last executing test programs:

2.069576709s ago: executing program 3 (id=1538):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071"], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

1.931532352s ago: executing program 0 (id=1541):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="03", 0x1}], 0x1}, 0x2400c041)

1.849534385s ago: executing program 3 (id=1542):
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048010)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000001, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffdffffffffffffe, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841)
sendmsg$inet(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000080), 0x0}, 0x20)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x94)

1.727688828s ago: executing program 0 (id=1544):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0xff, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2001, 0x32, 0x43e1bd74, 0x7, 0x8, 0x4, 0x2, 0x0, 0x0, 0x0, 0x748}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)

1.681278249s ago: executing program 3 (id=1545):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000000), 0xff7b)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8)
ioctl$TUNSETIFF(r4, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94)
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b5", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000001c", @ANYRES32], 0x50)
socket$kcm(0x2, 0x5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

1.524458142s ago: executing program 2 (id=1547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0xffffff30, &(0x7f0000000280)="76389e6a65585578dd30e90000db0b06e7f81727c7182709e03737454b1dc90131b993cb0a80e25d532034428a01baaa3239f4edac8a514efc53372d76141b75060a61080ca8a5631a3bb1ca0fcdb786f3b1ec048fc7dbc0c8d069ae4297fce5642f8db110246083be7610bc144033f76d8180659f17ad038d3b29e0d221856227d2cb7627627e4c5523d689144142605a4c212d0000000000000001e53e1059b93dce96e2d0e646a471bb4d64114b68f328d6acad8c4555488ef298cb140d4f377814bb939b54da07ff66ce78a70920ed95cd82a612b190a60f3e0ff72641df969038418c89e4de4bd9920d00c800000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, 0x50)

1.438218655s ago: executing program 2 (id=1549):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26504, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x5b, &(0x7f00000001c0)}, 0x10)
r5 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x8, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)

1.426151735s ago: executing program 0 (id=1550):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071"], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

1.123455673s ago: executing program 3 (id=1551):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd", 0x1a}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000b000000000000030000000000000003000000040000000300000000000000000000020000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28)

1.123048453s ago: executing program 3 (id=1552):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x41}, 0x80, 0x0}, 0x20048015)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="015e0c0058ed071b0000000000000070", 0x10}], 0x1}, 0x400c0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x57, &(0x7f0000000000), 0x1}, 0x40000100)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0xa0080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x1}, 0x8092, 0x20000003, 0x1ff, 0x4, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x44000000002008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x2, 0x5, 0x84)
write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="77b867303232"], 0x6)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000006c0)="27033bb25cc37b857d356ce300", 0xd}, {&(0x7f0000002bc0)="d9a031d4f7c91eb46997eb5647ba8a055c4534f929c7d10ec1c22ed31a576e3a48a6816f7335527f", 0x28}], 0x2}, 0x45)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000300)=[{0x4, 0x2, 0x2, 0x7f}]})
ioctl$TUNGETVNETLE(r6, 0x40107447, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f1a000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701001bf8ffffffb702000008000000b70300000000000085000027f597480e07"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
r10 = socket$kcm(0x2, 0x2, 0x0)
recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
r11 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x5}, 0x80, 0x9, 0xfffffeff, 0x8, 0xef, 0x5, 0x0, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r9, 0x2)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r11, 0x80082407, &(0x7f0000000080))

953.192137ms ago: executing program 2 (id=1554):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x98}, 0x48)

925.124608ms ago: executing program 0 (id=1555):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r4})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={0x0, 0x0, 0x4008}, 0x18)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="e5ffff"], 0xa0}, 0x4004881)
socket$kcm(0xa, 0x922000000003, 0x11)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

821.89429ms ago: executing program 2 (id=1556):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

736.109122ms ago: executing program 2 (id=1558):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0xff, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2001, 0x32, 0x43e1bd74, 0x7, 0x8, 0x4, 0x2, 0x0, 0x0, 0x0, 0x748}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)

668.201334ms ago: executing program 1 (id=1559):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xb0}, 0x94)

514.369087ms ago: executing program 1 (id=1560):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)

433.290669ms ago: executing program 1 (id=1561):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000003000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)

369.771422ms ago: executing program 0 (id=1562):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async, rerun: 64)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0xb, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) (async, rerun: 32)
close(r3) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x5865, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x61680}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r3, 0x0, 0x13, &(0x7f0000000580)='cgroup.controllers\x00'}, 0x30) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async, rerun: 64)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008d"], 0xfdef) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x0, '\x00', 0x0, r3, 0x3, 0x5, 0x1}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

312.325503ms ago: executing program 1 (id=1563):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071"], 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

263.222754ms ago: executing program 2 (id=1564):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$SIOCSIFHWADDR(r6, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast})

258.284494ms ago: executing program 0 (id=1565):
sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c7a4fac2c72fa1174fe6d97ee657558fb733b911010bc6964aba2458e4dc249d45a30f8783b3262424f30fbd562f78284a40bc1105ac0522e934cd672d817ad030c1ed38040e10f2878ecde283f7fcd1f47fce70540b51c97fd481fbc0960c0649d76a080ba51950bdc7a9edd96b26c2d710a21e6af02166146cf954c7e73b1f3c8ad41145de1277d9e0dbe1f91336f9f4d37873b2e1c51bc35e29ea3dc349c7c3345071bde48898784eeb08bfc2eea7624249164ef7edc3f834a22ebb", 0xbd}], 0x1}, 0x4000800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
close(r4)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000009c0)={0x2, 0x4001, @private=0xa010101}, 0x10, 0x0}, 0x30004040)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000700000000000000ffffffff85100000010000009500000000410000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

164.358176ms ago: executing program 1 (id=1566):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1, 0x0, 0xfd}, 0x0)

298.171µs ago: executing program 3 (id=1567):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x9, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x8}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x2c, 0x0, 0x28)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x1e, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9875, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @ldst={0x0, 0x2, 0x1, 0xb, 0x8, 0xffffffffffffffc0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x68, &(0x7f0000000280)=""/104, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x5, 0xfffffff9, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x2, 0xa}, {0x0, 0x5, 0x4, 0x2}, {0x0, 0x4, 0x0, 0x2}], 0x10, 0x2}, 0x94)

0s ago: executing program 1 (id=1568):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000ffd000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts.
[   75.448952][ T5759] cgroup: Unknown subsys name 'net'
[   75.619022][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.069645][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.822466][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.823053][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.847104][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.857432][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.859159][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.867592][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.882476][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.891563][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.893697][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.900475][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.915876][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.923034][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.924587][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.938312][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.947840][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.947916][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.956170][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.964084][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.978962][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.987402][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.988022][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.006186][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.021494][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.029371][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.452757][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   79.527400][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   79.545654][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   79.627173][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   79.704903][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.712654][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.722746][ T5770] bridge_slave_0: entered allmulticast mode
[   79.730777][ T5770] bridge_slave_0: entered promiscuous mode
[   79.784959][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.795863][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.803793][ T5770] bridge_slave_1: entered allmulticast mode
[   79.814096][ T5770] bridge_slave_1: entered promiscuous mode
[   79.823837][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.833074][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.843620][ T5774] bridge_slave_0: entered allmulticast mode
[   79.850970][ T5774] bridge_slave_0: entered promiscuous mode
[   79.870926][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.880738][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.889988][ T5771] bridge_slave_0: entered allmulticast mode
[   79.899638][ T5771] bridge_slave_0: entered promiscuous mode
[   79.908768][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.917601][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.927393][ T5771] bridge_slave_1: entered allmulticast mode
[   79.935087][ T5771] bridge_slave_1: entered promiscuous mode
[   79.954162][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.962336][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.971465][ T5774] bridge_slave_1: entered allmulticast mode
[   79.983222][ T5774] bridge_slave_1: entered promiscuous mode
[   80.034300][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.085521][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.100812][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.116315][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.130809][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.142003][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.150579][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.158336][ T5772] bridge_slave_0: entered allmulticast mode
[   80.166248][ T5772] bridge_slave_0: entered promiscuous mode
[   80.175093][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.182763][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.192090][ T5772] bridge_slave_1: entered allmulticast mode
[   80.200133][ T5772] bridge_slave_1: entered promiscuous mode
[   80.229262][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.277900][ T5770] team0: Port device team_slave_0 added
[   80.311153][ T5774] team0: Port device team_slave_0 added
[   80.332689][ T5770] team0: Port device team_slave_1 added
[   80.352500][ T5774] team0: Port device team_slave_1 added
[   80.365907][ T5771] team0: Port device team_slave_0 added
[   80.377441][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.414402][ T5771] team0: Port device team_slave_1 added
[   80.423722][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.446398][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.454017][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.481663][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.495922][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.504830][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.531642][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.602964][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.609954][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.640294][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.654559][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.663214][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.695794][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.710382][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.720743][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.751108][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.769051][ T5772] team0: Port device team_slave_0 added
[   80.779801][ T5772] team0: Port device team_slave_1 added
[   80.788054][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.796877][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.826685][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.895350][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.905053][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.932628][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.984615][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.995895][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.025692][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.042506][ T5770] hsr_slave_0: entered promiscuous mode
[   81.042979][ T5777] Bluetooth: hci2: command tx timeout
[   81.049058][ T5083] Bluetooth: hci0: command tx timeout
[   81.055539][ T5784] Bluetooth: hci3: command tx timeout
[   81.069686][ T5770] hsr_slave_1: entered promiscuous mode
[   81.083175][ T5774] hsr_slave_0: entered promiscuous mode
[   81.090878][ T5774] hsr_slave_1: entered promiscuous mode
[   81.098223][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.108174][ T5774] Cannot create hsr debugfs directory
[   81.120330][ T5771] hsr_slave_0: entered promiscuous mode
[   81.126506][ T5784] Bluetooth: hci1: command tx timeout
[   81.135107][ T5771] hsr_slave_1: entered promiscuous mode
[   81.142501][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.151462][ T5771] Cannot create hsr debugfs directory
[   81.252671][ T5772] hsr_slave_0: entered promiscuous mode
[   81.264754][ T5772] hsr_slave_1: entered promiscuous mode
[   81.272873][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.281352][ T5772] Cannot create hsr debugfs directory
[   81.662279][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.677230][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.690135][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.704877][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.775309][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.784901][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.796563][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.808070][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.922645][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.937155][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.948697][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.984763][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.077748][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.090084][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.118506][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.132123][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.157861][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.218406][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.265537][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   82.293080][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   82.308002][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.316866][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.353740][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.362520][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.375432][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.386312][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.438706][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.445931][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.518085][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.539775][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   82.568540][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.576522][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.599807][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.614245][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.622664][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.755571][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   82.784845][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.794236][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.834801][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.845841][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.016576][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.130502][ T5784] Bluetooth: hci0: command tx timeout
[   83.138922][ T5777] Bluetooth: hci3: command tx timeout
[   83.138936][ T5083] Bluetooth: hci2: command tx timeout
[   83.184286][ T5770] veth0_vlan: entered promiscuous mode
[   83.201938][ T5777] Bluetooth: hci1: command tx timeout
[   83.280773][ T5770] veth1_vlan: entered promiscuous mode
[   83.338524][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.437154][ T5770] veth0_macvtap: entered promiscuous mode
[   83.477347][ T5770] veth1_macvtap: entered promiscuous mode
[   83.500326][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.514545][ T5772] veth0_vlan: entered promiscuous mode
[   83.553749][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.567319][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.577604][ T5772] veth1_vlan: entered promiscuous mode
[   83.598974][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.643503][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.654154][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.663025][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.672645][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.706599][ T5772] veth0_macvtap: entered promiscuous mode
[   83.743064][ T5772] veth1_macvtap: entered promiscuous mode
[   83.790280][ T5774] veth0_vlan: entered promiscuous mode
[   83.847545][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.870172][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.883578][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.899239][ T5774] veth1_vlan: entered promiscuous mode
[   83.917416][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.931758][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.944074][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.964718][ T5771] veth0_vlan: entered promiscuous mode
[   84.003412][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.017506][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.028481][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.038038][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.068261][ T5771] veth1_vlan: entered promiscuous mode
[   84.097408][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.111030][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.178925][ T5774] veth0_macvtap: entered promiscuous mode
[   84.207784][ T5774] veth1_macvtap: entered promiscuous mode
[   84.231384][ T5771] veth0_macvtap: entered promiscuous mode
[   84.250393][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.260167][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.272556][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.277414][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.291443][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.308292][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.321426][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.345426][ T5771] veth1_macvtap: entered promiscuous mode
[   84.404819][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.428839][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.441387][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.453880][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.468746][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.503177][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.512863][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.516321][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.538141][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.549445][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.561261][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.572791][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.581270][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.594888][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.608813][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.625150][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.637612][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.691792][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.704422][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.718535][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.741552][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.785376][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.800552][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.814091][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.825513][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.844101][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.854833][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.868787][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.882805][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.944737][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.978973][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.993040][    C1] hrtimer: interrupt took 66767 ns
[   85.167907][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.202619][ T5777] Bluetooth: hci2: command tx timeout
[   85.202730][ T5784] Bluetooth: hci3: command tx timeout
[   85.208685][ T5083] Bluetooth: hci0: command tx timeout
[   85.232291][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.283152][ T5083] Bluetooth: hci1: command tx timeout
[   85.351771][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.360610][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.454145][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.472356][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.697715][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.713295][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.977368][ T5849] Zero length message leads to an empty skb
[   86.109540][ T5851] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   86.807560][ T5864] netlink: 'syz.2.9': attribute type 21 has an invalid length.
[   86.822135][ T5864] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9'.
[   87.162456][  T173] cfg80211: failed to load regulatory.db
[   87.288749][ T5083] Bluetooth: hci3: command tx timeout
[   87.295729][ T5083] Bluetooth: hci0: command tx timeout
[   87.301378][ T5777] Bluetooth: hci2: command tx timeout
[   87.362321][ T5777] Bluetooth: hci1: command tx timeout
[   92.704478][ T5908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.714043][ T5908] IPv6: NLM_F_CREATE should be set when creating new route
[   92.726305][ T5908] IPv6: NLM_F_CREATE should be set when creating new route
[   92.735302][ T5908] IPv6: NLM_F_CREATE should be set when creating new route
[   92.824336][ T5908] netlink: 'syz.2.26': attribute type 9 has an invalid length.
[   92.865283][ T5908] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.26'.
[   93.338459][ T5909] netlink: 'syz.2.26': attribute type 9 has an invalid length.
[   93.350230][ T5909] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.26'.
[   93.361117][ T5908] syz.2.26 (5908) used greatest stack depth: 19032 bytes left
[   94.674863][ T5943] macsec0: entered promiscuous mode
[   94.693275][ T5943] macsec0: entered allmulticast mode
[   94.699377][ T5943] veth1_macvtap: entered allmulticast mode
[   94.827683][ T5954] warning: `syz.3.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.981056][ T5956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.43'.
[   95.607489][ T5968] netlink: 'syz.0.47': attribute type 39 has an invalid length.
[   96.573508][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.52'.
[   98.273298][ T6016] netlink: 'syz.3.62': attribute type 21 has an invalid length.
[   98.292474][ T6016] netlink: 156 bytes leftover after parsing attributes in process `syz.3.62'.
[   98.304463][ T6017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.63'.
[   98.558245][ T6020] netlink: 'syz.2.64': attribute type 21 has an invalid length.
[   98.590332][ T6020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.64'.
[   98.733980][ T6024] netlink: 'syz.1.65': attribute type 11 has an invalid length.
[   98.797800][ T6024] netlink: 140 bytes leftover after parsing attributes in process `syz.1.65'.
[   98.862028][ T6032] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   98.900664][ T6032] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.063907][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.088472][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.110004][ T6033] netlink: 33 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.127622][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.140694][ T6033] netlink: 33 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.195630][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.339061][ T6109] netlink: 'syz.1.98': attribute type 21 has an invalid length.
[  104.347910][ T6109] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.356359][ T6109] IPv6: Can't replace route, no match found
[  104.363847][ T6110] netlink: 'syz.1.98': attribute type 10 has an invalid length.
[  104.419703][ T6110] team0: Device wg1 is of different type
[  106.138916][ T6145] __nla_validate_parse: 4 callbacks suppressed
[  106.138936][ T6145] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.109'.
[  106.272906][ T6147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.110'.
[  108.781871][ T6168] vcan0: entered allmulticast mode
[  108.861436][ T6168] netlink: 'syz.3.121': attribute type 10 has an invalid length.
[  108.921553][ T6168] veth0_macvtap: left promiscuous mode
[  108.940566][ T6174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.123'.
[  109.121866][ T6172] netlink: 'syz.2.122': attribute type 21 has an invalid length.
[  109.130268][ T6172] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.216073][ T6172] IPv6: Can't replace route, no match found
[  109.327778][ T6176] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[  109.668301][ T6176] team0: Device wg1 is of different type
[  111.291306][ T6211] netlink: 'syz.0.137': attribute type 21 has an invalid length.
[  111.432283][ T6211] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.469686][ T6211] IPv6: Can't replace route, no match found
[  111.516598][ T6211] netlink: 'syz.0.137': attribute type 10 has an invalid length.
[  111.807226][ T6211] team0: Device wg1 is of different type
[  112.009891][ T6224] netlink: 'syz.1.139': attribute type 10 has an invalid length.
[  112.136124][ T6224] team0: Device wg1 is of different type
[  112.147925][ T6211] syz.0.137 (6211) used greatest stack depth: 18664 bytes left
[  113.038492][ T6245] C: renamed from team_slave_0 (while UP)
[  113.066385][ T6245] netlink: 'syz.3.147': attribute type 3 has an invalid length.
[  113.096884][ T6245] netlink: 152 bytes leftover after parsing attributes in process `syz.3.147'.
[  113.131234][ T6245] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  114.101291][ T6252] netlink: 'syz.0.149': attribute type 2 has an invalid length.
[  114.128468][ T6252] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.149'.
[  114.320529][ T6270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.585251][ T6273] syzkaller0: entered promiscuous mode
[  114.613186][ T6273] syzkaller0: entered allmulticast mode
[  116.631364][ T6307] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET)
[  117.304585][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'.
[  117.665703][ T6346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  119.130022][ T6378] netlink: 'syz.0.200': attribute type 12 has an invalid length.
[  119.140009][ T6378] netlink: 172 bytes leftover after parsing attributes in process `syz.0.200'.
[  119.782749][ T6382] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[  119.791847][ T6382] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.203'.
[  119.894751][ T6388] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.202'.
[  120.121974][ T6392] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.206'.
[  120.383304][ T6401] netlink: zone id is out of range
[  120.439581][ T6401] netlink: set zone limit has 8 unknown bytes
[  121.110249][ T6429] netlink: 'syz.1.221': attribute type 11 has an invalid length.
[  121.142447][ T6429] netlink: 140 bytes leftover after parsing attributes in process `syz.1.221'.
[  121.480155][ T6438] netlink: 'syz.1.225': attribute type 3 has an invalid length.
[  121.538942][ T6438] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[  121.611770][ T6438] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.225'.
[  123.336736][ T6495] syzkaller0: entered promiscuous mode
[  123.343800][ T6495] syzkaller0: entered allmulticast mode
[  123.857711][ T6510] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.252'.
[  124.495372][ T6520] netlink: 'syz.0.256': attribute type 3 has an invalid length.
[  124.506102][ T6520] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.256'.
[  125.680339][ T6529] veth1_to_bond: entered allmulticast mode
[  126.337451][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.266'.
[  126.438943][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.731325][ T6549] bridge_slave_0 (unregistering): left allmulticast mode
[  126.779922][ T6549] bridge_slave_0 (unregistering): left promiscuous mode
[  126.880569][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.309656][ T6562] netlink: 'syz.1.272': attribute type 21 has an invalid length.
[  127.344305][ T6562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.272'.
[  127.618780][ T6568] sit0: entered allmulticast mode
[  127.711276][ T6572] sit0: entered promiscuous mode
[  128.378510][ T6585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.280'.
[  128.553947][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.282'.
[  128.797320][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.199124][ T6590] bridge_slave_0 (unregistering): left allmulticast mode
[  129.271282][ T6590] bridge_slave_0 (unregistering): left promiscuous mode
[  129.289334][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.695053][ T6606] netlink: 'syz.3.287': attribute type 10 has an invalid length.
[  129.772953][ T6606] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.287'.
[  130.718946][ T6621] netlink: 'syz.2.291': attribute type 3 has an invalid length.
[  130.814018][ T6621] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.291'.
[  131.794395][ T6641] netlink: 'syz.1.301': attribute type 12 has an invalid length.
[  133.235269][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.243960][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  135.030475][ T6664] netlink: 'syz.0.310': attribute type 39 has an invalid length.
[  135.362588][ T6674] netlink: 'syz.0.315': attribute type 3 has an invalid length.
[  135.405003][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'.
[  135.434032][ T6674] netlink: 'syz.0.315': attribute type 3 has an invalid length.
[  135.462097][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'.
[  135.471192][ T6669] netlink: 'syz.3.313': attribute type 10 has an invalid length.
[  135.492770][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.549590][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.558450][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.658932][ T6669] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  135.946555][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.317'.
[  136.367314][ T6693] netlink: 'syz.0.318': attribute type 10 has an invalid length.
[  136.536111][ T6693] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.318'.
[  137.780659][ T6731] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.335'.
[  137.844953][ T6735] FAULT_INJECTION: forcing a failure.
[  137.844953][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  137.862919][ T6735] CPU: 0 PID: 6735 Comm: syz.0.331 Not tainted syzkaller #0
[  137.872095][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  137.887824][ T6735] Call Trace:
[  137.892384][ T6735]  <TASK>
[  137.896352][ T6735]  dump_stack_lvl+0x18c/0x250
[  137.901681][ T6735]  ? show_regs_print_info+0x20/0x20
[  137.908483][ T6735]  ? load_image+0x420/0x420
[  137.913160][ T6735]  ? __might_fault+0xaa/0x120
[  137.919314][ T6735]  ? __lock_acquire+0x7d80/0x7d80
[  137.924561][ T6735]  ? unix_ioctl+0x259/0x6b0
[  137.929131][ T6735]  should_fail_ex+0x394/0x4c0
[  137.934696][ T6735]  _copy_from_user+0x2f/0xe0
[  137.939788][ T6735]  sock_do_ioctl+0x190/0x310
[  137.944878][ T6735]  ? sock_show_fdinfo+0xb0/0xb0
[  137.950072][ T6735]  sock_ioctl+0x5be/0x7e0
[  137.954491][ T6735]  ? sock_poll+0x3e0/0x3e0
[  137.959552][ T6735]  ? bpf_lsm_file_ioctl+0x9/0x10
[  137.964800][ T6735]  ? security_file_ioctl+0x80/0xa0
[  137.970504][ T6735]  ? sock_poll+0x3e0/0x3e0
[  137.975091][ T6735]  __se_sys_ioctl+0xfd/0x170
[  137.979925][ T6735]  do_syscall_64+0x55/0xb0
[  137.984825][ T6735]  ? clear_bhb_loop+0x40/0x90
[  137.990204][ T6735]  ? clear_bhb_loop+0x40/0x90
[  137.995155][ T6735]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.003578][ T6735] RIP: 0033:0x7f86bf19e0d9
[  138.009108][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.031604][ T6735] RSP: 002b:00007f86c00e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.041938][ T6735] RAX: ffffffffffffffda RBX: 00007f86bf425fa0 RCX: 00007f86bf19e0d9
[  138.050855][ T6735] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  138.060130][ T6735] RBP: 00007f86c00e1090 R08: 0000000000000000 R09: 0000000000000000
[  138.069017][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.080302][ T6735] R13: 00007f86bf426038 R14: 00007f86bf425fa0 R15: 00007fffce7541e8
[  138.088842][ T6735]  </TASK>
[  138.169124][ T6736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.333'.
[  138.192359][ T6731] netlink: 140 bytes leftover after parsing attributes in process `syz.2.335'.
[  138.209246][ T6731] netlink: 10 bytes leftover after parsing attributes in process `syz.2.335'.
[  138.247212][ T6741] sctp: [Deprecated]: syz.2.335 (pid 6741) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.247212][ T6741] Use struct sctp_sack_info instead
[  138.284049][ T6731] bond0: (slave bond_slave_0): Releasing backup interface
[  138.368731][ T6731] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  138.430050][ T6738] netlink: 'syz.1.336': attribute type 39 has an invalid length.
[  138.656752][ T6739] netlink: 10 bytes leftover after parsing attributes in process `syz.3.333'.
[  138.687747][ T6744] netlink: 14 bytes leftover after parsing attributes in process `syz.3.333'.
[  138.715662][ T6744] hsr_slave_0: left promiscuous mode
[  138.724094][ T6744] hsr_slave_1: left promiscuous mode
[  138.864582][ T6746] netlink: 'syz.0.337': attribute type 19 has an invalid length.
[  139.299981][ T6754] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[  140.369477][ T6775] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  140.372152][ T6782] netlink: 'syz.3.356': attribute type 11 has an invalid length.
[  140.431906][ T6782] __nla_validate_parse: 3 callbacks suppressed
[  140.431921][ T6782] netlink: 140 bytes leftover after parsing attributes in process `syz.3.356'.
[  140.436879][ T6783] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.348'.
[  140.525342][ T6783] netlink: 10 bytes leftover after parsing attributes in process `syz.2.348'.
[  140.580935][ T6783] netlink: 14 bytes leftover after parsing attributes in process `syz.2.348'.
[  140.659206][ T6783] hsr_slave_0: left promiscuous mode
[  140.756590][ T6783] hsr_slave_1: left promiscuous mode
[  142.034993][ T6788] netlink: 'syz.1.349': attribute type 10 has an invalid length.
[  142.053666][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.064973][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.233333][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.241741][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.251359][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.263762][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.328302][ T6788] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  143.253979][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.920657][ T6826] FAULT_INJECTION: forcing a failure.
[  143.920657][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.953373][ T6826] CPU: 0 PID: 6826 Comm: syz.2.363 Not tainted syzkaller #0
[  143.961351][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.971712][ T6826] Call Trace:
[  143.975107][ T6826]  <TASK>
[  143.978254][ T6826]  dump_stack_lvl+0x18c/0x250
[  143.983980][ T6826]  ? show_regs_print_info+0x20/0x20
[  143.992109][ T6826]  ? load_image+0x420/0x420
[  143.997641][ T6826]  ? __might_fault+0xaa/0x120
[  144.005070][ T6826]  ? __lock_acquire+0x7d80/0x7d80
[  144.010577][ T6826]  should_fail_ex+0x394/0x4c0
[  144.015492][ T6826]  _copy_from_user+0x2f/0xe0
[  144.021878][ T6826]  dev_ethtool+0xc6/0x18d0
[  144.027480][ T6826]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  144.034636][ T6826]  ? __lock_acquire+0x7d80/0x7d80
[  144.040259][ T6826]  ? dev_load+0x21/0x1f0
[  144.044651][ T6826]  dev_ioctl+0x392/0x1140
[  144.049533][ T6826]  sock_do_ioctl+0x239/0x310
[  144.056474][ T6826]  ? sock_show_fdinfo+0xb0/0xb0
[  144.062404][ T6826]  sock_ioctl+0x5be/0x7e0
[  144.068876][ T6826]  ? sock_poll+0x3e0/0x3e0
[  144.074935][ T6826]  ? bpf_lsm_file_ioctl+0x9/0x10
[  144.078915][ T6828] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.362'.
[  144.081537][ T6826]  ? security_file_ioctl+0x80/0xa0
[  144.098649][ T6826]  ? sock_poll+0x3e0/0x3e0
[  144.104173][ T6826]  __se_sys_ioctl+0xfd/0x170
[  144.110843][ T6826]  do_syscall_64+0x55/0xb0
[  144.115483][ T6826]  ? clear_bhb_loop+0x40/0x90
[  144.120545][ T6826]  ? clear_bhb_loop+0x40/0x90
[  144.126235][ T6826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.133975][ T6826] RIP: 0033:0x7fdc0499e0d9
[  144.140078][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.164944][ T6826] RSP: 002b:00007fdc0589d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.174003][ T6826] RAX: ffffffffffffffda RBX: 00007fdc04c25fa0 RCX: 00007fdc0499e0d9
[  144.183430][ T6826] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  144.194056][ T6826] RBP: 00007fdc0589d090 R08: 0000000000000000 R09: 0000000000000000
[  144.202571][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.212563][ T6826] R13: 00007fdc04c26038 R14: 00007fdc04c25fa0 R15: 00007ffc73db0308
[  144.221356][ T6826]  </TASK>
[  144.306780][ T6831] team0: Port device C removed
[  144.421007][ T6825] netlink: 10 bytes leftover after parsing attributes in process `syz.1.362'.
[  144.479853][ T6825] netlink: 14 bytes leftover after parsing attributes in process `syz.1.362'.
[  144.522393][ T6825] hsr_slave_0: left promiscuous mode
[  144.547229][ T6825] hsr_slave_1: left promiscuous mode
[  144.988646][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.369'.
[  145.672298][ T6868] netlink: 'syz.2.378': attribute type 11 has an invalid length.
[  145.681252][ T6868] netlink: 140 bytes leftover after parsing attributes in process `syz.2.378'.
[  146.048086][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.968366][ T6907] FAULT_INJECTION: forcing a failure.
[  147.968366][ T6907] name failslab, interval 1, probability 0, space 0, times 1
[  148.006362][ T6907] CPU: 0 PID: 6907 Comm: syz.0.391 Not tainted syzkaller #0
[  148.013933][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  148.024453][ T6907] Call Trace:
[  148.027900][ T6907]  <TASK>
[  148.031045][ T6907]  dump_stack_lvl+0x18c/0x250
[  148.035884][ T6907]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  148.042079][ T6907]  ? show_regs_print_info+0x20/0x20
[  148.047843][ T6907]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  148.055093][ T6907]  should_fail_ex+0x394/0x4c0
[  148.059988][ T6907]  should_failslab+0x9/0x20
[  148.065042][ T6907]  slab_pre_alloc_hook+0x59/0x300
[  148.070678][ T6907]  ? __lock_acquire+0x7d80/0x7d80
[  148.075833][ T6907]  ? dev_ethtool+0x129/0x18d0
[  148.081217][ T6907]  __kmem_cache_alloc_node+0x53/0x250
[  148.086907][ T6907]  ? __might_fault+0xaa/0x120
[  148.092068][ T6907]  ? dev_ethtool+0x129/0x18d0
[  148.097146][ T6907]  kmalloc_trace+0x2a/0xe0
[  148.102320][ T6907]  dev_ethtool+0x129/0x18d0
[  148.108200][ T6907]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  148.115927][ T6907]  ? __lock_acquire+0x7d80/0x7d80
[  148.121773][ T6907]  ? lockdep_hardirqs_on+0x98/0x150
[  148.127103][ T6907]  ? full_name_hash+0x92/0xe0
[  148.132259][ T6907]  ? dev_load+0x21/0x1f0
[  148.137350][ T6907]  dev_ioctl+0x392/0x1140
[  148.142069][ T6907]  sock_do_ioctl+0x239/0x310
[  148.147843][ T6907]  ? sock_show_fdinfo+0xb0/0xb0
[  148.153705][ T6907]  sock_ioctl+0x5be/0x7e0
[  148.158339][ T6907]  ? sock_poll+0x3e0/0x3e0
[  148.162803][ T6907]  ? bpf_lsm_file_ioctl+0x9/0x10
[  148.168151][ T6907]  ? security_file_ioctl+0x80/0xa0
[  148.173485][ T6907]  ? sock_poll+0x3e0/0x3e0
[  148.178117][ T6907]  __se_sys_ioctl+0xfd/0x170
[  148.183229][ T6907]  do_syscall_64+0x55/0xb0
[  148.187692][ T6907]  ? clear_bhb_loop+0x40/0x90
[  148.192454][ T6907]  ? clear_bhb_loop+0x40/0x90
[  148.197340][ T6907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  148.203351][ T6907] RIP: 0033:0x7f86bf19e0d9
[  148.207809][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.227787][ T6907] RSP: 002b:00007f86c00e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  148.236235][ T6907] RAX: ffffffffffffffda RBX: 00007f86bf425fa0 RCX: 00007f86bf19e0d9
[  148.244228][ T6907] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  148.252766][ T6907] RBP: 00007f86c00e1090 R08: 0000000000000000 R09: 0000000000000000
[  148.261202][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.269824][ T6907] R13: 00007f86bf426038 R14: 00007f86bf425fa0 R15: 00007fffce7541e8
[  148.278076][ T6907]  </TASK>
[  148.536081][ T6926] netlink: 'syz.0.400': attribute type 11 has an invalid length.
[  148.575903][ T6926] netlink: 140 bytes leftover after parsing attributes in process `syz.0.400'.
[  148.970194][ T6924] syzkaller0: entered promiscuous mode
[  148.988149][ T6924] syzkaller0: entered allmulticast mode
[  149.017507][ T6927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.399'.
[  152.612160][ T6975] netlink: 'syz.0.417': attribute type 1 has an invalid length.
[  152.858555][ T6981] veth1_to_bond: entered allmulticast mode
[  153.047067][ T6987] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.422'.
[  154.289872][ T7016] IPv6: NLM_F_CREATE should be specified when creating new route
[  154.317247][ T7016] netlink: 1 bytes leftover after parsing attributes in process `syz.0.430'.
[  155.684756][ T7040] FAULT_INJECTION: forcing a failure.
[  155.684756][ T7040] name failslab, interval 1, probability 0, space 0, times 0
[  155.730807][ T7040] CPU: 0 PID: 7040 Comm: syz.1.441 Not tainted syzkaller #0
[  155.739314][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.750368][ T7040] Call Trace:
[  155.754042][ T7040]  <TASK>
[  155.757745][ T7040]  dump_stack_lvl+0x18c/0x250
[  155.764998][ T7040]  ? show_regs_print_info+0x20/0x20
[  155.771706][ T7040]  ? load_image+0x420/0x420
[  155.781261][ T7040]  ? __might_sleep+0xe0/0xe0
[  155.788104][ T7040]  ? __lock_acquire+0x7d80/0x7d80
[  155.794959][ T7040]  ? __lock_acquire+0x1336/0x7d80
[  155.802756][ T7040]  should_fail_ex+0x394/0x4c0
[  155.809045][ T7040]  should_failslab+0x9/0x20
[  155.816579][ T7040]  slab_pre_alloc_hook+0x59/0x300
[  155.824973][ T7040]  ? __get_vm_area_node+0x125/0x370
[  155.834215][ T7040]  __kmem_cache_alloc_node+0x53/0x250
[  155.842452][ T7040]  ? __get_vm_area_node+0x125/0x370
[  155.848881][ T7040]  kmalloc_node_trace+0x26/0xe0
[  155.855172][ T7040]  __get_vm_area_node+0x125/0x370
[  155.863832][ T7040]  __vmalloc_node_range+0x36f/0x1320
[  155.872109][ T7040]  ? ethtool_get_stats+0x20b/0x3a0
[  155.878277][ T7040]  ? free_vm_area+0x50/0x50
[  155.885211][ T7040]  ? __might_fault+0xaa/0x120
[  155.891934][ T7040]  ? __might_fault+0xc6/0x120
[  155.897453][ T7040]  ? ethtool_get_stats+0x20b/0x3a0
[  155.904793][ T7040]  vzalloc+0x79/0x90
[  155.909279][ T7040]  ? ethtool_get_stats+0x20b/0x3a0
[  155.915298][ T7040]  ethtool_get_stats+0x20b/0x3a0
[  155.920472][ T7040]  ? ethtool_phys_id+0x530/0x530
[  155.925720][ T7040]  dev_ethtool+0xa63/0x18d0
[  155.930349][ T7040]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  155.936787][ T7040]  ? __lock_acquire+0x7d80/0x7d80
[  155.941851][ T7040]  ? lockdep_hardirqs_on+0x98/0x150
[  155.947163][ T7040]  ? full_name_hash+0x92/0xe0
[  155.952311][ T7040]  ? dev_load+0x21/0x1f0
[  155.956612][ T7040]  dev_ioctl+0x392/0x1140
[  155.961078][ T7040]  sock_do_ioctl+0x239/0x310
[  155.965905][ T7040]  ? sock_show_fdinfo+0xb0/0xb0
[  155.971694][ T7040]  sock_ioctl+0x5be/0x7e0
[  155.977736][ T7040]  ? sock_poll+0x3e0/0x3e0
[  155.982829][ T7040]  ? bpf_lsm_file_ioctl+0x9/0x10
[  155.989294][ T7040]  ? security_file_ioctl+0x80/0xa0
[  155.995498][ T7040]  ? sock_poll+0x3e0/0x3e0
[  156.000038][ T7040]  __se_sys_ioctl+0xfd/0x170
[  156.005528][ T7040]  do_syscall_64+0x55/0xb0
[  156.010329][ T7040]  ? clear_bhb_loop+0x40/0x90
[  156.016477][ T7040]  ? clear_bhb_loop+0x40/0x90
[  156.021296][ T7040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.028188][ T7040] RIP: 0033:0x7feabd99e0d9
[  156.032647][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.055339][ T7040] RSP: 002b:00007feabe944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.064501][ T7040] RAX: ffffffffffffffda RBX: 00007feabdc25fa0 RCX: 00007feabd99e0d9
[  156.074068][ T7040] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  156.082160][ T7040] RBP: 00007feabe944090 R08: 0000000000000000 R09: 0000000000000000
[  156.090556][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.100886][ T7040] R13: 00007feabdc26038 R14: 00007feabdc25fa0 R15: 00007ffd93589b18
[  156.109650][ T7040]  </TASK>
[  156.143804][ T7040] syz.1.441: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  156.172361][ T7040] CPU: 0 PID: 7040 Comm: syz.1.441 Not tainted syzkaller #0
[  156.180843][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  156.192849][ T7040] Call Trace:
[  156.197039][ T7040]  <TASK>
[  156.200353][ T7040]  dump_stack_lvl+0x18c/0x250
[  156.206646][ T7040]  ? show_regs_print_info+0x20/0x20
[  156.212955][ T7040]  ? load_image+0x420/0x420
[  156.220735][ T7040]  ? __rcu_read_unlock+0x7c/0xd0
[  156.228169][ T7040]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.236971][ T7040]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  156.245162][ T7040]  warn_alloc+0x246/0x340
[  156.250143][ T7040]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.258950][ T7040]  ? zone_watermark_ok_safe+0x230/0x230
[  156.264783][ T7040]  ? __get_vm_area_node+0x356/0x370
[  156.270780][ T7040]  __vmalloc_node_range+0x394/0x1320
[  156.277113][ T7040]  ? free_vm_area+0x50/0x50
[  156.283429][ T7040]  ? __might_fault+0xaa/0x120
[  156.289476][ T7040]  ? __might_fault+0xc6/0x120
[  156.294916][ T7040]  ? ethtool_get_stats+0x20b/0x3a0
[  156.300772][ T7040]  vzalloc+0x79/0x90
[  156.305126][ T7040]  ? ethtool_get_stats+0x20b/0x3a0
[  156.310993][ T7040]  ethtool_get_stats+0x20b/0x3a0
[  156.316890][ T7040]  ? ethtool_phys_id+0x530/0x530
[  156.322640][ T7040]  dev_ethtool+0xa63/0x18d0
[  156.327726][ T7040]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  156.335062][ T7040]  ? __lock_acquire+0x7d80/0x7d80
[  156.342427][ T7040]  ? lockdep_hardirqs_on+0x98/0x150
[  156.350528][ T7040]  ? full_name_hash+0x92/0xe0
[  156.357703][ T7040]  ? dev_load+0x21/0x1f0
[  156.363789][ T7040]  dev_ioctl+0x392/0x1140
[  156.368886][ T7040]  sock_do_ioctl+0x239/0x310
[  156.374313][ T7040]  ? sock_show_fdinfo+0xb0/0xb0
[  156.380711][ T7040]  sock_ioctl+0x5be/0x7e0
[  156.385332][ T7040]  ? sock_poll+0x3e0/0x3e0
[  156.391559][ T7040]  ? bpf_lsm_file_ioctl+0x9/0x10
[  156.397835][ T7040]  ? security_file_ioctl+0x80/0xa0
[  156.404966][ T7040]  ? sock_poll+0x3e0/0x3e0
[  156.411073][ T7040]  __se_sys_ioctl+0xfd/0x170
[  156.416603][ T7040]  do_syscall_64+0x55/0xb0
[  156.423301][ T7040]  ? clear_bhb_loop+0x40/0x90
[  156.429334][ T7040]  ? clear_bhb_loop+0x40/0x90
[  156.435698][ T7040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.443659][ T7040] RIP: 0033:0x7feabd99e0d9
[  156.449218][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.470507][ T7040] RSP: 002b:00007feabe944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.480714][ T7040] RAX: ffffffffffffffda RBX: 00007feabdc25fa0 RCX: 00007feabd99e0d9
[  156.490420][ T7040] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  156.500506][ T7040] RBP: 00007feabe944090 R08: 0000000000000000 R09: 0000000000000000
[  156.509741][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.518906][ T7040] R13: 00007feabdc26038 R14: 00007feabdc25fa0 R15: 00007ffd93589b18
[  156.527358][ T7040]  </TASK>
[  156.555085][ T7040] Mem-Info:
[  156.559352][ T7040] active_anon:11540 inactive_anon:0 isolated_anon:0
[  156.559352][ T7040]  active_file:13843 inactive_file:39980 isolated_file:0
[  156.559352][ T7040]  unevictable:768 dirty:160 writeback:0
[  156.559352][ T7040]  slab_reclaimable:9953 slab_unreclaimable:91099
[  156.559352][ T7040]  mapped:30200 shmem:7632 pagetables:606
[  156.559352][ T7040]  sec_pagetables:0 bounce:0
[  156.559352][ T7040]  kernel_misc_reclaimable:0
[  156.559352][ T7040]  free:1348133 free_pcp:8597 free_cma:0
[  156.615931][ T7040] Node 0 active_anon:49560kB inactive_anon:0kB active_file:55372kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124300kB dirty:636kB writeback:0kB shmem:32392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10516kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no
[  156.651376][ T7040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  156.689772][ T7040] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.722045][ T7040] lowmem_reserve[]: 0 2521 2522 2522 2522
[  156.728971][ T7040] Node 0 DMA32 free:1481556kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:52420kB inactive_anon:0kB active_file:55372kB inactive_file:158888kB unevictable:1536kB writepending:636kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:8092kB local_pcp:5340kB free_cma:0kB
[  156.788137][ T7040] lowmem_reserve[]: 0 0 0 0 0
[  156.852772][ T7040] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  156.887315][ T7040] lowmem_reserve[]: 0 0 0 0 0
[  156.892256][ T7040] Node 1 Normal free:3893600kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21760kB local_pcp:9056kB free_cma:0kB
[  156.929395][ T7040] lowmem_reserve[]: 0 0 0 0 0
[  156.935965][ T7040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.951360][ T7040] Node 0 DMA32: 2173*4kB (UME) 1541*8kB (UE) 845*16kB (UME) 774*32kB (UM) 550*64kB (UME) 348*128kB (UME) 232*256kB (UME) 156*512kB (UME) 97*1024kB (UM) 11*2048kB (UME) 262*4096kB (M) = 1473324kB
[  156.977970][ T7040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  156.998977][ T7040] Node 1 Normal: 216*4kB (UME) 46*8kB (UME) 25*16kB (UME) 66*32kB (UME) 13*64kB (UM) 9*128kB (UME) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 949*4096kB (ME) = 3893600kB
[  157.025288][ T7040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.036886][ T7040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.049703][ T7040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.060957][ T7040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.072209][ T7040] 65855 total pagecache pages
[  157.078595][ T7040] 0 pages in swap cache
[  157.083337][ T7040] Free swap  = 124996kB
[  157.088687][ T7040] Total swap = 124996kB
[  157.093597][ T7040] 2097051 pages RAM
[  157.097905][ T7040] 0 pages HighMem/MovableOnly
[  157.103253][ T7040] 416955 pages reserved
[  157.108812][ T7040] 0 pages cma reserved
[  157.115588][ T7044] netlink: 'syz.0.443': attribute type 11 has an invalid length.
[  157.131797][ T7044] netlink: 140 bytes leftover after parsing attributes in process `syz.0.443'.
[  158.638875][ T7070] netlink: 'syz.1.454': attribute type 21 has an invalid length.
[  160.189934][ T7113] syzkaller0: entered promiscuous mode
[  160.209734][ T7113] syzkaller0: entered allmulticast mode
[  160.613619][ T7127] netlink: 'syz.1.478': attribute type 21 has an invalid length.
[  160.648999][ T7127] tap0: tun_chr_ioctl cmd 1074025677
[  160.659091][ T7127] tap0: linktype set to 774
[  161.416441][ T7147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.703147][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.439330][ T7197] tap0: tun_chr_ioctl cmd 1074025677
[  163.449269][ T7197] tap0: linktype set to 778
[  163.486902][ T7197] netlink: 'syz.0.505': attribute type 3 has an invalid length.
[  163.546878][ T7197] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[  163.561393][ T7197] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.505'.
[  164.992703][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.118778][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'.
[  165.162650][ T7245] netlink: 128 bytes leftover after parsing attributes in process `syz.0.525'.
[  165.660524][  T139] tipc: Subscription rejected, illegal request
[  166.445958][ T7282] netlink: 164 bytes leftover after parsing attributes in process `syz.1.541'.
[  166.927762][ T7300] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.546'.
[  166.966406][ T7294] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.546'.
[  167.019610][ T7294] netlink: 'syz.0.546': attribute type 153 has an invalid length.
[  167.037167][ T7294] netlink: 'syz.0.546': attribute type 3 has an invalid length.
[  167.072006][ T7294] netlink: 125336 bytes leftover after parsing attributes in process `syz.0.546'.
[  168.166847][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.231337][ T7330] netlink: 'syz.0.559': attribute type 11 has an invalid length.
[  168.254217][ T7330] netlink: 140 bytes leftover after parsing attributes in process `syz.0.559'.
[  169.628537][ T7372] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.576'.
[  169.737452][ T7372] netlink: 'syz.0.576': attribute type 10 has an invalid length.
[  169.784543][ T7372] syz_tun: entered promiscuous mode
[  169.795077][ T7378] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.576'.
[  169.906351][ T7372] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  170.688812][ T7401] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP)
[  171.141083][ T7413] netlink: 'syz.2.589': attribute type 11 has an invalid length.
[  171.151926][ T7413] netlink: 140 bytes leftover after parsing attributes in process `syz.2.589'.
[  171.235272][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.287506][   T11] tipc: Subscription rejected, illegal request
[  172.318518][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.610'.
[  172.469393][ T7474] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.612'.
[  172.527601][ T7474] netlink: 'syz.1.612': attribute type 10 has an invalid length.
[  172.559816][ T7474] syz_tun: entered promiscuous mode
[  172.605714][ T7477] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.612'.
[  172.718617][ T7474] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  172.737460][ T7481] netlink: 'syz.2.615': attribute type 10 has an invalid length.
[  172.753662][ T7481] netlink: 55 bytes leftover after parsing attributes in process `syz.2.615'.
[  173.582887][ T7508] netlink: 'syz.2.626': attribute type 11 has an invalid length.
[  173.612317][ T7508] netlink: 140 bytes leftover after parsing attributes in process `syz.2.626'.
[  173.839852][ T7516] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.629'.
[  174.067649][ T7516] netlink: 'syz.2.629': attribute type 10 has an invalid length.
[  174.119155][ T7519] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.629'.
[  174.469231][ T7516] syz_tun: entered promiscuous mode
[  174.536572][ T7516] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  174.707980][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.824853][ T7558] netlink: 'syz.1.647': attribute type 10 has an invalid length.
[  175.861758][ T7558] netlink: 55 bytes leftover after parsing attributes in process `syz.1.647'.
[  176.397700][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.654'.
[  176.943977][ T7592] netlink: 'syz.0.661': attribute type 10 has an invalid length.
[  176.970436][ T7592] netlink: 55 bytes leftover after parsing attributes in process `syz.0.661'.
[  177.113897][ T7596] netlink: 'syz.2.664': attribute type 11 has an invalid length.
[  177.144956][ T7596] netlink: 140 bytes leftover after parsing attributes in process `syz.2.664'.
[  177.462121][ T7607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.667'.
[  177.744400][ T7620] syzkaller0: entered promiscuous mode
[  177.788922][ T7620] syzkaller0: entered allmulticast mode
[  178.038317][ T7630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.870097][ T7670] lo: entered promiscuous mode
[  180.974462][ T7675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.585764][ T7688] netlink: 'syz.2.697': attribute type 2 has an invalid length.
[  181.651814][ T7688] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.697'.
[  182.015192][ T7702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.705'.
[  182.029344][ T7702] tc_dump_action: action bad kind
[  182.045546][ T7702] netlink: 'syz.3.705': attribute type 2 has an invalid length.
[  182.071860][ T7702] netlink: 'syz.3.705': attribute type 8 has an invalid length.
[  182.109637][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.705'.
[  182.153838][ T7700] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.703'.
[  183.181876][ T7726] netlink: 'syz.0.713': attribute type 7 has an invalid length.
[  183.678678][ T7742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.959229][ T7814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.212442][ T7845] netlink: 'syz.1.764': attribute type 11 has an invalid length.
[  187.231900][ T7845] netlink: 140 bytes leftover after parsing attributes in process `syz.1.764'.
[  188.570750][ T7883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.799217][ T7915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.789'.
[  190.003563][ T7934] netlink: 'syz.2.795': attribute type 11 has an invalid length.
[  190.011406][ T7934] netlink: 168 bytes leftover after parsing attributes in process `syz.2.795'.
[  190.263816][ T7938] veth1_to_bond: entered allmulticast mode
[  191.460711][ T7968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.806'.
[  191.930165][ T7989] netlink: 'syz.2.814': attribute type 2 has an invalid length.
[  191.942550][ T7989] netlink: 'syz.2.814': attribute type 8 has an invalid length.
[  191.978386][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.814'.
[  192.011024][ T7991] netlink: 'syz.3.815': attribute type 11 has an invalid length.
[  192.027631][ T7991] netlink: 140 bytes leftover after parsing attributes in process `syz.3.815'.
[  192.469949][ T8003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.821'.
[  192.897153][ T8012] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.824'.
[  194.033943][ T8044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.832'.
[  194.183184][ T8049] netlink: 'syz.0.836': attribute type 2 has an invalid length.
[  194.647524][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.654533][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.991481][ T8077] netlink: 'syz.1.847': attribute type 39 has an invalid length.
[  195.873030][ T8083] C: renamed from team_slave_0 (while UP)
[  195.958125][ T8083] netlink: 'syz.0.850': attribute type 1 has an invalid length.
[  196.032204][ T8083] netlink: 120 bytes leftover after parsing attributes in process `syz.0.850'.
[  196.097493][ T8083] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  196.383690][ T8097] netlink: 'syz.1.855': attribute type 3 has an invalid length.
[  196.403451][ T8097] netlink: 'syz.1.855': attribute type 6 has an invalid length.
[  196.411563][ T8097] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.855'.
[  196.548349][ T8105] syz.2.858[8105] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  196.548590][ T8105] syz.2.858[8105] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.637238][ T8137] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  198.693965][ T8137] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.870'.
[  199.992968][ T8174] veth1_to_bond: entered allmulticast mode
[  200.594546][ T8189] netlink: 'syz.2.890': attribute type 21 has an invalid length.
[  201.168069][ T8200] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  201.842097][ T5782] Bluetooth: hci2: command 0x0406 tx timeout
[  201.850996][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  201.862568][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  201.862685][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  202.470549][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz.2.905'.
[  203.652897][ T8258] netlink: 144 bytes leftover after parsing attributes in process `syz.0.914'.
[  203.736263][ T8258] team0: Port device C removed
[  203.742010][ T8258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  204.517875][ T8283] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.924'.
[  204.560253][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  204.586118][ T8279] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.924'.
[  204.619658][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  205.477759][ T8302] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.935'.
[  205.699931][ T8312] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  205.709577][ T8312] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.939'.
[  206.243485][ T8326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.377477][ T8332] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.949'.
[  206.475792][ T8337] FAULT_INJECTION: forcing a failure.
[  206.475792][ T8337] name failslab, interval 1, probability 0, space 0, times 0
[  206.512539][ T8337] CPU: 1 PID: 8337 Comm: syz.3.950 Not tainted syzkaller #0
[  206.521024][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  206.532756][ T8337] Call Trace:
[  206.536229][ T8337]  <TASK>
[  206.540504][ T8337]  dump_stack_lvl+0x18c/0x250
[  206.545484][ T8337]  ? show_regs_print_info+0x20/0x20
[  206.550801][ T8337]  ? load_image+0x420/0x420
[  206.555782][ T8337]  ? __might_sleep+0xe0/0xe0
[  206.560495][ T8337]  ? __lock_acquire+0x7d80/0x7d80
[  206.566775][ T8337]  should_fail_ex+0x394/0x4c0
[  206.571570][ T8337]  should_failslab+0x9/0x20
[  206.576098][ T8337]  slab_pre_alloc_hook+0x59/0x300
[  206.581622][ T8337]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  206.589280][ T8337]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  206.595641][ T8337]  __kmem_cache_alloc_node+0x53/0x250
[  206.601057][ T8337]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  206.607683][ T8337]  __kmalloc+0xa7/0x240
[  206.612114][ T8337]  tomoyo_realpath_from_path+0xe6/0x5c0
[  206.617671][ T8337]  ? tomoyo_domain+0xd6/0x120
[  206.622388][ T8337]  tomoyo_path_number_perm+0x248/0x5e0
[  206.628506][ T8337]  ? tomoyo_path_number_perm+0x217/0x5e0
[  206.634164][ T8337]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  206.639662][ T8337]  ? __fget_files+0x28/0x460
[  206.644268][ T8337]  security_file_ioctl+0x70/0xa0
[  206.649225][ T8337]  __se_sys_ioctl+0x48/0x170
[  206.653947][ T8337]  do_syscall_64+0x55/0xb0
[  206.659310][ T8337]  ? clear_bhb_loop+0x40/0x90
[  206.664360][ T8337]  ? clear_bhb_loop+0x40/0x90
[  206.669219][ T8337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.675391][ T8337] RIP: 0033:0x7f890359e0d9
[  206.680003][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.700279][ T8337] RSP: 002b:00007f890444b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  206.710059][ T8337] RAX: ffffffffffffffda RBX: 00007f8903825fa0 RCX: 00007f890359e0d9
[  206.718761][ T8337] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  206.727142][ T8337] RBP: 00007f890444b090 R08: 0000000000000000 R09: 0000000000000000
[  206.735204][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.744307][ T8337] R13: 00007f8903826038 R14: 00007f8903825fa0 R15: 00007ffe16571258
[  206.752764][ T8337]  </TASK>
[  206.846781][ T8337] ERROR: Out of memory at tomoyo_realpath_from_path.
[  207.313020][ T5083] Bluetooth: hci1: ISO packet for unknown connection handle 2366
[  208.063064][ T8385] netlink: 128 bytes leftover after parsing attributes in process `syz.3.969'.
[  208.841267][ T8403] veth1_macvtap: left promiscuous mode
[  209.419125][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.983'.
[  210.763925][ T8449] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  210.819160][ T8449] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.993'.
[  211.616877][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.997'.
[  212.806914][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.444890][ T8605] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1056'.
[  216.763227][ T8643] netlink: 'syz.3.1072': attribute type 2 has an invalid length.
[  216.794473][ T8643] netlink: 'syz.3.1072': attribute type 1 has an invalid length.
[  216.861740][ T8643] netlink: 'syz.3.1072': attribute type 27 has an invalid length.
[  216.952293][ T8643] bond0: (slave bond_slave_0): Releasing backup interface
[  218.873473][ T8697] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1094'.
[  220.973157][ T8753] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1120'.
[  221.554629][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'.
[  222.673574][ T8809] netlink: 'syz.3.1144': attribute type 21 has an invalid length.
[  222.694493][ T8809] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1144'.
[  222.710089][ T8809] netlink: 'syz.3.1144': attribute type 5 has an invalid length.
[  222.735282][ T8809] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1144'.
[  222.764709][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.217283][ T8826] FAULT_INJECTION: forcing a failure.
[  223.217283][ T8826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.258488][ T8826] CPU: 1 PID: 8826 Comm: syz.1.1152 Not tainted syzkaller #0
[  223.266994][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.277498][ T8826] Call Trace:
[  223.280817][ T8826]  <TASK>
[  223.283930][ T8826]  dump_stack_lvl+0x18c/0x250
[  223.289189][ T8826]  ? show_regs_print_info+0x20/0x20
[  223.294602][ T8826]  ? load_image+0x420/0x420
[  223.299967][ T8826]  ? __might_fault+0xaa/0x120
[  223.306062][ T8826]  ? __lock_acquire+0x7d80/0x7d80
[  223.311208][ T8826]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  223.318354][ T8826]  should_fail_ex+0x394/0x4c0
[  223.323495][ T8826]  _copy_from_user+0x2f/0xe0
[  223.328823][ T8826]  ethtool_get_stats+0x196/0x3a0
[  223.333968][ T8826]  ? ethtool_phys_id+0x530/0x530
[  223.340169][ T8826]  dev_ethtool+0xa63/0x18d0
[  223.345945][ T8826]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  223.352491][ T8826]  ? __lock_acquire+0x7d80/0x7d80
[  223.357911][ T8826]  ? full_name_hash+0x92/0xe0
[  223.363466][ T8826]  ? dev_load+0x21/0x1f0
[  223.368364][ T8826]  dev_ioctl+0x392/0x1140
[  223.373568][ T8826]  sock_do_ioctl+0x239/0x310
[  223.378231][ T8826]  ? sock_show_fdinfo+0xb0/0xb0
[  223.383217][ T8826]  sock_ioctl+0x5be/0x7e0
[  223.387661][ T8826]  ? sock_poll+0x3e0/0x3e0
[  223.392436][ T8826]  ? bpf_lsm_file_ioctl+0x9/0x10
[  223.398185][ T8826]  ? security_file_ioctl+0x80/0xa0
[  223.404144][ T8826]  ? sock_poll+0x3e0/0x3e0
[  223.408915][ T8826]  __se_sys_ioctl+0xfd/0x170
[  223.413536][ T8826]  do_syscall_64+0x55/0xb0
[  223.418071][ T8826]  ? clear_bhb_loop+0x40/0x90
[  223.423396][ T8826]  ? clear_bhb_loop+0x40/0x90
[  223.428084][ T8826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.434094][ T8826] RIP: 0033:0x7feabd99e0d9
[  223.438529][ T8826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.458580][ T8826] RSP: 002b:00007feabe944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.467171][ T8826] RAX: ffffffffffffffda RBX: 00007feabdc25fa0 RCX: 00007feabd99e0d9
[  223.475249][ T8826] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  223.483393][ T8826] RBP: 00007feabe944090 R08: 0000000000000000 R09: 0000000000000000
[  223.491545][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.499793][ T8826] R13: 00007feabdc26038 R14: 00007feabdc25fa0 R15: 00007ffd93589b18
[  223.507876][ T8826]  </TASK>
[  223.846438][ T8841] netlink: 'syz.2.1159': attribute type 21 has an invalid length.
[  223.857774][ T8841] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1159'.
[  223.870143][ T8843] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1159'.
[  224.313980][ T8851] netlink: 'syz.3.1163': attribute type 4 has an invalid length.
[  224.339648][ T8851] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1163'.
[  224.649237][ T8851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  224.755469][ T8854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1163'.
[  227.155894][ T8863] netlink: 'syz.1.1166': attribute type 13 has an invalid length.
[  227.291329][ T8870] netlink: 'syz.2.1169': attribute type 25 has an invalid length.
[  227.301902][ T8870] netlink: 'syz.2.1169': attribute type 3 has an invalid length.
[  227.334336][ T8870] netlink: 'syz.2.1169': attribute type 10 has an invalid length.
[  227.366695][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'.
[  227.714133][ T8880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1174'.
[  227.827748][ T8886] FAULT_INJECTION: forcing a failure.
[  227.827748][ T8886] name failslab, interval 1, probability 0, space 0, times 0
[  227.860814][ T8886] CPU: 0 PID: 8886 Comm: syz.2.1177 Not tainted syzkaller #0
[  227.869124][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.880065][ T8886] Call Trace:
[  227.883531][ T8886]  <TASK>
[  227.886716][ T8886]  dump_stack_lvl+0x18c/0x250
[  227.892230][ T8886]  ? show_regs_print_info+0x20/0x20
[  227.897546][ T8886]  ? load_image+0x420/0x420
[  227.902599][ T8886]  ? __might_sleep+0xe0/0xe0
[  227.907216][ T8886]  ? __lock_acquire+0x7d80/0x7d80
[  227.912565][ T8886]  ? __lock_acquire+0x1336/0x7d80
[  227.917715][ T8886]  should_fail_ex+0x394/0x4c0
[  227.922586][ T8886]  should_failslab+0x9/0x20
[  227.927162][ T8886]  slab_pre_alloc_hook+0x59/0x300
[  227.932800][ T8886]  ? __get_vm_area_node+0x125/0x370
[  227.939360][ T8886]  __kmem_cache_alloc_node+0x53/0x250
[  227.944759][ T8886]  ? trace_call_bpf+0x5e9/0x6c0
[  227.949629][ T8886]  ? __get_vm_area_node+0x125/0x370
[  227.955029][ T8886]  kmalloc_node_trace+0x26/0xe0
[  227.960380][ T8886]  __get_vm_area_node+0x125/0x370
[  227.965817][ T8886]  __vmalloc_node_range+0x36f/0x1320
[  227.972108][ T8886]  ? ethtool_get_stats+0x20b/0x3a0
[  227.978701][ T8886]  ? free_vm_area+0x50/0x50
[  227.984481][ T8886]  ? __might_fault+0xaa/0x120
[  227.989998][ T8886]  ? __might_fault+0xc6/0x120
[  227.995792][ T8886]  ? ethtool_get_stats+0x20b/0x3a0
[  228.001461][ T8886]  vzalloc+0x79/0x90
[  228.005719][ T8886]  ? ethtool_get_stats+0x20b/0x3a0
[  228.011350][ T8886]  ethtool_get_stats+0x20b/0x3a0
[  228.016913][ T8886]  ? ethtool_phys_id+0x530/0x530
[  228.022763][ T8886]  dev_ethtool+0xa63/0x18d0
[  228.027293][ T8886]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  228.033543][ T8886]  ? __lock_acquire+0x7d80/0x7d80
[  228.038578][ T8886]  ? lockdep_hardirqs_on+0x98/0x150
[  228.043892][ T8886]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.050094][ T8886]  ? full_name_hash+0x92/0xe0
[  228.055061][ T8886]  ? dev_load+0x21/0x1f0
[  228.059436][ T8886]  dev_ioctl+0x392/0x1140
[  228.063786][ T8886]  sock_do_ioctl+0x239/0x310
[  228.068387][ T8886]  ? sock_show_fdinfo+0xb0/0xb0
[  228.073306][ T8886]  sock_ioctl+0x5be/0x7e0
[  228.077774][ T8886]  ? sock_poll+0x3e0/0x3e0
[  228.083086][ T8886]  ? security_file_ioctl+0x74/0xa0
[  228.088515][ T8886]  ? bpf_lsm_file_ioctl+0x9/0x10
[  228.093827][ T8886]  ? security_file_ioctl+0x80/0xa0
[  228.099408][ T8886]  ? sock_poll+0x3e0/0x3e0
[  228.104294][ T8886]  __se_sys_ioctl+0xfd/0x170
[  228.109365][ T8886]  do_syscall_64+0x55/0xb0
[  228.113978][ T8886]  ? clear_bhb_loop+0x40/0x90
[  228.119616][ T8886]  ? clear_bhb_loop+0x40/0x90
[  228.124416][ T8886]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.130426][ T8886] RIP: 0033:0x7fdc0499e0d9
[  228.135357][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.156630][ T8886] RSP: 002b:00007fdc0589d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.165351][ T8886] RAX: ffffffffffffffda RBX: 00007fdc04c25fa0 RCX: 00007fdc0499e0d9
[  228.173417][ T8886] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  228.181928][ T8886] RBP: 00007fdc0589d090 R08: 0000000000000000 R09: 0000000000000000
[  228.190444][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.198858][ T8886] R13: 00007fdc04c26038 R14: 00007fdc04c25fa0 R15: 00007ffc73db0308
[  228.208150][ T8886]  </TASK>
[  228.263482][ T8886] syz.2.1177: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  228.286800][ T8886] CPU: 0 PID: 8886 Comm: syz.2.1177 Not tainted syzkaller #0
[  228.295219][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.306794][ T8886] Call Trace:
[  228.310820][ T8886]  <TASK>
[  228.313906][ T8886]  dump_stack_lvl+0x18c/0x250
[  228.319362][ T8886]  ? show_regs_print_info+0x20/0x20
[  228.324778][ T8886]  ? load_image+0x420/0x420
[  228.330387][ T8886]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  228.338345][ T8886]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  228.344986][ T8886]  warn_alloc+0x246/0x340
[  228.349435][ T8886]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.355899][ T8886]  ? zone_watermark_ok_safe+0x230/0x230
[  228.362281][ T8886]  ? __get_vm_area_node+0x356/0x370
[  228.367748][ T8886]  __vmalloc_node_range+0x394/0x1320
[  228.373499][ T8886]  ? free_vm_area+0x50/0x50
[  228.378239][ T8886]  ? __might_fault+0xaa/0x120
[  228.383044][ T8886]  ? __might_fault+0xc6/0x120
[  228.387765][ T8886]  ? ethtool_get_stats+0x20b/0x3a0
[  228.392920][ T8886]  vzalloc+0x79/0x90
[  228.397168][ T8886]  ? ethtool_get_stats+0x20b/0x3a0
[  228.402405][ T8886]  ethtool_get_stats+0x20b/0x3a0
[  228.407381][ T8886]  ? ethtool_phys_id+0x530/0x530
[  228.412623][ T8886]  dev_ethtool+0xa63/0x18d0
[  228.417286][ T8886]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  228.424511][ T8886]  ? __lock_acquire+0x7d80/0x7d80
[  228.429583][ T8886]  ? lockdep_hardirqs_on+0x98/0x150
[  228.434831][ T8886]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.441026][ T8886]  ? full_name_hash+0x92/0xe0
[  228.445831][ T8886]  ? dev_load+0x21/0x1f0
[  228.450109][ T8886]  dev_ioctl+0x392/0x1140
[  228.454562][ T8886]  sock_do_ioctl+0x239/0x310
[  228.459981][ T8886]  ? sock_show_fdinfo+0xb0/0xb0
[  228.465189][ T8886]  sock_ioctl+0x5be/0x7e0
[  228.469915][ T8886]  ? sock_poll+0x3e0/0x3e0
[  228.474462][ T8886]  ? security_file_ioctl+0x74/0xa0
[  228.479700][ T8886]  ? bpf_lsm_file_ioctl+0x9/0x10
[  228.485260][ T8886]  ? security_file_ioctl+0x80/0xa0
[  228.490409][ T8886]  ? sock_poll+0x3e0/0x3e0
[  228.494856][ T8886]  __se_sys_ioctl+0xfd/0x170
[  228.499484][ T8886]  do_syscall_64+0x55/0xb0
[  228.504014][ T8886]  ? clear_bhb_loop+0x40/0x90
[  228.508721][ T8886]  ? clear_bhb_loop+0x40/0x90
[  228.514680][ T8886]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.520613][ T8886] RIP: 0033:0x7fdc0499e0d9
[  228.525060][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.544824][ T8886] RSP: 002b:00007fdc0589d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.553632][ T8886] RAX: ffffffffffffffda RBX: 00007fdc04c25fa0 RCX: 00007fdc0499e0d9
[  228.561898][ T8886] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  228.570078][ T8886] RBP: 00007fdc0589d090 R08: 0000000000000000 R09: 0000000000000000
[  228.578120][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.586474][ T8886] R13: 00007fdc04c26038 R14: 00007fdc04c25fa0 R15: 00007ffc73db0308
[  228.594571][ T8886]  </TASK>
[  228.635111][ T8886] Mem-Info:
[  228.647545][ T8886] active_anon:5198 inactive_anon:0 isolated_anon:0
[  228.647545][ T8886]  active_file:15972 inactive_file:40011 isolated_file:0
[  228.647545][ T8886]  unevictable:768 dirty:330 writeback:0
[  228.647545][ T8886]  slab_reclaimable:10233 slab_unreclaimable:91601
[  228.647545][ T8886]  mapped:27503 shmem:1361 pagetables:542
[  228.647545][ T8886]  sec_pagetables:0 bounce:0
[  228.647545][ T8886]  kernel_misc_reclaimable:0
[  228.647545][ T8886]  free:1349832 free_pcp:10460 free_cma:0
[  228.729816][ T8886] Node 0 active_anon:20792kB inactive_anon:0kB active_file:63888kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110112kB dirty:1316kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10504kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no
[  228.769773][ T8886] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  228.806673][ T8886] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.841259][ T8886] lowmem_reserve[]: 0 2521 2522 2522 2522
[  228.850724][ T8886] Node 0 DMA32 free:1489344kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20852kB inactive_anon:0kB active_file:63888kB inactive_file:159012kB unevictable:1536kB writepending:1316kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:20200kB local_pcp:11544kB free_cma:0kB
[  228.887763][ T8886] lowmem_reserve[]: 0 0 0 0 0
[  228.893130][ T8886] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  228.923227][ T8886] lowmem_reserve[]: 0 0 0 0 0
[  228.928631][ T8886] Node 1 Normal free:3894624kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20864kB local_pcp:12448kB free_cma:0kB
[  228.981444][ T8886] lowmem_reserve[]: 0 0 0 0 0
[  228.988971][ T8886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  229.006235][ T8886] Node 0 DMA32: 505*4kB (ME) 2126*8kB (UM) 1515*16kB (UME) 842*32kB (UM) 692*64kB (UM) 325*128kB (UM) 227*256kB (UME) 152*512kB (UME) 99*1024kB (UME) 11*2048kB (UM) 262*4096kB (UM) = 1489092kB
[  229.028486][ T8886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  229.042313][ T8886] Node 1 Normal: 216*4kB (UME) 46*8kB (UME) 25*16kB (UME) 92*32kB (UME) 16*64kB (UM) 9*128kB (UME) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 949*4096kB (ME) = 3894624kB
[  229.060743][ T8886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  229.070976][ T8886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  229.080518][ T8886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  229.090822][ T8886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  229.101224][ T8886] 57344 total pagecache pages
[  229.106115][ T8886] 0 pages in swap cache
[  229.110452][ T8886] Free swap  = 124996kB
[  229.115107][ T8886] Total swap = 124996kB
[  229.119386][ T8886] 2097051 pages RAM
[  229.123496][ T8886] 0 pages HighMem/MovableOnly
[  229.128376][ T8886] 416955 pages reserved
[  229.132756][ T8886] 0 pages cma reserved
[  229.138209][ T8902] netlink: 'syz.3.1181': attribute type 13 has an invalid length.
[  229.450443][ T8913] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1185'.
[  229.479531][ T8913] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1185'.
[  229.493000][ T8913] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1185'.
[  229.506047][ T8913] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1185'.
[  229.691546][ T8930] raw_sendmsg: syz.3.1191 forgot to set AF_INET. Fix it!
[  230.074189][ T8943] netlink: 'syz.2.1195': attribute type 13 has an invalid length.
[  232.405869][ T8985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.281382][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1226'.
[  233.291459][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1226'.
[  233.304769][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1226'.
[  233.317939][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1226'.
[  233.704061][ T9024] netlink: 'syz.3.1229': attribute type 10 has an invalid length.
[  238.562290][ T9076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.744311][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1264'.
[  242.402619][ T9175] syzkaller0: entered promiscuous mode
[  242.408731][ T9175] syzkaller0: entered allmulticast mode
[  243.469581][ T9208] netlink: 'syz.2.1296': attribute type 30 has an invalid length.
[  243.746304][ T9213] netlink: 'syz.1.1298': attribute type 10 has an invalid length.
[  243.866453][ T9213] macvlan0: entered promiscuous mode
[  243.884222][ T9213] macvlan0: entered allmulticast mode
[  243.999427][ T9213] veth1_vlan: entered allmulticast mode
[  244.099765][ T9213] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  245.562688][ T9242] syzkaller0: entered promiscuous mode
[  248.140946][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1320'.
[  248.216011][ T9272] netlink: 'syz.2.1321': attribute type 10 has an invalid length.
[  248.743893][ T9272] team0 (unregistering): Port device team_slave_0 removed
[  251.273817][ T9272] team0 (unregistering): Port device team_slave_1 removed
[  251.329360][ T9280] netlink: 'syz.0.1322': attribute type 39 has an invalid length.
[  251.379162][ T9280] bond0: (slave syz_tun): Releasing backup interface
[  251.713504][ T9305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1332'.
[  252.018070][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.275501][ T9323] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1336'.
[  253.002558][ T9329] netlink: 'syz.2.1340': attribute type 39 has an invalid length.
[  253.341227][ T9329] bond0: (slave syz_tun): Releasing backup interface
[  253.682208][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1344'.
[  253.769675][ T9343] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.1345'.
[  254.054539][ T9353] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1350'.
[  254.132562][ T9353] netlink: 'syz.2.1350': attribute type 33 has an invalid length.
[  254.171704][ T9353] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1350'.
[  254.667338][ T9368] tap0: tun_chr_ioctl cmd 1074025677
[  254.710248][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'.
[  254.715451][ T9368] tap0: linktype set to 777
[  254.770307][ T9367] netlink: 'syz.3.1355': attribute type 39 has an invalid length.
[  254.772985][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  254.868374][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'.
[  254.893209][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  254.942659][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'.
[  254.953424][ T9368] tap0: tun_chr_ioctl cmd 1074025677
[  254.971504][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.002139][ T9368] tap0: linktype set to 777
[  255.010669][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'.
[  255.010712][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.057269][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1356'.
[  255.090082][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.098688][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1357'.
[  255.120581][ T9368] tap0: tun_chr_ioctl cmd 1074025677
[  255.149282][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.150155][ T9368] tap0: linktype set to 777
[  255.193906][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.207914][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.221916][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.234760][ T9370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.236914][ T9368] tap0: tun_chr_ioctl cmd 1074025677
[  255.298638][ T9368] tap0: linktype set to 777
[  255.397373][ T5083] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  256.086038][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.093537][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.246615][ T9425] FAULT_INJECTION: forcing a failure.
[  256.246615][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.272417][ T9425] CPU: 1 PID: 9425 Comm: syz.3.1375 Not tainted syzkaller #0
[  256.281518][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.292128][ T9425] Call Trace:
[  256.295640][ T9425]  <TASK>
[  256.298890][ T9425]  dump_stack_lvl+0x18c/0x250
[  256.303707][ T9425]  ? show_regs_print_info+0x20/0x20
[  256.309187][ T9425]  ? load_image+0x420/0x420
[  256.313792][ T9425]  ? __lock_acquire+0x7d80/0x7d80
[  256.319186][ T9425]  ? snprintf+0xe9/0x140
[  256.323524][ T9425]  should_fail_ex+0x394/0x4c0
[  256.328302][ T9425]  _copy_to_user+0x2f/0xa0
[  256.332828][ T9425]  simple_read_from_buffer+0xe7/0x150
[  256.338499][ T9425]  proc_fail_nth_read+0x1e8/0x260
[  256.344337][ T9425]  ? proc_fault_inject_write+0x360/0x360
[  256.350017][ T9425]  ? fsnotify_perm+0x271/0x5e0
[  256.354850][ T9425]  ? proc_fault_inject_write+0x360/0x360
[  256.361124][ T9425]  vfs_read+0x298/0x990
[  256.365297][ T9425]  ? kernel_read+0x1e0/0x1e0
[  256.369897][ T9425]  ? __fget_files+0x28/0x460
[  256.374531][ T9425]  ? __fget_files+0x3fc/0x460
[  256.379573][ T9425]  ? __fdget_pos+0x2a3/0x330
[  256.384539][ T9425]  ? ksys_read+0x74/0x260
[  256.389483][ T9425]  ksys_read+0x151/0x260
[  256.393782][ T9425]  ? vfs_write+0x9a0/0x9a0
[  256.398507][ T9425]  ? lockdep_hardirqs_on+0x98/0x150
[  256.403825][ T9425]  do_syscall_64+0x55/0xb0
[  256.408261][ T9425]  ? clear_bhb_loop+0x40/0x90
[  256.412959][ T9425]  ? clear_bhb_loop+0x40/0x90
[  256.417734][ T9425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.424399][ T9425] RIP: 0033:0x7f890355e90e
[  256.428818][ T9425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  256.449585][ T9425] RSP: 002b:00007f890444afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  256.458733][ T9425] RAX: ffffffffffffffda RBX: 00007f890444b6c0 RCX: 00007f890355e90e
[  256.466984][ T9425] RDX: 000000000000000f RSI: 00007f890444b0a0 RDI: 0000000000000005
[  256.475151][ T9425] RBP: 00007f890444b090 R08: 0000000000000000 R09: 0000000000000000
[  256.483357][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.492158][ T9425] R13: 00007f8903826038 R14: 00007f8903825fa0 R15: 00007ffe16571258
[  256.500660][ T9425]  </TASK>
[  256.828535][ T9436] netlink: 'syz.3.1378': attribute type 9 has an invalid length.
[  259.090629][ T9479] aaaaaaaaaaaaaaa: entered promiscuous mode
[  260.654872][ T9512] netlink: 'syz.0.1402': attribute type 9 has an invalid length.
[  260.678687][ T9512] __nla_validate_parse: 22 callbacks suppressed
[  260.678774][ T9512] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1402'.
[  263.064395][ T9578] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.1430'.
[  263.130654][ T9578] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1430'.
[  263.240980][ T9578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.260936][ T9578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.284656][ T9578] bond0 (unregistering): Released all slaves
[  263.615438][ T9591] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'.
[  263.661749][ T9591] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'.
[  263.706951][ T9584] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'.
[  263.760306][ T9595] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1432'.
[  263.831087][ T9584] netlink: 'syz.1.1432': attribute type 10 has an invalid length.
[  263.850153][ T9584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1432'.
[  263.907769][ T9584] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  263.933537][ T9584] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.966131][ T9584] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  264.971136][ T9627] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1449'.
[  265.115573][ T9633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1449'.
[  265.835305][ T9656] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1457'.
[  266.043955][ T9660] dummy0: entered promiscuous mode
[  267.268804][ T9686] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1467'.
[  267.340689][ T9686] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1467'.
[  267.374613][ T9676] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1467'.
[  267.419668][ T9687] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1467'.
[  267.479776][ T9689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1471'.
[  267.513831][ T9676] netlink: 'syz.2.1467': attribute type 10 has an invalid length.
[  267.544203][ T9676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1467'.
[  267.593201][ T9676] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  267.612501][ T9676] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.677043][ T9676] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  268.786087][ T9706] netlink: 'syz.0.1478': attribute type 21 has an invalid length.
[  269.350456][ T9717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1482'.
[  270.762820][ T9745] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1493'.
[  270.793706][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1494'.
[  271.015893][ T9749] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1493'.
[  271.942663][ T9773] FAULT_INJECTION: forcing a failure.
[  271.942663][ T9773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.948395][ T9769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1503'.
[  271.984730][ T9773] CPU: 0 PID: 9773 Comm: syz.1.1504 Not tainted syzkaller #0
[  271.993725][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  272.004524][ T9773] Call Trace:
[  272.007997][ T9773]  <TASK>
[  272.011260][ T9773]  dump_stack_lvl+0x18c/0x250
[  272.016361][ T9773]  ? show_regs_print_info+0x20/0x20
[  272.022386][ T9773]  ? load_image+0x420/0x420
[  272.028541][ T9773]  ? __might_fault+0xaa/0x120
[  272.033277][ T9773]  ? __lock_acquire+0x7d80/0x7d80
[  272.039564][ T9773]  should_fail_ex+0x394/0x4c0
[  272.044306][ T9773]  _copy_from_user+0x2f/0xe0
[  272.049047][ T9773]  __sys_bpf+0x23e/0x890
[  272.053706][ T9773]  ? bpf_link_show_fdinfo+0x390/0x390
[  272.059672][ T9773]  ? lock_chain_count+0x20/0x20
[  272.064938][ T9773]  __x64_sys_bpf+0x7c/0x90
[  272.069886][ T9773]  do_syscall_64+0x55/0xb0
[  272.074638][ T9773]  ? clear_bhb_loop+0x40/0x90
[  272.080624][ T9773]  ? clear_bhb_loop+0x40/0x90
[  272.085815][ T9773]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.092008][ T9773] RIP: 0033:0x7feabd99e0d9
[  272.096997][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.119572][ T9773] RSP: 002b:00007feabe944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  272.129331][ T9773] RAX: ffffffffffffffda RBX: 00007feabdc25fa0 RCX: 00007feabd99e0d9
[  272.137720][ T9773] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c
[  272.146847][ T9773] RBP: 00007feabe944090 R08: 0000000000000000 R09: 0000000000000000
[  272.156522][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.165768][ T9773] R13: 00007feabdc26038 R14: 00007feabdc25fa0 R15: 00007ffd93589b18
[  272.174677][ T9773]  </TASK>
[  273.179679][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1518'.
[  274.381238][ T9835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1531'.
[  274.839425][ T9857] netlink: 'syz.0.1541': attribute type 1 has an invalid length.
[  274.854314][ T9857] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1541'.
[  275.127682][ T9862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1544'.
[  275.303336][ T9872] FAULT_INJECTION: forcing a failure.
[  275.303336][ T9872] name failslab, interval 1, probability 0, space 0, times 0
[  275.336598][ T9872] CPU: 1 PID: 9872 Comm: syz.1.1548 Not tainted syzkaller #0
[  275.344397][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  275.354938][ T9872] Call Trace:
[  275.358670][ T9872]  <TASK>
[  275.361714][ T9872]  dump_stack_lvl+0x18c/0x250
[  275.366783][ T9872]  ? show_regs_print_info+0x20/0x20
[  275.372274][ T9872]  ? load_image+0x420/0x420
[  275.376863][ T9872]  ? __might_sleep+0xe0/0xe0
[  275.381836][ T9872]  ? __lock_acquire+0x7d80/0x7d80
[  275.386975][ T9872]  ? trace_contention_end+0x39/0xe0
[  275.392297][ T9872]  should_fail_ex+0x394/0x4c0
[  275.397108][ T9872]  should_failslab+0x9/0x20
[  275.402448][ T9872]  slab_pre_alloc_hook+0x59/0x300
[  275.407683][ T9872]  ? mutex_lock_nested+0x20/0x20
[  275.412788][ T9872]  ? tcx_link_attach+0x165/0x960
[  275.418752][ T9872]  __kmem_cache_alloc_node+0x53/0x250
[  275.424665][ T9872]  ? tcx_link_attach+0x165/0x960
[  275.430281][ T9872]  kmalloc_trace+0x2a/0xe0
[  275.434820][ T9872]  tcx_link_attach+0x165/0x960
[  275.439970][ T9872]  ? __fget_files+0x28/0x460
[  275.444576][ T9872]  ? tcx_prog_query+0x140/0x140
[  275.449447][ T9872]  ? __fget_files+0x3fc/0x460
[  275.454163][ T9872]  ? bpf_prog_attach_check_attach_type+0x188/0x440
[  275.460765][ T9872]  link_create+0x390/0x720
[  275.465375][ T9872]  __sys_bpf+0x4d7/0x890
[  275.469780][ T9872]  ? bpf_link_show_fdinfo+0x390/0x390
[  275.475697][ T9872]  ? lock_chain_count+0x20/0x20
[  275.480648][ T9872]  __x64_sys_bpf+0x7c/0x90
[  275.485598][ T9872]  do_syscall_64+0x55/0xb0
[  275.490294][ T9872]  ? clear_bhb_loop+0x40/0x90
[  275.495012][ T9872]  ? clear_bhb_loop+0x40/0x90
[  275.499919][ T9872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.506524][ T9872] RIP: 0033:0x7feabd99e0d9
[  275.511741][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.533784][ T9872] RSP: 002b:00007feabe944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  275.543351][ T9872] RAX: ffffffffffffffda RBX: 00007feabdc25fa0 RCX: 00007feabd99e0d9
[  275.552995][ T9872] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c
[  275.561714][ T9872] RBP: 00007feabe944090 R08: 0000000000000000 R09: 0000000000000000
[  275.570313][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.579065][ T9872] R13: 00007feabdc26038 R14: 00007feabdc25fa0 R15: 00007ffd93589b18
[  275.588317][ T9872]  </TASK>
[  275.653656][ T9879] netlink: 'syz.2.1549': attribute type 21 has an invalid length.
[  275.846396][ T9888] netlink: 'syz.0.1555': attribute type 1 has an invalid length.
[  275.854963][ T9888] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1555'.
[  275.883674][ T9888] netlink: 'syz.0.1555': attribute type 3 has an invalid length.
[  275.893697][ T9888] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1555'.
[  275.978235][ T9893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.077902][ T9888] netlink: 'syz.0.1555': attribute type 10 has an invalid length.
[  276.230326][ T9895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1558'.
[  276.664302][    C0] 
[  276.664311][    C0] ================================
[  276.664316][    C0] WARNING: inconsistent lock state
[  276.664336][    C0] syzkaller #0 Not tainted
[  276.664346][    C0] --------------------------------
[  276.664350][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  276.664357][    C0] syz.2.1564/9911 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  276.664376][    C0] ffffffff8d2978d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0
[  276.664433][    C0] {INITIAL USE} state was registered at:
[  276.664437][    C0]   lock_acquire+0x19e/0x420
[  276.664456][    C0]   _raw_write_lock_irq+0xaf/0xf0
[  276.664479][    C0]   kernfs_rename_ns+0x5e4/0x830
[  276.664501][    C0]   sysfs_rename_link_ns+0x175/0x1b0
[  276.664516][    C0]   device_rename+0x110/0x1e0
[  276.664534][    C0]   dev_change_name+0x308/0x8e0
[  276.664553][    C0]   do_setlink+0x925/0x3f40
[  276.664571][    C0]   rtnl_newlink+0x1848/0x2170
[  276.664586][    C0]   rtnetlink_rcv_msg+0x843/0xf90
[  276.664603][    C0]   netlink_rcv_skb+0x235/0x4c0
[  276.664618][    C0]   netlink_unicast+0x7b1/0x930
[  276.664639][    C0]   netlink_sendmsg+0x8d0/0xbf0
[  276.664653][    C0]   __sys_sendto+0x4a9/0x6b0
[  276.664667][    C0]   __x64_sys_sendto+0xde/0xf0
[  276.664682][    C0]   do_syscall_64+0x55/0xb0
[  276.664697][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.664718][    C0] irq event stamp: 4480
[  276.664724][    C0] hardirqs last  enabled at (4479): [<ffffffff8aa0144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.664745][    C0] hardirqs last disabled at (4480): [<ffffffff8a8cb3b3>] exc_debug+0x73/0x140
[  276.664767][    C0] softirqs last  enabled at (2788): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  276.664784][    C0] softirqs last disabled at (2773): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  276.664801][    C0] 
[  276.664801][    C0] other info that might help us debug this:
[  276.664805][    C0]  Possible unsafe locking scenario:
[  276.664805][    C0] 
[  276.664808][    C0]        CPU0
[  276.664810][    C0]        ----
[  276.664813][    C0]   lock(kernfs_rename_lock);
[  276.664822][    C0]   <Interrupt>
[  276.664825][    C0]     lock(kernfs_rename_lock);
[  276.664835][    C0] 
[  276.664835][    C0]  *** DEADLOCK ***
[  276.664835][    C0] 
[  276.664838][    C0] 3 locks held by syz.2.1564/9911:
[  276.664848][    C0]  #0: ffff88805f533248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  276.664891][    C0]  #1: ffff888024b3e418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  276.664937][    C0]  #2: ffff88807b493210 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120
[  276.664980][    C0] 
[  276.664980][    C0] stack backtrace:
[  276.664985][    C0] CPU: 0 PID: 9911 Comm: syz.2.1564 Not tainted syzkaller #0
[  276.665001][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.665010][    C0] Call Trace:
[  276.665017][    C0]  <#DB>
[  276.665023][    C0]  dump_stack_lvl+0x18c/0x250
[  276.665041][    C0]  ? show_regs_print_info+0x20/0x20
[  276.665061][    C0]  ? print_usage_bug+0x43d/0x6a0
[  276.665085][    C0]  ? verify_lock_unused+0x15/0x140
[  276.665105][    C0]  lock_acquire+0x2c2/0x420
[  276.665123][    C0]  ? trim_init_extable+0x6f0/0x6f0
[  276.665141][    C0]  ? kernfs_path_from_node+0x88/0xbd0
[  276.665163][    C0]  ? read_lock_is_recursive+0x20/0x20
[  276.665181][    C0]  ? __get_user_nocheck_8+0xa/0x20
[  276.665202][    C0]  ? fixup_exception+0x11bb/0x1d90
[  276.665221][    C0]  ? look_up_lock_class+0x75/0x140
[  276.665250][    C0]  _raw_read_lock_irqsave+0xbc/0x100
[  276.665273][    C0]  ? kernfs_path_from_node+0x88/0xbd0
[  276.665295][    C0]  ? _raw_read_lock+0x50/0x50
[  276.665316][    C0]  ? rcu_is_watching+0x15/0xb0
[  276.665337][    C0]  ? lock_release+0xb5/0x8c0
[  276.665355][    C0]  ? percpu_ref_tryget+0x15/0x180
[  276.665376][    C0]  kernfs_path_from_node+0x88/0xbd0
[  276.665398][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  276.665416][    C0]  ? rcu_is_watching+0x15/0xb0
[  276.665438][    C0]  ? kernfs_name+0x140/0x140
[  276.665459][    C0]  ? get_mem_cgroup_from_mm+0x38/0x290
[  276.665477][    C0]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  276.665496][    C0]  get_mm_memcg_path+0xb9/0x360
[  276.665521][    C0]  __mmap_lock_do_trace_start_locking+0xe6/0x2f0
[  276.665546][    C0]  ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230
[  276.665582][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  276.665604][    C0]  ? _raw_spin_unlock+0x28/0x40
[  276.665628][    C0]  stack_map_get_build_id_offset+0x5d3/0x720
[  276.665652][    C0]  ? pcpu_freelist_pop+0x12a/0x190
[  276.665674][    C0]  ? __bpf_get_stackid+0x900/0x900
[  276.665694][    C0]  ? perf_prepare_sample+0x1558/0x1db0
[  276.665716][    C0]  __bpf_get_stackid+0x564/0x900
[  276.665739][    C0]  bpf_prog_12712c88fd19bd5b+0x29/0x2d
[  276.665753][    C0]  bpf_overflow_handler+0x1fc/0x510
[  276.665778][    C0]  ? bpf_overflow_handler+0xde/0x510
[  276.665801][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  276.665826][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  276.665847][    C0]  __perf_event_overflow+0x461/0x660
[  276.665869][    C0]  perf_swevent_event+0x319/0x570
[  276.665889][    C0]  ? perf_tp_event+0x1550/0x1550
[  276.665908][    C0]  ? perf_trace_buf_alloc+0x290/0x290
[  276.665933][    C0]  perf_bp_event+0x319/0x430
[  276.665954][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  276.665986][    C0]  ? lock_acquire+0x2c2/0x420
[  276.666007][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  276.666031][    C0]  notifier_call_chain+0x18f/0x380
[  276.666050][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  276.666071][    C0]  atomic_notifier_call_chain+0xda/0x180
[  276.666091][    C0]  notify_die+0x145/0x1a0
[  276.666113][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  276.666137][    C0]  ? rcu_is_watching+0x15/0xb0
[  276.666159][    C0]  notify_debug+0x2e/0x50
[  276.666175][    C0]  exc_debug+0xde/0x140
[  276.666196][    C0]  asm_exc_debug+0x1e/0x40
[  276.666212][    C0] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  276.666233][    C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  276.666252][    C0] RSP: 0018:ffffc90018f2f9b8 EFLAGS: 00050206
[  276.666267][    C0] RAX: ffffffff84303001 RBX: dffffc0000000000 RCX: 0000000000000de0
[  276.666279][    C0] RDX: 0000000000000001 RSI: 0000200000000320 RDI: ffff88805188f220
[  276.666291][    C0] RBP: ffffc90018f2fb50 R08: ffff88805188ffff R09: 1ffff1100a311fff
[  276.666303][    C0] R10: dffffc0000000000 R11: ffffed100a312000 R12: 1ffff920031e5fb7
[  276.666315][    C0] R13: 0000000000001000 R14: 0000200000000100 R15: ffff88805188f000
[  276.666330][    C0]  ? copy_page_from_iter_atomic+0x231/0x13d0
[  276.666357][    C0]  </#DB>
[  276.666362][    C0]  <TASK>
[  276.666367][    C0]  copy_page_from_iter_atomic+0x2db/0x13d0
[  276.666389][    C0]  ? shmem_get_folio_gfp+0x2780/0x2b40
[  276.666415][    C0]  ? iov_iter_zero+0x1160/0x1160
[  276.666439][    C0]  ? shmem_write_begin+0x1cf/0x430
[  276.666459][    C0]  generic_perform_write+0x353/0x5c0
[  276.666486][    C0]  ? generic_file_direct_write+0x3e0/0x3e0
[  276.666509][    C0]  ? file_update_time+0x192/0x1a0
[  276.666529][    C0]  shmem_file_write_iter+0xfb/0x120
[  276.666550][    C0]  vfs_write+0x474/0x9a0
[  276.666591][    C0]  ? file_end_write+0x250/0x250
[  276.666614][    C0]  ? __fget_files+0x3fc/0x460
[  276.666639][    C0]  ? __fdget_pos+0x2a3/0x330
[  276.666659][    C0]  ? ksys_write+0x74/0x260
[  276.666682][    C0]  ksys_write+0x151/0x260
[  276.666705][    C0]  ? __ia32_sys_read+0x90/0x90
[  276.666727][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  276.666749][    C0]  do_syscall_64+0x55/0xb0
[  276.666765][    C0]  ? clear_bhb_loop+0x40/0x90
[  276.666782][    C0]  ? clear_bhb_loop+0x40/0x90
[  276.666800][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.666818][    C0] RIP: 0033:0x7fdc0499e0d9
[  276.666831][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.666843][    C0] RSP: 002b:00007fdc0589d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  276.666859][    C0] RAX: ffffffffffffffda RBX: 00007fdc04c25fa0 RCX: 00007fdc0499e0d9
[  276.666871][    C0] RDX: 0000000000001001 RSI: 0000200000000100 RDI: 0000000000000004
[  276.666881][    C0] RBP: 00007fdc04a35024 R08: 0000000000000000 R09: 0000000000000000
[  276.666890][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.666899][    C0] R13: 00007fdc04c26038 R14: 00007fdc04c25fa0 R15: 00007ffc73db0308
[  276.666918][    C0]  </TASK>