last executing test programs:

28.871135298s ago: executing program 0 (id=8649):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300)="989f", &(0x7f00000005c0)=""/104}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x854)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)

27.816532705s ago: executing program 0 (id=8653):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000330000000000000fe020010850000004300000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

27.63420532s ago: executing program 0 (id=8655):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

26.475899309s ago: executing program 0 (id=8660):
socket$kcm(0x10, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x29, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

26.02928993s ago: executing program 0 (id=8665):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x4, {0xa, 0x4e20, 0x1, @empty, 0xffffff01}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="272bda4eb1a57b7baaa51972281784b5f908a013f95453d6bf2a136f0d66cab6fa61f7d8af9f8cedaed932264729b321bb73a753b4c0585a94e4b9cc42aafce00c9bd7bfc49560d42be55b8300fc39427ce0c91b", 0x54}, {&(0x7f0000000380)="4ece80028292a64c3a064872fe630a88da2c7fb653ae87b67bb9450333de9a00185ff5a60873f422279c960c5b2204316cba9a1ea5bd785d3f19d4b9ddba6c7dda8ba7cae76904fca36714c88c2182c2b51d9d8c70a74d298bde36cd70cb84a7a83bbbf9", 0x64}, {&(0x7f0000000700)="5e7dc733d8545290035d3cdd744e835b1cce76db200b9f2130d14528f9fa384bef5aa18f612926fe10c805bf92357d2256f0b9105598ebe389b9036ac748fcdcd8e833d4f418af8d82a3aa485b5e0b26c8ff760a27fee0ecf7d5bfd8fc7620eaa0cd0181af8da22d55f9245d4ce1bcec8aaade8741bc25cb93db1bbb92e028964c612ffb7d8737c613519ce41fbffc66806c3cdf4198369c9ab9c57ea6906c41e0ffc5a7e0a731ca876abb3a16bfd72badb040993b714e750ab74281d87c9e8a8398617ee2f3d56fc60bade0f8fddffc4c9edb4d27dfb6f3ba67", 0xda}, {&(0x7f0000000840)="dd46717c8d3a4eb102d1cd89ced5c3619d520a4417d69a9fb1b8e8042edd88db4e1a2cfdb466998767819b7f4e517f36384ed7977690bcf5bec2cf9b31d4c28e6d3bbac9b0c132595a0533234653b154d6b2291f2bfd1c5ff473178c", 0x5c}, {&(0x7f00000008c0)="d585827a3d748c8855eeb2b06089cab18bf939c30b05dd613cd75651e7f9e3f884a30265aaaf6072a29800fbd0d0925c3dc49faaee65477fe06f8bd513637fba93c5e61ce79b99f0d038b0fd12c6b3ed46ce6cb466a0ad948a4eb1d0255abb260aaec9a5baa897172df23eb117445edef1cfa7f1f6da0866badafb84a14694ceaa2426a1e2a8113871eb10db63b89074a71fa651ab3f0c09d197b42dca5bef67ad3aa7", 0xa3}], 0x5, &(0x7f0000000a00)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2d5b}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xd8}, 0x20008004)
ioctl$SIOCSIFHWADDR(r0, 0x4020940d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.457861883s ago: executing program 0 (id=8702):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x4, {0xa, 0x4e20, 0x1, @empty, 0xffffff01}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="272bda4eb1a57b7baaa51972281784b5f908a013f95453d6bf2a136f0d66cab6fa61f7d8af9f8cedaed932264729b321bb73a753b4c0585a94e4b9cc42aafce00c9bd7bfc49560d42be55b8300fc39427ce0c91b", 0x54}, {&(0x7f0000000380)="4ece80028292a64c3a064872fe630a88da2c7fb653ae87b67bb9450333de9a00185ff5a60873f422279c960c5b2204316cba9a1ea5bd785d3f19d4b9ddba6c7dda8ba7cae76904fca36714c88c2182c2b51d9d8c70a74d298bde36cd70cb84a7a83bbbf9", 0x64}, {&(0x7f0000000700)="5e7dc733d8545290035d3cdd744e835b1cce76db200b9f2130d14528f9fa384bef5aa18f612926fe10c805bf92357d2256f0b9105598ebe389b9036ac748fcdcd8e833d4f418af8d82a3aa485b5e0b26c8ff760a27fee0ecf7d5bfd8fc7620eaa0cd0181af8da22d55f9245d4ce1bcec8aaade8741bc25cb93db1bbb92e028964c612ffb7d8737c613519ce41fbffc66806c3cdf4198369c9ab9c57ea6906c41e0ffc5a7e0a731ca876abb3a16bfd72badb040993b714e750ab74281d87c9e8a8398617ee2f3d56fc60bade0f8fddffc4c9edb4d27dfb6f3ba67", 0xda}, {&(0x7f0000000840)="dd46717c8d3a4eb102d1cd89ced5c3619d520a4417d69a9fb1b8e8042edd88db4e1a2cfdb466998767819b7f4e517f36384ed7977690bcf5bec2cf9b31d4c28e6d3bbac9b0c132595a0533234653b154d6b2291f2bfd1c5ff473178c", 0x5c}, {&(0x7f00000008c0)="d585827a3d748c8855eeb2b06089cab18bf939c30b05dd613cd75651e7f9e3f884a30265aaaf6072a29800fbd0d0925c3dc49faaee65477fe06f8bd513637fba93c5e61ce79b99f0d038b0fd12c6b3ed46ce6cb466a0ad948a4eb1d0255abb260aaec9a5baa897172df23eb117445edef1cfa7f1f6da0866badafb84a14694ceaa2426a1e2a8113871eb10db63b89074a71fa651ab3f0c09d197b42dca5bef67ad3aa7", 0xa3}], 0x5, &(0x7f0000000a00)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2d5b}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xd8}, 0x20008004)
ioctl$SIOCSIFHWADDR(r0, 0x4020940d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0)

15.40848353s ago: executing program 2 (id=8700):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

14.006466185s ago: executing program 2 (id=8704):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x5, 0x60261, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x1080a0, 0x40002, 0x0, 0x3, 0x5, 0x3, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fcf5000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) (async)
openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)

13.555353986s ago: executing program 2 (id=8705):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x94)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002b3a799fec0793d210000030000000000000200"/35], 0x50)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x8, 0x10}, 0xc)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x5}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xb, 0xb, 0x3, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000e00)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000e40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x1, 0x7ff, 0x1ee1}, 0x10, 0x230f1, r0, 0x5, &(0x7f0000000ec0)=[r3, r1, r3, r3, r1, r2, r1, r3, r3], &(0x7f0000000f00)=[{0x2, 0x1, 0xb, 0x4}, {0x2, 0x2, 0xd, 0x5}, {0x2, 0x1, 0x5, 0x3}, {0x0, 0x4, 0x1, 0x7}, {0x5, 0x3, 0x4, 0x2}], 0x10, 0x800}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100))
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005e0033"], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x218606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0)
close(r7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x85a6, '\x00', r9, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
recvmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/101, 0x65}], 0x1}, 0x100)

12.64478736s ago: executing program 3 (id=8708):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x121001, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8000000}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000f8ffffffffffffff000000e1a5000000000700009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
socket$kcm(0x2, 0x3, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x800, 0x1}, 0x50)

10.060308995s ago: executing program 1 (id=8709):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300)="989f", &(0x7f00000005c0)=""/104}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x854)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)

10.059682375s ago: executing program 3 (id=8710):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000200000000000000008f576da1fdb8a7770000009e4a0975a34fb61866613ae005f851bdb19d48026be9319c35b1"], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc)
r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xf6, 0x4, 0x1, 0xc2, 0x0, 0x10000000000, 0x10, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x10280, 0x1, 0x7fffffff, 0x0, 0x8, 0xc, 0x5, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, r1, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8)
ioctl$TUNSETIFF(r4, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000010260000002600000010000000030000000200000f02000000007a0700005cf300001ec7000000305f305f00"], &(0x7f00000006c0)=""/133, 0x46, 0x85, 0x8, 0x8}, 0x28)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095e549634c6db83f"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x40000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x102, 0x0, &(0x7f0000000280)="545292ddc1802d361c41e95d2e014983da19f638e64da47f0c3ad55f135e9ca537ae93fb491b0301acd55144a139257cccb1964eeb1e20b6d0fefcd3a7acde00635cca823911a5086fc4b777ac4e71e42a2548d407828e44194c03ca5e7aa8106e3318ddea6f89bd2bae999738545e1c99ca64178d10fff829f72259dcc462987f040e40c0e421a6aa8b93c6af9ff6f0f798960546699e34f6e4f5ecfb55ca34a186c7a6616b85da68f4afcbce009e7b2facf1ea888f9b692f70b45e578df504557895681b3c88fcb0a9ff2810e7cebc69d3f5ed2c05aa5c8986e6bb92668380d8dbc7e56972b92baf74e1bb402a0bb49d9eae40169a1570bb21096a05f1d3d5e44d", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x8, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006112280037cd00189500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffe8}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.289118857s ago: executing program 1 (id=8711):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', @random='\x00\x00\x00\x00\x00 '}) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
r5 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x28, 0x6, 0x0, 0x44) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000480)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='N\n'], 0x6a) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x8, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x27) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc)

2.518817466s ago: executing program 3 (id=8712):
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x805, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x10140)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="d13d8e3398087a748363375a3b2041b9a702d9a4", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94)
r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000ffff0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b800000018120000d6da17b7fb0ce093085f89a664b10168b20b8662819eba6e7c2010011145766af1a66340d7045ab6922599fec373edd433ffa3afc830353091ea2855e7e3797921d1d6365c29f8d3c9b3ae29e5748bc19a18b025860680f36cd857f84bffdc1e290ad7022477c44853ea117628c42e552c4d8407d992291f65e5d00ce543cefddfa2cd1d6abfdab54368d8d6c4e0595a7fa65d0f2d9e3a9c95dbd04593262d650d4842647cfce53e55911642275f601b102598bd2f0f89b145cfc8815cb6", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x400, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x2, 0x72d}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000ac0)=[{0x2, 0x2, 0x5, 0x6}, {0x1, 0x4, 0xa, 0x8}, {0x1, 0x1, 0x0, 0x3}, {0x4, 0x5, 0xb, 0x7}, {0x5, 0x4, 0x8, 0xf2a95370850da023}, {0x0, 0x2, 0x10, 0xa}], 0x10, 0xfffffff7}, 0x94)
ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, &(0x7f00000013c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0xfffffffffffffe3d, 0xd}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)

1.9565928s ago: executing program 1 (id=8713):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48000)
sendmsg$kcm(r0, 0x0, 0x20008000)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x4}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1, 0x0, 0xf0ff}, 0x0)

1.322951607s ago: executing program 32 (id=8702):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x4, {0xa, 0x4e20, 0x1, @empty, 0xffffff01}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="272bda4eb1a57b7baaa51972281784b5f908a013f95453d6bf2a136f0d66cab6fa61f7d8af9f8cedaed932264729b321bb73a753b4c0585a94e4b9cc42aafce00c9bd7bfc49560d42be55b8300fc39427ce0c91b", 0x54}, {&(0x7f0000000380)="4ece80028292a64c3a064872fe630a88da2c7fb653ae87b67bb9450333de9a00185ff5a60873f422279c960c5b2204316cba9a1ea5bd785d3f19d4b9ddba6c7dda8ba7cae76904fca36714c88c2182c2b51d9d8c70a74d298bde36cd70cb84a7a83bbbf9", 0x64}, {&(0x7f0000000700)="5e7dc733d8545290035d3cdd744e835b1cce76db200b9f2130d14528f9fa384bef5aa18f612926fe10c805bf92357d2256f0b9105598ebe389b9036ac748fcdcd8e833d4f418af8d82a3aa485b5e0b26c8ff760a27fee0ecf7d5bfd8fc7620eaa0cd0181af8da22d55f9245d4ce1bcec8aaade8741bc25cb93db1bbb92e028964c612ffb7d8737c613519ce41fbffc66806c3cdf4198369c9ab9c57ea6906c41e0ffc5a7e0a731ca876abb3a16bfd72badb040993b714e750ab74281d87c9e8a8398617ee2f3d56fc60bade0f8fddffc4c9edb4d27dfb6f3ba67", 0xda}, {&(0x7f0000000840)="dd46717c8d3a4eb102d1cd89ced5c3619d520a4417d69a9fb1b8e8042edd88db4e1a2cfdb466998767819b7f4e517f36384ed7977690bcf5bec2cf9b31d4c28e6d3bbac9b0c132595a0533234653b154d6b2291f2bfd1c5ff473178c", 0x5c}, {&(0x7f00000008c0)="d585827a3d748c8855eeb2b06089cab18bf939c30b05dd613cd75651e7f9e3f884a30265aaaf6072a29800fbd0d0925c3dc49faaee65477fe06f8bd513637fba93c5e61ce79b99f0d038b0fd12c6b3ed46ce6cb466a0ad948a4eb1d0255abb260aaec9a5baa897172df23eb117445edef1cfa7f1f6da0866badafb84a14694ceaa2426a1e2a8113871eb10db63b89074a71fa651ab3f0c09d197b42dca5bef67ad3aa7", 0xa3}], 0x5, &(0x7f0000000a00)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2d5b}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xd8}, 0x20008004)
ioctl$SIOCSIFHWADDR(r0, 0x4020940d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.314910746s ago: executing program 3 (id=8715):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7c, 0x0, 0x6}]})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000000000000", @ANYRES32=0x0, @ANYRES32=<r0=>0x0, @ANYBLOB="f8"], 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000020000000000000803000000000000000000000d00000000010000000000000c02000000002e2e"], 0x0, 0x40}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]})
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
close(r6)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000001740)}], 0x3, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8940, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES8=r5, @ANYRES32=r4, @ANYRESOCT=r8, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES32=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

1.297019347s ago: executing program 1 (id=8716):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})
getpid()
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xa18, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4228, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r7 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r7, 0x110, 0x2, &(0x7f0000000140), 0x16)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x20, 0x22, 0x0, 0x0, [0x9, 0xffffffff, 0x0, 0xf22, 0x800, 0x9, 0x2]}]}}}], 0x38}, 0x0)

1.155288481s ago: executing program 2 (id=8717):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000006c0)='W', 0x1}], 0x2}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
write$cgroup_pressure(r4, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f)
close(r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800)
socket$kcm(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))

875.865118ms ago: executing program 3 (id=8718):
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe51)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000d40400000000000007000000180100002020642500000000002000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000925a5695c5435c7b1c8a5cab6c597cb7b98070ea9a48fe79818d7570f1fa17bc9b9730f913590e829a0a277d4ee60f8516dec4ee06383c7eb1f79544"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000000}, 0x4204, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000440), 0x0}, 0xfffffffffffffd42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x3}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x3, 0x3a)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4)
sendmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x5000000, 0xac14140c}, 0x60000000}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r6)

690.283412ms ago: executing program 1 (id=8719):
r0 = socket$kcm(0xa, 0x2, 0x3a)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100ac", 0x1d}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x45b}], 0x3}, 0x3e8)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000001440)=""/39, 0x36, 0x27, 0x1, 0x9}, 0x28)
close(0x3)

441.667088ms ago: executing program 2 (id=8720):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000020000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1410, 0x0, 0x2}, 0x19)

256.426893ms ago: executing program 1 (id=8721):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x2}, 0x902, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8100, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24008801)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0)
bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x25c}, {0x34, 0x0, 0x9, 0xfffffffe}, {0x0, 0x0, 0x0, 0xb1000000}, {0x0, 0x3}, {0x6, 0x0, 0xff, 0x8000}]})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001180)}, 0x0)

134.165156ms ago: executing program 2 (id=8722):
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x805, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x10140)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="d13d8e3398087a748363375a3b2041b9a702d9a4", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94)
r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000ffff0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b800000018120000d6da17b7fb0ce093085f89a664b10168b20b8662819eba6e7c2010011145766af1a66340d7045ab6922599fec373edd433ffa3afc830353091ea2855e7e3797921d1d6365c29f8d3c9b3ae29e5748bc19a18b025860680f36cd857f84bffdc1e290ad7022477c44853ea117628c42e552c4d8407d992291f65e5d00ce543cefddfa2cd1d6abfdab54368d8d6c4e0595a7fa65d0f2d9e3a9c95dbd04593262d650d4842647cfce53e55911642275f601b102598bd2f0f89b145cfc8815cb6", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x400, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x2, 0x72d}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000ac0)=[{0x2, 0x2, 0x5, 0x6}, {0x1, 0x4, 0xa, 0x8}, {0x1, 0x1, 0x0, 0x3}, {0x4, 0x5, 0xb, 0x7}, {0x5, 0x4, 0x8, 0xf2a95370850da023}, {0x0, 0x2, 0x10, 0xa}], 0x10, 0xfffffff7}, 0x94)
ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, &(0x7f00000013c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0xfffffffffffffe3d, 0xd}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)

0s ago: executing program 3 (id=8723):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x2, 0x12)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="850000000e000000720a00ff0000000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000070093be00471f0b2f4365578d285397bfc8d970ebbfdf66dc22266a8e8c73158f097f954c0efb2d7784bcf1b31f7f80f79bffa7eaff58cbf3403de7d1d40f48f45b5072e64133d5025d02bfda70427ccc8e37d291def3511fe37eb4a3ba55119f8ee6fa8ef541af42dd87eaf959b24e2348d62a9ac1e1b250821644783ead20190eca43c58b7bde5c9fe2bbbc80f18607c815af7382e699d98651396c56ba75fa8a8951d2ab", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8e006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x10}, 0x0, 0x0, 0x0, 0x4, 0x14000, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/247, 0x122, 0xf7, 0x0, 0x4, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r5, 0x20, &(0x7f0000000780)={&(0x7f00000006c0)=""/42, 0x2a, 0x0, &(0x7f0000000700)=""/99, 0x63}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x5, 0x5, 0x26f, 0x80, r1, 0x9, '\x00', r4, r5, 0x0, 0x1, 0x5, 0xc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t||')

kernel console output (not intermixed with test programs):

age_copy_sane+0x16a/0x270
[ 1411.381728][T26712]  copy_page_to_iter+0xa7/0x150
[ 1411.386706][T26712]  __sk_msg_recvmsg+0x32b/0xde0
[ 1411.391584][T26712]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1411.397611][T26712]  unix_bpf_recvmsg+0x5b0/0xdd0
[ 1411.402520][T26712]  ? unix_stream_bpf_update_proto+0x310/0x310
[ 1411.408667][T26712]  ? wait_woken+0x180/0x180
[ 1411.413240][T26712]  ? aa_sock_msg_perm+0x94/0x150
[ 1411.418224][T26712]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1411.423553][T26712]  ? security_socket_recvmsg+0x89/0xb0
[ 1411.429019][T26712]  ? unix_dgram_recvmsg+0x71/0xd0
[ 1411.434054][T26712]  ? unix_dgram_sendmsg+0x16e0/0x16e0
[ 1411.439441][T26712]  ____sys_recvmsg+0x2bd/0x5d0
[ 1411.444221][T26712]  ? __sys_recvmsg_sock+0x50/0x50
[ 1411.449351][T26712]  ? import_iovec+0x73/0xa0
[ 1411.453869][T26712]  ___sys_recvmsg+0x214/0x590
[ 1411.458583][T26712]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1411.463550][T26712]  ? ksys_write+0x1d2/0x260
[ 1411.468106][T26712]  ? __fget_files+0x3fc/0x460
[ 1411.472894][T26712]  __x64_sys_recvmsg+0x21e/0x2f0
[ 1411.477881][T26712]  ? ___sys_recvmsg+0x590/0x590
[ 1411.482819][T26712]  ? lockdep_hardirqs_on+0x98/0x150
[ 1411.488040][T26712]  do_syscall_64+0x55/0xb0
[ 1411.492579][T26712]  ? clear_bhb_loop+0x40/0x90
[ 1411.497274][T26712]  ? clear_bhb_loop+0x40/0x90
[ 1411.501997][T26712]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1411.507913][T26712] RIP: 0033:0x7fb2f799e159
[ 1411.512352][T26712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.531985][T26712] RSP: 002b:00007fb2f8842028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1411.540528][T26712] RAX: ffffffffffffffda RBX: 00007fb2f7c25fa0 RCX: 00007fb2f799e159
[ 1411.548540][T26712] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1411.556658][T26712] RBP: 00007fb2f8842090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.564699][T26712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1411.572689][T26712] R13: 00007fb2f7c26038 R14: 00007fb2f7c25fa0 R15: 00007ffd1c047808
[ 1411.580695][T26712]  </TASK>
[ 1411.676332][T26714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1412.463317][T26724] netlink: 'syz.2.6788': attribute type 21 has an invalid length.
[ 1412.517518][T26721] netlink: 'syz.0.6787': attribute type 10 has an invalid length.
[ 1413.003707][T26721] team0: Device hsr_slave_0 failed to register rx_handler
[ 1413.156826][T26732] netlink: 'syz.3.6790': attribute type 10 has an invalid length.
[ 1413.184837][T26732] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1413.609695][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6798'.
[ 1413.771402][T26747] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6796'.
[ 1413.782428][T26747] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1414.569505][T26758] netlink: 'syz.2.6802': attribute type 5 has an invalid length.
[ 1414.919553][T26762] netlink: 'syz.2.6804': attribute type 10 has an invalid length.
[ 1415.254424][T26765] netlink: 'syz.1.6805': attribute type 39 has an invalid length.
[ 1416.841240][T26784] Ÿë
: port 2(gretap0) entered blocking state
[ 1416.856951][T26784] Ÿë
: port 2(gretap0) entered disabled state
[ 1416.885966][T26784] gretap0: entered allmulticast mode
[ 1416.918543][T26784] gretap0: entered promiscuous mode
[ 1416.963028][T26789] IPv6: pim6reg1: Disabled Multicast RS
[ 1417.471048][T26794] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6811'.
[ 1417.480526][T26794] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1418.579109][T26808] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6819'.
[ 1418.868081][T26818] FAULT_INJECTION: forcing a failure.
[ 1418.868081][T26818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1418.934747][T26818] CPU: 1 PID: 26818 Comm: syz.3.6820 Not tainted syzkaller #0
[ 1418.942434][T26818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1418.952646][T26818] Call Trace:
[ 1418.955998][T26818]  <TASK>
[ 1418.959011][T26818]  dump_stack_lvl+0x18c/0x250
[ 1418.963799][T26818]  ? show_regs_print_info+0x20/0x20
[ 1418.969081][T26818]  ? load_image+0x420/0x420
[ 1418.973675][T26818]  ? __might_fault+0xaa/0x120
[ 1418.978434][T26818]  ? __lock_acquire+0x7d80/0x7d80
[ 1418.983620][T26818]  ? __virt_addr_valid+0x10c/0x380
[ 1418.988832][T26818]  should_fail_ex+0x394/0x4c0
[ 1418.993787][T26818]  _copy_from_user+0x2f/0xe0
[ 1418.998457][T26818]  generic_map_update_batch+0x53e/0x800
[ 1419.004145][T26818]  ? rcu_read_unlock+0xa0/0xa0
[ 1419.009120][T26818]  ? __fdget+0x180/0x210
[ 1419.013446][T26818]  ? rcu_read_unlock+0xa0/0xa0
[ 1419.018290][T26818]  bpf_map_do_batch+0x3f2/0x600
[ 1419.023213][T26818]  ? bpf_lsm_key_permission+0x10/0x10
[ 1419.028683][T26818]  __sys_bpf+0x381/0x890
[ 1419.033017][T26818]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1419.038629][T26818]  ? lock_chain_count+0x20/0x20
[ 1419.043700][T26818]  __x64_sys_bpf+0x7c/0x90
[ 1419.048206][T26818]  do_syscall_64+0x55/0xb0
[ 1419.052780][T26818]  ? clear_bhb_loop+0x40/0x90
[ 1419.057530][T26818]  ? clear_bhb_loop+0x40/0x90
[ 1419.062306][T26818]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1419.068398][T26818] RIP: 0033:0x7fb2f799e159
[ 1419.072895][T26818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1419.093195][T26818] RSP: 002b:00007fb2f8842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1419.101797][T26818] RAX: ffffffffffffffda RBX: 00007fb2f7c25fa0 RCX: 00007fb2f799e159
[ 1419.109834][T26818] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1419.117874][T26818] RBP: 00007fb2f8842090 R08: 0000000000000000 R09: 0000000000000000
[ 1419.125917][T26818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1419.134043][T26818] R13: 00007fb2f7c26038 R14: 00007fb2f7c25fa0 R15: 00007ffd1c047808
[ 1419.142258][T26818]  </TASK>
[ 1419.823872][T26827] netlink: 'syz.3.6825': attribute type 39 has an invalid length.
[ 1419.948114][T26827] bridge0: port 3(hsr0) entered disabled state
[ 1419.975073][T26833] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6826'.
[ 1420.004625][T26833] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1420.201348][T26827] hsr_slave_1 (unregistering): left promiscuous mode
[ 1422.267363][T26858] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6824'.
[ 1422.342632][T26858] bridge_slave_1: default FDB implementation only supports local addresses
[ 1422.380323][T26848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.388667][T26848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.452315][T26848] bridge0: entered allmulticast mode
[ 1422.843048][T26850] bridge_slave_1: left allmulticast mode
[ 1422.851283][T26850] bridge_slave_1: left promiscuous mode
[ 1422.857259][T26850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.903521][T26850] bridge_slave_0: left promiscuous mode
[ 1422.934694][T26850] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.010004][T26841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1423.039416][T26871] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6838'.
[ 1423.079565][T26872] hsr0: left allmulticast mode
[ 1423.088338][T26872] hsr_slave_0: left allmulticast mode
[ 1423.094225][T26872] bridge0: port 3(hsr0) entered disabled state
[ 1423.123216][T26872] bridge_slave_1: left allmulticast mode
[ 1423.136423][T26872] bridge_slave_1: left promiscuous mode
[ 1423.142625][T26872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1423.169358][T26872] bridge_slave_0: left promiscuous mode
[ 1423.195775][T26872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.690702][T26879] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6840'.
[ 1423.702981][T26879] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1423.712545][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.726083][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.804878][T26878] netlink: 'syz.0.6839': attribute type 39 has an invalid length.
[ 1424.133288][T26878] hsr_slave_1 (unregistering): left promiscuous mode
[ 1424.594201][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1424.648101][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1424.655163][T26908] syzkaller1: linktype set to 823
[ 1424.666895][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1424.673585][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1424.683925][T26908] syzkaller1: linktype set to 823
[ 1424.696570][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1424.702552][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1424.772725][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1424.846465][T26908] syzkaller1: linktype set to 823
[ 1424.939141][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1424.955684][T26917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6851'.
[ 1425.032338][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.126789][T26908] syzkaller1: linktype set to 823
[ 1425.132414][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.138731][T26908] syzkaller1: linktype set to 823
[ 1425.146252][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.157259][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.163580][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.180212][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.196228][T26908] syzkaller1: linktype set to 823
[ 1425.209188][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.227818][T26908] syzkaller1: linktype set to 823
[ 1425.237430][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.288540][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.294633][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.315318][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.336295][T26908] syzkaller1: linktype set to 823
[ 1425.347052][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.361548][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.370002][T26908] syzkaller1: linktype set to 823
[ 1425.375728][T26907] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1425.389260][T26908] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1425.431441][T26908] syzkaller1: linktype set to 823
[ 1425.750939][T26928] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.6854'.
[ 1425.767298][T26928] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1426.794807][T26943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6858'.
[ 1426.868584][T26904] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6848'.
[ 1426.888278][T26936] netlink: 'syz.3.6857': attribute type 9 has an invalid length.
[ 1426.896465][T26936] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6857'.
[ 1428.053172][T26904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1428.213224][T26960] netlink: 'syz.2.6863': attribute type 9 has an invalid length.
[ 1428.252723][T26960] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6863'.
[ 1428.582050][T26972] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6867'.
[ 1428.626216][T26972] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.6867'.
[ 1428.670681][T26973] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6866'.
[ 1428.706099][T26973] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1428.839218][T26980] FAULT_INJECTION: forcing a failure.
[ 1428.839218][T26980] name failslab, interval 1, probability 0, space 0, times 0
[ 1428.858488][T26980] CPU: 1 PID: 26980 Comm: syz.0.6870 Not tainted syzkaller #0
[ 1428.866219][T26980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1428.876407][T26980] Call Trace:
[ 1428.879736][T26980]  <TASK>
[ 1428.882704][T26980]  dump_stack_lvl+0x18c/0x250
[ 1428.887450][T26980]  ? show_regs_print_info+0x20/0x20
[ 1428.892697][T26980]  ? load_image+0x420/0x420
[ 1428.897510][T26980]  ? __might_sleep+0xe0/0xe0
[ 1428.902141][T26980]  ? __lock_acquire+0x7d80/0x7d80
[ 1428.907213][T26980]  should_fail_ex+0x394/0x4c0
[ 1428.911952][T26980]  should_failslab+0x9/0x20
[ 1428.916526][T26980]  slab_pre_alloc_hook+0x59/0x300
[ 1428.921605][T26980]  kmem_cache_alloc_node+0x5e/0x310
[ 1428.926944][T26980]  ? __alloc_skb+0x103/0x2c0
[ 1428.931573][T26980]  __alloc_skb+0x103/0x2c0
[ 1428.936051][T26980]  alloc_skb_with_frags+0xcd/0x7a0
[ 1428.941203][T26980]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1428.946976][T26980]  sock_alloc_send_pskb+0x883/0x9a0
[ 1428.952229][T26980]  ? lock_chain_count+0x20/0x20
[ 1428.957120][T26980]  ? sock_kzfree_s+0x50/0x50
[ 1428.961759][T26980]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1428.967963][T26980]  tun_get_user+0xa2e/0x3d70
[ 1428.972616][T26980]  ? rcu_read_unlock+0xa0/0xa0
[ 1428.977453][T26980]  ? tun_get+0x1c/0x2e0
[ 1428.981645][T26980]  ? __lock_acquire+0x7d80/0x7d80
[ 1428.986806][T26980]  ? tun_get+0x1c/0x2e0
[ 1428.990998][T26980]  tun_chr_write_iter+0x119/0x200
[ 1428.996053][T26980]  vfs_write+0x474/0x9a0
[ 1429.000338][T26980]  ? file_end_write+0x250/0x250
[ 1429.005222][T26980]  ? __fget_files+0x3fc/0x460
[ 1429.009940][T26980]  ? __fdget_pos+0x1d8/0x330
[ 1429.014564][T26980]  ? ksys_write+0x74/0x260
[ 1429.019018][T26980]  ksys_write+0x151/0x260
[ 1429.023389][T26980]  ? __ia32_sys_read+0x90/0x90
[ 1429.028193][T26980]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1429.034184][T26980]  do_syscall_64+0x55/0xb0
[ 1429.038808][T26980]  ? clear_bhb_loop+0x40/0x90
[ 1429.043605][T26980]  ? clear_bhb_loop+0x40/0x90
[ 1429.048319][T26980]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1429.054249][T26980] RIP: 0033:0x7ff05d19e159
[ 1429.058871][T26980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1429.078874][T26980] RSP: 002b:00007ff05e092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1429.087552][T26980] RAX: ffffffffffffffda RBX: 00007ff05d425fa0 RCX: 00007ff05d19e159
[ 1429.095559][T26980] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[ 1429.103588][T26980] RBP: 00007ff05e092090 R08: 0000000000000000 R09: 0000000000000000
[ 1429.111591][T26980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1429.119589][T26980] R13: 00007ff05d426038 R14: 00007ff05d425fa0 R15: 00007fff946ac968
[ 1429.127605][T26980]  </TASK>
[ 1432.847969][T27006] FAULT_INJECTION: forcing a failure.
[ 1432.847969][T27006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1432.924696][T26994] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6874'.
[ 1432.952670][T26994] bridge_slave_1: default FDB implementation only supports local addresses
[ 1432.962785][T27006] CPU: 0 PID: 27006 Comm: syz.1.6880 Not tainted syzkaller #0
[ 1432.970311][T27006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1432.980583][T27006] Call Trace:
[ 1432.983892][T27006]  <TASK>
[ 1432.986842][T27006]  dump_stack_lvl+0x18c/0x250
[ 1432.991720][T27006]  ? show_regs_print_info+0x20/0x20
[ 1432.996944][T27006]  ? load_image+0x420/0x420
[ 1433.001506][T27006]  ? __might_fault+0xaa/0x120
[ 1433.006205][T27006]  ? __lock_acquire+0x7d80/0x7d80
[ 1433.011253][T27006]  should_fail_ex+0x394/0x4c0
[ 1433.015956][T27006]  _copy_from_user+0x2f/0xe0
[ 1433.020574][T27006]  __sys_bpf+0x23e/0x890
[ 1433.024835][T27006]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1433.030243][T27006]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1433.036430][T27006]  __x64_sys_bpf+0x7c/0x90
[ 1433.040869][T27006]  do_syscall_64+0x55/0xb0
[ 1433.046900][T27006]  ? clear_bhb_loop+0x40/0x90
[ 1433.051638][T27006]  ? clear_bhb_loop+0x40/0x90
[ 1433.056367][T27006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1433.062319][T27006] RIP: 0033:0x7efe73d9e159
[ 1433.066773][T27006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1433.086615][T27006] RSP: 002b:00007efe74cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1433.095059][T27006] RAX: ffffffffffffffda RBX: 00007efe74025fa0 RCX: 00007efe73d9e159
[ 1433.103311][T27006] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000008
[ 1433.111391][T27006] RBP: 00007efe74cf2090 R08: 0000000000000000 R09: 0000000000000000
[ 1433.119382][T27006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1433.127371][T27006] R13: 00007efe74026038 R14: 00007efe74025fa0 R15: 00007ffd19ca2458
[ 1433.135471][T27006]  </TASK>
[ 1433.594575][T27015] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.6882'.
[ 1433.736610][T27015] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1433.882148][T26990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1434.151886][T27025] netlink: 'syz.1.6884': attribute type 10 has an invalid length.
[ 1434.183485][T27025] bond0: (slave netdevsim0): Releasing backup interface
[ 1434.203174][T27025] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1434.225103][T27025] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1434.244803][T27025] team0: Port device netdevsim0 added
[ 1434.271142][T27028] netlink: 'syz.1.6884': attribute type 10 has an invalid length.
[ 1434.307525][T27028] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1434.322218][T27028] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[ 1434.968269][T27028] team0: Port device netdevsim0 removed
[ 1434.988415][T27028] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1435.515352][T27047] FAULT_INJECTION: forcing a failure.
[ 1435.515352][T27047] name failslab, interval 1, probability 0, space 0, times 0
[ 1435.528122][T27047] CPU: 0 PID: 27047 Comm: syz.0.6894 Not tainted syzkaller #0
[ 1435.535636][T27047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1435.545839][T27047] Call Trace:
[ 1435.549169][T27047]  <TASK>
[ 1435.552123][T27047]  dump_stack_lvl+0x18c/0x250
[ 1435.556836][T27047]  ? __lock_acquire+0x7d80/0x7d80
[ 1435.561884][T27047]  ? show_regs_print_info+0x20/0x20
[ 1435.567099][T27047]  ? load_image+0x420/0x420
[ 1435.571620][T27047]  ? read_tsc+0x9/0x20
[ 1435.575748][T27047]  should_fail_ex+0x394/0x4c0
[ 1435.580454][T27047]  should_failslab+0x9/0x20
[ 1435.584975][T27047]  slab_pre_alloc_hook+0x59/0x300
[ 1435.590148][T27047]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1435.595660][T27047]  ? page_pool_alloc_pages+0xba/0x160
[ 1435.601180][T27047]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1435.606718][T27047]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1435.612311][T27047]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1435.617935][T27047]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1435.624314][T27047]  ? _copy_from_user+0xa5/0xe0
[ 1435.629110][T27047]  ? bpf_test_init+0x119/0x140
[ 1435.634071][T27047]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1435.639571][T27047]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1435.645137][T27047]  ? __lock_acquire+0x7d80/0x7d80
[ 1435.650224][T27047]  ? dev_put+0x80/0x80
[ 1435.654422][T27047]  ? dev_put+0x80/0x80
[ 1435.658525][T27047]  bpf_prog_test_run+0x31f/0x390
[ 1435.663580][T27047]  __sys_bpf+0x49d/0x890
[ 1435.667847][T27047]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1435.673246][T27047]  ? lock_chain_count+0x20/0x20
[ 1435.678127][T27047]  __x64_sys_bpf+0x7c/0x90
[ 1435.682562][T27047]  do_syscall_64+0x55/0xb0
[ 1435.686995][T27047]  ? clear_bhb_loop+0x40/0x90
[ 1435.691688][T27047]  ? clear_bhb_loop+0x40/0x90
[ 1435.696382][T27047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1435.702382][T27047] RIP: 0033:0x7ff05d19e159
[ 1435.706813][T27047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1435.726543][T27047] RSP: 002b:00007ff05e092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1435.734999][T27047] RAX: ffffffffffffffda RBX: 00007ff05d425fa0 RCX: 00007ff05d19e159
[ 1435.742992][T27047] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1435.750977][T27047] RBP: 00007ff05e092090 R08: 0000000000000000 R09: 0000000000000000
[ 1435.758961][T27047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1435.766942][T27047] R13: 00007ff05d426038 R14: 00007ff05d425fa0 R15: 00007fff946ac968
[ 1435.774941][T27047]  </TASK>
[ 1435.987183][T27060] netlink: 'syz.0.6899': attribute type 10 has an invalid length.
[ 1436.015888][T27060] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[ 1436.029580][T27060] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode
[ 1436.038475][T27060] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered allmulticast mode
[ 1436.048523][T27060] team0: Port device ÿÿÿÿÿÿ added
[ 1436.054912][T27064] netlink: 'syz.1.6902': attribute type 10 has an invalid length.
[ 1436.064648][T27065] netlink: 'syz.0.6899': attribute type 10 has an invalid length.
[ 1436.075755][T27065] netdevsim netdevsim0 ÿÿÿÿÿÿ: left promiscuous mode
[ 1436.083537][T27065] netdevsim netdevsim0 ÿÿÿÿÿÿ: left allmulticast mode
[ 1436.142914][T27065] team0: Port device ÿÿÿÿÿÿ removed
[ 1436.196681][T27065] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[ 1436.206630][T27066] netlink: 'syz.3.6901': attribute type 14 has an invalid length.
[ 1436.216618][T27066] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6901'.
[ 1438.195199][T27111] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6919'.
[ 1438.522396][T27126] netlink: 'syz.1.6918': attribute type 1 has an invalid length.
[ 1438.596053][T27126] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.6918'.
[ 1438.638246][T27125] netlink: 'syz.0.6922': attribute type 10 has an invalid length.
[ 1438.647361][T27125] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6922'.
[ 1438.668710][T27126] netlink: 'syz.1.6918': attribute type 1 has an invalid length.
[ 1441.382772][T27128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1442.654287][T27157] netlink: 'syz.3.6934': attribute type 10 has an invalid length.
[ 1442.684288][T27157] bond0: (slave netdevsim0): Releasing backup interface
[ 1442.703938][T27157] team0: Port device netdevsim0 added
[ 1442.809834][T27159] netlink: 'syz.3.6934': attribute type 10 has an invalid length.
[ 1442.835555][T27159] team0: Port device netdevsim0 removed
[ 1442.851828][T27159] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1444.905499][T27189] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6943'.
[ 1444.930881][T27189] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1445.050702][T27164] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6936'.
[ 1445.160307][T27164] bridge_slave_1: default FDB implementation only supports local addresses
[ 1445.501046][T27164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1446.027543][T27216] netlink: 'syz.3.6952': attribute type 7 has an invalid length.
[ 1446.035665][T27216] netlink: 'syz.3.6952': attribute type 7 has an invalid length.
[ 1446.126592][T27216] netlink: 'syz.3.6952': attribute type 7 has an invalid length.
[ 1446.922043][T27230] netlink: 'syz.0.6957': attribute type 39 has an invalid length.
[ 1447.199283][T27233] mac80211_hwsim hwsim62 .3ãc¤±: renamed from wlan1
[ 1448.361018][T27264] delete_channel: no stack
[ 1450.396223][T27273] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6973'.
[ 1450.677447][T27285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6977'.
[ 1450.714218][T27285] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6977'.
[ 1450.780685][T27288] netlink: 'syz.3.6980': attribute type 10 has an invalid length.
[ 1450.795349][T27288] team0: Device wg1 is of different type
[ 1450.832178][T27285] netlink: 'syz.1.6977': attribute type 10 has an invalid length.
[ 1450.841916][T27285] bond0: (slave bridge0): Releasing backup interface
[ 1450.859423][T27285] team0: Device bridge0 is already an upper device of the team interface
[ 1453.764948][T27326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1454.609580][T27336] netlink: 'syz.3.6994': attribute type 9 has an invalid length.
[ 1454.626279][T27336] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6994'.
[ 1457.623559][T23958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1457.639414][T23958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1457.648903][T23958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1457.666769][T23958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1457.675654][T23958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1457.683689][T23958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1457.754656][ T6183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.948717][ T6183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.188236][ T6183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.327496][ T6183] bond0: (slave netdevsim0): Releasing backup interface
[ 1458.345271][ T6183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.970990][ T6183] tipc: Left network mode
[ 1459.274296][T27359] chnl_net:caif_netlink_parms(): no params data found
[ 1459.757269][T27359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1459.764600][T27359] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1459.776208][T27359] bridge_slave_0: entered allmulticast mode
[ 1459.786504][T23958] Bluetooth: hci1: command tx timeout
[ 1459.795286][T27359] bridge_slave_0: entered promiscuous mode
[ 1459.804650][T27359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1459.812656][T27359] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1459.820465][T27359] bridge_slave_1: entered allmulticast mode
[ 1459.829353][T27359] bridge_slave_1: entered promiscuous mode
[ 1459.919911][T27359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1459.951768][T27359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1460.189992][ T6183] gretap0 (unregistering): left allmulticast mode
[ 1460.216307][ T6183] gretap0 (unregistering): left promiscuous mode
[ 1460.222941][ T6183] Ÿë
: port 1(gretap0) entered disabled state
[ 1460.269300][T27359] team0: Port device team_slave_0 added
[ 1460.338334][T27359] team0: Port device team_slave_1 added
[ 1460.395372][T27410] FAULT_INJECTION: forcing a failure.
[ 1460.395372][T27410] name failslab, interval 1, probability 0, space 0, times 0
[ 1460.409217][T27410] CPU: 0 PID: 27410 Comm: syz.2.7014 Not tainted syzkaller #0
[ 1460.416746][T27410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1460.426859][T27410] Call Trace:
[ 1460.430218][T27410]  <TASK>
[ 1460.433204][T27410]  dump_stack_lvl+0x18c/0x250
[ 1460.437950][T27410]  ? show_regs_print_info+0x20/0x20
[ 1460.443209][T27410]  ? load_image+0x420/0x420
[ 1460.447769][T27410]  ? trace_event_raw_event_lock+0x240/0x240
[ 1460.453710][T27410]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1460.459233][T27410]  ? lockdep_hardirqs_on+0x98/0x150
[ 1460.464498][T27410]  should_fail_ex+0x394/0x4c0
[ 1460.469245][T27410]  should_failslab+0x9/0x20
[ 1460.473806][T27410]  slab_pre_alloc_hook+0x59/0x300
[ 1460.478908][T27410]  ? tipc_group_create_member+0x61/0x540
[ 1460.484678][T27410]  __kmem_cache_alloc_node+0x53/0x250
[ 1460.490126][T27410]  ? tipc_group_create_member+0x61/0x540
[ 1460.495843][T27410]  kmalloc_trace+0x2a/0xe0
[ 1460.500297][T27410]  tipc_group_create_member+0x61/0x540
[ 1460.505788][T27410]  ? tipc_nametbl_build_group+0x1d9/0x4c0
[ 1460.511543][T27410]  tipc_nametbl_build_group+0x2e6/0x4c0
[ 1460.517115][T27410]  ? tipc_nametbl_build_group+0x2e/0x4c0
[ 1460.522782][T27410]  tipc_sk_join+0x3a5/0x6a0
[ 1460.527406][T27410]  ? __tipc_sendstream+0x1290/0x1290
[ 1460.532731][T27410]  tipc_setsockopt+0x73f/0x990
[ 1460.537702][T27410]  ? tipc_shutdown+0x4d0/0x4d0
[ 1460.542494][T27410]  ? __fget_files+0x28/0x460
[ 1460.547458][T27410]  ? aa_sock_opt_perm+0x74/0x100
[ 1460.552521][T27410]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1460.558087][T27410]  ? security_socket_setsockopt+0x7e/0xa0
[ 1460.563995][T27410]  ? tipc_shutdown+0x4d0/0x4d0
[ 1460.568898][T27410]  do_sock_setsockopt+0x175/0x1a0
[ 1460.574217][T27410]  ? __fdget+0x180/0x210
[ 1460.578575][T27410]  __x64_sys_setsockopt+0x182/0x200
[ 1460.583831][T27410]  do_syscall_64+0x55/0xb0
[ 1460.588274][T27410]  ? clear_bhb_loop+0x40/0x90
[ 1460.593061][T27410]  ? clear_bhb_loop+0x40/0x90
[ 1460.597766][T27410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1460.603871][T27410] RIP: 0033:0x7f5b6939e159
[ 1460.608308][T27410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1460.628300][T27410] RSP: 002b:00007f5b6a2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1460.636761][T27410] RAX: ffffffffffffffda RBX: 00007f5b69625fa0 RCX: 00007f5b6939e159
[ 1460.644868][T27410] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008
[ 1460.653044][T27410] RBP: 00007f5b6a2ca090 R08: 0000000000000043 R09: 0000000000000000
[ 1460.661123][T27410] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[ 1460.669118][T27410] R13: 00007f5b69626038 R14: 00007f5b69625fa0 R15: 00007fff9c41b448
[ 1460.677128][T27410]  </TASK>
[ 1460.871612][T27359] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1460.896649][T27359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1460.946193][T27359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1461.060077][T27359] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1461.068154][T27359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1461.098558][T27359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1461.275368][T27359] hsr_slave_0: entered promiscuous mode
[ 1461.306718][T27359] hsr_slave_1: entered promiscuous mode
[ 1461.868072][T23958] Bluetooth: hci1: command tx timeout
[ 1462.271928][ T6183] hsr_slave_0: left promiscuous mode
[ 1462.282094][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1462.311009][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1462.341073][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1462.352359][T27437] FAULT_INJECTION: forcing a failure.
[ 1462.352359][T27437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1462.354844][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1462.385705][T27437] CPU: 0 PID: 27437 Comm: syz.1.7020 Not tainted syzkaller #0
[ 1462.393436][T27437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1462.403550][T27437] Call Trace:
[ 1462.407036][T27437]  <TASK>
[ 1462.410002][T27437]  dump_stack_lvl+0x18c/0x250
[ 1462.414713][T27437]  ? show_regs_print_info+0x20/0x20
[ 1462.420020][T27437]  ? load_image+0x420/0x420
[ 1462.424543][T27437]  ? __might_fault+0xaa/0x120
[ 1462.429330][T27437]  ? __lock_acquire+0x7d80/0x7d80
[ 1462.434381][T27437]  should_fail_ex+0x394/0x4c0
[ 1462.439093][T27437]  _copy_to_iter+0x1ce/0x1110
[ 1462.443792][T27437]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1462.449800][T27437]  ? lock_chain_count+0x20/0x20
[ 1462.454673][T27437]  ? iov_iter_init+0x1e0/0x1e0
[ 1462.459464][T27437]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1462.464857][T27437]  ? lockdep_hardirqs_on+0x98/0x150
[ 1462.470090][T27437]  ? page_copy_sane+0x16a/0x270
[ 1462.474963][T27437]  copy_page_to_iter+0xa7/0x150
[ 1462.479842][T27437]  __sk_msg_recvmsg+0x32b/0xde0
[ 1462.484726][T27437]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1462.490651][T27437]  unix_bpf_recvmsg+0x5b0/0xdd0
[ 1462.495558][T27437]  ? unix_stream_bpf_update_proto+0x310/0x310
[ 1462.501646][T27437]  ? __lock_acquire+0x1262/0x7d80
[ 1462.506694][T27437]  ? wait_woken+0x180/0x180
[ 1462.511224][T27437]  ? aa_sock_msg_perm+0x94/0x150
[ 1462.516184][T27437]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1462.521489][T27437]  ? security_socket_recvmsg+0x89/0xb0
[ 1462.526965][T27437]  ? unix_dgram_recvmsg+0x71/0xd0
[ 1462.532009][T27437]  ? unix_dgram_sendmsg+0x16e0/0x16e0
[ 1462.537414][T27437]  ____sys_recvmsg+0x2bd/0x5d0
[ 1462.542230][T27437]  ? __sys_recvmsg_sock+0x50/0x50
[ 1462.547562][T27437]  ? import_iovec+0x73/0xa0
[ 1462.552118][T27437]  ___sys_recvmsg+0x214/0x590
[ 1462.556933][T27437]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1462.561760][T27437]  ? ksys_write+0x1d2/0x260
[ 1462.566391][T27437]  ? __fget_files+0x3fc/0x460
[ 1462.571201][T27437]  __x64_sys_recvmsg+0x21e/0x2f0
[ 1462.576164][T27437]  ? ___sys_recvmsg+0x590/0x590
[ 1462.581138][T27437]  ? lockdep_hardirqs_on+0x98/0x150
[ 1462.586371][T27437]  do_syscall_64+0x55/0xb0
[ 1462.590938][T27437]  ? clear_bhb_loop+0x40/0x90
[ 1462.595641][T27437]  ? clear_bhb_loop+0x40/0x90
[ 1462.600337][T27437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1462.606516][T27437] RIP: 0033:0x7efe73d9e159
[ 1462.610970][T27437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1462.631047][T27437] RSP: 002b:00007efe74cf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1462.639575][T27437] RAX: ffffffffffffffda RBX: 00007efe74025fa0 RCX: 00007efe73d9e159
[ 1462.647578][T27437] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1462.655580][T27437] RBP: 00007efe74cf2090 R08: 0000000000000000 R09: 0000000000000000
[ 1462.663658][T27437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1462.671653][T27437] R13: 00007efe74026038 R14: 00007efe74025fa0 R15: 00007ffd19ca2458
[ 1462.679775][T27437]  </TASK>
[ 1462.761339][ T6183] veth0_macvtap: left promiscuous mode
[ 1462.776575][ T6183] veth0_vlan: left promiscuous mode
[ 1463.079506][ T6183] team0 (unregistering): Port device geneve1 removed
[ 1463.558806][ T6183] team0 (unregistering): Port device team_slave_1 removed
[ 1463.611785][ T6183] team0 (unregistering): Port device team_slave_0 removed
[ 1463.667518][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1463.724843][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1463.956266][T23958] Bluetooth: hci1: command tx timeout
[ 1464.090650][ T6183] bond0 (unregistering): Released all slaves
[ 1464.203004][T27450] Ÿë
: port 2(veth0_to_team) entered blocking state
[ 1464.220415][T27450] Ÿë
: port 2(veth0_to_team) entered disabled state
[ 1464.250652][T27450] veth0_to_team: entered allmulticast mode
[ 1464.273878][T27450] veth0_to_team: entered promiscuous mode
[ 1464.706371][T27466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1464.736533][T27359] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1464.782354][T27359] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1465.062846][T27473] syzkaller0: entered promiscuous mode
[ 1465.146371][T27473] syzkaller0: entered allmulticast mode
[ 1465.172985][T27359] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1465.210127][T27359] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1465.372241][T27473] netlink: 'syz.1.7027': attribute type 21 has an invalid length.
[ 1465.391679][T27473] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.7027'.
[ 1466.036511][T23958] Bluetooth: hci1: command tx timeout
[ 1468.367687][T27359] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1468.488863][T27359] 8021q: adding VLAN 0 to HW filter on device team0
[ 1468.520985][T23537] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1468.528569][T23537] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1468.625526][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.632773][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1468.752817][T27523] syzkaller0: entered promiscuous mode
[ 1468.766313][T27523] syzkaller0: entered allmulticast mode
[ 1471.889481][T27557] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7043'.
[ 1471.902630][T27557] veth0_vlan: entered allmulticast mode
[ 1472.276779][T27359] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1472.463648][T27359] veth0_vlan: entered promiscuous mode
[ 1472.521585][T27568] netlink: 'syz.0.7047': attribute type 21 has an invalid length.
[ 1472.556775][T27568] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7047'.
[ 1472.582444][T27568] netlink: 'syz.0.7047': attribute type 4 has an invalid length.
[ 1472.596298][T27568] netlink: 'syz.0.7047': attribute type 3 has an invalid length.
[ 1472.605046][T27568] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7047'.
[ 1472.884439][T27359] veth1_vlan: entered promiscuous mode
[ 1473.409180][T27359] veth0_macvtap: entered promiscuous mode
[ 1473.525357][T27359] veth1_macvtap: entered promiscuous mode
[ 1473.573989][T27359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1473.589876][T27359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.607687][T27359] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1473.800765][T27359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.813025][T27359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.827857][T27359] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1473.961253][T27359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.973237][T27359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.982753][T27359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.994791][T27359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.610725][T23538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1474.643018][T23538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1474.786868][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7056'.
[ 1474.848777][T23533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1474.859102][T23533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.262833][T27604] netlink: 'syz.3.6998': attribute type 10 has an invalid length.
[ 1475.381304][T27602] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7057'.
[ 1475.436110][T27602] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7057'.
[ 1476.271286][T27619] netlink: 'syz.0.7063': attribute type 10 has an invalid length.
[ 1476.295487][T27619] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1478.102694][T27650] netlink: 'syz.0.7073': attribute type 39 has an invalid length.
[ 1478.154229][T27655] netlink: 'syz.0.7073': attribute type 21 has an invalid length.
[ 1478.193509][T27655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7073'.
[ 1478.237206][T27655] netlink: 'syz.0.7073': attribute type 4 has an invalid length.
[ 1478.258423][T27655] netlink: 'syz.0.7073': attribute type 5 has an invalid length.
[ 1478.282017][T27655] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7073'.
[ 1478.521468][T27668] netlink: 'syz.0.7078': attribute type 5 has an invalid length.
[ 1478.967452][T27682] netlink: 'syz.1.7082': attribute type 1 has an invalid length.
[ 1481.239926][T27682] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7082'.
[ 1483.906594][T27693] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1483.914824][T27693] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1483.931826][T27693] veth0_to_team: entered allmulticast mode
[ 1483.949390][T27693] veth0_to_team: entered promiscuous mode
[ 1484.893106][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.899790][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.383862][T27722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7096'.
[ 1485.395914][T27722] team0: entered promiscuous mode
[ 1485.402773][T27722] C: entered promiscuous mode
[ 1485.416338][T27722] team_slave_1: entered promiscuous mode
[ 1485.425231][T27722] macvlan0: entered promiscuous mode
[ 1485.431813][T27722] geneve1: entered promiscuous mode
[ 1485.437849][T27722] team0: entered allmulticast mode
[ 1485.443216][T27722] C: entered allmulticast mode
[ 1485.450261][T27722] team_slave_1: entered allmulticast mode
[ 1485.456183][T27722] macvlan0: entered allmulticast mode
[ 1485.461784][T27722] veth1_vlan: entered allmulticast mode
[ 1485.468344][T27722] geneve1: entered allmulticast mode
[ 1485.724206][T27732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7101'.
[ 1487.705387][T27770] Ÿë
: port 2(gretap0) entered blocking state
[ 1487.713686][T27770] Ÿë
: port 2(gretap0) entered disabled state
[ 1487.724838][T27770] gretap0: entered allmulticast mode
[ 1487.752544][T27770] gretap0: entered promiscuous mode
[ 1489.771720][T27806] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.7128'.
[ 1490.452324][T27812] netlink: 'syz.2.7130': attribute type 9 has an invalid length.
[ 1490.495544][T27812] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7130'.
[ 1490.495762][T27816] netlink: 'syz.2.7130': attribute type 10 has an invalid length.
[ 1490.540828][T27816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1490.582223][T27816] bond0: entered promiscuous mode
[ 1490.601756][T27816] bond_slave_0: entered promiscuous mode
[ 1490.636439][T27816] bond_slave_1: entered promiscuous mode
[ 1490.667760][T27816] bond0: entered allmulticast mode
[ 1490.704130][T27816] bond_slave_0: entered allmulticast mode
[ 1490.726100][T27816] bond_slave_1: entered allmulticast mode
[ 1490.737238][T27816] team0: Port device bond0 added
[ 1491.409132][T27831] FAULT_INJECTION: forcing a failure.
[ 1491.409132][T27831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1491.423603][T27831] CPU: 1 PID: 27831 Comm: syz.0.7136 Not tainted syzkaller #0
[ 1491.431113][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1491.441265][T27831] Call Trace:
[ 1491.444553][T27831]  <TASK>
[ 1491.447613][T27831]  dump_stack_lvl+0x18c/0x250
[ 1491.452312][T27831]  ? show_regs_print_info+0x20/0x20
[ 1491.457513][T27831]  ? load_image+0x420/0x420
[ 1491.462018][T27831]  ? __might_fault+0xaa/0x120
[ 1491.466744][T27831]  ? __lock_acquire+0x7d80/0x7d80
[ 1491.471798][T27831]  ? __virt_addr_valid+0x10c/0x380
[ 1491.476960][T27831]  should_fail_ex+0x394/0x4c0
[ 1491.481683][T27831]  _copy_from_user+0x2f/0xe0
[ 1491.486334][T27831]  generic_map_update_batch+0x53e/0x800
[ 1491.491921][T27831]  ? rcu_read_unlock+0xa0/0xa0
[ 1491.496704][T27831]  ? __fdget+0x180/0x210
[ 1491.500970][T27831]  ? rcu_read_unlock+0xa0/0xa0
[ 1491.505740][T27831]  bpf_map_do_batch+0x3f2/0x600
[ 1491.510600][T27831]  ? bpf_lsm_key_permission+0x10/0x10
[ 1491.516000][T27831]  __sys_bpf+0x381/0x890
[ 1491.520270][T27831]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1491.525657][T27831]  ? lock_chain_count+0x20/0x20
[ 1491.530521][T27831]  __x64_sys_bpf+0x7c/0x90
[ 1491.534947][T27831]  do_syscall_64+0x55/0xb0
[ 1491.539386][T27831]  ? clear_bhb_loop+0x40/0x90
[ 1491.544129][T27831]  ? clear_bhb_loop+0x40/0x90
[ 1491.548906][T27831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1491.555032][T27831] RIP: 0033:0x7ff05d19e159
[ 1491.559657][T27831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1491.579342][T27831] RSP: 002b:00007ff05e092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1491.587766][T27831] RAX: ffffffffffffffda RBX: 00007ff05d425fa0 RCX: 00007ff05d19e159
[ 1491.595759][T27831] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1491.603787][T27831] RBP: 00007ff05e092090 R08: 0000000000000000 R09: 0000000000000000
[ 1491.611776][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1491.619760][T27831] R13: 00007ff05d426038 R14: 00007ff05d425fa0 R15: 00007fff946ac968
[ 1491.627886][T27831]  </TASK>
[ 1491.881087][T27834] netlink: 'syz.0.7138': attribute type 21 has an invalid length.
[ 1491.889537][T27834] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.7138'.
[ 1493.122465][T27868] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7151'.
[ 1493.281207][T27873] netlink: 'syz.2.7153': attribute type 21 has an invalid length.
[ 1493.295903][T27873] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7153'.
[ 1493.872628][T27876] delete_channel: no stack
[ 1496.617782][T27894] syzkaller0: entered promiscuous mode
[ 1496.623351][T27894] syzkaller0: entered allmulticast mode
[ 1501.794163][T27985] netlink: 'syz.2.7192': attribute type 10 has an invalid length.
[ 1502.057025][T27992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7197'.
[ 1504.720306][T28044] netlink: 'syz.3.7215': attribute type 21 has an invalid length.
[ 1504.822982][T28047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7216'.
[ 1504.912720][T28049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7217'.
[ 1510.435248][T28138] netlink: 'syz.1.7250': attribute type 10 has an invalid length.
[ 1510.537444][T28138] macvlan0: entered promiscuous mode
[ 1510.577624][T28138] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1511.017603][T18276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1511.027546][T18276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1511.040531][T18276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1511.051244][T18276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1511.059159][T18276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1511.067652][T18276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1511.117529][T28133] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[ 1511.869049][ T2899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.154503][ T2899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.389537][ T2899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.586964][ T2899] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[ 1512.601977][ T2899] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.981738][T28144] chnl_net:caif_netlink_parms(): no params data found
[ 1513.152388][T18276] Bluetooth: hci4: command tx timeout
[ 1513.379735][ T2899] tipc: Left network mode
[ 1513.485079][T28144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1513.497043][T28144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.514711][T28144] bridge_slave_0: entered allmulticast mode
[ 1513.522653][T28144] bridge_slave_0: entered promiscuous mode
[ 1513.758134][T28187] FAULT_INJECTION: forcing a failure.
[ 1513.758134][T28187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1513.815242][T28187] CPU: 1 PID: 28187 Comm: syz.1.7262 Not tainted syzkaller #0
[ 1513.822814][T28187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1513.832930][T28187] Call Trace:
[ 1513.836606][T28187]  <TASK>
[ 1513.839762][T28187]  dump_stack_lvl+0x18c/0x250
[ 1513.844517][T28187]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1513.850731][T28187]  ? show_regs_print_info+0x20/0x20
[ 1513.856008][T28187]  ? load_image+0x420/0x420
[ 1513.860657][T28187]  should_fail_ex+0x394/0x4c0
[ 1513.865451][T28187]  _copy_from_user+0x2f/0xe0
[ 1513.870130][T28187]  kstrtouint_from_user+0xde/0x170
[ 1513.875342][T28187]  ? kstrtol_from_user+0x190/0x190
[ 1513.880540][T28187]  ? lock_is_held_type+0x13e/0x190
[ 1513.885780][T28187]  proc_fail_nth_write+0x8f/0x250
[ 1513.890902][T28187]  ? proc_fail_nth_read+0x260/0x260
[ 1513.896225][T28187]  ? proc_fail_nth_read+0x260/0x260
[ 1513.901521][T28187]  vfs_write+0x299/0x9a0
[ 1513.905858][T28187]  ? file_end_write+0x250/0x250
[ 1513.910812][T28187]  ? __fget_files+0x28/0x460
[ 1513.915460][T28187]  ? __fget_files+0x3fc/0x460
[ 1513.920201][T28187]  ? __fdget_pos+0x2a3/0x330
[ 1513.924810][T28187]  ? ksys_write+0x74/0x260
[ 1513.929246][T28187]  ksys_write+0x151/0x260
[ 1513.933599][T28187]  ? __ia32_sys_read+0x90/0x90
[ 1513.938559][T28187]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1513.944475][T28187]  do_syscall_64+0x55/0xb0
[ 1513.948905][T28187]  ? clear_bhb_loop+0x40/0x90
[ 1513.953611][T28187]  ? clear_bhb_loop+0x40/0x90
[ 1513.958315][T28187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1513.964229][T28187] RIP: 0033:0x7efe73d5e98e
[ 1513.968677][T28187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1513.988390][T28187] RSP: 002b:00007efe74cf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1513.996826][T28187] RAX: ffffffffffffffda RBX: 00007efe74cf26c0 RCX: 00007efe73d5e98e
[ 1514.004897][T28187] RDX: 0000000000000001 RSI: 00007efe74cf20a0 RDI: 0000000000000008
[ 1514.012889][T28187] RBP: 00007efe74cf2090 R08: 0000000000000000 R09: 0000000000000000
[ 1514.020881][T28187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1514.028867][T28187] R13: 00007efe74026038 R14: 00007efe74025fa0 R15: 00007ffd19ca2458
[ 1514.036896][T28187]  </TASK>
[ 1514.136809][T28144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1514.152429][T28144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.173109][T28144] bridge_slave_1: entered allmulticast mode
[ 1514.188935][T28144] bridge_slave_1: entered promiscuous mode
[ 1514.455428][T28144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1514.585908][T28144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1514.738792][T28144] team0: Port device team_slave_0 added
[ 1514.789218][T28144] team0: Port device team_slave_1 added
[ 1515.109257][T28144] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1515.132260][T28144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1515.216333][T28144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1515.228372][T18276] Bluetooth: hci4: command tx timeout
[ 1515.255189][T28144] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1515.266009][T28144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1515.305995][T28144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1515.575578][ T2899] gretap0 (unregistering): left allmulticast mode
[ 1515.623335][ T2899] gretap0 (unregistering): left promiscuous mode
[ 1515.650146][ T2899] Ÿë
: port 1(gretap0) entered disabled state
[ 1516.753303][T28144] hsr_slave_0: entered promiscuous mode
[ 1516.832729][T28144] hsr_slave_1: entered promiscuous mode
[ 1516.866186][T28144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1516.879705][T28144] Cannot create hsr debugfs directory
[ 1517.030272][T28237] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7270'.
[ 1517.311292][T18276] Bluetooth: hci4: command tx timeout
[ 1517.711207][T28242] syzkaller0: entered promiscuous mode
[ 1517.731760][T28242] syzkaller0: entered allmulticast mode
[ 1519.386790][T18276] Bluetooth: hci4: command tx timeout
[ 1521.885576][T28266] netlink: 'syz.1.7275': attribute type 10 has an invalid length.
[ 1521.937552][T28266] bond0: (slave netdevsim0): Releasing backup interface
[ 1521.961766][T28266] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1521.985237][T28266] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1521.994522][T28266] team0: Port device netdevsim0 added
[ 1522.002123][T28267] netlink: 'syz.1.7275': attribute type 10 has an invalid length.
[ 1522.023954][T28267] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1522.031935][T28267] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[ 1522.057920][T28267] team0: Port device netdevsim0 removed
[ 1522.072521][T28267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1522.688846][ T2899] hsr_slave_0: left promiscuous mode
[ 1522.788700][ T2899] veth1_macvtap: left promiscuous mode
[ 1522.794655][ T2899] veth0_macvtap: left promiscuous mode
[ 1522.800897][ T2899] veth1_vlan: left promiscuous mode
[ 1523.221595][ T2899] geneve1 (unregistering): left promiscuous mode
[ 1523.232294][ T2899] geneve1 (unregistering): left allmulticast mode
[ 1523.260628][ T2899] team0 (unregistering): Port device geneve1 removed
[ 1524.242597][ T2899] team_slave_1 (unregistering): left promiscuous mode
[ 1524.249852][ T2899] team_slave_1 (unregistering): left allmulticast mode
[ 1524.260562][ T2899] team0 (unregistering): Port device team_slave_1 removed
[ 1524.328469][ T2899] team_slave_0 (unregistering): left promiscuous mode
[ 1524.335439][ T2899] team_slave_0 (unregistering): left allmulticast mode
[ 1524.345905][ T2899] team0 (unregistering): Port device team_slave_0 removed
[ 1524.414325][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1524.480363][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1524.559268][ T2899] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1524.959246][ T2899] bond0 (unregistering): Released all slaves
[ 1526.792487][T28144] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1526.823684][T28144] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1526.900550][T28144] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1526.958500][T28144] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1527.794555][T28144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1527.872333][T28144] 8021q: adding VLAN 0 to HW filter on device team0
[ 1527.909131][T23539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.916368][T23539] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1527.990805][T23539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.998069][T23539] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1528.570508][T28144] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1528.720371][T28144] veth0_vlan: entered promiscuous mode
[ 1528.738854][T28144] veth1_vlan: entered promiscuous mode
[ 1528.824738][T28144] veth0_macvtap: entered promiscuous mode
[ 1528.860038][T28144] veth1_macvtap: entered promiscuous mode
[ 1528.934012][T28144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1528.956213][T28144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1528.970188][T28144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1528.982873][T28144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.015769][T28144] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1529.051777][T28144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1529.065361][T28144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.078409][T28144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1529.092937][T28144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.111469][T28144] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1529.153537][T28144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.179516][T28144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.212439][T28144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.228058][T28144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1530.674473][T23533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1530.697446][T23533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1530.970331][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1531.003321][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1531.063605][T28394] netlink: 'syz.3.7295': attribute type 10 has an invalid length.
[ 1531.843662][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'.
[ 1532.623370][T28423] netlink: 'syz.2.7302': attribute type 21 has an invalid length.
[ 1532.656133][T28423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7302'.
[ 1533.026445][T28431] netlink: 'syz.2.7302': attribute type 21 has an invalid length.
[ 1533.222216][T28431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7302'.
[ 1533.877704][T28443] netlink: 'syz.0.7305': attribute type 25 has an invalid length.
[ 1533.885649][T28443] netlink: 'syz.0.7305': attribute type 10 has an invalid length.
[ 1534.142370][T23958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1534.153445][T23958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1534.163052][T23958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1534.276573][T23958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1534.287747][T23958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1534.296280][T23958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1534.511536][T23533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.603825][T28455] netlink: 'syz.3.7308': attribute type 39 has an invalid length.
[ 1535.026389][T23533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1535.303709][T23533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1535.628366][T23533] bond0: (slave netdevsim0): Releasing backup interface
[ 1535.649115][T23533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1535.910488][T28467] syzkaller0: entered promiscuous mode
[ 1535.916778][T28467] syzkaller0: entered allmulticast mode
[ 1536.426485][T18276] Bluetooth: hci2: command tx timeout
[ 1537.033932][T28510] FAULT_INJECTION: forcing a failure.
[ 1537.033932][T28510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1537.126103][T28510] CPU: 1 PID: 28510 Comm: syz.3.7313 Not tainted syzkaller #0
[ 1537.133749][T28510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1537.143850][T28510] Call Trace:
[ 1537.147175][T28510]  <TASK>
[ 1537.150317][T28510]  dump_stack_lvl+0x18c/0x250
[ 1537.155051][T28510]  ? show_regs_print_info+0x20/0x20
[ 1537.160295][T28510]  ? load_image+0x420/0x420
[ 1537.164935][T28510]  ? __lock_acquire+0x7d80/0x7d80
[ 1537.170004][T28510]  ? snprintf+0xe9/0x140
[ 1537.174338][T28510]  should_fail_ex+0x394/0x4c0
[ 1537.179073][T28510]  _copy_to_user+0x2f/0xa0
[ 1537.183537][T28510]  simple_read_from_buffer+0xe7/0x150
[ 1537.188965][T28510]  proc_fail_nth_read+0x1e8/0x260
[ 1537.194036][T28510]  ? proc_fault_inject_write+0x360/0x360
[ 1537.199693][T28510]  ? fsnotify_perm+0x271/0x5e0
[ 1537.204475][T28510]  ? proc_fault_inject_write+0x360/0x360
[ 1537.210217][T28510]  vfs_read+0x298/0x990
[ 1537.214395][T28510]  ? kernel_read+0x1e0/0x1e0
[ 1537.219009][T28510]  ? __fget_files+0x28/0x460
[ 1537.223618][T28510]  ? __fget_files+0x3fc/0x460
[ 1537.228318][T28510]  ? __fdget_pos+0x2a3/0x330
[ 1537.232923][T28510]  ? ksys_read+0x74/0x260
[ 1537.237276][T28510]  ksys_read+0x151/0x260
[ 1537.241542][T28510]  ? vfs_write+0x9a0/0x9a0
[ 1537.245978][T28510]  ? lockdep_hardirqs_on+0x98/0x150
[ 1537.251200][T28510]  do_syscall_64+0x55/0xb0
[ 1537.255721][T28510]  ? clear_bhb_loop+0x40/0x90
[ 1537.260413][T28510]  ? clear_bhb_loop+0x40/0x90
[ 1537.265108][T28510]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1537.271016][T28510] RIP: 0033:0x7f6cbbb5e98e
[ 1537.275445][T28510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1537.295343][T28510] RSP: 002b:00007f6cb9dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1537.303771][T28510] RAX: ffffffffffffffda RBX: 00007f6cb9dd56c0 RCX: 00007f6cbbb5e98e
[ 1537.311764][T28510] RDX: 000000000000000f RSI: 00007f6cb9dd50a0 RDI: 000000000000000c
[ 1537.319766][T28510] RBP: 00007f6cb9dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1537.327753][T28510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1537.335738][T28510] R13: 00007f6cbbe26218 R14: 00007f6cbbe26180 R15: 00007fff265697b8
[ 1537.343739][T28510]  </TASK>
[ 1537.705607][T28522] netlink: 'syz.3.7315': attribute type 10 has an invalid length.
[ 1537.725055][T28522] team0: Device macvlan0 is up. Set it down before adding it as a team port
[ 1538.131484][T28450] chnl_net:caif_netlink_parms(): no params data found
[ 1538.332318][T23533] tipc: Left network mode
[ 1538.506230][T18276] Bluetooth: hci2: command tx timeout
[ 1539.535666][T28450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1539.539247][T28567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7325'.
[ 1539.560751][T28567] openvswitch: netlink: Tunnel attr 11913 out of range max 16
[ 1539.571081][T28450] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1539.592787][T28450] bridge_slave_0: entered allmulticast mode
[ 1539.608034][T28450] bridge_slave_0: entered promiscuous mode
[ 1539.648023][T28450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1539.655230][T28450] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1539.679876][T28450] bridge_slave_1: entered allmulticast mode
[ 1539.702231][T28450] bridge_slave_1: entered promiscuous mode
[ 1540.094890][T28450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1540.209198][T28450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1540.323330][T23533] gretap0 (unregistering): left allmulticast mode
[ 1540.336131][T23533] gretap0 (unregistering): left promiscuous mode
[ 1540.342607][T23533] Ÿë
: port 1(gretap0) entered disabled state
[ 1540.460273][T28450] team0: Port device team_slave_0 added
[ 1540.586376][T18276] Bluetooth: hci2: command tx timeout
[ 1540.661435][T28450] team0: Port device team_slave_1 added
[ 1540.853222][T28450] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1540.890510][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1540.944750][T28450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1541.062151][T28450] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1541.109460][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1541.172260][T28450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1541.828006][T28450] hsr_slave_0: entered promiscuous mode
[ 1541.835064][T28450] hsr_slave_1: entered promiscuous mode
[ 1541.856352][T28450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1541.881232][T28450] Cannot create hsr debugfs directory
[ 1542.675682][T18276] Bluetooth: hci2: command tx timeout
[ 1542.782199][T28642] FAULT_INJECTION: forcing a failure.
[ 1542.782199][T28642] name failslab, interval 1, probability 0, space 0, times 0
[ 1542.795164][T28642] CPU: 1 PID: 28642 Comm: syz.3.7342 Not tainted syzkaller #0
[ 1542.802653][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1542.812739][T28642] Call Trace:
[ 1542.816106][T28642]  <TASK>
[ 1542.819074][T28642]  dump_stack_lvl+0x18c/0x250
[ 1542.823848][T28642]  ? __lock_acquire+0x7d80/0x7d80
[ 1542.829002][T28642]  ? show_regs_print_info+0x20/0x20
[ 1542.834648][T28642]  ? load_image+0x420/0x420
[ 1542.839269][T28642]  ? read_tsc+0x9/0x20
[ 1542.843403][T28642]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1542.849603][T28642]  should_fail_ex+0x394/0x4c0
[ 1542.854346][T28642]  should_failslab+0x9/0x20
[ 1542.858913][T28642]  slab_pre_alloc_hook+0x59/0x300
[ 1542.864010][T28642]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1542.869249][T28642]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1542.874821][T28642]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1542.880389][T28642]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1542.886177][T28642]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1542.892444][T28642]  ? _copy_from_user+0xa5/0xe0
[ 1542.897315][T28642]  ? bpf_test_init+0x119/0x140
[ 1542.902214][T28642]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1542.907719][T28642]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1542.913126][T28642]  ? __lock_acquire+0x7d80/0x7d80
[ 1542.918182][T28642]  ? dev_put+0x80/0x80
[ 1542.922291][T28642]  ? dev_put+0x80/0x80
[ 1542.926377][T28642]  bpf_prog_test_run+0x31f/0x390
[ 1542.931332][T28642]  __sys_bpf+0x49d/0x890
[ 1542.935591][T28642]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1542.940992][T28642]  ? lock_chain_count+0x20/0x20
[ 1542.945873][T28642]  __x64_sys_bpf+0x7c/0x90
[ 1542.950337][T28642]  do_syscall_64+0x55/0xb0
[ 1542.954775][T28642]  ? clear_bhb_loop+0x40/0x90
[ 1542.959465][T28642]  ? clear_bhb_loop+0x40/0x90
[ 1542.964157][T28642]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1542.970066][T28642] RIP: 0033:0x7f6cbbb9e159
[ 1542.974495][T28642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1542.994129][T28642] RSP: 002b:00007f6cbc981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1543.002566][T28642] RAX: ffffffffffffffda RBX: 00007f6cbbe25fa0 RCX: 00007f6cbbb9e159
[ 1543.010565][T28642] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1543.018553][T28642] RBP: 00007f6cbc981090 R08: 0000000000000000 R09: 0000000000000000
[ 1543.026534][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1543.034521][T28642] R13: 00007f6cbbe26038 R14: 00007f6cbbe25fa0 R15: 00007fff265697b8
[ 1543.042523][T28642]  </TASK>
[ 1543.714093][T23533] veth0_to_team: left allmulticast mode
[ 1543.719944][T23533] veth0_to_team: left promiscuous mode
[ 1543.725792][T23533] Ÿë
: port 2(veth0_to_team) entered disabled state
[ 1543.751148][T23533] bridge0: port 3(team0) entered disabled state
[ 1543.760721][T23533] bridge_slave_1: left allmulticast mode
[ 1543.767710][T23533] bridge_slave_1: left promiscuous mode
[ 1543.774818][T23533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1543.789257][T23533] bridge_slave_0: left promiscuous mode
[ 1543.795358][T23533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1543.829919][T23533] veth1_macvtap: left promiscuous mode
[ 1543.835808][T23533] veth0_macvtap: left promiscuous mode
[ 1543.842327][T23533] veth1_vlan: left promiscuous mode
[ 1544.081250][T23533] geneve1 (unregistering): left promiscuous mode
[ 1544.088885][T23533] geneve1 (unregistering): left allmulticast mode
[ 1544.102115][T23533] team0 (unregistering): Port device geneve1 removed
[ 1544.264902][T23533] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1544.570213][T23533] .7
6žÿ (unregistering): left promiscuous mode
[ 1544.576800][T23533] .7
6žÿ (unregistering): left allmulticast mode
[ 1544.585812][T23533] team0 (unregistering): Port device .7
6žÿ removed
[ 1544.640587][T23533] team_slave_0 (unregistering): left promiscuous mode
[ 1544.647826][T23533] team_slave_0 (unregistering): left allmulticast mode
[ 1544.655616][T23533] team0 (unregistering): Port device team_slave_0 removed
[ 1544.708574][T23533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1544.767990][T23533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1545.130689][T23533] bond0 (unregistering): Released all slaves
[ 1545.269310][T28662] netlink: 'syz.2.7345': attribute type 10 has an invalid length.
[ 1545.286065][T28662] hsr0: entered promiscuous mode
[ 1545.291273][T28662] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1545.677801][T28670] netlink: 'syz.2.7346': attribute type 10 has an invalid length.
[ 1545.710457][T28670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7346'.
[ 1546.294838][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.301623][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.899534][T28682] netlink: 'syz.3.7351': attribute type 2 has an invalid length.
[ 1547.670941][T28450] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1547.702417][T28450] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1547.802163][T28450] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1547.895221][T28450] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1548.242125][T28450] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1548.327282][T28450] 8021q: adding VLAN 0 to HW filter on device team0
[ 1548.407692][T23538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.414897][T23538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1548.477301][T23538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1548.484586][T23538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1548.622401][T28698] syzkaller0: entered promiscuous mode
[ 1548.635769][T28699] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7353'.
[ 1548.645582][T28698] syzkaller0: entered allmulticast mode
[ 1548.747959][T28699] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1549.029669][T28450] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1549.160164][T28450] veth0_vlan: entered promiscuous mode
[ 1549.212227][T28450] veth1_vlan: entered promiscuous mode
[ 1549.220522][T28709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1549.232453][T28709] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1549.264662][T28709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1549.299405][T28711] netlink: 'syz.0.7357': attribute type 9 has an invalid length.
[ 1549.308969][T28709] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1549.318550][T28711] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7357'.
[ 1549.434572][T28713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7364'.
[ 1549.445355][T28713] veth0_vlan: entered allmulticast mode
[ 1549.476317][T28716] netlink: 'syz.0.7357': attribute type 10 has an invalid length.
[ 1549.549350][T28716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.594359][T28716] team0: Port device bond0 added
[ 1549.779401][T28450] veth0_macvtap: entered promiscuous mode
[ 1549.805705][T28450] veth1_macvtap: entered promiscuous mode
[ 1549.857675][T28450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1549.896013][T28450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.905911][T28450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1549.923626][T28450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.941258][T28450] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1550.055162][T28450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.066602][T28450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.077134][T28450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.088068][T28450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.123332][T28450] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1550.164067][T28450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.184176][T28450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.195644][T28450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.208630][T28450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.566192][ T6188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.574107][ T6188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1550.695385][T23537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.734688][T23537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1551.538149][T28741] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7371'.
[ 1552.122454][T28745] netlink: 'syz.1.7365': attribute type 11 has an invalid length.
[ 1552.130906][T28745] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.7365'.
[ 1552.154563][T28745] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1552.445810][T28752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1552.459814][T28752] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1552.498928][T28752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1552.551374][T28752] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.833689][T28774] netlink: 'syz.1.7376': attribute type 10 has an invalid length.
[ 1554.856685][T28774] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7376'.
[ 1554.873883][T28774] hsr0: entered promiscuous mode
[ 1554.890913][T28774] bridge0: port 3(hsr0) entered blocking state
[ 1554.904115][T28774] bridge0: port 3(hsr0) entered disabled state
[ 1554.921044][T28774] hsr0: entered allmulticast mode
[ 1554.936410][T28774] hsr_slave_0: entered allmulticast mode
[ 1554.943746][T28774] hsr_slave_1: entered allmulticast mode
[ 1554.987378][T28774] bridge0: port 3(hsr0) entered blocking state
[ 1554.996860][T28774] bridge0: port 3(hsr0) entered forwarding state
[ 1567.464355][T28822] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.7390'.
[ 1567.523847][T28824] netlink: 'syz.3.7390': attribute type 27 has an invalid length.
[ 1567.569303][T28824] netlink: 'syz.3.7390': attribute type 3 has an invalid length.
[ 1568.351059][T28827] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1568.361408][T28827] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1568.368847][T28827] veth0_to_team: entered allmulticast mode
[ 1568.377040][T28827] veth0_to_team: entered promiscuous mode
[ 1568.988276][T28847] Ÿë
: port 2(gretap0) entered blocking state
[ 1569.010102][T28847] Ÿë
: port 2(gretap0) entered disabled state
[ 1569.028271][T28847] gretap0: entered allmulticast mode
[ 1569.110904][T28847] gretap0: entered promiscuous mode
[ 1569.142609][T28851] netlink: 'syz.1.7402': attribute type 9 has an invalid length.
[ 1569.170124][T28851] netlink: 399 bytes leftover after parsing attributes in process `syz.1.7402'.
[ 1569.171058][T28852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1569.424757][T28865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7406'.
[ 1569.597763][T28871] netlink: 'syz.2.7408': attribute type 10 has an invalid length.
[ 1570.571526][T28902] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7415'.
[ 1570.597260][T28905] netlink: 'syz.2.7414': attribute type 21 has an invalid length.
[ 1570.607157][T28905] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7414'.
[ 1572.456653][T28945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7432'.
[ 1573.176527][T28964] netlink: 'syz.3.7441': attribute type 39 has an invalid length.
[ 1573.566513][T28965] netlink: 'syz.3.7441': attribute type 5 has an invalid length.
[ 1575.149524][T29003] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7454'.
[ 1575.197901][T29012] FAULT_INJECTION: forcing a failure.
[ 1575.197901][T29012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1575.232667][T29012] CPU: 0 PID: 29012 Comm: syz.3.7456 Not tainted syzkaller #0
[ 1575.240274][T29012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1575.250553][T29012] Call Trace:
[ 1575.253875][T29012]  <TASK>
[ 1575.256842][T29012]  dump_stack_lvl+0x18c/0x250
[ 1575.261577][T29012]  ? show_regs_print_info+0x20/0x20
[ 1575.266825][T29012]  ? load_image+0x420/0x420
[ 1575.271384][T29012]  ? __might_fault+0xaa/0x120
[ 1575.276109][T29012]  ? __lock_acquire+0x7d80/0x7d80
[ 1575.283315][T29012]  ? __virt_addr_valid+0x10c/0x380
[ 1575.288528][T29012]  should_fail_ex+0x394/0x4c0
[ 1575.293288][T29012]  _copy_from_user+0x2f/0xe0
[ 1575.297936][T29012]  generic_map_update_batch+0x53e/0x800
[ 1575.303549][T29012]  ? rcu_read_unlock+0xa0/0xa0
[ 1575.308469][T29012]  ? __fdget+0x180/0x210
[ 1575.312796][T29012]  ? rcu_read_unlock+0xa0/0xa0
[ 1575.317666][T29012]  bpf_map_do_batch+0x3f2/0x600
[ 1575.322664][T29012]  ? bpf_lsm_key_permission+0x10/0x10
[ 1575.328111][T29012]  __sys_bpf+0x381/0x890
[ 1575.332410][T29012]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1575.337947][T29012]  ? lock_chain_count+0x20/0x20
[ 1575.342962][T29012]  __x64_sys_bpf+0x7c/0x90
[ 1575.347517][T29012]  do_syscall_64+0x55/0xb0
[ 1575.351986][T29012]  ? clear_bhb_loop+0x40/0x90
[ 1575.356723][T29012]  ? clear_bhb_loop+0x40/0x90
[ 1575.361454][T29012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1575.367402][T29012] RIP: 0033:0x7f6cbbb9e159
[ 1575.371853][T29012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1575.392272][T29012] RSP: 002b:00007f6cbc981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1575.400709][T29012] RAX: ffffffffffffffda RBX: 00007f6cbbe25fa0 RCX: 00007f6cbbb9e159
[ 1575.408782][T29012] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1575.416769][T29012] RBP: 00007f6cbc981090 R08: 0000000000000000 R09: 0000000000000000
[ 1575.424749][T29012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1575.432735][T29012] R13: 00007f6cbbe26038 R14: 00007f6cbbe25fa0 R15: 00007fff265697b8
[ 1575.440733][T29012]  </TASK>
[ 1576.412853][T29060] netlink: 'syz.1.7466': attribute type 21 has an invalid length.
[ 1576.435111][T29060] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7466'.
[ 1580.086134][T29080] sit0: entered allmulticast mode
[ 1580.225193][T29083] sit0: entered promiscuous mode
[ 1580.771038][T29097] Ÿë
: port 1(gretap0) entered blocking state
[ 1580.780268][T29097] Ÿë
: port 1(gretap0) entered disabled state
[ 1580.816948][T29097] gretap0: entered allmulticast mode
[ 1580.886460][T29097] gretap0: entered promiscuous mode
[ 1581.303697][T29108] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7481'.
[ 1581.334490][T29108] netlink: 'syz.2.7481': attribute type 10 has an invalid length.
[ 1581.879797][T29133] netlink: 'syz.1.7489': attribute type 21 has an invalid length.
[ 1581.901476][T29133] netlink: 'syz.1.7489': attribute type 15 has an invalid length.
[ 1582.164464][T29142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7491'.
[ 1584.186249][T23958] Bluetooth: hci1: command 0x0406 tx timeout
[ 1585.083360][T29214] netlink: 'syz.1.7515': attribute type 10 has an invalid length.
[ 1587.068617][T29242] netlink: 'syz.0.7521': attribute type 10 has an invalid length.
[ 1587.184851][T29242] team0: Port device netdevsim0 added
[ 1587.206033][T29243] netlink: 'syz.0.7521': attribute type 10 has an invalid length.
[ 1587.336703][T29243] team0: Port device netdevsim0 removed
[ 1587.373582][T29243] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1587.819202][T29255] netlink: 'syz.2.7526': attribute type 12 has an invalid length.
[ 1587.846483][T29255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7526'.
[ 1590.103139][T29289] netlink: 'syz.1.7539': attribute type 39 has an invalid length.
[ 1591.416217][T29305] netlink: 'syz.2.7543': attribute type 10 has an invalid length.
[ 1591.435110][T29305] team0: Device hsr_slave_0 failed to register rx_handler
[ 1592.159732][T29312] netlink: 'syz.1.7545': attribute type 21 has an invalid length.
[ 1592.178018][T29312] netlink: 'syz.1.7545': attribute type 19 has an invalid length.
[ 1592.196144][T29312] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.7545'.
[ 1592.246560][T29315] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7541'.
[ 1593.934030][T29341] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.7555'.
[ 1593.944777][T29341] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1595.274311][T29364] netlink: 'syz.2.7562': attribute type 10 has an invalid length.
[ 1595.851326][T29366] netlink: 'syz.0.7564': attribute type 10 has an invalid length.
[ 1596.026632][T29366] team0: Port device geneve1 added
[ 1596.467411][T29380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7569'.
[ 1597.997094][T29408] mac80211_hwsim hwsim104 wlan1: entered promiscuous mode
[ 1598.004405][T29408] mac80211_hwsim hwsim104 wlan1: entered allmulticast mode
[ 1598.176152][   T14] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1047 jiffies old.
[ 1598.294252][T29411] netlink: 47507 bytes leftover after parsing attributes in process `syz.3.7575'.
[ 1599.053905][T29425] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7580'.
[ 1599.321133][T29437] netlink: 'syz.0.7584': attribute type 39 has an invalid length.
[ 1601.924216][T29456] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7593'.
[ 1602.533819][T29462] netlink: 'syz.2.7595': attribute type 10 has an invalid length.
[ 1602.906231][T29465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7596'.
[ 1602.942736][T29464] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7596'.
[ 1602.980503][T29464] netlink: 'syz.2.7596': attribute type 10 has an invalid length.
[ 1605.038489][T29475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1606.250448][T29499] netlink: 'syz.3.7604': attribute type 10 has an invalid length.
[ 1606.525749][T29499] team0: Port device geneve1 added
[ 1607.273104][T29509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1607.711906][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.718404][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.041055][T29521] FAULT_INJECTION: forcing a failure.
[ 1608.041055][T29521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1608.113174][T29521] CPU: 1 PID: 29521 Comm: syz.0.7615 Not tainted syzkaller #0
[ 1608.120822][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1608.130923][T29521] Call Trace:
[ 1608.134228][T29521]  <TASK>
[ 1608.137177][T29521]  dump_stack_lvl+0x18c/0x250
[ 1608.141881][T29521]  ? show_regs_print_info+0x20/0x20
[ 1608.147099][T29521]  ? load_image+0x420/0x420
[ 1608.151621][T29521]  ? __might_fault+0xaa/0x120
[ 1608.156731][T29521]  ? __lock_acquire+0x7d80/0x7d80
[ 1608.161779][T29521]  should_fail_ex+0x394/0x4c0
[ 1608.166482][T29521]  _copy_to_iter+0x1ce/0x1110
[ 1608.171183][T29521]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1608.177185][T29521]  ? lock_chain_count+0x20/0x20
[ 1608.182057][T29521]  ? iov_iter_init+0x1e0/0x1e0
[ 1608.186838][T29521]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1608.192224][T29521]  ? lockdep_hardirqs_on+0x98/0x150
[ 1608.197447][T29521]  ? page_copy_sane+0x16a/0x270
[ 1608.202321][T29521]  copy_page_to_iter+0xa7/0x150
[ 1608.207301][T29521]  __sk_msg_recvmsg+0x32b/0xde0
[ 1608.212241][T29521]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1608.218185][T29521]  unix_bpf_recvmsg+0x5b0/0xdd0
[ 1608.223099][T29521]  ? unix_stream_bpf_update_proto+0x310/0x310
[ 1608.229211][T29521]  ? wait_woken+0x180/0x180
[ 1608.233733][T29521]  ? aa_sock_msg_perm+0x94/0x150
[ 1608.238691][T29521]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1608.243992][T29521]  ? security_socket_recvmsg+0x89/0xb0
[ 1608.249461][T29521]  ? unix_dgram_recvmsg+0x71/0xd0
[ 1608.254498][T29521]  ? unix_dgram_sendmsg+0x16e0/0x16e0
[ 1608.259887][T29521]  ____sys_recvmsg+0x2bd/0x5d0
[ 1608.264685][T29521]  ? __sys_recvmsg_sock+0x50/0x50
[ 1608.269741][T29521]  ? import_iovec+0x73/0xa0
[ 1608.274269][T29521]  ___sys_recvmsg+0x214/0x590
[ 1608.278970][T29521]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1608.284036][T29521]  ? ksys_write+0x1d2/0x260
[ 1608.288575][T29521]  ? __fget_files+0x3fc/0x460
[ 1608.293287][T29521]  __x64_sys_recvmsg+0x21e/0x2f0
[ 1608.298247][T29521]  ? ___sys_recvmsg+0x590/0x590
[ 1608.303219][T29521]  ? lockdep_hardirqs_on+0x98/0x150
[ 1608.308448][T29521]  do_syscall_64+0x55/0xb0
[ 1608.312878][T29521]  ? clear_bhb_loop+0x40/0x90
[ 1608.317575][T29521]  ? clear_bhb_loop+0x40/0x90
[ 1608.322269][T29521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1608.328181][T29521] RIP: 0033:0x7f570719e159
[ 1608.332609][T29521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1608.352323][T29521] RSP: 002b:00007f57080cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1608.360757][T29521] RAX: ffffffffffffffda RBX: 00007f5707425fa0 RCX: 00007f570719e159
[ 1608.368747][T29521] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1608.376732][T29521] RBP: 00007f57080cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1608.384979][T29521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1608.392976][T29521] R13: 00007f5707426038 R14: 00007f5707425fa0 R15: 00007ffcb0b42918
[ 1608.400985][T29521]  </TASK>
[ 1609.185145][T29224] syz.3.7514 (29224) used greatest stack depth: 17320 bytes left
[ 1609.363570][T29541] FAULT_INJECTION: forcing a failure.
[ 1609.363570][T29541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1609.377207][T29541] CPU: 1 PID: 29541 Comm: syz.2.7622 Not tainted syzkaller #0
[ 1609.384761][T29541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1609.395045][T29541] Call Trace:
[ 1609.398359][T29541]  <TASK>
[ 1609.401331][T29541]  dump_stack_lvl+0x18c/0x250
[ 1609.406065][T29541]  ? show_regs_print_info+0x20/0x20
[ 1609.411351][T29541]  ? load_image+0x420/0x420
[ 1609.415902][T29541]  ? __might_fault+0xaa/0x120
[ 1609.420640][T29541]  ? __lock_acquire+0x7d80/0x7d80
[ 1609.425710][T29541]  should_fail_ex+0x394/0x4c0
[ 1609.430433][T29541]  _copy_from_user+0x2f/0xe0
[ 1609.435065][T29541]  ___sys_recvmsg+0x174/0x590
[ 1609.439786][T29541]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1609.444577][T29541]  ? ksys_write+0x1d2/0x260
[ 1609.449117][T29541]  ? __fget_files+0x3fc/0x460
[ 1609.453828][T29541]  __x64_sys_recvmsg+0x21e/0x2f0
[ 1609.458787][T29541]  ? ___sys_recvmsg+0x590/0x590
[ 1609.463672][T29541]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.468892][T29541]  do_syscall_64+0x55/0xb0
[ 1609.473323][T29541]  ? clear_bhb_loop+0x40/0x90
[ 1609.478023][T29541]  ? clear_bhb_loop+0x40/0x90
[ 1609.482715][T29541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1609.488637][T29541] RIP: 0033:0x7f5b6939e159
[ 1609.493159][T29541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1609.512810][T29541] RSP: 002b:00007f5b6a2ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1609.521334][T29541] RAX: ffffffffffffffda RBX: 00007f5b69625fa0 RCX: 00007f5b6939e159
[ 1609.529344][T29541] RDX: 0000000000002080 RSI: 0000200000003cc0 RDI: 0000000000000003
[ 1609.537502][T29541] RBP: 00007f5b6a2ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1609.545484][T29541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1609.553483][T29541] R13: 00007f5b69626038 R14: 00007f5b69625fa0 R15: 00007fff9c41b448
[ 1609.561572][T29541]  </TASK>
[ 1609.838438][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7624'.
[ 1610.582782][T29230] syz.3.7514 (29230) used greatest stack depth: 17256 bytes left
[ 1610.749309][T29559] syzkaller0: entered promiscuous mode
[ 1610.754865][T29559] syzkaller0: entered allmulticast mode
[ 1610.805896][T29560] netlink: 'syz.0.7629': attribute type 21 has an invalid length.
[ 1610.814316][T29560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7629'.
[ 1610.824880][T29560] netlink: 'syz.0.7629': attribute type 4 has an invalid length.
[ 1610.833135][T29560] netlink: 'syz.0.7629': attribute type 3 has an invalid length.
[ 1610.850924][T29560] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7629'.
[ 1611.834340][T29569] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7633'.
[ 1613.801987][T29569] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7633'.
[ 1613.811921][T29569] tipc: Started in network mode
[ 1613.817032][T29569] tipc: Node identity b, cluster identity 57
[ 1613.823138][T29569] tipc: Node number set to 11
[ 1614.412045][T29583] netlink: 'syz.3.7638': attribute type 10 has an invalid length.
[ 1614.424959][T29583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7638'.
[ 1614.435167][T29583] team0: entered promiscuous mode
[ 1614.443585][T29583] team_slave_0: entered promiscuous mode
[ 1614.450024][T29583] team_slave_1: entered promiscuous mode
[ 1614.459446][T29583] geneve1: entered promiscuous mode
[ 1614.465132][T29583] team0: entered allmulticast mode
[ 1614.470831][T29583] team_slave_0: entered allmulticast mode
[ 1614.479410][T29583] team_slave_1: entered allmulticast mode
[ 1614.491244][T29583] geneve1: entered allmulticast mode
[ 1614.498379][T29583] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1615.416994][T29592] netlink: 'syz.3.7640': attribute type 10 has an invalid length.
[ 1615.424932][T29592] hsr0: entered promiscuous mode
[ 1615.519265][T29592] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1616.120851][T29600] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7644'.
[ 1617.067430][T29633] netlink: 'syz.2.7651': attribute type 10 has an invalid length.
[ 1617.075452][T29633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7651'.
[ 1617.158034][T29633] vcan0: entered promiscuous mode
[ 1617.163752][T29633] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1617.319462][T29636] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.7653'.
[ 1619.392864][T29655] netlink: 'syz.2.7658': attribute type 4 has an invalid length.
[ 1622.466687][T29697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1622.474034][T29697] IPv6: NLM_F_CREATE should be set when creating new route
[ 1622.481417][T29697] IPv6: NLM_F_CREATE should be set when creating new route
[ 1622.488751][T29697] IPv6: NLM_F_CREATE should be set when creating new route
[ 1622.806621][T29697] netlink: 'syz.2.7670': attribute type 9 has an invalid length.
[ 1622.892975][T29697] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7670'.
[ 1623.397313][T29702] netlink: 'syz.3.7672': attribute type 21 has an invalid length.
[ 1623.400934][T29694] netlink: 'syz.2.7670': attribute type 9 has an invalid length.
[ 1623.414846][T29694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7670'.
[ 1623.487440][T29702] netlink: 'syz.3.7672': attribute type 21 has an invalid length.
[ 1623.873054][T29711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7673'.
[ 1624.169540][T29718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7676'.
[ 1624.225567][T29722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7676'.
[ 1624.482401][T29729] netlink: 'syz.1.7681': attribute type 10 has an invalid length.
[ 1624.493555][T29729] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7681'.
[ 1624.919115][T29745] netlink: 'syz.2.7684': attribute type 8 has an invalid length.
[ 1624.949683][T29745] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7684'.
[ 1624.981098][T29737] netlink: 'syz.1.7681': attribute type 21 has an invalid length.
[ 1624.996875][T29737] netlink: 'syz.1.7681': attribute type 19 has an invalid length.
[ 1625.005098][T29737] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.7681'.
[ 1625.022757][T29730] netlink: 'syz.3.7680': attribute type 10 has an invalid length.
[ 1625.322101][T29730] wg1: entered promiscuous mode
[ 1625.327975][T29730] wg1: entered allmulticast mode
[ 1625.333194][T29730] team0: Device wg1 is of different type
[ 1625.358814][T29745] netlink: 'syz.2.7684': attribute type 8 has an invalid length.
[ 1625.377278][T29745] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7684'.
[ 1625.392041][T29745] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7684'.
[ 1626.262992][T29768] bond0: (slave netdevsim0): Releasing backup interface
[ 1626.283895][T29768] team0: Port device netdevsim0 added
[ 1627.842888][T29801] validate_nla: 42 callbacks suppressed
[ 1627.842911][T29801] netlink: 'syz.2.7704': attribute type 10 has an invalid length.
[ 1630.599908][T29817] netlink: 'syz.0.7708': attribute type 3 has an invalid length.
[ 1630.619658][T29817] __nla_validate_parse: 39 callbacks suppressed
[ 1630.619682][T29817] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7708'.
[ 1630.887446][T29811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1631.534752][T29839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1631.543222][T29839] IPv6: NLM_F_CREATE should be set when creating new route
[ 1631.551764][T29839] IPv6: NLM_F_CREATE should be set when creating new route
[ 1631.560279][T29839] IPv6: NLM_F_CREATE should be set when creating new route
[ 1631.668668][T29839] netlink: 'syz.3.7714': attribute type 9 has an invalid length.
[ 1631.679413][T29839] netlink: 652 bytes leftover after parsing attributes in process `syz.3.7714'.
[ 1631.937710][T29853] FAULT_INJECTION: forcing a failure.
[ 1631.937710][T29853] name failslab, interval 1, probability 0, space 0, times 0
[ 1631.955246][T29853] CPU: 1 PID: 29853 Comm: syz.3.7716 Not tainted syzkaller #0
[ 1631.962797][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1631.972956][T29853] Call Trace:
[ 1631.976254][T29853]  <TASK>
[ 1631.979199][T29853]  dump_stack_lvl+0x18c/0x250
[ 1631.983895][T29853]  ? show_regs_print_info+0x20/0x20
[ 1631.989111][T29853]  ? load_image+0x420/0x420
[ 1631.993637][T29853]  ? __might_sleep+0xe0/0xe0
[ 1631.998253][T29853]  ? __lock_acquire+0x7d80/0x7d80
[ 1632.003301][T29853]  should_fail_ex+0x394/0x4c0
[ 1632.008004][T29853]  should_failslab+0x9/0x20
[ 1632.012540][T29853]  slab_pre_alloc_hook+0x59/0x300
[ 1632.017585][T29853]  ? __get_vm_area_node+0x125/0x370
[ 1632.022792][T29853]  __kmem_cache_alloc_node+0x53/0x250
[ 1632.028168][T29853]  ? __get_vm_area_node+0x125/0x370
[ 1632.033405][T29853]  kmalloc_node_trace+0x26/0xe0
[ 1632.038317][T29853]  __get_vm_area_node+0x125/0x370
[ 1632.043353][T29853]  __vmalloc_node_range+0x36f/0x1320
[ 1632.048647][T29853]  ? netlink_sendmsg+0x602/0xbf0
[ 1632.053611][T29853]  ? netlink_insert+0x1094/0x1390
[ 1632.058767][T29853]  ? netlink_insert+0x2ba/0x1390
[ 1632.063751][T29853]  ? free_vm_area+0x50/0x50
[ 1632.068302][T29853]  ? netlink_sendmsg+0x602/0xbf0
[ 1632.073270][T29853]  vmalloc+0x79/0x90
[ 1632.077213][T29853]  ? netlink_sendmsg+0x602/0xbf0
[ 1632.082190][T29853]  netlink_sendmsg+0x602/0xbf0
[ 1632.087015][T29853]  ? netlink_getsockopt+0x590/0x590
[ 1632.092270][T29853]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1632.097839][T29853]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1632.103224][T29853]  ? security_socket_sendmsg+0x80/0xa0
[ 1632.108736][T29853]  ? netlink_getsockopt+0x590/0x590
[ 1632.113948][T29853]  ____sys_sendmsg+0x61b/0x980
[ 1632.118732][T29853]  ? __asan_memset+0x22/0x40
[ 1632.123332][T29853]  ? __sys_sendmsg_sock+0x30/0x30
[ 1632.128374][T29853]  ? __import_iovec+0x5f2/0x850
[ 1632.133262][T29853]  ? import_iovec+0x73/0xa0
[ 1632.137781][T29853]  ___sys_sendmsg+0x2a6/0x360
[ 1632.142465][T29853]  ? get_pid_task+0x20/0x1e0
[ 1632.147101][T29853]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1632.151915][T29853]  ? __lock_acquire+0x7d80/0x7d80
[ 1632.157004][T29853]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1632.162000][T29853]  ? __x64_sys_sendmsg+0x80/0x80
[ 1632.166955][T29853]  ? lockdep_hardirqs_on+0x98/0x150
[ 1632.172169][T29853]  do_syscall_64+0x55/0xb0
[ 1632.176594][T29853]  ? clear_bhb_loop+0x40/0x90
[ 1632.181296][T29853]  ? clear_bhb_loop+0x40/0x90
[ 1632.185981][T29853]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1632.191976][T29853] RIP: 0033:0x7f6cbbb9e159
[ 1632.196410][T29853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1632.216039][T29853] RSP: 002b:00007f6cb9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1632.224653][T29853] RAX: ffffffffffffffda RBX: 00007f6cbbe26090 RCX: 00007f6cbbb9e159
[ 1632.232625][T29853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1632.240635][T29853] RBP: 00007f6cb9df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1632.248655][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1632.256641][T29853] R13: 00007f6cbbe26128 R14: 00007f6cbbe26090 R15: 00007fff265697b8
[ 1632.264651][T29853]  </TASK>
[ 1632.277422][T29853] syz.3.7716: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1632.292748][T29853] CPU: 1 PID: 29853 Comm: syz.3.7716 Not tainted syzkaller #0
[ 1632.300355][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1632.310456][T29853] Call Trace:
[ 1632.313776][T29853]  <TASK>
[ 1632.316859][T29853]  dump_stack_lvl+0x18c/0x250
[ 1632.321589][T29853]  ? show_regs_print_info+0x20/0x20
[ 1632.326837][T29853]  ? load_image+0x420/0x420
[ 1632.331399][T29853]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1632.338056][T29853]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1632.344704][T29853]  warn_alloc+0x246/0x340
[ 1632.349086][T29853]  ? __get_vm_area_node+0x125/0x370
[ 1632.354338][T29853]  ? zone_watermark_ok_safe+0x230/0x230
[ 1632.360283][T29853]  ? rcu_is_watching+0x15/0xb0
[ 1632.365102][T29853]  ? __get_vm_area_node+0x356/0x370
[ 1632.370365][T29853]  __vmalloc_node_range+0x394/0x1320
[ 1632.375706][T29853]  ? netlink_insert+0x1094/0x1390
[ 1632.380787][T29853]  ? netlink_insert+0x2ba/0x1390
[ 1632.385756][T29853]  ? free_vm_area+0x50/0x50
[ 1632.390273][T29853]  ? netlink_sendmsg+0x602/0xbf0
[ 1632.395229][T29853]  vmalloc+0x79/0x90
[ 1632.399158][T29853]  ? netlink_sendmsg+0x602/0xbf0
[ 1632.404142][T29853]  netlink_sendmsg+0x602/0xbf0
[ 1632.408951][T29853]  ? netlink_getsockopt+0x590/0x590
[ 1632.414210][T29853]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1632.419789][T29853]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1632.425095][T29853]  ? security_socket_sendmsg+0x80/0xa0
[ 1632.430653][T29853]  ? netlink_getsockopt+0x590/0x590
[ 1632.435951][T29853]  ____sys_sendmsg+0x61b/0x980
[ 1632.440736][T29853]  ? __asan_memset+0x22/0x40
[ 1632.445346][T29853]  ? __sys_sendmsg_sock+0x30/0x30
[ 1632.450383][T29853]  ? __import_iovec+0x5f2/0x850
[ 1632.455261][T29853]  ? import_iovec+0x73/0xa0
[ 1632.459782][T29853]  ___sys_sendmsg+0x2a6/0x360
[ 1632.464471][T29853]  ? get_pid_task+0x20/0x1e0
[ 1632.469083][T29853]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1632.473876][T29853]  ? __lock_acquire+0x7d80/0x7d80
[ 1632.478941][T29853]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1632.483978][T29853]  ? __x64_sys_sendmsg+0x80/0x80
[ 1632.488944][T29853]  ? lockdep_hardirqs_on+0x98/0x150
[ 1632.494164][T29853]  do_syscall_64+0x55/0xb0
[ 1632.498626][T29853]  ? clear_bhb_loop+0x40/0x90
[ 1632.503330][T29853]  ? clear_bhb_loop+0x40/0x90
[ 1632.508025][T29853]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1632.514016][T29853] RIP: 0033:0x7f6cbbb9e159
[ 1632.518459][T29853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1632.538168][T29853] RSP: 002b:00007f6cb9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1632.546604][T29853] RAX: ffffffffffffffda RBX: 00007f6cbbe26090 RCX: 00007f6cbbb9e159
[ 1632.554640][T29853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1632.562633][T29853] RBP: 00007f6cb9df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1632.570713][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1632.578694][T29853] R13: 00007f6cbbe26128 R14: 00007f6cbbe26090 R15: 00007fff265697b8
[ 1632.586781][T29853]  </TASK>
[ 1632.606050][T29853] Mem-Info:
[ 1632.609566][T29853] active_anon:8665 inactive_anon:0 isolated_anon:0
[ 1632.609566][T29853]  active_file:19163 inactive_file:40566 isolated_file:0
[ 1632.609566][T29853]  unevictable:768 dirty:85 writeback:0
[ 1632.609566][T29853]  slab_reclaimable:11424 slab_unreclaimable:95099
[ 1632.609566][T29853]  mapped:24788 shmem:1361 pagetables:516
[ 1632.609566][T29853]  sec_pagetables:0 bounce:0
[ 1632.609566][T29853]  kernel_misc_reclaimable:0
[ 1632.609566][T29853]  free:1337215 free_pcp:7596 free_cma:0
[ 1632.667955][T29853] Node 0 active_anon:34760kB inactive_anon:0kB active_file:76652kB inactive_file:162064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99152kB dirty:540kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10692kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no
[ 1632.705152][T29853] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1632.737154][T29853] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1632.767330][T29858] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.7720'.
[ 1632.777063][T29858] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1632.819238][T29853] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1632.825571][T29853] Node 0 DMA32 free:1438708kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34624kB inactive_anon:0kB active_file:76652kB inactive_file:161240kB unevictable:1536kB writepending:640kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:11516kB local_pcp:5924kB free_cma:0kB
[ 1632.864886][T29853] lowmem_reserve[]: 0 0 0 0 0
[ 1632.890751][T29853] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1632.941814][T29853] lowmem_reserve[]: 0 0 0 0 0
[ 1632.954625][T29853] Node 1 Normal free:3894412kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19788kB local_pcp:14808kB free_cma:0kB
[ 1633.010489][T29853] lowmem_reserve[]: 0 0 0 0 0
[ 1633.020769][T29853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1633.048913][T29864] netlink: 'syz.0.7723': attribute type 39 has an invalid length.
[ 1633.062473][T29853] Node 0 DMA32: 2391*4kB (UME) 1572*8kB (UME) 1694*16kB (UME) 1731*32kB (UME) 1016*64kB (UME) 501*128kB (UM) 132*256kB (UM) 67*512kB (UM) 42*1024kB (UM) 28*2048kB (ME) 253*4096kB (M) = 1438524kB
[ 1633.098315][T29866] netlink: 'syz.2.7724': attribute type 27 has an invalid length.
[ 1633.109825][T29866] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7724'.
[ 1633.115334][T29853] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1633.156190][T29853] Node 1 Normal: 179*4kB (UME) 44*8kB (UME) 38*16kB (UME) 46*32kB (UME) 9*64kB (UE) 4*128kB (UM) 0*256kB 2*512kB (ME) 0*1024kB 1*2048kB (E) 949*4096kB (UM) = 3894412kB
[ 1633.176685][T29853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1633.196023][T29853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1633.205371][T29853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1633.225670][T29853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1633.247647][T29853] 61090 total pagecache pages
[ 1633.252390][T29853] 0 pages in swap cache
[ 1633.268735][T29853] Free swap  = 124588kB
[ 1633.272968][T29853] Total swap = 124996kB
[ 1633.287378][T29853] 2097051 pages RAM
[ 1633.291260][T29853] 0 pages HighMem/MovableOnly
[ 1633.296428][T29853] 416959 pages reserved
[ 1633.300614][T29853] 0 pages cma reserved
[ 1633.848709][T29887] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7731'.
[ 1634.029527][T29887] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1634.662314][T29898] netlink: 'syz.0.7735': attribute type 10 has an invalid length.
[ 1634.726412][T29898] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7735'.
[ 1634.737561][T29898] hsr0: entered promiscuous mode
[ 1634.747893][T29898] bridge0: port 3(hsr0) entered blocking state
[ 1634.758356][T29898] bridge0: port 3(hsr0) entered disabled state
[ 1634.766086][T29898] hsr0: entered allmulticast mode
[ 1634.771749][T29898] hsr_slave_0: entered allmulticast mode
[ 1634.786285][T29898] hsr_slave_1: entered allmulticast mode
[ 1634.854051][T29898] bridge0: port 3(hsr0) entered blocking state
[ 1634.863742][T29898] bridge0: port 3(hsr0) entered forwarding state
[ 1634.952276][T29903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1634.960336][T29903] IPv6: NLM_F_CREATE should be set when creating new route
[ 1634.968661][T29903] IPv6: NLM_F_CREATE should be set when creating new route
[ 1634.976749][T29903] IPv6: NLM_F_CREATE should be set when creating new route
[ 1635.143142][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.150551][T29909] IPv6: NLM_F_CREATE should be set when creating new route
[ 1635.157919][T29909] IPv6: NLM_F_CREATE should be set when creating new route
[ 1635.165364][T29909] IPv6: NLM_F_CREATE should be set when creating new route
[ 1635.201677][T29903] netlink: 'syz.1.7736': attribute type 9 has an invalid length.
[ 1635.236130][T29903] netlink: 652 bytes leftover after parsing attributes in process `syz.1.7736'.
[ 1635.344164][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.384065][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.391651][T18276] Bluetooth: hci4: command 0x0406 tx timeout
[ 1635.430229][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.438474][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.447309][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.455284][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.464232][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.472252][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.480616][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.488505][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.496355][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.508765][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.520392][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.529080][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.536917][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.544937][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.560124][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.585438][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.653779][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.699674][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.736668][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.809194][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1635.823196][T29909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1636.259063][T29928] netlink: 'syz.3.7747': attribute type 15 has an invalid length.
[ 1636.296675][T29928] netlink: 'syz.3.7747': attribute type 7 has an invalid length.
[ 1638.063099][T29986] FAULT_INJECTION: forcing a failure.
[ 1638.063099][T29986] name failslab, interval 1, probability 0, space 0, times 0
[ 1638.076029][T29986] CPU: 0 PID: 29986 Comm: syz.1.7766 Not tainted syzkaller #0
[ 1638.083554][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1638.093664][T29986] Call Trace:
[ 1638.097000][T29986]  <TASK>
[ 1638.099961][T29986]  dump_stack_lvl+0x18c/0x250
[ 1638.104665][T29986]  ? show_regs_print_info+0x20/0x20
[ 1638.109903][T29986]  ? load_image+0x420/0x420
[ 1638.114577][T29986]  ? netdev_core_pick_tx+0x370/0x370
[ 1638.119949][T29986]  should_fail_ex+0x394/0x4c0
[ 1638.124711][T29986]  should_failslab+0x9/0x20
[ 1638.129278][T29986]  slab_pre_alloc_hook+0x59/0x300
[ 1638.134394][T29986]  kmem_cache_alloc+0x5a/0x2c0
[ 1638.139225][T29986]  ? skb_clone+0x1eb/0x370
[ 1638.143685][T29986]  skb_clone+0x1eb/0x370
[ 1638.147996][T29986]  bpf_clone_redirect+0x16d/0x4a0
[ 1638.153068][T29986]  bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62
[ 1638.158569][T29986]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1638.164582][T29986]  ? preempt_schedule+0xc0/0xd0
[ 1638.169465][T29986]  ? bpf_test_run+0x174/0x870
[ 1638.174193][T29986]  ? preempt_schedule_common+0x82/0xc0
[ 1638.180038][T29986]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1638.186064][T29986]  ? lockdep_softirqs_on+0x5b0/0x5b0
[ 1638.191393][T29986]  ? lock_chain_count+0x20/0x20
[ 1638.196285][T29986]  ? __local_bh_disable_ip+0x108/0x1a0
[ 1638.201770][T29986]  ? __cant_sleep+0x220/0x220
[ 1638.206472][T29986]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1638.211869][T29986]  ? _local_bh_enable+0xa0/0xa0
[ 1638.216846][T29986]  ? bpf_test_timer_continue+0x135/0x380
[ 1638.222515][T29986]  ? bpf_test_run+0x174/0x870
[ 1638.227227][T29986]  bpf_test_run+0x2df/0x870
[ 1638.231781][T29986]  ? bpf_test_run+0x174/0x870
[ 1638.236951][T29986]  ? dst_hold+0x70/0x70
[ 1638.241226][T29986]  ? eth_get_headlen+0x210/0x210
[ 1638.246211][T29986]  bpf_prog_test_run_skb+0xdbb/0x18f0
[ 1638.251654][T29986]  ? cpu_online+0x60/0x60
[ 1638.256014][T29986]  bpf_prog_test_run+0x31f/0x390
[ 1638.260984][T29986]  __sys_bpf+0x49d/0x890
[ 1638.265255][T29986]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1638.270718][T29986]  ? lock_chain_count+0x20/0x20
[ 1638.275711][T29986]  __x64_sys_bpf+0x7c/0x90
[ 1638.280163][T29986]  do_syscall_64+0x55/0xb0
[ 1638.284604][T29986]  ? clear_bhb_loop+0x40/0x90
[ 1638.289394][T29986]  ? clear_bhb_loop+0x40/0x90
[ 1638.294101][T29986]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1638.300109][T29986] RIP: 0033:0x7efe1fb9e159
[ 1638.304558][T29986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1638.324383][T29986] RSP: 002b:00007efe20b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1638.332847][T29986] RAX: ffffffffffffffda RBX: 00007efe1fe25fa0 RCX: 00007efe1fb9e159
[ 1638.340871][T29986] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1638.348881][T29986] RBP: 00007efe20b2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1638.356966][T29986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1638.364978][T29986] R13: 00007efe1fe26038 R14: 00007efe1fe25fa0 R15: 00007ffd0c395828
[ 1638.373093][T29986]  </TASK>
[ 1638.706849][T30000] netlink: 'syz.1.7770': attribute type 2 has an invalid length.
[ 1638.731035][T30000] netlink: 119 bytes leftover after parsing attributes in process `syz.1.7770'.
[ 1638.835872][T29996] netlink: 174904 bytes leftover after parsing attributes in process `syz.1.7770'.
[ 1639.624862][T30018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.217453][T30033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.534773][T30038] FAULT_INJECTION: forcing a failure.
[ 1640.534773][T30038] name failslab, interval 1, probability 0, space 0, times 0
[ 1640.548701][T30038] CPU: 0 PID: 30038 Comm: syz.3.7785 Not tainted syzkaller #0
[ 1640.556202][T30038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1640.566814][T30038] Call Trace:
[ 1640.570123][T30038]  <TASK>
[ 1640.573107][T30038]  dump_stack_lvl+0x18c/0x250
[ 1640.577922][T30038]  ? show_regs_print_info+0x20/0x20
[ 1640.583190][T30038]  ? load_image+0x420/0x420
[ 1640.587734][T30038]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1640.593141][T30038]  ? lockdep_hardirqs_on+0x98/0x150
[ 1640.598393][T30038]  should_fail_ex+0x394/0x4c0
[ 1640.603204][T30038]  should_failslab+0x9/0x20
[ 1640.607748][T30038]  slab_pre_alloc_hook+0x59/0x300
[ 1640.612814][T30038]  ? tipc_conn_lookup+0x1e6/0x270
[ 1640.617883][T30038]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1640.623294][T30038]  __kmem_cache_alloc_node+0x53/0x250
[ 1640.628794][T30038]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1640.634216][T30038]  kmalloc_trace+0x2a/0xe0
[ 1640.638716][T30038]  tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1640.643942][T30038]  tipc_sub_report_overlap+0x4b8/0x8a0
[ 1640.649442][T30038]  tipc_nametbl_insert_publ+0xe40/0x1380
[ 1640.655121][T30038]  tipc_nametbl_publish+0xbd/0x1f0
[ 1640.660259][T30038]  tipc_sk_publish+0x1cc/0x430
[ 1640.665037][T30038]  ? __lock_acquire+0x7d80/0x7d80
[ 1640.670170][T30038]  ? tipc_sk_withdraw+0x640/0x640
[ 1640.675213][T30038]  ? tipc_nametbl_build_group+0x2e/0x4c0
[ 1640.680866][T30038]  ? tipc_nametbl_build_group+0x482/0x4c0
[ 1640.686596][T30038]  ? tipc_nametbl_build_group+0x2e/0x4c0
[ 1640.692277][T30038]  tipc_sk_join+0x3b0/0x6a0
[ 1640.696803][T30038]  ? __tipc_sendstream+0x1290/0x1290
[ 1640.702119][T30038]  tipc_setsockopt+0x73f/0x990
[ 1640.706909][T30038]  ? tipc_shutdown+0x4d0/0x4d0
[ 1640.711690][T30038]  ? __fget_files+0x28/0x460
[ 1640.716298][T30038]  ? aa_sock_opt_perm+0x74/0x100
[ 1640.721251][T30038]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1640.726827][T30038]  ? security_socket_setsockopt+0x7e/0xa0
[ 1640.732585][T30038]  ? tipc_shutdown+0x4d0/0x4d0
[ 1640.737394][T30038]  do_sock_setsockopt+0x175/0x1a0
[ 1640.742440][T30038]  ? __fdget+0x180/0x210
[ 1640.746705][T30038]  __x64_sys_setsockopt+0x182/0x200
[ 1640.751924][T30038]  do_syscall_64+0x55/0xb0
[ 1640.756358][T30038]  ? clear_bhb_loop+0x40/0x90
[ 1640.761049][T30038]  ? clear_bhb_loop+0x40/0x90
[ 1640.765740][T30038]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1640.771651][T30038] RIP: 0033:0x7f6cbbb9e159
[ 1640.776084][T30038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1640.795797][T30038] RSP: 002b:00007f6cbc981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1640.804239][T30038] RAX: ffffffffffffffda RBX: 00007f6cbbe25fa0 RCX: 00007f6cbbb9e159
[ 1640.812225][T30038] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008
[ 1640.820210][T30038] RBP: 00007f6cbc981090 R08: 0000000000000043 R09: 0000000000000000
[ 1640.828197][T30038] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[ 1640.836309][T30038] R13: 00007f6cbbe26038 R14: 00007f6cbbe25fa0 R15: 00007fff265697b8
[ 1640.844403][T30038]  </TASK>
[ 1641.403774][T30051] FAULT_INJECTION: forcing a failure.
[ 1641.403774][T30051] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1641.487617][T30051] CPU: 1 PID: 30051 Comm: syz.2.7789 Not tainted syzkaller #0
[ 1641.495163][T30051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1641.505277][T30051] Call Trace:
[ 1641.508590][T30051]  <TASK>
[ 1641.511555][T30051]  dump_stack_lvl+0x18c/0x250
[ 1641.516293][T30051]  ? show_regs_print_info+0x20/0x20
[ 1641.521538][T30051]  ? load_image+0x420/0x420
[ 1641.526083][T30051]  ? __lock_acquire+0x7d80/0x7d80
[ 1641.531151][T30051]  ? mark_lock+0x94/0x320
[ 1641.535534][T30051]  should_fail_ex+0x394/0x4c0
[ 1641.540264][T30051]  prepare_alloc_pages+0x1e1/0x5b0
[ 1641.545444][T30051]  __alloc_pages+0x134/0x460
[ 1641.550089][T30051]  ? zone_statistics+0x170/0x170
[ 1641.555089][T30051]  ? do_wp_page+0x733/0x34d0
[ 1641.559809][T30051]  ? do_wp_page+0xf17/0x34d0
[ 1641.564470][T30051]  ? __lock_acquire+0x7d80/0x7d80
[ 1641.569534][T30051]  __folio_alloc+0x10/0x20
[ 1641.573987][T30051]  vma_alloc_folio+0x474/0x8f0
[ 1641.578802][T30051]  do_wp_page+0x118d/0x34d0
[ 1641.583362][T30051]  ? folio_put+0xd0/0xd0
[ 1641.587636][T30051]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1641.592710][T30051]  ? __rwlock_init+0x150/0x150
[ 1641.597535][T30051]  handle_mm_fault+0x1306/0x4a50
[ 1641.602519][T30051]  ? handle_mm_fault+0xe6/0x4a50
[ 1641.607593][T30051]  ? numa_migrate_prep+0x350/0x350
[ 1641.612774][T30051]  ? lock_mm_and_find_vma+0x9c/0x2f0
[ 1641.618110][T30051]  do_user_addr_fault+0x736/0x12d0
[ 1641.623492][T30051]  exc_page_fault+0x64/0x100
[ 1641.628151][T30051]  asm_exc_page_fault+0x26/0x30
[ 1641.633058][T30051] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1641.638912][T30051] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1641.658572][T30051] RSP: 0018:ffffc900042175b8 EFLAGS: 00050206
[ 1641.664796][T30051] RAX: ffffffff84315201 RBX: 1ffff92000842fc7 RCX: 00000000000006c0
[ 1641.672820][T30051] RDX: 0000000000000000 RSI: ffff8880454d2940 RDI: 0000200000013000
[ 1641.680837][T30051] RBP: ffffc90004217710 R08: ffff8880454d2fff R09: 1ffff11008a9a5ff
[ 1641.689123][T30051] R10: dffffc0000000000 R11: ffffed1008a9a600 R12: ffff8880454d2000
[ 1641.697150][T30051] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc90004217e48
[ 1641.705169][T30051]  ? _copy_to_iter+0x1a1/0x1110
[ 1641.710042][T30051]  _copy_to_iter+0x24f/0x1110
[ 1641.714728][T30051]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1641.720737][T30051]  ? lock_chain_count+0x20/0x20
[ 1641.725687][T30051]  ? iov_iter_init+0x1e0/0x1e0
[ 1641.730453][T30051]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1641.735846][T30051]  ? lockdep_hardirqs_on+0x98/0x150
[ 1641.741079][T30051]  ? page_copy_sane+0x16a/0x270
[ 1641.745962][T30051]  copy_page_to_iter+0xa7/0x150
[ 1641.750881][T30051]  __sk_msg_recvmsg+0x32b/0xde0
[ 1641.755817][T30051]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1641.761782][T30051]  unix_bpf_recvmsg+0x5b0/0xdd0
[ 1641.766709][T30051]  ? unix_stream_bpf_update_proto+0x310/0x310
[ 1641.772817][T30051]  ? __lock_acquire+0x1262/0x7d80
[ 1641.777962][T30051]  ? wait_woken+0x180/0x180
[ 1641.782507][T30051]  ? aa_sock_msg_perm+0x94/0x150
[ 1641.787482][T30051]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1641.792801][T30051]  ? security_socket_recvmsg+0x89/0xb0
[ 1641.798287][T30051]  ? unix_dgram_recvmsg+0x71/0xd0
[ 1641.803339][T30051]  ? unix_dgram_sendmsg+0x16e0/0x16e0
[ 1641.808835][T30051]  ____sys_recvmsg+0x2bd/0x5d0
[ 1641.813648][T30051]  ? __sys_recvmsg_sock+0x50/0x50
[ 1641.818723][T30051]  ? import_iovec+0x73/0xa0
[ 1641.823291][T30051]  ___sys_recvmsg+0x214/0x590
[ 1641.828016][T30051]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1641.833003][T30051]  ? ksys_write+0x1d2/0x260
[ 1641.837562][T30051]  ? __fget_files+0x3fc/0x460
[ 1641.842292][T30051]  __x64_sys_recvmsg+0x21e/0x2f0
[ 1641.847263][T30051]  ? ___sys_recvmsg+0x590/0x590
[ 1641.852161][T30051]  ? lockdep_hardirqs_on+0x98/0x150
[ 1641.857397][T30051]  do_syscall_64+0x55/0xb0
[ 1641.861846][T30051]  ? clear_bhb_loop+0x40/0x90
[ 1641.866556][T30051]  ? clear_bhb_loop+0x40/0x90
[ 1641.871274][T30051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1641.877210][T30051] RIP: 0033:0x7f5b6939e159
[ 1641.881654][T30051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1641.901992][T30051] RSP: 002b:00007f5b6a2ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1641.910464][T30051] RAX: ffffffffffffffda RBX: 00007f5b69625fa0 RCX: 00007f5b6939e159
[ 1641.918462][T30051] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1641.926461][T30051] RBP: 00007f5b6a2ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1641.934456][T30051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1641.942464][T30051] R13: 00007f5b69626038 R14: 00007f5b69625fa0 R15: 00007fff9c41b448
[ 1641.950600][T30051]  </TASK>
[ 1642.304877][T30066] FAULT_INJECTION: forcing a failure.
[ 1642.304877][T30066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1642.347667][T30066] CPU: 0 PID: 30066 Comm: syz.2.7802 Not tainted syzkaller #0
[ 1642.355306][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1642.365379][T30066] Call Trace:
[ 1642.368673][T30066]  <TASK>
[ 1642.371622][T30066]  dump_stack_lvl+0x18c/0x250
[ 1642.376364][T30066]  ? show_regs_print_info+0x20/0x20
[ 1642.381583][T30066]  ? load_image+0x420/0x420
[ 1642.386105][T30066]  ? __lock_acquire+0x7d80/0x7d80
[ 1642.391167][T30066]  ? snprintf+0xe9/0x140
[ 1642.395428][T30066]  should_fail_ex+0x394/0x4c0
[ 1642.400217][T30066]  _copy_to_user+0x2f/0xa0
[ 1642.404741][T30066]  simple_read_from_buffer+0xe7/0x150
[ 1642.410133][T30066]  proc_fail_nth_read+0x1e8/0x260
[ 1642.415183][T30066]  ? proc_fault_inject_write+0x360/0x360
[ 1642.420843][T30066]  ? fsnotify_perm+0x271/0x5e0
[ 1642.425642][T30066]  ? proc_fault_inject_write+0x360/0x360
[ 1642.431295][T30066]  vfs_read+0x298/0x990
[ 1642.435473][T30066]  ? kernel_read+0x1e0/0x1e0
[ 1642.440087][T30066]  ? __fget_files+0x28/0x460
[ 1642.444718][T30066]  ? __fget_files+0x3fc/0x460
[ 1642.449474][T30066]  ? __fdget_pos+0x2a3/0x330
[ 1642.454088][T30066]  ? ksys_read+0x74/0x260
[ 1642.458439][T30066]  ksys_read+0x151/0x260
[ 1642.462789][T30066]  ? vfs_write+0x9a0/0x9a0
[ 1642.467223][T30066]  ? lockdep_hardirqs_on+0x98/0x150
[ 1642.472450][T30066]  do_syscall_64+0x55/0xb0
[ 1642.476889][T30066]  ? clear_bhb_loop+0x40/0x90
[ 1642.481596][T30066]  ? clear_bhb_loop+0x40/0x90
[ 1642.486292][T30066]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1642.492200][T30066] RIP: 0033:0x7f5b6935e98e
[ 1642.496633][T30066] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1642.516257][T30066] RSP: 002b:00007f5b6a2c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1642.524806][T30066] RAX: ffffffffffffffda RBX: 00007f5b6a2ca6c0 RCX: 00007f5b6935e98e
[ 1642.532808][T30066] RDX: 000000000000000f RSI: 00007f5b6a2ca0a0 RDI: 0000000000000004
[ 1642.540800][T30066] RBP: 00007f5b6a2ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1642.548788][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1642.556773][T30066] R13: 00007f5b69626038 R14: 00007f5b69625fa0 R15: 00007fff9c41b448
[ 1642.564774][T30066]  </TASK>
[ 1642.993005][T30077] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7797'.
[ 1643.031205][T30077] veth0_vlan: entered allmulticast mode
[ 1644.424091][T30094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7801'.
[ 1644.452509][T30095] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7801'.
[ 1645.228814][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7804'.
[ 1646.296516][T30129] netlink: 'syz.3.7816': attribute type 21 has an invalid length.
[ 1646.304968][T30129] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7816'.
[ 1646.326415][T30129] netlink: 'syz.3.7816': attribute type 4 has an invalid length.
[ 1646.335698][T30129] netlink: 'syz.3.7816': attribute type 3 has an invalid length.
[ 1646.353023][T30129] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7816'.
[ 1648.809557][T30182] syzkaller0: entered promiscuous mode
[ 1648.815138][T30182] syzkaller0: entered allmulticast mode
[ 1653.059837][T30199] netlink: 'syz.1.7840': attribute type 10 has an invalid length.
[ 1653.067826][T30199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7840'.
[ 1653.085963][T30199] team0: entered promiscuous mode
[ 1653.091073][T30199] team_slave_0: entered promiscuous mode
[ 1653.097481][T30199] team_slave_1: entered promiscuous mode
[ 1653.103445][T30199] team0: entered allmulticast mode
[ 1653.109136][T30199] team_slave_0: entered allmulticast mode
[ 1653.114929][T30199] team_slave_1: entered allmulticast mode
[ 1653.122607][T30199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1653.203949][T30203] netlink: 'syz.0.7842': attribute type 8 has an invalid length.
[ 1653.216113][T30203] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7842'.
[ 1654.325520][T30206] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7844'.
[ 1654.383221][T30206] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7844'.
[ 1655.119071][T30225] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.7850'.
[ 1656.038205][T30243] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7855'.
[ 1656.113210][T30243] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7855'.
[ 1656.153633][T30240] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7855'.
[ 1656.231465][T30244] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7855'.
[ 1656.287235][T30244] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7855'.
[ 1658.422200][T30288] __nla_validate_parse: 44 callbacks suppressed
[ 1658.422341][T30288] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7869'.
[ 1658.645715][T30288] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.7869'.
[ 1658.672978][T30288] tipc: Started in network mode
[ 1658.683124][T30288] tipc: Node identity b, cluster identity 57
[ 1658.714706][T30288] tipc: Node number set to 11
[ 1661.005963][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1665.029041][T30380] syzkaller0: entered promiscuous mode
[ 1665.034872][T30380] syzkaller0: entered allmulticast mode
[ 1665.740303][T30395] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.7900'.
[ 1665.750346][T30395] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1667.483725][T30390] netlink: 'syz.0.7898': attribute type 10 has an invalid length.
[ 1668.054827][T30406] FAULT_INJECTION: forcing a failure.
[ 1668.054827][T30406] name failslab, interval 1, probability 0, space 0, times 0
[ 1668.067716][T30406] CPU: 0 PID: 30406 Comm: syz.0.7904 Not tainted syzkaller #0
[ 1668.075403][T30406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1668.085597][T30406] Call Trace:
[ 1668.088909][T30406]  <TASK>
[ 1668.091979][T30406]  dump_stack_lvl+0x18c/0x250
[ 1668.096710][T30406]  ? __lock_acquire+0x7d80/0x7d80
[ 1668.101778][T30406]  ? show_regs_print_info+0x20/0x20
[ 1668.107018][T30406]  ? load_image+0x420/0x420
[ 1668.111554][T30406]  ? read_tsc+0x9/0x20
[ 1668.115673][T30406]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1668.121887][T30406]  should_fail_ex+0x394/0x4c0
[ 1668.126626][T30406]  should_failslab+0x9/0x20
[ 1668.131176][T30406]  slab_pre_alloc_hook+0x59/0x300
[ 1668.136253][T30406]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1668.141511][T30406]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1668.147034][T30406]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1668.152632][T30406]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1668.158271][T30406]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1668.164647][T30406]  ? _copy_from_user+0xa5/0xe0
[ 1668.169453][T30406]  ? bpf_test_init+0x119/0x140
[ 1668.174342][T30406]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1668.179849][T30406]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1668.185270][T30406]  ? __lock_acquire+0x7d80/0x7d80
[ 1668.190360][T30406]  ? dev_put+0x80/0x80
[ 1668.194487][T30406]  ? dev_put+0x80/0x80
[ 1668.198599][T30406]  bpf_prog_test_run+0x31f/0x390
[ 1668.203580][T30406]  __sys_bpf+0x49d/0x890
[ 1668.207864][T30406]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1668.213312][T30406]  ? lock_chain_count+0x20/0x20
[ 1668.218221][T30406]  __x64_sys_bpf+0x7c/0x90
[ 1668.222683][T30406]  do_syscall_64+0x55/0xb0
[ 1668.227147][T30406]  ? clear_bhb_loop+0x40/0x90
[ 1668.231868][T30406]  ? clear_bhb_loop+0x40/0x90
[ 1668.236598][T30406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1668.242533][T30406] RIP: 0033:0x7f570719e159
[ 1668.246998][T30406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1668.266664][T30406] RSP: 002b:00007f57080cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1668.275136][T30406] RAX: ffffffffffffffda RBX: 00007f5707425fa0 RCX: 00007f570719e159
[ 1668.283149][T30406] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1668.291157][T30406] RBP: 00007f57080cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1668.299168][T30406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1668.307173][T30406] R13: 00007f5707426038 R14: 00007f5707425fa0 R15: 00007ffcb0b42918
[ 1668.315206][T30406]  </TASK>
[ 1669.170770][T30429] netlink: 'syz.0.7912': attribute type 1 has an invalid length.
[ 1669.176029][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.187267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.199283][T30429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7912'.
[ 1670.070312][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1672.336517][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1674.880610][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1676.389162][T30459] delete_channel: no stack
[ 1676.618905][T30470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.906231][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1678.756148][T30495] Ÿë
: port 2(veth0_to_team) entered blocking state
[ 1678.762934][T30495] Ÿë
: port 2(veth0_to_team) entered disabled state
[ 1678.779590][T30495] veth0_to_team: entered allmulticast mode
[ 1678.788259][T30495] veth0_to_team: entered promiscuous mode
[ 1678.985985][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1681.067343][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1683.146192][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1683.857664][T30546] netlink: 'syz.1.7952': attribute type 4 has an invalid length.
[ 1683.865483][T30546] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7952'.
[ 1683.924213][T30546] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1685.226319][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1685.540669][T30568] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7958'.
[ 1686.627259][T30586] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7965'.
[ 1686.893589][T30597] syzkaller0: entered promiscuous mode
[ 1686.901062][T30597] syzkaller0: entered allmulticast mode
[ 1686.984800][T30599] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7969'.
[ 1687.306008][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1689.476073][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1690.524424][T30691] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8000'.
[ 1690.619644][T30692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7998'.
[ 1691.414735][T30707] netlink: 'syz.3.8005': attribute type 21 has an invalid length.
[ 1691.434049][T30707] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8005'.
[ 1691.547916][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1691.588682][T30712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8007'.
[ 1691.598463][T30712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8007'.
[ 1692.175846][T30727] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.8012'.
[ 1692.594442][T30738] netlink: 'syz.1.8017': attribute type 10 has an invalid length.
[ 1692.831624][T30738] wg1: entered promiscuous mode
[ 1692.868246][T30738] wg1: entered allmulticast mode
[ 1692.873736][T30738] team0: Device wg1 is of different type
[ 1693.655928][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1693.870068][T30766] netlink: 'syz.0.8025': attribute type 1 has an invalid length.
[ 1693.891800][T30766] netlink: 'syz.0.8025': attribute type 2 has an invalid length.
[ 1693.910270][T30766] netlink: 'syz.0.8025': attribute type 2 has an invalid length.
[ 1693.926019][T30766] netlink: 'syz.0.8025': attribute type 3 has an invalid length.
[ 1693.946880][T30766] netlink: 'syz.0.8025': attribute type 4 has an invalid length.
[ 1693.969558][T30766] netlink: 'syz.0.8025': attribute type 5 has an invalid length.
[ 1693.996211][T30766] netlink: 'syz.0.8025': attribute type 6 has an invalid length.
[ 1694.060946][T30766] netlink: 'syz.0.8025': attribute type 7 has an invalid length.
[ 1694.153467][T30766] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.8025'.
[ 1694.326582][T30778] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.8034'.
[ 1694.339476][T30778] netlink: zone id is out of range
[ 1694.345319][T30778] netlink: zone id is out of range
[ 1694.351625][T30778] netlink: zone id is out of range
[ 1694.360340][T30778] netlink: zone id is out of range
[ 1694.365786][T30778] netlink: zone id is out of range
[ 1694.371608][T30778] netlink: zone id is out of range
[ 1694.381973][T30778] netlink: zone id is out of range
[ 1694.401362][T30778] netlink: zone id is out of range
[ 1694.415348][T30778] netlink: zone id is out of range
[ 1694.431757][T30778] netlink: zone id is out of range
[ 1695.710072][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1697.792119][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1698.993473][T30849] validate_nla: 8 callbacks suppressed
[ 1698.993494][T30849] netlink: 'syz.2.8061': attribute type 10 has an invalid length.
[ 1699.893672][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1700.153103][T30865] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8066'.
[ 1701.648534][T30882] FAULT_INJECTION: forcing a failure.
[ 1701.648534][T30882] name failslab, interval 1, probability 0, space 0, times 0
[ 1701.661383][T30882] CPU: 1 PID: 30882 Comm: syz.2.8071 Not tainted syzkaller #0
[ 1701.668887][T30882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1701.679335][T30882] Call Trace:
[ 1701.682659][T30882]  <TASK>
[ 1701.685625][T30882]  dump_stack_lvl+0x18c/0x250
[ 1701.690356][T30882]  ? __lock_acquire+0x7d80/0x7d80
[ 1701.695517][T30882]  ? show_regs_print_info+0x20/0x20
[ 1701.700771][T30882]  ? load_image+0x420/0x420
[ 1701.705310][T30882]  ? read_tsc+0x9/0x20
[ 1701.709442][T30882]  should_fail_ex+0x394/0x4c0
[ 1701.714171][T30882]  should_failslab+0x9/0x20
[ 1701.718739][T30882]  slab_pre_alloc_hook+0x59/0x300
[ 1701.723842][T30882]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1701.729113][T30882]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1701.734737][T30882]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1701.740346][T30882]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1701.746073][T30882]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1701.752367][T30882]  ? _copy_from_user+0xa5/0xe0
[ 1701.757172][T30882]  ? bpf_test_init+0x119/0x140
[ 1701.761973][T30882]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1701.767477][T30882]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1701.772891][T30882]  ? __lock_acquire+0x7d80/0x7d80
[ 1701.778174][T30882]  ? dev_put+0x80/0x80
[ 1701.782309][T30882]  ? dev_put+0x80/0x80
[ 1701.786466][T30882]  bpf_prog_test_run+0x31f/0x390
[ 1701.791454][T30882]  __sys_bpf+0x49d/0x890
[ 1701.795734][T30882]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1701.801259][T30882]  ? lock_chain_count+0x20/0x20
[ 1701.806161][T30882]  __x64_sys_bpf+0x7c/0x90
[ 1701.810617][T30882]  do_syscall_64+0x55/0xb0
[ 1701.815067][T30882]  ? clear_bhb_loop+0x40/0x90
[ 1701.819772][T30882]  ? clear_bhb_loop+0x40/0x90
[ 1701.824491][T30882]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1701.830425][T30882] RIP: 0033:0x7f5b6939e159
[ 1701.834887][T30882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1701.854545][T30882] RSP: 002b:00007f5b6a2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1701.863085][T30882] RAX: ffffffffffffffda RBX: 00007f5b69625fa0 RCX: 00007f5b6939e159
[ 1701.871266][T30882] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1701.879273][T30882] RBP: 00007f5b6a2ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1701.887287][T30882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1701.895298][T30882] R13: 00007f5b69626038 R14: 00007f5b69625fa0 R15: 00007fff9c41b448
[ 1701.903329][T30882]  </TASK>
[ 1701.967222][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1702.194828][T30892] netlink: 'syz.0.8076': attribute type 10 has an invalid length.
[ 1702.205026][T30892] team0: Device macvlan0 is up. Set it down before adding it as a team port
[ 1702.345749][T30898] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 1703.640702][T30921] netlink: 'syz.3.8087': attribute type 10 has an invalid length.
[ 1703.658055][T30921] team0: Device macvlan0 is up. Set it down before adding it as a team port
[ 1704.028191][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1705.622526][T30955] netlink: 'syz.2.8098': attribute type 10 has an invalid length.
[ 1706.107370][T18276] Bluetooth: hci2: command 0x0406 tx timeout
[ 1706.170642][T30965] netlink: 'syz.2.8103': attribute type 9 has an invalid length.
[ 1706.179546][T30965] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8103'.
[ 1707.090038][T30997] netlink: 'syz.0.8116': attribute type 10 has an invalid length.
[ 1707.125999][T30997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8116'.
[ 1707.135407][T30997] ipvlan1: entered promiscuous mode
[ 1707.185920][T30997] ipvlan1: entered allmulticast mode
[ 1707.191293][T30997] veth0_vlan: entered allmulticast mode
[ 1707.267986][T30997] bridge0: port 4(ipvlan1) entered blocking state
[ 1707.274690][T30997] bridge0: port 4(ipvlan1) entered disabled state
[ 1707.338435][T30997] net_ratelimit: 80 callbacks suppressed
[ 1707.338456][T30997] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1707.576382][T23958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1707.601557][T23958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1707.616478][T23958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1707.625048][T23958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1707.638005][T23958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1707.649116][T23958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1707.724504][T31004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1708.187535][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1708.208545][T31001] chnl_net:caif_netlink_parms(): no params data found
[ 1708.243782][T31016] FAULT_INJECTION: forcing a failure.
[ 1708.243782][T31016] name failslab, interval 1, probability 0, space 0, times 0
[ 1708.257008][T31016] CPU: 0 PID: 31016 Comm: syz.0.8129 Not tainted syzkaller #0
[ 1708.264522][T31016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1708.274628][T31016] Call Trace:
[ 1708.277942][T31016]  <TASK>
[ 1708.280902][T31016]  dump_stack_lvl+0x18c/0x250
[ 1708.285620][T31016]  ? show_regs_print_info+0x20/0x20
[ 1708.290870][T31016]  ? load_image+0x420/0x420
[ 1708.295490][T31016]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1708.300890][T31016]  ? lockdep_hardirqs_on+0x98/0x150
[ 1708.306140][T31016]  should_fail_ex+0x394/0x4c0
[ 1708.310869][T31016]  should_failslab+0x9/0x20
[ 1708.315414][T31016]  slab_pre_alloc_hook+0x59/0x300
[ 1708.320754][T31016]  ? tipc_conn_lookup+0x1e6/0x270
[ 1708.325851][T31016]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1708.331264][T31016]  __kmem_cache_alloc_node+0x53/0x250
[ 1708.336698][T31016]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1708.342112][T31016]  kmalloc_trace+0x2a/0xe0
[ 1708.346578][T31016]  tipc_topsrv_queue_evt+0xeb/0x2a0
[ 1708.351998][T31016]  tipc_sub_report_overlap+0x4b8/0x8a0
[ 1708.357696][T31016]  tipc_nametbl_insert_publ+0xe40/0x1380
[ 1708.363491][T31016]  tipc_nametbl_publish+0xbd/0x1f0
[ 1708.368646][T31016]  tipc_sk_publish+0x1cc/0x430
[ 1708.373461][T31016]  ? __lock_acquire+0x7d80/0x7d80
[ 1708.378617][T31016]  ? tipc_sk_withdraw+0x640/0x640
[ 1708.383683][T31016]  ? tipc_nametbl_build_group+0x2e/0x4c0
[ 1708.389440][T31016]  ? tipc_nametbl_build_group+0x482/0x4c0
[ 1708.395208][T31016]  ? tipc_nametbl_build_group+0x2e/0x4c0
[ 1708.400938][T31016]  tipc_sk_join+0x3b0/0x6a0
[ 1708.405520][T31016]  ? __tipc_sendstream+0x1290/0x1290
[ 1708.410891][T31016]  tipc_setsockopt+0x73f/0x990
[ 1708.415715][T31016]  ? tipc_shutdown+0x4d0/0x4d0
[ 1708.420516][T31016]  ? __fget_files+0x28/0x460
[ 1708.425211][T31016]  ? aa_sock_opt_perm+0x74/0x100
[ 1708.430208][T31016]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1708.435805][T31016]  ? security_socket_setsockopt+0x7e/0xa0
[ 1708.441566][T31016]  ? tipc_shutdown+0x4d0/0x4d0
[ 1708.446375][T31016]  do_sock_setsockopt+0x175/0x1a0
[ 1708.451568][T31016]  ? __fdget+0x180/0x210
[ 1708.455870][T31016]  __x64_sys_setsockopt+0x182/0x200
[ 1708.461116][T31016]  do_syscall_64+0x55/0xb0
[ 1708.465570][T31016]  ? clear_bhb_loop+0x40/0x90
[ 1708.470280][T31016]  ? clear_bhb_loop+0x40/0x90
[ 1708.474996][T31016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1708.480926][T31016] RIP: 0033:0x7f570719e159
[ 1708.485372][T31016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1708.505096][T31016] RSP: 002b:00007f57080cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1708.513551][T31016] RAX: ffffffffffffffda RBX: 00007f5707425fa0 RCX: 00007f570719e159
[ 1708.521721][T31016] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008
[ 1708.529731][T31016] RBP: 00007f57080cd090 R08: 0000000000000043 R09: 0000000000000000
[ 1708.537740][T31016] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000002
[ 1708.545746][T31016] R13: 00007f5707426038 R14: 00007f5707425fa0 R15: 00007ffcb0b42918
[ 1708.553862][T31016]  </TASK>
[ 1708.713148][T31001] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1708.736406][T31001] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1708.743805][T31001] bridge_slave_0: entered allmulticast mode
[ 1708.769362][T31001] bridge_slave_0: entered promiscuous mode
[ 1708.777731][T31001] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1708.785001][T31001] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1708.795140][T31001] bridge_slave_1: entered allmulticast mode
[ 1708.816397][T31001] bridge_slave_1: entered promiscuous mode
[ 1708.907885][T31001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1708.929937][T31001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1709.040453][T31001] team0: Port device team_slave_0 added
[ 1709.063701][T31001] team0: Port device team_slave_1 added
[ 1709.164485][T31001] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1709.181579][T31001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1709.208368][T31001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1709.268492][T31001] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1709.271969][T31036] netlink: 'syz.0.8127': attribute type 1 has an invalid length.
[ 1709.275522][T31001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1709.275554][T31001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1709.325479][T31001] hsr_slave_0: entered promiscuous mode
[ 1709.331654][T31036] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8127'.
[ 1709.377436][T31001] hsr_slave_1: entered promiscuous mode
[ 1709.402032][T31001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1709.415947][T31001] Cannot create hsr debugfs directory
[ 1709.459310][T31043] sock: sock_set_timeout: `syz.3.8132' (pid 31043) tries to set negative timeout
[ 1709.494371][T29033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1709.535413][T31043] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8132'.
[ 1709.551910][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8131'.
[ 1709.707039][T23958] Bluetooth: hci3: command tx timeout
[ 1709.733630][T29033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1709.962719][T29033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.210628][T29033] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1710.243913][T31061] netlink: 'syz.0.8137': attribute type 13 has an invalid length.
[ 1710.283938][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1710.794600][T29033] tipc: Left network mode
[ 1711.657295][T31099] netlink: 2751 bytes leftover after parsing attributes in process `syz.3.8147'.
[ 1711.786606][T23958] Bluetooth: hci3: command tx timeout
[ 1711.989695][T31111] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.8152'.
[ 1712.083030][T31001] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1712.111916][T31001] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1712.208675][T29033] gretap0 (unregistering): left allmulticast mode
[ 1712.220244][T29033] gretap0 (unregistering): left promiscuous mode
[ 1712.237273][T29033] Ÿë
: port 2(gretap0) entered disabled state
[ 1712.263825][T31001] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1712.287373][T31001] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1712.356143][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1712.634514][T31001] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1712.878923][T31001] 8021q: adding VLAN 0 to HW filter on device team0
[ 1713.106601][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1713.113860][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1713.297774][ T2899] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1713.305143][ T2899] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1713.866525][T23958] Bluetooth: hci3: command tx timeout
[ 1713.882146][T31001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1714.270723][T31172] netlink: 'syz.1.8167': attribute type 10 has an invalid length.
[ 1714.302818][T31172] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1714.382782][T29033] veth0_to_team: left allmulticast mode
[ 1714.415783][T29033] veth0_to_team: left promiscuous mode
[ 1714.422191][T29033] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1714.439842][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1714.472192][T29033] hsr_slave_0: left promiscuous mode
[ 1714.497847][T29033] hsr_slave_1: left promiscuous mode
[ 1714.580037][T29033] veth1_vlan: left allmulticast mode
[ 1714.585590][T29033] veth1_vlan: left promiscuous mode
[ 1715.946141][T23958] Bluetooth: hci3: command tx timeout
[ 1716.506470][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1718.021755][T29033] geneve1 (unregistering): left promiscuous mode
[ 1718.087557][T29033] geneve1 (unregistering): left allmulticast mode
[ 1718.178866][T29033] team0 (unregistering): Port device geneve1 removed
[ 1718.464982][T29033] macvlan0 (unregistering): left promiscuous mode
[ 1718.481369][T29033] macvlan0 (unregistering): left allmulticast mode
[ 1718.494251][T29033] team0 (unregistering): Port device macvlan0 removed
[ 1718.588355][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1719.420814][T29033] team_slave_1 (unregistering): left promiscuous mode
[ 1719.441335][T29033] team_slave_1 (unregistering): left allmulticast mode
[ 1719.451122][T29033] team0 (unregistering): Port device team_slave_1 removed
[ 1719.543514][T29033] C (unregistering): left promiscuous mode
[ 1719.553696][T29033] C (unregistering): left allmulticast mode
[ 1719.563750][T29033] team0 (unregistering): Port device C removed
[ 1719.654147][T29033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1719.670977][T29033] bond_slave_1 (unregistering): left promiscuous mode
[ 1719.678593][T29033] bond_slave_1 (unregistering): left allmulticast mode
[ 1719.763894][T29033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1719.781607][T29033] bond_slave_0 (unregistering): left promiscuous mode
[ 1719.792428][T29033] bond_slave_0 (unregistering): left allmulticast mode
[ 1720.373341][T29033] bond0 (unregistering): left promiscuous mode
[ 1720.380884][T29033] bond0 (unregistering): left allmulticast mode
[ 1720.389005][T29033] team0 (unregistering): Port device bond0 removed
[ 1720.425398][T29033] bond0 (unregistering): Released all slaves
[ 1720.493787][T31001] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1720.657110][T31001] veth0_vlan: entered promiscuous mode
[ 1720.682061][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1720.795239][T31001] veth1_vlan: entered promiscuous mode
[ 1721.130552][T31001] veth0_macvtap: entered promiscuous mode
[ 1721.311733][T31001] veth1_macvtap: entered promiscuous mode
[ 1721.576297][T31001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1721.619615][T31001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1721.658322][T31001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1721.696213][T31001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1721.742977][T31001] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1721.798881][T31001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1721.819715][T31001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1721.832783][T31001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1721.892556][T31001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1721.919012][T31001] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1722.008471][T31001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1722.031663][T31001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1722.052598][T31001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1722.075283][T31001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1722.471238][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1722.506182][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1722.664110][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1722.673009][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1722.754581][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1724.828122][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1726.508054][T31224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8180'.
[ 1726.908670][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1728.988765][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1730.590824][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.598265][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.095913][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1732.618214][T31286] netlink: 'syz.2.8197': attribute type 29 has an invalid length.
[ 1732.690147][T31286] netlink: 'syz.2.8197': attribute type 29 has an invalid length.
[ 1733.147665][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1733.625473][T31307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8207'.
[ 1734.340158][T31325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8213'.
[ 1734.357062][T31326] netlink: 'syz.0.8214': attribute type 10 has an invalid length.
[ 1734.406396][T31325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8213'.
[ 1734.504692][T31322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8213'.
[ 1734.535746][T31323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8213'.
[ 1734.869502][T31340] netlink: 'syz.2.8217': attribute type 10 has an invalid length.
[ 1734.896060][T31340] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8217'.
[ 1735.226200][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1735.392097][T31348] syzkaller0: entered promiscuous mode
[ 1735.416187][T31348] syzkaller0: entered allmulticast mode
[ 1737.312145][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1738.321409][T31371] netlink: 'syz.2.8229': attribute type 10 has an invalid length.
[ 1738.341330][T31371] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1738.369334][T31371] bridge0: port 3(netdevsim0) entered blocking state
[ 1738.397482][T31371] bridge0: port 3(netdevsim0) entered disabled state
[ 1738.405365][T31371] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1738.658998][T31379] Ÿë
: port 1(gretap0) entered blocking state
[ 1738.669039][T31379] Ÿë
: port 1(gretap0) entered disabled state
[ 1738.675791][T31379] gretap0: entered allmulticast mode
[ 1738.684975][T31379] gretap0: entered promiscuous mode
[ 1739.395966][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1739.503559][T31393] netlink: 'syz.3.8236': attribute type 4 has an invalid length.
[ 1739.538774][T31393] netlink: 'syz.3.8236': attribute type 7 has an invalid length.
[ 1740.457584][T31406] netlink: 'syz.1.8240': attribute type 21 has an invalid length.
[ 1741.057394][T31422] FAULT_INJECTION: forcing a failure.
[ 1741.057394][T31422] name failslab, interval 1, probability 0, space 0, times 0
[ 1741.070165][T31422] CPU: 1 PID: 31422 Comm: syz.1.8247 Not tainted syzkaller #0
[ 1741.077682][T31422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1741.087780][T31422] Call Trace:
[ 1741.091112][T31422]  <TASK>
[ 1741.094515][T31422]  dump_stack_lvl+0x18c/0x250
[ 1741.099255][T31422]  ? show_regs_print_info+0x20/0x20
[ 1741.104680][T31422]  ? load_image+0x420/0x420
[ 1741.109259][T31422]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1741.115651][T31422]  should_fail_ex+0x394/0x4c0
[ 1741.120376][T31422]  should_failslab+0x9/0x20
[ 1741.125170][T31422]  slab_pre_alloc_hook+0x59/0x300
[ 1741.130235][T31422]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1741.135475][T31422]  ? page_pool_alloc_pages+0xba/0x160
[ 1741.140879][T31422]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1741.146383][T31422]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1741.151952][T31422]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1741.157541][T31422]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1741.163806][T31422]  ? _copy_from_user+0xa5/0xe0
[ 1741.168585][T31422]  ? bpf_test_init+0x119/0x140
[ 1741.173378][T31422]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1741.178855][T31422]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1741.184246][T31422]  ? __lock_acquire+0x7d80/0x7d80
[ 1741.189383][T31422]  ? dev_put+0x80/0x80
[ 1741.193478][T31422]  ? dev_put+0x80/0x80
[ 1741.197570][T31422]  bpf_prog_test_run+0x31f/0x390
[ 1741.202527][T31422]  __sys_bpf+0x49d/0x890
[ 1741.206789][T31422]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1741.212192][T31422]  ? lock_chain_count+0x20/0x20
[ 1741.217066][T31422]  __x64_sys_bpf+0x7c/0x90
[ 1741.221495][T31422]  do_syscall_64+0x55/0xb0
[ 1741.225939][T31422]  ? clear_bhb_loop+0x40/0x90
[ 1741.230643][T31422]  ? clear_bhb_loop+0x40/0x90
[ 1741.235334][T31422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1741.241252][T31422] RIP: 0033:0x7efe1fb9e159
[ 1741.245679][T31422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1741.265303][T31422] RSP: 002b:00007efe20b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1741.273733][T31422] RAX: ffffffffffffffda RBX: 00007efe1fe25fa0 RCX: 00007efe1fb9e159
[ 1741.281717][T31422] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1741.289820][T31422] RBP: 00007efe20b2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1741.297915][T31422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1741.305910][T31422] R13: 00007efe1fe26038 R14: 00007efe1fe25fa0 R15: 00007ffd0c395828
[ 1741.313919][T31422]  </TASK>
[ 1741.465999][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1743.560810][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1743.661924][T31452] syzkaller0: entered promiscuous mode
[ 1743.676525][T31452] syzkaller0: entered allmulticast mode
[ 1745.626487][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1747.545387][T31473] netlink: 'syz.0.8265': attribute type 10 has an invalid length.
[ 1747.584816][T31473] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8265'.
[ 1747.710957][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1749.497318][T31496] netlink: 'syz.0.8271': attribute type 39 has an invalid length.
[ 1749.786989][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1750.480538][T31503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8275'.
[ 1750.509681][T31503] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8275'.
[ 1750.556793][T31503] netlink: 'syz.3.8275': attribute type 10 has an invalid length.
[ 1750.596677][T31503] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.604202][T31503] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1750.684724][T31503] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1750.692276][T31503] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1750.700872][T31503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1750.708249][T31503] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1751.083653][T31503] bridge0: entered promiscuous mode
[ 1751.089551][T31503] bridge0: entered allmulticast mode
[ 1751.096197][T31503] team0: Port device bridge0 added
[ 1751.866497][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1752.864678][T31521] netlink: 'syz.3.8282': attribute type 6 has an invalid length.
[ 1752.914538][T31521] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8282'.
[ 1753.073786][T31523] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8282'.
[ 1753.155945][T31523] netlink: 'syz.3.8282': attribute type 2 has an invalid length.
[ 1753.753241][T31540] netlink: 'syz.2.8285': attribute type 39 has an invalid length.
[ 1753.890411][T31548] netlink: 'syz.0.8290': attribute type 12 has an invalid length.
[ 1753.905617][T31548] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.8290'.
[ 1753.924477][T31550] netlink: 'syz.3.8291': attribute type 5 has an invalid length.
[ 1753.966030][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1754.676876][T31554] netlink: 'syz.3.8292': attribute type 10 has an invalid length.
[ 1754.685151][T31554] bridge0: left promiscuous mode
[ 1754.716606][T31554] bridge0: left allmulticast mode
[ 1754.760367][T31554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1754.768714][T31554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1755.137453][T31554] team0: Port device bridge0 removed
[ 1755.259125][T31554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1755.266456][T31554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1755.274178][T31554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1755.281480][T31554] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1755.315054][T31554] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1756.026069][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1758.038906][T31580] netlink: 'syz.2.8299': attribute type 9 has an invalid length.
[ 1758.149482][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1758.271047][T31580] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8299'.
[ 1758.654878][T31586] netlink: 'syz.0.8302': attribute type 2 has an invalid length.
[ 1758.669948][T31586] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.8302'.
[ 1758.737429][T31589] FAULT_INJECTION: forcing a failure.
[ 1758.737429][T31589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1758.773592][T31589] CPU: 1 PID: 31589 Comm: syz.3.8301 Not tainted syzkaller #0
[ 1758.781132][T31589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1758.791319][T31589] Call Trace:
[ 1758.794633][T31589]  <TASK>
[ 1758.797596][T31589]  dump_stack_lvl+0x18c/0x250
[ 1758.802334][T31589]  ? show_regs_print_info+0x20/0x20
[ 1758.807575][T31589]  ? load_image+0x420/0x420
[ 1758.812132][T31589]  ? __might_fault+0xaa/0x120
[ 1758.816857][T31589]  ? __lock_acquire+0x7d80/0x7d80
[ 1758.821979][T31589]  ? __virt_addr_valid+0x10c/0x380
[ 1758.827263][T31589]  should_fail_ex+0x394/0x4c0
[ 1758.831994][T31589]  _copy_from_user+0x2f/0xe0
[ 1758.836625][T31589]  generic_map_update_batch+0x58c/0x800
[ 1758.842262][T31589]  ? rcu_read_unlock+0xa0/0xa0
[ 1758.847091][T31589]  ? __fdget+0x180/0x210
[ 1758.851392][T31589]  ? rcu_read_unlock+0xa0/0xa0
[ 1758.856217][T31589]  bpf_map_do_batch+0x3f2/0x600
[ 1758.861167][T31589]  ? bpf_lsm_key_permission+0x10/0x10
[ 1758.866602][T31589]  __sys_bpf+0x381/0x890
[ 1758.870899][T31589]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1758.876342][T31589]  ? lock_chain_count+0x20/0x20
[ 1758.881255][T31589]  __x64_sys_bpf+0x7c/0x90
[ 1758.885715][T31589]  do_syscall_64+0x55/0xb0
[ 1758.890173][T31589]  ? clear_bhb_loop+0x40/0x90
[ 1758.894912][T31589]  ? clear_bhb_loop+0x40/0x90
[ 1758.899635][T31589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1758.905574][T31589] RIP: 0033:0x7f6cbbb9e159
[ 1758.910127][T31589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1758.929779][T31589] RSP: 002b:00007f6cbc981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1758.938223][T31589] RAX: ffffffffffffffda RBX: 00007f6cbbe25fa0 RCX: 00007f6cbbb9e159
[ 1758.946228][T31589] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1758.954220][T31589] RBP: 00007f6cbc981090 R08: 0000000000000000 R09: 0000000000000000
[ 1758.962309][T31589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1758.970297][T31589] R13: 00007f6cbbe26038 R14: 00007f6cbbe25fa0 R15: 00007fff265697b8
[ 1758.978324][T31589]  </TASK>
[ 1759.264020][T31597] netlink: set zone limit has 8 unknown bytes
[ 1759.792772][T31605] netlink: 'syz.0.8307': attribute type 10 has an invalid length.
[ 1759.819659][T31605] hsr0: left allmulticast mode
[ 1759.825550][T31605] hsr_slave_0: left allmulticast mode
[ 1759.858355][T31605] hsr_slave_1: left allmulticast mode
[ 1759.903822][T31605] bridge0: port 3(hsr0) entered disabled state
[ 1760.114735][T31605] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1760.146925][T31607] netlink: 'syz.3.8308': attribute type 10 has an invalid length.
[ 1760.166035][T31607] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1760.186098][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1760.253679][T31611] netlink: 'syz.1.8306': attribute type 39 has an invalid length.
[ 1760.272965][T31614] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.8309'.
[ 1761.171190][T31629] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8312'.
[ 1761.575738][T31640] netlink: 'syz.3.8317': attribute type 10 has an invalid length.
[ 1761.612396][T31641] FAULT_INJECTION: forcing a failure.
[ 1761.612396][T31641] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1761.665775][T31641] CPU: 0 PID: 31641 Comm: syz.1.8318 Not tainted syzkaller #0
[ 1761.673428][T31641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1761.683533][T31641] Call Trace:
[ 1761.686859][T31641]  <TASK>
[ 1761.689832][T31641]  dump_stack_lvl+0x18c/0x250
[ 1761.694570][T31641]  ? show_regs_print_info+0x20/0x20
[ 1761.699816][T31641]  ? load_image+0x420/0x420
[ 1761.704366][T31641]  ? __might_fault+0xaa/0x120
[ 1761.709092][T31641]  ? __lock_acquire+0x7d80/0x7d80
[ 1761.714180][T31641]  should_fail_ex+0x394/0x4c0
[ 1761.718917][T31641]  _copy_from_user+0x2f/0xe0
[ 1761.723553][T31641]  ___sys_sendmsg+0x1c7/0x360
[ 1761.728315][T31641]  ? get_pid_task+0x20/0x1e0
[ 1761.732963][T31641]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1761.737799][T31641]  ? __lock_acquire+0x7d80/0x7d80
[ 1761.742902][T31641]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1761.747804][T31641]  ? __x64_sys_sendmsg+0x80/0x80
[ 1761.752805][T31641]  ? lockdep_hardirqs_on+0x98/0x150
[ 1761.758057][T31641]  do_syscall_64+0x55/0xb0
[ 1761.762510][T31641]  ? clear_bhb_loop+0x40/0x90
[ 1761.767314][T31641]  ? clear_bhb_loop+0x40/0x90
[ 1761.772035][T31641]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1761.778146][T31641] RIP: 0033:0x7efe1fb9e159
[ 1761.782609][T31641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1761.802265][T31641] RSP: 002b:00007efe20b2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1761.810747][T31641] RAX: ffffffffffffffda RBX: 00007efe1fe25fa0 RCX: 00007efe1fb9e159
[ 1761.818773][T31641] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[ 1761.826780][T31641] RBP: 00007efe20b2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1761.834778][T31641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1761.842777][T31641] R13: 00007efe1fe26038 R14: 00007efe1fe25fa0 R15: 00007ffd0c395828
[ 1761.850796][T31641]  </TASK>
[ 1761.885641][T31640] team_slave_0: left promiscuous mode
[ 1761.916340][T31640] team_slave_0: left allmulticast mode
[ 1761.967646][T31640] team0 (unregistering): Port device team_slave_0 removed
[ 1761.975103][T31640] team_slave_1: left promiscuous mode
[ 1762.037573][T31640] team_slave_1: left allmulticast mode
[ 1762.059035][T31640] team0 (unregistering): Port device team_slave_1 removed
[ 1762.079852][T31640] geneve1: left promiscuous mode
[ 1762.085286][T31640] geneve1: left allmulticast mode
[ 1762.104610][T31640] team0 (unregistering): Port device geneve1 removed
[ 1762.214698][T31650] netlink: set zone limit has 8 unknown bytes
[ 1762.240924][T31642] netlink: 'syz.3.8317': attribute type 10 has an invalid length.
[ 1762.267316][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1762.276043][T31643] netlink: 'syz.3.8317': attribute type 7 has an invalid length.
[ 1762.286584][T31643] netlink: 'syz.3.8317': attribute type 6 has an invalid length.
[ 1762.298067][T31649] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.8319'.
[ 1762.776903][T31681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8324'.
[ 1762.846472][T31681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8324'.
[ 1762.886163][T31678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8324'.
[ 1763.002443][T31680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8324'.
[ 1763.073238][T31684] netlink: 'syz.2.8325': attribute type 10 has an invalid length.
[ 1763.102683][T31684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8325'.
[ 1763.149606][T31684] team0: entered promiscuous mode
[ 1763.172650][T31684] team_slave_0: entered promiscuous mode
[ 1763.199031][T31684] team_slave_1: entered promiscuous mode
[ 1763.218821][T31684] team0: entered allmulticast mode
[ 1763.231746][T31684] team_slave_0: entered allmulticast mode
[ 1763.259550][T31684] team_slave_1: entered allmulticast mode
[ 1763.300912][T31684] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1764.350444][T23958] Bluetooth: hci2: command 0x0406 tx timeout
[ 1764.991102][T31728] netlink: set zone limit has 8 unknown bytes
[ 1765.648343][T31731] netlink: set zone limit has 8 unknown bytes
[ 1766.685169][T31748] netlink: 'syz.1.8338': attribute type 21 has an invalid length.
[ 1766.726125][T31748] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8338'.
[ 1766.735683][T31750] netlink: 'syz.0.8341': attribute type 21 has an invalid length.
[ 1766.751895][T31750] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8341'.
[ 1767.743993][T31765] netlink: 'syz.0.8347': attribute type 10 has an invalid length.
[ 1768.336696][T31776] sit0: entered allmulticast mode
[ 1769.262629][T31791] wg2: entered promiscuous mode
[ 1769.326010][T31791] wg2: entered allmulticast mode
[ 1769.526464][T31800] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8358'.
[ 1769.652378][T31803] netlink: 'syz.3.8360': attribute type 29 has an invalid length.
[ 1769.684303][T31803] netlink: 'syz.3.8360': attribute type 3 has an invalid length.
[ 1769.696367][T31803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8360'.
[ 1770.302293][T31814] netlink: 'syz.3.8363': attribute type 1 has an invalid length.
[ 1770.314999][T31814] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.8363'.
[ 1770.782906][T31830] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.8369'.
[ 1770.808870][T31830] openvswitch: netlink: Message has 20476 unknown bytes.
[ 1773.492377][T31822] FAULT_INJECTION: forcing a failure.
[ 1773.492377][T31822] name failslab, interval 1, probability 0, space 0, times 0
[ 1773.505215][T31822] CPU: 1 PID: 31822 Comm: syz.2.8368 Not tainted syzkaller #0
[ 1773.512711][T31822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1773.522771][T31822] Call Trace:
[ 1773.526081][T31822]  <TASK>
[ 1773.529062][T31822]  dump_stack_lvl+0x18c/0x250
[ 1773.533822][T31822]  ? __lock_acquire+0x7d80/0x7d80
[ 1773.538904][T31822]  ? show_regs_print_info+0x20/0x20
[ 1773.544133][T31822]  ? load_image+0x420/0x420
[ 1773.548656][T31822]  ? read_tsc+0x9/0x20
[ 1773.552776][T31822]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1773.559061][T31822]  should_fail_ex+0x394/0x4c0
[ 1773.563780][T31822]  should_failslab+0x9/0x20
[ 1773.568439][T31822]  slab_pre_alloc_hook+0x59/0x300
[ 1773.573585][T31822]  kmem_cache_alloc_bulk+0x52/0x5a0
[ 1773.578820][T31822]  ? page_pool_alloc_pages+0xba/0x160
[ 1773.584239][T31822]  bpf_test_run_xdp_live+0x16a9/0x1b30
[ 1773.589792][T31822]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[ 1773.595363][T31822]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1773.600961][T31822]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1773.607228][T31822]  ? _copy_from_user+0xa5/0xe0
[ 1773.612017][T31822]  ? bpf_test_init+0x119/0x140
[ 1773.616888][T31822]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1773.622376][T31822]  bpf_prog_test_run_xdp+0x7d8/0x1140
[ 1773.627774][T31822]  ? __lock_acquire+0x7d80/0x7d80
[ 1773.632871][T31822]  ? dev_put+0x80/0x80
[ 1773.636977][T31822]  ? dev_put+0x80/0x80
[ 1773.641076][T31822]  bpf_prog_test_run+0x31f/0x390
[ 1773.646032][T31822]  __sys_bpf+0x49d/0x890
[ 1773.650307][T31822]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1773.655722][T31822]  ? lock_chain_count+0x20/0x20
[ 1773.660687][T31822]  __x64_sys_bpf+0x7c/0x90
[ 1773.665117][T31822]  do_syscall_64+0x55/0xb0
[ 1773.669642][T31822]  ? clear_bhb_loop+0x40/0x90
[ 1773.674336][T31822]  ? clear_bhb_loop+0x40/0x90
[ 1773.679027][T31822]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1773.685106][T31822] RIP: 0033:0x7f8697b9e159
[ 1773.689525][T31822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1773.709229][T31822] RSP: 002b:00007f8698b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1773.717686][T31822] RAX: ffffffffffffffda RBX: 00007f8697e25fa0 RCX: 00007f8697b9e159
[ 1773.725708][T31822] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1773.733696][T31822] RBP: 00007f8698b00090 R08: 0000000000000000 R09: 0000000000000000
[ 1773.741812][T31822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1773.749793][T31822] R13: 00007f8697e26038 R14: 00007f8697e25fa0 R15: 00007ffe5790f3c8
[ 1773.757788][T31822]  </TASK>
[ 1773.952493][T31839] netlink: 'syz.1.8372': attribute type 3 has an invalid length.
[ 1774.354725][T31853] veth1_macvtap: left promiscuous mode
[ 1774.364007][T31853] macsec0: entered promiscuous mode
[ 1774.408141][T31856] veth1_macvtap: entered promiscuous mode
[ 1774.434820][T31856] macsec0: entered allmulticast mode
[ 1774.452737][T31856] veth1_macvtap: entered allmulticast mode
[ 1775.484383][T31861] sit0: left promiscuous mode
[ 1775.996935][T31865] sit0: entered promiscuous mode
[ 1776.155931][T31873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8379'.
[ 1776.206119][T31876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8379'.
[ 1776.334386][T31871] syzkaller0: entered promiscuous mode
[ 1776.347475][T31871] syzkaller0: entered allmulticast mode
[ 1779.431818][T31913] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8389'.
[ 1779.531007][T31913] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1779.706676][T31914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1780.012145][T31920] sit0: entered allmulticast mode
[ 1780.066703][T31922] sit0: entered promiscuous mode
[ 1780.588253][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8395'.
[ 1781.329683][T31939] netlink: 'syz.1.8397': attribute type 10 has an invalid length.
[ 1781.361627][T31939] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8397'.
[ 1781.893066][T31955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8403'.
[ 1781.943469][T31955] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8403'.
[ 1782.026410][T31959] netlink: 'syz.2.8403': attribute type 10 has an invalid length.
[ 1782.042524][T31959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1782.050435][T31959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1782.081636][T31959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1782.089177][T31959] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1782.098451][T31959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1782.105636][T31959] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1782.143477][T31959] bridge0: entered promiscuous mode
[ 1782.181673][T31959] bridge0: entered allmulticast mode
[ 1782.191619][T31959] team0: Port device bridge0 added
[ 1782.327321][T31967] netlink: 'syz.0.8407': attribute type 10 has an invalid length.
[ 1782.645711][T31980] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8411'.
[ 1785.061911][T32020] netlink: 'syz.2.8423': attribute type 5 has an invalid length.
[ 1785.906653][T32032] sit0: entered allmulticast mode
[ 1786.701363][T32045] netlink: 'syz.3.8432': attribute type 17 has an invalid length.
[ 1786.874572][T32045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8432'.
[ 1787.099211][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1787.543567][T32059] tap0: tun_chr_ioctl cmd 1074025681
[ 1787.575061][T32062] tap0: tun_chr_ioctl cmd 1074025673
[ 1787.594493][T32059] tap0: tun_chr_ioctl cmd 1074025681
[ 1787.642918][T32060] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8436'.
[ 1788.450879][T32083] netlink: 'syz.2.8447': attribute type 10 has an invalid length.
[ 1788.475561][T32083] hsr0: entered promiscuous mode
[ 1788.489763][T32083] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1788.778422][T32087] netlink: 'syz.2.8448': attribute type 10 has an invalid length.
[ 1788.796677][T32087] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1791.763325][T32106] tap0: tun_chr_ioctl cmd 1074025676
[ 1791.810567][T32106] tap0: owner set to 776
[ 1792.164608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.171132][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.757338][T32114] netlink: 'syz.1.8455': attribute type 21 has an invalid length.
[ 1792.821783][T32118] netlink: 'syz.3.8456': attribute type 10 has an invalid length.
[ 1792.836193][T32118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8456'.
[ 1793.812287][T23958] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 1794.413543][T32144] netlink: 'syz.3.8465': attribute type 2 has an invalid length.
[ 1794.883658][T32144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8465'.
[ 1795.400747][T32161] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8470'.
[ 1797.008670][T32185] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8477'.
[ 1797.310107][T32196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8480'.
[ 1799.765171][T32240] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8494'.
[ 1800.022451][T32244] netlink: 'syz.2.8496': attribute type 23 has an invalid length.
[ 1801.655173][T32269] netlink: 'syz.2.8505': attribute type 21 has an invalid length.
[ 1801.677161][T32269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8505'.
[ 1801.887917][T32268] netlink: 'syz.2.8505': attribute type 21 has an invalid length.
[ 1801.998376][T32268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8505'.
[ 1806.987502][T32309] netlink: 'syz.3.8516': attribute type 10 has an invalid length.
[ 1807.519468][T32319] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8520'.
[ 1807.684782][T32318] netlink: 'syz.2.8519': attribute type 39 has an invalid length.
[ 1811.091299][T32375] netlink: 'syz.0.8537': attribute type 10 has an invalid length.
[ 1811.120375][T32375] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8537'.
[ 1815.968701][T32437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8555'.
[ 1818.426223][T32437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8555'.
[ 1818.662851][T32438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8555'.
[ 1822.148035][T32470] netlink: 'syz.2.8564': attribute type 21 has an invalid length.
[ 1824.653462][T32510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8578'.
[ 1824.697764][T32510] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8578'.
[ 1824.733021][T32510] netlink: 'syz.0.8578': attribute type 10 has an invalid length.
[ 1824.742841][T32510] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1824.750365][T32510] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1824.819288][T32510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1824.828501][T32510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1824.837782][T32510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.845030][T32510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1824.937558][T32510] team0: Port device bridge0 added
[ 1825.181624][T32513] syzkaller0: entered promiscuous mode
[ 1825.210615][T32513] syzkaller0: entered allmulticast mode
[ 1828.907300][T32537] FAULT_INJECTION: forcing a failure.
[ 1828.907300][T32537] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1828.923065][T32537] CPU: 0 PID: 32537 Comm: syz.1.8586 Not tainted syzkaller #0
[ 1828.930596][T32537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1828.940684][T32537] Call Trace:
[ 1828.943983][T32537]  <TASK>
[ 1828.947025][T32537]  dump_stack_lvl+0x18c/0x250
[ 1828.951731][T32537]  ? show_regs_print_info+0x20/0x20
[ 1828.956950][T32537]  ? load_image+0x420/0x420
[ 1828.961477][T32537]  ? __might_fault+0xaa/0x120
[ 1828.966169][T32537]  ? __lock_acquire+0x7d80/0x7d80
[ 1828.971209][T32537]  ? __virt_addr_valid+0x10c/0x380
[ 1828.976351][T32537]  should_fail_ex+0x394/0x4c0
[ 1828.981053][T32537]  _copy_from_user+0x2f/0xe0
[ 1828.985665][T32537]  generic_map_update_batch+0x58c/0x800
[ 1828.991237][T32537]  ? rcu_read_unlock+0xa0/0xa0
[ 1828.996018][T32537]  ? __fdget+0x180/0x210
[ 1829.000277][T32537]  ? rcu_read_unlock+0xa0/0xa0
[ 1829.005053][T32537]  bpf_map_do_batch+0x3f2/0x600
[ 1829.010004][T32537]  ? bpf_lsm_key_permission+0x10/0x10
[ 1829.015403][T32537]  __sys_bpf+0x381/0x890
[ 1829.019665][T32537]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1829.025241][T32537]  ? lock_chain_count+0x20/0x20
[ 1829.030121][T32537]  __x64_sys_bpf+0x7c/0x90
[ 1829.034556][T32537]  do_syscall_64+0x55/0xb0
[ 1829.039112][T32537]  ? clear_bhb_loop+0x40/0x90
[ 1829.043812][T32537]  ? clear_bhb_loop+0x40/0x90
[ 1829.048505][T32537]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1829.054422][T32537] RIP: 0033:0x7efe1fb9e159
[ 1829.058869][T32537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1829.078503][T32537] RSP: 002b:00007efe20b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1829.086957][T32537] RAX: ffffffffffffffda RBX: 00007efe1fe25fa0 RCX: 00007efe1fb9e159
[ 1829.094955][T32537] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1829.103025][T32537] RBP: 00007efe20b2a090 R08: 0000000000000000 R09: 0000000000000000
[ 1829.111007][T32537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1829.119105][T32537] R13: 00007efe1fe26038 R14: 00007efe1fe25fa0 R15: 00007ffd0c395828
[ 1829.127280][T32537]  </TASK>
[ 1829.440657][T32544] netlink: 'syz.3.8587': attribute type 21 has an invalid length.
[ 1829.459917][T32544] netlink: 'syz.3.8587': attribute type 6 has an invalid length.
[ 1829.551311][T32545] netlink: 'syz.3.8587': attribute type 46 has an invalid length.
[ 1829.574076][T32545] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8587'.
[ 1829.585333][T32544] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1829.951637][T18276] Bluetooth: hci3: command 0x0406 tx timeout
[ 1834.172486][T32592] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.8601'.
[ 1836.749405][T32622] netlink: 'syz.2.8612': attribute type 33 has an invalid length.
[ 1836.800550][T32622] netlink: 'syz.2.8612': attribute type 3 has an invalid length.
[ 1837.040669][T32622] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.8612'.
[ 1838.036465][T32645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8620'.
[ 1841.249326][T32680] netlink: 'syz.3.8632': attribute type 21 has an invalid length.
[ 1841.302578][T32680] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8632'.
[ 1841.404618][T32687] netlink: 'syz.1.8635': attribute type 10 has an invalid length.
[ 1841.437293][T32687] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1841.450317][T32687] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1841.459748][T32687] team0: Port device netdevsim0 added
[ 1841.589497][T32694] netlink: 'syz.0.8636': attribute type 1 has an invalid length.
[ 1841.597666][T32694] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.8636'.
[ 1844.412924][T32699] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8638'.
[ 1844.475002][T32699] netlink: 'syz.2.8638': attribute type 10 has an invalid length.
[ 1844.516278][T32699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8638'.
[ 1844.528324][T32699] dummy0: entered promiscuous mode
[ 1844.533983][T32699] dummy0: entered allmulticast mode
[ 1844.552442][T32699] bridge0: port 4(dummy0) entered blocking state
[ 1844.561498][T32699] bridge0: port 4(dummy0) entered disabled state
[ 1844.610959][T32699] bridge0: port 4(dummy0) entered blocking state
[ 1844.619288][T32699] bridge0: port 4(dummy0) entered forwarding state
[ 1844.932189][T32710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8642'.
[ 1845.926087][T23958] Bluetooth: hci2: ISO packet for unknown connection handle 3846
[ 1848.381232][T32758] netlink: 'syz.0.8660': attribute type 10 has an invalid length.
[ 1848.476087][T32758] macvlan0: entered promiscuous mode
[ 1848.537541][T32758] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1848.660361][T32765] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8663'.
[ 1848.689663][T32765] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8663'.
[ 1849.542980][T32765] bond0: (slave bond_slave_0): Releasing backup interface
[ 1849.591537][T32765] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1849.618202][T32767] netlink: 'syz.1.8664': attribute type 3 has an invalid length.
[ 1849.648852][T32767] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.8664'.
[ 1852.106048][  T346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1852.277345][  T349] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8677'.
[ 1852.747669][  T356] syzkaller0: entered promiscuous mode
[ 1852.757152][  T356] syzkaller0: entered allmulticast mode
[ 1853.496468][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.502903][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1855.346159][  T372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1857.055023][  T369] netlink: 'syz.2.8683': attribute type 10 has an invalid length.
[ 1857.073587][  T369] geneve1: entered promiscuous mode
[ 1857.086724][  T369] geneve1: entered allmulticast mode
[ 1857.097013][  T369] team0: Port device geneve1 added
[ 1857.378699][  T387] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.8689'.
[ 1857.460462][  T387] openvswitch: netlink: Key type 4112 is out of range max 32
[ 1857.796857][  T396] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8691'.
[ 1858.719725][  T412] netlink: 'syz.1.8696': attribute type 5 has an invalid length.
[ 1860.529634][  T422] netlink: 'syz.3.8699': attribute type 10 has an invalid length.
[ 1860.538375][  T422] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8699'.
[ 1871.831833][  T464] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8711'.
[ 1871.847393][  T465] netlink: 'syz.1.8711': attribute type 17 has an invalid length.
[ 1871.862577][  T465] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8711'.
[ 1871.882477][  T464] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1871.904324][  T465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1871.926904][  T464] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1874.357142][  T488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8718'.
[ 1874.409521][  T488] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8718'.
[ 1874.490691][T18276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1874.499981][T18276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1874.516758][T18276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1874.530141][T18276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1874.574050][T18276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1874.581916][T18276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1874.622999][T29032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.843006][T29032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.937378][T29032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1875.125239][T29032] team0: Port device netdevsim0 removed
[ 1875.149994][T29032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1875.462819][T29032] tipc: Left network mode
[ 1875.713069][  T493] chnl_net:caif_netlink_parms(): no params data found
[ 1876.517590][  T535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8730'.
[ 1876.534395][  T535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8730'.
[ 1876.582374][  T493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1876.591234][  T493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1876.599047][  T493] bridge_slave_0: entered allmulticast mode
[ 1876.607492][  T493] bridge_slave_0: entered promiscuous mode
[ 1876.642955][  T493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1876.650397][  T493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1876.660660][  T493] bridge_slave_1: entered allmulticast mode
[ 1876.670184][  T493] bridge_slave_1: entered promiscuous mode
[ 1876.676270][T23958] Bluetooth: hci0: command tx timeout
[ 1876.739340][T29032] gretap0 (unregistering): left allmulticast mode
[ 1876.747520][T29032] gretap0 (unregistering): left promiscuous mode
[ 1876.753992][T29032] Ÿë
: port 2(gretap0) entered disabled state
[ 1876.793186][  T493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1876.809783][  T493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1876.880684][  T493] team0: Port device team_slave_0 added
[ 1876.908420][  T493] team0: Port device team_slave_1 added
[ 1876.963545][  T493] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1876.970670][  T493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1876.997884][  T493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1877.010943][  T493] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1877.018021][  T493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1877.043988][  T493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1877.093902][  T493] hsr_slave_0: entered promiscuous mode
[ 1877.101139][  T493] hsr_slave_1: entered promiscuous mode
[ 1877.108393][  T493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1877.116087][  T493] Cannot create hsr debugfs directory
[ 1877.554841][  T493] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1877.567076][  T493] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1877.583911][  T493] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1877.599630][  T493] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1877.643255][T29032] veth0_to_team: left allmulticast mode
[ 1877.649223][T29032] veth0_to_team: left promiscuous mode
[ 1877.654955][T29032] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1877.680986][T29032] hsr_slave_0: left promiscuous mode
[ 1877.687378][T29032] hsr_slave_1: left promiscuous mode
[ 1877.694581][T29032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1877.704157][T29032] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1877.714713][T29032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1877.722623][T29032] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1877.731092][T29032] bridge_slave_1: left allmulticast mode
[ 1877.737304][T29032] bridge_slave_1: left promiscuous mode
[ 1877.743123][T29032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1877.753153][T29032] bridge_slave_0: left allmulticast mode
[ 1877.759235][T29032] bridge_slave_0: left promiscuous mode
[ 1877.765020][T29032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1877.801905][T29032] veth1_macvtap: left promiscuous mode
[ 1877.808531][T29032] veth0_macvtap: left promiscuous mode
[ 1877.814450][T29032] veth1_vlan: left promiscuous mode
[ 1877.820077][T29032] veth0_vlan: left promiscuous mode
[ 1878.020287][T29032] team0 (unregistering): Port device geneve1 removed
[ 1878.211349][T29032] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1878.582436][T29032] team0 (unregistering): Port device team_slave_1 removed
[ 1878.634066][T29032] team0 (unregistering): Port device team_slave_0 removed
[ 1878.684682][T29032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1878.739259][T29032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1878.756218][T23958] Bluetooth: hci0: command tx timeout
[ 1879.098257][T29032] team0 (unregistering): Port device bond0 removed
[ 1879.105531][T29032] team0 (unregistering): Port device bridge0 removed
[ 1879.149976][T29032] bond0 (unregistering): Released all slaves
[ 1879.402223][  T493] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1879.464341][  T493] 8021q: adding VLAN 0 to HW filter on device team0
[ 1879.513120][T31654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1879.520377][T31654] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1879.564867][T31653] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1879.572123][T31653] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1879.931962][  T493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1880.329252][  T493] veth0_vlan: entered promiscuous mode
[ 1880.343505][  T493] veth1_vlan: entered promiscuous mode
[ 1880.382095][  T493] veth0_macvtap: entered promiscuous mode
[ 1880.402769][  T493] veth1_macvtap: entered promiscuous mode
[ 1880.433274][  T493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1880.447665][  T493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1880.461620][  T493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1880.474959][  T493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1880.490678][  T493] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1880.516533][  T493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1880.532206][  T493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1880.542736][  T493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1880.559377][  T493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1880.572569][  T493] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1880.594203][  T493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1880.605683][  T493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1880.621200][  T493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1880.630402][  T493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1880.741284][T31654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1880.757318][T31654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1880.798614][T31653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1880.814850][T31653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1880.827020][T23958] Bluetooth: hci0: command tx timeout
[ 1881.107388][  T603] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1881.114087][  T603] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1881.134789][  T603] veth0_to_team: entered allmulticast mode
[ 1881.147766][  T603] veth0_to_team: entered promiscuous mode
[ 1882.921933][T23958] Bluetooth: hci0: command tx timeout
[ 1914.909295][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.915725][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.349644][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.356378][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1998.915925][T18276] Bluetooth: hci0: command 0x0406 tx timeout
[ 2037.791087][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.797618][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.229435][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.236065][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2160.669898][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.676718][ T1293] ieee802154 phy1 wpan1: encryption failed: -22