last executing test programs:

17.110718809s ago: executing program 4 (id=16594):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], <r3=>0x0, 0xdf, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xbd41, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

16.867228742s ago: executing program 4 (id=16598):
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close(r1)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000004000000000000000ac1414aa2c200007"], 0xfdef)

16.704045482s ago: executing program 4 (id=16602):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x8, [@const={0x10, 0x0, 0x0, 0xa, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5e9}]}, @datasec={0x7, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x5, 0x40775ede}, {0x5, 0x3ff, 0x4}, {0x4, 0xc1, 0xd}, {0x3, 0x6, 0xffffffda}, {0x2, 0x8, 0x7}, {0x1, 0x8, 0xfffff001}, {0x3, 0x4, 0x38e}, {0x2, 0x400, 0xb4}], "1654"}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f00000006c0)=""/252, 0xbc, 0xfc, 0x0, 0x4, 0x10000, @value=r3}, 0x28)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000020001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
close(r4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

16.487320054s ago: executing program 4 (id=16606):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

16.274673667s ago: executing program 4 (id=16609):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0xa100, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x4d}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81020329080000000000fe800000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)

15.782823046s ago: executing program 4 (id=16614):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xce307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0x3}, 0x40, 0x0, 0x80, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

3.499517747s ago: executing program 2 (id=16678):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]})
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)

2.815230697s ago: executing program 0 (id=16684):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000500036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0)

2.709927873s ago: executing program 2 (id=16685):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'vlan0\x00', @random="cc632691861a"})
close(r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000009c0)=""/129, 0x2e, 0x81, 0x0, 0x10}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)

2.475985457s ago: executing program 1 (id=16687):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)

2.360901853s ago: executing program 0 (id=16688):
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x59)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
gettid()
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)

2.216466792s ago: executing program 1 (id=16690):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1d, 0x0, 0x3d)
sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="f6479508f8105993ec735f8fea26f25c8a9f8de27a2b0d588d6a21b79c8575ad31713e526184d838d409e060f7a44b968979a27610dd53638ba7a4763ab353d32cbd692a1cb204456d17376f14d6bb22516243922823166fed8dad769e6aa28460a781783c86db2bae9d3de058ea710282ad352c271b7d205a69a38e394ba4e934c4a27445", 0x85}, {&(0x7f0000000500)="86fb9b24331a79bd5530fb02a71da1457e3f8fc99b142784f8f2280ee778e65cb8599feb222f311ebdb906c9b88e5e712e5dacee8f047932614465e919070a19c0ef446f4c3dae91b7fcf2f9b29d9cdff594e4965b53f9366b13b6ad18ce732cdca45fe8", 0x64}, {&(0x7f00000003c0)="3ec2fab3db2d", 0x6}, {&(0x7f0000000600)="c7a1d7d32cfe9a11a915c604065e4a84ab6af273e4f7282c21f8a3380a5fc67b46ebad84832153cce9bac3280e7361651bf21005765d4c55fd7f14ba1c545d83e431f294d49774e4a47440306aa4d52cabb9fd7edb3856028713ab949d4ee5b32878b19e2966a8893dd3e8d7bedb219d7e2be6447a19c732fea67c6024127f1d93df3da2966412c3c28196d0a6e567a1e7867d0a53809eae06ee8c90a99901ee96de371522113651ce2d038468267482a32878251106dabc469496b3da", 0xbd}, {&(0x7f00000006c0)="31fea502270303690eb0f2cdde7f04260e45757961852a94c89c4d6feaa347ebabd546298a4983c725e318142ec7908243eb8aaf3ecdb881a5da9f5a5b423d1fcf593945edea2bf3b1228a9e0120bc865c558352fe3a57287bcacc62897b0c7bf6eabd53f8bd2ffc3601589bdc55f54ff4e861bd62d785de738e31fddb62478d22841d2cb77aa3b96c34ee2891d877aee628c41ab8ea06627151eadf9b0c2836d42d313a05b663049fc4f3037e0f5167615ea4d9baa68703f2e162212262c5556220a02b526a", 0xc6}, {&(0x7f0000000800)}], 0x6, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd23}}], 0x18}, 0x40c4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)

2.216132092s ago: executing program 2 (id=16691):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1.907633169s ago: executing program 1 (id=16693):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x1a, &(0x7f00000001c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc065c0000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000d0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64, 0xca, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/134, 0x86}], 0x3, &(0x7f0000000c40)}, 0x2003)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f00000003c0), &(0x7f0000000440)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20)
syz_clone(0x240000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)

1.861842262s ago: executing program 0 (id=16694):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000040000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000002000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0xe0, 0x0, 0x7fffffff, 0x5a4d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100020, 0x91f, 0x7, 0x9, 0x81, 0x5, 0x4005, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e9f4442ff00"/20, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r7, &(0x7f0000000400)="947150cab0c05bd3d72054acfe8401d5e9ba20b9813376d876e3407f90757a4c79ed688aa5fbba084b7d5863fefb2d4b5372", &(0x7f0000000580)=""/218}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x800, 0x40, 0xec4, 0xa048, 0x1, 0xa4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000280)="3772789e718b87b1ecbc78664971fa1f3c510d0faaa60f3bb0e90744d3ea7636a9339f7c5949cb8e5c3e539c25517a414b228229cbd05c82941fdb97366a4137f11a71b4686e9ba6acef681d396706824361f770535b706886550508590ca68a65a559c9f2f25ddafe403adecf91c5ee401c9d4b3df42d27d9d6e05533cfa8a12a3dcc490e80930f14de1dcd5f77a6641b3b536f077018f66bdcba6e099c753aa47dc2b2139ee8e2944b55c9ad9ba3a1", &(0x7f0000000340)=""/166}, 0x20)

1.808422715s ago: executing program 2 (id=16695):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x41c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4002, 0x44b, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000004f007f049e", 0x9}, {&(0x7f0000000080)="c54ea8333f07f498ce2eb5", 0xb}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xb1, 0x0, &(0x7f0000000040)="0049c6952786a4b8d3dce769c27020b198ae7087eb337444483d5d9fd3319244d4e702f224868f846797b97c60a2e48b9faba8d4f017dece6aa03979036ac2fadb4c92031677d380958944efdebe8561d5e683544c9091c423d6bd5b1bb20d0d4592784d6afc4fee5e1a539f5e210cd78bcbd9e11ce06b484ff68e287a2c095d6225a8ab4904dca433a59e51ac27579e8c8849083e5db9b45c956aac36f0e217c61ce12a186987e41ca79204227784c27a", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

1.799457296s ago: executing program 3 (id=16696):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff00000f0095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r1}, 0x94)

1.508753602s ago: executing program 3 (id=16697):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00", @ANYRES32, @ANYBLOB="00000000020000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x4004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x10)
close(0xffffffffffffffff)

1.148403124s ago: executing program 1 (id=16698):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
close(r1) (async)
socket$kcm(0xa, 0x2, 0x3a) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.148020654s ago: executing program 3 (id=16699):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000000000000003f01a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04)

1.130575164s ago: executing program 2 (id=16700):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)

1.004490252s ago: executing program 0 (id=16701):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x1}, 0x110000, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)

784.222515ms ago: executing program 3 (id=16702):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

736.553457ms ago: executing program 1 (id=16703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async, rerun: 32)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async, rerun: 32)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$kcm(0x2, 0x922000000001, 0x106) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) (async, rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 32)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000301de1c47ee55449d30626cdf77067451deaef88db994a4f07c8ae01c70f3857c3e921d843dbbdcfb6eba700d29ffbcf6fe82971a1d4cd5631e479249e8eb84915e179e2d08867752da51c433eb2730754b685b19fe6f6484eb98e17f1f4830224c416ee9f91d6a3cbf58711e198bd8c1cd88525d2e90756fc024d2ae77cdd33f1c5f85634e9d86ba87fbeef12293d6c7b9f358358906babf1186c6ecfe6a0f8b093119777"], 0x50) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048041) (async)
setsockopt$sock_attach_bpf(r5, 0x6, 0x24, &(0x7f0000000000), 0xff7b) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4a) (async, rerun: 64)
r9 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000740)={r9})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000700000004100000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

566.827027ms ago: executing program 2 (id=16704):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x108600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x106)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/69, 0x45}], 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="ad490400080000036f480000fcffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007d7010000f8ffffffb702000008000000b7030000e2020000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008080000b7030000ff03f2ff840000007bdc"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', r2, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x6, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x40}, 0x80, 0x0}, 0x48004)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd10"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000200)={r5, r0})
sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640a", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18e3ff000000004821da26c0873aaa00bf00000000000000"], 0x18}, 0x8080)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030fff700300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f00"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x18)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

468.302963ms ago: executing program 3 (id=16705):
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
gettid()
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)

467.978353ms ago: executing program 0 (id=16706):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000710010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

465.122803ms ago: executing program 1 (id=16707):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0, 0x0, 0x0, 0xf00}, 0x2600c055)
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000280)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4", @ANYBLOB="a19e2ea867b377dab424d43525e6c92e7297fffa6a6a33203bc8ca3345f4bd74838f355dd16d68fa538ec0505dd76035001ea33bc9233fe196f9e871ffd587a22daa7c908529df75b2b85df2c5e26f7b83b1b708d636301ce0db0d0ed647c80aaedba7b8ad84ceb133d6f0ece4656650735bf5fd4d462323f72243179d371364ebd4872f2137079c6a38502061c2ca19bc3f9c971e1dfca1997a0f6a5e28cf8d1808c23daed658a42de9b079"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

163.92465ms ago: executing program 0 (id=16708):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0xd0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=16709):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
mkdir(&(0x7f0000000340)='./file0\x00', 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008043)

kernel console output (not intermixed with test programs):

T17551]  ? __lock_acquire+0x7d10/0x7d10
[ 2445.480619][T17551]  __se_sys_sendmsg+0x1bb/0x2a0
[ 2445.485465][T17551]  ? __x64_sys_sendmsg+0x80/0x80
[ 2445.490405][T17551]  ? trace_sys_enter+0x22/0x80
[ 2445.495166][T17551]  do_syscall_64+0x4c/0xa0
[ 2445.499572][T17551]  ? clear_bhb_loop+0x60/0xb0
[ 2445.504242][T17551]  ? clear_bhb_loop+0x60/0xb0
[ 2445.508914][T17551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2445.514795][T17551] RIP: 0033:0x7f88fdb9acb9
[ 2445.519200][T17551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2445.538806][T17551] RSP: 002b:00007f88feb3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2445.547219][T17551] RAX: ffffffffffffffda RBX: 00007f88fde15fa0 RCX: 00007f88fdb9acb9
[ 2445.555186][T17551] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 2445.563153][T17551] RBP: 00007f88feb3c090 R08: 0000000000000000 R09: 0000000000000000
[ 2445.571116][T17551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2445.579078][T17551] R13: 00007f88fde16038 R14: 00007f88fde15fa0 R15: 00007ffdb03752f8
[ 2445.587054][T17551]  </TASK>
[ 2445.744660][T17560] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15269'.
[ 2445.833700][T17560] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[ 2446.193120][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15279'.
[ 2447.588546][T17601] netlink: 'syz.2.15285': attribute type 10 has an invalid length.
[ 2449.814439][T17617] netlink: 'syz.1.15292': attribute type 21 has an invalid length.
[ 2449.918160][T17617] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15292'.
[ 2450.100965][T17621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15294'.
[ 2452.360185][T17621] IPv6: Can't replace route, no match found
[ 2452.745860][T17638] netlink: 'syz.0.15298': attribute type 2 has an invalid length.
[ 2452.767210][T17638] netlink: 'syz.0.15298': attribute type 8 has an invalid length.
[ 2452.779415][T17638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15298'.
[ 2453.028226][T17640] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15299'.
[ 2453.231052][T17645] netlink: 'syz.1.15300': attribute type 1 has an invalid length.
[ 2453.256935][T17645] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15300'.
[ 2453.415887][T17658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15306'.
[ 2453.996773][T17680] netlink: 'syz.4.15313': attribute type 10 has an invalid length.
[ 2454.116248][T17680] team0: Device hsr_slave_0 failed to register rx_handler
[ 2454.346357][T17687] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15315'.
[ 2454.818436][T17701] netlink: 'syz.3.15320': attribute type 1 has an invalid length.
[ 2454.829312][T17701] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.15320'.
[ 2454.938616][T17708] netlink: 'syz.4.15322': attribute type 10 has an invalid length.
[ 2454.948248][T17708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15322'.
[ 2454.967063][T17708] bridge0: port 4(veth0_vlan) entered blocking state
[ 2454.982673][T17708] bridge0: port 4(veth0_vlan) entered disabled state
[ 2455.001785][T17708] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2455.107703][T17714] FAULT_INJECTION: forcing a failure.
[ 2455.107703][T17714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2455.134625][T17714] CPU: 1 PID: 17714 Comm: syz.3.15325 Not tainted syzkaller #0
[ 2455.142210][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2455.152264][T17714] Call Trace:
[ 2455.155571][T17714]  <TASK>
[ 2455.158532][T17714]  dump_stack_lvl+0x188/0x24e
[ 2455.163205][T17714]  ? show_regs_print_info+0x12/0x12
[ 2455.168402][T17714]  ? load_image+0x400/0x400
[ 2455.172911][T17714]  ? __lock_acquire+0x7d10/0x7d10
[ 2455.177930][T17714]  ? __virt_addr_valid+0x188/0x540
[ 2455.183038][T17714]  should_fail_ex+0x399/0x4d0
[ 2455.187816][T17714]  _copy_from_user+0x2c/0x170
[ 2455.192491][T17714]  ___bpf_copy_key+0xb0/0x100
[ 2455.197176][T17714]  map_update_elem+0x2a9/0x680
[ 2455.201940][T17714]  __sys_bpf+0x4ec/0x780
[ 2455.206177][T17714]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2455.211571][T17714]  ? lock_chain_count+0x20/0x20
[ 2455.216425][T17714]  __x64_sys_bpf+0x78/0x90
[ 2455.220832][T17714]  do_syscall_64+0x4c/0xa0
[ 2455.225241][T17714]  ? clear_bhb_loop+0x60/0xb0
[ 2455.229907][T17714]  ? clear_bhb_loop+0x60/0xb0
[ 2455.234573][T17714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2455.240453][T17714] RIP: 0033:0x7fec4239acb9
[ 2455.244863][T17714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2455.264462][T17714] RSP: 002b:00007fec43172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2455.272891][T17714] RAX: ffffffffffffffda RBX: 00007fec42615fa0 RCX: 00007fec4239acb9
[ 2455.280858][T17714] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002
[ 2455.288824][T17714] RBP: 00007fec43172090 R08: 0000000000000000 R09: 0000000000000000
[ 2455.296787][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2455.304752][T17714] R13: 00007fec42616038 R14: 00007fec42615fa0 R15: 00007ffcb6a1eb18
[ 2455.312732][T17714]  </TASK>
[ 2455.578636][T17723] netlink: 'syz.3.15327': attribute type 21 has an invalid length.
[ 2455.633068][T17723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15327'.
[ 2455.697888][T17727] netlink: 'syz.2.15329': attribute type 10 has an invalid length.
[ 2455.801656][T17727] team0: Device hsr_slave_0 failed to register rx_handler
[ 2455.918786][T17733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15331'.
[ 2456.168951][T17747] netlink: 184 bytes leftover after parsing attributes in process `syz.0.15336'.
[ 2457.031235][T17783] netlink: 'syz.1.15350': attribute type 12 has an invalid length.
[ 2457.118778][T17782] netlink: 'syz.0.15351': attribute type 10 has an invalid length.
[ 2457.290170][T17782] team0: Device hsr_slave_0 failed to register rx_handler
[ 2457.511471][T17800] device .*! entered promiscuous mode
[ 2457.974616][T17812] validate_nla: 1 callbacks suppressed
[ 2457.974654][T17812] netlink: 'syz.4.15364': attribute type 10 has an invalid length.
[ 2458.397529][T17831] netlink: 'syz.4.15371': attribute type 1 has an invalid length.
[ 2458.426538][T17831] __nla_validate_parse: 5 callbacks suppressed
[ 2458.426571][T17831] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15371'.
[ 2458.535083][T17841] netlink: 'syz.1.15374': attribute type 10 has an invalid length.
[ 2458.720919][T17841] team0: Device hsr_slave_0 failed to register rx_handler
[ 2458.853379][T17849] netlink: 'syz.2.15376': attribute type 10 has an invalid length.
[ 2458.891080][T17849] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15376'.
[ 2459.416210][T17875] netlink: 'syz.3.15387': attribute type 2 has an invalid length.
[ 2459.430385][T17875] netlink: 'syz.3.15387': attribute type 8 has an invalid length.
[ 2459.466923][T17875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15387'.
[ 2459.498449][T17870] netlink: 'syz.4.15386': attribute type 1 has an invalid length.
[ 2459.514733][T17870] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15386'.
[ 2460.207280][T17907] netlink: 'syz.1.15400': attribute type 10 has an invalid length.
[ 2460.238813][T17907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2460.256571][T17907] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2460.387978][T17913] netlink: 'syz.4.15403': attribute type 1 has an invalid length.
[ 2460.404213][T17913] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15403'.
[ 2460.478644][T17915] FAULT_INJECTION: forcing a failure.
[ 2460.478644][T17915] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2460.564123][T17915] CPU: 1 PID: 17915 Comm: syz.2.15404 Not tainted syzkaller #0
[ 2460.571737][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2460.581915][T17915] Call Trace:
[ 2460.585226][T17915]  <TASK>
[ 2460.588195][T17915]  dump_stack_lvl+0x188/0x24e
[ 2460.592937][T17915]  ? show_regs_print_info+0x12/0x12
[ 2460.598182][T17915]  ? load_image+0x400/0x400
[ 2460.602716][T17915]  ? __lock_acquire+0x7d10/0x7d10
[ 2460.607788][T17915]  should_fail_ex+0x399/0x4d0
[ 2460.612513][T17915]  prepare_alloc_pages+0x1e2/0x5f0
[ 2460.617666][T17915]  __alloc_pages+0x130/0x4f0
[ 2460.622287][T17915]  ? zone_statistics+0x170/0x170
[ 2460.627254][T17915]  ? verify_lock_unused+0x140/0x140
[ 2460.632474][T17915]  ? perf_trace_lock_acquire+0x33f/0x3e0
[ 2460.638214][T17915]  __folio_alloc+0xe/0x30
[ 2460.642557][T17915]  vma_alloc_folio+0x4a3/0x900
[ 2460.647358][T17915]  wp_page_copy+0x28b/0x1680
[ 2460.651957][T17915]  ? do_wp_page+0x67f/0x1680
[ 2460.656590][T17915]  ? fault_dirty_shared_page+0x3c0/0x3c0
[ 2460.662266][T17915]  handle_mm_fault+0x1d19/0x3ee0
[ 2460.667264][T17915]  ? numa_migrate_prep+0x250/0x250
[ 2460.672403][T17915]  ? lock_chain_count+0x20/0x20
[ 2460.677265][T17915]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 2460.683869][T17915]  ? lock_mm_and_find_vma+0xae/0x2f0
[ 2460.689166][T17915]  do_user_addr_fault+0x51f/0xb10
[ 2460.694245][T17915]  exc_page_fault+0x60/0x100
[ 2460.698856][T17915]  asm_exc_page_fault+0x22/0x30
[ 2460.703710][T17915] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 2460.710312][T17915] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 2460.729925][T17915] RSP: 0018:ffffc9000d207cd0 EFLAGS: 00050206
[ 2460.736016][T17915] RAX: ffffffff8410d901 RBX: 000000000000b161 RCX: 00000000000018a1
[ 2460.744003][T17915] RDX: 000000000000b161 RSI: ffff88807e3498c0 RDI: 000020000000b000
[ 2460.751989][T17915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[ 2460.759965][T17915] R10: dffffc0000000000 R11: ffffed100fc6962c R12: 00007fffffff3e9f
[ 2460.767941][T17915] R13: 0000000000000000 R14: 0000200000001740 R15: ffff88807e340000
[ 2460.775942][T17915]  ? _copy_to_user+0xd1/0x130
[ 2460.780646][T17915]  _copy_to_user+0xea/0x130
[ 2460.785166][T17915]  map_lookup_and_delete_elem+0x705/0x840
[ 2460.790919][T17915]  __sys_bpf+0x5cc/0x780
[ 2460.795181][T17915]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2460.800602][T17915]  ? lock_chain_count+0x20/0x20
[ 2460.805487][T17915]  __x64_sys_bpf+0x78/0x90
[ 2460.809920][T17915]  do_syscall_64+0x4c/0xa0
[ 2460.814362][T17915]  ? clear_bhb_loop+0x60/0xb0
[ 2460.819061][T17915]  ? clear_bhb_loop+0x60/0xb0
[ 2460.823780][T17915]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2460.829728][T17915] RIP: 0033:0x7efd4599acb9
[ 2460.834176][T17915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2460.853800][T17915] RSP: 002b:00007efd46778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2460.862236][T17915] RAX: ffffffffffffffda RBX: 00007efd45c15fa0 RCX: 00007efd4599acb9
[ 2460.870215][T17915] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015
[ 2460.878198][T17915] RBP: 00007efd46778090 R08: 0000000000000000 R09: 0000000000000000
[ 2460.886175][T17915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2460.894153][T17915] R13: 00007efd45c16038 R14: 00007efd45c15fa0 R15: 00007ffd4f0b8af8
[ 2460.902172][T17915]  </TASK>
[ 2461.029534][T17923] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15408'.
[ 2461.346330][T17931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15409'.
[ 2461.487795][T17933] netlink: 'syz.2.15411': attribute type 13 has an invalid length.
[ 2461.600439][T17933] netlink: 160 bytes leftover after parsing attributes in process `syz.2.15411'.
[ 2462.681513][T17953] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15420'.
[ 2462.707567][T17954] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.15419'.
[ 2463.384368][T17968] validate_nla: 1 callbacks suppressed
[ 2463.384390][T17968] netlink: 'syz.4.15426': attribute type 10 has an invalid length.
[ 2463.495855][T17971] netlink: 'syz.4.15426': attribute type 3 has an invalid length.
[ 2463.503708][T17971] __nla_validate_parse: 1 callbacks suppressed
[ 2463.503728][T17971] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.15426'.
[ 2463.657743][T17968] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.15426'.
[ 2464.458008][T17989] netlink: 'syz.0.15431': attribute type 1 has an invalid length.
[ 2464.494880][T17989] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.15431'.
[ 2464.984795][T18005] netlink: 'syz.1.15438': attribute type 21 has an invalid length.
[ 2465.004311][T18005] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15438'.
[ 2465.044127][T18005] netlink: 'syz.1.15438': attribute type 4 has an invalid length.
[ 2465.095549][T18005] netlink: 'syz.1.15438': attribute type 5 has an invalid length.
[ 2465.160979][T18005] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15438'.
[ 2465.264200][T18015] netlink: 'syz.0.15442': attribute type 10 has an invalid length.
[ 2465.579396][T18023] netlink: 'syz.4.15444': attribute type 2 has an invalid length.
[ 2465.625248][T18023] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15444'.
[ 2467.466408][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.472763][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 2468.840276][T18035] netlink: 'syz.4.15448': attribute type 1 has an invalid length.
[ 2468.864505][T18035] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15448'.
[ 2468.970630][T18037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15450'.
[ 2469.399917][T18053] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15456'.
[ 2470.146753][T18078] delete_channel: no stack
[ 2470.166988][T18078] delete_channel: no stack
[ 2470.197117][T18078] netlink: 'syz.0.15462': attribute type 21 has an invalid length.
[ 2471.002949][T18081] netlink: 'syz.4.15464': attribute type 2 has an invalid length.
[ 2471.013749][T18081] netlink: 'syz.4.15464': attribute type 8 has an invalid length.
[ 2471.033111][T18081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15464'.
[ 2471.112655][T18086] netlink: 'syz.1.15465': attribute type 1 has an invalid length.
[ 2471.149858][T18086] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15465'.
[ 2471.435933][T18106] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15473'.
[ 2473.391100][T18139] netlink: 'syz.2.15484': attribute type 1 has an invalid length.
[ 2473.407793][T18139] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15484'.
[ 2473.542021][T18143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15486'.
[ 2474.420828][ T1755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2474.502665][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2474.512854][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2474.544846][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2474.556906][ T1755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2474.568823][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2474.577050][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2474.586580][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2474.694981][ T1755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2474.820159][ T1755] bond0: (slave netdevsim0): Releasing backup interface
[ 2474.837528][ T1755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2474.855230][T18181] netlink: 'syz.1.15497': attribute type 10 has an invalid length.
[ 2474.863570][T18181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15497'.
[ 2474.873110][T18181] bridge0: port 3(veth0_vlan) entered blocking state
[ 2474.880636][T18181] bridge0: port 3(veth0_vlan) entered disabled state
[ 2474.893520][T18181] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2474.910173][T18180] netlink: 'syz.2.15498': attribute type 5 has an invalid length.
[ 2475.199582][T18170] chnl_net:caif_netlink_parms(): no params data found
[ 2475.312411][T18185] netlink: 'syz.2.15499': attribute type 1 has an invalid length.
[ 2475.332986][T18185] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15499'.
[ 2475.639367][T18170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2475.681667][T18170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2475.690300][T18170] device bridge_slave_0 entered promiscuous mode
[ 2475.699401][T18170] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2475.707636][T18170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2475.716061][T18170] device bridge_slave_1 entered promiscuous mode
[ 2475.723436][ T1755] tipc: Left network mode
[ 2475.758514][T18170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2475.786766][T18170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2476.049443][T18203] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15504'.
[ 2476.182909][T18170] team0: Port device team_slave_0 added
[ 2476.336351][T18170] team0: Port device team_slave_1 added
[ 2476.441401][T18225] netlink: 'syz.4.15512': attribute type 1 has an invalid length.
[ 2476.456368][T18225] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15512'.
[ 2476.515627][T18170] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2476.530498][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2476.610909][T18170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2476.645713][T18236] netlink: 'syz.4.15514': attribute type 29 has an invalid length.
[ 2476.664423][ T7507] Bluetooth: hci2: command 0x0409 tx timeout
[ 2476.836689][T18236] netlink: 'syz.4.15514': attribute type 29 has an invalid length.
[ 2476.848681][T18170] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2476.884309][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2476.989637][T18170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2477.024836][T18245] delete_channel: no stack
[ 2477.064386][T18251] netlink: 'syz.4.15517': attribute type 17 has an invalid length.
[ 2477.073880][T18251] netlink: 'syz.4.15517': attribute type 16 has an invalid length.
[ 2477.094117][T18251] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15517'.
[ 2477.235464][T18255] netlink: 'syz.4.15517': attribute type 2 has an invalid length.
[ 2477.243552][T18255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15517'.
[ 2477.284530][T18170] device hsr_slave_0 entered promiscuous mode
[ 2477.291554][T18170] device hsr_slave_1 entered promiscuous mode
[ 2477.319623][T18170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2477.338566][T18170] Cannot create hsr debugfs directory
[ 2477.453111][T18262] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15520'.
[ 2477.497077][T18265] netlink: 'syz.1.15521': attribute type 10 has an invalid length.
[ 2477.631126][T18272] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.15523'.
[ 2477.843326][T18276] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15524'.
[ 2478.142059][ T1755] device wlan1 left promiscuous mode
[ 2478.161248][ T1755] team0: Port device wlan1 removed
[ 2478.316442][T18278] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 2478.336339][T18284] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15528'.
[ 2478.698483][ T1755] device hsr_slave_0 left promiscuous mode
[ 2478.717962][ T1755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2478.744802][ T4273] Bluetooth: hci2: command 0x041b tx timeout
[ 2478.774164][ T1755] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2478.835029][ T1755] device veth1_vlan left promiscuous mode
[ 2479.531707][ T1755] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 2479.577825][ T1755] device team_slave_1 left promiscuous mode
[ 2479.584897][ T1755] team0 (unregistering): Port device team_slave_1 removed
[ 2479.661105][ T1755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2479.702489][ T1755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2479.960650][ T1755] bond0 (unregistering): Released all slaves
[ 2480.003082][T18293] syzkaller0: tun_chr_ioctl cmd 1074025676
[ 2480.009292][T18293] syzkaller0: owner set to 0
[ 2480.019510][T18320] validate_nla: 6 callbacks suppressed
[ 2480.019524][T18320] netlink: 'syz.4.15536': attribute type 10 has an invalid length.
[ 2480.033609][T18320] __nla_validate_parse: 1 callbacks suppressed
[ 2480.033623][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15536'.
[ 2480.060253][T18320] bridge0: port 4(veth0_vlan) entered blocking state
[ 2480.067251][T18320] bridge0: port 4(veth0_vlan) entered disabled state
[ 2480.081499][T18320] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2480.348986][T18337] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15538'.
[ 2480.805149][T18361] netlink: 'syz.4.15546': attribute type 1 has an invalid length.
[ 2480.821966][T18361] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15546'.
[ 2480.824250][ T4273] Bluetooth: hci2: command 0x040f tx timeout
[ 2480.965330][T18170] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2481.014151][T18170] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2481.052153][T18170] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2481.092922][T18370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15548'.
[ 2481.121666][T18372] netlink: 'syz.1.15549': attribute type 10 has an invalid length.
[ 2481.160451][T18170] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2481.291392][T18385] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15552'.
[ 2481.306000][T18383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15550'.
[ 2481.357482][T18379] netlink: 'syz.2.15551': attribute type 10 has an invalid length.
[ 2481.386857][T18379] team0: Device hsr_slave_0 failed to register rx_handler
[ 2481.491451][T18391] netlink: 'syz.1.15553': attribute type 10 has an invalid length.
[ 2481.539386][T18391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2481.546798][T18391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2481.605706][T18396] sctp: [Deprecated]: syz.3.15554 (pid 18396) Use of int in maxseg socket option.
[ 2481.605706][T18396] Use struct sctp_assoc_value instead
[ 2481.725820][T18170] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2481.741221][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2481.797859][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2481.832563][T18170] 8021q: adding VLAN 0 to HW filter on device team0
[ 2481.901756][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2481.918827][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2481.954695][ T1746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2481.961847][ T1746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2482.028987][T18413] netlink: 'syz.3.15558': attribute type 1 has an invalid length.
[ 2482.045151][T18413] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.15558'.
[ 2482.075417][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2482.105889][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2482.134831][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2482.155353][ T1746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2482.162473][ T1746] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2482.238745][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2482.296601][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2482.361977][T18424] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15562'.
[ 2482.428990][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2482.466071][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2482.521203][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2482.556527][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2482.598295][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2482.636788][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2482.682324][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2482.730031][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2482.765226][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2482.829243][T18170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2482.872696][T18438] netlink: 'syz.3.15566': attribute type 10 has an invalid length.
[ 2482.916108][ T4273] Bluetooth: hci2: command 0x0419 tx timeout
[ 2483.016429][T18438] team0: Device hsr_slave_0 failed to register rx_handler
[ 2486.114392][T18455] netlink: 'syz.2.15573': attribute type 2 has an invalid length.
[ 2486.133523][T18455] netlink: 'syz.2.15573': attribute type 8 has an invalid length.
[ 2486.149800][T18455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15573'.
[ 2486.189813][T18455] FAULT_INJECTION: forcing a failure.
[ 2486.189813][T18455] name failslab, interval 1, probability 0, space 0, times 0
[ 2486.235026][T18455] CPU: 0 PID: 18455 Comm: syz.2.15573 Not tainted syzkaller #0
[ 2486.242638][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2486.252724][T18455] Call Trace:
[ 2486.256024][T18455]  <TASK>
[ 2486.258963][T18455]  dump_stack_lvl+0x188/0x24e
[ 2486.263681][T18455]  ? show_regs_print_info+0x12/0x12
[ 2486.268907][T18455]  ? load_image+0x400/0x400
[ 2486.273431][T18455]  ? __might_sleep+0xd0/0xd0
[ 2486.278037][T18455]  ? __lock_acquire+0x7d10/0x7d10
[ 2486.283124][T18455]  should_fail_ex+0x399/0x4d0
[ 2486.287831][T18455]  should_failslab+0x5/0x20
[ 2486.292358][T18455]  slab_pre_alloc_hook+0x59/0x310
[ 2486.297396][T18455]  kmem_cache_alloc_node+0x5a/0x320
[ 2486.302605][T18455]  ? __alloc_skb+0xfc/0x7e0
[ 2486.307134][T18455]  __alloc_skb+0xfc/0x7e0
[ 2486.311489][T18455]  netlink_ack+0x372/0x1170
[ 2486.316011][T18455]  ? verify_lock_unused+0x140/0x140
[ 2486.321231][T18455]  ? perf_trace_lock+0xf8/0x390
[ 2486.326093][T18455]  ? netlink_dump+0xd00/0xd00
[ 2486.330798][T18455]  netlink_rcv_skb+0x280/0x450
[ 2486.335569][T18455]  ? rtnetlink_bind+0x80/0x80
[ 2486.340250][T18455]  ? netlink_ack+0x1170/0x1170
[ 2486.345018][T18455]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2486.350216][T18455]  netlink_unicast+0x74d/0x8d0
[ 2486.354984][T18455]  netlink_sendmsg+0x8ad/0xbd0
[ 2486.359752][T18455]  ? netlink_getsockopt+0x550/0x550
[ 2486.364959][T18455]  ? aa_sock_msg_perm+0x94/0x150
[ 2486.369891][T18455]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 2486.375199][T18455]  ? security_socket_sendmsg+0x7c/0xa0
[ 2486.380659][T18455]  ? netlink_getsockopt+0x550/0x550
[ 2486.385856][T18455]  ____sys_sendmsg+0x5be/0x970
[ 2486.390622][T18455]  ? __sys_sendmsg_sock+0x30/0x30
[ 2486.395644][T18455]  ? __import_iovec+0x315/0x500
[ 2486.400496][T18455]  ? import_iovec+0x6f/0xa0
[ 2486.404993][T18455]  ___sys_sendmsg+0x2a2/0x360
[ 2486.409677][T18455]  ? __sys_sendmsg+0x290/0x290
[ 2486.414460][T18455]  ? __lock_acquire+0x7d10/0x7d10
[ 2486.419499][T18455]  __se_sys_sendmsg+0x1bb/0x2a0
[ 2486.424351][T18455]  ? __x64_sys_sendmsg+0x80/0x80
[ 2486.429294][T18455]  ? trace_sys_enter+0x22/0x80
[ 2486.434055][T18455]  do_syscall_64+0x4c/0xa0
[ 2486.438466][T18455]  ? clear_bhb_loop+0x60/0xb0
[ 2486.443137][T18455]  ? clear_bhb_loop+0x60/0xb0
[ 2486.447806][T18455]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2486.453696][T18455] RIP: 0033:0x7efd4599acb9
[ 2486.458123][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2486.477741][T18455] RSP: 002b:00007efd46778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2486.486172][T18455] RAX: ffffffffffffffda RBX: 00007efd45c15fa0 RCX: 00007efd4599acb9
[ 2486.494149][T18455] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 2486.502125][T18455] RBP: 00007efd46778090 R08: 0000000000000000 R09: 0000000000000000
[ 2486.510095][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2486.518068][T18455] R13: 00007efd45c16038 R14: 00007efd45c15fa0 R15: 00007ffd4f0b8af8
[ 2486.526050][T18455]  </TASK>
[ 2486.772840][T18486] netlink: 'syz.3.15574': attribute type 17 has an invalid length.
[ 2486.800458][T18486] netlink: 'syz.3.15574': attribute type 16 has an invalid length.
[ 2486.821501][T18486] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15574'.
[ 2487.003341][T18500] netlink: 'syz.4.15581': attribute type 4 has an invalid length.
[ 2487.024558][T18500] netlink: 140 bytes leftover after parsing attributes in process `syz.4.15581'.
[ 2487.048483][T18502] netlink: 'syz.3.15574': attribute type 2 has an invalid length.
[ 2487.068379][T18502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15574'.
[ 2487.097299][T18505] netlink: 'syz.4.15581': attribute type 13 has an invalid length.
[ 2487.110676][T18505] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15581'.
[ 2487.161917][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2487.176607][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2487.233578][T18507] netlink: 'syz.4.15581': attribute type 2 has an invalid length.
[ 2487.254094][T18507] netlink: 'syz.4.15581': attribute type 8 has an invalid length.
[ 2487.284172][T18507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15581'.
[ 2487.335069][T18511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15583'.
[ 2487.448774][T18170] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2487.571870][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2487.600465][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2487.685737][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2487.703170][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2487.716460][T18170] device veth0_vlan entered promiscuous mode
[ 2487.797452][T18524] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15589'.
[ 2487.845335][T18526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15588'.
[ 2487.864189][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2487.873081][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2487.926784][T18170] device veth1_vlan entered promiscuous mode
[ 2487.969744][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2487.985244][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2487.993849][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2488.009248][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2488.033141][T18170] device veth0_macvtap entered promiscuous mode
[ 2488.052820][T18170] device veth1_macvtap entered promiscuous mode
[ 2488.084464][T18170] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2488.092070][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2488.111568][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2488.136583][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2488.150658][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2488.166096][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.183353][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.201144][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.212390][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.228937][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.251800][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.262596][T18170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.289621][T18170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.327657][T18170] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2488.352188][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2488.362798][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2488.410839][T18170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.430275][T18170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.457288][T18170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.482888][T18170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2490.780087][ T1755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2490.805873][ T1755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2490.862177][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2490.918629][ T1755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2490.948867][ T1755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2490.972633][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2491.165593][T18538] netlink: 'syz.1.15593': attribute type 1 has an invalid length.
[ 2491.183243][T18538] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15593'.
[ 2491.273915][T18544] delete_channel: no stack
[ 2491.296982][T18546] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15596'.
[ 2491.424546][T18546] team0: Port device team_slave_0 removed
[ 2491.431184][T18546] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 2491.588779][T18553] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15598'.
[ 2491.631973][T18554] device bridge_slave_1 left promiscuous mode
[ 2491.638827][T18554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2491.649190][T18554] device bridge_slave_0 left promiscuous mode
[ 2491.656055][T18554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2491.779738][T18554] bond0: (slave bridge0): Releasing backup interface
[ 2491.891013][T18563] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15602'.
[ 2492.981635][T18592] netlink: 'syz.4.15613': attribute type 2 has an invalid length.
[ 2493.000107][T18592] netlink: 'syz.4.15613': attribute type 8 has an invalid length.
[ 2493.034258][T18592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15613'.
[ 2493.429919][T18600] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15615'.
[ 2493.690042][T18609] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15617'.
[ 2493.989471][T18613] device bridge_slave_1 left promiscuous mode
[ 2494.006794][T18613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2494.023338][T18613] device bridge_slave_0 left promiscuous mode
[ 2494.031539][T18613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2494.086176][T18618] netlink: 'syz.3.15622': attribute type 29 has an invalid length.
[ 2494.232822][T18618] netlink: 'syz.3.15622': attribute type 29 has an invalid length.
[ 2494.268025][T18620] netlink: 'syz.4.15623': attribute type 10 has an invalid length.
[ 2494.277278][T18620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15623'.
[ 2494.531256][T18636] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.15628'.
[ 2494.578522][T18636] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.15628'.
[ 2495.584445][T18673] netlink: 'syz.3.15643': attribute type 1 has an invalid length.
[ 2495.637106][T18677] netlink: 'syz.2.15644': attribute type 4 has an invalid length.
[ 2496.290854][T18694] __nla_validate_parse: 68 callbacks suppressed
[ 2496.290892][T18694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15652'.
[ 2496.438634][T18698] FAULT_INJECTION: forcing a failure.
[ 2496.438634][T18698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2496.530098][T18698] CPU: 1 PID: 18698 Comm: syz.3.15653 Not tainted syzkaller #0
[ 2496.537700][T18698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2496.547787][T18698] Call Trace:
[ 2496.551095][T18698]  <TASK>
[ 2496.554040][T18698]  dump_stack_lvl+0x188/0x24e
[ 2496.558747][T18698]  ? show_regs_print_info+0x12/0x12
[ 2496.563991][T18698]  ? load_image+0x400/0x400
[ 2496.568528][T18698]  ? __lock_acquire+0x7d10/0x7d10
[ 2496.573671][T18698]  ? __kmem_cache_alloc_node+0x140/0x260
[ 2496.579302][T18698]  ? __virt_addr_valid+0x188/0x540
[ 2496.584441][T18698]  should_fail_ex+0x399/0x4d0
[ 2496.589134][T18698]  _copy_from_user+0x2c/0x170
[ 2496.593888][T18698]  map_update_elem+0x454/0x680
[ 2496.598668][T18698]  __sys_bpf+0x4ec/0x780
[ 2496.602927][T18698]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2496.608318][T18698]  ? lock_chain_count+0x20/0x20
[ 2496.613210][T18698]  __x64_sys_bpf+0x78/0x90
[ 2496.617652][T18698]  do_syscall_64+0x4c/0xa0
[ 2496.622094][T18698]  ? clear_bhb_loop+0x60/0xb0
[ 2496.626885][T18698]  ? clear_bhb_loop+0x60/0xb0
[ 2496.631589][T18698]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2496.637512][T18698] RIP: 0033:0x7fec4239acb9
[ 2496.641946][T18698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2496.661571][T18698] RSP: 002b:00007fec43172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2496.669997][T18698] RAX: ffffffffffffffda RBX: 00007fec42615fa0 RCX: 00007fec4239acb9
[ 2496.678003][T18698] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002
[ 2496.685998][T18698] RBP: 00007fec43172090 R08: 0000000000000000 R09: 0000000000000000
[ 2496.694085][T18698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2496.702511][T18698] R13: 00007fec42616038 R14: 00007fec42615fa0 R15: 00007ffcb6a1eb18
[ 2496.710523][T18698]  </TASK>
[ 2496.736565][T18704] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15656'.
[ 2497.305796][T18713] netlink: 'syz.3.15659': attribute type 46 has an invalid length.
[ 2497.397621][T18710] netlink: 'syz.1.15658': attribute type 1 has an invalid length.
[ 2497.414182][T18710] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15658'.
[ 2497.640728][T18716] netlink: 'syz.3.15660': attribute type 5 has an invalid length.
[ 2497.943410][T18728] netlink: 'syz.4.15665': attribute type 10 has an invalid length.
[ 2497.980093][T18728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15665'.
[ 2498.003400][T18728] bridge0: port 4(veth0_vlan) entered blocking state
[ 2498.013809][T18728] bridge0: port 4(veth0_vlan) entered disabled state
[ 2498.040366][T18728] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2498.086423][T18732] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.15666'.
[ 2498.142614][T18737] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15667'.
[ 2498.466388][T18746] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15672'.
[ 2498.883917][T18751] netlink: 'syz.0.15674': attribute type 1 has an invalid length.
[ 2498.955557][T18751] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.15674'.
[ 2499.101263][T18758] netlink: 'syz.1.15678': attribute type 29 has an invalid length.
[ 2499.148525][T18758] netlink: 'syz.1.15678': attribute type 29 has an invalid length.
[ 2499.278386][T18762] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2499.511006][T18766] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2499.537524][T18766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2499.741782][T18771] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15683'.
[ 2499.838757][ T7507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2499.855792][ T7507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2499.864120][ T7507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2499.875045][ T7507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2499.884591][ T7507] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2499.895119][ T7507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2499.959093][T18767] delete_channel: no stack
[ 2500.088144][ T1732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2500.126012][T18779] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15686'.
[ 2500.244787][ T1732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2500.300061][T18790] netlink: 'syz.0.15688': attribute type 29 has an invalid length.
[ 2500.360843][ T1732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2500.386739][T18790] netlink: 'syz.0.15688': attribute type 29 has an invalid length.
[ 2500.417724][ T1732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2500.591921][T18772] chnl_net:caif_netlink_parms(): no params data found
[ 2500.692364][ T1732] tipc: Left network mode
[ 2500.997621][T18772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2501.024696][T18772] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2501.048620][T18772] device bridge_slave_0 entered promiscuous mode
[ 2501.118564][T18772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2501.144386][T18772] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2501.152531][T18772] device bridge_slave_1 entered promiscuous mode
[ 2501.303426][T18772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2501.458478][T18772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2501.656730][T18831] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15699'.
[ 2501.704693][T18772] team0: Port device team_slave_0 added
[ 2501.797690][T18772] team0: Port device team_slave_1 added
[ 2501.916616][T18772] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2501.945107][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2501.971591][ T7507] Bluetooth: hci0: command 0x0409 tx timeout
[ 2502.015599][T18772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2502.086901][T18772] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2502.100119][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2502.136239][T18772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2502.288308][T18772] device hsr_slave_0 entered promiscuous mode
[ 2502.333167][T18772] device hsr_slave_1 entered promiscuous mode
[ 2502.628011][T18879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15715'.
[ 2502.782774][T18884] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15717'.
[ 2502.887297][T18886] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15716'.
[ 2502.958417][T18891] netlink: 'syz.1.15719': attribute type 10 has an invalid length.
[ 2503.293348][T18897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15722'.
[ 2503.716831][ T1732] team0: Port device wlan1 removed
[ 2503.752501][T18908] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2503.761200][T18908] netlink: 1 bytes leftover after parsing attributes in process `syz.4.15725'.
[ 2504.024262][ T7507] Bluetooth: hci0: command 0x041b tx timeout
[ 2504.123665][T18921] netlink: 'syz.4.15728': attribute type 10 has an invalid length.
[ 2504.146868][T18923] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15730'.
[ 2504.158996][T18921] device netdevsim0 entered promiscuous mode
[ 2504.169139][T18921] team0: Port device netdevsim0 added
[ 2504.304678][ T1732] device hsr_slave_0 left promiscuous mode
[ 2504.336830][ T1732] device hsr_slave_1 left promiscuous mode
[ 2504.360751][ T1732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2504.394973][ T1732] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2504.477554][ T1732] device veth1_vlan left promiscuous mode
[ 2505.532281][ T1732] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 2505.582643][ T1732] team0 (unregistering): Port device team_slave_1 removed
[ 2505.631772][ T1732] team0 (unregistering): Port device team_slave_0 removed
[ 2505.676360][ T1732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2505.725196][ T1732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2506.020736][ T1732] bond0 (unregistering): Released all slaves
[ 2506.065032][T18940] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15735'.
[ 2506.104503][ T7507] Bluetooth: hci0: command 0x040f tx timeout
[ 2506.156007][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15743'.
[ 2506.182735][T18974] device caif0 entered promiscuous mode
[ 2506.307189][T18985] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15747'.
[ 2506.358992][T18772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2506.453638][T18772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2506.560154][T18772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2506.613672][T18772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2506.923257][T18772] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2506.991560][T18772] 8021q: adding VLAN 0 to HW filter on device team0
[ 2507.007194][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2507.028121][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2507.080140][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2507.101648][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2507.126292][ T1732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2507.133497][ T1732] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2507.158092][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2507.177421][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2507.196307][ T1732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2507.203500][ T1732] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2507.213857][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2507.231070][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2507.240636][T19015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15753'.
[ 2507.289014][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2507.308078][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2507.326463][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2507.337348][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2507.361282][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2507.380783][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2507.421824][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2507.444805][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2507.466128][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2507.507551][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2507.531487][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2507.561632][T19028] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15755'.
[ 2508.049611][T19052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15764'.
[ 2508.184703][ T7507] Bluetooth: hci0: command 0x0419 tx timeout
[ 2508.242856][T19053] netlink: 'syz.3.15765': attribute type 1 has an invalid length.
[ 2508.305214][T19053] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.15765'.
[ 2508.421714][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2508.485910][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2508.498664][T18772] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2508.628695][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2508.645531][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2508.720416][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2508.761095][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2508.846864][T18772] device veth0_vlan entered promiscuous mode
[ 2508.931819][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2508.954898][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2509.002402][T18772] device veth1_vlan entered promiscuous mode
[ 2509.137767][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2509.156030][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2509.200937][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2509.245002][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2509.296337][T18772] device veth0_macvtap entered promiscuous mode
[ 2509.354598][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2509.381723][T18772] device veth1_macvtap entered promiscuous mode
[ 2509.528894][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2509.577723][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2509.645184][T18772] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2509.682748][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2509.752120][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2509.792824][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2509.871352][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2509.912333][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2509.953963][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2510.012585][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2510.044946][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2510.110192][T18772] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2510.140478][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2510.159939][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2510.205705][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2510.235581][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2510.291883][T18772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2510.321374][T18772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2510.354297][T18772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2510.399412][T18772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2511.064121][T19090] netlink: 'syz.0.15775': attribute type 2 has an invalid length.
[ 2511.092356][T19090] netlink: 'syz.0.15775': attribute type 8 has an invalid length.
[ 2511.132297][T19090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15775'.
[ 2511.169158][T19100] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15778'.
[ 2511.269056][ T1746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2511.326539][ T1746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2511.345091][ T1748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2511.360668][ T1748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2511.366793][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2511.412398][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2511.617409][T19105] netlink: 'syz.4.15780': attribute type 1 has an invalid length.
[ 2511.635313][T19105] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15780'.
[ 2511.771026][ T7507] Bluetooth: hci3: ISO packet for unknown connection handle 1342
[ 2511.950870][T19109] netlink: 'syz.2.15673': attribute type 1 has an invalid length.
[ 2512.007684][T19109] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15673'.
[ 2512.082076][T19122] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15786'.
[ 2512.376564][T19132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15788'.
[ 2512.464721][T19134] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15789'.
[ 2513.599676][T19160] netlink: 'syz.0.15793': attribute type 10 has an invalid length.
[ 2513.730439][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15793'.
[ 2513.872331][T19160] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2513.909379][T19162] netlink: 'syz.1.15796': attribute type 29 has an invalid length.
[ 2514.178120][T19162] netlink: 'syz.1.15796': attribute type 29 has an invalid length.
[ 2516.143895][T19166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15798'.
[ 2516.399774][T19172] netlink: 'syz.4.15799': attribute type 1 has an invalid length.
[ 2516.407897][T19172] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15799'.
[ 2518.297118][T19197] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15807'.
[ 2519.153535][T19211] netlink: 184 bytes leftover after parsing attributes in process `syz.4.15813'.
[ 2519.636894][T19226] netlink: 'syz.2.15816': attribute type 5 has an invalid length.
[ 2519.964914][T19233] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15821'.
[ 2520.200872][T19241] netlink: 'syz.2.15823': attribute type 10 has an invalid length.
[ 2520.250916][T19241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15823'.
[ 2520.317072][T19240] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15822'.
[ 2520.328133][T19241] bridge0: port 3(veth0_vlan) entered blocking state
[ 2520.422086][T19241] bridge0: port 3(veth0_vlan) entered disabled state
[ 2520.492469][T19241] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2522.024330][T19262] netlink: 'syz.2.15830': attribute type 1 has an invalid length.
[ 2522.044252][T19262] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15830'.
[ 2522.357470][T19277] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15835'.
[ 2522.400343][T19278] netlink: 'syz.2.15836': attribute type 1 has an invalid length.
[ 2522.454357][T19278] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15836'.
[ 2522.888789][T19288] netlink: 'syz.4.15839': attribute type 10 has an invalid length.
[ 2522.924604][T19288] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15839'.
[ 2522.927752][T19286] netlink: 8207 bytes leftover after parsing attributes in process `syz.1.15837'.
[ 2523.790014][T19313] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15850'.
[ 2524.500482][T19336] netlink: 'syz.3.15857': attribute type 10 has an invalid length.
[ 2524.992773][T19334] netlink: 'syz.2.15856': attribute type 6 has an invalid length.
[ 2525.024529][T19334] netlink: 'syz.2.15856': attribute type 1 has an invalid length.
[ 2525.032904][T19334] bridge0: port 1(bridge_slave_0) entered learning state
[ 2525.290053][T19349] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15864'.
[ 2526.304804][T19374] netlink: 'syz.2.15872': attribute type 29 has an invalid length.
[ 2526.342892][T19374] netlink: 'syz.2.15872': attribute type 29 has an invalid length.
[ 2526.853912][T19386] device bridge_slave_0 left promiscuous mode
[ 2526.872247][T19386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2526.894877][T19382] netlink: 'syz.3.15874': attribute type 13 has an invalid length.
[ 2526.903506][T19389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15877'.
[ 2527.214933][T19404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15880'.
[ 2527.302381][T19404] netlink: 'syz.2.15880': attribute type 3 has an invalid length.
[ 2527.376052][T19404] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15880'.
[ 2527.839793][T19423] netlink: 'syz.4.15889': attribute type 23 has an invalid length.
[ 2528.498917][T19451] netlink: 'syz.1.15893': attribute type 3 has an invalid length.
[ 2528.572652][T19451] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15893'.
[ 2528.905958][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.912305][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.870359][T19435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15891'.
[ 2531.380518][T19434] netlink: 'syz.2.15892': attribute type 21 has an invalid length.
[ 2531.394307][T19434] netlink: 'syz.2.15892': attribute type 4 has an invalid length.
[ 2531.418926][T19434] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15892'.
[ 2531.879812][T19461] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2531.907338][T19461] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15900'.
[ 2531.932884][T19463] netlink: 'syz.1.15897': attribute type 21 has an invalid length.
[ 2532.008236][T19463] netlink: 'syz.1.15897': attribute type 22 has an invalid length.
[ 2532.054375][T19463] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.15897'.
[ 2532.359838][T19474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15902'.
[ 2532.722269][T19484] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15908'.
[ 2533.136775][T19492] netlink: 'syz.1.15911': attribute type 1 has an invalid length.
[ 2533.184016][T19492] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15911'.
[ 2533.727550][T19506] netlink: 'syz.3.15914': attribute type 2 has an invalid length.
[ 2533.764418][T19506] netlink: 'syz.3.15914': attribute type 8 has an invalid length.
[ 2533.784583][T19506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15914'.
[ 2534.202515][T19523] netlink: 'syz.2.15919': attribute type 2 has an invalid length.
[ 2534.241263][T19523] netlink: 'syz.2.15919': attribute type 8 has an invalid length.
[ 2534.312753][T19523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15919'.
[ 2534.974354][T19532] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15922'.
[ 2535.570109][T19550] netlink: 'syz.2.15927': attribute type 1 has an invalid length.
[ 2535.963455][T19570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2535.970926][T19570] IPv6: NLM_F_CREATE should be set when creating new route
[ 2535.978218][T19570] IPv6: NLM_F_CREATE should be set when creating new route
[ 2536.553056][T19584] __nla_validate_parse: 3 callbacks suppressed
[ 2536.553076][T19584] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15940'.
[ 2537.100597][T19592] validate_nla: 2 callbacks suppressed
[ 2537.100638][T19592] netlink: 'syz.2.15943': attribute type 1 has an invalid length.
[ 2537.148798][T19592] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15943'.
[ 2537.232621][T19607] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15948'.
[ 2537.232717][T19605] FAULT_INJECTION: forcing a failure.
[ 2537.232717][T19605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2537.272129][T19608] tipc: Started in network mode
[ 2537.313594][T19608] tipc: Node identity 9215a268, cluster identity 4711
[ 2537.344129][T19608] tipc: Node number set to 2450891368
[ 2537.360044][T19605] CPU: 1 PID: 19605 Comm: syz.1.15947 Not tainted syzkaller #0
[ 2537.367634][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2537.377710][T19605] Call Trace:
[ 2537.381017][T19605]  <TASK>
[ 2537.383969][T19605]  dump_stack_lvl+0x188/0x24e
[ 2537.388682][T19605]  ? show_regs_print_info+0x12/0x12
[ 2537.393902][T19605]  ? load_image+0x400/0x400
[ 2537.398434][T19605]  ? __lock_acquire+0x7d10/0x7d10
[ 2537.403483][T19605]  ? snprintf+0xe5/0x140
[ 2537.407748][T19605]  should_fail_ex+0x399/0x4d0
[ 2537.412460][T19605]  _copy_to_user+0x2c/0x130
[ 2537.416992][T19605]  simple_read_from_buffer+0xe3/0x150
[ 2537.422570][T19605]  proc_fail_nth_read+0x1a6/0x220
[ 2537.427619][T19605]  ? proc_fault_inject_write+0x310/0x310
[ 2537.433277][T19605]  ? fsnotify_perm+0x248/0x550
[ 2537.438066][T19605]  ? proc_fault_inject_write+0x310/0x310
[ 2537.443717][T19605]  vfs_read+0x2de/0xa00
[ 2537.447904][T19605]  ? kernel_read+0x1e0/0x1e0
[ 2537.452516][T19605]  ? __fget_files+0x28/0x4b0
[ 2537.457118][T19605]  ? __fget_files+0x28/0x4b0
[ 2537.461721][T19605]  ? __fget_files+0x43d/0x4b0
[ 2537.466415][T19605]  ? __fdget_pos+0x2ae/0x360
[ 2537.471165][T19605]  ? ksys_read+0x71/0x250
[ 2537.475502][T19605]  ksys_read+0x14c/0x250
[ 2537.479745][T19605]  ? vfs_write+0xa30/0xa30
[ 2537.484173][T19605]  ? trace_sys_enter+0x22/0x80
[ 2537.488934][T19605]  do_syscall_64+0x4c/0xa0
[ 2537.493345][T19605]  ? clear_bhb_loop+0x60/0xb0
[ 2537.498015][T19605]  ? clear_bhb_loop+0x60/0xb0
[ 2537.502685][T19605]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2537.508576][T19605] RIP: 0033:0x7feeed15b58e
[ 2537.512995][T19605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2537.532600][T19605] RSP: 002b:00007feeee07cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2537.541018][T19605] RAX: ffffffffffffffda RBX: 00007feeee07d6c0 RCX: 00007feeed15b58e
[ 2537.548978][T19605] RDX: 000000000000000f RSI: 00007feeee07d0a0 RDI: 0000000000000006
[ 2537.556939][T19605] RBP: 00007feeee07d090 R08: 0000000000000000 R09: 0000000000000000
[ 2537.564899][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2537.572859][T19605] R13: 00007feeed416038 R14: 00007feeed415fa0 R15: 00007fff2e05b288
[ 2537.580835][T19605]  </TASK>
[ 2537.708469][T19619] device syzkaller0 entered promiscuous mode
[ 2538.083283][T19628] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15956'.
[ 2539.772151][T19623] netlink: 184 bytes leftover after parsing attributes in process `syz.1.15955'.
[ 2539.785062][T19628] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2539.819853][T19628] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2539.874109][T19628] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2540.209138][T19652] netlink: 'syz.3.15961': attribute type 1 has an invalid length.
[ 2540.265147][T19652] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.15961'.
[ 2540.656207][T19659] netlink: 'syz.1.15968': attribute type 1 has an invalid length.
[ 2540.664372][T19659] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.15968'.
[ 2540.737015][T19669] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.15973'.
[ 2541.147393][T19681] netlink: 'syz.4.15978': attribute type 10 has an invalid length.
[ 2541.156190][T19681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15978'.
[ 2541.174604][T19681] bridge0: port 4(veth0_vlan) entered blocking state
[ 2541.181660][T19681] bridge0: port 4(veth0_vlan) entered disabled state
[ 2541.190552][T19681] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2541.440993][T19680] netlink: 'syz.1.15976': attribute type 9 has an invalid length.
[ 2541.472365][T19680] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.15976'.
[ 2541.666157][T19692] netlink: 'syz.3.15982': attribute type 1 has an invalid length.
[ 2541.675319][T19692] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.15982'.
[ 2542.161447][T19706] netlink: 'syz.4.15986': attribute type 1 has an invalid length.
[ 2542.170616][T19706] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.15986'.
[ 2542.363206][T19710] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15988'.
[ 2542.392575][T19714] netlink: 'syz.3.15990': attribute type 1 has an invalid length.
[ 2542.406511][T19714] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15990'.
[ 2542.415852][T19712] netlink: 'syz.4.15989': attribute type 27 has an invalid length.
[ 2542.426575][T19712] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 2542.570428][T19718] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.15991'.
[ 2542.643439][T19724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15994'.
[ 2543.440119][T19740] delete_channel: no stack
[ 2544.286656][T19776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16012'.
[ 2544.421468][T19786] netlink: 'syz.2.16016': attribute type 10 has an invalid length.
[ 2544.471614][T19786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2544.524405][T19786] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2544.647774][T19794] netlink: 'syz.4.16021': attribute type 29 has an invalid length.
[ 2544.661820][T19794] netlink: 'syz.4.16021': attribute type 29 has an invalid length.
[ 2545.631365][T19823] netlink: 'syz.4.16032': attribute type 2 has an invalid length.
[ 2545.783875][T19827] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16033'.
[ 2546.534421][T19847] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16038'.
[ 2547.200761][T19874] netlink: 'syz.0.16051': attribute type 2 has an invalid length.
[ 2547.232970][T19874] netlink: 'syz.0.16051': attribute type 8 has an invalid length.
[ 2547.250504][T19874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16051'.
[ 2547.890086][T19892] netlink: 'syz.1.16059': attribute type 1 has an invalid length.
[ 2547.911350][T19892] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16059'.
[ 2548.285125][T19910] netlink: 'syz.3.16064': attribute type 5 has an invalid length.
[ 2548.313585][T19910] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16064'.
[ 2548.356606][T19915] netlink: 'syz.3.16064': attribute type 5 has an invalid length.
[ 2548.384577][T19915] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16064'.
[ 2548.483801][T19923] bridge0: port 3(team0) entered disabled state
[ 2548.531067][T19923] device bridge_slave_1 left promiscuous mode
[ 2548.538154][T19923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2548.558223][T19923] device bridge_slave_0 left promiscuous mode
[ 2548.566050][T19923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2548.798929][T19922] netlink: 'syz.1.16067': attribute type 14 has an invalid length.
[ 2548.807482][T19922] netlink: 64283 bytes leftover after parsing attributes in process `syz.1.16067'.
[ 2548.817677][T19925] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16069'.
[ 2549.206978][T19940] netlink: 'syz.1.16074': attribute type 1 has an invalid length.
[ 2549.236583][T19940] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16074'.
[ 2549.587217][T19952] delete_channel: no stack
[ 2549.591947][T19952] delete_channel: no stack
[ 2550.064561][T19967] netlink: 'syz.4.16086': attribute type 17 has an invalid length.
[ 2550.072599][T19967] netlink: 'syz.4.16086': attribute type 16 has an invalid length.
[ 2550.131613][T19967] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16086'.
[ 2550.488322][T19973] netlink: 'syz.2.16089': attribute type 1 has an invalid length.
[ 2550.521464][T19973] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16089'.
[ 2551.242133][T19995] team0: Port device wlan1 added
[ 2551.414634][T20001] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16098'.
[ 2552.322792][T20026] validate_nla: 3 callbacks suppressed
[ 2552.322832][T20026] netlink: 'syz.4.16108': attribute type 1 has an invalid length.
[ 2552.345698][T20026] __nla_validate_parse: 1 callbacks suppressed
[ 2552.345718][T20026] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16108'.
[ 2552.659595][T20043] netlink: 'syz.4.16114': attribute type 17 has an invalid length.
[ 2552.676690][T20043] netlink: 'syz.4.16114': attribute type 16 has an invalid length.
[ 2552.692251][T20043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16114'.
[ 2552.900458][T20047] netlink: 'syz.0.16116': attribute type 19 has an invalid length.
[ 2552.944304][T20047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16116'.
[ 2553.131049][T20063] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16119'.
[ 2553.211330][T20066] netlink: 'syz.4.16121': attribute type 21 has an invalid length.
[ 2553.572474][T20070] netlink: 'syz.4.16123': attribute type 1 has an invalid length.
[ 2553.651526][T20070] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16123'.
[ 2553.794769][T20076] netlink: 'syz.0.16122': attribute type 2 has an invalid length.
[ 2553.834170][T20076] netlink: 'syz.0.16122': attribute type 8 has an invalid length.
[ 2553.842030][T20076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16122'.
[ 2553.856287][T20083] netlink: 'syz.3.16127': attribute type 17 has an invalid length.
[ 2553.865716][T20083] netlink: 'syz.3.16127': attribute type 16 has an invalid length.
[ 2553.873750][T20083] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16127'.
[ 2553.910662][T20087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16129'.
[ 2554.272937][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16132'.
[ 2554.327829][T20094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16131'.
[ 2555.928944][T20138] device syzkaller0 entered promiscuous mode
[ 2556.280226][T20145] bridge0: port 3(netdevsim0) entered blocking state
[ 2556.324262][T20145] bridge0: port 3(netdevsim0) entered disabled state
[ 2556.338024][T20145] device netdevsim0 entered promiscuous mode
[ 2558.534116][T20155] __nla_validate_parse: 5 callbacks suppressed
[ 2558.534137][T20155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16154'.
[ 2558.839867][T20175] validate_nla: 9 callbacks suppressed
[ 2558.839905][T20175] netlink: 'syz.2.16160': attribute type 10 has an invalid length.
[ 2558.964840][T20175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16160'.
[ 2559.019945][T20172] netlink: 'syz.0.16159': attribute type 1 has an invalid length.
[ 2559.034976][T20175] device team0 entered promiscuous mode
[ 2559.041530][T20175] device team_slave_0 entered promiscuous mode
[ 2559.044313][T20172] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16159'.
[ 2559.062165][T20175] device team_slave_1 entered promiscuous mode
[ 2559.108442][T20175] bridge0: port 4(team0) entered blocking state
[ 2559.131526][T20175] bridge0: port 4(team0) entered disabled state
[ 2559.320589][T20175] bridge0: port 4(team0) entered blocking state
[ 2559.328582][T20175] bridge0: port 4(team0) entered forwarding state
[ 2559.531458][T20181] netlink: 'syz.3.16161': attribute type 2 has an invalid length.
[ 2559.574063][T20181] netlink: 'syz.3.16161': attribute type 8 has an invalid length.
[ 2559.581937][T20181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16161'.
[ 2559.999510][T20197] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16169'.
[ 2560.530296][T20205] FAULT_INJECTION: forcing a failure.
[ 2560.530296][T20205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2560.546315][T20205] CPU: 1 PID: 20205 Comm: syz.0.16172 Not tainted syzkaller #0
[ 2560.554435][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2560.565465][T20205] Call Trace:
[ 2560.568754][T20205]  <TASK>
[ 2560.572147][T20205]  dump_stack_lvl+0x188/0x24e
[ 2560.576941][T20205]  ? show_regs_print_info+0x12/0x12
[ 2560.582745][T20205]  ? load_image+0x400/0x400
[ 2560.587303][T20205]  ? __lock_acquire+0x7d10/0x7d10
[ 2560.592324][T20205]  should_fail_ex+0x399/0x4d0
[ 2560.597095][T20205]  _copy_from_user+0x2c/0x170
[ 2560.601795][T20205]  bpf_prog_test_run_skb+0x262/0x12a0
[ 2560.607180][T20205]  ? __fget_files+0x28/0x4b0
[ 2560.611790][T20205]  ? __fget_files+0x28/0x4b0
[ 2560.616386][T20205]  ? __fget_files+0x43d/0x4b0
[ 2560.621154][T20205]  ? cpu_online+0xa0/0xa0
[ 2560.625502][T20205]  bpf_prog_test_run+0x31e/0x390
[ 2560.630440][T20205]  __sys_bpf+0x62b/0x780
[ 2560.634680][T20205]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2560.640057][T20205]  ? lock_chain_count+0x20/0x20
[ 2560.644983][T20205]  __x64_sys_bpf+0x78/0x90
[ 2560.649405][T20205]  do_syscall_64+0x4c/0xa0
[ 2560.653825][T20205]  ? clear_bhb_loop+0x60/0xb0
[ 2560.658518][T20205]  ? clear_bhb_loop+0x60/0xb0
[ 2560.663260][T20205]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2560.669158][T20205] RIP: 0033:0x7f6dd719acb9
[ 2560.673570][T20205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2560.693178][T20205] RSP: 002b:00007f6dd8038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2560.701596][T20205] RAX: ffffffffffffffda RBX: 00007f6dd7415fa0 RCX: 00007f6dd719acb9
[ 2560.709590][T20205] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[ 2560.717557][T20205] RBP: 00007f6dd8038090 R08: 0000000000000000 R09: 0000000000000000
[ 2560.725519][T20205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2560.733580][T20205] R13: 00007f6dd7416038 R14: 00007f6dd7415fa0 R15: 00007ffe62721e08
[ 2560.741578][T20205]  </TASK>
[ 2560.832664][T20211] netlink: 'syz.1.16174': attribute type 13 has an invalid length.
[ 2560.893416][T20211] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.16174'.
[ 2561.083285][T20215] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.16174'.
[ 2561.374719][T20218] delete_channel: no stack
[ 2561.570785][T20224] netlink: 'syz.2.16178': attribute type 2 has an invalid length.
[ 2561.604389][T20224] netlink: 'syz.2.16178': attribute type 8 has an invalid length.
[ 2561.693965][T20224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16178'.
[ 2562.069179][T20237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16184'.
[ 2562.337351][T20240] netlink: 'syz.2.16185': attribute type 1 has an invalid length.
[ 2562.344774][T20245] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16186'.
[ 2562.600415][T20253] netlink: 'syz.2.16192': attribute type 13 has an invalid length.
[ 2563.019308][T20266] debugfs: Directory '.!
 5��7>7H
�' with parent 'ieee80211' already present!
[ 2563.202531][T20271] netlink: 'syz.1.16199': attribute type 10 has an invalid length.
[ 2563.897103][T20283] netlink: 'syz.3.16203': attribute type 1 has an invalid length.
[ 2563.970207][T20283] __nla_validate_parse: 6 callbacks suppressed
[ 2563.970226][T20283] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.16203'.
[ 2564.240824][T20292] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16204'.
[ 2564.742393][T20296] netlink: 'syz.3.16208': attribute type 1 has an invalid length.
[ 2564.773105][T20296] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.16208'.
[ 2565.392772][T20324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16216'.
[ 2565.808581][T20329] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16218'.
[ 2566.160127][T20335] netlink: 'syz.2.16219': attribute type 1 has an invalid length.
[ 2566.173149][T20335] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16219'.
[ 2568.414681][T20350] netlink: 'syz.1.16225': attribute type 10 has an invalid length.
[ 2568.706517][T20365] netlink: 'syz.4.16232': attribute type 1 has an invalid length.
[ 2568.715447][T20365] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16232'.
[ 2568.760651][T20367] netlink: 'syz.1.16229': attribute type 17 has an invalid length.
[ 2568.815226][T20367] netlink: 'syz.1.16229': attribute type 16 has an invalid length.
[ 2568.884248][T20367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16229'.
[ 2569.249928][T20384] netlink: 'syz.1.16236': attribute type 10 has an invalid length.
[ 2569.320750][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2569.414559][T20394] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16239'.
[ 2569.449136][T20384] team0: Port device batadv0 added
[ 2569.497160][T20388] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16238'.
[ 2570.117581][T20408] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16243'.
[ 2570.382426][T20415] netlink: 'syz.2.16246': attribute type 28 has an invalid length.
[ 2570.469195][T20415] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16246'.
[ 2571.339427][T20434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16253'.
[ 2571.360797][T20437] netlink: 'syz.4.16254': attribute type 27 has an invalid length.
[ 2571.368974][T20437] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.16254'.
[ 2571.657438][T20442] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.16255'.
[ 2571.872025][T20451] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.16259'.
[ 2571.927143][T20454] netlink: 'syz.0.16260': attribute type 10 has an invalid length.
[ 2572.007863][T20454] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2572.061376][T20454] team0: Port device batadv0 added
[ 2572.497025][T20468] netlink: 'syz.2.16266': attribute type 10 has an invalid length.
[ 2572.676049][T20468] device wlan1 entered promiscuous mode
[ 2572.710966][T20468] team0: Port device wlan1 added
[ 2572.728096][ T7507] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[ 2572.735859][T20472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16268'.
[ 2572.878669][T19030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2573.157426][T19030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2573.217394][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2573.228229][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2573.236656][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2573.250396][T20489] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16273'.
[ 2573.297503][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2573.306639][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2573.317029][T19030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2573.327677][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2573.420741][T19030] device netdevsim0 left promiscuous mode
[ 2573.433103][T19030] team0: Port device netdevsim0 removed
[ 2573.477451][T20494] netlink: 'syz.1.16274': attribute type 3 has an invalid length.
[ 2573.798825][T19030] device .*! left promiscuous mode
[ 2573.849852][T20488] chnl_net:caif_netlink_parms(): no params data found
[ 2573.950870][T19030] tipc: Left network mode
[ 2574.223936][T20488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2574.264782][T20488] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2574.286675][T20488] device bridge_slave_0 entered promiscuous mode
[ 2574.317730][T20488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2574.332503][T20488] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2574.341965][T20488] device bridge_slave_1 entered promiscuous mode
[ 2574.412744][T20488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2574.436971][T20488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2574.529452][T20488] team0: Port device team_slave_0 added
[ 2574.561117][T20488] team0: Port device team_slave_1 added
[ 2574.621029][T20488] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2574.644211][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2574.714730][T20488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2574.778968][T20488] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2574.805847][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2574.848873][T20488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2575.231165][T20488] device hsr_slave_0 entered promiscuous mode
[ 2575.238677][T20488] device hsr_slave_1 entered promiscuous mode
[ 2575.246966][T20488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2575.255719][T20488] Cannot create hsr debugfs directory
[ 2575.384429][ T4273] Bluetooth: hci1: command 0x0409 tx timeout
[ 2575.984685][T20569] netlink: 'syz.3.16293': attribute type 2 has an invalid length.
[ 2575.992980][T20569] netlink: 'syz.3.16293': attribute type 8 has an invalid length.
[ 2576.044465][T20569] __nla_validate_parse: 1 callbacks suppressed
[ 2576.044511][T20569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16293'.
[ 2576.489235][T20588] device syzkaller0 entered promiscuous mode
[ 2577.466644][ T4273] Bluetooth: hci1: command 0x041b tx timeout
[ 2577.662584][T20629] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16313'.
[ 2579.500671][T20642] FAULT_INJECTION: forcing a failure.
[ 2579.500671][T20642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2579.520066][T20642] CPU: 1 PID: 20642 Comm: syz.2.16318 Not tainted syzkaller #0
[ 2579.527648][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2579.537695][T20642] Call Trace:
[ 2579.540977][T20642]  <TASK>
[ 2579.543895][T20642]  dump_stack_lvl+0x188/0x24e
[ 2579.548576][T20642]  ? show_regs_print_info+0x12/0x12
[ 2579.553778][T20642]  ? load_image+0x400/0x400
[ 2579.558299][T20642]  ? __lock_acquire+0x7d10/0x7d10
[ 2579.563318][T20642]  should_fail_ex+0x399/0x4d0
[ 2579.568027][T20642]  _copy_from_user+0x2c/0x170
[ 2579.572696][T20642]  ___sys_sendmsg+0x1c3/0x360
[ 2579.577363][T20642]  ? __sys_sendmsg+0x290/0x290
[ 2579.582127][T20642]  ? __lock_acquire+0x7d10/0x7d10
[ 2579.587245][T20642]  __se_sys_sendmsg+0x1bb/0x2a0
[ 2579.592087][T20642]  ? __x64_sys_sendmsg+0x80/0x80
[ 2579.597023][T20642]  ? trace_sys_enter+0x22/0x80
[ 2579.601778][T20642]  do_syscall_64+0x4c/0xa0
[ 2579.606199][T20642]  ? clear_bhb_loop+0x60/0xb0
[ 2579.610989][T20642]  ? clear_bhb_loop+0x60/0xb0
[ 2579.615660][T20642]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2579.621545][T20642] RIP: 0033:0x7f9e52d9acb9
[ 2579.625951][T20642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2579.645723][T20642] RSP: 002b:00007f9e53c82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2579.654140][T20642] RAX: ffffffffffffffda RBX: 00007f9e53015fa0 RCX: 00007f9e52d9acb9
[ 2579.662115][T20642] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[ 2579.670077][T20642] RBP: 00007f9e53c82090 R08: 0000000000000000 R09: 0000000000000000
[ 2579.678038][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2579.686018][T20642] R13: 00007f9e53016038 R14: 00007f9e53015fa0 R15: 00007fff2159e3a8
[ 2579.694005][T20642]  </TASK>
[ 2579.697779][ T4273] Bluetooth: hci1: command 0x040f tx timeout
[ 2580.007775][T20644] netlink: 'syz.2.16319': attribute type 17 has an invalid length.
[ 2580.008328][T20629] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2580.015906][T20644] netlink: 'syz.2.16319': attribute type 16 has an invalid length.
[ 2580.015932][T20644] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16319'.
[ 2580.044209][T20629] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2580.053883][T20629] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2580.169370][T20488] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2580.242736][T20488] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2580.284589][T20488] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2580.315750][T20650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16320'.
[ 2580.345424][T20488] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2580.625874][T20660] netlink: 'syz.3.16323': attribute type 39 has an invalid length.
[ 2580.660664][T20660] device veth0_macvtap left promiscuous mode
[ 2580.930437][T20672] netlink: 'syz.1.16325': attribute type 1 has an invalid length.
[ 2580.951732][T20672] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16325'.
[ 2581.335496][T20691] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.16329'.
[ 2581.387604][T20488] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2581.449175][T19030] device hsr_slave_0 left promiscuous mode
[ 2581.479525][T19030] device hsr_slave_1 left promiscuous mode
[ 2581.490448][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2581.509873][T19030] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2581.562210][T19030] device veth1_macvtap left promiscuous mode
[ 2581.569773][T19030] device veth0_macvtap left promiscuous mode
[ 2581.577319][T19030] device veth1_vlan left promiscuous mode
[ 2581.704271][ T4273] Bluetooth: hci1: command 0x0419 tx timeout
[ 2581.895179][ T4273] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[ 2582.456757][T20721] netlink: 'syz.2.16338': attribute type 1 has an invalid length.
[ 2582.472228][T20721] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16338'.
[ 2582.638173][T19030] device team_slave_1 left promiscuous mode
[ 2582.648069][T19030] team0 (unregistering): Port device team_slave_1 removed
[ 2582.695121][T19030] device team_slave_0 left promiscuous mode
[ 2582.702301][T19030] team0 (unregistering): Port device team_slave_0 removed
[ 2582.747986][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2582.797693][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2583.132973][T19030] bond0 (unregistering): Released all slaves
[ 2583.170541][T20691] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 2583.191668][T20488] 8021q: adding VLAN 0 to HW filter on device team0
[ 2583.199674][T20691] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 2583.222865][T20719] netlink: 184 bytes leftover after parsing attributes in process `syz.0.16337'.
[ 2583.232834][T20691] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 2583.249364][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2583.263667][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2583.327251][T20725] netlink: 'syz.2.16339': attribute type 39 has an invalid length.
[ 2583.340159][T20725] device veth0_macvtap left promiscuous mode
[ 2583.494498][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2583.519953][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2583.542850][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2583.550076][ T1748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2583.567920][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2583.584825][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2583.595387][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2583.602511][ T1748] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2583.612629][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2583.621992][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2583.643953][T20734] netlink: 'syz.1.16343': attribute type 5 has an invalid length.
[ 2583.709345][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2583.788911][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2583.841401][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2583.869175][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2583.923848][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2583.955317][T20747] netlink: 'syz.2.16345': attribute type 10 has an invalid length.
[ 2583.963493][T20747] netlink: 55 bytes leftover after parsing attributes in process `syz.2.16345'.
[ 2585.460229][T20780] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16350'.
[ 2585.554565][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2585.579360][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2585.603384][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2585.634435][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2585.678041][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2585.708416][T20749] netlink: 'syz.1.16346': attribute type 10 has an invalid length.
[ 2585.753671][T20749] team0: Device bond0 is already an upper device of the team interface
[ 2585.823331][T20488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2586.108513][T20791] netlink: 'syz.1.16353': attribute type 39 has an invalid length.
[ 2586.201393][T20791] device veth0_macvtap left promiscuous mode
[ 2586.794221][T20805] FAULT_INJECTION: forcing a failure.
[ 2586.794221][T20805] name failslab, interval 1, probability 0, space 0, times 0
[ 2586.858152][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2586.858414][T20805] CPU: 1 PID: 20805 Comm: syz.1.16357 Not tainted syzkaller #0
[ 2586.870534][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2586.872992][T20805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2586.873005][T20805] Call Trace:
[ 2586.873013][T20805]  <TASK>
[ 2586.873021][T20805]  dump_stack_lvl+0x188/0x24e
[ 2586.901308][T20805]  ? show_regs_print_info+0x12/0x12
[ 2586.902257][T20488] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2586.906517][T20805]  ? load_image+0x400/0x400
[ 2586.906544][T20805]  ? __might_sleep+0xd0/0xd0
[ 2586.906560][T20805]  ? __lock_acquire+0x7d10/0x7d10
[ 2586.906585][T20805]  should_fail_ex+0x399/0x4d0
[ 2586.906616][T20805]  should_failslab+0x5/0x20
[ 2586.906640][T20805]  slab_pre_alloc_hook+0x59/0x310
[ 2586.906662][T20805]  ? sk_prot_alloc+0xe7/0x210
[ 2586.906682][T20805]  __kmem_cache_alloc_node+0x4f/0x260
[ 2586.951913][T20805]  ? sk_prot_alloc+0xe7/0x210
[ 2586.956617][T20805]  __kmalloc+0xa0/0x240
[ 2586.960806][T20805]  sk_prot_alloc+0xe7/0x210
[ 2586.965336][T20805]  ? sk_alloc+0x20/0x340
[ 2586.969612][T20805]  sk_alloc+0x36/0x340
[ 2586.973704][T20805]  ? bpf_ctx_init+0x163/0x1a0
[ 2586.978396][T20805]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[ 2586.983972][T20805]  bpf_prog_test_run_skb+0x35e/0x12a0
[ 2586.989369][T20805]  ? __fget_files+0x28/0x4b0
[ 2586.993986][T20805]  ? __fget_files+0x43d/0x4b0
[ 2586.998692][T20805]  ? cpu_online+0xa0/0xa0
[ 2587.003043][T20805]  bpf_prog_test_run+0x31e/0x390
[ 2587.008011][T20805]  __sys_bpf+0x62b/0x780
[ 2587.012303][T20805]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2587.017723][T20805]  ? lock_chain_count+0x20/0x20
[ 2587.022604][T20805]  __x64_sys_bpf+0x78/0x90
[ 2587.027046][T20805]  do_syscall_64+0x4c/0xa0
[ 2587.031482][T20805]  ? clear_bhb_loop+0x60/0xb0
[ 2587.036179][T20805]  ? clear_bhb_loop+0x60/0xb0
[ 2587.040888][T20805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2587.046804][T20805] RIP: 0033:0x7feeed19acb9
[ 2587.051246][T20805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2587.070873][T20805] RSP: 002b:00007feeee07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2587.079315][T20805] RAX: ffffffffffffffda RBX: 00007feeed415fa0 RCX: 00007feeed19acb9
[ 2587.087309][T20805] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[ 2587.095306][T20805] RBP: 00007feeee07d090 R08: 0000000000000000 R09: 0000000000000000
[ 2587.103308][T20805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2587.111311][T20805] R13: 00007feeed416038 R14: 00007feeed415fa0 R15: 00007fff2e05b288
[ 2587.119334][T20805]  </TASK>
[ 2587.132924][T20811] netlink: 'syz.2.16359': attribute type 1 has an invalid length.
[ 2587.144772][T20811] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16359'.
[ 2587.387526][T20819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16362'.
[ 2587.947212][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2587.957847][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2588.019143][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2588.038261][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2588.056910][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2588.074200][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2588.090067][T20488] device veth0_vlan entered promiscuous mode
[ 2588.133710][T20488] device veth1_vlan entered promiscuous mode
[ 2588.227489][T20488] device veth0_macvtap entered promiscuous mode
[ 2588.248546][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2588.268692][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2588.288311][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2588.309551][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2588.322348][T20488] device veth1_macvtap entered promiscuous mode
[ 2588.330382][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2588.339291][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2588.362692][T20847] netlink: 'syz.2.16371': attribute type 10 has an invalid length.
[ 2588.373857][T20847] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16371'.
[ 2588.413461][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2588.448265][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2588.461338][T20488] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2588.483013][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2588.550177][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2588.576848][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2588.593454][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2588.628843][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2588.668397][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2588.705352][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2588.745032][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2588.809560][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2588.822151][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2588.851200][T20488] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2588.883445][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2588.895418][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2588.917546][T20488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2588.934065][T20488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2588.985079][T20488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2589.004105][T20488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2589.260770][T27733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2589.292737][T27733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2589.397966][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2589.463323][T19030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2589.490762][T19030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2589.562874][ T1751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2589.739812][T20872] netlink: 'syz.1.16380': attribute type 29 has an invalid length.
[ 2589.788970][T20872] netlink: 'syz.1.16380': attribute type 29 has an invalid length.
[ 2589.803292][T20873] netlink: 'syz.4.16265': attribute type 2 has an invalid length.
[ 2589.846260][T20873] device .*! entered promiscuous mode
[ 2589.927047][T20879] netlink: 'syz.0.16381': attribute type 10 has an invalid length.
[ 2590.033608][T20879] netlink: 55 bytes leftover after parsing attributes in process `syz.0.16381'.
[ 2590.357198][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.363778][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 2592.524781][T20909] netlink: 'syz.2.16386': attribute type 29 has an invalid length.
[ 2592.603660][T20901] netlink: 'syz.4.16388': attribute type 10 has an invalid length.
[ 2592.616422][T20901] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2592.624071][T20901] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2592.666304][T20901] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2592.673676][T20901] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2592.681230][T20901] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2592.688447][T20901] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2592.727779][T20901] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2592.802095][T20916] netlink: 'syz.3.16392': attribute type 29 has an invalid length.
[ 2592.844464][T20919] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.16393'.
[ 2592.888629][T20916] netlink: 'syz.3.16392': attribute type 29 has an invalid length.
[ 2593.006694][T20924] netlink: 'syz.4.16395': attribute type 10 has an invalid length.
[ 2593.070867][T20924] team0: Port device netdevsim0 added
[ 2593.110301][T20925] team0: Port device netdevsim0 removed
[ 2593.133124][T20925] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2593.447510][T20938] validate_nla: 1 callbacks suppressed
[ 2593.447533][T20938] netlink: 'syz.0.16398': attribute type 1 has an invalid length.
[ 2593.476135][T20938] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16398'.
[ 2593.779831][T20951] ��
: port 1(veth0_to_bridge) entered blocking state
[ 2593.806952][T20951] ��
: port 1(veth0_to_bridge) entered disabled state
[ 2593.831465][T20953] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16408'.
[ 2593.841842][T20951] device veth0_to_bridge entered promiscuous mode
[ 2594.011602][T20969] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16413'.
[ 2594.133044][T20971] device bridge_slave_1 left promiscuous mode
[ 2594.147672][T20971] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2594.170718][T20973] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16414'.
[ 2594.292676][T20978] netlink: 'syz.1.16417': attribute type 1 has an invalid length.
[ 2594.301660][T20978] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16417'.
[ 2594.325375][T20971] device bridge_slave_0 left promiscuous mode
[ 2594.332301][T20971] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2594.412544][T20971] bond0: (slave bridge0): Releasing backup interface
[ 2594.467968][T20975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16416'.
[ 2594.524223][T20986] netlink: 'syz.1.16419': attribute type 10 has an invalid length.
[ 2595.361803][T21015] netlink: 'syz.4.16430': attribute type 1 has an invalid length.
[ 2595.374632][T21015] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16430'.
[ 2596.594324][T21040] Q�6��\b��Y�4��: renamed from lo
[ 2596.885778][T21054] netlink: 'syz.3.16442': attribute type 10 has an invalid length.
[ 2596.912608][T21054] team0: Port device netdevsim0 added
[ 2596.949757][T21060] netlink: 'syz.3.16442': attribute type 10 has an invalid length.
[ 2597.057240][T21060] team0: Port device netdevsim0 removed
[ 2597.075325][T21060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2597.190828][T21065] netlink: 'syz.1.16444': attribute type 1 has an invalid length.
[ 2597.200365][T21065] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16444'.
[ 2597.554496][ T7507] Bluetooth: hci2: command 0x0406 tx timeout
[ 2598.506274][T21119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16461'.
[ 2598.542146][T21117] netlink: 'syz.1.16462': attribute type 1 has an invalid length.
[ 2598.561346][T21117] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16462'.
[ 2598.565089][T21122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16463'.
[ 2598.643291][T21126] FAULT_INJECTION: forcing a failure.
[ 2598.643291][T21126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2598.693119][T21126] CPU: 0 PID: 21126 Comm: syz.2.16465 Not tainted syzkaller #0
[ 2598.700713][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2598.710789][T21126] Call Trace:
[ 2598.714081][T21126]  <TASK>
[ 2598.717028][T21126]  dump_stack_lvl+0x188/0x24e
[ 2598.721732][T21126]  ? show_regs_print_info+0x12/0x12
[ 2598.726962][T21126]  ? load_image+0x400/0x400
[ 2598.731499][T21126]  ? __lock_acquire+0x7d10/0x7d10
[ 2598.736557][T21126]  should_fail_ex+0x399/0x4d0
[ 2598.741270][T21126]  _copy_from_user+0x2c/0x170
[ 2598.745976][T21126]  iovec_from_user+0x143/0x360
[ 2598.750767][T21126]  __import_iovec+0x6d/0x500
[ 2598.755389][T21126]  import_iovec+0x6f/0xa0
[ 2598.759747][T21126]  ___sys_sendmsg+0x252/0x360
[ 2598.764453][T21126]  ? __sys_sendmsg+0x290/0x290
[ 2598.769261][T21126]  ? __lock_acquire+0x7d10/0x7d10
[ 2598.774352][T21126]  __se_sys_sendmsg+0x1bb/0x2a0
[ 2598.779228][T21126]  ? __x64_sys_sendmsg+0x80/0x80
[ 2598.784204][T21126]  ? trace_sys_enter+0x22/0x80
[ 2598.788999][T21126]  do_syscall_64+0x4c/0xa0
[ 2598.793433][T21126]  ? clear_bhb_loop+0x60/0xb0
[ 2598.798135][T21126]  ? clear_bhb_loop+0x60/0xb0
[ 2598.802832][T21126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2598.808832][T21126] RIP: 0033:0x7f9e52d9acb9
[ 2598.813266][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2598.832912][T21126] RSP: 002b:00007f9e53c82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2598.841336][T21126] RAX: ffffffffffffffda RBX: 00007f9e53015fa0 RCX: 00007f9e52d9acb9
[ 2598.849313][T21126] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[ 2598.857290][T21126] RBP: 00007f9e53c82090 R08: 0000000000000000 R09: 0000000000000000
[ 2598.865362][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2598.873359][T21126] R13: 00007f9e53016038 R14: 00007f9e53015fa0 R15: 00007fff2159e3a8
[ 2598.881382][T21126]  </TASK>
[ 2599.356647][T21139] netlink: 'syz.4.16469': attribute type 17 has an invalid length.
[ 2599.384252][T21139] netlink: 'syz.4.16469': attribute type 16 has an invalid length.
[ 2599.426444][T21139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16469'.
[ 2599.532257][T21145] netlink: 'syz.3.16472': attribute type 17 has an invalid length.
[ 2599.607863][T21145] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16472'.
[ 2600.093000][T21148] IPv6: pim6reg1: Disabled Multicast RS
[ 2600.099717][T21151] netlink: 'syz.1.16471': attribute type 10 has an invalid length.
[ 2600.505463][T21168] netlink: 'syz.1.16478': attribute type 1 has an invalid length.
[ 2600.574859][T21168] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16478'.
[ 2600.841026][T21176] netlink: 'syz.4.16480': attribute type 29 has an invalid length.
[ 2600.851167][T21176] netlink: 'syz.4.16480': attribute type 29 has an invalid length.
[ 2601.507865][T21191] netlink: 184 bytes leftover after parsing attributes in process `syz.0.16485'.
[ 2602.112667][T21210] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.16491'.
[ 2602.177421][T21212] netlink: 'syz.3.16492': attribute type 1 has an invalid length.
[ 2602.222874][T21212] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.16492'.
[ 2602.317498][T21222] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 2602.605727][T21228] netlink: 'syz.1.16496': attribute type 5 has an invalid length.
[ 2603.603603][T21256] netlink: 'syz.2.16507': attribute type 1 has an invalid length.
[ 2603.683013][T21256] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16507'.
[ 2603.979140][T21260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16508'.
[ 2604.009962][T21260] device team0 entered promiscuous mode
[ 2604.022542][T21260] device team_slave_0 entered promiscuous mode
[ 2604.043104][T21260] device team_slave_1 entered promiscuous mode
[ 2604.053694][T21260] device wlan1 entered promiscuous mode
[ 2604.067422][T21260] device batadv0 entered promiscuous mode
[ 2604.098533][T21266] netlink: 'syz.3.16509': attribute type 39 has an invalid length.
[ 2604.377329][T21276] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.16513'.
[ 2604.993922][T21295] netlink: 'syz.1.16521': attribute type 29 has an invalid length.
[ 2605.039343][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16523'.
[ 2605.094821][T21295] netlink: 'syz.1.16521': attribute type 29 has an invalid length.
[ 2605.512507][T21317] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16527'.
[ 2605.574814][T21307] delete_channel: no stack
[ 2605.948075][T21327] netlink: 'syz.0.16533': attribute type 3 has an invalid length.
[ 2605.993549][T21327] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16533'.
[ 2606.006983][T21329] netlink: 'syz.2.16532': attribute type 39 has an invalid length.
[ 2606.252583][T21341] netlink: 'syz.4.16537': attribute type 10 has an invalid length.
[ 2606.263385][T21341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16537'.
[ 2606.279718][T21341] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2606.421248][T21351] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16540'.
[ 2606.787941][T21356] netlink: 'syz.2.16541': attribute type 29 has an invalid length.
[ 2606.801773][T21356] netlink: 'syz.2.16541': attribute type 29 has an invalid length.
[ 2606.850603][T21360] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.16543'.
[ 2607.133067][T21364] netlink: 'syz.1.16544': attribute type 1 has an invalid length.
[ 2607.142308][T21364] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16544'.
[ 2608.762470][T21419] __nla_validate_parse: 4 callbacks suppressed
[ 2608.762490][T21419] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16565'.
[ 2608.918801][T21424] validate_nla: 6 callbacks suppressed
[ 2608.918841][T21424] netlink: 'syz.4.16568': attribute type 1 has an invalid length.
[ 2608.937413][T21424] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16568'.
[ 2609.047833][T21428] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16569'.
[ 2609.294894][T21436] netlink: 'syz.4.16573': attribute type 13 has an invalid length.
[ 2609.362968][T21441] netlink: 'syz.3.16574': attribute type 3 has an invalid length.
[ 2609.374561][T21441] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16574'.
[ 2609.711645][T21452] netlink: 'syz.0.16578': attribute type 21 has an invalid length.
[ 2609.860785][T21458] netlink: 'syz.4.16582': attribute type 10 has an invalid length.
[ 2610.026779][T21462] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.16584'.
[ 2610.377484][T21472] netlink: 'syz.0.16590': attribute type 29 has an invalid length.
[ 2610.443331][T21472] netlink: 'syz.0.16590': attribute type 29 has an invalid length.
[ 2610.522471][T21475] netlink: 'syz.2.16589': attribute type 13 has an invalid length.
[ 2610.542731][T21483] netlink: 'syz.4.16594': attribute type 15 has an invalid length.
[ 2610.561756][T21483] netlink: 'syz.4.16594': attribute type 7 has an invalid length.
[ 2610.818879][T21493] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16599'.
[ 2611.112313][T21507] cgroup: fork rejected by pids controller in /syz4
[ 2611.646991][T21527] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16612'.
[ 2611.878895][ T1746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2611.911123][T21533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16615'.
[ 2612.098776][ T1746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.252582][ T1746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.699219][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2612.708330][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2612.717623][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2612.726086][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2612.735709][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2612.743120][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2614.824338][ T4273] Bluetooth: hci1: command 0x0409 tx timeout
[ 2615.295344][ T1746] bond0: (slave netdevsim0): Releasing backup interface
[ 2615.309146][ T1746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2615.716727][T21560] validate_nla: 1 callbacks suppressed
[ 2615.716770][T21560] netlink: 'syz.2.16624': attribute type 1 has an invalid length.
[ 2615.761809][T21560] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16624'.
[ 2615.982626][ T1746] device .*! left promiscuous mode
[ 2616.076273][T21549] chnl_net:caif_netlink_parms(): no params data found
[ 2616.758699][T21549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2616.779959][T21549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2616.820649][T21549] device bridge_slave_0 entered promiscuous mode
[ 2616.906723][ T4273] Bluetooth: hci1: command 0x041b tx timeout
[ 2616.915495][T21549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2616.922608][T21549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2616.931884][T21549] device bridge_slave_1 entered promiscuous mode
[ 2616.955589][T21549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2616.971689][T21549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2617.166892][T21549] team0: Port device team_slave_0 added
[ 2617.387132][T21549] team0: Port device team_slave_1 added
[ 2617.415794][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 2617.529577][T21610] netlink: 'syz.0.16635': attribute type 1 has an invalid length.
[ 2617.539467][T21549] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2617.565012][T21549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2617.591497][T21610] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16635'.
[ 2617.614182][T21549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2617.666761][T21549] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2617.673937][T21549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2617.738168][T21549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2618.087699][T21549] device hsr_slave_0 entered promiscuous mode
[ 2618.102725][T21549] device hsr_slave_1 entered promiscuous mode
[ 2618.111386][T21549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2618.155059][T21549] Cannot create hsr debugfs directory
[ 2618.723160][T21641] netlink: 'syz.3.16645': attribute type 29 has an invalid length.
[ 2618.758539][T21643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16647'.
[ 2618.922769][T21641] netlink: 'syz.3.16645': attribute type 29 has an invalid length.
[ 2618.941747][T21643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16647'.
[ 2618.985709][ T4273] Bluetooth: hci1: command 0x040f tx timeout
[ 2619.019278][ T1746] device hsr_slave_0 left promiscuous mode
[ 2619.047658][ T1746] device hsr_slave_1 left promiscuous mode
[ 2619.070916][ T1746] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2619.096925][ T1746] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2619.120597][ T1746] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2619.149709][ T1746] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2619.301180][ T1746] device veth1_macvtap left promiscuous mode
[ 2619.344544][ T1746] device veth0_macvtap left promiscuous mode
[ 2619.353064][T21659] netlink: 'syz.0.16650': attribute type 1 has an invalid length.
[ 2619.369644][T21659] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16650'.
[ 2619.381147][ T1746] device veth1_vlan left promiscuous mode
[ 2620.508256][ T1746] team0 (unregistering): Port device team_slave_1 removed
[ 2620.551279][ T1746] team0 (unregistering): Port device team_slave_0 removed
[ 2620.592542][ T1746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2620.661048][ T1746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2621.027958][ T1746] bond0 (unregistering): Released all slaves
[ 2621.067888][T21664] tipc: Started in network mode
[ 2621.072792][T21664] tipc: Node identity 9215a268, cluster identity 4711
[ 2621.074336][ T7507] Bluetooth: hci1: command 0x0419 tx timeout
[ 2621.101430][T21664] tipc: Node number set to 2450891368
[ 2621.404512][T21700] netlink: 'syz.0.16656': attribute type 5 has an invalid length.
[ 2622.451304][T21549] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2622.516233][T21549] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2622.580331][T21549] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2622.622205][T21549] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2622.653567][T21741] IPv6: Can't replace route, no match found
[ 2623.144464][ T7507] Bluetooth: hci0: command 0x0406 tx timeout
[ 2623.252885][T21766] netlink: 'syz.0.16672': attribute type 29 has an invalid length.
[ 2623.326949][T21766] netlink: 'syz.0.16672': attribute type 29 has an invalid length.
[ 2623.421020][T21549] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2623.459752][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2623.532974][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2623.559372][T21549] 8021q: adding VLAN 0 to HW filter on device team0
[ 2623.597658][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2623.625548][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2623.674366][ T1752] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2623.681505][ T1752] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2623.694646][T21770] delete_channel: no stack
[ 2623.723037][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2623.748764][T21782] FAULT_INJECTION: forcing a failure.
[ 2623.748764][T21782] name failslab, interval 1, probability 0, space 0, times 0
[ 2623.772473][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2623.780754][T21782] CPU: 0 PID: 21782 Comm: syz.3.16677 Not tainted syzkaller #0
[ 2623.784955][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2623.788302][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2623.788316][T21782] Call Trace:
[ 2623.788323][T21782]  <TASK>
[ 2623.788331][T21782]  dump_stack_lvl+0x188/0x24e
[ 2623.801239][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2623.806328][T21782]  ? show_regs_print_info+0x12/0x12
[ 2623.806359][T21782]  ? load_image+0x400/0x400
[ 2623.806377][T21782]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 2623.809730][ T1748] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2623.812562][T21782]  should_fail_ex+0x399/0x4d0
[ 2623.851946][T21782]  should_failslab+0x5/0x20
[ 2623.856490][T21782]  slab_pre_alloc_hook+0x59/0x310
[ 2623.861549][T21782]  kmem_cache_alloc+0x56/0x2f0
[ 2623.866334][T21782]  ? __build_skb+0x2a/0x3c0
[ 2623.870861][T21782]  __build_skb+0x2a/0x3c0
[ 2623.875216][T21782]  build_skb+0x1e/0x230
[ 2623.879386][T21782]  bpf_prog_test_run_skb+0x37e/0x12a0
[ 2623.884773][T21782]  ? __fget_files+0x28/0x4b0
[ 2623.889368][T21782]  ? __fget_files+0x43d/0x4b0
[ 2623.894078][T21782]  ? cpu_online+0xa0/0xa0
[ 2623.898404][T21782]  bpf_prog_test_run+0x31e/0x390
[ 2623.903428][T21782]  __sys_bpf+0x62b/0x780
[ 2623.907669][T21782]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2623.913049][T21782]  ? lock_chain_count+0x20/0x20
[ 2623.917902][T21782]  __x64_sys_bpf+0x78/0x90
[ 2623.922312][T21782]  do_syscall_64+0x4c/0xa0
[ 2623.926728][T21782]  ? clear_bhb_loop+0x60/0xb0
[ 2623.931399][T21782]  ? clear_bhb_loop+0x60/0xb0
[ 2623.936065][T21782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2623.941951][T21782] RIP: 0033:0x7fec4239acb9
[ 2623.946357][T21782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2623.965952][T21782] RSP: 002b:00007fec43172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2623.974359][T21782] RAX: ffffffffffffffda RBX: 00007fec42615fa0 RCX: 00007fec4239acb9
[ 2623.982326][T21782] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[ 2623.990288][T21782] RBP: 00007fec43172090 R08: 0000000000000000 R09: 0000000000000000
[ 2623.998262][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2624.006228][T21782] R13: 00007fec42616038 R14: 00007fec42615fa0 R15: 00007ffcb6a1eb18
[ 2624.014206][T21782]  </TASK>
[ 2624.054662][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2624.076312][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2624.123644][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2624.143460][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2624.160257][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2624.182219][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2624.214321][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2624.225841][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2624.236030][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2624.262189][T21549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2624.305891][T21549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2624.326313][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2624.362062][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2624.903052][T21812] netlink: 'syz.0.16684': attribute type 10 has an invalid length.
[ 2624.954460][T21812] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16684'.
[ 2625.356523][T21827] netlink: 'syz.3.16689': attribute type 10 has an invalid length.
[ 2625.419796][T21824] netlink: 'syz.0.16688': attribute type 1 has an invalid length.
[ 2625.435725][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2625.441703][T21824] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16688'.
[ 2625.453710][ T1748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2625.455967][T21549] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2625.784837][T21842] netlink: 'syz.1.16693': attribute type 29 has an invalid length.
[ 2625.810377][T21842] netlink: 'syz.1.16693': attribute type 29 has an invalid length.
[ 2626.479376][T21866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16699'.
[ 2626.784557][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2626.825245][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2626.885144][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2626.893721][T19030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2626.914694][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2626.956265][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2626.981927][T21549] device veth0_vlan entered promiscuous mode
[ 2627.006716][T21549] device veth1_vlan entered promiscuous mode
[ 2627.138376][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2627.155547][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2627.176278][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2627.205725][ T1746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2627.234987][T21549] device veth0_macvtap entered promiscuous mode
[ 2627.263549][T21549] device veth1_macvtap entered promiscuous mode
[ 2627.354629][T21898] netlink: 'syz.1.16707': attribute type 10 has an invalid length.
[ 2627.389528][T21889] netlink: 'syz.3.16705': attribute type 1 has an invalid length.
[ 2627.395677][T21898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16707'.
[ 2627.408250][T21889] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.16705'.
[ 2627.475386][T21898] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 2627.525872][T21549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2627.569760][T21549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2627.607983][T21549] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2627.626952][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2627.655135][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2627.676977][T21906] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 2627.684909][T21906] #PF: supervisor instruction fetch in kernel mode
[ 2627.691519][T21906] #PF: error_code(0x0010) - not-present page
[ 2627.697517][T21906] PGD 76f83067 P4D 76f83067 PUD 0 
[ 2627.702151][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2627.702657][T21906] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 2627.715921][T21906] CPU: 1 PID: 21906 Comm: syz.3.16709 Not tainted syzkaller #0
[ 2627.723483][T21906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2627.730802][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2627.733534][T21906] RIP: 0010:0x0
[ 2627.745082][T21906] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 2627.752471][T21906] RSP: 0018:ffffc900046e7458 EFLAGS: 00010246
[ 2627.758564][T21906] RAX: 1ffffffff162bb77 RBX: 1ffff920008dce9c RCX: 0000000000000001
[ 2627.766557][T21906] RDX: ffffc900046e7500 RSI: 0000000000000001 RDI: ffff8880578b4000
[ 2627.774549][T21906] RBP: ffffc900046e7570 R08: ffff8880578b403f R09: 1ffff1100af16807
[ 2627.777359][T21549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2627.782527][T21906] R10: dffffc0000000000 R11: ffffed100af16808 R12: ffffe8ffffd70a08
[ 2627.782543][T21906] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff8880578b4000
[ 2627.782555][T21906] FS:  00007fec431726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 2627.782572][T21906] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2627.824361][T21906] CR2: ffffffffffffffd6 CR3: 000000001d2b2000 CR4: 00000000003506e0
[ 2627.832355][T21906] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[ 2627.840323][T21906] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 2627.848303][T21906] Call Trace:
[ 2627.851581][T21906]  <TASK>
[ 2627.854519][T21906]  bond_xdp_xmit+0x31e/0x550
[ 2627.859504][T21906]  ? bond_xdp_xmit+0x94/0x550
[ 2627.864187][T21906]  ? bond_xdp+0x850/0x850
[ 2627.868517][T21906]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 2627.874382][T21906]  bq_xmit_all+0xd3f/0x11b0
[ 2627.879194][T21906]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 2627.885181][T21906]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2627.891328][T21906]  ? __dev_flush+0x1b0/0x1b0
[ 2627.896707][T21906]  ? lockdep_hardirqs_on+0x94/0x140
[ 2627.901923][T21906]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2627.908072][T21906]  ? bq_enqueue+0xc6/0x3d0
[ 2627.912511][T21906]  ? __sanitizer_cov_trace_pc+0x58/0x60
[ 2627.918049][T21906]  ? bq_enqueue+0x2ee/0x3d0
[ 2627.922549][T21906]  ? rcu_is_watching+0x11/0xa0
[ 2627.927317][T21906]  ? trace_xdp_redirect+0xb3/0x2b0
[ 2627.932421][T21906]  __dev_flush+0xbf/0x1b0
[ 2627.936748][T21906]  xdp_do_flush+0xa/0x20
[ 2627.940984][T21906]  bpf_test_run_xdp_live+0x1545/0x1a90
[ 2627.946439][T21906]  ? 0xffffffffa0004440
[ 2627.950586][T21906]  ? bpf_test_run_xdp_live+0x518/0x1a90
[ 2627.956130][T21906]  ? xdp_convert_md_to_buff+0x330/0x330
[ 2627.961676][T21906]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 2627.967907][T21906]  ? copy_user_enhanced_fast_string+0xa/0x40
[ 2627.973887][T21906]  ? bpf_test_init+0x119/0x140
[ 2627.978669][T21906]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 2627.984137][T21906]  bpf_prog_test_run_xdp+0x736/0xf10
[ 2627.989426][T21906]  ? dev_put+0x80/0x80
[ 2627.993492][T21906]  ? dev_put+0x80/0x80
[ 2627.997552][T21906]  bpf_prog_test_run+0x31e/0x390
[ 2628.002492][T21906]  __sys_bpf+0x62b/0x780
[ 2628.006744][T21906]  ? bpf_link_show_fdinfo+0x380/0x380
[ 2628.012124][T21906]  ? lock_chain_count+0x20/0x20
[ 2628.016981][T21906]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 2628.022963][T21906]  __x64_sys_bpf+0x78/0x90
[ 2628.027375][T21906]  do_syscall_64+0x4c/0xa0
[ 2628.031790][T21906]  ? clear_bhb_loop+0x60/0xb0
[ 2628.036464][T21906]  ? clear_bhb_loop+0x60/0xb0
[ 2628.041164][T21906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2628.047064][T21906] RIP: 0033:0x7fec4239acb9
[ 2628.051471][T21906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2628.071077][T21906] RSP: 002b:00007fec43172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2628.079485][T21906] RAX: ffffffffffffffda RBX: 00007fec42615fa0 RCX: 00007fec4239acb9
[ 2628.087453][T21906] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[ 2628.095414][T21906] RBP: 00007fec42408bf7 R08: 0000000000000000 R09: 0000000000000000
[ 2628.103391][T21906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2628.111454][T21906] R13: 00007fec42616038 R14: 00007fec42615fa0 R15: 00007ffcb6a1eb18
[ 2628.119427][T21906]  </TASK>
[ 2628.122448][T21906] Modules linked in:
[ 2628.126338][T21906] CR2: 0000000000000000
[ 2628.130492][T21906] ---[ end trace 0000000000000000 ]---
[ 2628.135933][T21906] RIP: 0010:0x0
[ 2628.139393][T21906] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 2628.146744][T21906] RSP: 0018:ffffc900046e7458 EFLAGS: 00010246
[ 2628.152892][T21906] RAX: 1ffffffff162bb77 RBX: 1ffff920008dce9c RCX: 0000000000000001
[ 2628.160943][T21906] RDX: ffffc900046e7500 RSI: 0000000000000001 RDI: ffff8880578b4000
[ 2628.168992][T21906] RBP: ffffc900046e7570 R08: ffff8880578b403f R09: 1ffff1100af16807
[ 2628.176955][T21906] R10: dffffc0000000000 R11: ffffed100af16808 R12: ffffe8ffffd70a08
[ 2628.184918][T21906] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff8880578b4000
[ 2628.192879][T21906] FS:  00007fec431726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 2628.201803][T21906] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2628.208387][T21906] CR2: ffffffffffffffd6 CR3: 000000001d2b2000 CR4: 00000000003506e0
[ 2628.216527][T21906] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[ 2628.224489][T21906] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 2628.232973][T21906] Kernel panic - not syncing: Fatal exception in interrupt
[ 2628.240512][T21906] Kernel Offset: disabled
[ 2628.244822][T21906] Rebooting in 86400 seconds..