last executing test programs:

3.93032905s ago: executing program 0 (id=6518):
close(0x3)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = socket$kcm(0x1e, 0x5, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x100000, 0x6, 0xfffffffe, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000035c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20008044)
close(r2)
r6 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12)
syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/ipc\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

3.885073261s ago: executing program 2 (id=6521):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000800)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae7b, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @tail_call, @alu={0x4, 0x1, 0x4, 0x2, 0x0, 0x20, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

3.784715094s ago: executing program 4 (id=6522):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_clone(0x6801400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) (fail_nth: 3)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.59954408s ago: executing program 2 (id=6523):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)

3.200256722s ago: executing program 4 (id=6525):
r0 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xf7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\n\x00')
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={{0x3, @bcast}, [@default, @netrom, @bcast, @default, @null, @rose, @remote, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1, &(0x7f0000000380)=""/73, 0x49}, 0x20002000)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$kcm(r2, 0x0, 0xc)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x1ff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/236, 0x34, 0xec, 0x1}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118002000fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f0e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a6", 0x46}], 0x2, 0x0, 0x0, 0x7400}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'})
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x0, 0x0}, 0x10)

3.171538333s ago: executing program 2 (id=6527):
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xce, 0xfc, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, r0, 0x2, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xd, 0x78, 0x81, 0x7, 0x0, 0x3, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x200, 0x8, 0x8, 0x27, 0x3, 0x7, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, &(0x7f0000001cc0))
close(0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r3}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040))
r4 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="2000000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)

3.019310508s ago: executing program 0 (id=6529):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r1 = socket$kcm(0x2, 0x200000000000000, 0x106)
setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1})

3.019150938s ago: executing program 2 (id=6530):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0xd}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)

2.816270674s ago: executing program 0 (id=6533):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

2.815571084s ago: executing program 2 (id=6534):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="01d62b4a3d72dde3457ac39beae24a9ed84ebc033d010a9e844b05216e33d7d40ffa0208", 0x24}, {0x0}, {&(0x7f0000000140)="e2c8540990206fe210852bb83ba8e93a38adc6dcaf2a149851d8764aca883a399da50ea002a7f1f9b614e890fced6d1f368d20eda7d48ae5f5d862aaa40c935c5ced8c098eb37e4aedae2998574ec5b4538ee3275362ef73a2d93a29ab647d06d133d4eeb228f80764f99fee8f99cdc7c427264e90d2e5c706d09707cd49458ba86bf2cb73fd8855bb685b8dc5096bad1d83e760a72aaea5123f61dec58922694d07fb94471b8247e39f733d1388e796c9d5763de2f9e009e5ceeaf86c457fcc61a5f06b3e0b1e7911374456e9c4b3e7a0", 0xd1}], 0x3}, 0x4010)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0xd, 0x4, 0x80000000, 0x3, 0x840, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

2.709600337s ago: executing program 4 (id=6536):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000800)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae7b, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @tail_call, @alu={0x4, 0x1, 0x4, 0x2, 0x0, 0x20, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

2.669085399s ago: executing program 0 (id=6538):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="47e703e2405a270c70b3389fc4c6eee66a1c2db5d659c60000230642ab30c03a0b16be3100c39a7196169afdb0f4ae8c4b79e835fb3139140d3416f61f9445730a0d4fc17e4ebe8d7524c1c67f8efa40204744cd8ba95ed947fe8299c3826bf2cb27fd35d02114c20420707df90849a23bfc79595796129c3506f1310294fc67796e7ecb00b7ae53d1eb25ddbf590a7679e131a6a35a733d80145d1878149dde0d530686a3ef8b6362d9bbbc0e3d7c6ee8407f845b322635a200110d49836a003bfcd5db991f", 0xc6}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081)
recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000500)=""/56, 0x38}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/96, 0x60}], 0x6, &(0x7f0000000700)=""/18, 0x12}, 0x2000)

2.553646842s ago: executing program 1 (id=6539):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) (fail_nth: 4)

2.072814407s ago: executing program 0 (id=6540):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x600)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net_cls'}, {0x0, 'cpuacct'}, {0x2d, 'perf_event'}, {0x0, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'blkio'}]}, 0x34)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x79]}}, 0x0, 0x42}, 0x20)
recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

2.070775087s ago: executing program 4 (id=6541):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.944507061s ago: executing program 1 (id=6542):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="47e703e2405a270c70b3389fc4c6eee66a1c2db5d659c60000230642ab30c03a0b16be3100c39a7196169afdb0f4ae8c4b79e835fb3139140d3416f61f9445730a0d4fc17e4ebe8d7524c1c67f8efa40204744cd8ba95ed947fe8299c3826bf2cb27fd35d02114c20420707df90849a23bfc79595796129c3506f1310294fc67796e7ecb00b7ae53d1eb25ddbf590a7679e131a6a35a733d80145d1878149dde0d530686a3ef8b6362d9bbbc0e3d7c6ee8407f845b322635a200110d49836a003bfcd5db991f", 0xc6}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081)

1.936332251s ago: executing program 1 (id=6543):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x841}, 0x84)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x4040)
socketpair(0x1e, 0x2, 0x8, &(0x7f0000000080))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCSIFHWADDR(r2, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @local})
bpf$LINK_DETACH(0x22, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0100"})
syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f00000000c0)='./file0\x00')

984.69384ms ago: executing program 3 (id=6546):
r0 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xf7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\n\x00')
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={{0x3, @bcast}, [@default, @netrom, @bcast, @default, @null, @rose, @remote, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1, &(0x7f0000000380)=""/73, 0x49}, 0x20002000)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$kcm(r2, 0x0, 0xc)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x1ff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/236, 0x34, 0xec, 0x1}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118002000fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f0e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a6", 0x46}], 0x2, 0x0, 0x0, 0x7400}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'})
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x0, 0x0}, 0x10)

809.335556ms ago: executing program 4 (id=6547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000020c0)={r0, 0x58, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002180)={r0, 0x58, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$inet(r1, &(0x7f0000002300)={&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000540)="4fd33857b0ee030b9f51852cef299895ff6716e8402fbe7d2d3584d1056a9d4d83eedf48e072f1724ff6e1131f16f0401743c02acb56e39da21e89a92e79d8a1b92f89db0ca0e520e9632fa267a547204b8ecdf47b1c104eedcfc45dde68cfa8ee7796a4e0184cb7fecdf3254432bd6cf8b766a46b282d10b39e147d538f4facb387d2d09d46d8b0bdde0c7effb4d5b09439358fee99cdea4e2991c2cec9c511018392f6af98dcc678c11ff79d1391d0d5", 0xb1}, {&(0x7f0000000640)="97b744fa394c09505f544166e3d7a345fc517309951a7667eeaf81f55ddecd3f2cb32d0171601ca7ca89e18ef71e3f1476324839462010a7cbf2803707246b437d6b6ef0039db39616584860b27f2f43d9e30f191f", 0x55}, {&(0x7f00000008c0)="8cf1c5e278b1d7c3275abcce6259d5a516ef967bc77db3704d51d587a0e182a55cad07df15b81092e1c68c147457cd276e4cee780fb7aa81a8763122a213f4a46fdf2e3cb06139525f30496cf4eddc5ab4e37c7783f616c5b1852e6bd8076304f8319a0cc9223d804ce45c5bc04a37e78f2b425a2540df23127a246ccd3ec6ee80a4607a8e34d74b270d749b2430c31c9ce78c1c300a031d045fad2cf5621de548130a07be2302b2ff54f5c6af51d59e2326a8757551ccaf9b236e4a6e58bba71600a769237ce179f1d3c09dbd9ba14d570016694813697d831a60e792a1d59ebd6007de39f997699b3d63fcff68cf533a3e719f430a6c1a9e", 0xf9}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="1fe8dc724682cfb11056fb255e9b28f7399f63dc1e2d87fca52ca80b2201d7279049346e9bad68c1f154beec3594735b6f77f8321fdb87fe0a8fce16783ffdac01bca465c0470ef457c272cab01af27b17e77715830a76bd3d727cb8ad80e16a3543dc8a52f89c2b41c7e88ae639aded9e69a55626ce5312f2c29ec58b29606ef4e161ae086096c01ebf106740148ddc01d5aa7e5a7198db5612311ff35617f58e0ecd11f4a3f4a11afa22ade5b5b1a58125607e1a66a64a86d74c0bfc0f2e19e02ceafb535da054d29b85f5350b5b9b367d54c308", 0xd5}, {&(0x7f0000001dc0)="e5c44d2713ea4624a191fd39ce3c5ad74363e9e67734df9b5fa9f97bac684b18770794fdad1561b054b6664e97d24cd498de14eb65d4792e37a2f987c92d971b04fac542ed8b64655307362f605a0bfca6a8e34693d42398be4c661c447c4e0ee394318c02150120b323c5f225fac8d85dafe84127ef737788cae944e5c7faa8980315ad5731e351b864b35b5a9622a2f4ddf7fc519cab95da8af03fa4ef9be367e8229c2a41cb6bf77586cfb87f7ac3b9aab4ed1bc73a9fa984d24de9e73897db9f4558037df0bdb7a3fe3969df010d9cc2a692643cebb7ecbc5af90ca00cfcbc3175b9df94c1", 0xe7}, {&(0x7f0000001ec0)="7b7d352c66b0385360797bb638f084e41483165b", 0x14}, {&(0x7f0000001f00)="2404ad82352cdce5bbd043eb9cc58d6c83581e916527f6cf33c1129dcaf559ce178ddd8789b2e94fd8ed0f332a1aa210ee115518e4ee35814fb2fbe8dfa2d86cbb341556c54ff07b90f00afbcb56a1b9ad154e5b7458c1cd414725efa23d7b100f86f9f57307ad04574c2f0b72a7bc9aac44c7e2b9abbaf597c2c25c2a355e493e46058a77c4925f653d30c7b4790bfe932973497f291df11c40d289e293c7ce9ce919fd29c33cdf0ef98ced0db18d38", 0xb0}], 0x8, &(0x7f00000021c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xd2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0x1}, @cipso={0x86, 0x6a, 0x3, [{0x2, 0xc, "99f953ca7a15614a7980"}, {0x0, 0x4, 'gW'}, {0x6, 0x11, "c32fa9f2dd446a00705ce65994a8ff"}, {0x4, 0x5, "5d5ed0"}, {0x6, 0xa, "e57d24274ba02c94"}, {0x6, 0x4, 'F+'}, {0x2, 0xa, "b2d76d33be4f5da9"}, {0x0, 0xb, "3ac9e81c9f8ffc0646"}, {0x0, 0xd, "6ffbc0275748b06c588a13"}, {0x1, 0xe, "ccf0bedb81abeb08eb9d8c8c"}]}]}}}], 0x100}, 0x4000854)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f", 0x0, 0x0, 0x0}, 0x38)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061119400"], 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x11, 0x200000000000003, 0x300)
sendmsg$sock(r4, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0xffff, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="ce22", 0x2}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x8010)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x80c0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x101000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})

759.698797ms ago: executing program 3 (id=6548):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x10040)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

741.173548ms ago: executing program 1 (id=6549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

738.464938ms ago: executing program 2 (id=6550):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0900004cd0030648d6caae5bb98222f97b16a058cf00000002f90900000100000000004006", 0x25}], 0x1}, 0x4000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e71284"], 0xffdd)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x7, 0x9, 0x10, 0x1, 0xfffff9e5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xc}, 0x50)

604.368962ms ago: executing program 0 (id=6551):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b878847000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
close(r4)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x6, r3, 0xb)
r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$inet(r7, 0x0, 0x0)
recvmsg$unix(r6, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r8, 0x0, 0x4000080)
recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x1182c, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x0, 0x5aa2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<5\x00\x00\x00\x00')
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

595.375692ms ago: executing program 3 (id=6552):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x6, &(0x7f0000000040), 0x4)

569.054173ms ago: executing program 1 (id=6553):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="47e703e2405a270c70b3389fc4c6eee66a1c2db5d659c60000230642ab30c03a0b16be3100c39a7196169afdb0f4ae8c4b79e835fb3139140d3416f61f9445730a0d4fc17e4ebe8d7524c1c67f8efa40204744cd8ba95ed947fe8299c3826bf2cb27fd35d02114c20420707df90849a23bfc79595796129c3506f1310294fc67796e7ecb00b7ae53d1eb25ddbf590a7679e131a6a35a733d80145d1878149dde0d530686a3ef8b6362d9bbbc0e3d7c6ee8407f845b322635a200110d49836a003bfcd5db991f", 0xc6}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081)

433.274587ms ago: executing program 1 (id=6554):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r0, 0x0, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000002, 0x0, @perf_bp={0x0, 0x8}, 0x100040, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

424.187748ms ago: executing program 3 (id=6555):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)

327.16993ms ago: executing program 3 (id=6556):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0xd}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

183.253345ms ago: executing program 3 (id=6557):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 4 (id=6558):
r0 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xf7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\n\x00')
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000140)=@ax25={{0x3, @bcast}, [@default, @netrom, @bcast, @default, @null, @rose, @remote, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1, &(0x7f0000000380)=""/73, 0x49}, 0x20002000)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$kcm(r2, 0x0, 0xc)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x1ff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/236, 0x34, 0xec, 0x1}, 0x28)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118002000fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f0e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b593", 0x69}], 0x2, 0x0, 0x0, 0x7400}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'})
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

679256][T20080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.789109][T20080] device hsr_slave_0 entered promiscuous mode
[  554.803378][T20080] device hsr_slave_1 entered promiscuous mode
[  554.828080][T20080] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  554.852148][T20080] Cannot create hsr debugfs directory
[  554.943595][T20147] netlink: 'syz.1.5924': attribute type 29 has an invalid length.
[  554.973656][T20148] netlink: 'syz.1.5924': attribute type 29 has an invalid length.
[  555.000538][T20147] netlink: 'syz.1.5924': attribute type 29 has an invalid length.
[  555.145079][T20080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.232667][T20080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.311698][T20080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.449407][T20080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.758315][T20178] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5935'.
[  556.293273][T20080] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  556.347978][T20178] delete_channel: no stack
[  556.363731][T20080] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  556.383088][T20080] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  556.457765][T20190] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5941'.
[  556.484816][T20080] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  556.611660][ T4233] Bluetooth: hci2: command 0x041b tx timeout
[  556.642470][T20200] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5945'.
[  556.714465][T20202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5947'.
[  556.868000][T20080] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.909532][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  556.931956][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  556.954075][T20080] 8021q: adding VLAN 0 to HW filter on device team0
[  557.010098][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  557.036727][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  557.052222][T14077] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.059417][T14077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.085177][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  557.141994][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  557.163102][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  557.187492][T14077] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.194673][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.341671][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  557.363195][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  557.433861][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  557.453604][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  557.472999][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  557.492569][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  557.512200][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  557.521147][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  557.542547][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  557.566082][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  557.583865][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  557.642900][T20080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  558.124052][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  558.139789][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  558.163992][T20080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  558.182800][T20245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5959'.
[  558.323620][T20252] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5961'.
[  558.684104][ T4233] Bluetooth: hci2: command 0x040f tx timeout
[  558.784400][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  558.816259][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  558.914961][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  558.938168][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  558.987019][T20080] device veth0_vlan entered promiscuous mode
[  559.013469][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  559.040080][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  559.079631][T20080] device veth1_vlan entered promiscuous mode
[  559.118716][T14108] device team0 left promiscuous mode
[  559.154153][T14108] device team_slave_1 left promiscuous mode
[  559.160672][T14108] ¥: port 1(team0) entered disabled state
[  559.226243][T14108] device hsr_slave_0 left promiscuous mode
[  559.258552][T14108] device hsr_slave_1 left promiscuous mode
[  559.282589][T14108] bridge0: port 3(dummy0) entered disabled state
[  559.302737][T14108] device bridge_slave_1 left promiscuous mode
[  559.308954][T14108] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.378342][T14108] device bridge_slave_0 left promiscuous mode
[  559.391032][T14108] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.430011][T14108] device veth0_vlan left promiscuous mode
[  560.761505][T18317] Bluetooth: hci2: command 0x0419 tx timeout
[  562.014060][T20278] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5969'.
[  562.089837][T14108] team0 (unregistering): Port device team_slave_1 removed
[  562.222068][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5966'.
[  562.269612][T20279] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5969'.
[  562.283006][T20080] device veth0_macvtap entered promiscuous mode
[  562.327822][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  562.341033][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  562.366173][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  562.389816][T20080] device veth1_macvtap entered promiscuous mode
[  562.470659][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.483081][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.493385][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.505017][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.515009][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.526352][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.540865][T20080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.561021][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.602197][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.620414][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.630991][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.647591][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.658470][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.674298][T20080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.698980][T20080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.716027][T20080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.727610][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  562.735801][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  562.745629][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  562.759620][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  562.782304][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  562.802968][T20080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.812479][T20080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.821218][T20080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.837861][T20080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.850574][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  562.856933][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.002066][T18122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.010095][T18122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.065797][T20298] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5976'.
[  563.076532][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  563.112972][T20297] netlink: 'syz.0.5974': attribute type 21 has an invalid length.
[  563.131490][T20298] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  563.151528][T20298] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  563.174015][T18122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.190971][T18122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.223329][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  563.312499][T20304] netlink: 'syz.0.5978': attribute type 1 has an invalid length.
[  563.356489][T20304] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.5978'.
[  563.371284][T20308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5895'.
[  563.466585][T20304] netlink: 'syz.0.5978': attribute type 10 has an invalid length.
[  563.516650][T20304] team0: Port device wlan1 added
[  564.066038][T20331] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5988'.
[  564.139721][T20301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.576388][T20346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5993'.
[  564.726293][T20340] device syzkaller0 entered promiscuous mode
[  564.879467][T20352] FAULT_INJECTION: forcing a failure.
[  564.879467][T20352] name failslab, interval 1, probability 0, space 0, times 0
[  564.896691][T20352] CPU: 1 PID: 20352 Comm: syz.0.5996 Not tainted syzkaller #0
[  564.904202][T20352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  564.914298][T20352] Call Trace:
[  564.917600][T20352]  <TASK>
[  564.920548][T20352]  dump_stack_lvl+0x188/0x250
[  564.925276][T20352]  ? show_regs_print_info+0x20/0x20
[  564.930511][T20352]  ? load_image+0x400/0x400
[  564.935059][T20352]  should_fail+0x38c/0x4c0
[  564.939571][T20352]  should_failslab+0x5/0x20
[  564.944104][T20352]  slab_pre_alloc_hook+0x51/0xc0
[  564.949073][T20352]  ? __build_skb+0x26/0x2e0
[  564.953608][T20352]  kmem_cache_alloc+0x3d/0x290
[  564.958406][T20352]  __build_skb+0x26/0x2e0
[  564.962772][T20352]  build_skb+0x1e/0x170
[  564.966964][T20352]  __tun_build_skb+0x32/0x240
[  564.971675][T20352]  tun_get_user+0x19f7/0x3a70
[  564.976403][T20352]  ? tun_ring_recv+0xc40/0xc40
[  564.981211][T20352]  ? rcu_lock_release+0x5/0x20
[  564.986009][T20352]  ? __lock_acquire+0x7d10/0x7d10
[  564.991090][T20352]  tun_chr_write_iter+0x112/0x1e0
[  564.996164][T20352]  vfs_write+0x745/0xd60
[  565.000448][T20352]  ? file_end_write+0x250/0x250
[  565.005333][T20352]  ? __fget_files+0x40f/0x480
[  565.010049][T20352]  ? __fdget_pos+0x1e2/0x370
[  565.014662][T20352]  ? ksys_write+0x71/0x260
[  565.019108][T20352]  ksys_write+0x152/0x260
[  565.023470][T20352]  ? __ia32_sys_read+0x80/0x80
[  565.028267][T20352]  ? lockdep_hardirqs_on+0x94/0x140
[  565.033502][T20352]  do_syscall_64+0x4c/0xa0
[  565.037952][T20352]  ? clear_bhb_loop+0x30/0x80
[  565.042665][T20352]  ? clear_bhb_loop+0x30/0x80
[  565.047431][T20352]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  565.053354][T20352] RIP: 0033:0x7fea7863ce59
[  565.057800][T20352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.077532][T20352] RSP: 002b:00007fea76896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  565.085971][T20352] RAX: ffffffffffffffda RBX: 00007fea788b5fa0 RCX: 00007fea7863ce59
[  565.093973][T20352] RDX: 0000000000000015 RSI: 0000200000000000 RDI: 00000000000000c8
[  565.101981][T20352] RBP: 00007fea76896090 R08: 0000000000000000 R09: 0000000000000000
[  565.109980][T20352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.117998][T20352] R13: 00007fea788b6038 R14: 00007fea788b5fa0 R15: 00007ffc8a346278
[  565.126027][T20352]  </TASK>
[  565.180968][T20358] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5998'.
[  565.645324][T20373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6005'.
[  566.019698][T12249] bridge0: port 3(syz_tun) entered disabled state
[  566.087538][T12249] device syz_tun left promiscuous mode
[  566.101522][T12249] bridge0: port 3(syz_tun) entered disabled state
[  566.128182][T20387] netlink: 'syz.2.6010': attribute type 3 has an invalid length.
[  566.205040][T20390] netlink: 'syz.2.6010': attribute type 3 has an invalid length.
[  566.584223][T20384] chnl_net:caif_netlink_parms(): no params data found
[  566.819273][T20384] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.841586][T20384] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.858867][T20384] device bridge_slave_0 entered promiscuous mode
[  566.901195][T20384] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.941579][T20384] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.953825][T20384] device bridge_slave_1 entered promiscuous mode
[  567.049272][T20384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.094064][T20384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.176857][T20384] team0: Port device team_slave_0 added
[  567.192174][T20384] team0: Port device team_slave_1 added
[  567.284471][T20384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.297606][T20419] FAULT_INJECTION: forcing a failure.
[  567.297606][T20419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.331436][T20419] CPU: 1 PID: 20419 Comm: syz.0.6021 Not tainted syzkaller #0
[  567.338962][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  567.349048][T20419] Call Trace:
[  567.352360][T20419]  <TASK>
[  567.355314][T20419]  dump_stack_lvl+0x188/0x250
[  567.360026][T20419]  ? show_regs_print_info+0x20/0x20
[  567.365251][T20419]  ? load_image+0x400/0x400
[  567.369794][T20419]  ? __lock_acquire+0x7d10/0x7d10
[  567.374848][T20419]  ? unix_ioctl+0x25d/0x660
[  567.379379][T20419]  should_fail+0x38c/0x4c0
[  567.383829][T20419]  _copy_from_user+0x2e/0x170
[  567.388573][T20419]  sock_do_ioctl+0x18c/0x320
[  567.393198][T20419]  ? sock_show_fdinfo+0xb0/0xb0
[  567.398093][T20419]  sock_ioctl+0x4d2/0x710
[  567.402471][T20419]  ? sock_poll+0x410/0x410
[  567.406940][T20419]  ? bpf_lsm_file_ioctl+0x5/0x10
[  567.411917][T20419]  ? security_file_ioctl+0x7c/0xa0
[  567.417067][T20419]  ? sock_poll+0x410/0x410
[  567.421509][T20419]  __se_sys_ioctl+0xfa/0x170
[  567.426132][T20419]  do_syscall_64+0x4c/0xa0
[  567.430582][T20419]  ? clear_bhb_loop+0x30/0x80
[  567.435305][T20419]  ? clear_bhb_loop+0x30/0x80
[  567.440019][T20419]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  567.445946][T20419] RIP: 0033:0x7fea7863ce59
[  567.450736][T20419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.470393][T20419] RSP: 002b:00007fea76875028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  567.478862][T20419] RAX: ffffffffffffffda RBX: 00007fea788b6090 RCX: 00007fea7863ce59
[  567.486865][T20419] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000018
[  567.494872][T20419] RBP: 00007fea76875090 R08: 0000000000000000 R09: 0000000000000000
[  567.502892][T20419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.510901][T20419] R13: 00007fea788b6128 R14: 00007fea788b6090 R15: 00007ffc8a346278
[  567.518917][T20419]  </TASK>
[  567.551649][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.621534][T20384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.669141][T20384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.694045][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.739445][T20424] __nla_validate_parse: 2 callbacks suppressed
[  567.739762][T20424] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6024'.
[  567.788811][T20384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.911013][T20384] device hsr_slave_0 entered promiscuous mode
[  567.937943][T20384] device hsr_slave_1 entered promiscuous mode
[  567.945220][T20384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  567.954052][T20384] Cannot create hsr debugfs directory
[  568.064850][T20426] FAULT_INJECTION: forcing a failure.
[  568.064850][T20426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.078419][T20426] CPU: 1 PID: 20426 Comm: syz.2.6025 Not tainted syzkaller #0
[  568.085930][T20426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  568.096021][T20426] Call Trace:
[  568.099324][T20426]  <TASK>
[  568.102276][T20426]  dump_stack_lvl+0x188/0x250
[  568.106986][T20426]  ? show_regs_print_info+0x20/0x20
[  568.112415][T20426]  ? load_image+0x400/0x400
[  568.116955][T20426]  ? __lock_acquire+0x7d10/0x7d10
[  568.122010][T20426]  should_fail+0x38c/0x4c0
[  568.126472][T20426]  _copy_from_user+0x2e/0x170
[  568.131169][T20426]  __copy_msghdr_from_user+0xc9/0x630
[  568.136563][T20426]  ? verify_lock_unused+0x140/0x140
[  568.141837][T20426]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  568.147157][T20426]  ___sys_sendmsg+0x19a/0x2e0
[  568.151860][T20426]  ? __sys_sendmsg+0x2a0/0x2a0
[  568.156652][T20426]  ? vfs_write+0x8b2/0xd60
[  568.161105][T20426]  __se_sys_sendmsg+0x1af/0x290
[  568.165978][T20426]  ? __x64_sys_sendmsg+0x80/0x80
[  568.170931][T20426]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  568.176943][T20426]  ? lockdep_hardirqs_on+0x94/0x140
[  568.182195][T20426]  do_syscall_64+0x4c/0xa0
[  568.186688][T20426]  ? clear_bhb_loop+0x30/0x80
[  568.191389][T20426]  ? clear_bhb_loop+0x30/0x80
[  568.196095][T20426]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  568.202003][T20426] RIP: 0033:0x7f4cc8e14e59
[  568.206437][T20426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.226059][T20426] RSP: 002b:00007f4cc706e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.234509][T20426] RAX: ffffffffffffffda RBX: 00007f4cc908dfa0 RCX: 00007f4cc8e14e59
[  568.242497][T20426] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000004
[  568.250481][T20426] RBP: 00007f4cc706e090 R08: 0000000000000000 R09: 0000000000000000
[  568.258465][T20426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.266447][T20426] R13: 00007f4cc908e038 R14: 00007f4cc908dfa0 R15: 00007ffcb4d6a128
[  568.274456][T20426]  </TASK>
[  568.278725][T16894] Bluetooth: hci0: command 0x0409 tx timeout
[  568.388695][T20433] netlink: 'syz.2.6028': attribute type 29 has an invalid length.
[  568.419239][T20433] netlink: 'syz.2.6028': attribute type 29 has an invalid length.
[  568.494103][T20384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.539239][T20433] netlink: 'syz.2.6028': attribute type 29 has an invalid length.
[  568.550038][T20437] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.6029'.
[  568.559501][T20435] netlink: 'syz.2.6028': attribute type 29 has an invalid length.
[  568.620502][T20384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.644718][T20433] netlink: 'syz.2.6028': attribute type 29 has an invalid length.
[  568.719845][T20384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.884698][T20384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.063633][T20457] netlink: 'syz.0.6036': attribute type 21 has an invalid length.
[  569.063669][T20459] FAULT_INJECTION: forcing a failure.
[  569.063669][T20459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.131943][T20459] CPU: 1 PID: 20459 Comm: syz.2.6038 Not tainted syzkaller #0
[  569.139469][T20459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  569.149561][T20459] Call Trace:
[  569.152870][T20459]  <TASK>
[  569.155831][T20459]  dump_stack_lvl+0x188/0x250
[  569.160546][T20459]  ? show_regs_print_info+0x20/0x20
[  569.165797][T20459]  ? load_image+0x400/0x400
[  569.170337][T20459]  ? __lock_acquire+0x7d10/0x7d10
[  569.175398][T20459]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  569.181242][T20459]  should_fail+0x38c/0x4c0
[  569.185702][T20459]  _copy_from_user+0x2e/0x170
[  569.190423][T20459]  __copy_msghdr_from_user+0xc9/0x630
[  569.195844][T20459]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  569.201611][T20459]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  569.206956][T20459]  ___sys_sendmsg+0x19a/0x2e0
[  569.211675][T20459]  ? __sys_sendmsg+0x2a0/0x2a0
[  569.216490][T20459]  ? trace_event_raw_event_lock+0x270/0x270
[  569.222432][T20459]  ? vfs_write+0x8b2/0xd60
[  569.223806][T20384] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  569.226941][T20459]  __se_sys_sendmsg+0x1af/0x290
[  569.238440][T20459]  ? __x64_sys_sendmsg+0x80/0x80
[  569.243429][T20459]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  569.249465][T20459]  ? lockdep_hardirqs_on+0x94/0x140
[  569.254710][T20459]  do_syscall_64+0x4c/0xa0
[  569.259160][T20459]  ? clear_bhb_loop+0x30/0x80
[  569.263876][T20459]  ? clear_bhb_loop+0x30/0x80
[  569.268615][T20459]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  569.274548][T20459] RIP: 0033:0x7f4cc8e14e59
[  569.278997][T20459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.298668][T20459] RSP: 002b:00007f4cc706e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  569.307121][T20459] RAX: ffffffffffffffda RBX: 00007f4cc908dfa0 RCX: 00007f4cc8e14e59
[  569.315138][T20459] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  569.323146][T20459] RBP: 00007f4cc706e090 R08: 0000000000000000 R09: 0000000000000000
[  569.331143][T20459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.339148][T20459] R13: 00007f4cc908e038 R14: 00007f4cc908dfa0 R15: 00007ffcb4d6a128
[  569.347167][T20459]  </TASK>
[  569.354064][T20384] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  569.400374][T20465] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6040'.
[  569.412015][T20384] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  569.451770][T20384] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  569.656455][T20475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6045'.
[  569.709915][T20478] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6046'.
[  569.722086][T20384] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.748106][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  569.772331][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  569.833811][T20384] 8021q: adding VLAN 0 to HW filter on device team0
[  569.878032][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  569.920804][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  569.938875][T18130] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.946076][T18130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.011304][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  570.022679][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  570.042635][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  570.062442][T18130] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.069708][T18130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.128529][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  570.146570][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  570.232379][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  570.302840][T20504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  570.306640][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  570.364988][ T4234] Bluetooth: hci0: command 0x041b tx timeout
[  570.464657][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  570.512090][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  570.533020][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  570.721531][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  570.730251][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  570.742581][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  570.751238][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  570.762576][T20384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  570.942590][T20528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6061'.
[  571.235174][T20545] FAULT_INJECTION: forcing a failure.
[  571.235174][T20545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  571.249506][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.257822][T18122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  571.284438][T20545] CPU: 0 PID: 20545 Comm: syz.0.6071 Not tainted syzkaller #0
[  571.291977][T20545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  571.292844][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.302061][T20545] Call Trace:
[  571.302076][T20545]  <TASK>
[  571.302087][T20545]  dump_stack_lvl+0x188/0x250
[  571.302124][T20545]  ? show_regs_print_info+0x20/0x20
[  571.302150][T20545]  ? load_image+0x400/0x400
[  571.302182][T20545]  ? __lock_acquire+0x7d10/0x7d10
[  571.302215][T20545]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  571.302264][T20545]  should_fail+0x38c/0x4c0
[  571.302308][T20545]  _copy_from_user+0x2e/0x170
[  571.350605][T20545]  ___sys_recvmsg+0x173/0x5c0
[  571.355329][T20545]  ? __sys_recvmsg+0x280/0x280
[  571.360133][T20545]  ? __lock_acquire+0x7d10/0x7d10
[  571.365264][T20545]  __x64_sys_recvmsg+0x1f9/0x2c0
[  571.370242][T20545]  ? ___sys_recvmsg+0x5c0/0x5c0
[  571.375138][T20545]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  571.381174][T20545]  ? lockdep_hardirqs_on+0x94/0x140
[  571.386414][T20545]  do_syscall_64+0x4c/0xa0
[  571.390854][T20545]  ? clear_bhb_loop+0x30/0x80
[  571.395548][T20545]  ? clear_bhb_loop+0x30/0x80
[  571.400251][T20545]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  571.406168][T20545] RIP: 0033:0x7fea7863ce59
[  571.410647][T20545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.430299][T20545] RSP: 002b:00007fea76896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  571.438748][T20545] RAX: ffffffffffffffda RBX: 00007fea788b5fa0 RCX: 00007fea7863ce59
[  571.446749][T20545] RDX: 0000000000000061 RSI: 0000200000000100 RDI: 0000000000000004
[  571.454847][T20545] RBP: 00007fea76896090 R08: 0000000000000000 R09: 0000000000000000
[  571.462844][T20545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.470835][T20545] R13: 00007fea788b6038 R14: 00007fea788b5fa0 R15: 00007ffc8a346278
[  571.478862][T20545]  </TASK>
[  571.574410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  571.589426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  571.656010][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  571.669300][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  571.729540][T20384] device veth0_vlan entered promiscuous mode
[  571.755569][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  571.780948][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  571.806146][T20384] device veth1_vlan entered promiscuous mode
[  571.906396][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  571.927055][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  571.963414][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  572.002996][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  572.065887][T20384] device veth0_macvtap entered promiscuous mode
[  572.145325][T20384] device veth1_macvtap entered promiscuous mode
[  572.298165][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.336950][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.372891][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.414556][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.443980][ T4234] Bluetooth: hci0: command 0x040f tx timeout
[  572.487198][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.508295][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.539846][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.572059][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.624399][T20384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.659306][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  572.678398][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  572.722001][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  572.759526][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  572.788417][T20567] netlink: 'syz.3.6079': attribute type 25 has an invalid length.
[  572.806816][T20567] netlink: 'syz.3.6079': attribute type 9 has an invalid length.
[  572.831827][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.870845][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.891101][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.913617][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.948954][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.959572][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.976810][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.009113][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.027151][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.039602][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.060442][T20384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.090806][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  573.130045][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  573.167578][T20384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.186093][T20384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.201329][T20384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.222936][T20384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.418465][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6085'.
[  573.611884][T18126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.619775][T18126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.687453][T20598] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6091'.
[  573.693706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  573.731255][T14077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.762426][T14077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.804027][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  574.522263][T16894] Bluetooth: hci0: command 0x0419 tx timeout
[  575.486601][T20625] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6104'.
[  575.515155][T20627] FAULT_INJECTION: forcing a failure.
[  575.515155][T20627] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  575.564257][T20627] CPU: 0 PID: 20627 Comm: syz.1.6103 Not tainted syzkaller #0
[  575.572672][T20627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  575.582765][T20627] Call Trace:
[  575.586076][T20627]  <TASK>
[  575.589039][T20627]  dump_stack_lvl+0x188/0x250
[  575.593763][T20627]  ? show_regs_print_info+0x20/0x20
[  575.599010][T20627]  ? load_image+0x400/0x400
[  575.603578][T20627]  ? __lock_acquire+0x7d10/0x7d10
[  575.608655][T20627]  should_fail+0x38c/0x4c0
[  575.613130][T20627]  _copy_from_user+0x2e/0x170
[  575.617858][T20627]  iovec_from_user+0x142/0x370
[  575.622692][T20627]  __import_iovec+0x70/0x490
[  575.627338][T20627]  ? perf_tp_event+0xa92/0xbf0
[  575.632148][T20627]  import_iovec+0x6f/0xa0
[  575.636518][T20627]  ___sys_sendmsg+0x1fd/0x2e0
[  575.641281][T20627]  ? __sys_sendmsg+0x2a0/0x2a0
[  575.646103][T20627]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  575.652313][T20627]  __se_sys_sendmsg+0x1af/0x290
[  575.657201][T20627]  ? __x64_sys_sendmsg+0x80/0x80
[  575.662188][T20627]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  575.668203][T20627]  ? lockdep_hardirqs_on+0x94/0x140
[  575.673419][T20627]  do_syscall_64+0x4c/0xa0
[  575.677846][T20627]  ? clear_bhb_loop+0x30/0x80
[  575.682562][T20627]  ? clear_bhb_loop+0x30/0x80
[  575.687272][T20627]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  575.693190][T20627] RIP: 0033:0x7fd6b3af7e59
[  575.697639][T20627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.717283][T20627] RSP: 002b:00007fd6b1d51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  575.725729][T20627] RAX: ffffffffffffffda RBX: 00007fd6b3d70fa0 RCX: 00007fd6b3af7e59
[  575.733721][T20627] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000005
[  575.741707][T20627] RBP: 00007fd6b1d51090 R08: 0000000000000000 R09: 0000000000000000
[  575.749725][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.757709][T20627] R13: 00007fd6b3d71038 R14: 00007fd6b3d70fa0 R15: 00007ffd6e729b98
[  575.765712][T20627]  </TASK>
[  576.021676][T20638] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.6108'.
[  576.043892][T20638] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.6108'.
[  576.179493][T20633] chnl_net:caif_netlink_parms(): no params data found
[  576.289413][T20633] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.311184][T20633] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.321530][T20633] device bridge_slave_0 entered promiscuous mode
[  576.331090][T20633] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.349915][T20633] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.368458][T20633] device bridge_slave_1 entered promiscuous mode
[  576.425384][T20633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.438333][T20633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.495434][T20633] team0: Port device team_slave_0 added
[  576.504320][T20633] team0: Port device team_slave_1 added
[  576.528762][T20633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.536209][T20633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.566112][T20633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.581127][T20633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.589367][T20633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.616461][T20633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.730775][T20633] device hsr_slave_0 entered promiscuous mode
[  576.740501][T20633] device hsr_slave_1 entered promiscuous mode
[  576.747839][T20633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  576.756198][T20633] Cannot create hsr debugfs directory
[  576.795537][T20655] FAULT_INJECTION: forcing a failure.
[  576.795537][T20655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  576.819647][T20656] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6111'.
[  576.825454][T18126] tipc: Subscription rejected, illegal request
[  576.856792][T20655] CPU: 1 PID: 20655 Comm: syz.4.6113 Not tainted syzkaller #0
[  576.864327][T20655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  576.874505][T20655] Call Trace:
[  576.877808][T20655]  <TASK>
[  576.880763][T20655]  dump_stack_lvl+0x188/0x250
[  576.885482][T20655]  ? show_regs_print_info+0x20/0x20
[  576.890723][T20655]  ? load_image+0x400/0x400
[  576.895261][T20655]  ? __lock_acquire+0x7d10/0x7d10
[  576.900316][T20655]  ? lockdep_hardirqs_on+0x94/0x140
[  576.905547][T20655]  should_fail+0x38c/0x4c0
[  576.910009][T20655]  _copy_from_user+0x2e/0x170
[  576.914719][T20655]  __sys_bpf+0x26d/0x6f0
[  576.918999][T20655]  ? bpf_link_show_fdinfo+0x380/0x380
[  576.924432][T20655]  ? vtime_user_exit+0x2c8/0x3e0
[  576.929398][T20655]  __x64_sys_bpf+0x78/0x90
[  576.933840][T20655]  do_syscall_64+0x4c/0xa0
[  576.938272][T20655]  ? clear_bhb_loop+0x30/0x80
[  576.942967][T20655]  ? clear_bhb_loop+0x30/0x80
[  576.947666][T20655]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  576.953581][T20655] RIP: 0033:0x7fcc6498ce59
[  576.958009][T20655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.977736][T20655] RSP: 002b:00007fcc62be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  576.986179][T20655] RAX: ffffffffffffffda RBX: 00007fcc64c05fa0 RCX: 00007fcc6498ce59
[  576.994186][T20655] RDX: 000000000000000c RSI: 0000200000002b80 RDI: 000000000000000a
[  577.002181][T20655] RBP: 00007fcc62be6090 R08: 0000000000000000 R09: 0000000000000000
[  577.010178][T20655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.018166][T20655] R13: 00007fcc64c06038 R14: 00007fcc64c05fa0 R15: 00007fff4f5387e8
[  577.026170][T20655]  </TASK>
[  577.080376][T14077] tipc: Subscription rejected, illegal request
[  577.194420][T20633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.235712][T20664] netlink: 'syz.1.6117': attribute type 4 has an invalid length.
[  577.252723][T20665] netlink: 'syz.1.6117': attribute type 4 has an invalid length.
[  577.259013][T20669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6116'.
[  577.323125][T20633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.340393][T20672] device syzkaller0 entered promiscuous mode
[  577.412254][T20633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.729623][T20633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.835143][T20685] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.6124'.
[  577.858618][T20685] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.6124'.
[  577.879827][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6124'.
[  577.900954][T20687] netlink: 'syz.3.6124': attribute type 19 has an invalid length.
[  577.961799][ T4200] Bluetooth: hci3: command 0x0409 tx timeout
[  578.392219][T20633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  578.516527][T20633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  579.256386][T20696] device syzkaller0 entered promiscuous mode
[  579.267808][T20633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  579.366143][T20633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  579.527341][T20706] device lo entered promiscuous mode
[  579.562272][T20706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  579.696499][T20633] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.753555][T20713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6134'.
[  579.758492][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  579.781664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  579.792816][T20633] 8021q: adding VLAN 0 to HW filter on device team0
[  579.819980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  579.843039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  579.856157][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.863400][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.882014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  579.923180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  579.934793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  579.943644][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.950739][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.981148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  580.016282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  580.036725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  580.051609][ T4200] Bluetooth: hci3: command 0x041b tx timeout
[  580.084948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  580.102733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  580.140427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  580.164994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  580.180013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  580.199799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  580.237075][T20633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.250615][T20633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  580.265023][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  580.280482][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  580.397042][T20730] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.6141'.
[  580.575953][T20740] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  580.717931][T20747] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6144'.
[  580.736545][T20744] device syzkaller0 entered promiscuous mode
[  580.752505][T20747] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  580.789949][T20747] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  580.831514][T20739] delete_channel: no stack
[  581.298819][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  581.317485][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  581.334037][T20633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.380126][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  581.396832][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  581.470183][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  581.486494][T20752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6148'.
[  581.492948][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  581.538095][T20633] device veth0_vlan entered promiscuous mode
[  581.558617][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  581.579733][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  581.650073][T20633] device veth1_vlan entered promiscuous mode
[  581.730881][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  581.740604][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  581.754320][T20633] device veth0_macvtap entered promiscuous mode
[  581.782210][T20633] device veth1_macvtap entered promiscuous mode
[  581.861912][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.894031][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.911669][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.922395][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.932732][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.944220][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.955562][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.967509][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.978177][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.989052][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.010608][T20633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.021148][T20770] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6154'.
[  582.032784][T20768] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6154'.
[  582.045775][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  582.055599][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  582.065642][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  582.074965][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  582.088067][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.099429][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.109933][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.158164][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.168230][ T4200] Bluetooth: hci3: command 0x040f tx timeout
[  582.181133][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.217607][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.239475][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.253132][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.270015][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.282105][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.293343][T20633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.304861][T20633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.317061][T20633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.396243][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  582.407751][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  582.420436][T20633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.430309][T20633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.439812][T20633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.450433][T20633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.588216][T18126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.609725][T18126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.628846][T18130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  582.644064][T18130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.653273][T18130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.661535][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  582.848971][T20786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6159'.
[  583.270159][T20809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6164'.
[  583.460229][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.649776][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.917688][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.988682][T20795] chnl_net:caif_netlink_parms(): no params data found
[  584.036124][T20827] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6173'.
[  584.047901][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.105032][T20832] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6174'.
[  584.115396][T20831] IPv6: Can't replace route, no match found
[  584.131834][T20832] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  584.201818][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[  584.217157][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.281328][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.400612][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.437411][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.467041][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.496862][T20795] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.516764][T20795] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.555097][T20795] device bridge_slave_0 entered promiscuous mode
[  584.610065][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.630918][T20795] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.637174][T20854] FAULT_INJECTION: forcing a failure.
[  584.637174][T20854] name failslab, interval 1, probability 0, space 0, times 0
[  584.646043][T20795] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.674390][T20795] device bridge_slave_1 entered promiscuous mode
[  584.703462][T20854] CPU: 1 PID: 20854 Comm: syz.0.6181 Not tainted syzkaller #0
[  584.710988][T20854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  584.719063][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.721074][T20854] Call Trace:
[  584.721085][T20854]  <TASK>
[  584.721094][T20854]  dump_stack_lvl+0x188/0x250
[  584.739844][T20854]  ? show_regs_print_info+0x20/0x20
[  584.745088][T20854]  ? load_image+0x400/0x400
[  584.749653][T20854]  ? __lock_acquire+0x7d10/0x7d10
[  584.754727][T20854]  ? zone_statistics+0x170/0x170
[  584.759706][T20854]  should_fail+0x38c/0x4c0
[  584.764194][T20854]  should_failslab+0x5/0x20
[  584.768736][T20854]  slab_pre_alloc_hook+0x51/0xc0
[  584.773707][T20854]  kmem_cache_alloc_trace+0x47/0x2a0
[  584.779025][T20854]  ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0
[  584.784963][T20854]  sctp_auth_asoc_copy_shkeys+0x148/0x5a0
[  584.790771][T20854]  sctp_association_new+0x15e5/0x24a0
[  584.796201][T20854]  sctp_connect_new_asoc+0x2da/0x6a0
[  584.801533][T20854]  ? __sctp_connect+0xd80/0xd80
[  584.806421][T20854]  ? __local_bh_enable_ip+0x136/0x1c0
[  584.811837][T20854]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  584.812644][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.817421][T20854]  ? security_sctp_bind_connect+0x85/0xb0
[  584.817451][T20854]  sctp_sendmsg+0x164a/0x2a30
[  584.817490][T20854]  ? aa_sk_perm+0x7dc/0x910
[  584.817508][T20854]  ? sctp_getsockopt+0x8a0/0x8a0
[  584.817531][T20854]  ? aa_af_perm+0x340/0x340
[  584.817548][T20854]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  584.817574][T20854]  ? sock_rps_record_flow+0x17/0x3b0
[  584.817601][T20854]  ? inet_sendmsg+0xe5/0x2f0
[  584.817625][T20854]  ? inet_send_prepare+0x260/0x260
[  584.817648][T20854]  ____sys_sendmsg+0x5b7/0x8f0
[  584.817681][T20854]  ? __sys_sendmsg_sock+0x30/0x30
[  584.817713][T20854]  ? import_iovec+0x6f/0xa0
[  584.817741][T20854]  ___sys_sendmsg+0x236/0x2e0
[  584.817790][T20854]  ? __sys_sendmsg+0x2a0/0x2a0
[  584.817827][T20854]  ? vfs_write+0x8b2/0xd60
[  584.817874][T20854]  __se_sys_sendmsg+0x1af/0x290
[  584.817902][T20854]  ? __x64_sys_sendmsg+0x80/0x80
[  584.817925][T20854]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  584.817966][T20854]  ? lockdep_hardirqs_on+0x94/0x140
[  584.817996][T20854]  do_syscall_64+0x4c/0xa0
[  584.818017][T20854]  ? clear_bhb_loop+0x30/0x80
[  584.818039][T20854]  ? clear_bhb_loop+0x30/0x80
[  584.911641][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  584.915617][T20854]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  584.915652][T20854] RIP: 0033:0x7f2161229e59
[  584.952777][T20854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.959096][T20795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.972499][T20854] RSP: 002b:00007f215f483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  584.972530][T20854] RAX: ffffffffffffffda RBX: 00007f21614a2fa0 RCX: 00007f2161229e59
[  584.972547][T20854] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000004
[  584.972563][T20854] RBP: 00007f215f483090 R08: 0000000000000000 R09: 0000000000000000
[  584.972576][T20854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  584.972589][T20854] R13: 00007f21614a3038 R14: 00007f21614a2fa0 R15: 00007ffc8294c2b8
[  584.972621][T20854]  </TASK>
[  585.088174][T20864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6184'.
[  585.098418][T18317] Bluetooth: hci5: command 0x0409 tx timeout
[  585.120807][T20834] netlink: 'syz.2.6176': attribute type 21 has an invalid length.
[  585.133024][T20795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.209316][T20795] team0: Port device team_slave_0 added
[  585.277998][T20795] team0: Port device team_slave_1 added
[  585.319471][T20795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.329697][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.420206][T20795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.453222][T20795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.477990][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.535594][T20795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.551271][T20888] FAULT_INJECTION: forcing a failure.
[  585.551271][T20888] name failslab, interval 1, probability 0, space 0, times 0
[  585.582413][T20888] CPU: 0 PID: 20888 Comm: syz.4.6191 Not tainted syzkaller #0
[  585.589942][T20888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  585.600045][T20888] Call Trace:
[  585.603362][T20888]  <TASK>
[  585.606333][T20888]  dump_stack_lvl+0x188/0x250
[  585.611045][T20888]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  585.617234][T20888]  ? show_regs_print_info+0x20/0x20
[  585.622467][T20888]  ? load_image+0x400/0x400
[  585.627017][T20888]  should_fail+0x38c/0x4c0
[  585.631494][T20888]  should_failslab+0x5/0x20
[  585.636073][T20888]  slab_pre_alloc_hook+0x51/0xc0
[  585.641046][T20888]  kmem_cache_alloc_trace+0x47/0x2a0
[  585.646419][T20888]  ? genl_start+0x14f/0x4a0
[  585.650956][T20888]  ? __netlink_lookup+0x67d/0x710
[  585.656021][T20888]  genl_start+0x14f/0x4a0
[  585.660399][T20888]  __netlink_dump_start+0x3e8/0x700
[  585.665648][T20888]  genl_rcv_msg+0xa1d/0xf90
[  585.670203][T20888]  ? genl_bind+0x380/0x380
[  585.674662][T20888]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  585.680297][T20888]  ? genl_rcv_msg+0xf90/0xf90
[  585.685009][T20888]  ? genl_start+0x4a0/0x4a0
[  585.689567][T20888]  ? genl_lock_dumpit+0x90/0x90
[  585.694465][T20888]  ? dev_queue_xmit+0x20/0x20
[  585.699177][T20888]  ? tipc_nametbl_stop+0x1240/0x1240
[  585.704545][T20888]  netlink_rcv_skb+0x1f5/0x440
[  585.709351][T20888]  ? genl_bind+0x380/0x380
[  585.713806][T20888]  ? netlink_ack+0xb50/0xb50
[  585.718452][T20888]  ? __lock_acquire+0x7d10/0x7d10
[  585.723524][T20888]  ? down_read+0x1aa/0x2e0
[  585.727983][T20888]  genl_rcv+0x24/0x40
[  585.731994][T20888]  netlink_unicast+0x774/0x920
[  585.736803][T20888]  netlink_sendmsg+0x8ba/0xbe0
[  585.741611][T20888]  ? netlink_getsockopt+0x570/0x570
[  585.746844][T20888]  ? aa_sock_msg_perm+0x94/0x150
[  585.751822][T20888]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  585.757145][T20888]  ? security_socket_sendmsg+0x7c/0xa0
[  585.762755][T20888]  ? netlink_getsockopt+0x570/0x570
[  585.768013][T20888]  ____sys_sendmsg+0x5b7/0x8f0
[  585.773621][T20888]  ? __sys_sendmsg_sock+0x30/0x30
[  585.778689][T20888]  ? import_iovec+0x6f/0xa0
[  585.783239][T20888]  ___sys_sendmsg+0x236/0x2e0
[  585.787966][T20888]  ? __sys_sendmsg+0x2a0/0x2a0
[  585.792855][T20888]  __se_sys_sendmsg+0x1af/0x290
[  585.797758][T20888]  ? __x64_sys_sendmsg+0x80/0x80
[  585.802731][T20888]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  585.808771][T20888]  ? lockdep_hardirqs_on+0x94/0x140
[  585.814009][T20888]  do_syscall_64+0x4c/0xa0
[  585.818468][T20888]  ? clear_bhb_loop+0x30/0x80
[  585.823172][T20888]  ? clear_bhb_loop+0x30/0x80
[  585.827886][T20888]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  585.833811][T20888] RIP: 0033:0x7fcc6498ce59
[  585.838257][T20888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.857894][T20888] RSP: 002b:00007fcc62be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.866361][T20888] RAX: ffffffffffffffda RBX: 00007fcc64c05fa0 RCX: 00007fcc6498ce59
[  585.874374][T20888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  585.882387][T20888] RBP: 00007fcc62be6090 R08: 0000000000000000 R09: 0000000000000000
[  585.890412][T20888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.898427][T20888] R13: 00007fcc64c06038 R14: 00007fcc64c05fa0 R15: 00007fff4f5387e8
[  585.906623][T20888]  </TASK>
[  586.004537][T20795] device hsr_slave_0 entered promiscuous mode
[  586.026865][T20795] device hsr_slave_1 entered promiscuous mode
[  586.050221][T20795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  586.076156][T20795] Cannot create hsr debugfs directory
[  586.268778][T20902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6195'.
[  586.283954][T20905] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6194'.
[  586.337904][T20900] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6194'.
[  586.421976][T20908] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6197'.
[  587.162160][   T21] Bluetooth: hci5: command 0x041b tx timeout
[  588.026316][T20795] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  588.102876][T20795] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  588.133610][T20795] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  588.166762][T20795] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  588.400030][    T9] device hsr_slave_0 left promiscuous mode
[  588.418364][    T9] bridge0: port 3(dummy0) entered disabled state
[  588.622199][    T9] device bridge_slave_1 left promiscuous mode
[  588.630830][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.813845][    T9] device bridge_slave_0 left promiscuous mode
[  588.821789][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.914470][    T9] device veth1_macvtap left promiscuous mode
[  588.920617][    T9] device veth1_vlan left promiscuous mode
[  589.251562][T18317] Bluetooth: hci5: command 0x040f tx timeout
[  589.947564][    T9] team0 (unregistering): Port device geneve1 removed
[  590.171124][    T9] team0 (unregistering): Port device team_slave_1 removed
[  590.311940][    T9] team0 (unregistering): Port device bridge0 removed
[  590.410631][T20993] validate_nla: 4 callbacks suppressed
[  590.410650][T20993] netlink: 'syz.0.6218': attribute type 21 has an invalid length.
[  590.442695][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6218'.
[  590.580654][T20795] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.626227][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  590.657668][T14077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  590.694571][T20795] 8021q: adding VLAN 0 to HW filter on device team0
[  590.773845][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  590.786539][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  590.804416][T18126] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.811619][T18126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.924592][T21035] FAULT_INJECTION: forcing a failure.
[  590.924592][T21035] name failslab, interval 1, probability 0, space 0, times 0
[  590.945593][T21021] device syzkaller0 entered promiscuous mode
[  590.951911][T21035] CPU: 0 PID: 21035 Comm: syz.4.6225 Not tainted syzkaller #0
[  590.959419][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  590.969511][T21035] Call Trace:
[  590.972825][T21035]  <TASK>
[  590.975790][T21035]  dump_stack_lvl+0x188/0x250
[  590.980527][T21035]  ? show_regs_print_info+0x20/0x20
[  590.985776][T21035]  ? load_image+0x400/0x400
[  590.990329][T21035]  ? __might_sleep+0xf0/0xf0
[  590.994958][T21035]  ? __lock_acquire+0x7d10/0x7d10
[  591.000029][T21035]  ? mark_lock+0x94/0x320
[  591.004398][T21035]  should_fail+0x38c/0x4c0
[  591.008878][T21035]  should_failslab+0x5/0x20
[  591.013415][T21035]  slab_pre_alloc_hook+0x51/0xc0
[  591.018392][T21035]  __kmalloc+0x6b/0x330
[  591.022580][T21035]  ? tomoyo_realpath_from_path+0x118/0x610
[  591.028496][T21035]  tomoyo_realpath_from_path+0x118/0x610
[  591.034201][T21035]  tomoyo_path_number_perm+0x242/0x660
[  591.039722][T21035]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  591.046371][T21035]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  591.051990][T21035]  security_file_ioctl+0x6c/0xa0
[  591.057016][T21035]  __se_sys_ioctl+0x48/0x170
[  591.061663][T21035]  do_syscall_64+0x4c/0xa0
[  591.066115][T21035]  ? clear_bhb_loop+0x30/0x80
[  591.070834][T21035]  ? clear_bhb_loop+0x30/0x80
[  591.075550][T21035]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  591.081482][T21035] RIP: 0033:0x7fcc6498ce59
[  591.085935][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.105586][T21035] RSP: 002b:00007fcc62be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  591.114052][T21035] RAX: ffffffffffffffda RBX: 00007fcc64c05fa0 RCX: 00007fcc6498ce59
[  591.122063][T21035] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000020
[  591.130081][T21035] RBP: 00007fcc62be6090 R08: 0000000000000000 R09: 0000000000000000
[  591.138092][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.146102][T21035] R13: 00007fcc64c06038 R14: 00007fcc64c05fa0 R15: 00007fff4f5387e8
[  591.154150][T21035]  </TASK>
[  591.178210][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  591.192344][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  591.213920][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  591.232198][T18126] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.239418][T18126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.270109][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  591.283173][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  591.303752][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  591.314559][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  591.324448][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  591.332668][ T4200] Bluetooth: hci5: command 0x0419 tx timeout
[  591.390308][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  591.418304][T20795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  591.454307][T20795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  591.512189][T21035] ERROR: Out of memory at tomoyo_realpath_from_path.
[  591.643633][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  591.660718][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  591.679954][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  591.694232][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  591.704237][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  592.322341][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  592.553429][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  592.571987][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  592.611174][T20795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.696860][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  592.713744][T18126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  592.729851][T21086] netlink: 'syz.0.6241': attribute type 25 has an invalid length.
[  592.751197][T20795] device veth0_vlan entered promiscuous mode
[  592.772337][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  592.788158][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  592.824577][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  592.849139][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  592.883668][T20795] device veth1_vlan entered promiscuous mode
[  593.024538][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  593.045056][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  593.081013][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  593.123764][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  593.162531][T20795] device veth0_macvtap entered promiscuous mode
[  593.423744][T20795] device veth1_macvtap entered promiscuous mode
[  593.444174][T21098] netlink: 'syz.2.6245': attribute type 10 has an invalid length.
[  593.464941][T21098] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6245'.
[  593.859009][T21100] netlink: 'syz.2.6245': attribute type 1 has an invalid length.
[  593.891801][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  593.900575][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  594.162388][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.208990][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.229199][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.250757][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.270535][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.289786][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.312636][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.334418][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.367057][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.402468][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.440512][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.482469][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.515951][T20795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.543751][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  594.584272][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  594.613797][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.643609][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.673305][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.699604][T21119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6251'.
[  594.709037][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.719377][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.730588][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.746830][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.757860][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.769219][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.779724][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.789697][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.800207][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.810172][T20795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.823220][T20795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.853084][T20795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.901572][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  594.920249][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  594.932903][T20795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  594.956641][T20795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  594.969449][T20795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  594.977313][T21126] FAULT_INJECTION: forcing a failure.
[  594.977313][T21126] name failslab, interval 1, probability 0, space 0, times 0
[  595.001951][T20795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.054175][T21126] CPU: 0 PID: 21126 Comm: syz.1.6254 Not tainted syzkaller #0
[  595.061713][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.071798][T21126] Call Trace:
[  595.075109][T21126]  <TASK>
[  595.078091][T21126]  dump_stack_lvl+0x188/0x250
[  595.082927][T21126]  ? show_regs_print_info+0x20/0x20
[  595.088176][T21126]  ? load_image+0x400/0x400
[  595.092735][T21126]  ? __might_sleep+0xf0/0xf0
[  595.097370][T21126]  ? __lock_acquire+0x7d10/0x7d10
[  595.102442][T21126]  should_fail+0x38c/0x4c0
[  595.106905][T21126]  should_failslab+0x5/0x20
[  595.111437][T21126]  slab_pre_alloc_hook+0x51/0xc0
[  595.116417][T21126]  __kmalloc_node_track_caller+0x68/0x3a0
[  595.122186][T21126]  ? netlink_dump+0x1e8/0xcf0
[  595.126904][T21126]  ? kmem_cache_alloc_node+0x162/0x2d0
[  595.132402][T21126]  ? __alloc_skb+0xf4/0x750
[  595.136978][T21126]  ? netlink_dump+0x1e8/0xcf0
[  595.141702][T21126]  __alloc_skb+0x22c/0x750
[  595.146170][T21126]  netlink_dump+0x1e8/0xcf0
[  595.150708][T21126]  ? lockdep_hardirqs_on+0x94/0x140
[  595.155963][T21126]  ? slab_free_freelist_hook+0xea/0x170
[  595.161550][T21126]  ? netlink_lookup+0x1d0/0x1d0
[  595.166481][T21126]  netlink_recvmsg+0x672/0xe20
[  595.171305][T21126]  ? netlink_sendmsg+0xbe0/0xbe0
[  595.176279][T21126]  ? aa_sk_perm+0x7dc/0x910
[  595.180851][T21126]  ? aa_af_perm+0x340/0x340
[  595.185422][T21126]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  595.190750][T21126]  ? security_socket_recvmsg+0x85/0xb0
[  595.196257][T21126]  ? netlink_sendmsg+0xbe0/0xbe0
[  595.201249][T21126]  ____sys_recvmsg+0x2cd/0x5e0
[  595.206096][T21126]  ? __sys_recvmsg_sock+0x40/0x40
[  595.211199][T21126]  ? import_iovec+0x6f/0xa0
[  595.215760][T21126]  ___sys_recvmsg+0x21a/0x5c0
[  595.220531][T21126]  ? __sys_recvmsg+0x280/0x280
[  595.225359][T21126]  ? trace_event_raw_event_lock+0x270/0x270
[  595.231362][T21126]  __x64_sys_recvmsg+0x1f9/0x2c0
[  595.236352][T21126]  ? ___sys_recvmsg+0x5c0/0x5c0
[  595.241246][T21126]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  595.247328][T21126]  ? lockdep_hardirqs_on+0x94/0x140
[  595.252582][T21126]  do_syscall_64+0x4c/0xa0
[  595.257061][T21126]  ? clear_bhb_loop+0x30/0x80
[  595.261776][T21126]  ? clear_bhb_loop+0x30/0x80
[  595.266507][T21126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  595.272450][T21126] RIP: 0033:0x7fd6b3af7e59
[  595.276916][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.296565][T21126] RSP: 002b:00007fd6b1d51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  595.305027][T21126] RAX: ffffffffffffffda RBX: 00007fd6b3d70fa0 RCX: 00007fd6b3af7e59
[  595.313037][T21126] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  595.321051][T21126] RBP: 00007fd6b1d51090 R08: 0000000000000000 R09: 0000000000000000
[  595.329158][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.337183][T21126] R13: 00007fd6b3d71038 R14: 00007fd6b3d70fa0 R15: 00007ffd6e729b98
[  595.345227][T21126]  </TASK>
[  595.479073][T14108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.502310][T14108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.521077][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  595.586196][T18122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.622289][T18122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.629931][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  596.861135][T21180] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6276'.
[  597.126501][T21190] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6278'.
[  597.181340][T21188] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6278'.
[  598.461309][T21223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6291'.
[  598.595304][T21238] FAULT_INJECTION: forcing a failure.
[  598.595304][T21238] name failslab, interval 1, probability 0, space 0, times 0
[  598.681985][T21232] device syzkaller0 entered promiscuous mode
[  598.692288][T21238] CPU: 0 PID: 21238 Comm: syz.3.6296 Not tainted syzkaller #0
[  598.699814][T21238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  598.710003][T21238] Call Trace:
[  598.713312][T21238]  <TASK>
[  598.716278][T21238]  dump_stack_lvl+0x188/0x250
[  598.720992][T21238]  ? show_regs_print_info+0x20/0x20
[  598.726224][T21238]  ? load_image+0x400/0x400
[  598.730766][T21238]  ? __lock_acquire+0x7d10/0x7d10
[  598.736034][T21238]  should_fail+0x38c/0x4c0
[  598.740495][T21238]  should_failslab+0x5/0x20
[  598.745029][T21238]  slab_pre_alloc_hook+0x51/0xc0
[  598.750004][T21238]  __kmalloc+0x6b/0x330
[  598.754186][T21238]  ? sk_prot_alloc+0xe7/0x210
[  598.758903][T21238]  sk_prot_alloc+0xe7/0x210
[  598.763529][T21238]  ? sk_alloc+0x1d/0x310
[  598.767806][T21238]  sk_alloc+0x2f/0x310
[  598.771917][T21238]  bpf_prog_test_run_skb+0x240/0x10b0
[  598.777364][T21238]  ? __fget_files+0x40f/0x480
[  598.782094][T21238]  ? cpu_online+0x60/0x60
[  598.786465][T21238]  bpf_prog_test_run+0x31e/0x390
[  598.791455][T21238]  __sys_bpf+0x5a5/0x6f0
[  598.795739][T21238]  ? bpf_link_show_fdinfo+0x380/0x380
[  598.801156][T21238]  ? vtime_user_exit+0x2c8/0x3e0
[  598.806146][T21238]  __x64_sys_bpf+0x78/0x90
[  598.810601][T21238]  do_syscall_64+0x4c/0xa0
[  598.815221][T21238]  ? clear_bhb_loop+0x30/0x80
[  598.819936][T21238]  ? clear_bhb_loop+0x30/0x80
[  598.824654][T21238]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  598.830583][T21238] RIP: 0033:0x7fadc514ce59
[  598.835040][T21238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.854680][T21238] RSP: 002b:00007fadc33a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  598.863148][T21238] RAX: ffffffffffffffda RBX: 00007fadc53c5fa0 RCX: 00007fadc514ce59
[  598.871157][T21238] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  598.879170][T21238] RBP: 00007fadc33a6090 R08: 0000000000000000 R09: 0000000000000000
[  598.887179][T21238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.895187][T21238] R13: 00007fadc53c6038 R14: 00007fadc53c5fa0 R15: 00007ffea9fef608
[  598.903227][T21238]  </TASK>
[  599.143942][T21248] netlink: 'syz.0.6300': attribute type 29 has an invalid length.
[  599.186839][T21248] netlink: 'syz.0.6300': attribute type 29 has an invalid length.
[  599.211781][T21252] netlink: 'syz.0.6300': attribute type 29 has an invalid length.
[  600.584476][T21282] netlink: 'syz.0.6310': attribute type 21 has an invalid length.
[  601.155730][T21302] netlink: 'syz.4.6318': attribute type 9 has an invalid length.
[  601.221996][T21302] netlink: 212696 bytes leftover after parsing attributes in process `syz.4.6318'.
[  601.807120][T21318] FAULT_INJECTION: forcing a failure.
[  601.807120][T21318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.933518][T21318] CPU: 1 PID: 21318 Comm: syz.1.6323 Not tainted syzkaller #0
[  601.941070][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  601.951170][T21318] Call Trace:
[  601.954488][T21318]  <TASK>
[  601.957441][T21318]  dump_stack_lvl+0x188/0x250
[  601.962161][T21318]  ? show_regs_print_info+0x20/0x20
[  601.967424][T21318]  ? load_image+0x400/0x400
[  601.971972][T21318]  ? __lock_acquire+0x7d10/0x7d10
[  601.977037][T21318]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  601.983662][T21318]  should_fail+0x38c/0x4c0
[  601.988116][T21318]  _copy_from_user+0x2e/0x170
[  601.992853][T21318]  ___sys_recvmsg+0x173/0x5c0
[  601.997587][T21318]  ? __sys_recvmsg+0x280/0x280
[  602.002394][T21318]  ? __lock_acquire+0x7d10/0x7d10
[  602.007597][T21318]  __x64_sys_recvmsg+0x1f9/0x2c0
[  602.012575][T21318]  ? ___sys_recvmsg+0x5c0/0x5c0
[  602.017469][T21318]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  602.023502][T21318]  ? lockdep_hardirqs_on+0x94/0x140
[  602.028735][T21318]  do_syscall_64+0x4c/0xa0
[  602.033169][T21318]  ? clear_bhb_loop+0x30/0x80
[  602.037947][T21318]  ? clear_bhb_loop+0x30/0x80
[  602.042645][T21318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  602.048552][T21318] RIP: 0033:0x7fd6b3af7e59
[  602.052996][T21318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.072626][T21318] RSP: 002b:00007fd6b1d51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  602.081088][T21318] RAX: ffffffffffffffda RBX: 00007fd6b3d70fa0 RCX: 00007fd6b3af7e59
[  602.089089][T21318] RDX: 0000000000000061 RSI: 0000200000000100 RDI: 0000000000000004
[  602.097085][T21318] RBP: 00007fd6b1d51090 R08: 0000000000000000 R09: 0000000000000000
[  602.105217][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.113226][T21318] R13: 00007fd6b3d71038 R14: 00007fd6b3d70fa0 R15: 00007ffd6e729b98
[  602.121277][T21318]  </TASK>
[  602.668463][T21331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  602.908264][T21353] FAULT_INJECTION: forcing a failure.
[  602.908264][T21353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.961554][T21353] CPU: 0 PID: 21353 Comm: syz.0.6337 Not tainted syzkaller #0
[  602.969169][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  602.979599][T21353] Call Trace:
[  602.982907][T21353]  <TASK>
[  602.985862][T21353]  dump_stack_lvl+0x188/0x250
[  602.990573][T21353]  ? show_regs_print_info+0x20/0x20
[  602.995801][T21353]  ? load_image+0x400/0x400
[  603.000341][T21353]  ? __lock_acquire+0x7d10/0x7d10
[  603.005398][T21353]  should_fail+0x38c/0x4c0
[  603.009857][T21353]  _copy_from_iter+0x22e/0x1170
[  603.014747][T21353]  ? __lock_acquire+0x7d10/0x7d10
[  603.019814][T21353]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  603.025229][T21353]  ? __virt_addr_valid+0x3c6/0x470
[  603.030371][T21353]  ? __phys_addr_symbol+0x2b/0x70
[  603.035422][T21353]  ? __check_object_size+0x30c/0x410
[  603.040748][T21353]  netlink_sendmsg+0x758/0xbe0
[  603.045552][T21353]  ? netlink_getsockopt+0x570/0x570
[  603.050782][T21353]  ? aa_sock_msg_perm+0x94/0x150
[  603.055752][T21353]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  603.061070][T21353]  ? security_socket_sendmsg+0x7c/0xa0
[  603.066567][T21353]  ? netlink_getsockopt+0x570/0x570
[  603.071793][T21353]  ____sys_sendmsg+0x5b7/0x8f0
[  603.076597][T21353]  ? __sys_sendmsg_sock+0x30/0x30
[  603.081710][T21353]  ? import_iovec+0x6f/0xa0
[  603.086253][T21353]  ___sys_sendmsg+0x236/0x2e0
[  603.091120][T21353]  ? __sys_sendmsg+0x2a0/0x2a0
[  603.095928][T21353]  ? vfs_write+0x8b2/0xd60
[  603.100388][T21353]  __se_sys_sendmsg+0x1af/0x290
[  603.105267][T21353]  ? __x64_sys_sendmsg+0x80/0x80
[  603.110248][T21353]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  603.116272][T21353]  ? lockdep_hardirqs_on+0x94/0x140
[  603.121521][T21353]  do_syscall_64+0x4c/0xa0
[  603.125990][T21353]  ? clear_bhb_loop+0x30/0x80
[  603.130698][T21353]  ? clear_bhb_loop+0x30/0x80
[  603.135426][T21353]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  603.141354][T21353] RIP: 0033:0x7f2161229e59
[  603.145802][T21353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.165434][T21353] RSP: 002b:00007f215f483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  603.173913][T21353] RAX: ffffffffffffffda RBX: 00007f21614a2fa0 RCX: 00007f2161229e59
[  603.181911][T21353] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  603.189905][T21353] RBP: 00007f215f483090 R08: 0000000000000000 R09: 0000000000000000
[  603.197898][T21353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.205895][T21353] R13: 00007f21614a3038 R14: 00007f21614a2fa0 R15: 00007ffc8294c2b8
[  603.213911][T21353]  </TASK>
[  603.409200][T21364] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6341'.
[  603.429599][T21364] netlink: 'syz.0.6341': attribute type 10 has an invalid length.
[  603.460613][T21364] batman_adv: batadv0: Adding interface: wlan1
[  603.478503][T21364] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.518940][T21364] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[  603.928374][T21378] FAULT_INJECTION: forcing a failure.
[  603.928374][T21378] name failslab, interval 1, probability 0, space 0, times 0
[  603.962714][T21378] CPU: 1 PID: 21378 Comm: syz.4.6348 Not tainted syzkaller #0
[  603.970254][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  603.980334][T21378] Call Trace:
[  603.983644][T21378]  <TASK>
[  603.986593][T21378]  dump_stack_lvl+0x188/0x250
[  603.991301][T21378]  ? show_regs_print_info+0x20/0x20
[  603.996545][T21378]  ? load_image+0x400/0x400
[  604.001087][T21378]  ? __might_sleep+0xf0/0xf0
[  604.005708][T21378]  ? __lock_acquire+0x7d10/0x7d10
[  604.010785][T21378]  should_fail+0x38c/0x4c0
[  604.015241][T21378]  should_failslab+0x5/0x20
[  604.019769][T21378]  slab_pre_alloc_hook+0x51/0xc0
[  604.024731][T21378]  kmem_cache_alloc_node+0x47/0x2d0
[  604.029953][T21378]  ? __alloc_skb+0xf4/0x750
[  604.034494][T21378]  __alloc_skb+0xf4/0x750
[  604.038873][T21378]  __ip6_append_data+0x266c/0x38c0
[  604.044044][T21378]  ? ip6_setup_cork+0x11e0/0x11e0
[  604.049098][T21378]  ? ip6_setup_cork+0xc63/0x11e0
[  604.054070][T21378]  ip6_append_data+0x1d4/0x310
[  604.058860][T21378]  ? inet6_sk+0xe0/0xe0
[  604.063083][T21378]  ? inet6_sk+0xe0/0xe0
[  604.067275][T21378]  ping_v6_sendmsg+0xa95/0x1030
[  604.072162][T21378]  ? tcpv6_net_exit_batch+0x20/0x20
[  604.077410][T21378]  ? lock_chain_count+0x20/0x20
[  604.082302][T21378]  ? __local_bh_enable_ip+0x136/0x1c0
[  604.087708][T21378]  ? lockdep_hardirqs_on+0x94/0x140
[  604.092958][T21378]  ? __local_bh_enable_ip+0x136/0x1c0
[  604.098350][T21378]  ? _local_bh_enable+0xa0/0xa0
[  604.103237][T21378]  ? inet_sendmsg+0x147/0x2f0
[  604.107941][T21378]  ? inet_sendmsg+0x147/0x2f0
[  604.112646][T21378]  ? inet_send_prepare+0x260/0x260
[  604.117787][T21378]  ____sys_sendmsg+0x5b7/0x8f0
[  604.122602][T21378]  ? __sys_sendmsg_sock+0x30/0x30
[  604.127671][T21378]  ? import_iovec+0x6f/0xa0
[  604.132233][T21378]  ___sys_sendmsg+0x236/0x2e0
[  604.136949][T21378]  ? __sys_sendmsg+0x2a0/0x2a0
[  604.141756][T21378]  ? vfs_write+0x8b2/0xd60
[  604.146231][T21378]  __se_sys_sendmsg+0x1af/0x290
[  604.151118][T21378]  ? __x64_sys_sendmsg+0x80/0x80
[  604.156081][T21378]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  604.162120][T21378]  ? lockdep_hardirqs_on+0x94/0x140
[  604.167352][T21378]  do_syscall_64+0x4c/0xa0
[  604.171785][T21378]  ? clear_bhb_loop+0x30/0x80
[  604.176486][T21378]  ? clear_bhb_loop+0x30/0x80
[  604.181198][T21378]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  604.187126][T21378] RIP: 0033:0x7fcc6498ce59
[  604.191580][T21378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.211206][T21378] RSP: 002b:00007fcc62be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.219634][T21378] RAX: ffffffffffffffda RBX: 00007fcc64c05fa0 RCX: 00007fcc6498ce59
[  604.227625][T21378] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[  604.235608][T21378] RBP: 00007fcc62be6090 R08: 0000000000000000 R09: 0000000000000000
[  604.243592][T21378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.251579][T21378] R13: 00007fcc64c06038 R14: 00007fcc64c05fa0 R15: 00007fff4f5387e8
[  604.259667][T21378]  </TASK>
[  604.833187][T21400] netlink: 'syz.0.6356': attribute type 13 has an invalid length.
[  604.869798][T21400] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6356'.
[  605.032287][T21414] netlink: 'syz.1.6360': attribute type 9 has an invalid length.
[  605.061983][T21415] FAULT_INJECTION: forcing a failure.
[  605.061983][T21415] name failslab, interval 1, probability 0, space 0, times 0
[  605.072053][T21414] netlink: 212696 bytes leftover after parsing attributes in process `syz.1.6360'.
[  605.110922][T21415] CPU: 0 PID: 21415 Comm: syz.2.6361 Not tainted syzkaller #0
[  605.118459][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  605.128549][T21415] Call Trace:
[  605.131852][T21415]  <TASK>
[  605.134808][T21415]  dump_stack_lvl+0x188/0x250
[  605.139524][T21415]  ? show_regs_print_info+0x20/0x20
[  605.144758][T21415]  ? load_image+0x400/0x400
[  605.149303][T21415]  ? __might_sleep+0xf0/0xf0
[  605.153929][T21415]  ? __lock_acquire+0x7d10/0x7d10
[  605.158986][T21415]  ? netlink_insert+0xe95/0x11f0
[  605.159018][T21415]  should_fail+0x38c/0x4c0
[  605.168400][T21415]  should_failslab+0x5/0x20
[  605.172934][T21415]  slab_pre_alloc_hook+0x51/0xc0
[  605.178254][T21415]  kmem_cache_alloc_node+0x47/0x2d0
[  605.183488][T21415]  ? __alloc_skb+0xf4/0x750
[  605.188031][T21415]  __alloc_skb+0xf4/0x750
[  605.192431][T21415]  netlink_sendmsg+0x654/0xbe0
[  605.197253][T21415]  ? netlink_getsockopt+0x570/0x570
[  605.202485][T21415]  ? aa_sock_msg_perm+0x94/0x150
[  605.207463][T21415]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  605.212789][T21415]  ? security_socket_sendmsg+0x7c/0xa0
[  605.218282][T21415]  ? netlink_getsockopt+0x570/0x570
[  605.223511][T21415]  ____sys_sendmsg+0x5b7/0x8f0
[  605.228319][T21415]  ? __sys_sendmsg_sock+0x30/0x30
[  605.233420][T21415]  ? import_iovec+0x6f/0xa0
[  605.237963][T21415]  ___sys_sendmsg+0x236/0x2e0
[  605.242682][T21415]  ? __sys_sendmsg+0x2a0/0x2a0
[  605.247516][T21415]  __se_sys_sendmsg+0x1af/0x290
[  605.252402][T21415]  ? __x64_sys_sendmsg+0x80/0x80
[  605.257370][T21415]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  605.263405][T21415]  ? lockdep_hardirqs_on+0x94/0x140
[  605.268645][T21415]  do_syscall_64+0x4c/0xa0
[  605.273097][T21415]  ? clear_bhb_loop+0x30/0x80
[  605.278072][T21415]  ? clear_bhb_loop+0x30/0x80
[  605.282783][T21415]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  605.288716][T21415] RIP: 0033:0x7f4cc8e14e59
[  605.293160][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.312834][T21415] RSP: 002b:00007f4cc706e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  605.321294][T21415] RAX: ffffffffffffffda RBX: 00007f4cc908dfa0 RCX: 00007f4cc8e14e59
[  605.329318][T21415] RDX: 0000000004008800 RSI: 0000200000000000 RDI: 0000000000000005
[  605.337318][T21415] RBP: 00007f4cc706e090 R08: 0000000000000000 R09: 0000000000000000
[  605.345320][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.353323][T21415] R13: 00007f4cc908e038 R14: 00007f4cc908dfa0 R15: 00007ffcb4d6a128
[  605.361341][T21415]  </TASK>
[  605.586086][T21428] netlink: 'syz.0.6365': attribute type 8 has an invalid length.
[  605.608082][T21428] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6365'.
[  606.858420][T21478] FAULT_INJECTION: forcing a failure.
[  606.858420][T21478] name failslab, interval 1, probability 0, space 0, times 0
[  606.871221][T21478] CPU: 1 PID: 21478 Comm: syz.2.6382 Not tainted syzkaller #0
[  606.878730][T21478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  606.888822][T21478] Call Trace:
[  606.892140][T21478]  <TASK>
[  606.895109][T21478]  dump_stack_lvl+0x188/0x250
[  606.899835][T21478]  ? show_regs_print_info+0x20/0x20
[  606.905105][T21478]  ? load_image+0x400/0x400
[  606.909678][T21478]  ? rcu_lock_release+0x5/0x20
[  606.914579][T21478]  should_fail+0x38c/0x4c0
[  606.919054][T21478]  should_failslab+0x5/0x20
[  606.923614][T21478]  slab_pre_alloc_hook+0x51/0xc0
[  606.928598][T21478]  ? __nf_conntrack_alloc+0x99/0x380
[  606.933923][T21478]  kmem_cache_alloc+0x3d/0x290
[  606.938740][T21478]  __nf_conntrack_alloc+0x99/0x380
[  606.943916][T21478]  init_conntrack+0x258/0x14d0
[  606.948721][T21478]  ? __nf_conntrack_find_get+0x581/0x650
[  606.954402][T21478]  ? early_drop+0x810/0x810
[  606.958957][T21478]  ? nf_conntrack_find_get+0x670/0x670
[  606.964456][T21478]  ? __siphash_unaligned+0x258/0x3a0
[  606.969797][T21478]  nf_conntrack_in+0xd38/0x1730
[  606.974732][T21478]  ? nf_ct_pernet+0x240/0x240
[  606.979492][T21478]  ? ip6t_alloc_initial_table+0x640/0x640
[  606.985355][T21478]  ? ipv6_defrag+0x2d2/0x3a0
[  606.989998][T21478]  ? ipv4_confirm+0x220/0x220
[  606.994710][T21478]  nf_hook_slow+0xb9/0x200
[  606.999250][T21478]  ? refcount_add+0x80/0x80
[  607.003789][T21478]  NF_HOOK+0x1f2/0x390
[  607.007896][T21478]  ? refcount_add+0x80/0x80
[  607.012444][T21478]  ? ip6_rcv_core+0x1620/0x1620
[  607.017351][T21478]  ? refcount_add+0x80/0x80
[  607.021929][T21478]  ? ip6_rcv_finish_core+0x420/0x420
[  607.027284][T21478]  __netif_receive_skb+0xcc/0x290
[  607.032346][T21478]  ? ktime_get_with_offset+0x2d7/0x320
[  607.037851][T21478]  netif_receive_skb+0x19e/0x700
[  607.042841][T21478]  ? netif_receive_skb_core+0x210/0x210
[  607.048423][T21478]  ? rcu_nmi_exit+0x6f/0xf0
[  607.053006][T21478]  tun_rx_batched+0x5fb/0x760
[  607.057761][T21478]  ? local_bh_enable+0x20/0x20
[  607.062570][T21478]  ? __local_bh_enable_ip+0x136/0x1c0
[  607.068009][T21478]  ? read_lock_is_recursive+0x10/0x10
[  607.073438][T21478]  ? __local_bh_enable_ip+0x136/0x1c0
[  607.078860][T21478]  ? _local_bh_enable+0xa0/0xa0
[  607.083747][T21478]  ? skb_copy_datagram_from_iter+0x5ab/0x6a0
[  607.089777][T21478]  tun_get_user+0x2517/0x3a70
[  607.094483][T21478]  ? perf_trace_lock+0x301/0x390
[  607.099478][T21478]  ? tun_ring_recv+0xc40/0xc40
[  607.104281][T21478]  ? rcu_lock_release+0x5/0x20
[  607.109077][T21478]  ? __lock_acquire+0x7d10/0x7d10
[  607.114145][T21478]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  607.119916][T21478]  tun_chr_write_iter+0x112/0x1e0
[  607.124968][T21478]  vfs_write+0x745/0xd60
[  607.129242][T21478]  ? file_end_write+0x250/0x250
[  607.134133][T21478]  ? __fget_files+0x40f/0x480
[  607.138851][T21478]  ? __fdget_pos+0x1e2/0x370
[  607.143459][T21478]  ? ksys_write+0x71/0x260
[  607.147902][T21478]  ksys_write+0x152/0x260
[  607.152260][T21478]  ? __ia32_sys_read+0x80/0x80
[  607.157058][T21478]  ? lockdep_hardirqs_on+0x94/0x140
[  607.162382][T21478]  do_syscall_64+0x4c/0xa0
[  607.166820][T21478]  ? clear_bhb_loop+0x30/0x80
[  607.171531][T21478]  ? clear_bhb_loop+0x30/0x80
[  607.176255][T21478]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  607.182171][T21478] RIP: 0033:0x7f4cc8e14e59
[  607.186606][T21478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.206238][T21478] RSP: 002b:00007f4cc706e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  607.214686][T21478] RAX: ffffffffffffffda RBX: 00007f4cc908dfa0 RCX: 00007f4cc8e14e59
[  607.222676][T21478] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  607.230663][T21478] RBP: 00007f4cc706e090 R08: 0000000000000000 R09: 0000000000000000
[  607.238643][T21478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  607.246634][T21478] R13: 00007f4cc908e038 R14: 00007f4cc908dfa0 R15: 00007ffcb4d6a128
[  607.254645][T21478]  </TASK>
[  607.534355][T21486] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6385'.
[  607.583817][T21490] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6385'.
[  608.442868][T21490] team0: Port device team_slave_0 removed
[  608.491893][T21494] netlink: 'syz.1.6385': attribute type 10 has an invalid length.
[  608.500044][T21494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6385'.
[  608.509547][T21494] device dummy0 entered promiscuous mode
[  608.516971][T21494] bridge0: port 3(dummy0) entered blocking state
[  608.524855][T21494] bridge0: port 3(dummy0) entered disabled state
[  608.535095][T21494] bridge0: port 3(dummy0) entered blocking state
[  608.541597][T21494] bridge0: port 3(dummy0) entered forwarding state
[  608.637931][T21514] FAULT_INJECTION: forcing a failure.
[  608.637931][T21514] name failslab, interval 1, probability 0, space 0, times 0
[  608.651057][T21514] CPU: 1 PID: 21514 Comm: syz.4.6394 Not tainted syzkaller #0
[  608.658545][T21514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  608.668619][T21514] Call Trace:
[  608.671919][T21514]  <TASK>
[  608.674861][T21514]  dump_stack_lvl+0x188/0x250
[  608.679563][T21514]  ? show_regs_print_info+0x20/0x20
[  608.684782][T21514]  ? load_image+0x400/0x400
[  608.689309][T21514]  ? verify_lock_unused+0x140/0x140
[  608.694536][T21514]  should_fail+0x38c/0x4c0
[  608.698981][T21514]  should_failslab+0x5/0x20
[  608.703491][T21514]  slab_pre_alloc_hook+0x51/0xc0
[  608.708441][T21514]  ? inet_frag_find+0x891/0x1d30
[  608.713394][T21514]  kmem_cache_alloc+0x3d/0x290
[  608.718173][T21514]  inet_frag_find+0x891/0x1d30
[  608.722950][T21514]  ? ip6frag_obj_hashfn+0x20/0x20
[  608.727999][T21514]  ? inet_frag_destroy_rcu+0xc0/0xc0
[  608.733316][T21514]  nf_ct_frag6_gather+0x670/0x1d80
[  608.738547][T21514]  ? ipv6_defrag+0x3a0/0x3a0
[  608.743160][T21514]  ipv6_defrag+0x2a5/0x3a0
[  608.747593][T21514]  ? defrag6_net_exit+0xb0/0xb0
[  608.752456][T21514]  nf_hook_slow+0xb9/0x200
[  608.756897][T21514]  ? refcount_add+0x80/0x80
[  608.761418][T21514]  NF_HOOK+0x1f2/0x390
[  608.765499][T21514]  ? refcount_add+0x80/0x80
[  608.770018][T21514]  ? ip6_rcv_core+0x1620/0x1620
[  608.774880][T21514]  ? refcount_add+0x80/0x80
[  608.779402][T21514]  ? ip6_rcv_finish_core+0x420/0x420
[  608.784697][T21514]  __netif_receive_skb+0xcc/0x290
[  608.789732][T21514]  ? ktime_get_with_offset+0x2d7/0x320
[  608.795204][T21514]  netif_receive_skb+0x19e/0x700
[  608.800166][T21514]  ? _copy_from_iter+0x5cb/0x1170
[  608.805215][T21514]  ? netif_receive_skb_core+0x210/0x210
[  608.810803][T21514]  tun_rx_batched+0x5fb/0x760
[  608.815527][T21514]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  608.821542][T21514]  ? local_bh_enable+0x20/0x20
[  608.826345][T21514]  ? __local_bh_enable_ip+0x136/0x1c0
[  608.831738][T21514]  ? read_lock_is_recursive+0x10/0x10
[  608.837138][T21514]  ? __local_bh_enable_ip+0x136/0x1c0
[  608.842545][T21514]  ? _local_bh_enable+0xa0/0xa0
[  608.847428][T21514]  ? skb_copy_datagram_from_iter+0x5ab/0x6a0
[  608.853441][T21514]  tun_get_user+0x2517/0x3a70
[  608.858158][T21514]  ? tun_ring_recv+0xc40/0xc40
[  608.862957][T21514]  ? rcu_lock_release+0x5/0x20
[  608.867750][T21514]  ? __lock_acquire+0x7d10/0x7d10
[  608.872815][T21514]  tun_chr_write_iter+0x112/0x1e0
[  608.877863][T21514]  vfs_write+0x745/0xd60
[  608.882129][T21514]  ? file_end_write+0x250/0x250
[  608.887000][T21514]  ? __fget_files+0x40f/0x480
[  608.891700][T21514]  ? __fdget_pos+0x1e2/0x370
[  608.896307][T21514]  ? ksys_write+0x71/0x260
[  608.900751][T21514]  ksys_write+0x152/0x260
[  608.905100][T21514]  ? __ia32_sys_read+0x80/0x80
[  608.909907][T21514]  ? lockdep_hardirqs_on+0x94/0x140
[  608.915126][T21514]  do_syscall_64+0x4c/0xa0
[  608.919586][T21514]  ? clear_bhb_loop+0x30/0x80
[  608.924277][T21514]  ? clear_bhb_loop+0x30/0x80
[  608.928967][T21514]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  608.934875][T21514] RIP: 0033:0x7fcc6498ce59
[  608.939305][T21514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.958920][T21514] RSP: 002b:00007fcc62be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  608.967356][T21514] RAX: ffffffffffffffda RBX: 00007fcc64c05fa0 RCX: 00007fcc6498ce59
[  608.975342][T21514] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  608.983324][T21514] RBP: 00007fcc62be6090 R08: 0000000000000000 R09: 0000000000000000
[  608.991305][T21514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.999302][T21514] R13: 00007fcc64c06038 R14: 00007fcc64c05fa0 R15: 00007fff4f5387e8
[  609.007297][T21514]  </TASK>
[  609.083446][T21516] FAULT_INJECTION: forcing a failure.
[  609.083446][T21516] name failslab, interval 1, probability 0, space 0, times 0
[  609.096186][T21516] CPU: 1 PID: 21516 Comm: syz.1.6395 Not tainted syzkaller #0
[  609.103680][T21516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.113752][T21516] Call Trace:
[  609.117051][T21516]  <TASK>
[  609.120001][T21516]  dump_stack_lvl+0x188/0x250
[  609.124712][T21516]  ? show_regs_print_info+0x20/0x20
[  609.129938][T21516]  ? load_image+0x400/0x400
[  609.134485][T21516]  should_fail+0x38c/0x4c0
[  609.138942][T21516]  should_failslab+0x5/0x20
[  609.143462][T21516]  slab_pre_alloc_hook+0x51/0xc0
[  609.148423][T21516]  ? inet_frag_find+0x891/0x1d30
[  609.153387][T21516]  kmem_cache_alloc+0x3d/0x290
[  609.158187][T21516]  inet_frag_find+0x891/0x1d30
[  609.162971][T21516]  ? ip6frag_obj_hashfn+0x20/0x20
[  609.168036][T21516]  ? inet_frag_destroy_rcu+0xc0/0xc0
[  609.173368][T21516]  nf_ct_frag6_gather+0x670/0x1d80
[  609.178532][T21516]  ? ipv6_defrag+0x3a0/0x3a0
[  609.183182][T21516]  ipv6_defrag+0x2a5/0x3a0
[  609.187630][T21516]  ? defrag6_net_exit+0xb0/0xb0
[  609.192499][T21516]  nf_hook_slow+0xb9/0x200
[  609.196944][T21516]  ? refcount_add+0x80/0x80
[  609.201468][T21516]  NF_HOOK+0x1f2/0x390
[  609.205556][T21516]  ? refcount_add+0x80/0x80
[  609.210078][T21516]  ? ip6_rcv_core+0x1620/0x1620
[  609.214972][T21516]  ? refcount_add+0x80/0x80
[  609.222587][T21516]  ? ip6_rcv_finish_core+0x420/0x420
[  609.227907][T21516]  __netif_receive_skb+0xcc/0x290
[  609.232964][T21516]  ? ktime_get_with_offset+0x2d7/0x320
[  609.238489][T21516]  netif_receive_skb+0x19e/0x700
[  609.243479][T21516]  ? netif_receive_skb_core+0x210/0x210
[  609.249080][T21516]  tun_rx_batched+0x5fb/0x760
[  609.253789][T21516]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  609.259802][T21516]  ? local_bh_enable+0x20/0x20
[  609.264613][T21516]  ? __local_bh_enable_ip+0x136/0x1c0
[  609.271721][T21516]  ? read_lock_is_recursive+0x10/0x10
[  609.277129][T21516]  ? __local_bh_enable_ip+0x136/0x1c0
[  609.282527][T21516]  ? _local_bh_enable+0xa0/0xa0
[  609.287414][T21516]  ? skb_copy_datagram_from_iter+0x5ab/0x6a0
[  609.293459][T21516]  tun_get_user+0x2517/0x3a70
[  609.298176][T21516]  ? perf_trace_lock+0x301/0x390
[  609.303175][T21516]  ? tun_ring_recv+0xc40/0xc40
[  609.307990][T21516]  ? rcu_lock_release+0x5/0x20
[  609.312792][T21516]  ? __lock_acquire+0x7d10/0x7d10
[  609.317850][T21516]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  609.323664][T21516]  tun_chr_write_iter+0x112/0x1e0
[  609.328723][T21516]  vfs_write+0x745/0xd60
[  609.332996][T21516]  ? file_end_write+0x250/0x250
[  609.337888][T21516]  ? __fget_files+0x40f/0x480
[  609.342602][T21516]  ? __fdget_pos+0x1e2/0x370
[  609.347217][T21516]  ? ksys_write+0x71/0x260
[  609.351660][T21516]  ksys_write+0x152/0x260
[  609.356013][T21516]  ? __ia32_sys_read+0x80/0x80
[  609.360804][T21516]  ? lockdep_hardirqs_on+0x94/0x140
[  609.366036][T21516]  do_syscall_64+0x4c/0xa0
[  609.372911][T21516]  ? clear_bhb_loop+0x30/0x80
[  609.377623][T21516]  ? clear_bhb_loop+0x30/0x80
[  609.382333][T21516]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  609.388288][T21516] RIP: 0033:0x7fd6b3af7e59
[  609.392849][T21516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.412485][T21516] RSP: 002b:00007fd6b1d51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  609.420929][T21516] RAX: ffffffffffffffda RBX: 00007fd6b3d70fa0 RCX: 00007fd6b3af7e59
[  609.428934][T21516] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  609.436926][T21516] RBP: 00007fd6b1d51090 R08: 0000000000000000 R09: 0000000000000000
[  609.444924][T21516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.452914][T21516] R13: 00007fd6b3d71038 R14: 00007fd6b3d70fa0 R15: 00007ffd6e729b98
[  609.460928][T21516]  </TASK>
[  609.679857][T21529] FAULT_INJECTION: forcing a failure.
[  609.679857][T21529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.711767][T21529] CPU: 0 PID: 21529 Comm: syz.3.6399 Not tainted syzkaller #0
[  609.719306][T21529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.729398][T21529] Call Trace:
[  609.732706][T21529]  <TASK>
[  609.735671][T21529]  dump_stack_lvl+0x188/0x250
[  609.740405][T21529]  ? show_regs_print_info+0x20/0x20
[  609.745654][T21529]  ? load_image+0x400/0x400
[  609.750223][T21529]  ? __lock_acquire+0x7d10/0x7d10
[  609.755312][T21529]  should_fail+0x38c/0x4c0
[  609.759818][T21529]  _copy_from_user+0x2e/0x170
[  609.764551][T21529]  __copy_msghdr_from_user+0xc9/0x630
[  609.771613][T21529]  ? verify_lock_unused+0x140/0x140
[  609.776881][T21529]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  609.782274][T21529]  ___sys_sendmsg+0x19a/0x2e0
[  609.787036][T21529]  ? __sys_sendmsg+0x2a0/0x2a0
[  609.792026][T21529]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  609.798747][T21529]  __se_sys_sendmsg+0x1af/0x290
[  609.803663][T21529]  ? __x64_sys_sendmsg+0x80/0x80
[  609.808659][T21529]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  609.814724][T21529]  ? lockdep_hardirqs_on+0x94/0x140
[  609.819997][T21529]  do_syscall_64+0x4c/0xa0
[  609.824473][T21529]  ? clear_bhb_loop+0x30/0x80
[  609.829210][T21529]  ? clear_bhb_loop+0x30/0x80
[  609.833942][T21529]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  609.839887][T21529] RIP: 0033:0x7fadc514ce59
[  609.844345][T21529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.864014][T21529] RSP: 002b:00007fadc33a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  609.872509][T21529] RAX: ffffffffffffffda RBX: 00007fadc53c5fa0 RCX: 00007fadc514ce59
[  609.880510][T21529] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000c
[  609.888510][T21529] RBP: 00007fadc33a6090 R08: 0000000000000000 R09: 0000000000000000
[  609.896510][T21529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.904504][T21529] R13: 00007fadc53c6038 R14: 00007fadc53c5fa0 R15: 00007ffea9fef608
[  609.912540][T21529]  </TASK>
[  610.609439][T21558] tun0: tun_chr_ioctl cmd 1074812117
[  610.632563][T21558] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6412'.
[  610.679155][T21560] netlink: 'syz.1.6413': attribute type 29 has an invalid length.
[  610.714309][T21560] netlink: 'syz.1.6413': attribute type 29 has an invalid length.
[  610.756183][T21561] netlink: 'syz.1.6413': attribute type 29 has an invalid length.
[  610.765843][T21560] netlink: 'syz.1.6413': attribute type 29 has an invalid length.
[  610.775519][T21560] netlink: 'syz.1.6413': attribute type 29 has an invalid length.
[  610.913942][T21567] FAULT_INJECTION: forcing a failure.
[  610.913942][T21567] name failslab, interval 1, probability 0, space 0, times 0
[  610.981873][T21574] tun0: tun_chr_ioctl cmd 1074025677
[  610.987537][T21574] tun0: linktype set to 6
[  611.001798][T21567] CPU: 0 PID: 21567 Comm: syz.2.6416 Not tainted syzkaller #0
[  611.009409][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  611.019501][T21567] Call Trace:
[  611.022828][T21567]  <TASK>
[  611.025792][T21567]  dump_stack_lvl+0x188/0x250
[  611.030525][T21567]  ? show_regs_print_info+0x20/0x20
[  611.035779][T21567]  ? load_image+0x400/0x400
[  611.040339][T21567]  ? __might_sleep+0xf0/0xf0
[  611.044971][T21567]  ? __lock_acquire+0x7d10/0x7d10
[  611.050045][T21567]  should_fail+0x38c/0x4c0
[  611.054509][T21567]  should_failslab+0x5/0x20
[  611.059051][T21567]  slab_pre_alloc_hook+0x51/0xc0
[  611.064020][T21567]  __kmalloc_node_track_caller+0x68/0x3a0
[  611.069766][T21567]  ? netlink_sendmsg+0x654/0xbe0
[  611.074735][T21567]  ? kmem_cache_alloc_node+0x162/0x2d0
[  611.080225][T21567]  ? __alloc_skb+0xf4/0x750
[  611.084756][T21567]  ? netlink_sendmsg+0x654/0xbe0
[  611.089743][T21567]  __alloc_skb+0x22c/0x750
[  611.094210][T21567]  netlink_sendmsg+0x654/0xbe0
[  611.099044][T21567]  ? netlink_getsockopt+0x570/0x570
[  611.104268][T21567]  ? aa_sock_msg_perm+0x94/0x150
[  611.109243][T21567]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  611.114566][T21567]  ? security_socket_sendmsg+0x7c/0xa0
[  611.120062][T21567]  ? netlink_getsockopt+0x570/0x570
[  611.125285][T21567]  ____sys_sendmsg+0x5b7/0x8f0
[  611.130094][T21567]  ? __sys_sendmsg_sock+0x30/0x30
[  611.135186][T21567]  ? import_iovec+0x6f/0xa0
[  611.139745][T21567]  ___sys_sendmsg+0x236/0x2e0
[  611.144463][T21567]  ? __sys_sendmsg+0x2a0/0x2a0
[  611.149273][T21567]  ? vfs_write+0x8b2/0xd60
[  611.153753][T21567]  __se_sys_sendmsg+0x1af/0x290
[  611.158636][T21567]  ? __x64_sys_sendmsg+0x80/0x80
[  611.163597][T21567]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  611.169657][T21567]  ? lockdep_hardirqs_on+0x94/0x140
[  611.174922][T21567]  do_syscall_64+0x4c/0xa0
[  611.179362][T21567]  ? clear_bhb_loop+0x30/0x80
[  611.184061][T21567]  ? clear_bhb_loop+0x30/0x80
[  611.188772][T21567]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  611.194770][T21567] RIP: 0033:0x7f4cc8e14e59
[  611.199206][T21567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.218832][T21567] RSP: 002b:00007f4cc706e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.227271][T21567] RAX: ffffffffffffffda RBX: 00007f4cc908dfa0 RCX: 00007f4cc8e14e59
[  611.235267][T21567] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
[  611.243272][T21567] RBP: 00007f4cc706e090 R08: 0000000000000000 R09: 0000000000000000
[  611.251258][T21567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.259243][T21567] R13: 00007f4cc908e038 R14: 00007f4cc908dfa0 R15: 00007ffcb4d6a128
[  611.267264][T21567]  </TASK>
[  611.283995][T21574] netlink: 186996 bytes leftover after parsing attributes in process `syz.4.6419'.
[  611.669346][T21603] netlink: set zone limit has 8 unknown bytes
[  611.870107][T21610] netlink: 'syz.3.6441': attribute type 3 has an invalid length.
[  611.932369][T21610] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6441'.
[  611.950834][T21612] netlink: 'syz.1.6433': attribute type 29 has an invalid length.
[  611.983642][T21612] netlink: 'syz.1.6433': attribute type 29 has an invalid length.
[  612.990211][T21639] netlink: 'syz.1.6442': attribute type 29 has an invalid length.
[  613.023514][T21639] netlink: 'syz.1.6442': attribute type 29 has an invalid length.
[  613.218246][T21653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6446'.
[  613.227785][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6446'.
[  613.240856][T21650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6445'.
[  613.886030][T21673] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6454'.
[  613.939555][T21676] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  614.079520][T21683] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6456'.
[  614.165056][T21683] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6456'.
[  614.460915][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6457'.
[  614.484336][T21692] device team0 entered promiscuous mode
[  614.490405][T21692] device team_slave_0 entered promiscuous mode
[  614.504332][T21692] device team_slave_1 entered promiscuous mode
[  614.520413][T21692] bridge0: port 3(team0) entered blocking state
[  614.527937][T21692] bridge0: port 3(team0) entered disabled state
[  614.546901][T21692] bridge0: port 3(team0) entered blocking state
[  614.553521][T21692] bridge0: port 3(team0) entered forwarding state
[  615.530726][T21707] team0: Port device macvlan0 added
[  615.564038][T21707] syz.3.6464 (21707) used greatest stack depth: 18000 bytes left
[  615.706054][T21725] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6470'.
[  616.011800][T21738] validate_nla: 13 callbacks suppressed
[  616.011822][T21738] netlink: 'syz.3.6475': attribute type 3 has an invalid length.
[  616.046283][T21738] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6475'.
[  616.076418][T21741] netlink: 'syz.3.6475': attribute type 29 has an invalid length.
[  616.095319][T21741] netlink: 'syz.3.6475': attribute type 29 has an invalid length.
[  616.121785][T21738] netlink: 'syz.3.6475': attribute type 29 has an invalid length.
[  617.344663][T21747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6479'.
[  617.359983][T21765] netlink: 'syz.2.6485': attribute type 2 has an invalid length.
[  617.371964][T21765] netlink: 'syz.2.6485': attribute type 8 has an invalid length.
[  617.380935][T21765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6485'.
[  617.415005][T21768] netlink: 'syz.1.6486': attribute type 10 has an invalid length.
[  617.433655][T21768] bridge0: port 3(dummy0) entered disabled state
[  617.440174][T21768] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.447668][T21768] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.556661][T21768] bridge0: port 3(dummy0) entered blocking state
[  617.563132][T21768] bridge0: port 3(dummy0) entered forwarding state
[  617.569832][T21768] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.576968][T21768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.584330][T21768] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.591441][T21768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.623105][T21768] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  618.058105][T21802] device syzkaller0 entered promiscuous mode
[  619.471591][T21839] netlink: 'syz.1.6513': attribute type 3 has an invalid length.
[  619.502097][T21839] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6513'.
[  620.286235][T21864] FAULT_INJECTION: forcing a failure.
[  620.286235][T21864] name failslab, interval 1, probability 0, space 0, times 0
[  620.360952][T21864] CPU: 1 PID: 21864 Comm: syz.4.6522 Not tainted syzkaller #0
[  620.368505][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  620.378592][T21864] Call Trace:
[  620.381901][T21864]  <TASK>
[  620.384858][T21864]  dump_stack_lvl+0x188/0x250
[  620.389576][T21864]  ? show_regs_print_info+0x20/0x20
[  620.394805][T21864]  ? load_image+0x400/0x400
[  620.399351][T21864]  ? __might_sleep+0xf0/0xf0
[  620.403991][T21864]  ? __lock_acquire+0x7d10/0x7d10
[  620.409053][T21864]  ? netlink_insert+0xe95/0x11f0
[  620.414035][T21864]  should_fail+0x38c/0x4c0
[  620.418488][T21864]  should_failslab+0x5/0x20
[  620.423025][T21864]  slab_pre_alloc_hook+0x51/0xc0
[  620.428004][T21864]  kmem_cache_alloc_node+0x47/0x2d0
[  620.433229][T21864]  ? __alloc_skb+0xf4/0x750
[  620.437773][T21864]  __alloc_skb+0xf4/0x750
[  620.442139][T21864]  netlink_sendmsg+0x654/0xbe0
[  620.446968][T21864]  ? netlink_getsockopt+0x570/0x570
[  620.452225][T21864]  ? aa_sock_msg_perm+0x94/0x150
[  620.457218][T21864]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  620.462528][T21864]  ? security_socket_sendmsg+0x7c/0xa0
[  620.468020][T21864]  ? netlink_getsockopt+0x570/0x570
[  620.473274][T21864]  ____sys_sendmsg+0x5b7/0x8f0
[  620.478077][T21864]  ? __sys_sendmsg_sock+0x30/0x30
[  620.483152][T21864]  ? import_iovec+0x6f/0xa0
[  620.487703][T21864]  ___sys_sendmsg+0x236/0x2e0
[  620.492438][T21864]  ? __sys_sendmsg+0x2a0/0x2a0
[  620.497244][T21864]  ? ktime_get_real_ts64+0x440/0x440
[  620.502583][T21864]  __se_sys_sendmsg+0x1af/0x290
[  620.507473][T21864]  ? __x64_sys_sendmsg+0x80/0x80
[  620.512495][T21864]  ? syscall_enter_from_user_mode+0x2a/0x70
[  620.518463][T21864]  do_syscall_64+0x4c/0xa0
[  620.522912][T21864]  ? clear_bhb_loop+0x30/0x80
[  620.527625][T21864]  ? clear_bhb_loop+0x30/0x80
[  620.532335][T21864]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  620.538259][T21864] RIP: 0033:0x7fcc6498ce59
[  620.542700][T21864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.562334][T21864] RSP: 002b:00007fcc62bc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  620.570796][T21864] RAX: ffffffffffffffda RBX: 00007fcc64c06090 RCX: 00007fcc6498ce59
[  620.578801][T21864] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  620.586847][T21864] RBP: 00007fcc62bc5090 R08: 0000000000000000 R09: 0000000000000000
[  620.594850][T21864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.602844][T21864] R13: 00007fcc64c06128 R14: 00007fcc64c06090 R15: 00007fff4f5387e8
[  620.610879][T21864]  </TASK>
[  621.454912][T21909] FAULT_INJECTION: forcing a failure.
[  621.454912][T21909] name failslab, interval 1, probability 0, space 0, times 0
[  621.467749][T21909] CPU: 1 PID: 21909 Comm: syz.1.6539 Not tainted syzkaller #0
[  621.475246][T21909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  621.485327][T21909] Call Trace:
[  621.488635][T21909]  <TASK>
[  621.491579][T21909]  dump_stack_lvl+0x188/0x250
[  621.496290][T21909]  ? show_regs_print_info+0x20/0x20
[  621.501547][T21909]  ? load_image+0x400/0x400
[  621.506086][T21909]  ? verify_lock_unused+0x140/0x140
[  621.511332][T21909]  should_fail+0x38c/0x4c0
[  621.515790][T21909]  should_failslab+0x5/0x20
[  621.520329][T21909]  slab_pre_alloc_hook+0x51/0xc0
[  621.525304][T21909]  ? inet_frag_find+0x891/0x1d30
[  621.530281][T21909]  kmem_cache_alloc+0x3d/0x290
[  621.535082][T21909]  inet_frag_find+0x891/0x1d30
[  621.539900][T21909]  ? ip6frag_obj_hashfn+0x20/0x20
[  621.544962][T21909]  ? inet_frag_destroy_rcu+0xc0/0xc0
[  621.550297][T21909]  nf_ct_frag6_gather+0x670/0x1d80
[  621.555468][T21909]  ? ipv6_defrag+0x3a0/0x3a0
[  621.560112][T21909]  ipv6_defrag+0x2a5/0x3a0
[  621.564555][T21909]  ? defrag6_net_exit+0xb0/0xb0
[  621.569437][T21909]  nf_hook_slow+0xb9/0x200
[  621.573892][T21909]  ? refcount_add+0x80/0x80
[  621.578424][T21909]  NF_HOOK+0x1f2/0x390
[  621.582517][T21909]  ? refcount_add+0x80/0x80
[  621.587053][T21909]  ? ip6_rcv_core+0x1620/0x1620
[  621.591928][T21909]  ? refcount_add+0x80/0x80
[  621.596465][T21909]  ? ip6_rcv_finish_core+0x420/0x420
[  621.601802][T21909]  __netif_receive_skb+0xcc/0x290
[  621.606870][T21909]  ? ktime_get_with_offset+0x2d7/0x320
[  621.612361][T21909]  netif_receive_skb+0x19e/0x700
[  621.617330][T21909]  ? netif_receive_skb_core+0x210/0x210
[  621.622907][T21909]  ? rcu_nmi_exit+0x6f/0xf0
[  621.627453][T21909]  tun_rx_batched+0x5fb/0x760
[  621.632175][T21909]  ? local_bh_enable+0x20/0x20
[  621.636967][T21909]  ? __local_bh_enable_ip+0x136/0x1c0
[  621.642375][T21909]  ? read_lock_is_recursive+0x10/0x10
[  621.647781][T21909]  ? __local_bh_enable_ip+0x136/0x1c0
[  621.653183][T21909]  ? _local_bh_enable+0xa0/0xa0
[  621.658165][T21909]  ? skb_copy_datagram_from_iter+0x5ab/0x6a0
[  621.664196][T21909]  tun_get_user+0x2517/0x3a70
[  621.668942][T21909]  ? tun_ring_recv+0xc40/0xc40
[  621.673895][T21909]  ? rcu_lock_release+0x5/0x20
[  621.678693][T21909]  ? __lock_acquire+0x7d10/0x7d10
[  621.683773][T21909]  tun_chr_write_iter+0x112/0x1e0
[  621.688955][T21909]  vfs_write+0x745/0xd60
[  621.693245][T21909]  ? file_end_write+0x250/0x250
[  621.698133][T21909]  ? __fget_files+0x40f/0x480
[  621.702842][T21909]  ? __fdget_pos+0x1e2/0x370
[  621.707452][T21909]  ? ksys_write+0x71/0x260
[  621.711982][T21909]  ksys_write+0x152/0x260
[  621.716370][T21909]  ? __ia32_sys_read+0x80/0x80
[  621.721177][T21909]  ? lockdep_hardirqs_on+0x94/0x140
[  621.726417][T21909]  do_syscall_64+0x4c/0xa0
[  621.730865][T21909]  ? clear_bhb_loop+0x30/0x80
[  621.735601][T21909]  ? clear_bhb_loop+0x30/0x80
[  621.740321][T21909]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  621.746255][T21909] RIP: 0033:0x7fd6b3af7e59
[  621.750721][T21909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.770364][T21909] RSP: 002b:00007fd6b1d51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  621.778818][T21909] RAX: ffffffffffffffda RBX: 00007fd6b3d70fa0 RCX: 00007fd6b3af7e59
[  621.786836][T21909] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  621.794844][T21909] RBP: 00007fd6b1d51090 R08: 0000000000000000 R09: 0000000000000000
[  621.802891][T21909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.810912][T21909] R13: 00007fd6b3d71038 R14: 00007fd6b3d70fa0 R15: 00007ffd6e729b98
[  621.818938][T21909]  </TASK>
[  623.119180][T21914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6540'.
[  623.407354][T21942] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6551'.
[  623.765358][T21940] device syzkaller0 entered promiscuous mode
[  641.041724][ T1108] Bluetooth: hci6: command 0x0409 tx timeout
[  641.048863][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  642.242359][ T1108] Bluetooth: hci7: command 0x0409 tx timeout
[  642.250042][ T1108] Bluetooth: hci9: command 0x0409 tx timeout
[  642.264078][ T1108] Bluetooth: hci8: command 0x0409 tx timeout
[  643.093345][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  643.111266][ T1108] Bluetooth: hci6: command 0x041b tx timeout
[  644.293566][ T1108] Bluetooth: hci8: command 0x041b tx timeout
[  644.312103][ T1108] Bluetooth: hci9: command 0x041b tx timeout
[  644.318218][ T1108] Bluetooth: hci7: command 0x041b tx timeout
[  645.193682][ T1108] Bluetooth: hci6: command 0x040f tx timeout
[  645.210969][ T1108] Bluetooth: hci4: command 0x040f tx timeout
[  646.393745][ T1108] Bluetooth: hci7: command 0x040f tx timeout
[  646.411392][ T1108] Bluetooth: hci9: command 0x040f tx timeout
[  646.417593][ T1108] Bluetooth: hci8: command 0x040f tx timeout
[  647.241617][ T1108] Bluetooth: hci4: command 0x0419 tx timeout
[  647.247711][ T1108] Bluetooth: hci6: command 0x0419 tx timeout
[  648.441682][ T1108] Bluetooth: hci8: command 0x0419 tx timeout
[  648.447781][ T1108] Bluetooth: hci9: command 0x0419 tx timeout
[  648.467025][ T1108] Bluetooth: hci7: command 0x0419 tx timeout
[  662.241627][T18317] Bluetooth: hci1: command 0x0406 tx timeout
[  677.593861][ T4232] Bluetooth: hci2: command 0x0406 tx timeout
[  698.041572][T18317] Bluetooth: hci3: command 0x0406 tx timeout
[  701.241576][ T4232] Bluetooth: hci10: command 0x0409 tx timeout
[  701.248511][ T4232] Bluetooth: hci11: command 0x0409 tx timeout
[  702.441624][ T4232] Bluetooth: hci13: command 0x0409 tx timeout
[  702.541652][ T4232] Bluetooth: hci12: command 0x0409 tx timeout
[  702.547880][ T4232] Bluetooth: hci14: command 0x0409 tx timeout
[  703.341596][ T4232] Bluetooth: hci11: command 0x041b tx timeout
[  703.351600][ T4232] Bluetooth: hci10: command 0x041b tx timeout
[  704.541661][ T4232] Bluetooth: hci13: command 0x041b tx timeout
[  704.641570][ T4232] Bluetooth: hci14: command 0x041b tx timeout
[  704.651639][ T4232] Bluetooth: hci12: command 0x041b tx timeout
[  705.441572][ T4232] Bluetooth: hci10: command 0x040f tx timeout
[  705.449609][ T4232] Bluetooth: hci11: command 0x040f tx timeout
[  706.641548][ T4232] Bluetooth: hci13: command 0x040f tx timeout
[  706.693460][ T4232] Bluetooth: hci12: command 0x040f tx timeout
[  706.710611][ T4232] Bluetooth: hci14: command 0x040f tx timeout
[  707.491667][ T4232] Bluetooth: hci11: command 0x0419 tx timeout
[  707.498375][ T4232] Bluetooth: hci10: command 0x0419 tx timeout
[  708.291680][ T4232] Bluetooth: hci5: command 0x0406 tx timeout
[  708.691619][ T4232] Bluetooth: hci13: command 0x0419 tx timeout
[  708.793769][ T4232] Bluetooth: hci14: command 0x0419 tx timeout
[  708.812160][ T4232] Bluetooth: hci12: command 0x0419 tx timeout
[  728.841361][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  728.848368][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P21942
[  728.856238][    C1] 	(detected by 1, t=10502 jiffies, g=89165, q=1129)
[  728.862948][    C1] task:syz.0.6551      state:R  running task     stack:22992 pid:21942 ppid: 20633 flags:0x0000400c
[  728.874446][    C1] Call Trace:
[  728.877760][    C1]  <TASK>
[  728.880737][    C1]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  728.886487][    C1]  ? perf_trace_preemptirq_template+0x164/0x360
[  728.892757][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  728.897897][    C1]  ? trace_event_raw_event_preemptirq_template+0x290/0x290
[  728.905114][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  728.911129][    C1]  ? lock_chain_count+0x20/0x20
[  728.916007][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  728.921147][    C1]  ? trace_irq_enable_rcuidle+0x108/0x180
[  728.926896][    C1]  ? trace_hardirqs_on+0x57/0x80
[  728.931856][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  728.937008][    C1]  ? rcu_read_unlock_special+0x7f/0x4a0
[  728.942596][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  728.947572][    C1]  ? __d_lookup_rcu+0x68a/0x760
[  728.952552][    C1]  ? read_seqbegin+0x1ac/0x210
[  728.957362][    C1]  ? __rwlock_init+0x140/0x140
[  728.962154][    C1]  ? __rcu_read_unlock+0x78/0xd0
[  728.967114][    C1]  ? d_alloc_parallel+0x107b/0x1330
[  728.972341][    C1]  ? __init_waitqueue_head+0xa5/0x150
[  728.977741][    C1]  ? __lookup_slow+0x134/0x410
[  728.982535][    C1]  ? lookup_one_len+0x2d0/0x2d0
[  728.987438][    C1]  ? lookup_one_len+0x19d/0x2d0
[  728.992323][    C1]  ? lookup_one_common+0x460/0x460
[  728.997466][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  729.002729][    C1]  ? mntput+0x64/0xc0
[  729.006742][    C1]  ? start_creating+0x184/0x310
[  729.011727][    C1]  ? __debugfs_create_file+0x6f/0x510
[  729.017137][    C1]  ? debugfs_hw_add+0x3c6/0x420
[  729.022051][    C1]  ? ieee80211_register_hw+0x2ac6/0x3af0
[  729.027722][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  729.033003][    C1]  ? ieee80211_tasklet_handler+0x20/0x20
[  729.038718][    C1]  ? rcu_is_watching+0x11/0xa0
[  729.043517][    C1]  ? memset+0x1e/0x40
[  729.047547][    C1]  ? hrtimer_init+0x10c/0x220
[  729.052271][    C1]  ? mac80211_hwsim_new_radio+0x20d3/0x4080
[  729.058220][    C1]  ? hwsim_new_radio_nl+0xa6f/0xc40
[  729.063476][    C1]  ? genl_rcv_msg+0xcea/0xf90
[  729.068185][    C1]  ? lock_chain_count+0x20/0x20
[  729.073073][    C1]  ? genl_bind+0x380/0x380
[  729.077525][    C1]  ? verify_lock_unused+0x140/0x140
[  729.082751][    C1]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  729.089381][    C1]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  729.096051][    C1]  ? netlink_rcv_skb+0x1f5/0x440
[  729.101035][    C1]  ? genl_bind+0x380/0x380
[  729.105488][    C1]  ? netlink_ack+0xb50/0xb50
[  729.110106][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  729.115156][    C1]  ? down_read+0x1aa/0x2e0
[  729.119613][    C1]  ? genl_rcv+0x24/0x40
[  729.123797][    C1]  ? netlink_unicast+0x774/0x920
[  729.128766][    C1]  ? netlink_sendmsg+0x8ba/0xbe0
[  729.133741][    C1]  ? netlink_getsockopt+0x570/0x570
[  729.138964][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  729.143935][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  729.149252][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  729.154733][    C1]  ? netlink_getsockopt+0x570/0x570
[  729.159944][    C1]  ? ____sys_sendmsg+0x5b7/0x8f0
[  729.164913][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  729.169975][    C1]  ? import_iovec+0x6f/0xa0
[  729.174539][    C1]  ? ___sys_sendmsg+0x236/0x2e0
[  729.179429][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  729.184226][    C1]  ? percpu_counter_add_batch+0x13b/0x160
[  729.190003][    C1]  ? __se_sys_sendmsg+0x1af/0x290
[  729.195055][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  729.200019][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  729.206032][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  729.211256][    C1]  ? do_syscall_64+0x4c/0xa0
[  729.215869][    C1]  ? clear_bhb_loop+0x30/0x80
[  729.220582][    C1]  ? clear_bhb_loop+0x30/0x80
[  729.225286][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  729.231403][    C1]  </TASK>
[  729.234448][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g89165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  729.246784][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=43644
[  729.254677][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g89165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  729.266060][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  729.276044][    C1] rcu: RCU grace-period kthread stack dump:
[  729.281962][    C1] task:rcu_preempt     state:I stack:27152 pid:   15 ppid:     2 flags:0x00004000
[  729.291202][    C1] Call Trace:
[  729.294497][    C1]  <TASK>
[  729.297458][    C1]  __schedule+0x11ef/0x43c0
[  729.302000][    C1]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  729.307494][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  729.313426][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  729.318652][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  729.324573][    C1]  ? _raw_spin_unlock+0x40/0x40
[  729.329452][    C1]  ? release_firmware_map_entry+0x190/0x190
[  729.335383][    C1]  ? __mod_timer+0x91e/0xd00
[  729.340010][    C1]  schedule+0x11b/0x1e0
[  729.344194][    C1]  schedule_timeout+0x184/0x2d0
[  729.349078][    C1]  ? console_conditional_schedule+0x40/0x40
[  729.355009][    C1]  ? update_process_times+0x200/0x200
[  729.360431][    C1]  ? prepare_to_swait_event+0x331/0x350
[  729.366002][    C1]  rcu_gp_fqs_loop+0x2be/0x11d0
[  729.370895][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  729.376128][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  729.381352][    C1]  ? rcu_gp_init+0xd6c/0x10f0
[  729.386051][    C1]  ? rcu_gp_init+0x10f0/0x10f0
[  729.390856][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  729.396090][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  729.401312][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  729.406537][    C1]  rcu_gp_kthread+0x9b/0x370
[  729.411156][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  729.417073][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  729.422207][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  729.428141][    C1]  ? __kthread_parkme+0x157/0x1b0
[  729.433195][    C1]  kthread+0x436/0x520
[  729.437283][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  729.442419][    C1]  ? kthread_blkcg+0xd0/0xd0
[  729.447032][    C1]  ret_from_fork+0x1f/0x30
[  729.451518][    C1]  </TASK>
[  729.454566][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  729.460904][    C1] Sending NMI from CPU 1 to CPUs 0:
[  729.466156][    C0] NMI backtrace for cpu 0
[  729.466166][    C0] CPU: 0 PID: 21942 Comm: syz.0.6551 Not tainted syzkaller #0
[  729.466183][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  729.466193][    C0] RIP: 0010:tracing_gen_ctx_irq_test+0xdb/0x130
[  729.466260][    C0] Code: fc ff 41 0f b6 c4 83 f8 0f 41 bc 0f 00 00 00 41 0f 43 c4 48 81 c3 38 04 00 00 48 89 d9 48 c1 e9 03 42 0f b6 0c 39 84 c9 75 34 <8b> 0b 66 83 f9 0f 44 0f 42 e1 41 c1 e4 04 41 c1 e6 10 44 89 f1 81
[  729.466275][    C0] RSP: 0018:ffffc9000307e748 EFLAGS: 00000046
[  729.466290][    C0] RAX: 0000000000000002 RBX: ffff888022e73fb8 RCX: 0000000000000000
[  729.466302][    C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000000
[  729.466312][    C0] RBP: 0000000000000002 R08: ffff888022e73b87 R09: 1ffff110045ce770
[  729.466324][    C0] R10: dffffc0000000000 R11: ffffed10045ce771 R12: 000000000000000f
[  729.466336][    C0] R13: 0000000000000000 R14: 0000000000000005 R15: dffffc0000000000
[  729.466347][    C0] FS:  00007f215f4836c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  729.466363][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  729.466375][    C0] CR2: 0000001b30323ffc CR3: 000000004bd89000 CR4: 00000000003506f0
[  729.466390][    C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
[  729.466403][    C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  729.466414][    C0] Call Trace:
[  729.466420][    C0]  <TASK>
[  729.466430][    C0]  perf_trace_buf_update+0xa8/0x230
[  729.466472][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[  729.466490][    C0]  ? __perf_event_overflow+0x415/0x530
[  729.466512][    C0]  perf_tp_event+0x1a2/0xbf0
[  729.466531][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  729.466550][    C0]  ? perf_tp_event+0xa92/0xbf0
[  729.466588][    C0]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  729.466609][    C0]  perf_trace_preemptirq_template+0x2aa/0x360
[  729.466629][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  729.466648][    C0]  ? trace_event_raw_event_preemptirq_template+0x290/0x290
[  729.466667][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  729.466689][    C0]  ? lock_chain_count+0x20/0x20
[  729.466709][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  729.466726][    C0]  trace_irq_enable_rcuidle+0x108/0x180
[  729.466746][    C0]  trace_hardirqs_on+0x57/0x80
[  729.466762][    C0]  asm_sysvec_irq_work+0x16/0x20
[  729.466780][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0
[  729.466798][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 f2 cc 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  729.466812][    C0] RSP: 0018:ffffc9000307ece0 EFLAGS: 00000206
[  729.466825][    C0] RAX: e91472b23f738a00 RBX: 1ffff9200060fda0 RCX: e91472b23f738a00
[  729.466838][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0
[  729.466851][    C0] RBP: ffffc9000307edb8 R08: ffffffff901d80e7 R09: 1ffffffff203b01c
[  729.466881][    C0] R10: dffffc0000000000 R11: fffffbfff203b01d R12: 0000000000000000
[  729.466894][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8c3238a0
[  729.466917][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  729.466934][    C0]  ? __d_lookup_rcu+0x68a/0x760
[  729.466952][    C0]  ? read_seqbegin+0x1ac/0x210
[  729.466970][    C0]  ? __rwlock_init+0x140/0x140
[  729.466990][    C0]  __rcu_read_unlock+0x78/0xd0
[  729.467013][    C0]  d_alloc_parallel+0x107b/0x1330
[  729.467037][    C0]  ? __init_waitqueue_head+0xa5/0x150
[  729.467059][    C0]  __lookup_slow+0x134/0x410
[  729.467079][    C0]  ? lookup_one_len+0x2d0/0x2d0
[  729.467106][    C0]  lookup_one_len+0x19d/0x2d0
[  729.467125][    C0]  ? lookup_one_common+0x460/0x460
[  729.467143][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[  729.467160][    C0]  ? mntput+0x64/0xc0
[  729.467190][    C0]  start_creating+0x184/0x310
[  729.467213][    C0]  __debugfs_create_file+0x6f/0x510
[  729.467235][    C0]  debugfs_hw_add+0x3c6/0x420
[  729.467255][    C0]  ieee80211_register_hw+0x2ac6/0x3af0
[  729.467275][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  729.467302][    C0]  ? ieee80211_tasklet_handler+0x20/0x20
[  729.467324][    C0]  ? rcu_is_watching+0x11/0xa0
[  729.467341][    C0]  ? memset+0x1e/0x40
[  729.467355][    C0]  ? hrtimer_init+0x10c/0x220
[  729.467376][    C0]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  729.467408][    C0]  hwsim_new_radio_nl+0xa6f/0xc40
[  729.467435][    C0]  genl_rcv_msg+0xcea/0xf90
[  729.467453][    C0]  ? lock_chain_count+0x20/0x20
[  729.467476][    C0]  ? genl_bind+0x380/0x380
[  729.467500][    C0]  ? verify_lock_unused+0x140/0x140
[  729.467520][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  729.467564][    C0]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  729.467594][    C0]  netlink_rcv_skb+0x1f5/0x440
[  729.467611][    C0]  ? genl_bind+0x380/0x380
[  729.467629][    C0]  ? netlink_ack+0xb50/0xb50
[  729.467646][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  729.467669][    C0]  ? down_read+0x1aa/0x2e0
[  729.467689][    C0]  genl_rcv+0x24/0x40
[  729.467705][    C0]  netlink_unicast+0x774/0x920
[  729.467727][    C0]  netlink_sendmsg+0x8ba/0xbe0
[  729.467749][    C0]  ? netlink_getsockopt+0x570/0x570
[  729.467767][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  729.467787][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  729.467805][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  729.467824][    C0]  ? netlink_getsockopt+0x570/0x570
[  729.467840][    C0]  ____sys_sendmsg+0x5b7/0x8f0
[  729.467865][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[  729.467890][    C0]  ? import_iovec+0x6f/0xa0
[  729.467911][    C0]  ___sys_sendmsg+0x236/0x2e0
[  729.467936][    C0]  ? __sys_sendmsg+0x2a0/0x2a0
[  729.467960][    C0]  ? percpu_counter_add_batch+0x13b/0x160
[  729.468000][    C0]  __se_sys_sendmsg+0x1af/0x290
[  729.468032][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  729.468049][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  729.468075][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  729.468095][    C0]  do_syscall_64+0x4c/0xa0
[  729.468111][    C0]  ? clear_bhb_loop+0x30/0x80
[  729.468127][    C0]  ? clear_bhb_loop+0x30/0x80
[  729.468144][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  729.468161][    C0] RIP: 0033:0x7f2161229e59
[  729.468179][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.468193][    C0] RSP: 002b:00007f215f483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.468209][    C0] RAX: ffffffffffffffda RBX: 00007f21614a2fa0 RCX: 00007f2161229e59
[  729.468222][    C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  729.468233][    C0] RBP: 00007f21612bfd6f R08: 0000000000000000 R09: 0000000000000000
[  729.468243][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  729.468254][    C0] R13: 00007f21614a3038 R14: 00007f21614a2fa0 R15: 00007ffc8294c2b8
[  729.468274][    C0]  </TASK>