last executing test programs:

28.364083981s ago: executing program 0 (id=4888):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x1001900, &(0x7f0000000380)="53e5cff8bcd0d2674d24286a3a49258876459c3350e09c93915f81b797f883205f0ee22b11faeb7f378d6aedaf9a273e85b428f96654f99fca02c9d45d", 0x3d, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000005c0)="66aeca7b771745fd37a6c9f15424f27adfff522b36a4a7c4b537effe88c7ea6acb78d05adcfb73590074dd5665dd723bdd237d8ddd108d3131ccd03f4d2f8509efb52434baf490fcf002a485b5c77126679143bc1bb46f0d0699189718c60686fd877705bcd0f3026f69959d01afb1231c727bd08da0ce6cee824186f63f047195270d9c4b75a54764e04cb6c7669689972efb5b86ba67ac845d295f29dec57e0ae1bde74ca639f75614df0cf52ea459e9a1758e46d92bebb1c2db1dcdd46917a20f51e47d83f8e2e8d4")
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @datasec={0x10, 0x9, 0x0, 0xf, 0x3, [{0x1, 0x400}, {0x2, 0xb8cc, 0x200}, {0x3, 0x402, 0x5}, {0x4, 0x4, 0xfffffffd}, {0x1, 0xdd, 0x800}, {0x5, 0x8, 0x4}, {0x5, 0x5, 0x4}, {0x1, 0x3, 0x3}, {0x1, 0x44c, 0x4}], "db3c34"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/192, 0xaf, 0xc0, 0x1, 0xc308}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004001000080000000100000080000000d4d00b3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$kcm(0x2, 0x200000000000001, 0x106)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}, 0x4040)
socket$kcm(0x10, 0x2, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a)
ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000001c0))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)

27.279755378s ago: executing program 0 (id=4892):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000200001302000000040000005500000005000000090000"], 0x0, 0x43, 0x0, 0x1, 0x8}, 0x28)

26.981800803s ago: executing program 0 (id=4893):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x7a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000400), 0x12)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

26.141330057s ago: executing program 0 (id=4900):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)
r1 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000000), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2041)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)

25.567241647s ago: executing program 0 (id=4905):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.429402756s ago: executing program 0 (id=4909):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r0, 0x0, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

19.113561574s ago: executing program 3 (id=4942):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0fffffe, 0x0, 0x0, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x2004080)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0x0, 0x0})
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r5})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x202, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000040546c21ad74d237c24231e8b6d2d3ff504f8fdcd2fa6ea92e4e0e8396c961256636a87f09443c554c0d4ecb8dd5b327d9826be10cb2ba90e2671fd945b8c596b60600508de4acf2a806ea5fd5678508e2fe731363a8af0161f6415197b019386cb936a82320ff41f177120a0c5669bedc12ef84d578fe9c013255acd97d0a602633c060179cc4cc9ea32029cc00abb567d7f44203", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94)

18.041735629s ago: executing program 1 (id=4947):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)

18.040802979s ago: executing program 3 (id=4948):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f0000000300)=0x5, 0x12)

17.975573883s ago: executing program 1 (id=4949):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, 0x0, 0x8000)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, 0x0, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)

17.801927822s ago: executing program 3 (id=4951):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))

17.734887835s ago: executing program 1 (id=4952):
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)

17.642991731s ago: executing program 3 (id=4953):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$sock(r1, &(0x7f0000001500)={&(0x7f0000000000)=@ethernet={0x1, @remote}, 0x80, 0x0}, 0x1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff500000900000000000000", 0x24}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5e"], 0xfe33)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119b00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, r6}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'})

17.477723749s ago: executing program 1 (id=4954):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, 0x0, 0x4080)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[], 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB], 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000200001302000000040000005500000005000000090000000700be8fd2450000002e615f5f2e00"], 0x0, 0x43, 0x0, 0x1, 0x8}, 0x28)

17.301314958s ago: executing program 3 (id=4955):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1c, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x88}}, @alu={0x4, 0x0, 0x2, 0xb, 0x4, 0xc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x922000000003, 0x11)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a)
r6 = perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0xb, 0xa, 0x1, 0x4, 0x0, 0x8, 0x88b00, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000003c0), 0x2}, 0x800, 0x6, 0x100, 0x5, 0x7, 0x2, 0xfffb, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r2, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xd, 0x28, 0x8, 0x1, 0x0, 0x80000000, 0x2002, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, 0x0, 0x3, r6, 0x2) (async)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f0000000100), 0x3d) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x8) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async, rerun: 64)
sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)="f5e04d0874d2", 0x6}, {&(0x7f0000000580)="7374bb4770383bf0cad937f2270878e9283aba05a8ba6b9b7131d64a57c00ed5d8404102db64e6d0af57", 0x2a}, {&(0x7f0000000800)}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x40) (rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e59332bbea03c2b6"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (rerun: 32)

17.07834601s ago: executing program 1 (id=4956):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0fffffe, 0x0, 0x0, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x2004080)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0x0, 0x0})
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r5})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x202, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000040546c21ad74d237c24231e8b6d2d3ff504f8fdcd2fa6ea92e4e0e8396c961256636a87f09443c554c0d4ecb8dd5b327d9826be10cb2ba90e2671fd945b8c596b60600508de4acf2a806ea5fd5678508e2fe731363a8af0161f6415197b019386cb936a82320ff41f177120a0c5669bedc12ef84d578fe9c013255acd97d0a602633c060179cc4cc9ea32029cc00abb567d7f44203", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94)

16.843168062s ago: executing program 2 (id=4957):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000200001302000000040000005500000005000000090000000700be8fd2450000002e61"], 0x0, 0x43, 0x0, 0x1, 0x8}, 0x28)

16.554786527s ago: executing program 2 (id=4958):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000100000042000000400000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x4, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

16.444668683s ago: executing program 1 (id=4959):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, 0x0, 0x8000)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, 0x0, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)

16.375178587s ago: executing program 3 (id=4960):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)

16.150996398s ago: executing program 2 (id=4961):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)="3114", 0x0, 0x4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

16.005357886s ago: executing program 2 (id=4962):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$sock(r1, &(0x7f0000001500)={&(0x7f0000000000)=@ethernet={0x1, @remote}, 0x80, 0x0}, 0x1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff500000900000000000000", 0x24}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5e"], 0xfe33)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119b00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, r6}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'})

15.930875589s ago: executing program 2 (id=4963):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, 0x0, 0x4080)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[], 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB], 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000200001302000000040000005500000005000000090000000700be8fd2450000002e615f5f2e00"], 0x0, 0x43, 0x0, 0x1, 0x8}, 0x28)

15.871160152s ago: executing program 2 (id=4964):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1000}, 0x28)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000740))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
close(0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007b090000000000000300000018150000", @ANYRES32, @ANYBLOB="00000000000000ace1716b0095000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x89d44ab294807533, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x1, 0xd3, 0x4}, 0x10, 0x29f03, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000003c0)=[{0x3, 0x5, 0x3, 0xb}, {0x2, 0x2, 0x3}, {0x2, 0x4, 0x6, 0x2}, {0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0x9, 0xa}, {0x5, 0x5, 0xd, 0x6}, {0x5, 0x5, 0xb, 0x7}, {0x2, 0x2, 0x4, 0xc}, {0x4, 0x3, 0xe}], 0x10, 0x7}, 0x94)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x10}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f0004"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r8}, 0x36)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)

1.002475798s ago: executing program 32 (id=4959):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, 0x0, 0x8000)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, 0x0, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)

921.250952ms ago: executing program 33 (id=4960):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)

0s ago: executing program 34 (id=4964):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1000}, 0x28)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000740))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
close(0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007b090000000000000300000018150000", @ANYRES32, @ANYBLOB="00000000000000ace1716b0095000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x89d44ab294807533, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x1, 0xd3, 0x4}, 0x10, 0x29f03, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000003c0)=[{0x3, 0x5, 0x3, 0xb}, {0x2, 0x2, 0x3}, {0x2, 0x4, 0x6, 0x2}, {0x4, 0x4, 0x6, 0xa}, {0x1, 0x4, 0x9, 0xa}, {0x5, 0x5, 0xd, 0x6}, {0x5, 0x5, 0xb, 0x7}, {0x2, 0x2, 0x4, 0xc}, {0x4, 0x3, 0xe}], 0x10, 0x7}, 0x94)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x10}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f0004"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r8}, 0x36)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)

kernel console output (not intermixed with test programs):

/0x370
[ 1348.893064][T18420]  ? zone_watermark_ok_safe+0x230/0x230
[ 1348.898650][T18420]  ? rcu_is_watching+0x15/0xb0
[ 1348.903471][T18420]  ? __get_vm_area_node+0x356/0x370
[ 1348.908718][T18420]  __vmalloc_node_range+0x393/0x1330
[ 1348.914082][T18420]  ? irqentry_enter+0x37/0x50
[ 1348.918817][T18420]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1348.924836][T18420]  ? lock_chain_count+0x20/0x20
[ 1348.929722][T18420]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1348.935926][T18420]  ? free_vm_area+0x50/0x50
[ 1348.940470][T18420]  ? end_current_label_crit_section+0x170/0x170
[ 1348.946774][T18420]  ? bpf_prog_alloc_no_stats+0x47/0x440
[ 1348.952459][T18420]  __vmalloc+0x7a/0x90
[ 1348.956574][T18420]  ? bpf_prog_alloc_no_stats+0x47/0x440
[ 1348.962183][T18420]  bpf_prog_alloc_no_stats+0x47/0x440
[ 1348.967635][T18420]  ? bpf_prog_alloc+0x2b/0x1a0
[ 1348.972561][T18420]  bpf_prog_alloc+0x3d/0x1a0
[ 1348.977221][T18420]  bpf_prog_load+0x6eb/0x1670
[ 1348.981967][T18420]  ? map_freeze+0x420/0x420
[ 1348.986627][T18420]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1348.992839][T18420]  ? lockdep_hardirqs_on+0x98/0x150
[ 1348.998097][T18420]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1349.004315][T18420]  ? security_bpf+0x59/0xa0
[ 1349.009044][T18420]  ? bpf_lsm_bpf+0x9/0x10
[ 1349.013422][T18420]  ? security_bpf+0x7e/0xa0
[ 1349.017976][T18420]  __sys_bpf+0x5ba/0x890
[ 1349.022268][T18420]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1349.027704][T18420]  ? lock_chain_count+0x20/0x20
[ 1349.032605][T18420]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1349.038739][T18420]  __x64_sys_bpf+0x7c/0x90
[ 1349.043198][T18420]  do_syscall_64+0x55/0xa0
[ 1349.047657][T18420]  ? clear_bhb_loop+0x40/0x90
[ 1349.052388][T18420]  ? clear_bhb_loop+0x40/0x90
[ 1349.057119][T18420]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1349.063152][T18420] RIP: 0033:0x7fbc2099c819
[ 1349.067622][T18420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1349.087546][T18420] RSP: 002b:00007fbc21853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1349.096064][T18420] RAX: ffffffffffffffda RBX: 00007fbc20c15fa0 RCX: 00007fbc2099c819
[ 1349.104089][T18420] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005
[ 1349.112098][T18420] RBP: 00007fbc21853090 R08: 0000000000000000 R09: 0000000000000000
[ 1349.120113][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1349.128252][T18420] R13: 00007fbc20c16038 R14: 00007fbc20c15fa0 R15: 00007fff33087918
[ 1349.136467][T18420]  </TASK>
[ 1349.176696][T18420] Mem-Info:
[ 1349.180406][T18420] active_anon:21779 inactive_anon:0 isolated_anon:0
[ 1349.180406][T18420]  active_file:15956 inactive_file:40330 isolated_file:0
[ 1349.180406][T18420]  unevictable:768 dirty:303 writeback:0
[ 1349.180406][T18420]  slab_reclaimable:10287 slab_unreclaimable:93065
[ 1349.180406][T18420]  mapped:24740 shmem:17321 pagetables:472
[ 1349.180406][T18420]  sec_pagetables:0 bounce:0
[ 1349.180406][T18420]  kernel_misc_reclaimable:0
[ 1349.180406][T18420]  free:1325765 free_pcp:12005 free_cma:0
[ 1349.271427][T18420] Node 0 active_anon:87016kB inactive_anon:0kB active_file:63824kB inactive_file:161112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98960kB dirty:1212kB writeback:0kB shmem:67748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10092kB pagetables:1888kB sec_pagetables:0kB all_unreclaimable? no
[ 1349.347745][T18420] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1349.410125][T18420] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1349.440229][T18420] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1349.446374][T18420] Node 0 DMA32 free:1393408kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:84476kB inactive_anon:0kB active_file:63824kB inactive_file:160288kB unevictable:1536kB writepending:1212kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32272kB local_pcp:20504kB free_cma:0kB
[ 1349.500105][T18425] netlink: 'syz.3.3783': attribute type 10 has an invalid length.
[ 1349.572030][T18420] lowmem_reserve[]: 0 0 0 0 0
[ 1349.576903][T18420] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 1349.611969][T18420] lowmem_reserve[]: 0 0 0 0 0
[ 1349.627281][T18420] Node 1 Normal free:3894288kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23640kB local_pcp:14296kB free_cma:0kB
[ 1349.744254][T18420] lowmem_reserve[]: 0 0 0 0 0
[ 1349.754668][T18432] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1349.761192][T18432] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1349.797117][T18420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1349.864619][T18420] Node 0 DMA32: 639*4kB (UME) 259*8kB (UME) 381*16kB (UME) 113*32kB (UME) 104*64kB (UE) 112*128kB (U) 71*256kB (UM) 28*512kB (UM) 18*1024kB (U) 5*2048kB (UME) 317*4096kB (UM) = 1394948kB
[ 1349.896167][T18434] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1349.903000][T18434] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1349.927098][T18420] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1349.971953][T18420] Node 1 Normal: 206*4kB (UE) 61*8kB (UME) 45*16kB (UME) 69*32kB (UME) 18*64kB (UE) 6*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3894288kB
[ 1349.977993][T18425] team0: Port device macvlan0 added
[ 1350.019973][T18420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1350.068191][T18420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1350.100521][T18420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1350.118950][T18420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1350.160175][T18420] 69993 total pagecache pages
[ 1350.193253][T18420] 0 pages in swap cache
[ 1350.197570][T18420] Free swap  = 124996kB
[ 1350.201762][T18420] Total swap = 124996kB
[ 1350.238715][T18420] 2097051 pages RAM
[ 1350.272042][T18420] 0 pages HighMem/MovableOnly
[ 1350.297573][T18420] 416927 pages reserved
[ 1350.314643][T18420] 0 pages cma reserved
[ 1350.655016][T18443] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3787'.
[ 1351.191851][T18445] netlink: 'syz.2.3785': attribute type 10 has an invalid length.
[ 1351.312211][T18445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3785'.
[ 1351.522277][T18445] ipvlan1: entered promiscuous mode
[ 1351.571687][T18445] ipvlan1: entered allmulticast mode
[ 1351.611927][T18445] veth0_vlan: entered allmulticast mode
[ 1351.722451][T18445] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1353.767854][T18466] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1353.775392][T18466] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1353.802181][T18467] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1353.827044][T18467] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1355.768380][T18493] netlink: 'syz.0.3803': attribute type 10 has an invalid length.
[ 1355.866410][T18493] team0: Port device macvlan0 added
[ 1355.934120][T18498] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3804'.
[ 1356.510578][T18515] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3812'.
[ 1357.310593][T18519] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1357.318699][T18519] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1358.409117][T18536] netlink: 'syz.2.3819': attribute type 10 has an invalid length.
[ 1358.557377][T18536] team0: Port device macvlan0 added
[ 1359.244603][T18550] netlink: 'syz.1.3826': attribute type 17 has an invalid length.
[ 1359.268376][T18550] netlink: 'syz.1.3826': attribute type 16 has an invalid length.
[ 1359.302237][T18550] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3826'.
[ 1359.531507][ T5814] Bluetooth: hci2: ACL packet for unknown connection handle 491
[ 1360.248662][T18573] netlink: 'syz.1.3835': attribute type 10 has an invalid length.
[ 1360.661298][T18582] Driver unsupported XDP return value 0 on prog  (id 2450) dev N/A, expect packet loss!
[ 1360.959302][T18573] team0: Port device macvlan0 added
[ 1360.970242][T18584] netlink: 'syz.0.3839': attribute type 10 has an invalid length.
[ 1360.983459][T18584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3839'.
[ 1361.003380][T18584] ipvlan1: entered promiscuous mode
[ 1361.016208][T18584] ipvlan1: entered allmulticast mode
[ 1361.024029][T18584] veth0_vlan: entered allmulticast mode
[ 1361.037947][T18584] bridge0: port 3(ipvlan1) entered blocking state
[ 1361.047337][T18584] bridge0: port 3(ipvlan1) entered disabled state
[ 1361.061113][T18584] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1361.742083][T18601] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1361.762130][T18601] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1361.802100][T18602] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1361.809249][T18602] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1362.109935][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.116379][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.147447][T18628] netlink: 'syz.1.3854': attribute type 5 has an invalid length.
[ 1363.188161][T18628] netlink: 'syz.1.3854': attribute type 1 has an invalid length.
[ 1363.215046][T18628] netlink: 162812 bytes leftover after parsing attributes in process `syz.1.3854'.
[ 1364.025462][T18637] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1364.049496][T18637] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1364.190609][T18646] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1364.258197][T18646] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1364.285653][T18651] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3863'.
[ 1364.350479][T18652] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3863'.
[ 1364.744044][T18660] FAULT_INJECTION: forcing a failure.
[ 1364.744044][T18660] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.787016][T18660] CPU: 0 PID: 18660 Comm: syz.0.3865 Not tainted syzkaller #0
[ 1364.794650][T18660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1364.804761][T18660] Call Trace:
[ 1364.808095][T18660]  <TASK>
[ 1364.811069][T18660]  dump_stack_lvl+0x18c/0x250
[ 1364.815902][T18660]  ? show_regs_print_info+0x20/0x20
[ 1364.821237][T18660]  ? load_image+0x420/0x420
[ 1364.825792][T18660]  ? __might_sleep+0xe0/0xe0
[ 1364.830438][T18660]  ? __lock_acquire+0x7d40/0x7d40
[ 1364.835508][T18660]  should_fail_ex+0x39d/0x4d0
[ 1364.840244][T18660]  should_failslab+0x9/0x20
[ 1364.844792][T18660]  slab_pre_alloc_hook+0x59/0x310
[ 1364.849887][T18660]  ? kvmalloc_node+0x70/0x180
[ 1364.854620][T18660]  ? kvmalloc_node+0x70/0x180
[ 1364.859356][T18660]  __kmem_cache_alloc_node+0x53/0x250
[ 1364.864782][T18660]  ? kvmalloc_node+0x70/0x180
[ 1364.869584][T18660]  __kmalloc_node+0xa4/0x230
[ 1364.874210][T18660]  kvmalloc_node+0x70/0x180
[ 1364.878778][T18660]  __veth_napi_enable_range+0x2b4/0x700
[ 1364.884897][T18660]  ? __skb_frag_ref+0x1c0/0x1c0
[ 1364.889809][T18660]  ? netif_napi_add_weight+0xa22/0xdf0
[ 1364.895321][T18660]  veth_napi_enable_range+0xd0/0x150
[ 1364.900650][T18660]  veth_set_features+0x1c8/0x2a0
[ 1364.905881][T18660]  __netdev_update_features+0x9cb/0x18e0
[ 1364.911572][T18660]  ? dev_xdp_attach+0x1030/0x1030
[ 1364.916837][T18660]  ? __might_fault+0xaa/0x120
[ 1364.921541][T18660]  ? __lock_acquire+0x7d40/0x7d40
[ 1364.926596][T18660]  ? aa_get_newest_label+0xfd/0x5c0
[ 1364.931826][T18660]  ? __might_fault+0xaa/0x120
[ 1364.936520][T18660]  ? __might_fault+0xc6/0x120
[ 1364.941222][T18660]  ? __might_fault+0xaa/0x120
[ 1364.945927][T18660]  ethtool_set_one_feature+0x2a8/0x2f0
[ 1364.951424][T18660]  ? apparmor_capable+0x137/0x1a0
[ 1364.956464][T18660]  ? ethtool_get_one_feature+0x280/0x280
[ 1364.962118][T18660]  ? security_capable+0x89/0xb0
[ 1364.967082][T18660]  dev_ethtool+0xfd7/0x18d0
[ 1364.971612][T18660]  ? ethtool_get_module_eeprom_call+0x170/0x170
[ 1364.977985][T18660]  ? __lock_acquire+0x7d40/0x7d40
[ 1364.983026][T18660]  ? __might_fault+0xaa/0x120
[ 1364.987738][T18660]  ? full_name_hash+0x92/0xe0
[ 1364.992449][T18660]  ? dev_load+0x21/0x1f0
[ 1364.996712][T18660]  dev_ioctl+0x392/0x1140
[ 1365.001065][T18660]  sock_do_ioctl+0x239/0x310
[ 1365.005685][T18660]  ? sock_show_fdinfo+0xb0/0xb0
[ 1365.010572][T18660]  sock_ioctl+0x5ba/0x7e0
[ 1365.014916][T18660]  ? sock_poll+0x3e0/0x3e0
[ 1365.019528][T18660]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1365.024494][T18660]  ? security_file_ioctl+0x80/0xa0
[ 1365.029619][T18660]  ? sock_poll+0x3e0/0x3e0
[ 1365.034050][T18660]  __se_sys_ioctl+0xfd/0x170
[ 1365.038660][T18660]  do_syscall_64+0x55/0xa0
[ 1365.043090][T18660]  ? clear_bhb_loop+0x40/0x90
[ 1365.047788][T18660]  ? clear_bhb_loop+0x40/0x90
[ 1365.052491][T18660]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1365.058403][T18660] RIP: 0033:0x7f42f3d9c819
[ 1365.062844][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1365.082465][T18660] RSP: 002b:00007f42f4bff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1365.091159][T18660] RAX: ffffffffffffffda RBX: 00007f42f4015fa0 RCX: 00007f42f3d9c819
[ 1365.099428][T18660] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002f
[ 1365.107423][T18660] RBP: 00007f42f4bff090 R08: 0000000000000000 R09: 0000000000000000
[ 1365.115410][T18660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1365.123412][T18660] R13: 00007f42f4016038 R14: 00007f42f4015fa0 R15: 00007ffdc237c278
[ 1365.131501][T18660]  </TASK>
[ 1365.211672][T18660] veth1_virt_wifi: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9
[ 1365.483655][T18669] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1365.490173][T18669] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1366.385622][T18688] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1366.434622][T18688] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1367.412587][T18693] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1367.419910][T18693] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1368.060982][T18718] FAULT_INJECTION: forcing a failure.
[ 1368.060982][T18718] name failslab, interval 1, probability 0, space 0, times 0
[ 1368.100716][T18718] CPU: 1 PID: 18718 Comm: syz.3.3889 Not tainted syzkaller #0
[ 1368.108356][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1368.118465][T18718] Call Trace:
[ 1368.121783][T18718]  <TASK>
[ 1368.124749][T18718]  dump_stack_lvl+0x18c/0x250
[ 1368.129523][T18718]  ? show_regs_print_info+0x20/0x20
[ 1368.134768][T18718]  ? load_image+0x420/0x420
[ 1368.139316][T18718]  ? __might_sleep+0xe0/0xe0
[ 1368.143927][T18718]  ? __lock_acquire+0x7d40/0x7d40
[ 1368.149158][T18718]  ? stack_trace_save+0xaa/0x100
[ 1368.154212][T18718]  ? stack_trace_snprint+0xf0/0xf0
[ 1368.159343][T18718]  should_fail_ex+0x39d/0x4d0
[ 1368.164103][T18718]  should_failslab+0x9/0x20
[ 1368.168623][T18718]  slab_pre_alloc_hook+0x59/0x310
[ 1368.173754][T18718]  ? kasan_set_track+0x5f/0x70
[ 1368.178527][T18718]  ? kasan_set_track+0x4e/0x70
[ 1368.183305][T18718]  ? __kasan_kmalloc+0x8f/0xa0
[ 1368.188176][T18718]  kmem_cache_alloc_node+0x60/0x320
[ 1368.193394][T18718]  ? netlink_sendmsg+0x8d0/0xbf0
[ 1368.198731][T18718]  ? __alloc_skb+0x103/0x2c0
[ 1368.203340][T18718]  __alloc_skb+0x103/0x2c0
[ 1368.207776][T18718]  netlink_dump+0x1ec/0xe50
[ 1368.212397][T18718]  ? netlink_lookup+0x200/0x200
[ 1368.217340][T18718]  ? __kasan_kmalloc+0x8f/0xa0
[ 1368.222120][T18718]  ? __inet_diag_dump_start+0x886/0x9f0
[ 1368.227864][T18718]  ? netlink_lookup+0x30/0x200
[ 1368.232656][T18718]  __netlink_dump_start+0x5f1/0x810
[ 1368.237883][T18718]  inet_diag_handler_cmd+0x1e1/0x2c0
[ 1368.243234][T18718]  ? inet_diag_unregister+0xb0/0xb0
[ 1368.248544][T18718]  ? inet_diag_handler_get_info+0x7a0/0x7a0
[ 1368.254459][T18718]  ? inet_diag_dump_start+0x20/0x20
[ 1368.259690][T18718]  ? inet_diag_dump+0x50/0x50
[ 1368.264394][T18718]  ? sock_diag_lock_handler+0x19/0x280
[ 1368.269878][T18718]  ? sock_diag_lock_handler+0x19/0x280
[ 1368.275366][T18718]  ? inet_diag_unregister+0xb0/0xb0
[ 1368.280611][T18718]  sock_diag_rcv_msg+0x3d8/0x600
[ 1368.285656][T18718]  netlink_rcv_skb+0x241/0x4d0
[ 1368.290451][T18718]  ? sock_diag_bind+0xb0/0xb0
[ 1368.295168][T18718]  ? netlink_ack+0x1180/0x1180
[ 1368.299965][T18718]  ? __lock_acquire+0x7d40/0x7d40
[ 1368.305101][T18718]  ? __rcu_read_unlock+0x7c/0xd0
[ 1368.310057][T18718]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.315294][T18718]  sock_diag_rcv+0x2a/0x40
[ 1368.319737][T18718]  netlink_unicast+0x751/0x8d0
[ 1368.324530][T18718]  netlink_sendmsg+0x8d0/0xbf0
[ 1368.329352][T18718]  ? netlink_getsockopt+0x590/0x590
[ 1368.334688][T18718]  ? aa_sock_msg_perm+0x94/0x150
[ 1368.339642][T18718]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1368.344947][T18718]  ? security_socket_sendmsg+0x80/0xa0
[ 1368.350443][T18718]  ? netlink_getsockopt+0x590/0x590
[ 1368.355696][T18718]  ____sys_sendmsg+0x5ba/0x960
[ 1368.360500][T18718]  ? __asan_memset+0x22/0x40
[ 1368.365119][T18718]  ? __sys_sendmsg_sock+0x30/0x30
[ 1368.370157][T18718]  ? __import_iovec+0x5f2/0x850
[ 1368.375035][T18718]  ? import_iovec+0x73/0xa0
[ 1368.379558][T18718]  ___sys_sendmsg+0x2a6/0x360
[ 1368.384255][T18718]  ? get_pid_task+0x20/0x1e0
[ 1368.388873][T18718]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1368.393748][T18718]  ? __lock_acquire+0x7d40/0x7d40
[ 1368.398849][T18718]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1368.403740][T18718]  ? __x64_sys_sendmsg+0x80/0x80
[ 1368.408720][T18718]  ? lockdep_hardirqs_on+0x98/0x150
[ 1368.413942][T18718]  do_syscall_64+0x55/0xa0
[ 1368.418367][T18718]  ? clear_bhb_loop+0x40/0x90
[ 1368.423058][T18718]  ? clear_bhb_loop+0x40/0x90
[ 1368.427751][T18718]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1368.433682][T18718] RIP: 0033:0x7efed919c819
[ 1368.438110][T18718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1368.457734][T18718] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1368.466172][T18718] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1368.474156][T18718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1368.482138][T18718] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1368.490122][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1368.498111][T18718] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1368.506125][T18718]  </TASK>
[ 1369.017558][T18728] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3893'.
[ 1369.214387][T18732] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3893'.
[ 1369.520784][T18729] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1369.647128][T18729] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1369.877520][T18736] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1369.926574][T18736] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1371.465336][T18767] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1371.482805][T18767] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1371.736619][T18764] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1371.751620][T18764] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1371.957848][T18771] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3906'.
[ 1372.029739][T18774] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3906'.
[ 1372.564173][T18770] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1372.571165][T18770] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1372.943196][T18792] FAULT_INJECTION: forcing a failure.
[ 1372.943196][T18792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1372.956736][T18792] CPU: 0 PID: 18792 Comm: syz.3.3916 Not tainted syzkaller #0
[ 1372.964492][T18792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1372.974651][T18792] Call Trace:
[ 1372.977946][T18792]  <TASK>
[ 1372.980905][T18792]  dump_stack_lvl+0x18c/0x250
[ 1372.985615][T18792]  ? show_regs_print_info+0x20/0x20
[ 1372.990837][T18792]  ? load_image+0x420/0x420
[ 1372.995357][T18792]  ? __might_fault+0xaa/0x120
[ 1373.000047][T18792]  ? __lock_acquire+0x7d40/0x7d40
[ 1373.005104][T18792]  should_fail_ex+0x39d/0x4d0
[ 1373.009805][T18792]  _copy_from_user+0x2f/0xe0
[ 1373.014502][T18792]  ___sys_sendmsg+0x1c7/0x360
[ 1373.019196][T18792]  ? get_pid_task+0x20/0x1e0
[ 1373.023898][T18792]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1373.028689][T18792]  ? __lock_acquire+0x7d40/0x7d40
[ 1373.033850][T18792]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1373.038891][T18792]  ? __x64_sys_sendmsg+0x80/0x80
[ 1373.043855][T18792]  ? lockdep_hardirqs_on+0x98/0x150
[ 1373.049093][T18792]  do_syscall_64+0x55/0xa0
[ 1373.053524][T18792]  ? clear_bhb_loop+0x40/0x90
[ 1373.058227][T18792]  ? clear_bhb_loop+0x40/0x90
[ 1373.063007][T18792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1373.068912][T18792] RIP: 0033:0x7efed919c819
[ 1373.073342][T18792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1373.092964][T18792] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1373.101479][T18792] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1373.109463][T18792] RDX: 0000000004000080 RSI: 0000200000000580 RDI: 0000000000000004
[ 1373.117450][T18792] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1373.125452][T18792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1373.133453][T18792] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1373.141459][T18792]  </TASK>
[ 1374.124180][T18803] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1374.157753][T18803] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1374.273103][T18805] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1374.280422][T18805] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1375.414411][T18835] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1375.420920][T18835] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1376.885214][T18871] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1376.920474][T18871] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1376.959070][T18876] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1376.986075][T18876] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1377.030824][T18873] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1377.052482][T18873] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1377.693151][T18882] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1377.714239][T18882] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1377.880355][T18888] netlink: 'syz.2.3952': attribute type 21 has an invalid length.
[ 1377.907362][T18888] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3952'.
[ 1379.806903][T18933] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1379.854758][T18933] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1379.927705][T18937] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1379.962146][T18937] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1380.983201][T18948] netlink: 'syz.0.3976': attribute type 25 has an invalid length.
[ 1381.003208][T18948] netlink: 'syz.0.3976': attribute type 29 has an invalid length.
[ 1381.178936][T18963] netlink: 'syz.2.3981': attribute type 17 has an invalid length.
[ 1381.202254][T18963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3981'.
[ 1381.244274][T18963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1381.420843][T18968] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1381.432122][T18968] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1381.511478][T18973] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1381.544215][T18973] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1382.056272][T18985] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1382.076854][T18985] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1382.121751][T18980] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1382.583728][T18980] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1382.730880][T18988] netlink: 1278 bytes leftover after parsing attributes in process `syz.0.3990'.
[ 1383.228867][T18996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1383.823910][T19019] FAULT_INJECTION: forcing a failure.
[ 1383.823910][T19019] name failslab, interval 1, probability 0, space 0, times 0
[ 1383.838801][T19019] CPU: 1 PID: 19019 Comm: syz.3.4003 Not tainted syzkaller #0
[ 1383.846424][T19019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1383.856539][T19019] Call Trace:
[ 1383.859851][T19019]  <TASK>
[ 1383.862803][T19019]  dump_stack_lvl+0x18c/0x250
[ 1383.867517][T19019]  ? show_regs_print_info+0x20/0x20
[ 1383.872740][T19019]  ? load_image+0x420/0x420
[ 1383.877286][T19019]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1383.883293][T19019]  ? __asan_memset+0x22/0x40
[ 1383.887934][T19019]  should_fail_ex+0x39d/0x4d0
[ 1383.892636][T19019]  should_failslab+0x9/0x20
[ 1383.897344][T19019]  slab_pre_alloc_hook+0x59/0x310
[ 1383.902399][T19019]  kmem_cache_alloc+0x5a/0x2d0
[ 1383.907191][T19019]  ? slab_build_skb+0x2b/0x3f0
[ 1383.912063][T19019]  slab_build_skb+0x2b/0x3f0
[ 1383.916684][T19019]  bpf_prog_test_run_skb+0x3c8/0x12b0
[ 1383.922076][T19019]  ? lockdep_hardirqs_on+0x98/0x150
[ 1383.927291][T19019]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1383.933469][T19019]  ? cpu_online+0x60/0x60
[ 1383.937814][T19019]  bpf_prog_test_run+0x321/0x390
[ 1383.942777][T19019]  __sys_bpf+0x49d/0x890
[ 1383.947057][T19019]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1383.952464][T19019]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1383.958650][T19019]  __x64_sys_bpf+0x7c/0x90
[ 1383.963114][T19019]  do_syscall_64+0x55/0xa0
[ 1383.967550][T19019]  ? clear_bhb_loop+0x40/0x90
[ 1383.972245][T19019]  ? clear_bhb_loop+0x40/0x90
[ 1383.976943][T19019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1383.982850][T19019] RIP: 0033:0x7efed919c819
[ 1383.987279][T19019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1384.006993][T19019] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1384.015428][T19019] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1384.023502][T19019] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1384.031487][T19019] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.039657][T19019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.047663][T19019] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1384.055749][T19019]  </TASK>
[ 1384.157377][T19021] netlink: 'syz.0.4004': attribute type 3 has an invalid length.
[ 1384.182261][T19021] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.4004'.
[ 1385.120186][T19049] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.4014'.
[ 1385.131477][T19049] netlink: 'syz.1.4014': attribute type 7 has an invalid length.
[ 1385.149552][T19049] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.4014'.
[ 1385.293899][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4012'.
[ 1385.830183][T19064] FAULT_INJECTION: forcing a failure.
[ 1385.830183][T19064] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1385.892553][T19064] CPU: 0 PID: 19064 Comm: syz.1.4020 Not tainted syzkaller #0
[ 1385.900172][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1385.910234][T19064] Call Trace:
[ 1385.913532][T19064]  <TASK>
[ 1385.916496][T19064]  dump_stack_lvl+0x18c/0x250
[ 1385.921196][T19064]  ? show_regs_print_info+0x20/0x20
[ 1385.926484][T19064]  ? load_image+0x420/0x420
[ 1385.931056][T19064]  ? __lock_acquire+0x7d40/0x7d40
[ 1385.936155][T19064]  should_fail_ex+0x39d/0x4d0
[ 1385.940985][T19064]  prepare_alloc_pages+0x1e2/0x5f0
[ 1385.946161][T19064]  __alloc_pages+0x134/0x460
[ 1385.950924][T19064]  ? zone_statistics+0x170/0x170
[ 1385.955948][T19064]  ? alloc_pages+0x4dc/0x740
[ 1385.960572][T19064]  ? do_raw_spin_unlock+0x121/0x230
[ 1385.965879][T19064]  __get_free_pages+0xc/0x30
[ 1385.970474][T19064]  kasan_populate_vmalloc_pte+0x35/0x100
[ 1385.976225][T19064]  __apply_to_page_range+0x860/0xdd0
[ 1385.981752][T19064]  ? kasan_populate_vmalloc+0x70/0x70
[ 1385.987172][T19064]  ? apply_to_page_range+0x50/0x50
[ 1385.992396][T19064]  ? do_raw_spin_unlock+0x121/0x230
[ 1385.997876][T19064]  alloc_vmap_area+0x1d0c/0x1e30
[ 1386.002957][T19064]  ? vm_map_ram+0xcb0/0xcb0
[ 1386.007497][T19064]  ? rcu_is_watching+0x15/0xb0
[ 1386.012307][T19064]  __get_vm_area_node+0x162/0x370
[ 1386.017373][T19064]  ? bpf_map_area_alloc+0x5e/0x110
[ 1386.022637][T19064]  __vmalloc_node_range+0x36e/0x1330
[ 1386.027950][T19064]  ? dev_map_create_hash+0x24/0x1d0
[ 1386.033186][T19064]  ? free_vm_area+0x50/0x50
[ 1386.037802][T19064]  ? __kmem_cache_alloc_node+0x13a/0x250
[ 1386.043454][T19064]  bpf_map_area_alloc+0xf1/0x110
[ 1386.048408][T19064]  ? dev_map_create_hash+0x24/0x1d0
[ 1386.053623][T19064]  dev_map_create_hash+0x24/0x1d0
[ 1386.058667][T19064]  ? bpf_map_init_from_attr+0x14a/0x340
[ 1386.064323][T19064]  dev_map_alloc+0x277/0x4c0
[ 1386.068924][T19064]  map_create+0x877/0x12f0
[ 1386.073495][T19064]  ? bpf_lsm_bpf+0x9/0x10
[ 1386.077849][T19064]  __sys_bpf+0x651/0x890
[ 1386.082109][T19064]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1386.087505][T19064]  ? lock_chain_count+0x20/0x20
[ 1386.092376][T19064]  __x64_sys_bpf+0x7c/0x90
[ 1386.096809][T19064]  do_syscall_64+0x55/0xa0
[ 1386.101244][T19064]  ? clear_bhb_loop+0x40/0x90
[ 1386.105939][T19064]  ? clear_bhb_loop+0x40/0x90
[ 1386.110641][T19064]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1386.116638][T19064] RIP: 0033:0x7faf9019c819
[ 1386.121078][T19064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1386.140899][T19064] RSP: 002b:00007faf90fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1386.149569][T19064] RAX: ffffffffffffffda RBX: 00007faf90415fa0 RCX: 00007faf9019c819
[ 1386.157575][T19064] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000
[ 1386.165656][T19064] RBP: 00007faf90fc5090 R08: 0000000000000000 R09: 0000000000000000
[ 1386.173643][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1386.181711][T19064] R13: 00007faf90416038 R14: 00007faf90415fa0 R15: 00007fff649ee348
[ 1386.189708][T19064]  </TASK>
[ 1387.353148][T19093] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1387.382714][T19093] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1387.485243][T19097] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1387.573880][T19097] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1388.484577][T19119] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4038'.
[ 1388.495977][T19119] Ù: renamed from bond_slave_1 (while UP)
[ 1388.922293][T19120] delete_channel: no stack
[ 1389.592579][T19136] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1389.601934][T19136] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1389.642352][T19138] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1389.666105][T19138] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1389.681346][T19143] netlink: 'syz.3.4048': attribute type 8 has an invalid length.
[ 1389.689528][T19142] FAULT_INJECTION: forcing a failure.
[ 1389.689528][T19142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1389.689667][T19139] netlink: 'syz.0.4047': attribute type 21 has an invalid length.
[ 1389.742267][T19142] CPU: 1 PID: 19142 Comm: syz.2.4049 Not tainted syzkaller #0
[ 1389.749852][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1389.760236][T19142] Call Trace:
[ 1389.763675][T19142]  <TASK>
[ 1389.766678][T19142]  dump_stack_lvl+0x18c/0x250
[ 1389.771671][T19142]  ? show_regs_print_info+0x20/0x20
[ 1389.776973][T19142]  ? load_image+0x420/0x420
[ 1389.781582][T19142]  ? __lock_acquire+0x7d40/0x7d40
[ 1389.786866][T19142]  ? snprintf+0xe9/0x140
[ 1389.791215][T19142]  should_fail_ex+0x39d/0x4d0
[ 1389.796035][T19142]  _copy_to_user+0x2f/0xa0
[ 1389.800633][T19142]  simple_read_from_buffer+0xe7/0x150
[ 1389.806198][T19142]  proc_fail_nth_read+0x1e8/0x260
[ 1389.811319][T19142]  ? proc_fault_inject_write+0x360/0x360
[ 1389.817343][T19142]  ? fsnotify_perm+0x271/0x5e0
[ 1389.822291][T19142]  ? proc_fault_inject_write+0x360/0x360
[ 1389.828002][T19142]  vfs_read+0x28b/0x970
[ 1389.832264][T19142]  ? kernel_read+0x1e0/0x1e0
[ 1389.836904][T19142]  ? __fget_files+0x28/0x4b0
[ 1389.841619][T19142]  ? __fget_files+0x28/0x4b0
[ 1389.846263][T19142]  ? __fget_files+0x43d/0x4b0
[ 1389.851131][T19142]  ? __fdget_pos+0x2a3/0x330
[ 1389.855760][T19142]  ? ksys_read+0x75/0x260
[ 1389.860142][T19142]  ksys_read+0x150/0x260
[ 1389.864521][T19142]  ? vfs_write+0x990/0x990
[ 1389.869113][T19142]  ? lockdep_hardirqs_on+0x98/0x150
[ 1389.874383][T19142]  do_syscall_64+0x55/0xa0
[ 1389.879140][T19142]  ? clear_bhb_loop+0x40/0x90
[ 1389.884029][T19142]  ? clear_bhb_loop+0x40/0x90
[ 1389.888783][T19142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1389.894737][T19142] RIP: 0033:0x7fbc2095d04e
[ 1389.899211][T19142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1389.918954][T19142] RSP: 002b:00007fbc21852fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1389.927415][T19142] RAX: ffffffffffffffda RBX: 00007fbc218536c0 RCX: 00007fbc2095d04e
[ 1389.935426][T19142] RDX: 000000000000000f RSI: 00007fbc218530a0 RDI: 0000000000000004
[ 1389.943571][T19142] RBP: 00007fbc21853090 R08: 0000000000000000 R09: 0000000000000000
[ 1389.951685][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1389.959689][T19142] R13: 00007fbc20c16038 R14: 00007fbc20c15fa0 R15: 00007fff33087918
[ 1389.967826][T19142]  </TASK>
[ 1389.972596][T19143] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4048'.
[ 1390.245587][T19152] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4053'.
[ 1391.057361][T19184] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1391.072378][T19184] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1391.726373][T19178] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1391.745484][T19178] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1391.754994][T19181] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[ 1391.762680][T19181] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[ 1392.097485][T19201] FAULT_INJECTION: forcing a failure.
[ 1392.097485][T19201] name failslab, interval 1, probability 0, space 0, times 0
[ 1392.110593][T19201] CPU: 0 PID: 19201 Comm: syz.0.4072 Not tainted syzkaller #0
[ 1392.118106][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1392.128303][T19201] Call Trace:
[ 1392.131628][T19201]  <TASK>
[ 1392.134605][T19201]  dump_stack_lvl+0x18c/0x250
[ 1392.139352][T19201]  ? atomic_notifier_call_chain+0xda/0x180
[ 1392.145185][T19201]  ? fib6_del+0xfa4/0x1580
[ 1392.149748][T19201]  ? show_regs_print_info+0x20/0x20
[ 1392.155181][T19201]  ? load_image+0x420/0x420
[ 1392.159741][T19201]  ? ___sys_sendmsg+0x2a6/0x360
[ 1392.164647][T19201]  should_fail_ex+0x39d/0x4d0
[ 1392.169360][T19201]  should_failslab+0x9/0x20
[ 1392.173887][T19201]  slab_pre_alloc_hook+0x59/0x310
[ 1392.178930][T19201]  ? nsim_fib_event_nb+0x295/0x1080
[ 1392.184165][T19201]  ? nsim_fib_event_nb+0x295/0x1080
[ 1392.189514][T19201]  __kmem_cache_alloc_node+0x53/0x250
[ 1392.194949][T19201]  ? nsim_fib_event_nb+0x295/0x1080
[ 1392.200299][T19201]  __kmalloc+0xa4/0x230
[ 1392.204511][T19201]  nsim_fib_event_nb+0x295/0x1080
[ 1392.209651][T19201]  ? read_lock_is_recursive+0x20/0x20
[ 1392.215063][T19201]  notifier_call_chain+0x197/0x380
[ 1392.220202][T19201]  ? atomic_notifier_call_chain+0x26/0x180
[ 1392.226114][T19201]  atomic_notifier_call_chain+0xda/0x180
[ 1392.231784][T19201]  call_fib_notifiers+0x31/0x60
[ 1392.236661][T19201]  fib6_del+0xfa4/0x1580
[ 1392.240926][T19201]  ? fib6_del+0x611/0x1580
[ 1392.245442][T19201]  ? fib6_locate_1+0x6c0/0x6c0
[ 1392.250231][T19201]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1392.255632][T19201]  ? __ip6_del_rt_siblings+0xa2/0x7c0
[ 1392.261041][T19201]  __ip6_del_rt_siblings+0x4ae/0x7c0
[ 1392.266368][T19201]  ip6_route_del+0x1435/0x14f0
[ 1392.271161][T19201]  ? ip6_route_del+0xe3/0x14f0
[ 1392.275959][T19201]  ? ipv6_route_ioctl+0x500/0x500
[ 1392.281005][T19201]  ? arch_stack_walk+0x160/0x190
[ 1392.285961][T19201]  ? inet6_rtm_delroute+0x288/0x600
[ 1392.291188][T19201]  ? nla_find+0x12a/0x150
[ 1392.295571][T19201]  inet6_rtm_delroute+0x400/0x600
[ 1392.300626][T19201]  ? inet6_rtm_newroute+0x1c90/0x1c90
[ 1392.306031][T19201]  ? trace_contention_end+0x39/0xe0
[ 1392.311246][T19201]  ? __mutex_lock+0x315/0xcc0
[ 1392.315965][T19201]  ? inet6_rtm_newroute+0x1c90/0x1c90
[ 1392.321358][T19201]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1392.326314][T19201]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1392.331470][T19201]  ? lockdep_hardirqs_on+0x98/0x150
[ 1392.336685][T19201]  ? rtnetlink_bind+0x80/0x80
[ 1392.341373][T19201]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1392.347548][T19201]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1392.353582][T19201]  ? lock_chain_count+0x20/0x20
[ 1392.358453][T19201]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1392.363845][T19201]  ? lockdep_hardirqs_on+0x98/0x150
[ 1392.369063][T19201]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1392.374461][T19201]  ? _local_bh_enable+0xa0/0xa0
[ 1392.379330][T19201]  ? __dev_queue_xmit+0x265/0x3660
[ 1392.384481][T19201]  ? __dev_queue_xmit+0x265/0x3660
[ 1392.389698][T19201]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 1392.394924][T19201]  ? __dev_queue_xmit+0x265/0x3660
[ 1392.400059][T19201]  ? ref_tracker_free+0x690/0x840
[ 1392.405117][T19201]  netlink_rcv_skb+0x241/0x4d0
[ 1392.409900][T19201]  ? rtnetlink_bind+0x80/0x80
[ 1392.414596][T19201]  ? netlink_ack+0x1180/0x1180
[ 1392.419391][T19201]  ? __lock_acquire+0x7d40/0x7d40
[ 1392.424440][T19201]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1392.429667][T19201]  netlink_unicast+0x751/0x8d0
[ 1392.434463][T19201]  netlink_sendmsg+0x8d0/0xbf0
[ 1392.439344][T19201]  ? netlink_getsockopt+0x590/0x590
[ 1392.444580][T19201]  ? aa_sock_msg_perm+0x94/0x150
[ 1392.449539][T19201]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1392.454848][T19201]  ? security_socket_sendmsg+0x80/0xa0
[ 1392.460323][T19201]  ? netlink_getsockopt+0x590/0x590
[ 1392.465643][T19201]  ____sys_sendmsg+0x5ba/0x960
[ 1392.470425][T19201]  ? __asan_memset+0x22/0x40
[ 1392.475038][T19201]  ? __sys_sendmsg_sock+0x30/0x30
[ 1392.480079][T19201]  ? __import_iovec+0x5f2/0x850
[ 1392.485040][T19201]  ? import_iovec+0x73/0xa0
[ 1392.489658][T19201]  ___sys_sendmsg+0x2a6/0x360
[ 1392.494351][T19201]  ? get_pid_task+0x20/0x1e0
[ 1392.498966][T19201]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1392.503867][T19201]  ? __lock_acquire+0x7d40/0x7d40
[ 1392.508933][T19201]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1392.513820][T19201]  ? __x64_sys_sendmsg+0x80/0x80
[ 1392.518791][T19201]  ? lockdep_hardirqs_on+0x98/0x150
[ 1392.524008][T19201]  do_syscall_64+0x55/0xa0
[ 1392.528435][T19201]  ? clear_bhb_loop+0x40/0x90
[ 1392.533142][T19201]  ? clear_bhb_loop+0x40/0x90
[ 1392.538361][T19201]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1392.544274][T19201] RIP: 0033:0x7f42f3d9c819
[ 1392.548710][T19201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1392.568334][T19201] RSP: 002b:00007f42f4bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1392.576777][T19201] RAX: ffffffffffffffda RBX: 00007f42f4015fa0 RCX: 00007f42f3d9c819
[ 1392.584849][T19201] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1392.593199][T19201] RBP: 00007f42f4bff090 R08: 0000000000000000 R09: 0000000000000000
[ 1392.601182][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.609169][T19201] R13: 00007f42f4016038 R14: 00007f42f4015fa0 R15: 00007ffdc237c278
[ 1392.617173][T19201]  </TASK>
[ 1393.263857][T19208] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1393.270889][T19208] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1393.539823][T19219] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1393.547520][T19205] delete_channel: no stack
[ 1393.582063][T19219] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1393.632963][T19217] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1393.644590][T19217] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1394.414766][T19241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1394.465899][T19234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1394.582256][T19246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4087'.
[ 1394.592111][T19246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4087'.
[ 1394.609411][T19246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4087'.
[ 1395.895375][T19257] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1395.933378][T19257] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1396.282100][T19259] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1396.289231][T19259] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1396.622444][T19253] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1396.631858][T19253] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1397.856678][T19270] netlink: 'syz.1.4102': attribute type 2 has an invalid length.
[ 1397.869702][T19270] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4102'.
[ 1397.884055][T19267] delete_channel: no stack
[ 1397.924527][T19274] netlink: 'syz.1.4102': attribute type 2 has an invalid length.
[ 1397.938271][T19274] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4102'.
[ 1397.950908][T19278] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[ 1398.000624][T19278] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[ 1398.818398][T19292] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1398.862356][T19292] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1399.165547][T19301] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4105'.
[ 1399.215823][T19301] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4105'.
[ 1399.719287][T19314] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[ 1400.299525][T19326] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4116'.
[ 1400.320092][T19330] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4116'.
[ 1400.723997][T19337] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1400.760786][T19337] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1400.849461][T19344] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1400.939428][T19344] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1401.114569][T19347] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[ 1401.122720][T19347] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4121'.
[ 1401.175310][T19350] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[ 1401.222045][T19350] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4121'.
[ 1401.581171][T19356] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[ 1401.599661][T19356] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[ 1401.738420][T19364] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4128'.
[ 1401.759357][T19364] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4128'.
[ 1402.363409][T19384] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1402.382118][T19384] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1402.470446][T19380] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1402.492619][T19380] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1403.949889][T19407] __nla_validate_parse: 1 callbacks suppressed
[ 1403.949912][T19407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4142'.
[ 1405.117030][T19421] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1405.143717][T19421] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1407.458732][T19454] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1407.503511][T19454] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1407.796343][T19457] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1407.898708][T19457] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1410.565134][T19503] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1410.571876][T19503] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1410.676357][T19492] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1410.683514][T19492] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1412.409163][T19538] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1412.418556][T19538] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1412.828414][T19552] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1412.834976][T19552] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1413.072262][T19549] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1413.079147][T19549] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1413.319076][T19551] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1413.999625][T19551] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1416.591170][T19577] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4206'.
[ 1416.680679][T19577] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4206'.
[ 1417.123942][T19580] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1417.209890][T19580] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1417.577417][T19582] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1417.593995][T19582] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1417.638079][T19587] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1417.684500][T19587] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1417.797427][T19590] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1417.821904][T19590] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1418.392583][T19595] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1418.399358][T19595] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1418.768618][T19609] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4219'.
[ 1418.792647][T19609] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4219'.
[ 1418.928063][T19613] raw_sendmsg: syz.0.4221 forgot to set AF_INET. Fix it!
[ 1419.169078][T19624] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1419.231991][T19624] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1419.362481][T19626] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1419.404531][T19626] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1421.366006][T19667] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1421.390822][T19667] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1421.482227][T19671] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1421.501887][T19671] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1422.972544][T19703] netlink: 'syz.0.4250': attribute type 10 has an invalid length.
[ 1423.381171][T19703] team0 (unregistering): Port device C removed
[ 1423.410087][T19703] team0 (unregistering): Port device team_slave_1 removed
[ 1423.444019][T19703] team0 (unregistering): Port device macvlan0 removed
[ 1423.545552][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.552088][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.871957][T19719] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1423.883871][T19719] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1423.904845][T19722] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1424.035477][T19722] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1425.629489][T19750] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1425.638433][T19750] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1425.740294][T19755] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1425.803469][T19755] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1427.788440][T19799] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1427.826710][T19799] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1427.907217][T19802] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1427.917069][T19802] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1428.790071][T19820] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4294'.
[ 1428.814019][T19822] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4294'.
[ 1430.745538][T19856] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4305'.
[ 1430.783121][T19859] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4305'.
[ 1431.302417][T19881] netlink: 'syz.0.4310': attribute type 10 has an invalid length.
[ 1431.976040][T19897] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4317'.
[ 1432.031371][T19897] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4317'.
[ 1433.465921][T19931] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4328'.
[ 1433.485979][T19931] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4328'.
[ 1434.995118][T19962] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1435.062097][T19962] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1435.147769][T19965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4340'.
[ 1435.172627][T19966] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4340'.
[ 1435.933004][T19992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4352'.
[ 1435.952936][T19992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4352'.
[ 1436.005656][T19986] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1436.013641][T19986] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1437.400170][T20023] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4365'.
[ 1437.417752][T20023] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4365'.
[ 1437.853115][T20027] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1437.859942][T20027] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1438.505910][T20056] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4377'.
[ 1438.533863][T20056] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4377'.
[ 1439.384815][T20080] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1439.394504][T20080] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1440.433113][T20088] netlink: 'syz.1.4390': attribute type 10 has an invalid length.
[ 1440.483685][T20088] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[ 1440.664786][T20093] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4391'.
[ 1440.723689][T20093] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4391'.
[ 1443.299416][T20162] netlink: 'syz.0.4417': attribute type 10 has an invalid length.
[ 1443.324817][T20162] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4417'.
[ 1444.042982][T20166] netlink: 'syz.0.4417': attribute type 10 has an invalid length.
[ 1444.062483][T20166] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4417'.
[ 1444.078051][T20177] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4421'.
[ 1444.114871][T20177] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4421'.
[ 1445.926496][T20205] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4433'.
[ 1445.959086][T20229] netlink: 'syz.1.4442': attribute type 10 has an invalid length.
[ 1445.968463][T20229] mac80211_hwsim hwsim13 wlan1: left promiscuous mode
[ 1445.986724][T20229] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[ 1446.003000][T20229] bond0: (slave wlan1): Opening slave failed
[ 1448.655453][T20293] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1448.662062][T20293] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1449.856884][T20320] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4478'.
[ 1449.876389][T20320] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4478'.
[ 1450.279407][T20325] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1450.286563][T20325] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1451.850270][T20355] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 1451.867175][T20355] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 1452.089211][T20362] netlink: 'syz.3.4492': attribute type 10 has an invalid length.
[ 1452.108042][T20362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4492'.
[ 1452.529712][T20374] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1452.536279][T20374] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1452.654375][T20371] FAULT_INJECTION: forcing a failure.
[ 1452.654375][T20371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1452.695654][T20371] CPU: 0 PID: 20371 Comm: syz.1.4496 Not tainted syzkaller #0
[ 1452.703211][T20371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1452.713334][T20371] Call Trace:
[ 1452.716749][T20371]  <TASK>
[ 1452.719809][T20371]  dump_stack_lvl+0x18c/0x250
[ 1452.724651][T20371]  ? lock_chain_count+0x20/0x20
[ 1452.729639][T20371]  ? show_regs_print_info+0x20/0x20
[ 1452.734900][T20371]  ? load_image+0x420/0x420
[ 1452.739461][T20371]  ? lockdep_hardirqs_on+0x98/0x150
[ 1452.744917][T20371]  should_fail_ex+0x39d/0x4d0
[ 1452.749646][T20371]  _copy_from_iter+0x1d9/0x12e0
[ 1452.754696][T20371]  ? lock_chain_count+0x20/0x20
[ 1452.759566][T20371]  ? copyout_mc+0x70/0x70
[ 1452.763939][T20371]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1452.770132][T20371]  ? __check_object_size+0x506/0xa20
[ 1452.775431][T20371]  vhci_write+0x152/0x470
[ 1452.779776][T20371]  vfs_write+0x46c/0x990
[ 1452.784055][T20371]  ? file_end_write+0x250/0x250
[ 1452.788916][T20371]  ? __fget_files+0x43d/0x4b0
[ 1452.793695][T20371]  ? __fdget_pos+0x1d8/0x330
[ 1452.798295][T20371]  ? ksys_write+0x75/0x260
[ 1452.802945][T20371]  ksys_write+0x150/0x260
[ 1452.807601][T20371]  ? __ia32_sys_read+0x90/0x90
[ 1452.812443][T20371]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1452.818403][T20371]  do_syscall_64+0x55/0xa0
[ 1452.822860][T20371]  ? clear_bhb_loop+0x40/0x90
[ 1452.827576][T20371]  ? clear_bhb_loop+0x40/0x90
[ 1452.832297][T20371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1452.838230][T20371] RIP: 0033:0x7faf9019c819
[ 1452.842685][T20371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1452.862346][T20371] RSP: 002b:00007faf90fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1452.870816][T20371] RAX: ffffffffffffffda RBX: 00007faf90415fa0 RCX: 00007faf9019c819
[ 1452.878832][T20371] RDX: 000000000000009a RSI: 0000200000000000 RDI: 00000000000000ca
[ 1452.886839][T20371] RBP: 00007faf90fc5090 R08: 0000000000000000 R09: 0000000000000000
[ 1452.894994][T20371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1452.903188][T20371] R13: 00007faf90416038 R14: 00007faf90415fa0 R15: 00007fff649ee348
[ 1452.911343][T20371]  </TASK>
[ 1453.123270][T20386] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1453.140986][T20386] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4501'.
[ 1453.527271][T20401] netlink: 'syz.2.4507': attribute type 4 has an invalid length.
[ 1453.557679][T20401] netlink: 'syz.2.4507': attribute type 16 has an invalid length.
[ 1453.559117][T20397] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[ 1453.578547][T20397] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[ 1453.580506][T20401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4507'.
[ 1456.807955][T20407] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1456.814894][T20407] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1456.974062][T20418] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4514'.
[ 1457.030479][T20421] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4514'.
[ 1457.206131][T20425] netlink: 'syz.3.4517': attribute type 6 has an invalid length.
[ 1457.964157][T20430] netlink: 'syz.1.4520': attribute type 4 has an invalid length.
[ 1458.002285][T20430] netlink: 'syz.1.4520': attribute type 16 has an invalid length.
[ 1458.021964][T20430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4520'.
[ 1458.493858][T20451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4528'.
[ 1458.510679][T20451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4528'.
[ 1458.584397][T20452] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4526'.
[ 1460.212262][T20474] netlink: 'syz.0.4534': attribute type 4 has an invalid length.
[ 1460.313436][T20474] netlink: 'syz.0.4534': attribute type 16 has an invalid length.
[ 1460.507858][T20474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4534'.
[ 1463.088894][T20485] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4539'.
[ 1463.111310][T20485] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4539'.
[ 1463.365019][T20496] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4551'.
[ 1463.376905][T20496] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4551'.
[ 1463.728506][T20508] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1463.735226][T20508] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1464.388863][T20524] netlink: 'syz.3.4552': attribute type 4 has an invalid length.
[ 1464.422064][T20524] netlink: 'syz.3.4552': attribute type 16 has an invalid length.
[ 1464.431852][T20524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4552'.
[ 1467.515283][T20535] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4564'.
[ 1467.531016][T20535] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4564'.
[ 1467.934947][T20547] netlink: 'syz.1.4558': attribute type 10 has an invalid length.
[ 1467.960210][T20547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4558'.
[ 1467.986225][T20547] team0: entered promiscuous mode
[ 1468.007246][T20547] team_slave_0: entered promiscuous mode
[ 1468.032332][T20547] team_slave_1: entered promiscuous mode
[ 1468.055251][T20547] macvlan0: entered promiscuous mode
[ 1468.086994][T20547] team0: entered allmulticast mode
[ 1468.110165][T20547] team_slave_0: entered allmulticast mode
[ 1468.132023][T20547] team_slave_1: entered allmulticast mode
[ 1468.137842][T20547] macvlan0: entered allmulticast mode
[ 1468.156472][T20547] veth1_vlan: entered allmulticast mode
[ 1468.172779][T20547] bridge0: port 3(team0) entered blocking state
[ 1468.179218][T20547] bridge0: port 3(team0) entered disabled state
[ 1468.208120][T20547] bridge0: port 3(team0) entered blocking state
[ 1468.214774][T20547] bridge0: port 3(team0) entered forwarding state
[ 1469.426718][T20557] sit0: entered promiscuous mode
[ 1469.783572][T20567] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4567'.
[ 1469.823101][T20569] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4567'.
[ 1471.969872][T20598] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4578'.
[ 1471.993616][T20598] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4578'.
[ 1472.471480][T20604] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1472.594575][T20604] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1472.886547][T20607] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1472.905925][T20607] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1473.222109][T20617] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1473.246670][T20617] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1473.285690][T20620] netlink: 'syz.0.4584': attribute type 2 has an invalid length.
[ 1473.918794][T20636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4592'.
[ 1474.706989][T20646] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1474.725592][T20646] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1474.805166][T20649] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1474.922358][T20649] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1475.192580][T20655] sit0: entered promiscuous mode
[ 1475.796473][T20667] FAULT_INJECTION: forcing a failure.
[ 1475.796473][T20667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1475.855638][T20662] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[ 1475.862012][T20667] CPU: 1 PID: 20667 Comm: syz.1.4601 Not tainted syzkaller #0
[ 1475.870128][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1475.880332][T20667] Call Trace:
[ 1475.883658][T20667]  <TASK>
[ 1475.886798][T20667]  dump_stack_lvl+0x18c/0x250
[ 1475.891552][T20667]  ? show_regs_print_info+0x20/0x20
[ 1475.896821][T20667]  ? load_image+0x420/0x420
[ 1475.901397][T20667]  ? __lock_acquire+0x7d40/0x7d40
[ 1475.906491][T20667]  ? snprintf+0xe9/0x140
[ 1475.910787][T20667]  should_fail_ex+0x39d/0x4d0
[ 1475.915517][T20667]  _copy_to_user+0x2f/0xa0
[ 1475.920162][T20667]  simple_read_from_buffer+0xe7/0x150
[ 1475.925660][T20667]  proc_fail_nth_read+0x1e8/0x260
[ 1475.930712][T20667]  ? proc_fault_inject_write+0x360/0x360
[ 1475.936455][T20667]  ? fsnotify_perm+0x271/0x5e0
[ 1475.941237][T20667]  ? proc_fault_inject_write+0x360/0x360
[ 1475.946890][T20667]  vfs_read+0x28b/0x970
[ 1475.951079][T20667]  ? kernel_read+0x1e0/0x1e0
[ 1475.955722][T20667]  ? __fget_files+0x28/0x4b0
[ 1475.960347][T20667]  ? __fget_files+0x28/0x4b0
[ 1475.964980][T20667]  ? __fget_files+0x43d/0x4b0
[ 1475.969696][T20667]  ? __fdget_pos+0x2a3/0x330
[ 1475.974310][T20667]  ? ksys_read+0x75/0x260
[ 1475.978680][T20667]  ksys_read+0x150/0x260
[ 1475.983151][T20667]  ? vfs_write+0x990/0x990
[ 1475.987609][T20667]  ? lockdep_hardirqs_on+0x98/0x150
[ 1475.992854][T20667]  do_syscall_64+0x55/0xa0
[ 1475.997300][T20667]  ? clear_bhb_loop+0x40/0x90
[ 1476.002108][T20667]  ? clear_bhb_loop+0x40/0x90
[ 1476.006838][T20667]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1476.012761][T20667] RIP: 0033:0x7faf9015d04e
[ 1476.017296][T20667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1476.037072][T20667] RSP: 002b:00007faf90fc4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1476.045594][T20667] RAX: ffffffffffffffda RBX: 00007faf90fc56c0 RCX: 00007faf9015d04e
[ 1476.053590][T20667] RDX: 000000000000000f RSI: 00007faf90fc50a0 RDI: 0000000000000004
[ 1476.061578][T20667] RBP: 00007faf90fc5090 R08: 0000000000000000 R09: 0000000000000000
[ 1476.069565][T20667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1476.078056][T20667] R13: 00007faf90416038 R14: 00007faf90415fa0 R15: 00007fff649ee348
[ 1476.086077][T20667]  </TASK>
[ 1476.118328][T20662] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[ 1476.881171][T20681] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[ 1476.976549][ T5814] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[ 1477.026367][T20681] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[ 1477.088352][T20682] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[ 1477.116323][T20682] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[ 1477.759445][T20715] netlink: 'syz.3.4618': attribute type 21 has an invalid length.
[ 1477.791863][T20715] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4618'.
[ 1478.520445][T20745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4630'.
[ 1478.666694][T20747] bridge_slave_1: left allmulticast mode
[ 1478.674678][T20747] bridge_slave_1: left promiscuous mode
[ 1478.697664][T20747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1478.816319][T20747] bridge_slave_0: left allmulticast mode
[ 1478.852480][T20747] bridge_slave_0: left promiscuous mode
[ 1478.867031][T20747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1479.072371][T20691] Bluetooth: hci1: command 0x0406 tx timeout
[ 1479.582364][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4631'.
[ 1481.770027][T20790] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1481.777705][T20790] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1481.795928][T20796] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1481.815917][T20796] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1484.013858][T20828] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1484.032329][T20828] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1484.048640][T20825] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1484.061456][T20825] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1484.414223][T20847] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[ 1484.421102][T20847] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[ 1484.579644][T20842] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1484.642750][T20842] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[ 1485.642928][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1485.649586][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.748674][T20858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1485.792651][T20858] bond0 (unregistering): (slave 
cÙ): Releasing backup interface
[ 1485.832471][T20858] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[ 1485.879004][T20858] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1486.003797][T20858] bond0 (unregistering): Released all slaves
[ 1486.174899][T20861] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1486.196275][T20861] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1486.271099][T20866] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1486.347563][T20866] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1486.674456][T20875] netlink: 'syz.2.4676': attribute type 21 has an invalid length.
[ 1486.694619][T20875] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.4676'.
[ 1487.095178][T20885] netlink: 'syz.2.4681': attribute type 21 has an invalid length.
[ 1487.132604][T20885] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.4681'.
[ 1487.184395][T20885] netlink: 'syz.2.4681': attribute type 10 has an invalid length.
[ 1487.235422][T20885] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1487.399871][T20886] netlink: 'syz.3.4682': attribute type 39 has an invalid length.
[ 1487.762030][T20891] netlink: 'syz.2.4684': attribute type 21 has an invalid length.
[ 1487.787902][T20891] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.4684'.
[ 1487.823179][T20893] netlink: 'syz.2.4684': attribute type 10 has an invalid length.
[ 1487.833069][T20893] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1487.897880][T13705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1487.907790][T13705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1487.921408][T13705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1487.936839][T13705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1487.945299][T13705] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1487.955257][T13705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1488.202282][ T4988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.543164][ T4988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.635160][ T4988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.694275][ T4988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.723777][T20896] chnl_net:caif_netlink_parms(): no params data found
[ 1488.810368][T20896] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.817707][T20896] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1488.826442][T20896] bridge_slave_0: entered allmulticast mode
[ 1488.834100][T20896] bridge_slave_0: entered promiscuous mode
[ 1488.851236][T20896] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.862128][T20896] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1488.869389][T20896] bridge_slave_1: entered allmulticast mode
[ 1488.879696][T20896] bridge_slave_1: entered promiscuous mode
[ 1488.937291][T20896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1488.966041][T20896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.027676][T20896] team0: Port device team_slave_0 added
[ 1489.039754][T20896] team0: Port device team_slave_1 added
[ 1489.160564][T20896] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.175770][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1489.204281][T20896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1489.242919][T20896] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1489.249941][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1489.277138][T20896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1489.363869][T20896] hsr_slave_0: entered promiscuous mode
[ 1489.370699][T20896] hsr_slave_1: entered promiscuous mode
[ 1490.023261][T13705] Bluetooth: hci3: command tx timeout
[ 1490.296445][ T4988] hsr_slave_0: left promiscuous mode
[ 1490.323136][ T4988] hsr_slave_1: left promiscuous mode
[ 1490.329572][ T4988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1490.341993][ T4988] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1490.373234][ T4988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1490.380726][ T4988] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1490.403122][ T4988] bridge0: port 3(team0) entered disabled state
[ 1490.424232][ T4988] bridge_slave_1: left allmulticast mode
[ 1490.429994][ T4988] bridge_slave_1: left promiscuous mode
[ 1490.442138][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1490.473503][ T4988] bridge_slave_0: left allmulticast mode
[ 1490.479230][ T4988] bridge_slave_0: left promiscuous mode
[ 1490.502248][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1490.552639][ T4988] veth1_macvtap: left promiscuous mode
[ 1490.558351][ T4988] veth0_macvtap: left promiscuous mode
[ 1490.570799][ T4988] veth1_vlan: left allmulticast mode
[ 1490.580357][ T4988] veth1_vlan: left promiscuous mode
[ 1490.592238][ T4988] veth0_vlan: left promiscuous mode
[ 1491.012385][ T4988] macvlan0 (unregistering): left promiscuous mode
[ 1491.019251][ T4988] macvlan0 (unregistering): left allmulticast mode
[ 1491.030068][ T4988] team0 (unregistering): Port device macvlan0 removed
[ 1491.375397][ T4988] team_slave_1 (unregistering): left promiscuous mode
[ 1491.382506][ T4988] team_slave_1 (unregistering): left allmulticast mode
[ 1491.391250][ T4988] team0 (unregistering): Port device team_slave_1 removed
[ 1491.442123][ T4988] team_slave_0 (unregistering): left promiscuous mode
[ 1491.449068][ T4988] team_slave_0 (unregistering): left allmulticast mode
[ 1491.457838][ T4988] team0 (unregistering): Port device team_slave_0 removed
[ 1491.507454][ T4988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1491.556741][ T4988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1491.931381][ T4988] bond0 (unregistering): Released all slaves
[ 1492.071085][T20896] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1492.083239][T20896] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1492.102761][T20896] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1492.112055][T13705] Bluetooth: hci3: command tx timeout
[ 1492.126062][T20896] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1492.359934][T20896] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1492.387858][T20896] 8021q: adding VLAN 0 to HW filter on device team0
[ 1492.403441][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1492.410645][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1492.443276][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1492.450628][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1492.787367][T20896] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1492.860350][T20896] veth0_vlan: entered promiscuous mode
[ 1492.889812][T20896] veth1_vlan: entered promiscuous mode
[ 1492.946526][T20896] veth0_macvtap: entered promiscuous mode
[ 1492.961327][T20896] veth1_macvtap: entered promiscuous mode
[ 1493.005480][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1493.021601][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.032318][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1493.048020][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.058553][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1493.077344][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.090096][T20896] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1493.104137][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.115030][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.125969][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.136883][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.148687][T20896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1493.159738][T20896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1493.171375][T20896] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1493.194886][T20896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.204729][T20896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.216430][T20896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.229988][T20896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.370771][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1493.390230][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1493.412075][ T4988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1493.419959][ T4988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1494.192208][T13705] Bluetooth: hci3: command tx timeout
[ 1496.189105][T21027] netlink: 'syz.1.4700': attribute type 39 has an invalid length.
[ 1496.262017][T13705] Bluetooth: hci3: command tx timeout
[ 1496.850333][T21038] FAULT_INJECTION: forcing a failure.
[ 1496.850333][T21038] name failslab, interval 1, probability 0, space 0, times 0
[ 1496.872158][T21038] CPU: 0 PID: 21038 Comm: syz.3.4704 Not tainted syzkaller #0
[ 1496.879808][T21038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1496.890064][T21038] Call Trace:
[ 1496.893383][T21038]  <TASK>
[ 1496.896347][T21038]  dump_stack_lvl+0x18c/0x250
[ 1496.901221][T21038]  ? show_regs_print_info+0x20/0x20
[ 1496.906529][T21038]  ? load_image+0x420/0x420
[ 1496.911074][T21038]  ? __might_sleep+0xe0/0xe0
[ 1496.915681][T21038]  ? __lock_acquire+0x7d40/0x7d40
[ 1496.920736][T21038]  should_fail_ex+0x39d/0x4d0
[ 1496.925434][T21038]  should_failslab+0x9/0x20
[ 1496.929951][T21038]  slab_pre_alloc_hook+0x59/0x310
[ 1496.935068][T21038]  ? sk_prot_alloc+0xe7/0x210
[ 1496.939775][T21038]  ? sk_prot_alloc+0xe7/0x210
[ 1496.944484][T21038]  __kmem_cache_alloc_node+0x53/0x250
[ 1496.949888][T21038]  ? sk_prot_alloc+0xe7/0x210
[ 1496.954581][T21038]  __kmalloc+0xa4/0x230
[ 1496.958766][T21038]  sk_prot_alloc+0xe7/0x210
[ 1496.963287][T21038]  ? sk_alloc+0x24/0x360
[ 1496.967566][T21038]  sk_alloc+0x3a/0x360
[ 1496.971695][T21038]  ? bpf_ctx_init+0x163/0x1a0
[ 1496.976391][T21038]  ? bpf_prog_test_run_skb+0x273/0x12b0
[ 1496.982071][T21038]  bpf_prog_test_run_skb+0x3a5/0x12b0
[ 1496.987500][T21038]  ? __fget_files+0x28/0x4b0
[ 1496.992104][T21038]  ? __fget_files+0x28/0x4b0
[ 1496.996714][T21038]  ? __fget_files+0x43d/0x4b0
[ 1497.001416][T21038]  ? cpu_online+0x60/0x60
[ 1497.005815][T21038]  bpf_prog_test_run+0x321/0x390
[ 1497.010849][T21038]  __sys_bpf+0x49d/0x890
[ 1497.015137][T21038]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1497.020575][T21038]  ? lock_chain_count+0x20/0x20
[ 1497.025455][T21038]  __x64_sys_bpf+0x7c/0x90
[ 1497.029896][T21038]  do_syscall_64+0x55/0xa0
[ 1497.034343][T21038]  ? clear_bhb_loop+0x40/0x90
[ 1497.039032][T21038]  ? clear_bhb_loop+0x40/0x90
[ 1497.043747][T21038]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1497.049770][T21038] RIP: 0033:0x7efed919c819
[ 1497.054211][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1497.073843][T21038] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1497.082376][T21038] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1497.090372][T21038] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1497.098369][T21038] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1497.106448][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1497.114458][T21038] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1497.122479][T21038]  </TASK>
[ 1497.204675][T21043] netlink: 'syz.2.4706': attribute type 9 has an invalid length.
[ 1497.448673][T21043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1497.490045][T21048] netlink: 'syz.2.4706': attribute type 10 has an invalid length.
[ 1497.502467][T21048] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1498.565513][T21068] FAULT_INJECTION: forcing a failure.
[ 1498.565513][T21068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1498.578966][T21068] CPU: 0 PID: 21068 Comm: syz.3.4713 Not tainted syzkaller #0
[ 1498.586575][T21068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1498.596777][T21068] Call Trace:
[ 1498.600118][T21068]  <TASK>
[ 1498.603279][T21068]  dump_stack_lvl+0x18c/0x250
[ 1498.608116][T21068]  ? show_regs_print_info+0x20/0x20
[ 1498.613372][T21068]  ? load_image+0x420/0x420
[ 1498.618015][T21068]  ? __might_fault+0xaa/0x120
[ 1498.622744][T21068]  ? __lock_acquire+0x7d40/0x7d40
[ 1498.627819][T21068]  should_fail_ex+0x39d/0x4d0
[ 1498.632610][T21068]  _copy_from_user+0x2f/0xe0
[ 1498.637254][T21068]  __sys_bpf+0x23e/0x890
[ 1498.641811][T21068]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1498.647251][T21068]  ? lock_chain_count+0x20/0x20
[ 1498.652168][T21068]  __x64_sys_bpf+0x7c/0x90
[ 1498.656633][T21068]  do_syscall_64+0x55/0xa0
[ 1498.661191][T21068]  ? clear_bhb_loop+0x40/0x90
[ 1498.665923][T21068]  ? clear_bhb_loop+0x40/0x90
[ 1498.670653][T21068]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1498.676598][T21068] RIP: 0033:0x7efed919c819
[ 1498.681066][T21068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1498.700896][T21068] RSP: 002b:00007efeda084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1498.709333][T21068] RAX: ffffffffffffffda RBX: 00007efed9416090 RCX: 00007efed919c819
[ 1498.717492][T21068] RDX: 0000000000000020 RSI: 0000200000000680 RDI: 0000000000000009
[ 1498.725473][T21068] RBP: 00007efeda084090 R08: 0000000000000000 R09: 0000000000000000
[ 1498.733460][T21068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1498.741450][T21068] R13: 00007efed9416128 R14: 00007efed9416090 R15: 00007ffc6a334be8
[ 1498.749453][T21068]  </TASK>
[ 1501.806886][T21083] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[ 1501.865737][T21083] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[ 1502.105341][T21095] netlink: 'syz.2.4724': attribute type 153 has an invalid length.
[ 1502.133829][T21095] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4724'.
[ 1503.048448][T21132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4738'.
[ 1503.097582][T21133] FAULT_INJECTION: forcing a failure.
[ 1503.097582][T21133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1503.137320][T21133] CPU: 0 PID: 21133 Comm: syz.2.4737 Not tainted syzkaller #0
[ 1503.144997][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1503.155107][T21133] Call Trace:
[ 1503.158448][T21133]  <TASK>
[ 1503.161418][T21133]  dump_stack_lvl+0x18c/0x250
[ 1503.166151][T21133]  ? show_regs_print_info+0x20/0x20
[ 1503.171405][T21133]  ? load_image+0x420/0x420
[ 1503.175960][T21133]  ? __might_fault+0xaa/0x120
[ 1503.180687][T21133]  ? __lock_acquire+0x7d40/0x7d40
[ 1503.185863][T21133]  should_fail_ex+0x39d/0x4d0
[ 1503.190612][T21133]  _copy_from_user+0x2f/0xe0
[ 1503.195258][T21133]  ___sys_sendmsg+0x1c7/0x360
[ 1503.199976][T21133]  ? get_pid_task+0x20/0x1e0
[ 1503.204602][T21133]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1503.209410][T21133]  ? __lock_acquire+0x7d40/0x7d40
[ 1503.214489][T21133]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1503.219372][T21133]  ? __x64_sys_sendmsg+0x80/0x80
[ 1503.224431][T21133]  ? lockdep_hardirqs_on+0x98/0x150
[ 1503.229656][T21133]  do_syscall_64+0x55/0xa0
[ 1503.234091][T21133]  ? clear_bhb_loop+0x40/0x90
[ 1503.238795][T21133]  ? clear_bhb_loop+0x40/0x90
[ 1503.243494][T21133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1503.249405][T21133] RIP: 0033:0x7fbc2099c819
[ 1503.253835][T21133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1503.273631][T21133] RSP: 002b:00007fbc21832028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1503.282064][T21133] RAX: ffffffffffffffda RBX: 00007fbc20c16090 RCX: 00007fbc2099c819
[ 1503.290052][T21133] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003
[ 1503.298133][T21133] RBP: 00007fbc21832090 R08: 0000000000000000 R09: 0000000000000000
[ 1503.306116][T21133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1503.314106][T21133] R13: 00007fbc20c16128 R14: 00007fbc20c16090 R15: 00007fff33087918
[ 1503.322105][T21133]  </TASK>
[ 1504.096191][T21161] netlink: 'syz.1.4751': attribute type 10 has an invalid length.
[ 1504.804153][T21181] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.4760'.
[ 1504.896227][T21181] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1504.929733][T21181] openvswitch: netlink: Message has 4 unknown bytes.
[ 1505.568758][T21193] syzkaller0: entered promiscuous mode
[ 1505.591183][T21193] syzkaller0: entered allmulticast mode
[ 1507.540701][T21236] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4779'.
[ 1507.564321][T21236] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4779'.
[ 1507.890196][T21239] FAULT_INJECTION: forcing a failure.
[ 1507.890196][T21239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1507.904948][T21239] CPU: 1 PID: 21239 Comm: syz.1.4780 Not tainted syzkaller #0
[ 1507.912473][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1507.922877][T21239] Call Trace:
[ 1507.926205][T21239]  <TASK>
[ 1507.929207][T21239]  dump_stack_lvl+0x18c/0x250
[ 1507.933949][T21239]  ? show_regs_print_info+0x20/0x20
[ 1507.939201][T21239]  ? load_image+0x420/0x420
[ 1507.943761][T21239]  ? __lock_acquire+0x7d40/0x7d40
[ 1507.948837][T21239]  ? snprintf+0xe9/0x140
[ 1507.953147][T21239]  should_fail_ex+0x39d/0x4d0
[ 1507.957883][T21239]  _copy_to_user+0x2f/0xa0
[ 1507.962441][T21239]  simple_read_from_buffer+0xe7/0x150
[ 1507.967883][T21239]  proc_fail_nth_read+0x1e8/0x260
[ 1507.972988][T21239]  ? proc_fault_inject_write+0x360/0x360
[ 1507.978751][T21239]  ? fsnotify_perm+0x271/0x5e0
[ 1507.983716][T21239]  ? proc_fault_inject_write+0x360/0x360
[ 1507.989387][T21239]  vfs_read+0x28b/0x970
[ 1507.993569][T21239]  ? kernel_read+0x1e0/0x1e0
[ 1507.998267][T21239]  ? __fget_files+0x28/0x4b0
[ 1508.002891][T21239]  ? __fget_files+0x28/0x4b0
[ 1508.007550][T21239]  ? __fget_files+0x43d/0x4b0
[ 1508.012293][T21239]  ? __fdget_pos+0x2a3/0x330
[ 1508.016932][T21239]  ? ksys_read+0x75/0x260
[ 1508.021289][T21239]  ksys_read+0x150/0x260
[ 1508.025568][T21239]  ? vfs_write+0x990/0x990
[ 1508.030042][T21239]  ? lockdep_hardirqs_on+0x98/0x150
[ 1508.035289][T21239]  do_syscall_64+0x55/0xa0
[ 1508.039738][T21239]  ? clear_bhb_loop+0x40/0x90
[ 1508.044472][T21239]  ? clear_bhb_loop+0x40/0x90
[ 1508.049318][T21239]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1508.055315][T21239] RIP: 0033:0x7f34f9b5d04e
[ 1508.059844][T21239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1508.079578][T21239] RSP: 002b:00007f34faa72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1508.088029][T21239] RAX: ffffffffffffffda RBX: 00007f34faa736c0 RCX: 00007f34f9b5d04e
[ 1508.096116][T21239] RDX: 000000000000000f RSI: 00007f34faa730a0 RDI: 0000000000000004
[ 1508.104124][T21239] RBP: 00007f34faa73090 R08: 0000000000000000 R09: 0000000000000000
[ 1508.112395][T21239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1508.120518][T21239] R13: 00007f34f9e16038 R14: 00007f34f9e15fa0 R15: 00007ffe2c33eba8
[ 1508.128613][T21239]  </TASK>
[ 1508.418150][T21255] netlink: 'syz.3.4788': attribute type 2 has an invalid length.
[ 1508.427375][T21255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4788'.
[ 1508.926507][T21270] netlink: 'syz.2.4787': attribute type 39 has an invalid length.
[ 1509.100766][T21272] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1509.117474][T21274] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4792'.
[ 1509.152802][T21274] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4792'.
[ 1509.297588][T21276] FAULT_INJECTION: forcing a failure.
[ 1509.297588][T21276] name failslab, interval 1, probability 0, space 0, times 0
[ 1509.334560][T21276] CPU: 0 PID: 21276 Comm: syz.3.4793 Not tainted syzkaller #0
[ 1509.342124][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1509.352219][T21276] Call Trace:
[ 1509.355550][T21276]  <TASK>
[ 1509.358511][T21276]  dump_stack_lvl+0x18c/0x250
[ 1509.363237][T21276]  ? show_regs_print_info+0x20/0x20
[ 1509.368565][T21276]  ? load_image+0x420/0x420
[ 1509.373099][T21276]  ? lockdep_hardirqs_on+0x98/0x150
[ 1509.378351][T21276]  should_fail_ex+0x39d/0x4d0
[ 1509.383087][T21276]  should_failslab+0x9/0x20
[ 1509.387626][T21276]  slab_pre_alloc_hook+0x59/0x310
[ 1509.392692][T21276]  kmem_cache_alloc_node+0x60/0x320
[ 1509.397914][T21276]  ? __alloc_skb+0x103/0x2c0
[ 1509.402528][T21276]  __alloc_skb+0x103/0x2c0
[ 1509.407030][T21276]  alloc_skb_with_frags+0xca/0x7b0
[ 1509.412200][T21276]  ? __lock_acquire+0x7d40/0x7d40
[ 1509.417251][T21276]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1509.423520][T21276]  sock_alloc_send_pskb+0x883/0x9a0
[ 1509.428747][T21276]  ? lock_chain_count+0x20/0x20
[ 1509.433627][T21276]  ? sock_kzfree_s+0x50/0x50
[ 1509.438324][T21276]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1509.444513][T21276]  packet_sendmsg+0x316e/0x4d70
[ 1509.449400][T21276]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1509.455144][T21276]  ? irqentry_enter+0x37/0x50
[ 1509.459837][T21276]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1509.465925][T21276]  ? lock_chain_count+0x20/0x20
[ 1509.470796][T21276]  ? packet_getsockopt+0xad0/0xad0
[ 1509.476013][T21276]  ? lockdep_hardirqs_on+0x98/0x150
[ 1509.481243][T21276]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1509.487420][T21276]  ? packet_getsockopt+0xad0/0xad0
[ 1509.492555][T21276]  ? packet_getsockopt+0xad0/0xad0
[ 1509.497689][T21276]  ____sys_sendmsg+0x5ba/0x960
[ 1509.502473][T21276]  ? __lock_acquire+0x7d40/0x7d40
[ 1509.507602][T21276]  ? __asan_memset+0x22/0x40
[ 1509.512308][T21276]  ? __sys_sendmsg_sock+0x30/0x30
[ 1509.517348][T21276]  ? __import_iovec+0x3fa/0x850
[ 1509.522225][T21276]  ? import_iovec+0x73/0xa0
[ 1509.526747][T21276]  ___sys_sendmsg+0x2a6/0x360
[ 1509.531443][T21276]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1509.536226][T21276]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1509.542533][T21276]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1509.547411][T21276]  ? __x64_sys_sendmsg+0x80/0x80
[ 1509.552424][T21276]  ? lockdep_hardirqs_on+0x98/0x150
[ 1509.557814][T21276]  do_syscall_64+0x55/0xa0
[ 1509.562268][T21276]  ? clear_bhb_loop+0x40/0x90
[ 1509.566968][T21276]  ? clear_bhb_loop+0x40/0x90
[ 1509.571666][T21276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1509.577604][T21276] RIP: 0033:0x7efed919c819
[ 1509.582169][T21276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1509.601886][T21276] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1509.610546][T21276] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1509.618557][T21276] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1509.627342][T21276] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1509.635438][T21276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1509.643443][T21276] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1509.651495][T21276]  </TASK>
[ 1509.803850][T21283] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4797'.
[ 1509.813752][T21283] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1509.928410][T21283] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4797'.
[ 1509.959736][T21283] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.4797'.
[ 1510.070064][T21283] tipc: Started in network mode
[ 1510.131967][T21283] tipc: Node identity b, cluster identity 73
[ 1510.138366][T21283] tipc: Node number set to 11
[ 1510.696762][T21302] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4805'.
[ 1510.728911][T21302] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4805'.
[ 1511.804470][T21325] netlink: 'syz.0.4812': attribute type 7 has an invalid length.
[ 1512.104372][T21327] FAULT_INJECTION: forcing a failure.
[ 1512.104372][T21327] name failslab, interval 1, probability 0, space 0, times 0
[ 1512.167610][T21327] CPU: 1 PID: 21327 Comm: syz.1.4814 Not tainted syzkaller #0
[ 1512.175219][T21327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1512.185463][T21327] Call Trace:
[ 1512.188817][T21327]  <TASK>
[ 1512.191822][T21327]  dump_stack_lvl+0x18c/0x250
[ 1512.196612][T21327]  ? show_regs_print_info+0x20/0x20
[ 1512.201914][T21327]  ? load_image+0x420/0x420
[ 1512.206594][T21327]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1512.212779][T21327]  ? __asan_memset+0x22/0x40
[ 1512.217443][T21327]  should_fail_ex+0x39d/0x4d0
[ 1512.222194][T21327]  should_failslab+0x9/0x20
[ 1512.226750][T21327]  slab_pre_alloc_hook+0x59/0x310
[ 1512.231836][T21327]  ? __debug_object_init+0xec/0x450
[ 1512.237299][T21327]  kmem_cache_alloc+0x5a/0x2d0
[ 1512.242110][T21327]  ? slab_build_skb+0x2b/0x3f0
[ 1512.247030][T21327]  slab_build_skb+0x2b/0x3f0
[ 1512.251688][T21327]  bpf_prog_test_run_skb+0x3c8/0x12b0
[ 1512.257113][T21327]  ? __fget_files+0x28/0x4b0
[ 1512.261776][T21327]  ? __fget_files+0x28/0x4b0
[ 1512.266441][T21327]  ? __fget_files+0x43d/0x4b0
[ 1512.271651][T21327]  ? cpu_online+0x60/0x60
[ 1512.276135][T21327]  bpf_prog_test_run+0x321/0x390
[ 1512.281137][T21327]  __sys_bpf+0x49d/0x890
[ 1512.285439][T21327]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1512.290923][T21327]  ? lock_chain_count+0x20/0x20
[ 1512.295895][T21327]  __x64_sys_bpf+0x7c/0x90
[ 1512.300647][T21327]  do_syscall_64+0x55/0xa0
[ 1512.305115][T21327]  ? clear_bhb_loop+0x40/0x90
[ 1512.309844][T21327]  ? clear_bhb_loop+0x40/0x90
[ 1512.314724][T21327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1512.320689][T21327] RIP: 0033:0x7f34f9b9c819
[ 1512.325171][T21327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.345033][T21327] RSP: 002b:00007f34faa73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1512.353516][T21327] RAX: ffffffffffffffda RBX: 00007f34f9e15fa0 RCX: 00007f34f9b9c819
[ 1512.361552][T21327] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1512.369740][T21327] RBP: 00007f34faa73090 R08: 0000000000000000 R09: 0000000000000000
[ 1512.377839][T21327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1512.385958][T21327] R13: 00007f34f9e16038 R14: 00007f34f9e15fa0 R15: 00007ffe2c33eba8
[ 1512.394042][T21327]  </TASK>
[ 1512.653629][T21338] netlink: 'syz.3.4817': attribute type 10 has an invalid length.
[ 1512.877907][T21345] __nla_validate_parse: 2 callbacks suppressed
[ 1512.877931][T21345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4818'.
[ 1512.921532][T21345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4818'.
[ 1516.202157][T21375] netlink: 'syz.2.4828': attribute type 10 has an invalid length.
[ 1517.620784][T21396] netlink: 156788 bytes leftover after parsing attributes in process `syz.0.4835'.
[ 1518.356955][T21404] pim6reg1: entered promiscuous mode
[ 1518.381917][T21404] pim6reg1: entered allmulticast mode
[ 1518.899852][T20691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1518.911147][T20691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1518.920910][T20691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1518.930875][T20691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1518.953538][T20691] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1518.961231][T20691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1521.061987][T20691] Bluetooth: hci4: command tx timeout
[ 1522.016908][T21411] chnl_net:caif_netlink_parms(): no params data found
[ 1522.030602][T21427] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4846'.
[ 1522.093087][T21427] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4846'.
[ 1522.669173][T21431] netlink: 'syz.1.4848': attribute type 25 has an invalid length.
[ 1522.692538][T21431] netlink: 'syz.1.4848': attribute type 28 has an invalid length.
[ 1522.796059][ T5851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1522.913803][T21411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.921264][T21411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1522.930747][T21411] bridge_slave_0: entered allmulticast mode
[ 1522.962810][T21444] FAULT_INJECTION: forcing a failure.
[ 1522.962810][T21444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1522.964310][T21411] bridge_slave_0: entered promiscuous mode
[ 1523.025919][T21444] CPU: 1 PID: 21444 Comm: syz.1.4850 Not tainted syzkaller #0
[ 1523.033515][T21444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1523.043632][T21444] Call Trace:
[ 1523.046980][T21444]  <TASK>
[ 1523.049975][T21444]  dump_stack_lvl+0x18c/0x250
[ 1523.054780][T21444]  ? show_regs_print_info+0x20/0x20
[ 1523.060060][T21444]  ? load_image+0x420/0x420
[ 1523.064644][T21444]  ? __might_fault+0xaa/0x120
[ 1523.069407][T21444]  ? __lock_acquire+0x7d40/0x7d40
[ 1523.074521][T21444]  should_fail_ex+0x39d/0x4d0
[ 1523.079305][T21444]  _copy_from_user+0x2f/0xe0
[ 1523.083979][T21444]  ___sys_sendmsg+0x1c7/0x360
[ 1523.088740][T21444]  ? get_pid_task+0x20/0x1e0
[ 1523.093703][T21444]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1523.098651][T21444]  ? __lock_acquire+0x7d40/0x7d40
[ 1523.103883][T21444]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1523.108845][T21444]  ? __x64_sys_sendmsg+0x80/0x80
[ 1523.113933][T21444]  ? lockdep_hardirqs_on+0x98/0x150
[ 1523.119317][T21444]  do_syscall_64+0x55/0xa0
[ 1523.123808][T21444]  ? clear_bhb_loop+0x40/0x90
[ 1523.128661][T21444]  ? clear_bhb_loop+0x40/0x90
[ 1523.133446][T21444]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1523.139444][T21444] RIP: 0033:0x7f34f9b9c819
[ 1523.143941][T21444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1523.163831][T21444] RSP: 002b:00007f34faa73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1523.172324][T21444] RAX: ffffffffffffffda RBX: 00007f34f9e15fa0 RCX: 00007f34f9b9c819
[ 1523.180366][T21444] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000005
[ 1523.188404][T21444] RBP: 00007f34faa73090 R08: 0000000000000000 R09: 0000000000000000
[ 1523.196576][T21444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1523.204673][T21444] R13: 00007f34f9e16038 R14: 00007f34f9e15fa0 R15: 00007ffe2c33eba8
[ 1523.212761][T21444]  </TASK>
[ 1523.235088][T20691] Bluetooth: hci4: command tx timeout
[ 1523.274462][ T5851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.290040][T21441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4851'.
[ 1523.401612][ T5851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.432256][T21411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1523.451675][T21411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1523.459069][T21411] bridge_slave_1: entered allmulticast mode
[ 1523.467372][T21411] bridge_slave_1: entered promiscuous mode
[ 1523.652444][ T5851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.707717][T21411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1523.721555][T21411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1523.854601][T21411] team0: Port device team_slave_0 added
[ 1523.878063][T21411] team0: Port device team_slave_1 added
[ 1523.923314][T21462] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4857'.
[ 1523.988934][T21462] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4857'.
[ 1524.024030][T21411] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1524.051861][T21411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1524.087634][T21411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1524.134733][T21411] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1524.151854][T21411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1524.215476][T21411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1524.404857][T21471] netlink: 'syz.3.4861': attribute type 4 has an invalid length.
[ 1524.494286][T21471] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4861'.
[ 1525.231885][T21411] hsr_slave_0: entered promiscuous mode
[ 1525.269604][T21411] hsr_slave_1: entered promiscuous mode
[ 1525.303585][T20691] Bluetooth: hci4: command tx timeout
[ 1525.321935][T21411] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1525.329678][T21411] Cannot create hsr debugfs directory
[ 1525.549973][ T5851] tipc: Left network mode
[ 1527.382818][T20691] Bluetooth: hci4: command tx timeout
[ 1527.665854][T21531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4872'.
[ 1527.716369][T21531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4872'.
[ 1528.335157][T21548] FAULT_INJECTION: forcing a failure.
[ 1528.335157][T21548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1528.380489][T21548] CPU: 1 PID: 21548 Comm: syz.0.4877 Not tainted syzkaller #0
[ 1528.388041][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1528.398143][T21548] Call Trace:
[ 1528.401462][T21548]  <TASK>
[ 1528.404434][T21548]  dump_stack_lvl+0x18c/0x250
[ 1528.409167][T21548]  ? show_regs_print_info+0x20/0x20
[ 1528.414429][T21548]  ? load_image+0x420/0x420
[ 1528.419001][T21548]  ? __might_fault+0xaa/0x120
[ 1528.423723][T21548]  ? __lock_acquire+0x7d40/0x7d40
[ 1528.428799][T21548]  should_fail_ex+0x39d/0x4d0
[ 1528.429661][T21550] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4878'.
[ 1528.433614][T21548]  _copy_from_user+0x2f/0xe0
[ 1528.433649][T21548]  ___sys_sendmsg+0x1c7/0x360
[ 1528.433670][T21548]  ? get_pid_task+0x20/0x1e0
[ 1528.433700][T21548]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1528.433741][T21548]  ? __lock_acquire+0x7d40/0x7d40
[ 1528.433790][T21548]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1528.433814][T21548]  ? __x64_sys_sendmsg+0x80/0x80
[ 1528.433860][T21548]  ? lockdep_hardirqs_on+0x98/0x150
[ 1528.433888][T21548]  do_syscall_64+0x55/0xa0
[ 1528.433905][T21548]  ? clear_bhb_loop+0x40/0x90
[ 1528.433929][T21548]  ? clear_bhb_loop+0x40/0x90
[ 1528.433954][T21548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1528.433977][T21548] RIP: 0033:0x7f42f3d9c819
[ 1528.433997][T21548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1528.434014][T21548] RSP: 002b:00007f42f4bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1528.534128][T21548] RAX: ffffffffffffffda RBX: 00007f42f4015fa0 RCX: 00007f42f3d9c819
[ 1528.542147][T21548] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[ 1528.550128][T21548] RBP: 00007f42f4bff090 R08: 0000000000000000 R09: 0000000000000000
[ 1528.558114][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1528.566097][T21548] R13: 00007f42f4016038 R14: 00007f42f4015fa0 R15: 00007ffdc237c278
[ 1528.574185][T21548]  </TASK>
[ 1528.783690][T21553] netlink: 'syz.0.4879': attribute type 4 has an invalid length.
[ 1528.802251][T21553] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4879'.
[ 1528.833075][T21411] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1528.862186][T21550] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4878'.
[ 1528.997875][ T5851] hsr_slave_0: left promiscuous mode
[ 1529.084727][ T5851] hsr_slave_1: left promiscuous mode
[ 1529.147888][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1529.167933][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1529.185141][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1529.211916][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1529.269983][ T5851] veth1_macvtap: left promiscuous mode
[ 1529.291161][ T5851] veth0_macvtap: left promiscuous mode
[ 1529.317961][ T5851] veth1_vlan: left promiscuous mode
[ 1529.331963][ T5851] veth0_vlan: left promiscuous mode
[ 1530.011192][ T5851] team0 (unregistering): Port device macvlan0 removed
[ 1530.614026][ T5851] team0 (unregistering): Port device team_slave_1 removed
[ 1530.704156][ T5851] team0 (unregistering): Port device C removed
[ 1531.394403][T21411] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1531.411459][T21558] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[ 1531.419956][T21558] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[ 1531.480717][T21411] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1531.525092][T21411] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1531.705217][T21572] syz.1.4885[21572] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1531.705557][T21572] syz.1.4885[21572] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1531.753655][T21572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4885'.
[ 1532.154911][T21411] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1532.428283][T21411] 8021q: adding VLAN 0 to HW filter on device team0
[ 1532.449624][T21592] tap0: tun_chr_ioctl cmd 1074025677
[ 1532.456466][T21592] tap0: linktype set to 778
[ 1532.510466][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1532.517743][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1532.575695][T14309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1532.583207][T14309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1532.835643][T21598] netlink: 'syz.1.4890': attribute type 4 has an invalid length.
[ 1532.883131][T21598] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4890'.
[ 1533.548934][T21620] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[ 1533.561972][T21620] mac80211_hwsim hwsim16 wlan0: left allmulticast mode
[ 1533.602141][T21621] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[ 1533.609727][T21621] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[ 1534.038791][T21411] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1534.175538][T21411] veth0_vlan: entered promiscuous mode
[ 1534.252781][T21640] netlink: 'syz.0.4900': attribute type 10 has an invalid length.
[ 1534.339336][T21411] veth1_vlan: entered promiscuous mode
[ 1534.447170][T21411] veth0_macvtap: entered promiscuous mode
[ 1534.505152][T21411] veth1_macvtap: entered promiscuous mode
[ 1534.565128][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.596067][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.626564][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.668714][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.681351][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.716619][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.738709][T21411] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1534.760726][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.798281][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.819875][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.851883][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.881990][T21411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.921969][T21411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.957609][T21411] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1535.017421][T21411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.052990][T21411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.077824][T21411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.101809][T21411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.425682][T21670] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1535.442213][T21670] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1535.477223][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.516883][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1535.627802][ T5851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.665660][ T5851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1535.883848][T21682] FAULT_INJECTION: forcing a failure.
[ 1535.883848][T21682] name failslab, interval 1, probability 0, space 0, times 0
[ 1535.918435][T21682] CPU: 1 PID: 21682 Comm: syz.3.4910 Not tainted syzkaller #0
[ 1535.925989][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1535.936092][T21682] Call Trace:
[ 1535.939582][T21682]  <TASK>
[ 1535.942634][T21682]  dump_stack_lvl+0x18c/0x250
[ 1535.947368][T21682]  ? show_regs_print_info+0x20/0x20
[ 1535.952797][T21682]  ? load_image+0x420/0x420
[ 1535.957435][T21682]  ? __might_sleep+0xe0/0xe0
[ 1535.962080][T21682]  ? __lock_acquire+0x7d40/0x7d40
[ 1535.967330][T21682]  should_fail_ex+0x39d/0x4d0
[ 1535.972064][T21682]  should_failslab+0x9/0x20
[ 1535.976623][T21682]  slab_pre_alloc_hook+0x59/0x310
[ 1535.981782][T21682]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1535.987358][T21682]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1535.993037][T21682]  __kmem_cache_alloc_node+0x53/0x250
[ 1535.998776][T21682]  ? bpf_prog_test_run_skb+0x238/0x12b0
[ 1536.004339][T21682]  __kmalloc+0xa4/0x230
[ 1536.008560][T21682]  bpf_prog_test_run_skb+0x238/0x12b0
[ 1536.013947][T21682]  ? __fget_files+0x28/0x4b0
[ 1536.018552][T21682]  ? __fget_files+0x28/0x4b0
[ 1536.023162][T21682]  ? __fget_files+0x43d/0x4b0
[ 1536.027862][T21682]  ? cpu_online+0x60/0x60
[ 1536.032206][T21682]  bpf_prog_test_run+0x321/0x390
[ 1536.037162][T21682]  __sys_bpf+0x49d/0x890
[ 1536.041616][T21682]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1536.047015][T21682]  ? lock_chain_count+0x20/0x20
[ 1536.051901][T21682]  __x64_sys_bpf+0x7c/0x90
[ 1536.056415][T21682]  do_syscall_64+0x55/0xa0
[ 1536.060840][T21682]  ? clear_bhb_loop+0x40/0x90
[ 1536.065585][T21682]  ? clear_bhb_loop+0x40/0x90
[ 1536.070369][T21682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1536.076280][T21682] RIP: 0033:0x7efed919c819
[ 1536.080718][T21682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1536.100427][T21682] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1536.108948][T21682] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1536.117024][T21682] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[ 1536.125005][T21682] RBP: 00007efeda0a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1536.133250][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1536.141235][T21682] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1536.149319][T21682]  </TASK>
[ 1537.251108][T13705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1537.282700][T13705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1537.291446][T13705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1537.302736][T13705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1537.334300][T13705] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1537.342619][T13705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1537.804937][T21707] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[ 1537.822774][T21707] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[ 1538.131468][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.287994][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.574916][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.813214][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1539.392267][T13705] Bluetooth: hci0: command tx timeout
[ 1540.055419][T21710] chnl_net:caif_netlink_parms(): no params data found
[ 1540.486429][T21773] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4938'.
[ 1540.544962][T21773] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4938'.
[ 1540.559872][T21710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1540.582861][T21710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1540.591591][T21710] bridge_slave_0: entered allmulticast mode
[ 1540.691625][T21710] bridge_slave_0: entered promiscuous mode
[ 1540.712089][T21710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1540.719597][T21710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1540.727168][T21710] bridge_slave_1: entered allmulticast mode
[ 1540.734996][T21710] bridge_slave_1: entered promiscuous mode
[ 1540.820014][T21780] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4938'.
[ 1540.959237][T21710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1541.035774][T21710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1541.200262][T21710] team0: Port device team_slave_0 added
[ 1541.439484][T21800] netlink: 'syz.1.4944': attribute type 3 has an invalid length.
[ 1541.455409][T21710] team0: Port device team_slave_1 added
[ 1541.466889][T13705] Bluetooth: hci0: command tx timeout
[ 1541.493171][T21800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4944'.
[ 1541.964322][T21710] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1541.971616][T21710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1542.058846][T21710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1542.152207][T21710] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1542.159237][T21710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1542.234993][T21710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1542.539215][T21710] hsr_slave_0: entered promiscuous mode
[ 1542.556889][T21710] hsr_slave_1: entered promiscuous mode
[ 1542.563984][T21710] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1542.573900][T21710] Cannot create hsr debugfs directory
[ 1543.541857][T13705] Bluetooth: hci0: command tx timeout
[ 1543.956281][   T59] hsr_slave_0: left promiscuous mode
[ 1543.966537][   T59] hsr_slave_1: left promiscuous mode
[ 1543.973921][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1543.981480][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1543.990431][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1543.999519][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1544.008357][   T59] hsr0: left allmulticast mode
[ 1544.013874][   T59] bridge0: port 2(hsr0) entered disabled state
[ 1544.024425][   T59] bridge_slave_0: left allmulticast mode
[ 1544.030505][   T59] bridge_slave_0: left promiscuous mode
[ 1544.037628][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1544.071575][   T59] veth1_macvtap: left promiscuous mode
[ 1544.081046][   T59] veth0_macvtap: left promiscuous mode
[ 1545.621920][T13705] Bluetooth: hci0: command tx timeout
[ 1546.434834][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.441675][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1559.573953][T20691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1559.587405][T20691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1559.602173][T20691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1559.611136][T20691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1559.620139][T20691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1559.630551][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1559.640545][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1559.649407][T21877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1559.658465][T13705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1559.672918][T13705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1559.682028][T13705] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1559.691019][T13705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1560.406569][T20691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1560.416298][T20691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1560.424884][T20691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1560.436731][T20691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1560.445576][T20691] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1560.454105][T20691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1561.702028][T13705] Bluetooth: hci1: command tx timeout
[ 1561.783384][T13705] Bluetooth: hci5: command tx timeout
[ 1562.501893][T13705] Bluetooth: hci6: command tx timeout
[ 1563.781919][T13705] Bluetooth: hci1: command tx timeout
[ 1563.862040][T13705] Bluetooth: hci5: command tx timeout
[ 1564.591867][T13705] Bluetooth: hci6: command tx timeout
[ 1565.861962][T13705] Bluetooth: hci1: command tx timeout
[ 1565.942160][T13705] Bluetooth: hci5: command tx timeout
[ 1566.661862][T13705] Bluetooth: hci6: command tx timeout
[ 1567.952012][T13705] Bluetooth: hci1: command tx timeout
[ 1568.021970][T13705] Bluetooth: hci5: command tx timeout
[ 1568.756065][T13705] Bluetooth: hci6: command tx timeout
[ 1597.007838][T20691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1597.023061][T20691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1597.031578][T20691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1597.043747][T20691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1597.052056][T20691] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1597.062249][T20691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1599.141993][T20691] Bluetooth: hci7: command tx timeout
[ 1601.232430][T20691] Bluetooth: hci7: command tx timeout
[ 1603.301899][T20691] Bluetooth: hci7: command tx timeout
[ 1605.381971][T20691] Bluetooth: hci7: command tx timeout
[ 1607.875213][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.881593][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1615.061954][T13705] Bluetooth: hci3: command 0x0406 tx timeout
[ 1620.193645][T13705] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1620.204156][T13705] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1620.212416][T13705] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1620.223765][T13705] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1620.232350][T13705] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1620.241272][T13705] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1620.287397][T13705] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1620.297666][T13705] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1620.307228][T13705] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1620.318916][T13705] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1620.327604][T13705] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1620.336524][T13705] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1620.987423][T20691] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1620.999239][T20691] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1621.007883][T20691] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1621.018079][T20691] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1621.026476][T20691] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1621.035030][T20691] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1622.351947][T20691] Bluetooth: hci8: command tx timeout
[ 1622.422052][T20691] Bluetooth: hci9: command tx timeout
[ 1623.062718][T20691] Bluetooth: hci10: command tx timeout
[ 1624.421911][T20691] Bluetooth: hci8: command tx timeout
[ 1624.502258][T20691] Bluetooth: hci9: command tx timeout
[ 1625.141911][T20691] Bluetooth: hci10: command tx timeout
[ 1626.501916][T20691] Bluetooth: hci8: command tx timeout
[ 1626.582026][T20691] Bluetooth: hci9: command tx timeout
[ 1627.231940][T20691] Bluetooth: hci10: command tx timeout
[ 1628.581898][T20691] Bluetooth: hci8: command tx timeout
[ 1628.662791][T20691] Bluetooth: hci9: command tx timeout
[ 1629.302033][T20691] Bluetooth: hci10: command tx timeout
[ 1645.781871][T13705] Bluetooth: hci4: command 0x0406 tx timeout
[ 1657.990477][T13705] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1658.000723][T13705] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1658.009925][T13705] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1658.019405][T13705] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1658.030046][T13705] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1658.038701][T13705] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1660.111890][T13705] Bluetooth: hci11: command tx timeout
[ 1661.141904][T13705] Bluetooth: hci0: command 0x0406 tx timeout
[ 1662.191997][T20691] Bluetooth: hci11: command tx timeout
[ 1664.261979][T20691] Bluetooth: hci11: command tx timeout
[ 1666.342130][T20691] Bluetooth: hci11: command tx timeout
[ 1669.305409][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.312855][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1680.174046][T13705] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1680.186222][T13705] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1680.195523][T13705] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1680.205983][T13705] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1680.215508][T13705] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1680.226751][T13705] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1680.319803][T13705] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1680.328610][T13705] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1680.338375][T13705] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1680.348968][T13705] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1680.357128][T13705] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1680.365341][T13705] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1681.517004][T20691] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1681.531636][T20691] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1681.541414][T20691] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1681.554171][T20691] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1681.563382][T20691] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1681.571602][T20691] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1682.262038][T13705] Bluetooth: hci12: command tx timeout
[ 1682.422643][T13705] Bluetooth: hci13: command tx timeout
[ 1683.621984][T13705] Bluetooth: hci14: command tx timeout
[ 1684.341971][T13705] Bluetooth: hci12: command tx timeout
[ 1684.502242][T13705] Bluetooth: hci13: command tx timeout
[ 1685.701997][ T5814] Bluetooth: hci14: command tx timeout
[ 1686.431982][ T5814] Bluetooth: hci12: command tx timeout
[ 1686.592000][ T5814] Bluetooth: hci13: command tx timeout
[ 1686.741972][ T5814] Bluetooth: hci6: command 0x0406 tx timeout
[ 1686.745298][T21876] Bluetooth: hci5: command 0x0406 tx timeout
[ 1686.751873][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[ 1687.791958][T13705] Bluetooth: hci14: command tx timeout
[ 1688.501854][T13705] Bluetooth: hci12: command tx timeout
[ 1688.662024][T13705] Bluetooth: hci13: command tx timeout
[ 1689.862366][T13705] Bluetooth: hci14: command tx timeout
[ 1691.706407][   T29] INFO: task kworker/0:0:8 blocked for more than 143 seconds.
[ 1691.714277][   T29]       Not tainted syzkaller #0
[ 1691.719254][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1691.729277][   T29] task:kworker/0:0     state:D stack:23496 pid:8     ppid:2      flags:0x00004000
[ 1691.745610][   T29] Workqueue: events switchdev_deferred_process_work
[ 1691.752623][   T29] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1691.755950][   T29]  <TASK>
[ 1691.758937][   T29]  __schedule+0x1553/0x45a0
[ 1691.764156][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1691.769259][   T29]  ? mark_lock+0x94/0x320
[ 1691.773830][   T29]  ? asan.module_dtor+0x20/0x20
[ 1691.779036][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1691.785458][   T29]  schedule+0xbd/0x170
[ 1691.789607][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1691.795183][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1691.799744][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1691.804625][   T29]  ? switchdev_deferred_process_work+0xe/0x20
[ 1691.810841][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1691.815899][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1691.821165][   T29]  ? process_scheduled_works+0x96f/0x15d0
[ 1691.861736][   T29]  switchdev_deferred_process_work+0xe/0x20
[ 1691.867832][   T29]  process_scheduled_works+0xa5d/0x15d0
[ 1691.901818][   T29]  ? worker_attach_to_pool+0x380/0x380
[ 1691.907376][   T29]  ? assign_work+0x3d2/0x5d0
[ 1691.916222][   T29]  worker_thread+0xa55/0xfc0
[ 1691.920921][   T29]  kthread+0x2fa/0x390
[ 1691.925124][   T29]  ? pr_cont_work+0x560/0x560
[ 1691.929878][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1691.938889][   T29]  ret_from_fork+0x48/0x80
[ 1691.951026][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1691.956050][   T29]  ret_from_fork_asm+0x11/0x20
[ 1691.960890][   T29]  </TASK>
[ 1691.964120][   T29] INFO: task dhcpcd:5432 blocked for more than 143 seconds.
[ 1691.971443][   T29]       Not tainted syzkaller #0
[ 1691.976570][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1691.985803][   T29] task:dhcpcd          state:D stack:20968 pid:5432  ppid:5431   flags:0x00004002
[ 1691.995175][   T29] Call Trace:
[ 1691.998521][   T29]  <TASK>
[ 1692.001500][   T29]  __schedule+0x1553/0x45a0
[ 1692.006423][   T29]  ? asan.module_dtor+0x20/0x20
[ 1692.011349][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1692.016252][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1692.021856][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1692.028266][   T29]  schedule+0xbd/0x170
[ 1692.032654][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1692.038158][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1692.042873][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1692.047705][   T29]  ? devinet_ioctl+0x30c/0x1c40
[ 1692.053010][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1692.058010][   T29]  ? bpf_lsm_capable+0x9/0x10
[ 1692.062801][   T29]  ? security_capable+0x89/0xb0
[ 1692.067693][   T29]  devinet_ioctl+0x30c/0x1c40
[ 1692.072478][   T29]  ? inet_ifa_byprefix+0x2a0/0x2a0
[ 1692.077641][   T29]  ? _copy_from_user+0xa5/0xe0
[ 1692.082531][   T29]  ? get_user_ifreq+0x12b/0x180
[ 1692.087767][   T29]  inet_ioctl+0x42b/0x560
[ 1692.092315][   T29]  ? tomoyo_path_number_perm+0x217/0x620
[ 1692.098112][   T29]  ? inet_shutdown+0x370/0x370
[ 1692.103678][   T29]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1692.109365][   T29]  ? tomoyo_path_number_perm+0x500/0x620
[ 1692.115386][   T29]  ? __kmem_cache_free+0xba/0x1e0
[ 1692.120700][   T29]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1692.126262][   T29]  sock_do_ioctl+0xfc/0x310
[ 1692.130802][   T29]  ? sock_show_fdinfo+0xb0/0xb0
[ 1692.135793][   T29]  sock_ioctl+0x5ba/0x7e0
[ 1692.140167][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1692.146406][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1692.150940][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1692.157009][   T29]  ? fd_install+0x60/0x4e0
[ 1692.161694][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1692.166674][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1692.171954][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1692.176520][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1692.181175][   T29]  do_syscall_64+0x55/0xa0
[ 1692.185686][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.191118][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.195988][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1692.201967][   T29] RIP: 0033:0x7f13cc22c378
[ 1692.206431][   T29] RSP: 002b:00007ffc3b15f988 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1692.215181][   T29] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007f13cc22c378
[ 1692.223338][   T29] RDX: 00007ffc3b16fb80 RSI: 0000000000008914 RDI: 0000000000000012
[ 1692.231450][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1692.239532][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3b17fd20
[ 1692.247911][   T29] R13: 00007f13cc12c6c8 R14: 0000000000000028 R15: 0000000000008914
[ 1692.256066][   T29]  </TASK>
[ 1692.259170][   T29] INFO: task kworker/u4:2:5851 blocked for more than 143 seconds.
[ 1692.267167][   T29]       Not tainted syzkaller #0
[ 1692.272253][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1692.280979][   T29] task:kworker/u4:2    state:D stack:21928 pid:5851  ppid:2      flags:0x00004000
[ 1692.290294][   T29] Workqueue: events_unbound linkwatch_event
[ 1692.296840][   T29] Call Trace:
[ 1692.300176][   T29]  <TASK>
[ 1692.303256][   T29]  __schedule+0x1553/0x45a0
[ 1692.307846][   T29]  ? asan.module_dtor+0x20/0x20
[ 1692.313422][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1692.318146][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1692.323817][   T29]  ? kthread_data+0x4f/0xc0
[ 1692.328524][   T29]  ? wq_worker_sleeping+0x63/0x240
[ 1692.334921][   T29]  schedule+0xbd/0x170
[ 1692.339074][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1692.344968][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1692.349723][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1692.354585][   T29]  ? linkwatch_event+0xe/0x60
[ 1692.359432][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1692.364561][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1692.369813][   T29]  ? process_scheduled_works+0x96f/0x15d0
[ 1692.375825][   T29]  linkwatch_event+0xe/0x60
[ 1692.380391][   T29]  process_scheduled_works+0xa5d/0x15d0
[ 1692.386067][   T29]  ? worker_attach_to_pool+0x380/0x380
[ 1692.391820][   T29]  ? assign_work+0x3d2/0x5d0
[ 1692.396816][   T29]  worker_thread+0xa55/0xfc0
[ 1692.401477][   T29]  kthread+0x2fa/0x390
[ 1692.405705][   T29]  ? pr_cont_work+0x560/0x560
[ 1692.410443][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1692.415162][   T29]  ret_from_fork+0x48/0x80
[ 1692.419716][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1692.424705][   T29]  ret_from_fork_asm+0x11/0x20
[ 1692.429531][   T29]  </TASK>
[ 1692.433208][   T29] INFO: task syz-executor:21710 blocked for more than 144 seconds.
[ 1692.441135][   T29]       Not tainted syzkaller #0
[ 1692.446762][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1692.455643][   T29] task:syz-executor    state:D stack:21960 pid:21710 ppid:1      flags:0x00004004
[ 1692.465143][   T29] Call Trace:
[ 1692.468462][   T29]  <TASK>
[ 1692.471452][   T29]  __schedule+0x1553/0x45a0
[ 1692.476367][   T29]  ? asan.module_dtor+0x20/0x20
[ 1692.481267][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1692.486048][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1692.491568][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1692.498616][   T29]  schedule+0xbd/0x170
[ 1692.503300][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1692.508805][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1692.513435][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1692.518336][   T29]  ? rtnetlink_rcv_msg+0x811/0xfa0
[ 1692.523536][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1692.528509][   T29]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1692.536303][   T29]  rtnetlink_rcv_msg+0x811/0xfa0
[ 1692.541267][   T29]  ? rtnetlink_bind+0x80/0x80
[ 1692.547315][   T29]  ? mark_lock+0x94/0x320
[ 1692.555614][   T29]  ? __lock_acquire+0x1273/0x7d40
[ 1692.560722][   T29]  ? __kernel_text_address+0xd/0x30
[ 1692.566060][   T29]  ? mark_lock+0x94/0x320
[ 1692.570639][   T29]  ? mark_lock+0x94/0x320
[ 1692.579567][   T29]  ? __lock_acquire+0x1273/0x7d40
[ 1692.584817][   T29]  ? kmalloc_reserve+0x95/0x240
[ 1692.589742][   T29]  ? verify_lock_unused+0x140/0x140
[ 1692.600263][   T29]  ? verify_lock_unused+0x140/0x140
[ 1692.606862][   T29]  netlink_rcv_skb+0x241/0x4d0
[ 1692.612031][   T29]  ? rtnetlink_bind+0x80/0x80
[ 1692.616948][   T29]  ? netlink_ack+0x1180/0x1180
[ 1692.621856][   T29]  ? __lock_acquire+0x7d40/0x7d40
[ 1692.626927][   T29]  ? net_generic+0x1e/0x240
[ 1692.631505][   T29]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1692.636987][   T29]  netlink_unicast+0x751/0x8d0
[ 1692.641908][   T29]  netlink_sendmsg+0x8d0/0xbf0
[ 1692.647009][   T29]  ? netlink_getsockopt+0x590/0x590
[ 1692.656672][   T29]  ? aa_sock_msg_perm+0x94/0x150
[ 1692.661937][   T29]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1692.667269][   T29]  ? security_socket_sendmsg+0x80/0xa0
[ 1692.674102][   T29]  __sys_sendto+0x4a9/0x6b0
[ 1692.678685][   T29]  ? __ia32_sys_getpeername+0x90/0x90
[ 1692.684246][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1692.690274][   T29]  ? lock_chain_count+0x20/0x20
[ 1692.695241][   T29]  __x64_sys_sendto+0xde/0xf0
[ 1692.699964][   T29]  do_syscall_64+0x55/0xa0
[ 1692.705148][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.709894][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.714716][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1692.721172][   T29] RIP: 0033:0x7f6eed75d04e
[ 1692.725694][   T29] RSP: 002b:00007fff4b3edd58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1692.734224][   T29] RAX: ffffffffffffffda RBX: 0000555556a0e500 RCX: 00007f6eed75d04e
[ 1692.742414][   T29] RDX: 0000000000000054 RSI: 00007f6eee544670 RDI: 0000000000000003
[ 1692.750477][   T29] RBP: 0000000000000001 R08: 00007fff4b3eddd4 R09: 000000000000000c
[ 1692.758565][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1692.766907][   T29] R13: 0000000000000000 R14: 00007f6eee544670 R15: 0000000000000000
[ 1692.775156][   T29]  </TASK>
[ 1692.778301][   T29] INFO: task syz.1.4959:21851 blocked for more than 144 seconds.
[ 1692.786222][   T29]       Not tainted syzkaller #0
[ 1692.791208][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1692.799953][   T29] task:syz.1.4959      state:D stack:21288 pid:21851 ppid:20896  flags:0x00004006
[ 1692.809787][   T29] Call Trace:
[ 1692.813231][   T29]  <TASK>
[ 1692.816207][   T29]  __schedule+0x1553/0x45a0
[ 1692.820764][   T29]  ? lock_chain_count+0x20/0x20
[ 1692.825895][   T29]  ? asan.module_dtor+0x20/0x20
[ 1692.830849][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1692.835671][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1692.841163][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1692.847843][   T29]  schedule+0xbd/0x170
[ 1692.852051][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1692.857560][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1692.862142][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1692.866942][   T29]  ? dev_ioctl+0x7a4/0x1140
[ 1692.871481][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1692.876737][   T29]  ? dev_load+0x21/0x1f0
[ 1692.881029][   T29]  ? dev_load+0x21/0x1f0
[ 1692.885404][   T29]  dev_ioctl+0x7a4/0x1140
[ 1692.889789][   T29]  sock_do_ioctl+0x239/0x310
[ 1692.894774][   T29]  ? sock_show_fdinfo+0xb0/0xb0
[ 1692.899698][   T29]  sock_ioctl+0x5ba/0x7e0
[ 1692.904221][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1692.909278][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1692.914531][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1692.919956][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1692.924747][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1692.929414][   T29]  do_syscall_64+0x55/0xa0
[ 1692.934575][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.939325][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1692.944123][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1692.950204][   T29] RIP: 0033:0x7f34f9b9c819
[ 1692.954751][   T29] RSP: 002b:00007f34faa73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1692.963369][   T29] RAX: ffffffffffffffda RBX: 00007f34f9e15fa0 RCX: 00007f34f9b9c819
[ 1692.971388][   T29] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000007
[ 1692.979514][   T29] RBP: 00007f34f9c32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1692.995249][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1693.003385][   T29] R13: 00007f34f9e16038 R14: 00007f34f9e15fa0 R15: 00007ffe2c33eba8
[ 1693.012393][   T29]  </TASK>
[ 1693.015522][   T29] INFO: task syz.3.4960:21854 blocked for more than 144 seconds.
[ 1693.023361][   T29]       Not tainted syzkaller #0
[ 1693.028452][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1693.037296][   T29] task:syz.3.4960      state:D stack:21288 pid:21854 ppid:14518  flags:0x00004004
[ 1693.046715][   T29] Call Trace:
[ 1693.050125][   T29]  <TASK>
[ 1693.053306][   T29]  __schedule+0x1553/0x45a0
[ 1693.057941][   T29]  ? lock_chain_count+0x20/0x20
[ 1693.063365][   T29]  ? asan.module_dtor+0x20/0x20
[ 1693.068275][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1693.073327][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1693.078847][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1693.085215][   T29]  schedule+0xbd/0x170
[ 1693.089355][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1693.095031][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1693.099581][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1693.104360][   T29]  ? dev_ioctl+0x7a4/0x1140
[ 1693.108905][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1693.114714][   T29]  ? dev_load+0x21/0x1f0
[ 1693.119019][   T29]  ? dev_load+0x21/0x1f0
[ 1693.124559][   T29]  dev_ioctl+0x7a4/0x1140
[ 1693.128959][   T29]  sock_do_ioctl+0x239/0x310
[ 1693.133657][   T29]  ? sock_show_fdinfo+0xb0/0xb0
[ 1693.138578][   T29]  sock_ioctl+0x5ba/0x7e0
[ 1693.143194][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1693.147683][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1693.152823][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1693.157983][   T29]  ? sock_poll+0x3e0/0x3e0
[ 1693.162569][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1693.167225][   T29]  do_syscall_64+0x55/0xa0
[ 1693.171759][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.176498][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.181292][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1693.187357][   T29] RIP: 0033:0x7efed919c819
[ 1693.191882][   T29] RSP: 002b:00007efeda0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1693.200351][   T29] RAX: ffffffffffffffda RBX: 00007efed9415fa0 RCX: 00007efed919c819
[ 1693.208691][   T29] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006
[ 1693.217120][   T29] RBP: 00007efed9232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1693.225347][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1693.233442][   T29] R13: 00007efed9416038 R14: 00007efed9415fa0 R15: 00007ffc6a334be8
[ 1693.241586][   T29]  </TASK>
[ 1693.244741][   T29] INFO: task syz.2.4964:21865 blocked for more than 144 seconds.
[ 1693.252639][   T29]       Not tainted syzkaller #0
[ 1693.257617][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1693.266804][   T29] task:syz.2.4964      state:D stack:26472 pid:21865 ppid:21411  flags:0x00004004
[ 1693.276127][   T29] Call Trace:
[ 1693.279718][   T29]  <TASK>
[ 1693.282813][   T29]  __schedule+0x1553/0x45a0
[ 1693.287390][   T29]  ? asan.module_dtor+0x20/0x20
[ 1693.292874][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1693.297698][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1693.303721][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1693.309948][   T29]  schedule+0xbd/0x170
[ 1693.314211][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1693.320308][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1693.325020][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1693.330086][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[ 1693.335235][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1693.340213][   T29]  ? __might_fault+0xaa/0x120
[ 1693.345003][   T29]  ? __might_fault+0xc6/0x120
[ 1693.349721][   T29]  ? __might_fault+0xaa/0x120
[ 1693.354524][   T29]  __tun_chr_ioctl+0x400/0x2000
[ 1693.359450][   T29]  ? tun_flow_create+0x310/0x310
[ 1693.364543][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1693.369528][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1693.374760][   T29]  ? tun_chr_poll+0x630/0x630
[ 1693.379524][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1693.384765][   T29]  do_syscall_64+0x55/0xa0
[ 1693.389320][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.394610][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.399440][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1693.405655][   T29] RIP: 0033:0x7fc3bcb9c819
[ 1693.410277][   T29] RSP: 002b:00007fc3badf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1693.419416][   T29] RAX: ffffffffffffffda RBX: 00007fc3bce15fa0 RCX: 00007fc3bcb9c819
[ 1693.427744][   T29] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003
[ 1693.435978][   T29] RBP: 00007fc3bcc32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1693.444263][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1693.452546][   T29] R13: 00007fc3bce16038 R14: 00007fc3bce15fa0 R15: 00007ffd75491d88
[ 1693.461432][   T29]  </TASK>
[ 1693.464635][   T29] INFO: task syz.2.4964:21866 blocked for more than 145 seconds.
[ 1693.472646][   T29]       Not tainted syzkaller #0
[ 1693.477622][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1693.486450][   T29] task:syz.2.4964      state:D stack:24936 pid:21866 ppid:21411  flags:0x00004004
[ 1693.496176][   T29] Call Trace:
[ 1693.499500][   T29]  <TASK>
[ 1693.502533][   T29]  __schedule+0x1553/0x45a0
[ 1693.507352][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1693.513499][   T29]  ? asan.module_dtor+0x20/0x20
[ 1693.518401][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1693.523908][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1693.529443][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1693.535834][   T29]  schedule+0xbd/0x170
[ 1693.539965][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1693.545530][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1693.550264][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1693.555054][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[ 1693.560191][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1693.565382][   T29]  __tun_chr_ioctl+0x400/0x2000
[ 1693.570313][   T29]  ? tun_flow_create+0x310/0x310
[ 1693.575399][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1693.580575][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1693.585799][   T29]  ? tun_chr_poll+0x630/0x630
[ 1693.590769][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1693.596696][   T29]  do_syscall_64+0x55/0xa0
[ 1693.601196][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.605998][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.610830][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1693.616835][   T29] RIP: 0033:0x7fc3bcb9c819
[ 1693.621288][   T29] RSP: 002b:00007fc3badd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1693.630596][   T29] RAX: ffffffffffffffda RBX: 00007fc3bce16090 RCX: 00007fc3bcb9c819
[ 1693.638987][   T29] RDX: 0000200000000740 RSI: 00000000800454dd RDI: 0000000000000003
[ 1693.647359][   T29] RBP: 00007fc3bcc32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1693.655837][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1693.663965][   T29] R13: 00007fc3bce16128 R14: 00007fc3bce16090 R15: 00007ffd75491d88
[ 1693.672406][   T29]  </TASK>
[ 1693.675573][   T29] INFO: task syz.2.4964:21867 blocked for more than 145 seconds.
[ 1693.683513][   T29]       Not tainted syzkaller #0
[ 1693.688527][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1693.697392][   T29] task:syz.2.4964      state:D stack:28872 pid:21867 ppid:21411  flags:0x00004004
[ 1693.707096][   T29] Call Trace:
[ 1693.710394][   T29]  <TASK>
[ 1693.713431][   T29]  __schedule+0x1553/0x45a0
[ 1693.718022][   T29]  ? asan.module_dtor+0x20/0x20
[ 1693.723013][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1693.728076][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1693.733657][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1693.739865][   T29]  schedule+0xbd/0x170
[ 1693.744054][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1693.749722][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1693.754549][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1693.759290][   T29]  ? __tun_chr_ioctl+0x3b6/0x2000
[ 1693.764435][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1693.769439][   T29]  ? __might_fault+0xaa/0x120
[ 1693.774201][   T29]  ? __might_fault+0xc6/0x120
[ 1693.778916][   T29]  ? __might_fault+0xaa/0x120
[ 1693.783740][   T29]  __tun_chr_ioctl+0x3b6/0x2000
[ 1693.788655][   T29]  ? tun_flow_create+0x310/0x310
[ 1693.793736][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1693.798731][   T29]  ? security_file_ioctl+0x80/0xa0
[ 1693.803973][   T29]  ? tun_chr_poll+0x630/0x630
[ 1693.808707][   T29]  __se_sys_ioctl+0xfd/0x170
[ 1693.813862][   T29]  do_syscall_64+0x55/0xa0
[ 1693.818329][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.823131][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1693.828193][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1693.834316][   T29] RIP: 0033:0x7fc3bcb9c819
[ 1693.838787][   T29] RSP: 002b:00007fc3badb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1693.847305][   T29] RAX: ffffffffffffffda RBX: 00007fc3bce16180 RCX: 00007fc3bcb9c819
[ 1693.855480][   T29] RDX: 0000200000000280 RSI: 00000000400454d9 RDI: 0000000000000003
[ 1693.863758][   T29] RBP: 00007fc3bcc32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1693.871903][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1693.879967][   T29] R13: 00007fc3bce16218 R14: 00007fc3bce16180 R15: 00007ffd75491d88
[ 1693.888067][   T29]  </TASK>
[ 1693.891135][   T29] 
[ 1693.891135][   T29] Showing all locks held in the system:
[ 1693.898941][   T29] 3 locks held by kworker/0:0/8:
[ 1693.903976][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1693.915140][   T29]  #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1693.926287][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 1693.937411][   T29] 3 locks held by kworker/0:1/9:
[ 1693.948245][   T29]  #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1693.961746][   T29]  #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1693.976486][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[ 1693.987136][   T29] 1 lock held by khungtaskd/29:
[ 1693.992503][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1694.003728][   T29] 4 locks held by kworker/u4:4/59:
[ 1694.009212][   T29] 3 locks held by kworker/u4:9/4988:
[ 1694.018046][   T29]  #0: ffff88802c6cb938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1694.031883][   T29]  #1: ffffc9000f6a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1694.046181][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[ 1694.056175][   T29] 1 lock held by dhcpcd/5432:
[ 1694.060912][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40
[ 1694.070224][   T29] 2 locks held by getty/5526:
[ 1694.075197][   T29]  #0: ffff88823bd8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1694.085113][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1694.095455][   T29] 3 locks held by kworker/u4:2/5851:
[ 1694.100757][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1694.112848][   T29]  #1: ffffc90004c37d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1694.123998][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1694.133140][   T29] 1 lock held by syz-executor/21710:
[ 1694.138644][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.148280][   T29] 1 lock held by syz.1.4959/21851:
[ 1694.154518][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[ 1694.167016][   T29] 1 lock held by syz.3.4960/21854:
[ 1694.172221][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[ 1694.181133][   T29] 1 lock held by syz.2.4964/21865:
[ 1694.191944][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[ 1694.201364][   T29] 1 lock held by syz.2.4964/21866:
[ 1694.210054][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[ 1694.220560][   T29] 1 lock held by syz.2.4964/21867:
[ 1694.229072][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3b6/0x2000
[ 1694.238648][   T29] 1 lock held by syz-executor/21871:
[ 1694.244139][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.253699][   T29] 1 lock held by syz-executor/21874:
[ 1694.259106][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.268960][   T29] 1 lock held by syz-executor/21881:
[ 1694.274531][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.284032][   T29] 1 lock held by syz-executor/21884:
[ 1694.289333][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.298925][   T29] 1 lock held by syz-executor/21891:
[ 1694.304413][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.314053][   T29] 1 lock held by syz-executor/21894:
[ 1694.319379][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.328900][   T29] 1 lock held by syz-executor/21898:
[ 1694.334315][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.344231][   T29] 1 lock held by syz-executor/21902:
[ 1694.349562][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.359145][   T29] 1 lock held by syz-executor/21909:
[ 1694.364532][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.374140][   T29] 1 lock held by syz-executor/21913:
[ 1694.379451][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.388961][   T29] 1 lock held by syz-executor/21916:
[ 1694.394380][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1694.404402][   T29] 
[ 1694.406766][   T29] =============================================
[ 1694.406766][   T29] 
[ 1694.416613][   T29] NMI backtrace for cpu 1
[ 1694.420971][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1694.428185][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1694.438397][   T29] Call Trace:
[ 1694.441693][   T29]  <TASK>
[ 1694.444665][   T29]  dump_stack_lvl+0x18c/0x250
[ 1694.449371][   T29]  ? show_regs_print_info+0x20/0x20
[ 1694.454603][   T29]  ? load_image+0x420/0x420
[ 1694.459148][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1694.464119][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1694.470317][   T29]  ? _printk+0xde/0x130
[ 1694.474517][   T29]  ? load_image+0x420/0x420
[ 1694.479074][   T29]  ? load_image+0x420/0x420
[ 1694.483620][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1694.489746][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1694.495778][   T29]  watchdog+0xf3d/0xf80
[ 1694.499991][   T29]  ? watchdog+0x1e1/0xf80
[ 1694.504389][   T29]  kthread+0x2fa/0x390
[ 1694.508503][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1694.513704][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1694.518330][   T29]  ret_from_fork+0x48/0x80
[ 1694.522938][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1694.527574][   T29]  ret_from_fork_asm+0x11/0x20
[ 1694.532382][   T29]  </TASK>
[ 1694.536035][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1694.541293][    C0] NMI backtrace for cpu 0
[ 1694.541306][    C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[ 1694.541322][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1694.541331][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[ 1694.541354][    C0] RIP: 0010:mark_lock+0xfa/0x320
[ 1694.541375][    C0] Code: 31 ff 49 83 c7 60 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 14 70 76 00 b8 01 00 00 00 45 85 27 74 50 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b6 cb bd 02 85 c0 74 c1 48 c7
[ 1694.541388][    C0] RSP: 0018:ffffc900001175e8 EFLAGS: 00000086
[ 1694.541401][    C0] RAX: 0000000000000001 RBX: ffff88801a275a00 RCX: ffffffff8168e924
[ 1694.541412][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911c5500
[ 1694.541422][    C0] RBP: 0000000000000009 R08: ffffffff911c5507 R09: 1ffffffff2238aa0
[ 1694.541432][    C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000200
[ 1694.541443][    C0] R13: dffffc0000000000 R14: ffff88801a276558 R15: ffffffff90b2eef0
[ 1694.541454][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1694.541467][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1694.541478][    C0] CR2: 0000564c09f4fa38 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 1694.541493][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1694.541502][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1694.541512][    C0] Call Trace:
[ 1694.541518][    C0]  <TASK>
[ 1694.541526][    C0]  __lock_acquire+0xd5c/0x7d40
[ 1694.541545][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1694.541569][    C0]  ? verify_lock_unused+0x140/0x140
[ 1694.541592][    C0]  ? batadv_primary_if_get_selected+0x7b/0x410
[ 1694.541610][    C0]  lock_acquire+0x19e/0x420
[ 1694.541625][    C0]  ? batadv_iv_ogm_schedule+0x3e7/0xf10
[ 1694.541649][    C0]  ? batadv_iv_ogm_schedule+0x3e7/0xf10
[ 1694.541667][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1694.541683][    C0]  ? batadv_primary_if_get_selected+0x7b/0x410
[ 1694.541700][    C0]  ? batadv_iv_ogm_queue_add+0xd90/0xd90
[ 1694.541719][    C0]  batadv_iv_ogm_schedule+0x40b/0xf10
[ 1694.541734][    C0]  ? batadv_iv_ogm_schedule+0x3e7/0xf10
[ 1694.541755][    C0]  ? batadv_iv_ogm_schedule+0x3e7/0xf10
[ 1694.541778][    C0]  ? batadv_iv_send_outstanding_bat_ogm_packet+0x850/0x850
[ 1694.541799][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x733/0x850
[ 1694.541822][    C0]  ? process_scheduled_works+0x96f/0x15d0
[ 1694.541841][    C0]  process_scheduled_works+0xa5d/0x15d0
[ 1694.541869][    C0]  ? worker_attach_to_pool+0x380/0x380
[ 1694.541889][    C0]  ? assign_work+0x3d2/0x5d0
[ 1694.541908][    C0]  worker_thread+0xa55/0xfc0
[ 1694.541935][    C0]  kthread+0x2fa/0x390
[ 1694.541949][    C0]  ? pr_cont_work+0x560/0x560
[ 1694.541966][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1694.541980][    C0]  ret_from_fork+0x48/0x80
[ 1694.541997][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1694.542012][    C0]  ret_from_fork_asm+0x11/0x20
[ 1694.542036][    C0]  </TASK>
[ 1694.543935][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1694.543947][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1694.543965][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1694.543975][   T29] Call Trace:
[ 1694.543982][   T29]  <TASK>
[ 1694.543989][   T29]  dump_stack_lvl+0x18c/0x250
[ 1694.544021][   T29]  ? show_regs_print_info+0x20/0x20
[ 1694.544046][   T29]  ? load_image+0x420/0x420
[ 1694.544079][   T29]  panic+0x2dc/0x730
[ 1694.544099][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1694.544140][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1694.544160][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1694.544185][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1694.544211][   T29]  watchdog+0xf7c/0xf80
[ 1694.544239][   T29]  ? watchdog+0x1e1/0xf80
[ 1694.544267][   T29]  kthread+0x2fa/0x390
[ 1694.544283][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1694.544305][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1694.544322][   T29]  ret_from_fork+0x48/0x80
[ 1694.544342][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1694.544359][   T29]  ret_from_fork_asm+0x11/0x20
[ 1694.544404][   T29]  </TASK>
[ 1694.546899][   T29] Kernel Offset: disabled
[ 1694.944048][   T29] Rebooting in 86400 seconds..