode_loop+0x3b/0x110
[  761.296634][   T27]  exit_to_user_mode_loop+0xe6/0x110
[  761.296662][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  761.296692][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  761.296716][   T27]  do_syscall_64+0x58/0xa0
[  761.296742][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.296768][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.296797][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.296823][   T27] RIP: 0033:0x7fcd19f9e0d9
[  761.296841][   T27] RSP: 002b:00007ffebf0a9d28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  761.296867][   T27] RAX: 0000000000000000 RBX: 00007fcd1a227da0 RCX: 00007fcd19f9e0d9
[  761.296884][   T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  761.296899][   T27] RBP: 00007fcd1a227da0 R08: 0000000000000006 R09: 0000000000000000
[  761.296915][   T27] R10: 00007fcd1a227cb0 R11: 0000000000000246 R12: 0000000000096afc
[  761.296931][   T27] R13: 00007fcd1a22609c R14: 0000000000096907 R15: 00007fcd1a226090
[  761.296962][   T27]  </TASK>
[  761.296973][   T27] INFO: task syz.3.3679:15658 blocked for more than 143 seconds.
[  761.296988][   T27]       Not tainted syzkaller #0
[  761.297000][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.297010][   T27] task:syz.3.3679      state:D stack:24496 pid:15658 ppid:13848  flags:0x00004004
[  761.297048][   T27] Call Trace:
[  761.297057][   T27]  <TASK>
[  761.297071][   T27]  __schedule+0x107f/0x4030
[  761.297108][   T27]  ? mark_lock+0x94/0x320
[  761.297135][   T27]  ? verify_lock_unused+0x140/0x140
[  761.297168][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.297228][   T27]  schedule+0xb9/0x180
[  761.297256][   T27]  schedule_timeout+0xbd/0x2d0
[  761.297280][   T27]  ? console_conditional_schedule+0x40/0x40
[  761.297302][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  761.297330][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  761.297358][   T27]  ? lock_chain_count+0x20/0x20
[  761.297383][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  761.297407][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  761.297434][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.297458][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.297489][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.297513][   T27]  ? wait_for_completion+0x26f/0x590
[  761.297542][   T27]  wait_for_completion+0x2c2/0x590
[  761.297583][   T27]  ? io_schedule+0xd0/0xd0
[  761.297619][   T27]  ? __init_swait_queue_head+0xa4/0x140
[  761.297649][   T27]  __wait_rcu_gp+0x199/0x250
[  761.297679][   T27]  synchronize_rcu_tasks_trace+0x15c/0x230
[  761.297706][   T27]  ? call_rcu_tasks_trace+0x10/0x10
[  761.297730][   T27]  ? rcu_tasks_trace_qs_blkd+0x370/0x370
[  761.297755][   T27]  ? irq_work_queue+0xb8/0x140
[  761.297784][   T27]  ? rcu_read_lock_any_held+0x130/0x130
[  761.297816][   T27]  ? call_rcu_tasks+0x10/0x10
[  761.297841][   T27]  ? bpf_prog_array_copy+0x172/0x370
[  761.297870][   T27]  perf_event_detach_bpf_prog+0x260/0x310
[  761.297894][   T27]  ? perf_event_attach_bpf_prog+0x390/0x390
[  761.297915][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  761.297937][   T27]  ? _local_bh_enable+0xa0/0xa0
[  761.297959][   T27]  ? perf_event_free_bpf_prog+0xf2/0x120
[  761.297988][   T27]  bpf_perf_link_release+0x5a/0x80
[  761.298033][   T27]  bpf_link_put+0x22a/0x2c0
[  761.298059][   T27]  ? idr_preload_end+0x200/0x200
[  761.298085][   T27]  bpf_link_release+0x37/0x40
[  761.298111][   T27]  __fput+0x20a/0x8b0
[  761.298141][   T27]  task_work_run+0x1d0/0x260
[  761.298169][   T27]  ? task_work_cancel+0x220/0x220
[  761.298193][   T27]  ? __close_range+0x20c/0x770
[  761.298224][   T27]  ? exit_to_user_mode_loop+0x3b/0x110
[  761.298256][   T27]  exit_to_user_mode_loop+0xe6/0x110
[  761.298285][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  761.298314][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  761.298337][   T27]  do_syscall_64+0x58/0xa0
[  761.298363][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.298389][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.298418][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.298444][   T27] RIP: 0033:0x7fa5aab9e0d9
[  761.298462][   T27] RSP: 002b:00007ffecbdc6aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  761.298495][   T27] RAX: 0000000000000000 RBX: 00007fa5aae27da0 RCX: 00007fa5aab9e0d9
[  761.298512][   T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  761.298527][   T27] RBP: 00007fa5aae27da0 R08: 0000000000000006 R09: 0000000000000000
[  761.298543][   T27] R10: 00007fa5aae27cb0 R11: 0000000000000246 R12: 0000000000096ba5
[  761.298559][   T27] R13: 00007fa5aae2636c R14: 0000000000096a87 R15: 00007ffecbdc6bb0
[  761.298590][   T27]  </TASK>
[  761.298601][   T27] INFO: task syz.3.3679:15659 blocked for more than 143 seconds.
[  761.298617][   T27]       Not tainted syzkaller #0
[  761.298629][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.298640][   T27] task:syz.3.3679      state:D stack:25712 pid:15659 ppid:13848  flags:0x00004004
[  761.298678][   T27] Call Trace:
[  761.298688][   T27]  <TASK>
[  761.298701][   T27]  __schedule+0x107f/0x4030
[  761.298742][   T27]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  761.298775][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.298803][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.298831][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.316933][   T27]  schedule+0xb9/0x180
[  761.316973][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.317001][   T27]  __mutex_lock+0x548/0xae0
[  761.317022][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.317047][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.317071][   T27]  ? perf_trace_init+0x4c/0x2d0
[  761.317098][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.317128][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.317153][   T27]  perf_trace_init+0x4c/0x2d0
[  761.317192][   T27]  ? perf_tp_event_init+0x78/0x110
[  761.317219][   T27]  perf_tp_event_init+0x89/0x110
[  761.317244][   T27]  perf_try_init_event+0x12b/0x3d0
[  761.317270][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.317291][   T27]  perf_event_alloc+0xea0/0x21e0
[  761.317315][   T27]  ? _raw_spin_unlock+0x24/0x40
[  761.317339][   T27]  ? alloc_fd+0x590/0x640
[  761.317373][   T27]  __se_sys_perf_event_open+0x5dc/0x1ec0
[  761.317404][   T27]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  761.317449][   T27]  ? syscall_enter_from_user_mode+0x2a/0x80
[  761.317472][   T27]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  761.317511][   T27]  do_syscall_64+0x4c/0xa0
[  761.317537][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.317563][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.317592][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.317618][   T27] RIP: 0033:0x7fa5aab9e0d9
[  761.317638][   T27] RSP: 002b:00007fa5abb20028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  761.317665][   T27] RAX: ffffffffffffffda RBX: 00007fa5aae25fa0 RCX: 00007fa5aab9e0d9
[  761.317682][   T27] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000380
[  761.317699][   T27] RBP: 00007fa5aac35024 R08: 0000000000000003 R09: 0000000000000000
[  761.317715][   T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  761.317731][   T27] R13: 00007fa5aae26038 R14: 00007fa5aae25fa0 R15: 00007ffecbdc6948
[  761.317762][   T27]  </TASK>
[  761.317774][   T27] INFO: task syz.3.3679:15667 blocked for more than 143 seconds.
[  761.317790][   T27]       Not tainted syzkaller #0
[  761.317803][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.317814][   T27] task:syz.3.3679      state:D stack:29104 pid:15667 ppid:13848  flags:0x00004004
[  761.317854][   T27] Call Trace:
[  761.317864][   T27]  <TASK>
[  761.317877][   T27]  __schedule+0x107f/0x4030
[  761.317925][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.317953][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.317980][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.318012][   T27]  schedule+0xb9/0x180
[  761.318040][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.318068][   T27]  __mutex_lock+0x548/0xae0
[  761.318090][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.318114][   T27]  ? perf_trace_init+0x4c/0x2d0
[  761.318139][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.318169][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.318193][   T27]  perf_trace_init+0x4c/0x2d0
[  761.318215][   T27]  ? perf_tp_event_init+0x78/0x110
[  761.318241][   T27]  perf_tp_event_init+0x89/0x110
[  761.318266][   T27]  perf_try_init_event+0x12b/0x3d0
[  761.318290][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.318312][   T27]  perf_event_alloc+0xea0/0x21e0
[  761.318336][   T27]  ? _raw_spin_unlock+0x24/0x40
[  761.318360][   T27]  ? find_lively_task_by_vpid+0x19/0x290
[  761.318384][   T27]  ? find_lively_task_by_vpid+0x19/0x290
[  761.318413][   T27]  __se_sys_perf_event_open+0x701/0x1ec0
[  761.318435][   T27]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  761.318471][   T27]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  761.318522][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.318543][   T27]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  761.318620][   T27]  do_syscall_64+0x4c/0xa0
[  761.318647][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.318673][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.318702][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.318728][   T27] RIP: 0033:0x7fa5aab9e0d9
[  761.318746][   T27] RSP: 002b:00007fa5abaff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  761.318771][   T27] RAX: ffffffffffffffda RBX: 00007fa5aae26090 RCX: 00007fa5aab9e0d9
[  761.318788][   T27] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000680
[  761.318805][   T27] RBP: 00007fa5aac35024 R08: 0000000000000000 R09: 0000000000000000
[  761.318821][   T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  761.322169][   T27] R13: 00007fa5aae26128 R14: 00007fa5aae26090 R15: 00007ffecbdc6948
[  761.322204][   T27]  </TASK>
[  761.322216][   T27] INFO: task syz.3.3679:15669 blocked for more than 143 seconds.
[  761.322232][   T27]       Not tainted syzkaller #0
[  761.322245][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.322256][   T27] task:syz.3.3679      state:D stack:26352 pid:15669 ppid:13848  flags:0x00004004
[  761.322295][   T27] Call Trace:
[  761.322304][   T27]  <TASK>
[  761.322318][   T27]  __schedule+0x107f/0x4030
[  761.322370][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.322398][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.322427][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.322459][   T27]  schedule+0xb9/0x180
[  761.322494][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.322522][   T27]  __mutex_lock+0x548/0xae0
[  761.322545][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.322570][   T27]  ? rtnetlink_rcv_msg+0x80d/0xfb0
[  761.322595][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.322631][   T27]  rtnetlink_rcv_msg+0x80d/0xfb0
[  761.322653][   T27]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  761.322679][   T27]  ? rtnetlink_bind+0x80/0x80
[  761.322697][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  761.322720][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.322746][   T27]  ? __local_bh_enable_ip+0x136/0x1c0
[  761.322767][   T27]  ? _local_bh_enable+0xa0/0xa0
[  761.322793][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.322816][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.322841][   T27]  ? __dev_queue_xmit+0x1d84/0x3810
[  761.322872][   T27]  ? __dev_queue_xmit+0x281/0x3810
[  761.322906][   T27]  ? ref_tracker_free+0x682/0x830
[  761.322935][   T27]  ? refcount_inc+0x70/0x70
[  761.322960][   T27]  ? memcpy+0x3c/0x60
[  761.322988][   T27]  ? __copy_skb_header+0x3ba/0x4f0
[  761.323020][   T27]  ? __skb_clone+0x446/0x6c0
[  761.323053][   T27]  netlink_rcv_skb+0x1ef/0x440
[  761.323083][   T27]  ? rtnetlink_bind+0x80/0x80
[  761.323106][   T27]  ? netlink_ack+0x1160/0x1160
[  761.323143][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[  761.323169][   T27]  netlink_unicast+0x7ad/0x920
[  761.323207][   T27]  netlink_sendmsg+0x8ad/0xbd0
[  761.323236][   T27]  ? netlink_getsockopt+0x550/0x550
[  761.323260][   T27]  ? apparmor_socket_sendmsg+0x8a/0x330
[  761.323290][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  761.323312][   T27]  ? security_socket_sendmsg+0x7c/0xa0
[  761.323337][   T27]  ? netlink_getsockopt+0x550/0x550
[  761.323360][   T27]  ____sys_sendmsg+0x5ed/0x9a0
[  761.323397][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  761.323424][   T27]  ? __import_iovec+0x306/0x510
[  761.323460][   T27]  ? import_iovec+0x6f/0xa0
[  761.323499][   T27]  ___sys_sendmsg+0x2a2/0x360
[  761.323532][   T27]  ? __sys_sendmsg+0x2a0/0x2a0
[  761.323579][   T27]  ? trace_call_bpf+0xbf/0x6b0
[  761.323629][   T27]  __se_sys_sendmsg+0x1c3/0x2b0
[  761.323656][   T27]  ? ct_nmi_exit+0x145/0x1c0
[  761.323681][   T27]  ? __x64_sys_sendmsg+0x80/0x80
[  761.323725][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.323751][   T27]  do_syscall_64+0x4c/0xa0
[  761.323777][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.323803][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.323831][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.323857][   T27] RIP: 0033:0x7fa5aab9e0d9
[  761.323876][   T27] RSP: 002b:00007fa5abade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  761.323901][   T27] RAX: ffffffffffffffda RBX: 00007fa5aae26180 RCX: 00007fa5aab9e0d9
[  761.323918][   T27] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000c
[  761.323934][   T27] RBP: 00007fa5aac35024 R08: 0000000000000000 R09: 0000000000000000
[  761.323949][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  761.323964][   T27] R13: 00007fa5aae26218 R14: 00007fa5aae26180 R15: 00007ffecbdc6948
[  761.323995][   T27]  </TASK>
[  761.324006][   T27] INFO: task syz.3.3679:15671 blocked for more than 143 seconds.
[  761.324021][   T27]       Not tainted syzkaller #0
[  761.324033][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.324044][   T27] task:syz.3.3679      state:D stack:29104 pid:15671 ppid:13848  flags:0x00004004
[  761.324080][   T27] Call Trace:
[  761.324089][   T27]  <TASK>
[  761.324103][   T27]  __schedule+0x107f/0x4030
[  761.324150][   T27]  ? release_firmware_map_entry+0x187/0x187
[  761.324178][   T27]  ? __mutex_trylock_common+0x86/0x260
[  761.324206][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  761.324237][   T27]  schedule+0xb9/0x180
[  761.324265][   T27]  schedule_preempt_disabled+0xf/0x20
[  761.324293][   T27]  __mutex_lock+0x548/0xae0
[  761.324315][   T27]  ? __mutex_lock+0x3ba/0xae0
[  761.324340][   T27]  ? perf_trace_init+0x4c/0x2d0
[  761.324365][   T27]  ? mutex_lock_nested+0x10/0x10
[  761.324395][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.324419][   T27]  perf_trace_init+0x4c/0x2d0
[  761.324441][   T27]  ? perf_tp_event_init+0x78/0x110
[  761.324467][   T27]  perf_tp_event_init+0x89/0x110
[  761.324497][   T27]  perf_try_init_event+0x12b/0x3d0
[  761.324523][   T27]  ? perf_event_alloc+0xb28/0x21e0
[  761.324545][   T27]  perf_event_alloc+0xea0/0x21e0
[  761.324569][   T27]  ? _raw_spin_unlock+0x24/0x40
[  761.324593][   T27]  ? find_lively_task_by_vpid+0x19/0x290
[  761.324618][   T27]  ? find_lively_task_by_vpid+0x19/0x290
[  761.324647][   T27]  __se_sys_perf_event_open+0x701/0x1ec0
[  761.324669][   T27]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  761.324705][   T27]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  761.324749][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  761.324771][   T27]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  761.324803][   T27]  do_syscall_64+0x4c/0xa0
[  761.324829][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.324855][   T27]  ? clear_bhb_loop+0x60/0xb0
[  761.324883][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.324909][   T27] RIP: 0033:0x7fa5aab9e0d9
[  761.324927][   T27] RSP: 002b:00007fa5ababd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  761.324952][   T27] RAX: ffffffffffffffda RBX: 00007fa5aae26270 RCX: 00007fa5aab9e0d9
[  761.324969][   T27] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  761.324985][   T27] RBP: 00007fa5aac35024 R08: 0000000000000000 R09: 0000000000000000
[  761.325001][   T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  761.325016][   T27] R13: 00007fa5aae26308 R14: 00007fa5aae26270 R15: 00007ffecbdc6948
[  761.325047][   T27]  </TASK>
[  761.325082][   T27] 
[  761.325082][   T27] Showing all locks held in the system:
[  761.325095][   T27] 3 locks held by kworker/0:0/7:
[  761.325108][   T27]  #0: ffff888017471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.325176][   T27]  #1: ffffc900000c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.325240][   T27]  #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xd40
[  761.325378][   T27] 1 lock held by rcu_tasks_kthre/12:
[  761.325393][   T27]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  761.325460][   T27] 1 lock held by rcu_tasks_trace/13:
[  761.325474][   T27]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  761.325548][   T27] 1 lock held by khungtaskd/27:
[  761.325562][   T27]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  761.325663][   T27] 1 lock held by klogd/3628:
[  761.325678][   T27] 2 locks held by getty/4030:
[  761.325692][   T27]  #0: ffff88802fd95098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  761.325822][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  761.325891][   T27] 3 locks held by kworker/0:6/4316:
[  761.325905][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.325969][   T27]  #1: ffffc900040e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326032][   T27]  #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[  761.326129][   T27] 5 locks held by kworker/u4:8/9296:
[  761.326144][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326209][   T27]  #1: ffffc9000369fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326273][   T27]  #2: ffff888060f387a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260
[  761.326341][   T27]  #3: ffff888063248d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x1100
[  761.326412][   T27]  #4: ffff888060f39760 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x580/0x1100
[  761.326488][   T27] 3 locks held by kworker/u4:11/9301:
[  761.326502][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326566][   T27]  #1: ffffc90003dc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326629][   T27]  #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  761.326691][   T27] 3 locks held by kworker/0:2/12534:
[  761.326705][   T27]  #0: ffff88814d464538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326769][   T27]  #1: ffffc9001c377d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326834][   T27]  #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30
[  761.326903][   T27] 2 locks held by kworker/0:4/14899:
[  761.326917][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.326980][   T27]  #1: ffffc90004b6fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  761.327045][   T27] 2 locks held by syz.4.3672/15629:
[  761.327059][   T27]  #0: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[  761.327121][   T27]  #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  761.327191][   T27] 2 locks held by syz.4.3672/15631:
[  761.327205][   T27]  #0: ffff888056de13e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x112/0x300
[  761.327272][   T27]  #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[  761.327342][   T27] 1 lock held by syz.0.3678/15655:
[  761.327355][   T27]  #0: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[  761.327418][   T27] 5 locks held by syz.0.3678/15657:
[  761.327433][   T27] 1 lock held by syz.3.3679/15658:
[  761.327447][   T27]  #0: ffffffff8cb8c9c8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310
[  761.327516][   T27] 2 locks held by syz.3.3679/15659:
[  761.327530][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.327590][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.327653][   T27] 2 locks held by syz.3.3679/15667:
[  761.327667][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.327727][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.327789][   T27] 1 lock held by syz.3.3679/15669:
[  761.327803][   T27]  #0: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[  761.327864][   T27] 2 locks held by syz.3.3679/15671:
[  761.327878][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.327938][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.328001][   T27] 1 lock held by syz.2.3680/15660:
[  761.328015][   T27]  #0: ffffffff8cb8c9c8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310
[  761.328077][   T27] 1 lock held by syz.2.3680/15661:
[  761.328091][   T27]  #0: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54d/0xe80
[  761.328152][   T27] 2 locks held by syz.2.3680/15664:
[  761.328165][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.328225][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.328287][   T27] 1 lock held by syz.2.3680/15665:
[  761.328301][   T27]  #0: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1de/0x12f0
[  761.328366][   T27] 1 lock held by syz.1.3681/15663:
[  761.328379][   T27]  #0: ffff888072418210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  761.328449][   T27] 2 locks held by syz.1.3681/15666:
[  761.328463][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.328529][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.328592][   T27] 2 locks held by syz.1.3681/15668:
[  761.328606][   T27]  #0: ffffffff96c6a1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0
[  761.328665][   T27]  #1: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0
[  761.328727][   T27] 1 lock held by syz.1.3681/15670:
[  761.328740][   T27]  #0: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x464/0x2f00
[  761.341458][   T27] 1 lock held by dhcpcd/15675:
[  761.341483][   T27]  #0: ffff88805e11e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341556][   T27] 1 lock held by dhcpcd/15676:
[  761.341570][   T27]  #0: ffff8880543aa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341635][   T27] 1 lock held by dhcpcd/15677:
[  761.341648][   T27]  #0: ffff888051eb2130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341712][   T27] 1 lock held by dhcpcd/15678:
[  761.341724][   T27]  #0: ffff88805eb4a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341787][   T27] 1 lock held by dhcpcd/15679:
[  761.341800][   T27]  #0: ffff88805e862130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341864][   T27] 1 lock held by dhcpcd/15680:
[  761.341877][   T27]  #0: ffff888070cbe130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  761.341942][   T27] 
[  761.341950][   T27] =============================================
[  761.341950][   T27] 
[  761.341962][   T27] NMI backtrace for cpu 0
[  761.341971][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  761.341989][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  761.342001][   T27] Call Trace:
[  761.342008][   T27]  <TASK>
[  761.342015][   T27]  dump_stack_lvl+0x188/0x24e
[  761.342044][   T27]  ? ct_irq_enter_irqson+0x170/0x170
[  761.342066][   T27]  ? show_regs_print_info+0x12/0x12
[  761.342091][   T27]  ? load_image+0x410/0x410
[  761.342111][   T27]  ? vprintk_emit+0x59f/0x6a0
[  761.342140][   T27]  ? nmi_cpu_backtrace+0x1cb/0x460
[  761.342169][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  761.342199][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  761.342224][   T27]  ? _printk+0xda/0x130
[  761.342244][   T27]  ? load_image+0x410/0x410
[  761.342267][   T27]  ? load_image+0x410/0x410
[  761.342289][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  761.342315][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  761.342415][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  761.342444][   T27]  watchdog+0xf0e/0xf50
[  761.342469][   T27]  ? watchdog+0x1ed/0xf50
[  761.342503][   T27]  kthread+0x29d/0x330
[  761.342520][   T27]  ? hungtask_pm_notify+0x40/0x40
[  761.342541][   T27]  ? kthread_blkcg+0xd0/0xd0
[  761.342560][   T27]  ret_from_fork+0x1f/0x30
[  761.342595][   T27]  </TASK>
[  761.342604][   T27] Sending NMI from CPU 0 to CPUs 1:
[  761.342630][    C1] NMI backtrace for cpu 1
[  761.342639][    C1] CPU: 1 PID: 15657 Comm: syz.0.3678 Not tainted syzkaller #0
[  761.342654][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  761.342662][    C1] RIP: 0010:irq_work_queue_on+0xd1/0x260
[  761.342685][    C1] Code: e5 44 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 3e 01 00 00 45 8b 37 44 89 f1 83 c9 23 31 f6 44 89 f0 f0 41 0f b1 0f <41> 89 c4 41 0f 94 c5 40 0f 94 c6 bf 02 00 00 00 e8 aa ac f3 ff 45
[  761.342697][    C1] RSP: 0018:ffffc900001dfee8 EFLAGS: 00000046
[  761.342710][    C1] RAX: 0000000000000000 RBX: ffff8880b8f3bbf0 RCX: 0000000000000023
[  761.342720][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880b8f3bbf8
[  761.342729][    C1] RBP: 0000000000000001 R08: ffff8880b8f3bbfb R09: 1ffff110171e777f
[  761.342739][    C1] R10: dffffc0000000000 R11: ffffed10171e7780 R12: dffffc0000000000
[  761.342750][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8f3bbf8
[  761.342760][    C1] FS:  00007fcd1aef26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  761.342773][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  761.342783][    C1] CR2: 0000200000000140 CR3: 000000005f557000 CR4: 00000000003506e0
[  761.342797][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  761.342806][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  761.342815][    C1] Call Trace:
[  761.342820][    C1]  <IRQ>
[  761.342828][    C1]  rcu_read_unlock_special+0x3c9/0x510
[  761.342847][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  761.342861][    C1]  ? __perf_cgroup_move+0x150/0x150
[  761.342883][    C1]  __rcu_read_unlock+0x78/0xd0
[  761.342898][    C1]  perf_event_output_forward+0x271/0x2f0
[  761.342918][    C1]  ? perf_event_output_forward+0xbe/0x2f0
[  761.342936][    C1]  ? perf_get_page_size+0x430/0x430
[  761.342953][    C1]  ? rcu_read_lock_sched_held+0x86/0x110
[  761.342981][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  761.343002][    C1]  __perf_event_overflow+0x457/0x630
[  761.343024][    C1]  perf_swevent_event+0x315/0x570
[  761.343044][    C1]  ? perf_tp_event+0xc10/0xc10
[  761.343062][    C1]  ? perf_trace_buf_alloc+0x300/0x300
[  761.343082][    C1]  perf_tp_event+0x36b/0xc10
[  761.343104][    C1]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  761.343124][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  761.343159][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  761.343172][    C1]  ? sched_clock_cpu+0x6e/0x260
[  761.343189][    C1]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  761.343211][    C1]  perf_trace_preemptirq_template+0x268/0x320
[  761.343231][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  761.343251][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  761.343270][    C1]  ? __irq_exit_rcu+0x147/0x230
[  761.343284][    C1]  ? irq_exit_rcu+0x20/0x20
[  761.343299][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  761.343316][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[  761.343335][    C1]  trace_hardirqs_on+0x24/0x40
[  761.343351][    C1]  asm_sysvec_irq_work+0x16/0x20
[  761.343369][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  761.343384][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  761.343396][    C1] RSP: 0018:ffffc900001e0760 EFLAGS: 00000206
[  761.343408][    C1] RAX: ce44a0838293b200 RBX: 1ffff9200003c0f4 RCX: ce44a0838293b200
[  761.343418][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120
[  761.343429][    C1] RBP: ffffc900001e0860 R08: ffffffff90b12337 R09: 1ffffffff2162466
[  761.343439][    C1] R10: dffffc0000000000 R11: fffffbfff2162467 R12: 0000000000000246
[  761.343449][    C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002
[  761.343469][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  761.343484][    C1]  ? nf_hook+0x390/0x390
[  761.343496][    C1]  ? ip6_mtu+0x31a/0x3f0
[  761.343511][    C1]  ? ip6_finish_output+0x563/0x7f0
[  761.343532][    C1]  __rcu_read_unlock+0x78/0xd0
[  761.343546][    C1]  ndisc_send_skb+0xdc2/0x1520
[  761.343565][    C1]  ? ndisc_send_skb+0x1f0/0x1520
[  761.343585][    C1]  ? ndisc_mc_map+0x800/0x800
[  761.343601][    C1]  ? rcu_is_watching+0x11/0xa0
[  761.343619][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  761.343646][    C1]  addrconf_rs_timer+0x367/0x640
[  761.343666][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  761.343687][    C1]  call_timer_fn+0x1ac/0x670
[  761.343702][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  761.343718][    C1]  ? call_timer_fn+0xcf/0x670
[  761.343732][    C1]  ? __run_timers+0x810/0x810
[  761.343748][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.343764][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  761.343779][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  761.343793][    C1]  ? addrconf_disable_policy_idev+0x4c0/0x4c0
[  761.343811][    C1]  __run_timers+0x56c/0x810
[  761.343832][    C1]  ? detach_timer+0x350/0x350
[  761.343853][    C1]  run_timer_softirq+0x63/0xf0
[  761.343867][    C1]  handle_softirqs+0x291/0x910
[  761.343883][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  761.343897][    C1]  ? do_softirq+0x210/0x210
[  761.343910][    C1]  ? hrtimer_interrupt+0x775/0x980
[  761.343927][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  761.343941][    C1]  __irq_exit_rcu+0x13b/0x230
[  761.343955][    C1]  ? irq_exit_rcu+0x20/0x20
[  761.343973][    C1]  irq_exit_rcu+0x5/0x20
[  761.343990][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  761.344006][    C1]  </IRQ>
[  761.344010][    C1]  <TASK>
[  761.344015][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  761.344033][    C1] RIP: 0010:console_emit_next_record+0x92f/0xb50
[  761.344053][    C1] Code: 0f 85 af 00 00 00 e8 60 ae 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 51 ae 1a 00 eb 06 e8 4a ae 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06
[  761.344065][    C1] RSP: 0018:ffffc9000370edc0 EFLAGS: 00000283
[  761.344076][    C1] RAX: ffffffff81678346 RBX: 0000000000000001 RCX: 0000000000080000
[  761.344086][    C1] RDX: ffffc900144e8000 RSI: 00000000000163b4 RDI: 00000000000163b5
[  761.344095][    C1] RBP: ffffc9000370efe0 R08: ffffffff90b12247 R09: 1ffffffff2162448
[  761.344105][    C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 1ffff920006e1e03
[  761.344115][    C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920006e1dc4
[  761.344128][    C1]  ? console_emit_next_record+0x926/0xb50
[  761.344152][    C1]  ? console_emit_next_record+0x68f/0xb50
[  761.344174][    C1]  ? info_print_prefix+0x360/0x360
[  761.344197][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  761.344219][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[  761.344239][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[  761.344257][    C1]  ? _printk+0xda/0x130
[  761.344272][    C1]  ? _printk+0xda/0x130
[  761.344287][    C1]  ? console_trylock+0x160/0x160
[  761.344305][    C1]  console_unlock+0x223/0x630
[  761.344325][    C1]  ? _printk+0xda/0x130
[  761.344341][    C1]  vprintk_emit+0x4b3/0x6a0
[  761.344359][    C1]  ? printk_sprint+0x460/0x460
[  761.344377][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  761.344393][    C1]  ? _raw_spin_unlock+0x40/0x40
[  761.344413][    C1]  _printk+0xda/0x130
[  761.344430][    C1]  ? load_image+0x410/0x410
[  761.344444][    C1]  ? kasan_set_track+0x60/0x70
[  761.344463][    C1]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  761.344478][    C1]  ? genl_rcv_msg+0x601/0x790
[  761.344491][    C1]  ? netlink_rcv_skb+0x1ef/0x440
[  761.344510][    C1]  ? genl_rcv+0x24/0x40
[  761.344522][    C1]  ? netlink_sendmsg+0x8ad/0xbd0
[  761.344537][    C1]  __nla_validate_parse+0x20c1/0x2970
[  761.344565][    C1]  ? __nla_validate+0x50/0x50
[  761.344588][    C1]  ? __kmem_cache_alloc_node+0x19d/0x270
[  761.344605][    C1]  __nla_parse+0x3c/0x50
[  761.344625][    C1]  genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  761.344644][    C1]  genl_family_rcv_msg_doit+0xe6/0x350
[  761.344659][    C1]  ? end_current_label_crit_section+0x170/0x170
[  761.344679][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  761.344694][    C1]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  761.344711][    C1]  ? apparmor_capable+0x12c/0x190
[  761.344728][    C1]  ? bpf_lsm_capable+0x5/0x10
[  761.344744][    C1]  ? security_capable+0x85/0xb0
[  761.344766][    C1]  genl_rcv_msg+0x601/0x790
[  761.344784][    C1]  ? genl_bind+0x360/0x360
[  761.344797][    C1]  ? l2tp_nl_cmd_session_modify+0x5e0/0x5e0
[  761.344815][    C1]  ? l2tp_nl_cmd_session_get+0x1e0/0x1e0
[  761.344837][    C1]  netlink_rcv_skb+0x1ef/0x440
[  761.344856][    C1]  ? genl_bind+0x360/0x360
[  761.344871][    C1]  ? netlink_ack+0x1160/0x1160
[  761.344894][    C1]  ? down_read+0x1a8/0x2d0
[  761.344909][    C1]  genl_rcv+0x24/0x40
[  761.344923][    C1]  netlink_unicast+0x7ad/0x920
[  761.344946][    C1]  netlink_sendmsg+0x8ad/0xbd0
[  761.344964][    C1]  ? netlink_getsockopt+0x550/0x550
[  761.344984][    C1]  ? apparmor_socket_sendmsg+0x8a/0x330
[  761.345003][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  761.345017][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  761.345033][    C1]  ? netlink_getsockopt+0x550/0x550
[  761.345047][    C1]  ____sys_sendmsg+0x5ed/0x9a0
[  761.345071][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  761.345089][    C1]  ? __import_iovec+0x306/0x510
[  761.345112][    C1]  ? import_iovec+0x6f/0xa0
[  761.345131][    C1]  ___sys_sendmsg+0x2a2/0x360
[  761.345152][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  761.345192][    C1]  __se_sys_sendmsg+0x1c3/0x2b0
[  761.345210][    C1]  ? ct_nmi_exit+0x145/0x1c0
[  761.345225][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  761.345251][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  761.345267][    C1]  do_syscall_64+0x4c/0xa0
[  761.345284][    C1]  ? clear_bhb_loop+0x60/0xb0
[  761.345302][    C1]  ? clear_bhb_loop+0x60/0xb0
[  761.345320][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  761.345338][    C1] RIP: 0033:0x7fcd19f9e0d9
[  761.345351][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  761.345363][    C1] RSP: 002b:00007fcd1aef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  761.345376][    C1] RAX: ffffffffffffffda RBX: 00007fcd1a225fa0 RCX: 00007fcd19f9e0d9
[  761.345387][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  761.345397][    C1] RBP: 00007fcd1a035024 R08: 0000000000000000 R09: 0000000000000000
[  761.345406][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  761.345415][    C1] R13: 00007fcd1a226038 R14: 00007fcd1a225fa0 R15: 00007ffebf0a9bc8
[  761.345433][    C1]  </TASK>
[  761.345638][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  761.345648][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  761.345666][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  761.345675][   T27] Call Trace:
[  761.345681][   T27]  <TASK>
[  761.345688][   T27]  dump_stack_lvl+0x188/0x24e
[  761.345713][   T27]  ? memcpy+0x3c/0x60
[  761.345730][   T27]  ? show_regs_print_info+0x12/0x12
[  761.345755][   T27]  ? load_image+0x410/0x410
[  761.345785][   T27]  panic+0x2d3/0x710
[  761.345808][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  761.345827][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  761.345854][   T27]  ? irq_work_queue+0xb8/0x140
[  761.345881][   T27]  ? nmi_trigger_cpumask_backtrace+0x2ed/0x450
[  761.345909][   T27]  watchdog+0xf4d/0xf50
[  761.345932][   T27]  ? watchdog+0x1ed/0xf50
[  761.345956][   T27]  kthread+0x29d/0x330
[  761.345972][   T27]  ? hungtask_pm_notify+0x40/0x40
[  761.345991][   T27]  ? kthread_blkcg+0xd0/0xd0
[  761.346010][   T27]  ret_from_fork+0x1f/0x30
[  761.346043][   T27]  </TASK>
[  761.346318][   T27] Kernel Offset: disabled
[  768.949584][   T27] Rebooting in 86400 seconds..