last executing test programs:

20.999980243s ago: executing program 4 (id=3101):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000001000018010000786c6c2500000000070000007b1af8ff00000007010000f8ff0f3c92820229948d3345e578fd88c6f2ffffb700000000000000b70300"/84, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="020000000e0000141000000000efa45e950000008cb3d9d2197f1a030de317f5ef80483c190b7c52acf176f88a6bc0dc9c96e903a7a90419d15367264cbbd7acf72abf69397f798ec2e364e06b2c37b5c3c59df688214ae381fdcadaab2968c60e5b1b648623a6fbf306b7558c4f3e8a49013e5d975f79b35265ed9b9a153ee18d459d56723dc2ca34e0762f5582ce75d821811ab40b59d0cd07fd0fe504", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4)
openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x22, 0x2, 0x21)

20.610991913s ago: executing program 4 (id=3107):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x8) (async)
socket$kcm(0x11, 0x2, 0x300) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x100) (async)
socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) (async, rerun: 64)
r5 = socket$kcm(0x2, 0x3, 0x106) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 64)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000edffffff000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000004c0)=r8, 0x4) (async)
sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="1f564b982798fad2b9", 0x9}, {&(0x7f0000000380)="3cdd7852c2e63294f082b6cd1baed13ccbcfb901cf251ed502d76df15236ab8119c48f3a14ac827dd90cef2007ad38de5fb92abbda3f060577f85f1926", 0x3d}], 0x2}, 0x24004800)

20.413472558s ago: executing program 4 (id=3108):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20000801)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

20.087736015s ago: executing program 4 (id=3111):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

19.850127051s ago: executing program 4 (id=3114):
socket$kcm(0xa, 0x5, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0xb, 0x1, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400000021000b12d27a805bb982080b0924fc60", 0x14}], 0x1}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffea4, &(0x7f0000000380)="1000110ec1a900049b0046b30000", 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x2c, 0x3, 0x302, &(0x7f0000000000))
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x40, 0x64b}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, r0, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x18, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="a3ac810837ee24d1239d7e7759a97ed57768bd9c85a91b466953d038b958c9f017b6b1c86cc54e0fca5ffa180ce706ded377b0849a5a81500e6034b1ccd7808bce3cef0ab1633c2943810c449d20febec3ad70254e338a04b259413acf1c4214b05c160ed5e997b970901b798bbed77105aca940b6e606116d6e342538caaf9e66a061da9143bdb2e92d784e2b6190e752d3d3c36ce72900c07715319c77aa21004c3d27a8427d281ed1217f44659fd6630f479002206222c895ae7e0108f96325d5ed423065a4eb9da48f8788df028dc0c496d4c923d8c33f71ae21e3bc"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca"], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/164, 0x4a, 0xa4, 0x1}, 0x28)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000080))

18.674841981s ago: executing program 4 (id=3125):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x80000002, 0x12)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff64}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.302500316s ago: executing program 0 (id=3166):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000302000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.222043453s ago: executing program 0 (id=3173):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000010000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000200)='./cgroup\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, 0x0, 0x101d0)
r5 = socket$kcm(0x1e, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4)

5.313669569s ago: executing program 0 (id=3183):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r5)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

5.307792979s ago: executing program 1 (id=3184):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000004002000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0xa, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xb071, <r3=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c3793624", 0x54}, {0x0, 0x11}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x66, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
gettid()
r4 = socket$kcm(0x18, 0x7, 0x0)
sendmsg$kcm(r4, &(0x7f0000000ac0)={&(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x408}, 0x4000040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)

5.295855979s ago: executing program 2 (id=3185):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
socketpair(0x22, 0x2, 0x2, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x34}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080))

5.023873606s ago: executing program 2 (id=3187):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=<r0=>0xffffffffffffffff], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], <r1=>0x0, 0x63, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x20001f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500003000000079102800000000003e500000000000009500000000000000b6b65a9dbee4b08c613ce8461331f97c9611fbf7e972fa326671"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0xfffffffffffffff8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x46d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={<r8=>r7})
r9 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10d, 0xf, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001500)={r9, r5})

4.88101373s ago: executing program 3 (id=3188):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x0, 0x18, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
socket$kcm(0x11, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xed4e7ca1245b3bf6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=r6, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50)
bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141092305000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.509244509s ago: executing program 1 (id=3189):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x26, 0x5, 0x0, &(0x7f0000000740))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980018007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.304956494s ago: executing program 3 (id=3190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000001010007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.198728136s ago: executing program 1 (id=3191):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000302000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.069668009s ago: executing program 3 (id=3192):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="040003076804268c989e14f0a2a8", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.025161121s ago: executing program 2 (id=3193):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c30f00ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60}, 0x94)

3.889614584s ago: executing program 2 (id=3194):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x23, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.049408935s ago: executing program 3 (id=3195):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)=r5}, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x6, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x0)

3.017464526s ago: executing program 1 (id=3196):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
socketpair(0x22, 0x2, 0x2, &(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a6070100000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x34}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))

603.365915ms ago: executing program 2 (id=3197):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="140000001c000b63d25a80648c2594f91924fc60", 0x14}], 0x1}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r3, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x5, [@fwd={0xa}, @const={0x2, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @ptr={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x6}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x3, 0x6}, {0x3, 0x2, 0xfffffffa}, {0x2, 0x80, 0x8}], "87"}, @enum64={0x5, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x9, 0xffff, 0x2}, {0xb, 0x3, 0x9}, {0xf, 0x84ee}, {0x4, 0x4, 0x1}, {0x7, 0x9, 0x2}, {0xe, 0x60, 0x40}, {0x5, 0xa, 0x8}]}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x109, 0x1000, 0x0, 0x83}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x11, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002380)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002480)={0x5, 0x0, 0xffffffc1, 0x9fc3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x87d5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="2501e1"], 0x20)

528.391857ms ago: executing program 1 (id=3198):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)}], 0x1}, 0x20000801)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

508.765667ms ago: executing program 0 (id=3199):
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f9b080476ee7b8004469564262d81f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cf8b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbe"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0)

500.930128ms ago: executing program 3 (id=3200):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000f000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="86dd00"/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

273.785433ms ago: executing program 0 (id=3201):
perf_event_open(&(0x7f0000000140)={0x2, 0xc9, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820300}, 0x0)

207.542735ms ago: executing program 3 (id=3202):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x5}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10100a, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0)
close(r7) (async)
close(r7)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r7, 0xc008744c, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x15, 0x718255c667f6b0f4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x49, &(0x7f0000000040)=[@cred, @cred]}, 0x0)

141.625356ms ago: executing program 1 (id=3203):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000040000000900000091a2aa38", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f0000000040), 0x13)

29.526909ms ago: executing program 0 (id=3204):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x23, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=3205):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, 0x0}, 0x48004)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x13, 0x0, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000440), 0x2, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

kernel console output (not intermixed with test programs):

837][ T7723] RBP: 00007fc7931e7090 R08: 0000000000000000 R09: 0000000000000000
[  276.267815][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.275799][ T7723] R13: 00007fc792626128 R14: 00007fc792626090 R15: 00007ffdd99dede8
[  276.283794][ T7723]  </TASK>
[  276.621153][ T7735] netlink: 'syz.1.1013': attribute type 3 has an invalid length.
[  276.668034][ T7735] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1013'.
[  279.326271][ T7749] netlink: 'syz.2.1018': attribute type 10 has an invalid length.
[  279.512126][ T7749] device team0 left promiscuous mode
[  279.542012][ T7749] device team_slave_0 left promiscuous mode
[  279.574990][ T7749] device team_slave_1 left promiscuous mode
[  279.593950][ T7749] ¥: port 1(team0) entered disabled state
[  279.719876][ T7749] team0 (unregistering): Port device team_slave_0 removed
[  279.805340][ T7749] team0 (unregistering): Port device team_slave_1 removed
[  279.868274][ T7751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1020'.
[  280.237578][ T7764] netlink: 'syz.2.1024': attribute type 3 has an invalid length.
[  280.271936][ T7764] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1024'.
[  280.612707][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'.
[  281.666190][ T7810] device syzkaller0 entered promiscuous mode
[  286.604125][ T7818] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1048'.
[  286.961660][ T7876] netlink: 'syz.4.1070': attribute type 29 has an invalid length.
[  286.993523][ T7864] device syzkaller0 entered promiscuous mode
[  287.003862][ T7876] netlink: 'syz.4.1070': attribute type 29 has an invalid length.
[  289.683707][ T7879] netlink: 'syz.4.1070': attribute type 29 has an invalid length.
[  289.944064][ T7904] device syzkaller0 entered promiscuous mode
[  293.197008][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  293.549943][ T7938] device syzkaller0 entered promiscuous mode
[  295.270886][ T7971] netlink: 'syz.2.1107': attribute type 3 has an invalid length.
[  295.279716][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1107'.
[  298.598609][ T8005] netlink: 'syz.4.1119': attribute type 3 has an invalid length.
[  298.606717][ T8005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1119'.
[  298.911179][ T8014] netlink: 'syz.1.1133': attribute type 3 has an invalid length.
[  298.937136][ T8014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1133'.
[  302.248729][ T8049] IPv6: Can't replace route, no match found
[  309.336397][ T8101] netlink: 'syz.0.1158': attribute type 21 has an invalid length.
[  309.344652][ T8101] netlink: 'syz.0.1158': attribute type 6 has an invalid length.
[  309.353550][ T8101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1158'.
[  309.398191][ T8139] netlink: 'syz.3.1173': attribute type 21 has an invalid length.
[  309.416493][ T8139] netlink: 'syz.3.1173': attribute type 7 has an invalid length.
[  309.450124][ T8150] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1178'.
[  312.388120][ T8198] device syzkaller0 entered promiscuous mode
[  314.416416][ T8248] netlink: 'syz.1.1219': attribute type 29 has an invalid length.
[  314.424975][ T8248] netlink: 'syz.1.1219': attribute type 29 has an invalid length.
[  314.496179][ T8251] netlink: 'syz.1.1219': attribute type 29 has an invalid length.
[  314.671132][ T8250] device syzkaller0 entered promiscuous mode
[  315.143619][ T8248] netlink: 'syz.1.1219': attribute type 29 has an invalid length.
[  315.544164][ T8267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1227'.
[  315.576028][ T4292] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  317.404935][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.411399][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  320.878622][ T8374] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  320.918838][ T8374] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  320.958715][ T8381] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  321.321089][ T8384] netlink: 'syz.1.1274': attribute type 3 has an invalid length.
[  321.383520][ T8384] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1274'.
[  322.054107][ T8405] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1284'.
[  322.084546][ T8405] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1284'.
[  323.833451][ T8429] device syzkaller0 entered promiscuous mode
[  323.884555][ T8441] netlink: 'syz.4.1296': attribute type 3 has an invalid length.
[  323.907972][ T8441] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1296'.
[  326.556528][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1306'.
[  327.155459][ T8483] netlink: 'syz.1.1313': attribute type 3 has an invalid length.
[  327.217153][ T8483] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1313'.
[  328.015521][ T8504] netlink: 'syz.2.1319': attribute type 9 has an invalid length.
[  328.049119][ T8504] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1319'.
[  328.293597][ T8518] netlink: 'syz.3.1323': attribute type 41 has an invalid length.
[  328.849935][ T8529] netlink: 'syz.4.1330': attribute type 3 has an invalid length.
[  328.866904][ T8529] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1330'.
[  330.933961][ T8574] netlink: 'syz.3.1345': attribute type 3 has an invalid length.
[  331.047424][ T8574] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1345'.
[  332.261900][ T8589] netlink: 'syz.4.1349': attribute type 10 has an invalid length.
[  332.565316][ T8589] team0: Device gre0 is of different type
[  334.861228][ T8632] netlink: 'syz.4.1365': attribute type 10 has an invalid length.
[  334.952889][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'.
[  334.961372][ T8622] netlink: 'syz.2.1361': attribute type 3 has an invalid length.
[  334.974977][ T8622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1361'.
[  335.057690][ T8632] device team0 entered promiscuous mode
[  335.257390][ T8632] device team_slave_0 entered promiscuous mode
[  335.266569][ T8632] device team_slave_1 entered promiscuous mode
[  335.285520][ T8632] device geneve1 entered promiscuous mode
[  335.334179][ T8632] bridge0: port 3(team0) entered blocking state
[  335.355175][ T8632] bridge0: port 3(team0) entered disabled state
[  335.414992][ T8632] bridge0: port 3(team0) entered blocking state
[  335.422441][ T8632] bridge0: port 3(team0) entered forwarding state
[  339.201137][ T8686] netlink: 'syz.2.1385': attribute type 3 has an invalid length.
[  339.226911][ T8686] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1385'.
[  343.279852][ T8750] netlink: 'syz.1.1406': attribute type 3 has an invalid length.
[  343.363188][ T8750] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1406'.
[  343.675415][ T8757] device syzkaller0 entered promiscuous mode
[  349.034241][ T8753] netlink: 4107 bytes leftover after parsing attributes in process `syz.3.1408'.
[  349.775431][ T8796] netlink: 'syz.3.1422': attribute type 3 has an invalid length.
[  349.812957][ T8796] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1422'.
[  349.944186][ T8800] device syzkaller0 entered promiscuous mode
[  353.062388][ T8815] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1430'.
[  353.074239][ T8830] netlink: 4107 bytes leftover after parsing attributes in process `syz.1.1434'.
[  353.359638][ T8838] device syzkaller0 entered promiscuous mode
[  353.880090][ T8858] netlink: 'syz.4.1439': attribute type 3 has an invalid length.
[  353.992393][ T8858] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1439'.
[  356.242120][ T8861] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  356.274100][ T8861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  356.312651][ T8861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  356.564463][ T8876] device syzkaller0 entered promiscuous mode
[  357.798179][ T8912] netlink: 'syz.3.1458': attribute type 3 has an invalid length.
[  357.811412][ T8912] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1458'.
[  359.184407][ T8897] netlink: 4107 bytes leftover after parsing attributes in process `syz.0.1454'.
[  359.722521][ T8925] device syzkaller0 entered promiscuous mode
[  362.267457][ T8947] netlink: 4107 bytes leftover after parsing attributes in process `syz.2.1472'.
[  362.371685][ T8950] device syzkaller0 entered promiscuous mode
[  367.739841][ T8989] device syzkaller0 entered promiscuous mode
[  370.225789][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  371.384391][ T9025] device syzkaller0 entered promiscuous mode
[  371.411623][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  371.431449][ T9061] netlink: 'syz.0.1510': attribute type 21 has an invalid length.
[  371.446879][ T9061] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1510'.
[  371.466454][ T9061] netlink: 'syz.0.1510': attribute type 4 has an invalid length.
[  371.493739][ T9061] netlink: 'syz.0.1510': attribute type 5 has an invalid length.
[  371.503209][ T9061] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1510'.
[  371.524219][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1510'.
[  375.565920][ T9143] FAULT_INJECTION: forcing a failure.
[  375.565920][ T9143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.611761][ T9117] device syzkaller0 entered promiscuous mode
[  375.616346][ T9143] CPU: 1 PID: 9143 Comm: syz.3.1538 Not tainted syzkaller #0
[  375.625256][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.636235][ T9143] Call Trace:
[  375.639620][ T9143]  <TASK>
[  375.644076][ T9143]  dump_stack_lvl+0x188/0x24e
[  375.648966][ T9143]  ? rcu_is_watching+0x11/0xa0
[  375.653847][ T9143]  ? show_regs_print_info+0x12/0x12
[  375.659100][ T9143]  ? load_image+0x410/0x410
[  375.663672][ T9143]  ? lockdep_hardirqs_on+0x94/0x140
[  375.668936][ T9143]  should_fail_ex+0x390/0x4c0
[  375.673775][ T9143]  _copy_to_user+0x2c/0x130
[  375.678360][ T9143]  simple_read_from_buffer+0xe3/0x150
[  375.683821][ T9143]  proc_fail_nth_read+0x1a6/0x220
[  375.688907][ T9143]  ? proc_fault_inject_write+0x310/0x310
[  375.694598][ T9143]  ? proc_fault_inject_write+0x310/0x310
[  375.700285][ T9143]  vfs_read+0x2db/0x960
[  375.704686][ T9143]  ? kernel_read+0x1e0/0x1e0
[  375.709342][ T9143]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  375.715621][ T9143]  ? lockdep_hardirqs_on+0x94/0x140
[  375.720864][ T9143]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  375.727052][ T9143]  ksys_read+0x14d/0x260
[  375.731317][ T9143]  ? vfs_write+0x9a0/0x9a0
[  375.735761][ T9143]  ? syscall_enter_from_user_mode+0x2a/0x80
[  375.741668][ T9143]  do_syscall_64+0x4c/0xa0
[  375.746099][ T9143]  ? clear_bhb_loop+0x60/0xb0
[  375.750797][ T9143]  ? clear_bhb_loop+0x60/0xb0
[  375.755490][ T9143]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.761526][ T9143] RIP: 0033:0x7f7057b5e90e
[  375.766016][ T9143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  375.785672][ T9143] RSP: 002b:00007f705899ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  375.794316][ T9143] RAX: ffffffffffffffda RBX: 00007f70589a06c0 RCX: 00007f7057b5e90e
[  375.802309][ T9143] RDX: 000000000000000f RSI: 00007f70589a00a0 RDI: 0000000000000006
[  375.810294][ T9143] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  375.818282][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.826269][ T9143] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  375.834268][ T9143]  </TASK>
[  378.819064][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.826275][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  384.082498][ T9248] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.1576'.
[  384.094408][ T9248] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.1576'.
[  384.111492][ T9248] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.1576'.
[  384.996338][ T9251] device syzkaller0 entered promiscuous mode
[  388.717215][ T9262] device syzkaller0 entered promiscuous mode
[  388.724908][ T9279] bridge0: port 3(dummy0) entered disabled state
[  388.731794][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.741267][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.774586][ T9285] bridge0: port 3(dummy0) entered blocking state
[  388.781148][ T9285] bridge0: port 3(dummy0) entered forwarding state
[  388.788171][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.795338][ T9285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.802852][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.810099][ T9285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.842867][ T9285] device bridge0 entered promiscuous mode
[  390.754711][ T9336] netlink: 'syz.3.1606': attribute type 1 has an invalid length.
[  390.762832][ T9336] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1606'.
[  391.761790][ T9352] FAULT_INJECTION: forcing a failure.
[  391.761790][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.776879][ T9352] CPU: 0 PID: 9352 Comm: syz.3.1612 Not tainted syzkaller #0
[  391.784321][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.794434][ T9352] Call Trace:
[  391.797730][ T9352]  <TASK>
[  391.800698][ T9352]  dump_stack_lvl+0x188/0x24e
[  391.805426][ T9352]  ? show_regs_print_info+0x12/0x12
[  391.810644][ T9352]  ? load_image+0x410/0x410
[  391.815156][ T9352]  ? __lock_acquire+0x7c40/0x7c40
[  391.820231][ T9352]  should_fail_ex+0x390/0x4c0
[  391.824941][ T9352]  _copy_from_user+0x2c/0x170
[  391.829619][ T9352]  iovec_from_user+0x143/0x360
[  391.834444][ T9352]  __import_iovec+0x6c/0x510
[  391.839074][ T9352]  import_iovec+0x6f/0xa0
[  391.843520][ T9352]  ___sys_sendmsg+0x252/0x360
[  391.848285][ T9352]  ? __sys_sendmsg+0x2a0/0x2a0
[  391.853064][ T9352]  ? __lock_acquire+0x7c40/0x7c40
[  391.858228][ T9352]  __se_sys_sendmsg+0x1c3/0x2b0
[  391.863109][ T9352]  ? __x64_sys_sendmsg+0x80/0x80
[  391.868066][ T9352]  ? trace_sys_enter+0x22/0x80
[  391.872966][ T9352]  do_syscall_64+0x4c/0xa0
[  391.877403][ T9352]  ? clear_bhb_loop+0x60/0xb0
[  391.882107][ T9352]  ? clear_bhb_loop+0x60/0xb0
[  391.886877][ T9352]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  391.892789][ T9352] RIP: 0033:0x7f7057b9e0d9
[  391.897226][ T9352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.923568][ T9352] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.932023][ T9352] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  391.940020][ T9352] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003
[  391.948113][ T9352] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  391.956105][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.964078][ T9352] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  391.972067][ T9352]  </TASK>
[  393.105650][ T9315] device syzkaller0 entered promiscuous mode
[  396.574707][ T9368] device syzkaller0 entered promiscuous mode
[  399.881270][ T9413] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.1634'.
[  399.890581][ T9413] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1634'.
[  399.900321][ T9413] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1634'.
[  400.395380][ T9456] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  400.417276][ T9456] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  400.477149][ T9457] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  400.532869][ T9459] tun0: tun_chr_ioctl cmd 1074025681
[  400.554522][ T9456] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  400.582137][ T9456] netlink: 'syz.3.1651': attribute type 29 has an invalid length.
[  400.936391][ T9471] device syzkaller0 entered promiscuous mode
[  404.643982][ T9521] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1675'.
[  404.911123][ T9523] FAULT_INJECTION: forcing a failure.
[  404.911123][ T9523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.924590][ T9523] CPU: 1 PID: 9523 Comm: syz.3.1678 Not tainted syzkaller #0
[  404.932019][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.942188][ T9523] Call Trace:
[  404.945484][ T9523]  <TASK>
[  404.948421][ T9523]  dump_stack_lvl+0x188/0x24e
[  404.953118][ T9523]  ? show_regs_print_info+0x12/0x12
[  404.958362][ T9523]  ? load_image+0x410/0x410
[  404.962870][ T9523]  ? __lock_acquire+0x7c40/0x7c40
[  404.968010][ T9523]  should_fail_ex+0x390/0x4c0
[  404.972727][ T9523]  _copy_from_user+0x2c/0x170
[  404.977425][ T9523]  __sys_bpf+0x2ea/0x780
[  404.981794][ T9523]  ? bpf_link_show_fdinfo+0x380/0x380
[  404.987221][ T9523]  ? lock_chain_count+0x20/0x20
[  404.992142][ T9523]  __x64_sys_bpf+0x78/0x90
[  404.996596][ T9523]  do_syscall_64+0x4c/0xa0
[  405.001035][ T9523]  ? clear_bhb_loop+0x60/0xb0
[  405.005717][ T9523]  ? clear_bhb_loop+0x60/0xb0
[  405.010410][ T9523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.016324][ T9523] RIP: 0033:0x7f7057b9e0d9
[  405.020741][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.041504][ T9523] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  405.049954][ T9523] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  405.057944][ T9523] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  405.065923][ T9523] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  405.073913][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.081945][ T9523] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  405.089955][ T9523]  </TASK>
[  405.457237][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.467204][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.485138][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.496053][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.505826][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.515866][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.525258][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.543201][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.554702][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  405.571665][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'.
[  407.475742][ T9536] device syzkaller0 entered promiscuous mode
[  409.014955][ T9574] FAULT_INJECTION: forcing a failure.
[  409.014955][ T9574] name failslab, interval 1, probability 0, space 0, times 0
[  409.032751][ T9574] CPU: 0 PID: 9574 Comm: syz.4.1693 Not tainted syzkaller #0
[  409.040281][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.050382][ T9574] Call Trace:
[  409.053714][ T9574]  <TASK>
[  409.056793][ T9574]  dump_stack_lvl+0x188/0x24e
[  409.061534][ T9574]  ? show_regs_print_info+0x12/0x12
[  409.066975][ T9574]  ? load_image+0x410/0x410
[  409.071530][ T9574]  ? __lock_acquire+0x7c40/0x7c40
[  409.076598][ T9574]  should_fail_ex+0x390/0x4c0
[  409.081352][ T9574]  should_failslab+0x5/0x20
[  409.085991][ T9574]  slab_pre_alloc_hook+0x59/0x300
[  409.091070][ T9574]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  409.096698][ T9574]  __kmem_cache_alloc_node+0x4f/0x270
[  409.102105][ T9574]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[  409.107685][ T9574]  __kmalloc+0xa3/0x240
[  409.111922][ T9574]  bpf_prog_test_run_skb+0x23e/0x18e0
[  409.117418][ T9574]  ? __fget_files+0x28/0x460
[  409.122066][ T9574]  ? __fget_files+0x3fc/0x460
[  409.126784][ T9574]  ? cpu_online+0xa0/0xa0
[  409.131234][ T9574]  bpf_prog_test_run+0x31c/0x390
[  409.136468][ T9574]  __sys_bpf+0x62b/0x780
[  409.140741][ T9574]  ? bpf_link_show_fdinfo+0x380/0x380
[  409.146179][ T9574]  ? lock_chain_count+0x20/0x20
[  409.151066][ T9574]  __x64_sys_bpf+0x78/0x90
[  409.155515][ T9574]  do_syscall_64+0x4c/0xa0
[  409.160047][ T9574]  ? clear_bhb_loop+0x60/0xb0
[  409.164752][ T9574]  ? clear_bhb_loop+0x60/0xb0
[  409.169455][ T9574]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.175376][ T9574] RIP: 0033:0x7fc79239e0d9
[  409.179903][ T9574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.199559][ T9574] RSP: 002b:00007fc793208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  409.208111][ T9574] RAX: ffffffffffffffda RBX: 00007fc792625fa0 RCX: 00007fc79239e0d9
[  409.216114][ T9574] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  409.224110][ T9574] RBP: 00007fc793208090 R08: 0000000000000000 R09: 0000000000000000
[  409.232118][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.240298][ T9574] R13: 00007fc792626038 R14: 00007fc792625fa0 R15: 00007ffdd99dede8
[  409.248313][ T9574]  </TASK>
[  412.199118][ T9605] netlink: 'syz.2.1707': attribute type 41 has an invalid length.
[  415.761682][ T9650] __nla_validate_parse: 55 callbacks suppressed
[  415.761736][ T9650] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1723'.
[  415.789872][ T9650] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1723'.
[  415.818518][ T9650] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1723'.
[  418.723842][ T9652] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1723'.
[  418.743729][ T9652] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1723'.
[  418.754511][ T9652] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1723'.
[  419.271380][ T9678] FAULT_INJECTION: forcing a failure.
[  419.271380][ T9678] name failslab, interval 1, probability 0, space 0, times 0
[  419.328059][ T9678] CPU: 1 PID: 9678 Comm: syz.3.1734 Not tainted syzkaller #0
[  419.335560][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.345689][ T9678] Call Trace:
[  419.349011][ T9678]  <TASK>
[  419.351985][ T9678]  dump_stack_lvl+0x188/0x24e
[  419.356807][ T9678]  ? show_regs_print_info+0x12/0x12
[  419.362228][ T9678]  ? load_image+0x410/0x410
[  419.366783][ T9678]  ? __might_sleep+0xd0/0xd0
[  419.371489][ T9678]  ? __lock_acquire+0x7c40/0x7c40
[  419.376569][ T9678]  should_fail_ex+0x390/0x4c0
[  419.381313][ T9678]  should_failslab+0x5/0x20
[  419.385854][ T9678]  slab_pre_alloc_hook+0x59/0x300
[  419.390934][ T9678]  ? sk_prot_alloc+0xe7/0x210
[  419.395667][ T9678]  __kmem_cache_alloc_node+0x4f/0x270
[  419.401086][ T9678]  ? sk_prot_alloc+0xe7/0x210
[  419.405832][ T9678]  __kmalloc+0xa3/0x240
[  419.410129][ T9678]  sk_prot_alloc+0xe7/0x210
[  419.414679][ T9678]  ? sk_alloc+0x20/0x330
[  419.418971][ T9678]  sk_alloc+0x36/0x330
[  419.423094][ T9678]  ? bpf_ctx_init+0x154/0x190
[  419.427845][ T9678]  bpf_prog_test_run_skb+0x36d/0x18e0
[  419.433278][ T9678]  ? __fget_files+0x28/0x460
[  419.437928][ T9678]  ? __fget_files+0x3fc/0x460
[  419.442704][ T9678]  ? cpu_online+0xa0/0xa0
[  419.447097][ T9678]  bpf_prog_test_run+0x31c/0x390
[  419.452093][ T9678]  __sys_bpf+0x62b/0x780
[  419.456391][ T9678]  ? bpf_link_show_fdinfo+0x380/0x380
[  419.461833][ T9678]  ? lock_chain_count+0x20/0x20
[  419.466744][ T9678]  __x64_sys_bpf+0x78/0x90
[  419.471209][ T9678]  do_syscall_64+0x4c/0xa0
[  419.475677][ T9678]  ? clear_bhb_loop+0x60/0xb0
[  419.480408][ T9678]  ? clear_bhb_loop+0x60/0xb0
[  419.485138][ T9678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  419.491083][ T9678] RIP: 0033:0x7f7057b9e0d9
[  419.495665][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.515495][ T9678] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  419.523950][ T9678] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  419.531966][ T9678] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  419.539978][ T9678] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  419.547993][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.555995][ T9678] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  419.563981][ T9678]  </TASK>
[  419.676317][ T9684] netlink: 'syz.0.1736': attribute type 21 has an invalid length.
[  419.716895][ T9684] IPv6: NLM_F_CREATE should be specified when creating new route
[  419.724783][ T9684] IPv6: Can't replace route, no match found
[  422.456195][ T9754] netlink: 'syz.0.1765': attribute type 10 has an invalid length.
[  423.039194][ T9767] FAULT_INJECTION: forcing a failure.
[  423.039194][ T9767] name failslab, interval 1, probability 0, space 0, times 0
[  423.103057][ T9767] CPU: 1 PID: 9767 Comm: syz.4.1770 Not tainted syzkaller #0
[  423.110523][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  423.120616][ T9767] Call Trace:
[  423.124044][ T9767]  <TASK>
[  423.127006][ T9767]  dump_stack_lvl+0x188/0x24e
[  423.131837][ T9767]  ? show_regs_print_info+0x12/0x12
[  423.137077][ T9767]  ? load_image+0x410/0x410
[  423.141622][ T9767]  ? __might_sleep+0xd0/0xd0
[  423.146253][ T9767]  ? __lock_acquire+0x7c40/0x7c40
[  423.151416][ T9767]  should_fail_ex+0x390/0x4c0
[  423.156140][ T9767]  should_failslab+0x5/0x20
[  423.160687][ T9767]  slab_pre_alloc_hook+0x59/0x300
[  423.165759][ T9767]  ? apparmor_sk_alloc_security+0x74/0x100
[  423.171689][ T9767]  __kmem_cache_alloc_node+0x4f/0x270
[  423.177187][ T9767]  ? apparmor_sk_alloc_security+0x74/0x100
[  423.183042][ T9767]  kmalloc_trace+0x26/0xe0
[  423.187525][ T9767]  apparmor_sk_alloc_security+0x74/0x100
[  423.193206][ T9767]  security_sk_alloc+0x6a/0xa0
[  423.198153][ T9767]  sk_prot_alloc+0x101/0x210
[  423.202765][ T9767]  ? sk_alloc+0x20/0x330
[  423.207027][ T9767]  sk_alloc+0x36/0x330
[  423.211116][ T9767]  ? bpf_ctx_init+0x154/0x190
[  423.215821][ T9767]  bpf_prog_test_run_skb+0x36d/0x18e0
[  423.221208][ T9767]  ? __fget_files+0x28/0x460
[  423.225905][ T9767]  ? __fget_files+0x3fc/0x460
[  423.230701][ T9767]  ? cpu_online+0xa0/0xa0
[  423.235130][ T9767]  bpf_prog_test_run+0x31c/0x390
[  423.240088][ T9767]  __sys_bpf+0x62b/0x780
[  423.244363][ T9767]  ? bpf_link_show_fdinfo+0x380/0x380
[  423.249761][ T9767]  ? lock_chain_count+0x20/0x20
[  423.254636][ T9767]  __x64_sys_bpf+0x78/0x90
[  423.259081][ T9767]  do_syscall_64+0x4c/0xa0
[  423.263531][ T9767]  ? clear_bhb_loop+0x60/0xb0
[  423.268221][ T9767]  ? clear_bhb_loop+0x60/0xb0
[  423.272922][ T9767]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  423.278827][ T9767] RIP: 0033:0x7fc79239e0d9
[  423.283282][ T9767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.302905][ T9767] RSP: 002b:00007fc793208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  423.311335][ T9767] RAX: ffffffffffffffda RBX: 00007fc792625fa0 RCX: 00007fc79239e0d9
[  423.319326][ T9767] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  423.327306][ T9767] RBP: 00007fc793208090 R08: 0000000000000000 R09: 0000000000000000
[  423.335285][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.343275][ T9767] R13: 00007fc792626038 R14: 00007fc792625fa0 R15: 00007ffdd99dede8
[  423.351617][ T9767]  </TASK>
[  425.912617][ T9789] device syzkaller0 entered promiscuous mode
[  431.883456][ T9850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1802'.
[  434.974832][ T9879] device syzkaller0 entered promiscuous mode
[  440.263598][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.273079][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.406858][ T9908] netlink: 'syz.3.1818': attribute type 25 has an invalid length.
[  440.415040][ T9908] netlink: 'syz.3.1818': attribute type 29 has an invalid length.
[  440.457466][ T9909] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1818'.
[  441.994620][ T9958] FAULT_INJECTION: forcing a failure.
[  441.994620][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.076961][ T9958] CPU: 0 PID: 9958 Comm: syz.4.1838 Not tainted syzkaller #0
[  442.084475][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  442.094664][ T9958] Call Trace:
[  442.097977][ T9958]  <TASK>
[  442.100940][ T9958]  dump_stack_lvl+0x188/0x24e
[  442.105668][ T9958]  ? show_regs_print_info+0x12/0x12
[  442.110913][ T9958]  ? load_image+0x410/0x410
[  442.115734][ T9958]  ? __lock_acquire+0x7c40/0x7c40
[  442.120838][ T9958]  should_fail_ex+0x390/0x4c0
[  442.125593][ T9958]  _copy_from_user+0x2c/0x170
[  442.130325][ T9958]  __sys_bpf+0x2ea/0x780
[  442.134629][ T9958]  ? bpf_link_show_fdinfo+0x380/0x380
[  442.140061][ T9958]  ? lock_chain_count+0x20/0x20
[  442.144962][ T9958]  __x64_sys_bpf+0x78/0x90
[  442.149416][ T9958]  do_syscall_64+0x4c/0xa0
[  442.153875][ T9958]  ? clear_bhb_loop+0x60/0xb0
[  442.158584][ T9958]  ? clear_bhb_loop+0x60/0xb0
[  442.163298][ T9958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.169237][ T9958] RIP: 0033:0x7fc79239e0d9
[  442.173686][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.193329][ T9958] RSP: 002b:00007fc793208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  442.201791][ T9958] RAX: ffffffffffffffda RBX: 00007fc792625fa0 RCX: 00007fc79239e0d9
[  442.209813][ T9958] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  442.217918][ T9958] RBP: 00007fc793208090 R08: 0000000000000000 R09: 0000000000000000
[  442.226363][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.234386][ T9958] R13: 00007fc792626038 R14: 00007fc792625fa0 R15: 00007ffdd99dede8
[  442.242429][ T9958]  </TASK>
[  442.334739][ T9960] netlink: 'syz.3.1839': attribute type 10 has an invalid length.
[  442.518623][ T9965] netlink: 67568 bytes leftover after parsing attributes in process `syz.4.1840'.
[  444.533130][ T9960] device veth0_vlan left promiscuous mode
[  444.583152][ T9960] device veth0_vlan entered promiscuous mode
[  444.607468][ T9960] team0: Device veth0_vlan failed to register rx_handler
[  444.673299][ T9965] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1840'.
[  444.834798][ T9970] device syzkaller0 entered promiscuous mode
[  444.899415][ T9977] netlink: 'syz.3.1846': attribute type 16 has an invalid length.
[  444.936062][ T9977] netlink: 'syz.3.1846': attribute type 3 has an invalid length.
[  444.967237][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'.
[  447.177431][ T9994] netlink: 'syz.4.1851': attribute type 25 has an invalid length.
[  447.193815][ T9994] netlink: 'syz.4.1851': attribute type 29 has an invalid length.
[  447.237778][ T9997] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1851'.
[  447.273661][ T9992] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1850'.
[  447.341041][ T9992] bridge0: port 3(dummy0) entered disabled state
[  447.443886][ T9992] bridge0: port 3(dummy0) entered disabled state
[  447.477750][ T9996] netlink: 'syz.3.1850': attribute type 10 has an invalid length.
[  447.585708][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.744861][ T9996] device bridge_slave_1 left promiscuous mode
[  448.754304][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.402856][ T9996] device bridge_slave_1 entered promiscuous mode
[  450.411442][ T9996] team0: Port device bridge_slave_1 added
[  450.985420][T10025] netlink: 67568 bytes leftover after parsing attributes in process `syz.3.1859'.
[  451.004315][T10025] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1859'.
[  453.873478][T10073] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1870'.
[  454.109422][T10078] netlink: 'syz.4.1870': attribute type 10 has an invalid length.
[  454.209619][T10078] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.304541][T10078] device bridge_slave_1 left promiscuous mode
[  454.317620][T10078] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.397304][T10078] device bridge_slave_1 entered promiscuous mode
[  454.431119][T10078] team0: Port device bridge_slave_1 added
[  454.742784][T10090] netlink: 'syz.1.1879': attribute type 11 has an invalid length.
[  454.790481][T10090] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1879'.
[  454.868396][T10093] netlink: 'syz.1.1879': attribute type 11 has an invalid length.
[  454.904605][T10093] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1879'.
[  455.379173][T10088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.365764][T10142] netlink: 'syz.0.1896': attribute type 15 has an invalid length.
[  462.555631][T10148] delete_channel: no stack
[  463.392461][T10176] netlink: 'syz.1.1907': attribute type 1 has an invalid length.
[  463.418897][T10176] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1907'.
[  463.740298][T10185] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1910'.
[  463.752535][T10185] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  463.965885][T10190] FAULT_INJECTION: forcing a failure.
[  463.965885][T10190] name failslab, interval 1, probability 0, space 0, times 0
[  464.029927][T10190] CPU: 0 PID: 10190 Comm: syz.3.1913 Not tainted syzkaller #0
[  464.037568][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.047669][T10190] Call Trace:
[  464.051022][T10190]  <TASK>
[  464.053993][T10190]  dump_stack_lvl+0x188/0x24e
[  464.058823][T10190]  ? show_regs_print_info+0x12/0x12
[  464.064141][T10190]  ? load_image+0x410/0x410
[  464.068871][T10190]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  464.075236][T10190]  ? __lock_acquire+0x7c40/0x7c40
[  464.080323][T10190]  should_fail_ex+0x390/0x4c0
[  464.085043][T10190]  should_failslab+0x5/0x20
[  464.089555][T10190]  slab_pre_alloc_hook+0x59/0x300
[  464.094599][T10190]  kmem_cache_alloc+0x56/0x2f0
[  464.099380][T10190]  ? __build_skb+0x27/0x3b0
[  464.103903][T10190]  __build_skb+0x27/0x3b0
[  464.108248][T10190]  ? build_skb+0x14/0x230
[  464.112596][T10190]  build_skb+0x1e/0x230
[  464.116773][T10190]  bpf_prog_test_run_skb+0x38d/0x18e0
[  464.122194][T10190]  ? __fget_files+0x28/0x460
[  464.126833][T10190]  ? __fget_files+0x3fc/0x460
[  464.131536][T10190]  ? cpu_online+0xa0/0xa0
[  464.136000][T10190]  bpf_prog_test_run+0x31c/0x390
[  464.140958][T10190]  __sys_bpf+0x62b/0x780
[  464.145217][T10190]  ? bpf_link_show_fdinfo+0x380/0x380
[  464.150639][T10190]  ? lock_chain_count+0x20/0x20
[  464.155515][T10190]  __x64_sys_bpf+0x78/0x90
[  464.160037][T10190]  do_syscall_64+0x4c/0xa0
[  464.164470][T10190]  ? clear_bhb_loop+0x60/0xb0
[  464.169168][T10190]  ? clear_bhb_loop+0x60/0xb0
[  464.173866][T10190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.179777][T10190] RIP: 0033:0x7f7057b9e0d9
[  464.184246][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.203869][T10190] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.212302][T10190] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  464.220327][T10190] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  464.228319][T10190] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  464.236304][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.244294][T10190] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  464.252295][T10190]  </TASK>
[  464.259699][T10195] netlink: 'syz.2.1914': attribute type 11 has an invalid length.
[  464.295568][T10195] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1914'.
[  464.339506][T10196] netlink: 'syz.2.1914': attribute type 11 has an invalid length.
[  464.452030][T10196] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1914'.
[  464.801638][T10191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.730421][T10210] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1918'.
[  467.646158][T10235] delete_channel: no stack
[  469.708366][T10280] netlink: 'syz.3.1938': attribute type 11 has an invalid length.
[  469.742827][T10280] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1938'.
[  469.802537][T10280] netlink: 'syz.3.1938': attribute type 11 has an invalid length.
[  469.821152][T10280] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1938'.
[  470.332876][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.962261][T10297] delete_channel: no stack
[  473.204898][T10301] device syzkaller0 entered promiscuous mode
[  478.346055][T10319] device syzkaller0 entered promiscuous mode
[  487.559098][T10420] device syzkaller0 entered promiscuous mode
[  492.719482][T10483] delete_channel: no stack
[  494.348414][T10498] device syzkaller0 entered promiscuous mode
[  501.716024][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.722876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.905401][T10531] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2027'.
[  503.411952][T10582] netlink: 'syz.3.2044': attribute type 3 has an invalid length.
[  503.479775][T10582] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.2044'.
[  504.738064][T10601] delete_channel: no stack
[  505.102761][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2057'.
[  508.039630][T10648] netlink: 'syz.3.2066': attribute type 10 has an invalid length.
[  509.474622][T10692] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2081'.
[  511.771832][T10751] netlink: 'syz.1.2103': attribute type 39 has an invalid length.
[  512.065261][T10753] netlink: 'syz.1.2103': attribute type 39 has an invalid length.
[  513.003397][T10784] netlink: 'syz.1.2118': attribute type 2 has an invalid length.
[  513.034538][T10784] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2118'.
[  514.541128][T10838] netlink: 'syz.4.2135': attribute type 3 has an invalid length.
[  514.697084][T10838] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2135'.
[  516.506074][T10901] netlink: 'syz.0.2158': attribute type 3 has an invalid length.
[  516.623407][T10901] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2158'.
[  518.465584][T10935] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2172'.
[  518.587271][T10933] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2172'.
[  518.648760][T10932] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2171'.
[  519.388224][T10951] netlink: 'syz.0.2177': attribute type 3 has an invalid length.
[  519.492727][T10951] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2177'.
[  520.241199][T10963] netlink: 'syz.0.2183': attribute type 1 has an invalid length.
[  520.285738][T10963] netlink: 126196 bytes leftover after parsing attributes in process `syz.0.2183'.
[  520.350081][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'.
[  520.727820][T10964] device syzkaller0 entered promiscuous mode
[  524.840345][T11030] delete_channel: no stack
[  525.166340][T11036] netlink: 'syz.3.2211': attribute type 3 has an invalid length.
[  525.176769][T11036] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2211'.
[  525.536860][T11035] device syzkaller0 entered promiscuous mode
[  528.485763][T11076] delete_channel: no stack
[  530.473484][T11091] netlink: 'syz.4.2228': attribute type 3 has an invalid length.
[  530.481756][T11091] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2228'.
[  532.131473][T11104] netlink: 'syz.0.2235': attribute type 29 has an invalid length.
[  532.131781][T11103] netlink: 'syz.0.2235': attribute type 1 has an invalid length.
[  532.192197][T11104] netlink: 'syz.0.2235': attribute type 29 has an invalid length.
[  532.232586][T11107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2235'.
[  532.245044][T11104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2235'.
[  532.285359][T11103] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2235'.
[  532.561659][T11115] netlink: 'syz.1.2246': attribute type 3 has an invalid length.
[  532.729743][T11115] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2246'.
[  533.386960][T11139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2244'.
[  533.450676][T11139] netlink: 'syz.0.2244': attribute type 10 has an invalid length.
[  533.526078][T11139] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  533.616009][T11126] device syzkaller0 entered promiscuous mode
[  534.153538][T11162] netlink: 'syz.1.2254': attribute type 3 has an invalid length.
[  534.161487][T11162] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2254'.
[  538.668964][T11209] netlink: 'syz.4.2271': attribute type 3 has an invalid length.
[  538.727079][T11209] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2271'.
[  541.201936][T11223] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2277'.
[  541.251592][T11224] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2277'.
[  541.706662][T11240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2282'.
[  541.753272][T11240] netlink: 'syz.1.2282': attribute type 10 has an invalid length.
[  541.778068][T11240] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  542.403721][T11259] device syzkaller0 entered promiscuous mode
[  543.088073][T11251] device syzkaller0 entered promiscuous mode
[  544.564071][T11291] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2300'.
[  546.903815][T11309] netlink: 'syz.0.2306': attribute type 3 has an invalid length.
[  546.912314][T11309] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2306'.
[  548.317707][T11291] netlink: 'syz.4.2300': attribute type 10 has an invalid length.
[  548.325801][T11291] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  548.339372][T11302] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2305'.
[  548.724565][T11318] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2310'.
[  548.961749][T11317] device syzkaller0 entered promiscuous mode
[  551.815972][T11340] delete_channel: no stack
[  554.353069][T11368] FAULT_INJECTION: forcing a failure.
[  554.353069][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.396992][T11368] CPU: 1 PID: 11368 Comm: syz.2.2327 Not tainted syzkaller #0
[  554.404545][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  554.414644][T11368] Call Trace:
[  554.418303][T11368]  <TASK>
[  554.421267][T11368]  dump_stack_lvl+0x188/0x24e
[  554.426011][T11368]  ? show_regs_print_info+0x12/0x12
[  554.431254][T11368]  ? load_image+0x410/0x410
[  554.435804][T11368]  ? __lock_acquire+0x7c40/0x7c40
[  554.440887][T11368]  ? snprintf+0xe5/0x140
[  554.445224][T11368]  should_fail_ex+0x390/0x4c0
[  554.449972][T11368]  _copy_to_user+0x2c/0x130
[  554.454526][T11368]  simple_read_from_buffer+0xe3/0x150
[  554.459951][T11368]  proc_fail_nth_read+0x1a6/0x220
[  554.465003][T11368]  ? proc_fault_inject_write+0x310/0x310
[  554.470655][T11368]  ? fsnotify_perm+0x248/0x550
[  554.475450][T11368]  ? proc_fault_inject_write+0x310/0x310
[  554.481104][T11368]  vfs_read+0x2db/0x960
[  554.485283][T11368]  ? kernel_read+0x1e0/0x1e0
[  554.489889][T11368]  ? __fget_files+0x28/0x460
[  554.494578][T11368]  ? __fget_files+0x3fc/0x460
[  554.499279][T11368]  ? __fdget_pos+0x2ae/0x360
[  554.503881][T11368]  ? ksys_read+0x70/0x260
[  554.508224][T11368]  ksys_read+0x14d/0x260
[  554.512484][T11368]  ? vfs_write+0x9a0/0x9a0
[  554.516916][T11368]  ? syscall_enter_from_user_mode+0x2a/0x80
[  554.522848][T11368]  do_syscall_64+0x4c/0xa0
[  554.527398][T11368]  ? clear_bhb_loop+0x60/0xb0
[  554.532104][T11368]  ? clear_bhb_loop+0x60/0xb0
[  554.536798][T11368]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.542702][T11368] RIP: 0033:0x7f803875e90e
[  554.547124][T11368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  554.566743][T11368] RSP: 002b:00007f803968bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  554.575183][T11368] RAX: ffffffffffffffda RBX: 00007f803968c6c0 RCX: 00007f803875e90e
[  554.583165][T11368] RDX: 000000000000000f RSI: 00007f803968c0a0 RDI: 0000000000000005
[  554.591168][T11368] RBP: 00007f803968c090 R08: 0000000000000000 R09: 0000000000000000
[  554.599157][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.607137][T11368] R13: 00007f8038a26038 R14: 00007f8038a25fa0 R15: 00007ffe198a7e68
[  554.615133][T11368]  </TASK>
[  555.006808][T11373] device syzkaller0 entered promiscuous mode
[  555.034818][T11383] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2332'.
[  555.391472][T11382] netlink: 'syz.0.2342': attribute type 10 has an invalid length.
[  557.380129][T11382] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  557.392865][T11379] netlink: 'syz.0.2342': attribute type 10 has an invalid length.
[  557.609108][T11392] delete_channel: no stack
[  559.459053][T11383] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  559.572168][T11398] device syzkaller0 entered promiscuous mode
[  559.598941][T11377] netlink: 'syz.3.2331': attribute type 3 has an invalid length.
[  559.623949][T11377] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2331'.
[  559.983243][T11412] delete_channel: no stack
[  560.020921][T11417] netlink: 'syz.2.2344': attribute type 3 has an invalid length.
[  560.029019][T11417] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2344'.
[  560.234247][T11423] raw_sendmsg: syz.4.2346 forgot to set AF_INET. Fix it!
[  560.691219][T11435] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2351'.
[  563.143536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.150267][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.185626][T11435] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  563.244467][T11447] netlink: 'syz.4.2352': attribute type 3 has an invalid length.
[  563.271801][T11447] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2352'.
[  563.528740][T11455] device syzkaller0 entered promiscuous mode
[  563.577097][T11456] delete_channel: no stack
[  564.505799][T11488] netlink: 'syz.0.2367': attribute type 3 has an invalid length.
[  564.544560][T11488] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2367'.
[  566.509960][T11481] Ÿë
: port 1(veth0_to_team) entered blocking state
[  566.516952][T11481] Ÿë
: port 1(veth0_to_team) entered disabled state
[  566.524362][T11481] device veth0_to_team entered promiscuous mode
[  567.013432][T11505] delete_channel: no stack
[  567.020215][T11507] netlink: 'syz.0.2369': attribute type 3 has an invalid length.
[  567.064212][T11509] netlink: 'syz.3.2373': attribute type 28 has an invalid length.
[  567.128540][T11509] netlink: 'syz.3.2373': attribute type 4 has an invalid length.
[  567.162818][T11507] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2369'.
[  567.188222][T11509] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2373'.
[  567.268392][T11509] netlink: 'syz.3.2373': attribute type 1 has an invalid length.
[  567.712328][T11528] netlink: 'syz.3.2380': attribute type 1 has an invalid length.
[  567.807937][T11532] device syzkaller0 entered promiscuous mode
[  568.064686][T11536] delete_channel: no stack
[  569.901858][T11579] delete_channel: no stack
[  571.604288][T11609] delete_channel: no stack
[  572.434021][T11630] netlink: 'syz.2.2420': attribute type 28 has an invalid length.
[  572.484081][T11630] netlink: 'syz.2.2420': attribute type 4 has an invalid length.
[  572.516064][T11630] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2420'.
[  572.521161][T11628] device syzkaller0 entered promiscuous mode
[  573.108025][T11641] delete_channel: no stack
[  575.050427][T11679] delete_channel: no stack
[  576.375872][T11630] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  579.015541][T11708] delete_channel: no stack
[  580.434403][T11718] netlink: 'syz.1.2455': attribute type 28 has an invalid length.
[  580.461543][T11718] netlink: 'syz.1.2455': attribute type 4 has an invalid length.
[  580.484609][T11718] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2455'.
[  580.542609][T11726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2456'.
[  580.562717][T11726] bond0: (slave bond_slave_0): Releasing backup interface
[  580.594615][T11726] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  580.794878][T11725] device syzkaller0 entered promiscuous mode
[  581.012406][T11739] netlink: 'syz.3.2461': attribute type 11 has an invalid length.
[  581.047039][T11739] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2461'.
[  581.564568][T11754] delete_channel: no stack
[  581.739436][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.141981][T11742] netlink: 'syz.3.2461': attribute type 10 has an invalid length.
[  586.501473][T11785] delete_channel: no stack
[  591.262362][T11838] delete_channel: no stack
[  591.722638][T11860] device syzkaller0 entered promiscuous mode
[  592.334110][T11876] delete_channel: no stack
[  593.802098][T11915] delete_channel: no stack
[  595.292393][T11924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2532'.
[  595.700910][T11941] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2539'.
[  595.766973][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  595.908198][T11941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  595.921989][T11940] delete_channel: no stack
[  596.169921][T11948] device syzkaller0 entered promiscuous mode
[  597.424509][T11976] netlink: 'syz.3.2552': attribute type 3 has an invalid length.
[  597.447531][T11976] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2552'.
[  598.703385][T11952] netlink: 'syz.1.2543': attribute type 2 has an invalid length.
[  598.711238][T11952] netlink: 'syz.1.2543': attribute type 8 has an invalid length.
[  598.719315][T11952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2543'.
[  599.822219][T12019] netlink: 'syz.3.2567': attribute type 2 has an invalid length.
[  599.878198][T12019] netlink: 'syz.3.2567': attribute type 1 has an invalid length.
[  599.958293][T12019] netlink: 'syz.3.2567': attribute type 8 has an invalid length.
[  599.966103][T12019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2567'.
[  600.127913][T12015] netlink: 'syz.2.2568': attribute type 2 has an invalid length.
[  600.137145][T12015] netlink: 'syz.2.2568': attribute type 8 has an invalid length.
[  600.145357][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2568'.
[  601.223337][T12037] FAULT_INJECTION: forcing a failure.
[  601.223337][T12037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.285173][T12037] CPU: 0 PID: 12037 Comm: syz.2.2575 Not tainted syzkaller #0
[  601.292722][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  601.302842][T12037] Call Trace:
[  601.306158][T12037]  <TASK>
[  601.309125][T12037]  dump_stack_lvl+0x188/0x24e
[  601.313862][T12037]  ? show_regs_print_info+0x12/0x12
[  601.319113][T12037]  ? load_image+0x410/0x410
[  601.323710][T12037]  ? __lock_acquire+0x7c40/0x7c40
[  601.328800][T12037]  should_fail_ex+0x390/0x4c0
[  601.333539][T12037]  _copy_from_user+0x2c/0x170
[  601.338267][T12037]  bpf_prog_test_run_skb+0x263/0x18e0
[  601.343786][T12037]  ? __fget_files+0x28/0x460
[  601.348434][T12037]  ? __fget_files+0x3fc/0x460
[  601.353177][T12037]  ? cpu_online+0xa0/0xa0
[  601.357556][T12037]  bpf_prog_test_run+0x31c/0x390
[  601.362637][T12037]  __sys_bpf+0x62b/0x780
[  601.366937][T12037]  ? bpf_link_show_fdinfo+0x380/0x380
[  601.372381][T12037]  ? lock_chain_count+0x20/0x20
[  601.377297][T12037]  __x64_sys_bpf+0x78/0x90
[  601.381858][T12037]  do_syscall_64+0x4c/0xa0
[  601.386321][T12037]  ? clear_bhb_loop+0x60/0xb0
[  601.391047][T12037]  ? clear_bhb_loop+0x60/0xb0
[  601.395948][T12037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  601.401887][T12037] RIP: 0033:0x7f803879e0d9
[  601.406355][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.426008][T12037] RSP: 002b:00007f803968c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  601.434472][T12037] RAX: ffffffffffffffda RBX: 00007f8038a25fa0 RCX: 00007f803879e0d9
[  601.442496][T12037] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  601.450534][T12037] RBP: 00007f803968c090 R08: 0000000000000000 R09: 0000000000000000
[  601.458551][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.466653][T12037] R13: 00007f8038a26038 R14: 00007f8038a25fa0 R15: 00007ffe198a7e68
[  601.474680][T12037]  </TASK>
[  601.558449][T12040] device syzkaller0 entered promiscuous mode
[  602.152596][T12053] delete_channel: no stack
[  603.986802][T12049] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2581'.
[  604.315429][T12067] netlink: 'syz.4.2585': attribute type 2 has an invalid length.
[  604.330321][T12067] netlink: 'syz.4.2585': attribute type 8 has an invalid length.
[  604.350558][T12067] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2585'.
[  604.563089][T12075] FAULT_INJECTION: forcing a failure.
[  604.563089][T12075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.661680][T12075] CPU: 0 PID: 12075 Comm: syz.3.2590 Not tainted syzkaller #0
[  604.669247][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  604.679441][T12075] Call Trace:
[  604.682748][T12075]  <TASK>
[  604.685708][T12075]  dump_stack_lvl+0x188/0x24e
[  604.690438][T12075]  ? show_regs_print_info+0x12/0x12
[  604.695679][T12075]  ? load_image+0x410/0x410
[  604.700224][T12075]  ? __lock_acquire+0x7c40/0x7c40
[  604.705299][T12075]  should_fail_ex+0x390/0x4c0
[  604.710024][T12075]  _copy_from_user+0x2c/0x170
[  604.714740][T12075]  do_ipv6_setsockopt+0x312/0x3c30
[  604.719982][T12075]  ? sk_dst_reset+0xa0/0xa0
[  604.724545][T12075]  ? verify_lock_unused+0x140/0x140
[  604.729787][T12075]  ? mark_lock+0x94/0x320
[  604.734143][T12075]  ? __lock_acquire+0x138a/0x7c40
[  604.739201][T12075]  ? get_pid_task+0x1c/0x1e0
[  604.743872][T12075]  ? aa_label_sk_perm+0x4cc/0x660
[  604.748939][T12075]  ? verify_lock_unused+0x140/0x140
[  604.754156][T12075]  ? aa_sk_perm+0x950/0x950
[  604.758684][T12075]  ? __might_sleep+0xd0/0xd0
[  604.763293][T12075]  ? __fget_files+0x28/0x460
[  604.767904][T12075]  ? aa_sk_perm+0x81f/0x950
[  604.772443][T12075]  ? aa_af_perm+0x340/0x340
[  604.777044][T12075]  ? __fget_files+0x3fc/0x460
[  604.781828][T12075]  ? aa_sock_opt_perm+0x74/0x100
[  604.786798][T12075]  ipv6_setsockopt+0x55/0x190
[  604.791584][T12075]  ? sock_common_recvmsg+0x190/0x190
[  604.796892][T12075]  __sys_setsockopt+0x2bf/0x3d0
[  604.801955][T12075]  __x64_sys_setsockopt+0xb1/0xc0
[  604.806996][T12075]  do_syscall_64+0x4c/0xa0
[  604.811514][T12075]  ? clear_bhb_loop+0x60/0xb0
[  604.816204][T12075]  ? clear_bhb_loop+0x60/0xb0
[  604.820909][T12075]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  604.826820][T12075] RIP: 0033:0x7f7057b9e0d9
[  604.831256][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.850886][T12075] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  604.859321][T12075] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  604.867309][T12075] RDX: 0000000000000033 RSI: 0000000000000029 RDI: 0000000000000003
[  604.875300][T12075] RBP: 00007f70589a0090 R08: 0000000000000120 R09: 0000000000000000
[  604.883284][T12075] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  604.891267][T12075] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  604.899265][T12075]  </TASK>
[  605.976422][T12096] ¥: port 1(team0) entered blocking state
[  605.984563][T12096] ¥: port 1(team0) entered disabled state
[  605.998284][T12096] device team0 entered promiscuous mode
[  606.004118][T12096] device team_slave_0 entered promiscuous mode
[  606.015579][T12081] delete_channel: no stack
[  606.025422][T12096] device team_slave_1 entered promiscuous mode
[  606.072669][T12097] device team0 left promiscuous mode
[  606.078314][T12097] device team_slave_0 left promiscuous mode
[  606.084483][T12097] device team_slave_1 left promiscuous mode
[  606.097864][T12097] ¥: port 1(team0) entered disabled state
[  606.857146][T12107] netlink: 'syz.3.2603': attribute type 2 has an invalid length.
[  606.865475][T12107] netlink: 'syz.3.2603': attribute type 8 has an invalid length.
[  606.904503][T12107] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2603'.
[  607.697273][T12133] delete_channel: no stack
[  607.764340][T12132] delete_channel: no stack
[  608.410790][T12161] device syzkaller0 entered promiscuous mode
[  608.523022][T12163] FAULT_INJECTION: forcing a failure.
[  608.523022][T12163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.541864][T12155] device syzkaller0 entered promiscuous mode
[  608.549115][T12163] CPU: 0 PID: 12163 Comm: syz.1.2627 Not tainted syzkaller #0
[  608.556722][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  608.566816][T12163] Call Trace:
[  608.570106][T12163]  <TASK>
[  608.573047][T12163]  dump_stack_lvl+0x188/0x24e
[  608.577752][T12163]  ? show_regs_print_info+0x12/0x12
[  608.582966][T12163]  ? load_image+0x410/0x410
[  608.587570][T12163]  ? __lock_acquire+0x7c40/0x7c40
[  608.592612][T12163]  ? snprintf+0xe5/0x140
[  608.596895][T12163]  should_fail_ex+0x390/0x4c0
[  608.601596][T12163]  _copy_to_user+0x2c/0x130
[  608.606113][T12163]  simple_read_from_buffer+0xe3/0x150
[  608.611499][T12163]  proc_fail_nth_read+0x1a6/0x220
[  608.616538][T12163]  ? proc_fault_inject_write+0x310/0x310
[  608.622187][T12163]  ? fsnotify_perm+0x248/0x550
[  608.626962][T12163]  ? proc_fault_inject_write+0x310/0x310
[  608.632627][T12163]  vfs_read+0x2db/0x960
[  608.636806][T12163]  ? kernel_read+0x1e0/0x1e0
[  608.641416][T12163]  ? __fget_files+0x28/0x460
[  608.646028][T12163]  ? __fget_files+0x3fc/0x460
[  608.651012][T12163]  ? __fdget_pos+0x2ae/0x360
[  608.655637][T12163]  ? ksys_read+0x70/0x260
[  608.660008][T12163]  ksys_read+0x14d/0x260
[  608.664272][T12163]  ? vfs_write+0x9a0/0x9a0
[  608.668707][T12163]  ? lockdep_hardirqs_on+0x94/0x140
[  608.673922][T12163]  do_syscall_64+0x4c/0xa0
[  608.678350][T12163]  ? clear_bhb_loop+0x60/0xb0
[  608.683037][T12163]  ? clear_bhb_loop+0x60/0xb0
[  608.687732][T12163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  608.693670][T12163] RIP: 0033:0x7ff76e75e90e
[  608.698101][T12163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  608.717729][T12163] RSP: 002b:00007ff76f5f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  608.726161][T12163] RAX: ffffffffffffffda RBX: 00007ff76f5fa6c0 RCX: 00007ff76e75e90e
[  608.734161][T12163] RDX: 000000000000000f RSI: 00007ff76f5fa0a0 RDI: 0000000000000004
[  608.742147][T12163] RBP: 00007ff76f5fa090 R08: 0000000000000000 R09: 0000000000000000
[  608.750130][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.758112][T12163] R13: 00007ff76ea26038 R14: 00007ff76ea25fa0 R15: 00007ffc91a75be8
[  608.766114][T12163]  </TASK>
[  609.299212][T12175] delete_channel: no stack
[  609.568373][T12186] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  609.810659][T12194] netlink: 'syz.3.2633': attribute type 3 has an invalid length.
[  609.818690][T12194] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2633'.
[  612.543706][T12213] delete_channel: no stack
[  613.756706][T12186] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  614.197944][T12240] delete_channel: no stack
[  614.294657][T12244] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2655'.
[  614.337914][T12244] netlink: zone id is out of range
[  614.373682][T12244] netlink: zone id is out of range
[  614.422267][T12244] netlink: zone id is out of range
[  614.460713][T12244] netlink: zone id is out of range
[  614.492510][T12244] netlink: zone id is out of range
[  614.524592][T12244] netlink: zone id is out of range
[  614.559167][T12244] netlink: zone id is out of range
[  614.587496][T12244] netlink: zone id is out of range
[  614.592710][T12244] netlink: zone id is out of range
[  614.609814][T12244] netlink: zone id is out of range
[  615.261512][T12271] netlink: 'syz.3.2663': attribute type 3 has an invalid length.
[  615.299505][T12271] netlink: 'syz.3.2663': attribute type 4 has an invalid length.
[  615.336741][T12271] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.2663'.
[  615.655598][T12278] delete_channel: no stack
[  616.049044][T12293] netlink: 'syz.0.2670': attribute type 3 has an invalid length.
[  616.103519][T12293] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2670'.
[  617.738235][T12317] delete_channel: no stack
[  620.385940][T12314] netlink: 'syz.2.2678': attribute type 2 has an invalid length.
[  620.393877][T12314] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2678'.
[  620.947179][T12343] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2691'.
[  620.990499][T12343] net_ratelimit: 12 callbacks suppressed
[  620.990609][T12343] netlink: zone id is out of range
[  621.012917][T12343] netlink: zone id is out of range
[  621.016830][T12345] delete_channel: no stack
[  621.043750][T12343] netlink: zone id is out of range
[  621.067861][T12343] netlink: zone id is out of range
[  621.073899][T12343] netlink: zone id is out of range
[  621.139172][T12343] netlink: get zone limit has 8 unknown bytes
[  622.303742][T12372] netlink: 'syz.4.2704': attribute type 2 has an invalid length.
[  622.854131][T12385] delete_channel: no stack
[  623.165700][T12399] netlink: 'syz.0.2714': attribute type 2 has an invalid length.
[  623.175369][T12399] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2714'.
[  623.923478][T12410] FAULT_INJECTION: forcing a failure.
[  623.923478][T12410] name failslab, interval 1, probability 0, space 0, times 0
[  623.969023][T12410] CPU: 0 PID: 12410 Comm: syz.0.2717 Not tainted syzkaller #0
[  623.976576][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  623.986667][T12410] Call Trace:
[  623.989984][T12410]  <TASK>
[  623.992951][T12410]  dump_stack_lvl+0x188/0x24e
[  623.997683][T12410]  ? show_regs_print_info+0x12/0x12
[  624.002944][T12410]  ? load_image+0x410/0x410
[  624.007508][T12410]  should_fail_ex+0x390/0x4c0
[  624.012235][T12410]  should_failslab+0x5/0x20
[  624.016775][T12410]  slab_pre_alloc_hook+0x59/0x300
[  624.021843][T12410]  ? __kernel_text_address+0x9/0x30
[  624.027094][T12410]  ? unwind_get_return_address+0x49/0x80
[  624.032809][T12410]  kmem_cache_alloc+0x56/0x2f0
[  624.037602][T12410]  ? skb_clone+0x1e7/0x370
[  624.042088][T12410]  skb_clone+0x1e7/0x370
[  624.046383][T12410]  bpf_clone_redirect+0x169/0x4a0
[  624.051527][T12410]  bpf_prog_208b094576c80b22+0x56/0x5b
[  624.057017][T12410]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  624.063019][T12410]  ? __lock_acquire+0x7c40/0x7c40
[  624.068057][T12410]  ? lock_chain_count+0x20/0x20
[  624.072922][T12410]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  624.079233][T12410]  ? lockdep_hardirqs_on+0x94/0x140
[  624.084445][T12410]  ? ktime_get+0x7b/0x270
[  624.088791][T12410]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  624.095046][T12410]  ? ktime_get_real_ts64+0x440/0x440
[  624.100376][T12410]  ? read_lock_is_recursive+0x10/0x10
[  624.106114][T12410]  ? __cant_sleep+0x220/0x220
[  624.110801][T12410]  ? ktime_get+0x247/0x270
[  624.115232][T12410]  bpf_test_run+0x2b6/0x830
[  624.119765][T12410]  ? dst_hold+0xb0/0xb0
[  624.123933][T12410]  ? eth_get_headlen+0x200/0x200
[  624.128950][T12410]  ? __build_skb+0x24b/0x3b0
[  624.133578][T12410]  bpf_prog_test_run_skb+0xdaf/0x18e0
[  624.138994][T12410]  ? cpu_online+0xa0/0xa0
[  624.143336][T12410]  bpf_prog_test_run+0x31c/0x390
[  624.148293][T12410]  __sys_bpf+0x62b/0x780
[  624.152554][T12410]  ? bpf_link_show_fdinfo+0x380/0x380
[  624.157948][T12410]  ? lock_chain_count+0x20/0x20
[  624.162824][T12410]  __x64_sys_bpf+0x78/0x90
[  624.167256][T12410]  do_syscall_64+0x4c/0xa0
[  624.171684][T12410]  ? clear_bhb_loop+0x60/0xb0
[  624.176379][T12410]  ? clear_bhb_loop+0x60/0xb0
[  624.181069][T12410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  624.186973][T12410] RIP: 0033:0x7f143d19e0d9
[  624.191412][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.211029][T12410] RSP: 002b:00007f143df87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  624.219474][T12410] RAX: ffffffffffffffda RBX: 00007f143d425fa0 RCX: 00007f143d19e0d9
[  624.227487][T12410] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  624.235472][T12410] RBP: 00007f143df87090 R08: 0000000000000000 R09: 0000000000000000
[  624.243455][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.251435][T12410] R13: 00007f143d426038 R14: 00007f143d425fa0 R15: 00007ffe6688a298
[  624.259451][T12410]  </TASK>
[  624.580347][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.586974][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  625.213478][T12439] FAULT_INJECTION: forcing a failure.
[  625.213478][T12439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.253297][T12439] CPU: 1 PID: 12439 Comm: syz.3.2726 Not tainted syzkaller #0
[  625.260845][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  625.270948][T12439] Call Trace:
[  625.274263][T12439]  <TASK>
[  625.277234][T12439]  dump_stack_lvl+0x188/0x24e
[  625.281967][T12439]  ? show_regs_print_info+0x12/0x12
[  625.287221][T12439]  ? load_image+0x410/0x410
[  625.291779][T12439]  ? __lock_acquire+0x7c40/0x7c40
[  625.296867][T12439]  should_fail_ex+0x390/0x4c0
[  625.301612][T12439]  _copy_from_user+0x2c/0x170
[  625.306857][T12439]  ___sys_sendmsg+0x1c3/0x360
[  625.311574][T12439]  ? __sys_sendmsg+0x2a0/0x2a0
[  625.316373][T12439]  ? __lock_acquire+0x7c40/0x7c40
[  625.321447][T12439]  __se_sys_sendmsg+0x1c3/0x2b0
[  625.326316][T12439]  ? __x64_sys_sendmsg+0x80/0x80
[  625.331282][T12439]  ? lockdep_hardirqs_on+0x94/0x140
[  625.336504][T12439]  do_syscall_64+0x4c/0xa0
[  625.340935][T12439]  ? clear_bhb_loop+0x60/0xb0
[  625.345626][T12439]  ? clear_bhb_loop+0x60/0xb0
[  625.350315][T12439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.356324][T12439] RIP: 0033:0x7f7057b9e0d9
[  625.360840][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.380459][T12439] RSP: 002b:00007f70589a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  625.388884][T12439] RAX: ffffffffffffffda RBX: 00007f7057e25fa0 RCX: 00007f7057b9e0d9
[  625.396864][T12439] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  625.404842][T12439] RBP: 00007f70589a0090 R08: 0000000000000000 R09: 0000000000000000
[  625.412828][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.420811][T12439] R13: 00007f7057e26038 R14: 00007f7057e25fa0 R15: 00007ffce13c54d8
[  625.428821][T12439]  </TASK>
[  627.083334][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2741'.
[  628.141725][T12501] netlink: 'syz.0.2745': attribute type 3 has an invalid length.
[  628.198663][T12501] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2745'.
[  628.520847][T12511] netlink: 'syz.4.2746': attribute type 3 has an invalid length.
[  628.573895][T12511] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2746'.
[  628.976126][T12508] netlink: 'syz.0.2745': attribute type 10 has an invalid length.
[  630.429828][T12539] delete_channel: no stack
[  630.607321][T12551] FAULT_INJECTION: forcing a failure.
[  630.607321][T12551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  630.677766][T12551] CPU: 1 PID: 12551 Comm: syz.1.2763 Not tainted syzkaller #0
[  630.685326][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  630.695517][T12551] Call Trace:
[  630.698834][T12551]  <TASK>
[  630.701784][T12551]  dump_stack_lvl+0x188/0x24e
[  630.706496][T12551]  ? show_regs_print_info+0x12/0x12
[  630.711723][T12551]  ? load_image+0x410/0x410
[  630.716267][T12551]  ? __lock_acquire+0x7c40/0x7c40
[  630.721324][T12551]  should_fail_ex+0x390/0x4c0
[  630.726031][T12551]  _copy_from_user+0x2c/0x170
[  630.730719][T12551]  __copy_msghdr+0x384/0x560
[  630.735328][T12551]  ___sys_sendmsg+0x210/0x360
[  630.740027][T12551]  ? __sys_sendmsg+0x2a0/0x2a0
[  630.744821][T12551]  ? __lock_acquire+0x7c40/0x7c40
[  630.749879][T12551]  __se_sys_sendmsg+0x1c3/0x2b0
[  630.754751][T12551]  ? __x64_sys_sendmsg+0x80/0x80
[  630.759716][T12551]  ? lockdep_hardirqs_on+0x94/0x140
[  630.764928][T12551]  do_syscall_64+0x4c/0xa0
[  630.769361][T12551]  ? clear_bhb_loop+0x60/0xb0
[  630.774052][T12551]  ? clear_bhb_loop+0x60/0xb0
[  630.778749][T12551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  630.784655][T12551] RIP: 0033:0x7ff76e79e0d9
[  630.789081][T12551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.808793][T12551] RSP: 002b:00007ff76f5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  630.817222][T12551] RAX: ffffffffffffffda RBX: 00007ff76ea25fa0 RCX: 00007ff76e79e0d9
[  630.825205][T12551] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  630.833186][T12551] RBP: 00007ff76f5fa090 R08: 0000000000000000 R09: 0000000000000000
[  630.841169][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  630.849152][T12551] R13: 00007ff76ea26038 R14: 00007ff76ea25fa0 R15: 00007ffc91a75be8
[  630.857147][T12551]  </TASK>
[  631.338603][T12568] device syzkaller0 entered promiscuous mode
[  632.856560][T12600] FAULT_INJECTION: forcing a failure.
[  632.856560][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.902000][T12600] CPU: 0 PID: 12600 Comm: syz.0.2781 Not tainted syzkaller #0
[  632.909545][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  632.919729][T12600] Call Trace:
[  632.923053][T12600]  <TASK>
[  632.926017][T12600]  dump_stack_lvl+0x188/0x24e
[  632.930759][T12600]  ? show_regs_print_info+0x12/0x12
[  632.936017][T12600]  ? load_image+0x410/0x410
[  632.940759][T12600]  ? __lock_acquire+0x7c40/0x7c40
[  632.945846][T12600]  should_fail_ex+0x390/0x4c0
[  632.950570][T12600]  _copy_from_user+0x2c/0x170
[  632.955579][T12600]  __sys_bpf+0x2ea/0x780
[  632.959865][T12600]  ? bpf_link_show_fdinfo+0x380/0x380
[  632.965267][T12600]  ? lock_chain_count+0x20/0x20
[  632.970168][T12600]  __x64_sys_bpf+0x78/0x90
[  632.974593][T12600]  do_syscall_64+0x4c/0xa0
[  632.979026][T12600]  ? clear_bhb_loop+0x60/0xb0
[  632.983727][T12600]  ? clear_bhb_loop+0x60/0xb0
[  632.988418][T12600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  632.994338][T12600] RIP: 0033:0x7f143d19e0d9
[  632.998777][T12600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.018670][T12600] RSP: 002b:00007f143df87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  633.027118][T12600] RAX: ffffffffffffffda RBX: 00007f143d425fa0 RCX: 00007f143d19e0d9
[  633.035099][T12600] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  633.043246][T12600] RBP: 00007f143df87090 R08: 0000000000000000 R09: 0000000000000000
[  633.051317][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.059304][T12600] R13: 00007f143d426038 R14: 00007f143d425fa0 R15: 00007ffe6688a298
[  633.067482][T12600]  </TASK>
[  636.397465][T12633] netlink: 'syz.0.2793': attribute type 3 has an invalid length.
[  636.409443][T12633] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2793'.
[  637.258800][T12655] FAULT_INJECTION: forcing a failure.
[  637.258800][T12655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.283564][T12655] CPU: 0 PID: 12655 Comm: syz.1.2800 Not tainted syzkaller #0
[  637.291105][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  637.301211][T12655] Call Trace:
[  637.304529][T12655]  <TASK>
[  637.307582][T12655]  dump_stack_lvl+0x188/0x24e
[  637.312325][T12655]  ? show_regs_print_info+0x12/0x12
[  637.317583][T12655]  ? load_image+0x410/0x410
[  637.322157][T12655]  ? __lock_acquire+0x7c40/0x7c40
[  637.327327][T12655]  should_fail_ex+0x390/0x4c0
[  637.332058][T12655]  _copy_from_user+0x2c/0x170
[  637.336972][T12655]  iovec_from_user+0x143/0x360
[  637.341826][T12655]  __import_iovec+0x6c/0x510
[  637.346478][T12655]  import_iovec+0x6f/0xa0
[  637.350859][T12655]  ___sys_sendmsg+0x252/0x360
[  637.355593][T12655]  ? __sys_sendmsg+0x2a0/0x2a0
[  637.360537][T12655]  ? __lock_acquire+0x7c40/0x7c40
[  637.365865][T12655]  __se_sys_sendmsg+0x1c3/0x2b0
[  637.370802][T12655]  ? __x64_sys_sendmsg+0x80/0x80
[  637.375890][T12655]  ? lockdep_hardirqs_on+0x94/0x140
[  637.381139][T12655]  do_syscall_64+0x4c/0xa0
[  637.385605][T12655]  ? clear_bhb_loop+0x60/0xb0
[  637.390339][T12655]  ? clear_bhb_loop+0x60/0xb0
[  637.395068][T12655]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  637.401037][T12655] RIP: 0033:0x7ff76e79e0d9
[  637.405492][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.425144][T12655] RSP: 002b:00007ff76f5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  637.433614][T12655] RAX: ffffffffffffffda RBX: 00007ff76ea25fa0 RCX: 00007ff76e79e0d9
[  637.441723][T12655] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  637.449724][T12655] RBP: 00007ff76f5fa090 R08: 0000000000000000 R09: 0000000000000000
[  637.457723][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.465719][T12655] R13: 00007ff76ea26038 R14: 00007ff76ea25fa0 R15: 00007ffc91a75be8
[  637.473730][T12655]  </TASK>
[  637.995999][T12671] netlink: 'syz.1.2805': attribute type 21 has an invalid length.
[  638.043102][T12671] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2805'.
[  638.601398][T12671] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.2805'.
[  639.512128][T12699] device syzkaller0 entered promiscuous mode
[  646.186767][T12735] netlink: 'syz.2.2827': attribute type 10 has an invalid length.
[  646.249049][T12735] device macvlan0 entered promiscuous mode
[  646.313867][T12735] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  646.687559][T12752] netlink: 'syz.4.2842': attribute type 4 has an invalid length.
[  646.908699][T12755] delete_channel: no stack
[  647.744355][T12760] netlink: 'syz.4.2837': attribute type 3 has an invalid length.
[  647.787453][T12760] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2837'.
[  649.934833][T12765] FAULT_INJECTION: forcing a failure.
[  649.934833][T12765] name failslab, interval 1, probability 0, space 0, times 0
[  649.971986][T12765] CPU: 1 PID: 12765 Comm: syz.0.2840 Not tainted syzkaller #0
[  649.979534][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  649.989637][T12765] Call Trace:
[  649.992953][T12765]  <TASK>
[  649.995928][T12765]  dump_stack_lvl+0x188/0x24e
[  650.000665][T12765]  ? show_regs_print_info+0x12/0x12
[  650.005929][T12765]  ? load_image+0x410/0x410
[  650.010493][T12765]  ? __might_sleep+0xd0/0xd0
[  650.015122][T12765]  ? __lock_acquire+0x7c40/0x7c40
[  650.020179][T12765]  ? __find_rr_leaf+0x5e4/0x750
[  650.025065][T12765]  should_fail_ex+0x390/0x4c0
[  650.029772][T12765]  should_failslab+0x5/0x20
[  650.034309][T12765]  slab_pre_alloc_hook+0x59/0x300
[  650.039375][T12765]  ? mark_lock+0x94/0x320
[  650.043747][T12765]  kmem_cache_alloc_node+0x5a/0x310
[  650.048996][T12765]  ? __alloc_skb+0xf9/0x7d0
[  650.053557][T12765]  __alloc_skb+0xf9/0x7d0
[  650.057946][T12765]  alloc_skb_with_frags+0xa7/0x710
[  650.063113][T12765]  ? __lock_acquire+0x138a/0x7c40
[  650.068184][T12765]  sock_alloc_send_pskb+0x87f/0x9a0
[  650.073507][T12765]  ? _local_bh_enable+0xa0/0xa0
[  650.078474][T12765]  ? sock_kzfree_s+0x50/0x50
[  650.083122][T12765]  ? verify_lock_unused+0x140/0x140
[  650.088376][T12765]  __ip6_append_data+0x2a80/0x3e30
[  650.093627][T12765]  ? __lock_acquire+0x7c40/0x7c40
[  650.098705][T12765]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  650.103677][T12765]  ? ip6_setup_cork+0xff0/0xff0
[  650.108578][T12765]  ? ip6_setup_cork+0xa4a/0xff0
[  650.113488][T12765]  ip6_make_skb+0x398/0x520
[  650.118053][T12765]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  650.122951][T12765]  ? __ip6_flush_pending_frames+0x3a0/0x3a0
[  650.128919][T12765]  ? ip6_dst_hoplimit+0x92/0x340
[  650.133989][T12765]  ? ip6_dst_hoplimit+0x92/0x340
[  650.138981][T12765]  udpv6_sendmsg+0x1b5a/0x22c0
[  650.143864][T12765]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  650.148779][T12765]  ? print_unlock_imbalance_bug+0x160/0x160
[  650.154821][T12765]  ? udp_v6_early_demux+0xf00/0xf00
[  650.160096][T12765]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  650.166144][T12765]  ? __local_bh_enable_ip+0x136/0x1c0
[  650.171561][T12765]  ? _local_bh_enable+0xa0/0xa0
[  650.176456][T12765]  ? inet_send_prepare+0x1aa/0x250
[  650.181651][T12765]  ? inet_send_prepare+0x1aa/0x250
[  650.186814][T12765]  ? inet6_sendmsg+0x5b/0xd0
[  650.191458][T12765]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  650.196710][T12765]  ____sys_sendmsg+0x5ed/0x9a0
[  650.201542][T12765]  ? __sys_sendmsg_sock+0x30/0x30
[  650.206612][T12765]  ? __import_iovec+0x306/0x510
[  650.211515][T12765]  ? import_iovec+0x6f/0xa0
[  650.216058][T12765]  ___sys_sendmsg+0x2a2/0x360
[  650.220779][T12765]  ? __sys_sendmsg+0x2a0/0x2a0
[  650.225607][T12765]  ? __lock_acquire+0x7c40/0x7c40
[  650.230698][T12765]  __se_sys_sendmsg+0x1c3/0x2b0
[  650.235602][T12765]  ? __x64_sys_sendmsg+0x80/0x80
[  650.240607][T12765]  ? lockdep_hardirqs_on+0x94/0x140
[  650.245858][T12765]  do_syscall_64+0x4c/0xa0
[  650.250329][T12765]  ? clear_bhb_loop+0x60/0xb0
[  650.255040][T12765]  ? clear_bhb_loop+0x60/0xb0
[  650.259756][T12765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.265697][T12765] RIP: 0033:0x7f143d19e0d9
[  650.270154][T12765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.289924][T12765] RSP: 002b:00007f143df87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.298374][T12765] RAX: ffffffffffffffda RBX: 00007f143d425fa0 RCX: 00007f143d19e0d9
[  650.306466][T12765] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  650.314465][T12765] RBP: 00007f143df87090 R08: 0000000000000000 R09: 0000000000000000
[  650.322447][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.330429][T12765] R13: 00007f143d426038 R14: 00007f143d425fa0 R15: 00007ffe6688a298
[  650.338423][T12765]  </TASK>
[  650.632945][T12787] delete_channel: no stack
[  651.362942][T12807] netlink: 'syz.2.2855': attribute type 3 has an invalid length.
[  651.432038][T12807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2855'.
[  652.023870][T12810] device syzkaller0 entered promiscuous mode
[  652.025264][T12811] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2857'.
[  652.067648][T12811] netlink: zone id is out of range
[  652.098585][T12811] netlink: zone id is out of range
[  652.105602][T12811] netlink: zone id is out of range
[  652.393719][T12811] netlink: zone id is out of range
[  652.400786][T12822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  652.407437][T12811] netlink: zone id is out of range
[  652.428587][T12822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  652.436975][T12822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  652.447381][T12822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  652.455368][T12822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  652.463127][T12822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  652.464398][T12811] netlink: get zone limit has 8 unknown bytes
[  652.777002][T12827] delete_channel: no stack
[  654.583859][ T4292] Bluetooth: hci5: command 0x0409 tx timeout
[  654.985447][T12839] device sit0 entered promiscuous mode
[  655.411051][ T5148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.666095][T12861] delete_channel: no stack
[  656.011455][T12867] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2875'.
[  656.085905][T12867] netlink: zone id is out of range
[  656.117116][T12867] netlink: zone id is out of range
[  656.123559][T12867] netlink: zone id is out of range
[  656.143184][T12867] netlink: zone id is out of range
[  656.657032][ T4292] Bluetooth: hci5: command 0x041b tx timeout
[  656.713103][ T5148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.909936][ T5148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.021090][T12892] FAULT_INJECTION: forcing a failure.
[  657.021090][T12892] name failslab, interval 1, probability 0, space 0, times 0
[  657.044176][T12892] CPU: 0 PID: 12892 Comm: syz.1.2883 Not tainted syzkaller #0
[  657.051720][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.061821][T12892] Call Trace:
[  657.065143][T12892]  <TASK>
[  657.068107][T12892]  dump_stack_lvl+0x188/0x24e
[  657.072840][T12892]  ? show_regs_print_info+0x12/0x12
[  657.078092][T12892]  ? load_image+0x410/0x410
[  657.082639][T12892]  ? __might_sleep+0xd0/0xd0
[  657.087269][T12892]  ? __lock_acquire+0x7c40/0x7c40
[  657.092350][T12892]  should_fail_ex+0x390/0x4c0
[  657.097087][T12892]  should_failslab+0x5/0x20
[  657.101631][T12892]  slab_pre_alloc_hook+0x59/0x300
[  657.106700][T12892]  ? sk_prot_alloc+0xe7/0x210
[  657.111419][T12892]  __kmem_cache_alloc_node+0x4f/0x270
[  657.116837][T12892]  ? sk_prot_alloc+0xe7/0x210
[  657.121560][T12892]  __kmalloc+0xa3/0x240
[  657.125763][T12892]  sk_prot_alloc+0xe7/0x210
[  657.130307][T12892]  ? sk_alloc+0x20/0x330
[  657.134775][T12892]  sk_alloc+0x36/0x330
[  657.138907][T12892]  ? bpf_ctx_init+0x154/0x190
[  657.143641][T12892]  bpf_prog_test_run_skb+0x36d/0x18e0
[  657.149072][T12892]  ? __fget_files+0x28/0x460
[  657.153812][T12892]  ? __fget_files+0x3fc/0x460
[  657.158585][T12892]  ? cpu_online+0xa0/0xa0
[  657.162962][T12892]  bpf_prog_test_run+0x31c/0x390
[  657.167965][T12892]  __sys_bpf+0x62b/0x780
[  657.172274][T12892]  ? bpf_link_show_fdinfo+0x380/0x380
[  657.177717][T12892]  ? lock_chain_count+0x20/0x20
[  657.182620][T12892]  __x64_sys_bpf+0x78/0x90
[  657.187079][T12892]  do_syscall_64+0x4c/0xa0
[  657.191523][T12892]  ? clear_bhb_loop+0x60/0xb0
[  657.196246][T12892]  ? clear_bhb_loop+0x60/0xb0
[  657.200943][T12892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.206851][T12892] RIP: 0033:0x7ff76e79e0d9
[  657.211298][T12892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.230920][T12892] RSP: 002b:00007ff76f5fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  657.239346][T12892] RAX: ffffffffffffffda RBX: 00007ff76ea25fa0 RCX: 00007ff76e79e0d9
[  657.247336][T12892] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  657.255325][T12892] RBP: 00007ff76f5fa090 R08: 0000000000000000 R09: 0000000000000000
[  657.263314][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.271297][T12892] R13: 00007ff76ea26038 R14: 00007ff76ea25fa0 R15: 00007ffc91a75be8
[  657.279292][T12892]  </TASK>
[  657.340871][T12819] chnl_net:caif_netlink_parms(): no params data found
[  657.515528][ T5148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.616124][T12896] delete_channel: no stack
[  657.925661][T12819] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.004530][T12819] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.016249][T12819] device bridge_slave_0 entered promiscuous mode
[  658.070149][T12819] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.095535][T12819] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.121009][T12819] device bridge_slave_1 entered promiscuous mode
[  658.315635][T12819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.438338][T12819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.654237][T12819] team0: Port device team_slave_0 added
[  658.728309][T12819] team0: Port device team_slave_1 added
[  658.746749][ T4292] Bluetooth: hci5: command 0x040f tx timeout
[  658.912001][T12819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.945918][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.118367][T12819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.199238][T12819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.228048][T12915] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2890'.
[  659.228210][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.237532][T12915] net_ratelimit: 2 callbacks suppressed
[  659.237545][T12915] netlink: zone id is out of range
[  659.279429][T12915] netlink: zone id is out of range
[  659.284680][T12915] netlink: zone id is out of range
[  659.300025][T12915] netlink: zone id is out of range
[  659.324378][T12915] netlink: zone id is out of range
[  659.347001][T12915] netlink: get zone limit has 8 unknown bytes
[  659.416679][T12819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.811939][T12819] device hsr_slave_0 entered promiscuous mode
[  659.855100][T12819] device hsr_slave_1 entered promiscuous mode
[  660.478174][T12939] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2894'.
[  660.508056][T12939] netlink: zone id is out of range
[  660.547788][T12939] netlink: zone id is out of range
[  660.554046][T12939] netlink: zone id is out of range
[  660.579965][T12939] netlink: zone id is out of range
[  660.617851][T12945] delete_channel: no stack
[  660.816825][ T4292] Bluetooth: hci5: command 0x0419 tx timeout
[  661.118257][T12956] device syzkaller0 entered promiscuous mode
[  661.295856][T12965] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2903'.
[  664.738255][T12991] delete_channel: no stack
[  666.227684][T12996] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2911'.
[  666.645056][T13008] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2915'.
[  666.701385][T13008] net_ratelimit: 8 callbacks suppressed
[  666.701426][T13008] netlink: zone id is out of range
[  666.719444][T13008] netlink: zone id is out of range
[  666.729755][T13008] netlink: zone id is out of range
[  666.735188][T13008] netlink: zone id is out of range
[  666.757435][T13008] netlink: zone id is out of range
[  666.763126][T13008] netlink: get zone limit has 8 unknown bytes
[  667.334672][T13022] delete_channel: no stack
[  670.399821][T13056] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2927'.
[  670.439170][T13056] netlink: zone id is out of range
[  670.463433][T13058] netlink: 'syz.1.2928': attribute type 3 has an invalid length.
[  670.476748][T13056] netlink: zone id is out of range
[  670.482024][T13056] netlink: zone id is out of range
[  670.486866][T13058] netlink: 'syz.1.2928': attribute type 1 has an invalid length.
[  670.496769][T13056] netlink: zone id is out of range
[  670.530771][T13058] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2928'.
[  670.977354][T13065] delete_channel: no stack
[  671.200083][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.221108][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.256480][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.285342][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  671.414153][ T5148] bridge0: port 4(team0) entered disabled state
[  671.461611][ T5148] device bridge_slave_0 left promiscuous mode
[  671.540827][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.137269][T13090] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2938'.
[  672.158626][T13090] net_ratelimit: 2 callbacks suppressed
[  672.158665][T13090] netlink: zone id is out of range
[  672.197125][T13090] netlink: zone id is out of range
[  672.203920][T13090] netlink: zone id is out of range
[  672.226776][T13090] netlink: zone id is out of range
[  672.233106][T13090] netlink: zone id is out of range
[  672.260152][T13090] netlink: get zone limit has 8 unknown bytes
[  673.506295][ T5148] device veth1_macvtap left promiscuous mode
[  673.547115][ T5148] device veth0_macvtap left promiscuous mode
[  673.553328][ T5148] device veth1_vlan left promiscuous mode
[  673.754179][T13124] delete_channel: no stack
[  676.999014][T13145] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2951'.
[  677.009585][T13145] netlink: zone id is out of range
[  677.016190][T13145] netlink: zone id is out of range
[  677.031907][T13145] netlink: zone id is out of range
[  677.052128][T13145] netlink: zone id is out of range
[  677.115812][T13148] delete_channel: no stack
[  677.403639][ T5148] device team_slave_1 left promiscuous mode
[  677.415000][ T5148] team0 (unregistering): Port device team_slave_1 removed
[  677.425316][T13159] netlink: 'syz.0.2955': attribute type 10 has an invalid length.
[  677.443016][T13159] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.2955'.
[  677.486468][ T5148] device team_slave_0 left promiscuous mode
[  677.493686][ T5148] team0 (unregistering): Port device team_slave_0 removed
[  677.579527][ T5148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  677.636661][ T5148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  677.684378][ T5148] device bridge_slave_1 left promiscuous mode
[  677.692095][ T5148] team0 (unregistering): Port device bridge_slave_1 removed
[  677.989175][ T5148] bond0 (unregistering): Released all slaves
[  678.105656][T12819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  678.285731][T12819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  678.337945][T12819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  678.387358][T12819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  678.788134][T13179] delete_channel: no stack
[  678.812383][T13178] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2963'.
[  678.818817][T12819] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.867623][T13178] net_ratelimit: 2 callbacks suppressed
[  678.867662][T13178] netlink: zone id is out of range
[  678.906039][T13178] netlink: zone id is out of range
[  678.938806][T13178] netlink: zone id is out of range
[  678.948150][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  678.961324][T13178] netlink: zone id is out of range
[  678.985307][T13178] netlink: zone id is out of range
[  678.988160][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  679.015909][T13178] netlink: get zone limit has 8 unknown bytes
[  679.033043][T12819] 8021q: adding VLAN 0 to HW filter on device team0
[  679.058042][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  679.078170][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  679.107138][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.114313][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.182806][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  679.209725][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  679.248464][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  679.286756][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.294048][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.327099][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  679.370107][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  679.383410][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  679.434046][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  679.473206][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  679.493920][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  679.520790][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  679.658461][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  679.677496][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  679.722181][T12819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  679.752225][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  679.767387][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  679.781117][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  680.603100][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  680.612386][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  680.631572][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.674915][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  680.684871][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  680.761115][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  680.800068][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  680.859126][T12819] device veth0_vlan entered promiscuous mode
[  680.879986][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  680.898147][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  680.911153][T12819] device veth1_vlan entered promiscuous mode
[  681.045866][T13223] delete_channel: no stack
[  681.062166][T12819] device veth0_macvtap entered promiscuous mode
[  681.118919][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  681.134591][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  681.158755][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  681.168131][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  681.184911][T12819] device veth1_macvtap entered promiscuous mode
[  681.212292][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  681.250396][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  681.384169][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  681.463467][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.474256][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  681.488077][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.504093][T12819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  681.514898][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  681.567561][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  681.606212][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.626704][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.660631][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.686474][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.705039][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  681.725297][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  681.747209][T12819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.772374][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  681.788292][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  681.823423][T12819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.842858][T12819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.873431][T12819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.898789][T12819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.043825][T13240] device syzkaller0 entered promiscuous mode
[  684.129511][T13253] device syzkaller0 entered promiscuous mode
[  684.203051][T13262] delete_channel: no stack
[  686.030841][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.039643][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  688.342216][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.374936][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.424284][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  688.488478][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.531939][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.556777][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  688.713341][T13287] delete_channel: no stack
[  688.889888][T13295] device syzkaller0 entered promiscuous mode
[  690.518242][T13300] netlink: 'syz.2.3001': attribute type 3 has an invalid length.
[  690.526028][T13300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3001'.
[  691.502945][T12822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  691.523618][T12822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  691.533995][T12822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  691.543509][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  691.551366][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  691.560792][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  691.660396][T13330] netlink: 'syz.3.3007': attribute type 3 has an invalid length.
[  691.668434][T13330] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3007'.
[  693.392204][T13319] device syzkaller0 entered promiscuous mode
[  693.707074][ T4292] Bluetooth: hci2: command 0x0409 tx timeout
[  693.751094][T13344] FAULT_INJECTION: forcing a failure.
[  693.751094][T13344] name failslab, interval 1, probability 0, space 0, times 0
[  693.764791][T13344] CPU: 0 PID: 13344 Comm: syz.4.3012 Not tainted syzkaller #0
[  693.772317][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  693.782418][T13344] Call Trace:
[  693.785745][T13344]  <TASK>
[  693.788715][T13344]  dump_stack_lvl+0x188/0x24e
[  693.793459][T13344]  ? show_regs_print_info+0x12/0x12
[  693.798711][T13344]  ? load_image+0x410/0x410
[  693.803293][T13344]  should_fail_ex+0x390/0x4c0
[  693.808034][T13344]  should_failslab+0x5/0x20
[  693.812575][T13344]  slab_pre_alloc_hook+0x59/0x300
[  693.817648][T13344]  ? lockdep_init_map_type+0x98/0x8d0
[  693.823079][T13344]  ? nf_ct_ext_add+0x1a7/0x3e0
[  693.827979][T13344]  __kmem_cache_alloc_node+0x4f/0x270
[  693.833390][T13344]  ? nf_ct_ext_add+0x1a7/0x3e0
[  693.838173][T13344]  __kmalloc_node_track_caller+0xa0/0x240
[  693.843918][T13344]  krealloc+0x6a/0x100
[  693.847998][T13344]  nf_ct_ext_add+0x1a7/0x3e0
[  693.852612][T13344]  init_conntrack+0x808/0x1190
[  693.857398][T13344]  ? early_drop+0x870/0x870
[  693.861919][T13344]  ? nf_conntrack_find_get+0x640/0x640
[  693.867453][T13344]  ? __siphash_unaligned+0x289/0x3d0
[  693.872785][T13344]  nf_conntrack_in+0xd76/0x1830
[  693.877675][T13344]  ? nf_ct_pernet+0x270/0x270
[  693.882388][T13344]  ? ip6t_alloc_initial_table+0x640/0x640
[  693.888185][T13344]  ? ipv6_defrag+0x2d2/0x3a0
[  693.892796][T13344]  ? ipv6_conntrack_in+0x20/0x20
[  693.897757][T13344]  nf_hook_slow+0xb9/0x200
[  693.902193][T13344]  __ip6_local_out+0x780/0x8a0
[  693.906978][T13344]  ? __ip6_local_out+0x608/0x8a0
[  693.911931][T13344]  ? ip6_dst_hoplimit+0x340/0x340
[  693.916974][T13344]  ? ip6_setup_cork+0xa4a/0xff0
[  693.921844][T13344]  ? __ip6_local_out+0x8a0/0x8a0
[  693.926882][T13344]  ? read_lock_is_recursive+0x10/0x10
[  693.932276][T13344]  ? ip6_make_skb+0x3ec/0x520
[  693.936971][T13344]  ip6_local_out+0x26/0x120
[  693.941489][T13344]  ? ip6_send_skb+0x106/0x370
[  693.946182][T13344]  ip6_send_skb+0x1c9/0x370
[  693.950726][T13344]  udp_v6_send_skb+0xb99/0x1850
[  693.955618][T13344]  udpv6_sendmsg+0x1b9e/0x22c0
[  693.960409][T13344]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  693.965464][T13344]  ? print_unlock_imbalance_bug+0x160/0x160
[  693.971376][T13344]  ? udp_v6_early_demux+0xf00/0xf00
[  693.976610][T13344]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  693.982715][T13344]  ? __local_bh_enable_ip+0x136/0x1c0
[  693.988108][T13344]  ? _local_bh_enable+0xa0/0xa0
[  693.992996][T13344]  ? inet_send_prepare+0x1aa/0x250
[  693.998205][T13344]  ? inet_send_prepare+0x1aa/0x250
[  694.003330][T13344]  ? inet6_sendmsg+0x5b/0xd0
[  694.007935][T13344]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  694.013153][T13344]  ____sys_sendmsg+0x5ed/0x9a0
[  694.017946][T13344]  ? __sys_sendmsg_sock+0x30/0x30
[  694.022998][T13344]  ? __import_iovec+0x306/0x510
[  694.027873][T13344]  ? import_iovec+0x6f/0xa0
[  694.032396][T13344]  ___sys_sendmsg+0x2a2/0x360
[  694.037115][T13344]  ? __sys_sendmsg+0x2a0/0x2a0
[  694.041917][T13344]  ? __lock_acquire+0x7c40/0x7c40
[  694.047071][T13344]  __se_sys_sendmsg+0x1c3/0x2b0
[  694.051941][T13344]  ? __x64_sys_sendmsg+0x80/0x80
[  694.056908][T13344]  ? lockdep_hardirqs_on+0x94/0x140
[  694.062237][T13344]  do_syscall_64+0x4c/0xa0
[  694.066689][T13344]  ? clear_bhb_loop+0x60/0xb0
[  694.071389][T13344]  ? clear_bhb_loop+0x60/0xb0
[  694.076087][T13344]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.081998][T13344] RIP: 0033:0x7fc79239e0d9
[  694.086558][T13344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.106197][T13344] RSP: 002b:00007fc793208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  694.114624][T13344] RAX: ffffffffffffffda RBX: 00007fc792625fa0 RCX: 00007fc79239e0d9
[  694.122612][T13344] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  694.130611][T13344] RBP: 00007fc793208090 R08: 0000000000000000 R09: 0000000000000000
[  694.138593][T13344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  694.146664][T13344] R13: 00007fc792626038 R14: 00007fc792625fa0 R15: 00007ffdd99dede8
[  694.154667][T13344]  </TASK>
[  695.777144][ T4292] Bluetooth: hci2: command 0x041b tx timeout
[  696.655863][T13351] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3015'.
[  697.862139][ T4292] Bluetooth: hci2: command 0x040f tx timeout
[  698.129781][T13336] netlink: 'syz.0.3008': attribute type 10 has an invalid length.
[  698.139911][T13336] team0: Device hsr_slave_0 failed to register rx_handler
[  698.611438][T13359] device syzkaller0 entered promiscuous mode
[  698.870457][T13328] chnl_net:caif_netlink_parms(): no params data found
[  699.012442][T13379] FAULT_INJECTION: forcing a failure.
[  699.012442][T13379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  699.031480][T13379] CPU: 0 PID: 13379 Comm: syz.3.3026 Not tainted syzkaller #0
[  699.039098][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  699.049191][T13379] Call Trace:
[  699.052508][T13379]  <TASK>
[  699.055471][T13379]  dump_stack_lvl+0x188/0x24e
[  699.060205][T13379]  ? show_regs_print_info+0x12/0x12
[  699.065455][T13379]  ? load_image+0x410/0x410
[  699.070001][T13379]  ? __lock_acquire+0x7c40/0x7c40
[  699.075072][T13379]  ? snprintf+0xe5/0x140
[  699.079359][T13379]  should_fail_ex+0x390/0x4c0
[  699.084087][T13379]  _copy_to_user+0x2c/0x130
[  699.088634][T13379]  simple_read_from_buffer+0xe3/0x150
[  699.094048][T13379]  proc_fail_nth_read+0x1a6/0x220
[  699.099119][T13379]  ? proc_fault_inject_write+0x310/0x310
[  699.104801][T13379]  ? fsnotify_perm+0x248/0x550
[  699.109607][T13379]  ? proc_fault_inject_write+0x310/0x310
[  699.115280][T13379]  vfs_read+0x2db/0x960
[  699.119500][T13379]  ? kernel_read+0x1e0/0x1e0
[  699.124142][T13379]  ? __fget_files+0x28/0x460
[  699.128778][T13379]  ? __fget_files+0x3fc/0x460
[  699.133511][T13379]  ? __fdget_pos+0x2ae/0x360
[  699.138141][T13379]  ? ksys_read+0x70/0x260
[  699.142516][T13379]  ksys_read+0x14d/0x260
[  699.146800][T13379]  ? vfs_write+0x9a0/0x9a0
[  699.151270][T13379]  ? lockdep_hardirqs_on+0x94/0x140
[  699.156524][T13379]  do_syscall_64+0x4c/0xa0
[  699.160984][T13379]  ? clear_bhb_loop+0x60/0xb0
[  699.165706][T13379]  ? clear_bhb_loop+0x60/0xb0
[  699.170432][T13379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  699.176372][T13379] RIP: 0033:0x7fd36095e90e
[  699.180826][T13379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  699.200563][T13379] RSP: 002b:00007fd35ebf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  699.209040][T13379] RAX: ffffffffffffffda RBX: 00007fd35ebf66c0 RCX: 00007fd36095e90e
[  699.217231][T13379] RDX: 000000000000000f RSI: 00007fd35ebf60a0 RDI: 0000000000000004
[  699.225278][T13379] RBP: 00007fd35ebf6090 R08: 0000000000000000 R09: 0000000000000000
[  699.233308][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  699.241335][T13379] R13: 00007fd360c26038 R14: 00007fd360c25fa0 R15: 00007ffcbb96a678
[  699.249377][T13379]  </TASK>
[  699.936800][ T4292] Bluetooth: hci2: command 0x0419 tx timeout
[  703.791444][T13328] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.853447][T13328] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.870000][T13328] device bridge_slave_0 entered promiscuous mode
[  703.960821][T13328] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.972232][T13328] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.983904][T13328] device bridge_slave_1 entered promiscuous mode
[  704.032460][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.094167][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.229586][T13328] team0: Port device team_slave_0 added
[  704.249442][T13328] team0: Port device team_slave_1 added
[  704.298614][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.305870][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  704.357120][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.393276][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.430756][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  704.514689][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  704.646105][T13328] device hsr_slave_0 entered promiscuous mode
[  704.683271][T13328] device hsr_slave_1 entered promiscuous mode
[  704.787170][T13328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  704.794825][T13328] Cannot create hsr debugfs directory
[  704.863205][T13414] netlink: 'syz.2.3038': attribute type 10 has an invalid length.
[  704.893088][T13414] bridge0: port 3(dummy0) entered disabled state
[  704.902744][T13414] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.913215][T13414] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.950654][T13414] device bridge0 left promiscuous mode
[  705.311234][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3039'.
[  705.632050][T13438] delete_channel: no stack
[  705.731759][T13434] device syzkaller0 entered promiscuous mode
[  705.870877][T13328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.226057][T13328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.423545][T13328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.583765][T13328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.616573][T13468] netlink: 'syz.0.3052': attribute type 10 has an invalid length.
[  708.723778][T13472] delete_channel: no stack
[  709.193447][T13468] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.209673][T13468] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.379300][T13468] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.386909][T13468] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.395470][T13468] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.402806][T13468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.526481][T13468] team0: Port device bridge0 added
[  709.732165][T13486] device syzkaller0 entered promiscuous mode
[  710.379172][T13501] delete_channel: no stack
[  713.008242][T13511] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3070'.
[  713.045081][T13515] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.3070'.
[  713.071020][T13515] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.3070'.
[  713.097715][T13515] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.3070'.
[  713.209572][T13328] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  713.239245][T13328] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  713.280640][T13328] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  713.308040][T13328] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  713.664903][T13529] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3083'.
[  713.814365][T13328] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.912533][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  713.933209][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  714.082742][T13328] 8021q: adding VLAN 0 to HW filter on device team0
[  714.121757][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  714.157633][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  714.170790][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.178013][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.313838][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  714.324072][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  714.364978][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  714.375266][T13538] delete_channel: no stack
[  714.379055][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.387006][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.405238][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  714.462214][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  714.475515][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  714.493175][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  714.539323][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  714.558458][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  714.591997][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  714.667753][T13545] device syzkaller0 entered promiscuous mode
[  714.683575][T13328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  714.702952][T13328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  714.780957][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  714.813576][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  714.831629][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  714.855582][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  714.878462][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  715.930342][T13569] delete_channel: no stack
[  717.733630][T13560] netlink: 'syz.2.3087': attribute type 10 has an invalid length.
[  717.741630][T13560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3087'.
[  717.750817][T13560] device bond0 entered promiscuous mode
[  717.756421][T13560] device bond_slave_0 entered promiscuous mode
[  717.762824][T13560] device bond_slave_1 entered promiscuous mode
[  717.769319][T13560] bridge0: port 4(bond0) entered blocking state
[  717.775621][T13560] bridge0: port 4(bond0) entered disabled state
[  717.903656][T13574] device syzkaller0 entered promiscuous mode
[  720.432826][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  720.458835][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  720.471801][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.587733][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  720.615001][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  720.645730][T13600] delete_channel: no stack
[  720.688855][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  720.704028][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  720.714592][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  720.787662][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  720.830255][T13328] device veth0_vlan entered promiscuous mode
[  720.856091][T13328] device veth1_vlan entered promiscuous mode
[  720.939565][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  720.958433][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  720.985074][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  721.015470][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  721.076279][T13328] device veth0_macvtap entered promiscuous mode
[  721.143343][T13328] device veth1_macvtap entered promiscuous mode
[  721.235861][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.264577][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.288742][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.340806][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.356763][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.370387][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.383037][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.393328][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  721.439464][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  721.469003][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  721.527389][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  721.574999][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.597044][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.615434][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.628148][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.661473][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.701160][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.753199][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.812995][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.845769][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.878194][T13328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.896632][T13328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.930489][T13328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.962297][T13328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.969908][T13636] delete_channel: no stack
[  721.986048][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'.
[  722.010321][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  722.030735][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  722.813520][ T5148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.856639][ T5148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.903773][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  722.944684][T13656] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3125'.
[  722.978504][ T5158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.006176][ T5158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.027254][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  723.296315][T13662] delete_channel: no stack
[  723.683454][T13675] netlink: 126324 bytes leftover after parsing attributes in process `syz.0.3132'.
[  724.727356][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  724.735734][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  724.824022][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  724.834548][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  724.842494][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  724.853473][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  725.119301][T13693] netlink: 'syz.0.3138': attribute type 10 has an invalid length.
[  725.583633][T13693] team0: Device wg1 is of different type
[  725.676941][T13704] delete_channel: no stack
[  725.802417][T13692] device syzkaller0 entered promiscuous mode
[  726.506112][T13719] netlink: 'syz.2.3147': attribute type 29 has an invalid length.
[  726.904437][ T4281] Bluetooth: hci4: command 0x0409 tx timeout
[  728.143329][T13719] netlink: 'syz.2.3147': attribute type 29 has an invalid length.
[  728.359976][ T5158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.634734][T13683] chnl_net:caif_netlink_parms(): no params data found
[  728.890482][T13683] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.918833][T13683] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.949483][T13683] device bridge_slave_0 entered promiscuous mode
[  728.979793][ T4281] Bluetooth: hci4: command 0x041b tx timeout
[  728.987199][T13683] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.003386][T13683] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.025587][T13683] device bridge_slave_1 entered promiscuous mode
[  729.113741][T13683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.163430][T13683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.459825][ T5158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.509789][T13683] team0: Port device team_slave_0 added
[  729.525160][T13683] team0: Port device team_slave_1 added
[  729.718179][ T5158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.758650][T13683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.765663][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  729.832607][T13683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.899207][ T5158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.977258][T13683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.041261][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.074340][T13683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.117459][T13683] device hsr_slave_0 entered promiscuous mode
[  730.133785][T13762] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3160'.
[  730.248311][T13683] device hsr_slave_1 entered promiscuous mode
[  730.314607][T13683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  730.369024][T13683] Cannot create hsr debugfs directory
[  731.056904][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[  733.136687][ T4281] Bluetooth: hci4: command 0x0419 tx timeout
[  735.882121][T13830] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3179'.
[  735.923294][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'.
[  735.962082][T13835] netlink: 'syz.2.3179': attribute type 21 has an invalid length.
[  736.537573][T13846] device syzkaller0 entered promiscuous mode
[  736.643159][T13683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  736.699172][T13683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  736.811049][T13683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  736.840479][T13863] netlink: 'syz.3.3188': attribute type 5 has an invalid length.
[  736.881198][T13683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  736.899596][T13866] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.3188'.
[  736.916871][T13866] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.3188'.
[  736.966949][T13866] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.3188'.
[  741.515201][T13904] ------------[ cut here ]------------
[  741.520960][T13904] WARNING: CPU: 1 PID: 13904 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480
[  741.531039][T13904] Modules linked in:
[  741.534972][T13904] CPU: 1 PID: 13904 Comm: syz.3.3202 Not tainted syzkaller #0
[  741.542940][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  741.553171][T13904] RIP: 0010:perf_pending_task+0x353/0x480
[  741.559114][T13904] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  741.579342][T13904] RSP: 0018:ffffc90003ed78e8 EFLAGS: 00010293
[  741.585468][T13904] RAX: ffffffff81a7add3 RBX: ffff888049de3458 RCX: ffff88804bbe1e00
[  741.593723][T13904] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  741.601811][T13904] RBP: ffff888049de3220 R08: ffff88804bbe2803 R09: 1ffff1100977c500
[  741.609961][T13904] R10: dffffc0000000000 R11: ffffed100977c501 R12: ffff88804bbe1e00
[  741.618066][T13904] R13: ffff888028508960 R14: 0000000000000000 R15: 1ffff110093bc644
[  741.626122][T13904] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  741.635165][T13904] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  741.641845][T13904] CR2: 00007f143d427dac CR3: 000000000c88e000 CR4: 00000000003506e0
[  741.649938][T13904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  741.657994][T13904] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  741.665979][T13904] Call Trace:
[  741.669348][T13904]  <TASK>
[  741.672328][T13904]  task_work_run+0x1d0/0x260
[  741.677015][T13904]  ? task_work_cancel+0x220/0x220
[  741.682095][T13904]  ? do_raw_spin_unlock+0x11d/0x230
[  741.687394][T13904]  do_exit+0x9d5/0x2570
[  741.691670][T13904]  ? __sched_text_start+0x8/0x8
[  741.696671][T13904]  ? put_task_struct+0x80/0x80
[  741.701498][T13904]  ? preempt_schedule_common+0xa5/0xd0
[  741.707098][T13904]  ? preempt_schedule+0xbc/0xd0
[  741.712000][T13904]  ? schedule_preempt_disabled+0x20/0x20
[  741.717754][T13904]  ? lock_chain_count+0x20/0x20
[  741.722666][T13904]  do_group_exit+0x229/0x2e0
[  741.727377][T13904]  get_signal+0x1259/0x1340
[  741.731941][T13904]  arch_do_signal_or_restart+0xc4/0x1310
[  741.737764][T13904]  ? __lock_acquire+0x7c40/0x7c40
[  741.742856][T13904]  ? file_end_write+0x156/0x250
[  741.747840][T13904]  ? vfs_write+0x777/0x9a0
[  741.752320][T13904]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  741.758083][T13904]  ? get_sigframe_size+0x10/0x10
[  741.763087][T13904]  ? mutex_unlock+0x10/0x10
[  741.767722][T13904]  ? __fget_files+0x3fc/0x460
[  741.772474][T13904]  ? ksys_write+0x1fd/0x260
[  741.777120][T13904]  ? exit_to_user_mode_loop+0x3b/0x110
[  741.782636][T13904]  exit_to_user_mode_loop+0x70/0x110
[  741.788053][T13904]  exit_to_user_mode_prepare+0xee/0x180
[  741.793657][T13904]  syscall_exit_to_user_mode+0x16/0x40
[  741.799239][T13904]  do_syscall_64+0x58/0xa0
[  741.803710][T13904]  ? clear_bhb_loop+0x60/0xb0
[  741.808525][T13904]  ? clear_bhb_loop+0x60/0xb0
[  741.813264][T13904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.819279][T13904] RIP: 0033:0x7fd36099e0d9
[  741.823740][T13904] Code: Unable to access opcode bytes at 0x7fd36099e0af.
[  741.830948][T13904] RSP: 002b:00007fd35ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  741.839442][T13904] RAX: 0000000000000012 RBX: 00007fd360c25fa0 RCX: 00007fd36099e0d9
[  741.847538][T13904] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009
[  741.855554][T13904] RBP: 00007fd360a35024 R08: 0000000000000000 R09: 0000000000000000
[  741.863620][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  741.871690][T13904] R13: 00007fd360c26038 R14: 00007fd360c25fa0 R15: 00007ffcbb96a678
[  741.879773][T13904]  </TASK>
[  741.882835][T13904] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  741.890125][T13904] CPU: 1 PID: 13904 Comm: syz.3.3202 Not tainted syzkaller #0
[  741.897588][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  741.907651][T13904] Call Trace:
[  741.910937][T13904]  <TASK>
[  741.913874][T13904]  dump_stack_lvl+0x188/0x24e
[  741.918571][T13904]  ? memcpy+0x3c/0x60
[  741.922615][T13904]  ? show_regs_print_info+0x12/0x12
[  741.927825][T13904]  ? load_image+0x410/0x410
[  741.932345][T13904]  panic+0x2d3/0x710
[  741.936277][T13904]  ? bpf_jit_dump+0xd0/0xd0
[  741.940820][T13904]  __warn+0x2f8/0x4f0
[  741.944831][T13904]  ? perf_pending_task+0x353/0x480
[  741.949968][T13904]  ? perf_pending_task+0x353/0x480
[  741.955089][T13904]  report_bug+0x2ba/0x4f0
[  741.959439][T13904]  ? perf_pending_task+0x353/0x480
[  741.964561][T13904]  handle_bug+0x3a/0x70
[  741.968729][T13904]  exc_invalid_op+0x16/0x40
[  741.973242][T13904]  asm_exc_invalid_op+0x16/0x20
[  741.978131][T13904] RIP: 0010:perf_pending_task+0x353/0x480
[  741.983862][T13904] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  742.003484][T13904] RSP: 0018:ffffc90003ed78e8 EFLAGS: 00010293
[  742.009908][T13904] RAX: ffffffff81a7add3 RBX: ffff888049de3458 RCX: ffff88804bbe1e00
[  742.017886][T13904] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  742.025866][T13904] RBP: ffff888049de3220 R08: ffff88804bbe2803 R09: 1ffff1100977c500
[  742.033845][T13904] R10: dffffc0000000000 R11: ffffed100977c501 R12: ffff88804bbe1e00
[  742.041823][T13904] R13: ffff888028508960 R14: 0000000000000000 R15: 1ffff110093bc644
[  742.049811][T13904]  ? perf_pending_task+0x353/0x480
[  742.054942][T13904]  ? perf_pending_task+0x353/0x480
[  742.060062][T13904]  task_work_run+0x1d0/0x260
[  742.064668][T13904]  ? task_work_cancel+0x220/0x220
[  742.069700][T13904]  ? do_raw_spin_unlock+0x11d/0x230
[  742.074912][T13904]  do_exit+0x9d5/0x2570
[  742.079078][T13904]  ? __sched_text_start+0x8/0x8
[  742.083953][T13904]  ? put_task_struct+0x80/0x80
[  742.088731][T13904]  ? preempt_schedule_common+0xa5/0xd0
[  742.094199][T13904]  ? preempt_schedule+0xbc/0xd0
[  742.099063][T13904]  ? schedule_preempt_disabled+0x20/0x20
[  742.104713][T13904]  ? lock_chain_count+0x20/0x20
[  742.109582][T13904]  do_group_exit+0x229/0x2e0
[  742.114191][T13904]  get_signal+0x1259/0x1340
[  742.118722][T13904]  arch_do_signal_or_restart+0xc4/0x1310
[  742.124369][T13904]  ? __lock_acquire+0x7c40/0x7c40
[  742.129410][T13904]  ? file_end_write+0x156/0x250
[  742.134272][T13904]  ? vfs_write+0x777/0x9a0
[  742.138709][T13904]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  742.144358][T13904]  ? get_sigframe_size+0x10/0x10
[  742.149305][T13904]  ? mutex_unlock+0x10/0x10
[  742.153908][T13904]  ? __fget_files+0x3fc/0x460
[  742.158606][T13904]  ? ksys_write+0x1fd/0x260
[  742.163125][T13904]  ? exit_to_user_mode_loop+0x3b/0x110
[  742.168603][T13904]  exit_to_user_mode_loop+0x70/0x110
[  742.173906][T13904]  exit_to_user_mode_prepare+0xee/0x180
[  742.179462][T13904]  syscall_exit_to_user_mode+0x16/0x40
[  742.184940][T13904]  do_syscall_64+0x58/0xa0
[  742.189372][T13904]  ? clear_bhb_loop+0x60/0xb0
[  742.194062][T13904]  ? clear_bhb_loop+0x60/0xb0
[  742.198752][T13904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.204660][T13904] RIP: 0033:0x7fd36099e0d9
[  742.209087][T13904] Code: Unable to access opcode bytes at 0x7fd36099e0af.
[  742.216117][T13904] RSP: 002b:00007fd35ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  742.224545][T13904] RAX: 0000000000000012 RBX: 00007fd360c25fa0 RCX: 00007fd36099e0d9
[  742.232526][T13904] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009
[  742.240501][T13904] RBP: 00007fd360a35024 R08: 0000000000000000 R09: 0000000000000000
[  742.248481][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.256474][T13904] R13: 00007fd360c26038 R14: 00007fd360c25fa0 R15: 00007ffcbb96a678
[  742.264467][T13904]  </TASK>
[  742.267622][T13904] Kernel Offset: disabled
[  742.271949][T13904] Rebooting in 86400 seconds..