last executing test programs:

8.355384587s ago: executing program 4 (id=4305):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x100}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000400)=""/97)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000940)=""/13}, 0x20)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x84}, 0x0, 0xffffffffffffffff, r2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

7.699042204s ago: executing program 0 (id=4309):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x21000000, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28)

7.620625649s ago: executing program 4 (id=4310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

7.148252766s ago: executing program 0 (id=4312):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000004000000000000000000000095000000000000005cc8f4ba5cfe4350b5cf2092a8e066ea53e32a2a78469af70f70482ce02d763aa0a2662af07b937fbe705aa020331aeb92758f5f0ecaa294fb3852196bf2e5f312d3e1c7c83f4157aea9e2a9eb637e38b8450512fdce7f702fac4dc05d7af5a409f9854450"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(r4)
r6 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca0d"], 0x9a)
close(0x3)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/38, 0x26, <r8=>0x0, &(0x7f0000000440)=""/160, 0xa0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000040), 0x10, r8}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.116443954s ago: executing program 2 (id=4316):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081", 0x7}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006a"], 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6, 0x1, 0x0, 0x6, 0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0xa304, 0x9, 0x4a52, 0x6, 0x401, 0xfff, 0x8, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r1})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0)=r3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4)
r5 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x81, 0x8, 0x0, 0x7, 0x7, 0x0, 0x6885, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x440, 0xffff, 0xff, 0x9, 0x8000000000000001, 0x9, 0x5, 0x0, 0x9, 0x0, 0x2}, r5, 0xa, 0xffffffffffffffff, 0x8)

5.951499593s ago: executing program 2 (id=4318):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x92, 0x0, 0x0, 0xfffffffffffffff8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8001}, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&')
r1 = socket$kcm(0xa, 0x2, 0x0)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r2, 0x120)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)

5.950788533s ago: executing program 4 (id=4319):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x1000000)

5.851083229s ago: executing program 3 (id=4320):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x4, 0x8, 0xd, 0x0, 0xff, 0x8010, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbe7, 0x1, @perf_config_ext={0xffffffffffffff77, 0x101}, 0x200, 0x8, 0xffffff7f, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4ff, 0x0, 0xb0}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0xf, 0x80, 0x6, 0x6d, 0x0, 0x7ff, 0x2180a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x37df, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x20, 0x3, 0xfff, 0x2, 0x1ff, 0x40, 0x4, 0x0, 0x0, 0x0, 0x100})
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f3030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800200022bf000000000000ff7f000018200000", @ANYRES32=r6, @ANYBLOB="00000000000001ffb702000014000000b70300000000000085000000c6000000bf09000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000"], 0x0, 0x3, 0xd4, &(0x7f0000000540)=""/212}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0xe}, 0x101000, 0x107, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.850433769s ago: executing program 0 (id=4321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)="a7", 0x1}], 0x1}, 0xc081)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9", 0x1}], 0x1}, 0x4009081)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.64854927s ago: executing program 4 (id=4322):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$sock(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="812156901fefa1d82cfffb83255171b6b38f88872c6364cb23a34493dfc2c9c2dce2fc84dd6045881125544fa7047e53c0fed51fba56a58b63639f08a585055e59f36ba1e7aafe2867438e816144bf0096c722d30cf500b45d8bc39630da3333fa3798b7a3751affb91155c1a46652d93f11a7493decfafd0808bdcfbf948164bf12f5e5e5c4161b4c9fb938eaaa398225b3142e4bd3e1111faa5c4a3ba235caef0326410477dae45222272398d9b048dbf21ad05b467f459464661d9588bc0777", 0xc1}, {&(0x7f0000000440)="93cc697fc179e0426aa9b9fc6f3fbe7cc8e2b9e5d5b0c41a62b0f8ac24dda8599c35a613f5d47f0a0e93acc0c2ab8a6564e97fc42288582a7cb738226333b808a2a82bd6468f1d3f8bb5e22372324cd871869b8f121deb105db3321482dfaeecb014f93d9ca17e8b474da9342b07d0725f1ab5a50f8175058b6a2125", 0x7c}, {&(0x7f0000000640)="622e9331a8cefc24b35716121c8d23d4dee251560ad61384ecd2a081a54669323283c117171f9668f59170c661cbee2824bf5d15a383e09f6dfba9dc509ec5a525cce42da9598aad9d23346e6272cbec9cb20686bf1bd8eb5542501830ec85eaae2549a3b507503bddd943b6e0edbb4b7ff857b2a45916", 0x77}], 0x3}, 0x8000)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x10021, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x3, 0x5, 0xa17c, 0x55e, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000c0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r1}, 0x38)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
socket$kcm(0x29, 0x5, 0x0)

5.523150907s ago: executing program 0 (id=4323):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x15, 0x5, 0x0)
socket$kcm(0xa, 0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000004"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r0, 0x0, 0x52cc)

5.358557207s ago: executing program 1 (id=4324):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x4, 0x8, 0xd, 0x0, 0xff, 0x8010, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbe7, 0x1, @perf_config_ext={0xffffffffffffff77, 0x101}, 0x200, 0x8, 0xffffff7f, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4ff, 0x0, 0xb0}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0xf, 0x80, 0x6, 0x6d, 0x0, 0x7ff, 0x2180a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x37df, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x20, 0x3, 0xfff, 0x2, 0x1ff, 0x40, 0x4, 0x0, 0x0, 0x0, 0x100})
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000f3030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

5.29980341s ago: executing program 3 (id=4325):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

5.223612784s ago: executing program 2 (id=4326):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9aea252ff030703008cb89e0800", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x50)

5.064374804s ago: executing program 4 (id=4327):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189", 0x50}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
close(r5)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1e03f2003c5ca601288763"], 0xffdd)

4.9633304s ago: executing program 2 (id=4328):
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x80, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x41cb1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x48, 0x5, 0x0, 0x0, 0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x8050, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4001900000000006b113a00000000008510000002000000850000002cfd35dc95000000000000009500000000080000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
socketpair(0x1d, 0x5, 0xfffffffc, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)

4.96254368s ago: executing program 3 (id=4329):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xbb88}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
socket$kcm(0x2, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x5601, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x6084, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
socket$kcm(0x2, 0x1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f0000000180), 0x43)
socket$kcm(0x29, 0x2, 0x0)

4.933509251s ago: executing program 1 (id=4330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

4.727725303s ago: executing program 3 (id=4331):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x15, 0x5, 0x0) (async)
r3 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r5}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

3.974686146s ago: executing program 0 (id=4332):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x80, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18, 0x0, 0xfffffffe, 0x5, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x1b)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)

3.668471782s ago: executing program 3 (id=4333):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x80, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18, 0x0, 0xfffffffe, 0x5, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x1b)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 2)

3.667366982s ago: executing program 1 (id=4334):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, &(0x7f0000000000), 0x10) (async)
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)={'full', 0x20, 0x8, 0x20, 0x3}, 0x2f)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) (async, rerun: 64)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
setsockopt$sock_attach_bpf(r6, 0x107, 0x8, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084)

3.519472621s ago: executing program 2 (id=4335):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)

3.489220343s ago: executing program 1 (id=4336):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x4, 0x8, 0xd, 0x0, 0xff, 0x8010, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbe7, 0x1, @perf_config_ext={0xffffffffffffff77, 0x101}, 0x200, 0x8, 0xffffff7f, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4ff, 0x0, 0xb0}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0xf, 0x80, 0x6, 0x6d, 0x0, 0x7ff, 0x2180a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x37df, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x20, 0x3, 0xfff, 0x2, 0x1ff, 0x40, 0x4, 0x0, 0x0, 0x0, 0x100})
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000f3030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800200022bf000000000000ff7f000018200000", @ANYRES32=r6, @ANYBLOB="00000000000001ffb702000014000000b70300000000000085000000c6000000bf09000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000"], 0x0, 0x3, 0xd4, &(0x7f0000000540)=""/212}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0xe}, 0x101000, 0x107, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

756.587787ms ago: executing program 0 (id=4337):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x92, 0x0, 0x0, 0xfffffffffffffff8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8001}, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&')
r1 = socket$kcm(0xa, 0x2, 0x0)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r2, 0x120)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)

755.766587ms ago: executing program 2 (id=4338):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3"], 0x0, 0x5}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$sock(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="812156901fefa1d82cfffb83255171b6b38f88872c6364cb23a34493dfc2c9c2dce2fc84dd6045881125544fa7047e53c0fed51fba56a58b63639f08a585055e59f36ba1e7aafe2867438e816144bf0096c722d30cf500b45d8bc39630da3333fa3798b7a3751affb91155c1a46652d93f11a7493decfafd0808bdcfbf948164bf12f5e5e5c4161b4c9fb938eaaa398225b3142e4bd3e1111faa5c4a3ba235caef0326410477dae45222272398d9b048dbf21ad05b467f459464661d9588bc0777", 0xc1}, {&(0x7f0000000440)="93cc697fc179e0426aa9b9fc6f3fbe7cc8e2b9e5d5b0c41a62b0f8ac24dda8599c35a613f5d47f0a0e93acc0c2ab8a6564e97fc42288582a7cb738226333b808a2a82bd6468f1d3f8bb5e22372324cd871869b8f121deb105db3321482dfaeecb014f93d9ca17e8b474da9342b07d0725f1ab5a50f8175058b6a2125", 0x7c}, {&(0x7f0000000640)="622e9331a8cefc24b35716121c8d23d4dee251560ad61384ecd2a081a54669323283c117171f9668f59170c661cbee2824bf5d15a383e09f6dfba9dc509ec5a525cce42da9598aad9d23346e6272cbec9cb20686bf1bd8eb5542501830ec85eaae2549a3b507503bddd943b6e0edbb4b7ff857b2a45916", 0x77}], 0x3}, 0x8000)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x10021, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x3, 0x5, 0xa17c, 0x55e, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000c0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r1}, 0x38)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
socket$kcm(0x29, 0x5, 0x0)

695.988381ms ago: executing program 3 (id=4339):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375eeb8a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x140}, 0x0)

694.164611ms ago: executing program 1 (id=4340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

619.283105ms ago: executing program 4 (id=4341):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x4, 0x8, 0xd, 0x0, 0xff, 0x8010, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbe7, 0x1, @perf_config_ext={0xffffffffffffff77, 0x101}, 0x200, 0x8, 0xffffff7f, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4ff, 0x0, 0xb0}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0xf, 0x80, 0x6, 0x6d, 0x0, 0x7ff, 0x2180a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x37df, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x20, 0x3, 0xfff, 0x2, 0x1ff, 0x40, 0x4, 0x0, 0x0, 0x0, 0x100})
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000f3030000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

0s ago: executing program 1 (id=4342):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10c002, 0xec5d, 0xffff0ce0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x3c, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000061118c0000000000066bbc000000000095007400000000005d090f36aea41cb6638c9ec6116702f6d289d683a648242abae923a58e524b081a8f2761cda5d9f56487e8ce84d2c8e525c699ec424358b963244850f5b180b38bddd5f53ee12360"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x15, 0x5, 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0x3, 0x7ff, 0x11400, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r1, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000c40), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}, {0x10, 0x84, 0x7}], 0x20}, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r10, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x8, 0x9, 0x4, 0xd, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x8, 0xe, &(0x7f0000000ac0)=""/14, 0x41000, 0x40, '\x00', r7, 0x18, r10, 0x8, &(0x7f0000000e00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x3, 0x2}, 0x10, 0x1403e, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffff44)

kernel console output (not intermixed with test programs):

.703827][T13036]  ? memset+0x1e/0x40
[  660.707916][T13036]  ? __hrtimer_init+0x186/0x270
[  660.712901][T13036]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  660.718840][T13036]  hwsim_new_radio_nl+0xafa/0xce0
[  660.724071][T13036]  genl_family_rcv_msg_doit+0x22a/0x330
[  660.729735][T13036]  ? end_current_label_crit_section+0x170/0x170
[  660.736118][T13036]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  660.742174][T13036]  ? bpf_lsm_capable+0x5/0x10
[  660.747132][T13036]  ? security_capable+0x85/0xb0
[  660.752129][T13036]  genl_rcv_msg+0x604/0x790
[  660.756792][T13036]  ? genl_bind+0x360/0x360
[  660.761316][T13036]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  660.767842][T13036]  netlink_rcv_skb+0x1fb/0x450
[  660.772727][T13036]  ? genl_bind+0x360/0x360
[  660.777285][T13036]  ? netlink_ack+0x1170/0x1170
[  660.782222][T13036]  ? down_read+0x1a8/0x2d0
[  660.786767][T13036]  genl_rcv+0x24/0x40
[  660.790858][T13036]  netlink_unicast+0x74d/0x8d0
[  660.795780][T13036]  netlink_sendmsg+0x8ad/0xbd0
[  660.800708][T13036]  ? netlink_getsockopt+0x550/0x550
[  660.806046][T13036]  ? aa_sock_msg_perm+0x94/0x150
[  660.811094][T13036]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  660.816476][T13036]  ? security_socket_sendmsg+0x7c/0xa0
[  660.822066][T13036]  ? netlink_getsockopt+0x550/0x550
[  660.827382][T13036]  ____sys_sendmsg+0x5be/0x970
[  660.832302][T13036]  ? __sys_sendmsg_sock+0x30/0x30
[  660.837416][T13036]  ? __import_iovec+0x315/0x500
[  660.842411][T13036]  ? import_iovec+0x6f/0xa0
[  660.847042][T13036]  ___sys_sendmsg+0x2a2/0x360
[  660.851922][T13036]  ? try_to_wake_up+0x6ae/0x1080
[  660.856989][T13036]  ? __sys_sendmsg+0x290/0x290
[  660.862009][T13036]  ? __lock_acquire+0x7d10/0x7d10
[  660.867131][T13036]  ? rcu_read_lock_sched_held+0x86/0x110
[  660.873000][T13036]  __se_sys_sendmsg+0x1bb/0x2a0
[  660.877981][T13036]  ? __x64_sys_sendmsg+0x80/0x80
[  660.883118][T13036]  ? lockdep_hardirqs_on+0x94/0x140
[  660.888438][T13036]  do_syscall_64+0x4c/0xa0
[  660.892982][T13036]  ? clear_bhb_loop+0x60/0xb0
[  660.897755][T13036]  ? clear_bhb_loop+0x60/0xb0
[  660.902543][T13036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.908558][T13036] RIP: 0033:0x7f212ad9bf79
[  660.913069][T13036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.932777][T13036] RSP: 002b:00007f212bb70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.941325][T13036] RAX: ffffffffffffffda RBX: 00007f212b015fa0 RCX: 00007f212ad9bf79
[  660.949444][T13036] RDX: 0000000001000000 RSI: 0000200000000000 RDI: 0000000000000005
[  660.957608][T13036] RBP: 00007f212ae327e0 R08: 0000000000000000 R09: 0000000000000000
[  660.965692][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.973764][T13036] R13: 00007f212b016038 R14: 00007f212b015fa0 R15: 00007ffd1cf7a398
[  660.981915][T13036]  </TASK>
[  661.040976][ T9590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  661.065217][ T9590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.096142][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  661.246988][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'.
[  661.257872][ T4283] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  661.282347][T13048] netlink: 'syz.1.2755': attribute type 3 has an invalid length.
[  661.299573][T13048] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.2755'.
[  661.605186][ T4283] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  661.622075][T13054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2747'.
[  662.649863][ T4283] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  662.814065][T13089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2763'.
[  664.173687][ T4283] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  664.847316][T13144] netlink: 'syz.0.2782': attribute type 7 has an invalid length.
[  665.230707][T13151] netlink: 'syz.4.2786': attribute type 1 has an invalid length.
[  665.609950][ T4283] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  667.766004][T13166] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2794'.
[  667.832362][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  668.049055][T13178] netlink: 'syz.0.2795': attribute type 29 has an invalid length.
[  668.072427][T13178] netlink: 'syz.0.2795': attribute type 29 has an invalid length.
[  668.346079][ T4283] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  669.536447][T13209] netlink: 'syz.3.2806': attribute type 11 has an invalid length.
[  669.579322][T13209] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2806'.
[  670.187591][T13202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  670.586449][ T4283] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[  672.166038][ T4283] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  672.532438][T13258] can: request_module (can-proto-0) failed.
[  672.924627][T13275] netlink: 'syz.3.2833': attribute type 3 has an invalid length.
[  672.934253][T13277] FAULT_INJECTION: forcing a failure.
[  672.934253][T13277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.966662][T13275] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.2833'.
[  673.015109][T13277] CPU: 1 PID: 13277 Comm: syz.0.2834 Not tainted syzkaller #0
[  673.022660][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  673.033212][T13277] Call Trace:
[  673.036543][T13277]  <TASK>
[  673.039515][T13277]  dump_stack_lvl+0x188/0x24e
[  673.044254][T13277]  ? show_regs_print_info+0x12/0x12
[  673.049518][T13277]  ? load_image+0x400/0x400
[  673.054079][T13277]  ? __lock_acquire+0x7d10/0x7d10
[  673.059165][T13277]  ? __virt_addr_valid+0x188/0x540
[  673.064341][T13277]  should_fail_ex+0x399/0x4d0
[  673.069178][T13277]  _copy_from_user+0x2c/0x170
[  673.073910][T13277]  btf_new_fd+0x324/0x780
[  673.078302][T13277]  __sys_bpf+0x612/0x780
[  673.082610][T13277]  ? bpf_link_show_fdinfo+0x380/0x380
[  673.088051][T13277]  ? lock_chain_count+0x20/0x20
[  673.093018][T13277]  __x64_sys_bpf+0x78/0x90
[  673.097494][T13277]  do_syscall_64+0x4c/0xa0
[  673.101969][T13277]  ? clear_bhb_loop+0x60/0xb0
[  673.106702][T13277]  ? clear_bhb_loop+0x60/0xb0
[  673.111436][T13277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  673.117383][T13277] RIP: 0033:0x7f551659bf79
[  673.121827][T13277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.141472][T13277] RSP: 002b:00007f55173ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  673.149911][T13277] RAX: ffffffffffffffda RBX: 00007f5516815fa0 RCX: 00007f551659bf79
[  673.157909][T13277] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012
[  673.165908][T13277] RBP: 00007f55173ca090 R08: 0000000000000000 R09: 0000000000000000
[  673.173900][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  673.181899][T13277] R13: 00007f5516816038 R14: 00007f5516815fa0 R15: 00007ffc369afd58
[  673.189909][T13277]  </TASK>
[  673.399680][ T4283] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  673.705740][T13297] netlink: 'syz.0.2842': attribute type 1 has an invalid length.
[  673.915216][T13297] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2842'.
[  674.087804][T13301] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2843'.
[  675.259747][T13317] FAULT_INJECTION: forcing a failure.
[  675.259747][T13317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  675.316335][T13317] CPU: 1 PID: 13317 Comm: syz.2.2850 Not tainted syzkaller #0
[  675.323887][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  675.333983][T13317] Call Trace:
[  675.337306][T13317]  <TASK>
[  675.340271][T13317]  dump_stack_lvl+0x188/0x24e
[  675.345000][T13317]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  675.351211][T13317]  ? show_regs_print_info+0x12/0x12
[  675.356472][T13317]  ? load_image+0x400/0x400
[  675.361037][T13317]  should_fail_ex+0x399/0x4d0
[  675.365791][T13317]  _copy_to_user+0x2c/0x130
[  675.370364][T13317]  simple_read_from_buffer+0xe3/0x150
[  675.375811][T13317]  proc_fail_nth_read+0x1a6/0x220
[  675.380893][T13317]  ? proc_fault_inject_write+0x310/0x310
[  675.386575][T13317]  ? fsnotify_perm+0x248/0x550
[  675.391387][T13317]  ? proc_fault_inject_write+0x310/0x310
[  675.397070][T13317]  vfs_read+0x2de/0xa00
[  675.401281][T13317]  ? kernel_read+0x1e0/0x1e0
[  675.405930][T13317]  ? __fget_files+0x28/0x4b0
[  675.410569][T13317]  ? __fget_files+0x28/0x4b0
[  675.415221][T13317]  ? __fget_files+0x43d/0x4b0
[  675.419966][T13317]  ? __fdget_pos+0x2ae/0x360
[  675.424609][T13317]  ? ksys_read+0x71/0x250
[  675.428998][T13317]  ksys_read+0x14c/0x250
[  675.433323][T13317]  ? vfs_write+0xa30/0xa30
[  675.437798][T13317]  ? lockdep_hardirqs_on+0x94/0x140
[  675.443066][T13317]  do_syscall_64+0x4c/0xa0
[  675.447533][T13317]  ? clear_bhb_loop+0x60/0xb0
[  675.452253][T13317]  ? clear_bhb_loop+0x60/0xb0
[  675.456976][T13317]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.462913][T13317] RIP: 0033:0x7f3c6e15c84e
[  675.467376][T13317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  675.487033][T13317] RSP: 002b:00007f3c6ef7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  675.495503][T13317] RAX: ffffffffffffffda RBX: 00007f3c6ef7d6c0 RCX: 00007f3c6e15c84e
[  675.503528][T13317] RDX: 000000000000000f RSI: 00007f3c6ef7d0a0 RDI: 0000000000000008
[  675.511543][T13317] RBP: 00007f3c6ef7d090 R08: 0000000000000000 R09: 0000000000000000
[  675.519610][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  675.527647][T13317] R13: 00007f3c6e416038 R14: 00007f3c6e415fa0 R15: 00007ffd94c75b68
[  675.535678][T13317]  </TASK>
[  676.010555][T13348] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2859'.
[  676.803170][T13360] netlink: 'syz.2.2864': attribute type 3 has an invalid length.
[  676.813816][T13356] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.823252][T13356] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.878722][T13360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2864'.
[  677.833999][T13389] Dead loop on virtual device ip6_vti0, fix it urgently!
[  678.300939][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2879'.
[  678.325722][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2879'.
[  678.388330][T13397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2879'.
[  678.424681][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2879'.
[  678.891778][T13402] device syzkaller0 entered promiscuous mode
[  682.824099][T13462] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2902'.
[  684.120925][T13469] netlink: 'syz.1.2904': attribute type 3 has an invalid length.
[  684.154583][T13469] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.2904'.
[  684.894714][T13481] netlink: 'syz.0.2906': attribute type 11 has an invalid length.
[  684.977055][T13481] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2906'.
[  685.172774][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'.
[  685.265258][T13497] netlink: 'syz.0.2915': attribute type 19 has an invalid length.
[  685.281218][T13497] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2915'.
[  685.373577][T13502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2917'.
[  685.514163][T13508] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2919'.
[  685.539785][T13508] bridge_slave_1: default FDB implementation only supports local addresses
[  685.815427][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  685.821821][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  686.877486][T13523] netlink: 'syz.2.2926': attribute type 11 has an invalid length.
[  686.950762][T13523] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2926'.
[  688.464063][T13563] netlink: 'syz.4.2942': attribute type 3 has an invalid length.
[  688.502839][T13563] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2942'.
[  689.902996][T13587] netlink: 'syz.3.2947': attribute type 11 has an invalid length.
[  689.922825][T13587] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2947'.
[  691.578294][T13626] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.2966'.
[  691.665810][T13627] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.2966'.
[  691.998654][ T4283] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[  692.205920][T13632] netlink: 'syz.1.2968': attribute type 1 has an invalid length.
[  692.235447][T13632] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2968'.
[  693.827153][ T4283] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  694.364330][T13679] netlink: 'syz.0.2987': attribute type 10 has an invalid length.
[  695.260995][T13697] netlink: 'syz.2.2992': attribute type 3 has an invalid length.
[  695.281832][T13697] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2992'.
[  696.666904][T13718] netlink: 'syz.3.3001': attribute type 3 has an invalid length.
[  696.731608][T13718] netlink: 55364 bytes leftover after parsing attributes in process `syz.3.3001'.
[  697.316372][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  697.331633][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  697.340123][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  697.355434][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  697.371532][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  697.379193][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  697.861707][T13725] chnl_net:caif_netlink_parms(): no params data found
[  698.017120][T13725] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.024510][T13725] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.033506][T13725] device bridge_slave_0 entered promiscuous mode
[  698.045500][T13725] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.052956][T13725] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.062284][T13725] device bridge_slave_1 entered promiscuous mode
[  698.095300][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.113945][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.164452][T13725] team0: Port device team_slave_0 added
[  698.191877][T13725] team0: Port device team_slave_1 added
[  698.261700][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  698.268926][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  698.305437][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  698.334430][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  698.356330][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  698.443276][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.469559][T13644] bond0: (slave syz_tun): Releasing backup interface
[  698.645309][T13725] device hsr_slave_0 entered promiscuous mode
[  698.685362][T13725] device hsr_slave_1 entered promiscuous mode
[  698.729524][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  698.742345][T13725] Cannot create hsr debugfs directory
[  698.890050][ T4362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.064693][T13762] netlink: 'syz.1.3013': attribute type 3 has an invalid length.
[  699.075528][T13762] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.3013'.
[  699.146507][ T4362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.289288][ T4362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.459183][ T4362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.475252][ T4283] Bluetooth: hci5: command 0x0409 tx timeout
[  699.723765][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'.
[  700.125812][ T4362] tipc: Left network mode
[  701.555202][ T4283] Bluetooth: hci5: command 0x041b tx timeout
[  701.696466][ T4283] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5
[  703.126315][T13832] netlink: 'syz.1.3033': attribute type 21 has an invalid length.
[  703.635443][ T4283] Bluetooth: hci5: command 0x040f tx timeout
[  703.642612][T13757] delete_channel: no stack
[  703.874710][T13725] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  704.075529][T13725] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  704.312429][T13725] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  704.343440][T13725] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  705.486260][T13725] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.599623][T13725] 8021q: adding VLAN 0 to HW filter on device team0
[  705.639701][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  705.658744][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  705.671390][T13888] netlink: 'syz.4.3043': attribute type 3 has an invalid length.
[  705.715677][ T4283] Bluetooth: hci5: command 0x0419 tx timeout
[  705.726826][T13888] netlink: 55364 bytes leftover after parsing attributes in process `syz.4.3043'.
[  706.049936][ T4362] bond0: (slave wlan1): Releasing backup interface
[  706.125832][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  706.143452][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  706.174566][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.181837][ T9604] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.251882][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  706.320142][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  706.358546][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  706.425714][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.432898][ T9604] bridge0: port 2(bridge_slave_1) entered forwarding state
[  707.915976][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  707.957598][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  707.995519][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  708.011293][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  708.045616][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  708.086733][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  708.110769][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  708.137033][ T4362] device vlan0 left promiscuous mode
[  708.142738][ T4362] À: port 1(vlan0) entered disabled state
[  708.185926][ T4362] device hsr_slave_0 left promiscuous mode
[  708.215152][ T4362] device hsr_slave_1 left promiscuous mode
[  708.243466][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.265193][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  708.295028][ T4362] device bridge_slave_1 left promiscuous mode
[  708.301358][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.338824][ T4362] device bridge_slave_0 left promiscuous mode
[  708.355249][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.427974][ T4362] device veth1_macvtap left promiscuous mode
[  708.434102][ T4362] device veth0_macvtap left promiscuous mode
[  708.455532][ T4362] device veth1_vlan left promiscuous mode
[  708.590887][T13928] netlink: 'syz.3.3059': attribute type 3 has an invalid length.
[  708.626615][T13928] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3059'.
[  709.071399][ T4362] team0 (unregistering): Port device geneve1 removed
[  709.512786][T13937] netlink: 'syz.1.3061': attribute type 3 has an invalid length.
[  709.521529][T13937] netlink: 55364 bytes leftover after parsing attributes in process `syz.1.3061'.
[  709.990668][ T4362] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  710.072835][ T4362] team0 (unregistering): Port device team_slave_1 removed
[  710.203000][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  710.639749][ T4362] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  710.649025][ T4362] bond0 (unregistering): Released all slaves
[  710.743883][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  710.759558][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  710.769917][T13926] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.3058'.
[  710.799903][T13725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  710.832606][T13725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  710.847676][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  710.862588][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  711.243189][T13954] netlink: 'syz.3.3068': attribute type 10 has an invalid length.
[  711.261662][T13954] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[  712.478685][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  712.494822][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  712.512247][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.572772][T13969] netlink: 'syz.4.3073': attribute type 10 has an invalid length.
[  713.341741][T13969] device veth0_vlan left promiscuous mode
[  713.394822][T13969] device veth0_vlan entered promiscuous mode
[  713.416410][T13969] team0: Device veth0_vlan failed to register rx_handler
[  713.592122][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  713.616637][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  713.700259][T13971] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3073'.
[  713.833683][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.028892][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.707765][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  714.738909][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  714.806557][T13725] device veth0_vlan entered promiscuous mode
[  714.815877][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  714.926326][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  714.944615][T13725] device veth1_vlan entered promiscuous mode
[  715.102194][T13989] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3080'.
[  715.256279][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  715.296535][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  715.326166][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  715.387075][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  715.401648][T13725] device veth0_macvtap entered promiscuous mode
[  715.424008][T13725] device veth1_macvtap entered promiscuous mode
[  715.467805][T13999] netlink: 'syz.3.3083': attribute type 13 has an invalid length.
[  715.492655][T13999] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.3083'.
[  715.535557][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  715.557539][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.585344][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  715.598099][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.638969][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  715.665059][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.686660][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.695129][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  715.738449][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  715.766357][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  715.780291][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  715.803207][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.816015][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.827058][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.843759][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.854062][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.877719][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.910868][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.932259][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  715.949789][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  715.970001][T13998] Â: renamed from pim6reg1
[  716.010888][T13725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.033056][T13725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.043139][T13725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.058323][T13725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.310886][ T9612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.331226][ T9612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.416971][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  716.531934][ T9612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.551136][ T9612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.591658][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  717.176754][T14029] netlink: 'syz.3.3093': attribute type 1 has an invalid length.
[  717.199391][T14029] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3093'.
[  717.465631][T14031] can: request_module (can-proto-0) failed.
[  717.840247][T14045] netlink: 'syz.4.3099': attribute type 3 has an invalid length.
[  717.889230][T14045] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3099'.
[  718.750858][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  718.762472][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  718.772433][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  718.781494][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  718.795949][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  718.803486][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  718.953997][ T9590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.149736][ T9590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.414539][ T9590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.577177][ T9590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.959918][T14078] netlink: 'syz.3.3110': attribute type 3 has an invalid length.
[  719.983826][T14078] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3110'.
[  720.014567][T14052] chnl_net:caif_netlink_parms(): no params data found
[  720.188407][T14082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3111'.
[  720.311048][T14082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3111'.
[  720.382427][T14085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3111'.
[  720.512681][T14091] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3111'.
[  720.611241][T14086] device syzkaller0 entered promiscuous mode
[  720.652609][T14101] netlink: 'syz.0.3114': attribute type 3 has an invalid length.
[  720.660941][T14101] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3114'.
[  720.835585][ T4281] Bluetooth: hci2: command 0x0409 tx timeout
[  720.990491][T14052] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.998079][T14052] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.010875][T14052] device bridge_slave_0 entered promiscuous mode
[  721.076420][T14108] netlink: 'syz.3.3115': attribute type 10 has an invalid length.
[  721.123643][T14052] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.144137][T14052] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.162078][T14052] device bridge_slave_1 entered promiscuous mode
[  721.458612][T14116] delete_channel: no stack
[  721.492396][T14116] delete_channel: no stack
[  722.915355][ T4281] Bluetooth: hci2: command 0x041b tx timeout
[  724.220989][T14138] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3124'.
[  724.276586][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.452560][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.634415][T14052] team0: Port device team_slave_0 added
[  724.872100][T14052] team0: Port device team_slave_1 added
[  724.995520][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[  725.104797][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.147636][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.184741][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.246914][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  725.262653][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.348388][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  725.724841][T14052] device hsr_slave_0 entered promiscuous mode
[  725.747881][T14052] device hsr_slave_1 entered promiscuous mode
[  725.805579][T14052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  725.854455][T14184] FAULT_INJECTION: forcing a failure.
[  725.854455][T14184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.862055][T14052] Cannot create hsr debugfs directory
[  725.894913][T14186] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3137'.
[  725.918118][T14184] CPU: 1 PID: 14184 Comm: syz.0.3138 Not tainted syzkaller #0
[  725.925670][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  725.935791][T14184] Call Trace:
[  725.939115][T14184]  <TASK>
[  725.942086][T14184]  dump_stack_lvl+0x188/0x24e
[  725.946927][T14184]  ? show_regs_print_info+0x12/0x12
[  725.952199][T14184]  ? load_image+0x400/0x400
[  725.956764][T14184]  ? __lock_acquire+0x7d10/0x7d10
[  725.961853][T14184]  should_fail_ex+0x399/0x4d0
[  725.966646][T14184]  _copy_from_user+0x2c/0x170
[  725.971385][T14184]  generic_map_update_batch+0x4f3/0x810
[  725.977014][T14184]  ? rcu_read_unlock+0xa0/0xa0
[  725.981918][T14184]  ? __fdget+0x17c/0x200
[  725.986232][T14184]  ? rcu_read_unlock+0xa0/0xa0
[  725.991064][T14184]  bpf_map_do_batch+0x466/0x600
[  725.995996][T14184]  __sys_bpf+0x6f7/0x780
[  726.000309][T14184]  ? bpf_link_show_fdinfo+0x380/0x380
[  726.005761][T14184]  ? lock_chain_count+0x20/0x20
[  726.010680][T14184]  __x64_sys_bpf+0x78/0x90
[  726.015155][T14184]  do_syscall_64+0x4c/0xa0
[  726.019626][T14184]  ? clear_bhb_loop+0x60/0xb0
[  726.024362][T14184]  ? clear_bhb_loop+0x60/0xb0
[  726.029097][T14184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.035057][T14184] RIP: 0033:0x7f9dc3b9bf79
[  726.039526][T14184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.059191][T14184] RSP: 002b:00007f9dc497d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  726.067672][T14184] RAX: ffffffffffffffda RBX: 00007f9dc3e15fa0 RCX: 00007f9dc3b9bf79
[  726.075716][T14184] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  726.083735][T14184] RBP: 00007f9dc497d090 R08: 0000000000000000 R09: 0000000000000000
[  726.091759][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  726.099780][T14184] R13: 00007f9dc3e16038 R14: 00007f9dc3e15fa0 R15: 00007ffd68d0c1b8
[  726.107815][T14184]  </TASK>
[  726.513307][ T9590] device hsr_slave_0 left promiscuous mode
[  726.533719][ T9590] device hsr_slave_1 left promiscuous mode
[  726.559808][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  726.584511][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.626098][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  726.644204][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.674210][ T9590] device bridge_slave_1 left promiscuous mode
[  726.701719][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.773399][ T9590] device bridge_slave_0 left promiscuous mode
[  726.793002][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.823497][T14201] delete_channel: no stack
[  726.843701][T14201] delete_channel: no stack
[  726.911042][ T9590] device veth1_macvtap left promiscuous mode
[  726.927653][ T9590] device veth0_macvtap left promiscuous mode
[  726.947713][ T9590] device veth1_vlan left promiscuous mode
[  727.075247][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[  727.710288][ T9590] team0 (unregistering): Port device team_slave_1 removed
[  728.486387][T14210] device syzkaller0 entered promiscuous mode
[  731.219239][T14235] netlink: 'syz.0.3151': attribute type 21 has an invalid length.
[  731.531147][T14245] netlink: 'syz.4.3155': attribute type 3 has an invalid length.
[  731.587644][T14245] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3155'.
[  731.598864][T14246] netlink: 'syz.3.3154': attribute type 1 has an invalid length.
[  731.638061][T14246] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3154'.
[  732.247767][T14052] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  732.274849][T14052] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  732.291302][T14264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'.
[  732.300503][T14052] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  732.326796][T14052] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  732.624912][T14282] delete_channel: no stack
[  732.637618][T14282] delete_channel: no stack
[  732.735379][T14052] 8021q: adding VLAN 0 to HW filter on device bond0
[  732.938183][T14287] netlink: 'syz.4.3163': attribute type 21 has an invalid length.
[  733.012641][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  733.040047][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  733.150764][T14052] 8021q: adding VLAN 0 to HW filter on device team0
[  733.243804][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  733.293385][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  733.325899][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.333084][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  733.382263][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  733.415624][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  733.432912][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  733.450597][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.457904][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  733.483396][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  733.503142][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  733.551244][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  733.584520][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  733.686758][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  733.707211][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  733.734001][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  733.760598][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  733.802898][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  733.864044][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  733.903963][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  733.973332][T14052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  734.203965][T14305] netlink: 'syz.3.3169': attribute type 3 has an invalid length.
[  734.250810][T14305] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3169'.
[  734.952637][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.981696][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  734.995652][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  735.041836][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  735.087620][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  735.152178][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  735.178097][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  735.218843][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  735.247213][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  735.279602][T14052] device veth0_vlan entered promiscuous mode
[  735.313554][T14052] device veth1_vlan entered promiscuous mode
[  735.504882][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  735.521460][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  735.560942][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  735.592317][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  735.626077][T14052] device veth0_macvtap entered promiscuous mode
[  735.664046][T14052] device veth1_macvtap entered promiscuous mode
[  735.772016][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.826283][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.880936][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.918195][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.957791][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.995919][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.037214][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.121239][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  736.167536][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  736.225583][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  736.266150][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  736.305707][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  736.340673][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.413733][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  736.461654][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.497586][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  736.529046][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.562022][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.622345][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  736.670416][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  736.728304][T14052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.771137][T14052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.825205][T14052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.855203][T14052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.142322][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.171025][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.207807][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  737.245368][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.259693][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.281432][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  738.914307][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  738.939170][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  738.948048][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  738.960732][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  738.969524][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  738.977270][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  741.085648][T13726] Bluetooth: hci1: command 0x0409 tx timeout
[  743.162840][T13726] Bluetooth: hci1: command 0x041b tx timeout
[  745.240459][T13726] Bluetooth: hci1: command 0x040f tx timeout
[  746.186301][T14419] netlink: 'syz.4.3199': attribute type 10 has an invalid length.
[  746.203252][T14419] device syz_tun entered promiscuous mode
[  746.273625][T14419] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  746.504452][T14442] netlink: 'syz.2.3200': attribute type 6 has an invalid length.
[  746.528893][T14442] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3200'.
[  746.956720][T14409] chnl_net:caif_netlink_parms(): no params data found
[  747.014060][ T4362] device 0 left promiscuous mode
[  747.128197][ T4362] tipc: Left network mode
[  747.144155][T14409] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.151953][T14409] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.161030][T14409] device bridge_slave_0 entered promiscuous mode
[  747.178426][T14409] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.185966][T14409] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.194551][T14409] device bridge_slave_1 entered promiscuous mode
[  747.246010][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  747.252395][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  747.309769][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.315637][T13726] Bluetooth: hci1: command 0x0419 tx timeout
[  747.466227][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.060996][T14409] team0: Port device team_slave_0 added
[  748.130961][T14409] team0: Port device team_slave_1 added
[  748.335745][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.342874][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.410303][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  748.443734][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  748.456063][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.609428][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  748.920901][T14409] device hsr_slave_0 entered promiscuous mode
[  749.057011][T14409] device hsr_slave_1 entered promiscuous mode
[  749.074364][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  749.137833][T14409] Cannot create hsr debugfs directory
[  749.765940][T14516] netlink: 'syz.4.3213': attribute type 11 has an invalid length.
[  749.843328][T14516] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3213'.
[  749.982457][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  750.427125][ T4362] device erspan0 left promiscuous mode
[  750.442854][ T4362] Ÿë
: port 1(erspan0) entered disabled state
[  750.466220][T14511] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3213'.
[  750.495964][T14511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  750.525072][T14520] netlink: 'syz.2.3214': attribute type 10 has an invalid length.
[  750.596128][T14520] team0: Device veth1_vlan failed to register rx_handler
[  750.828144][T13726] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  753.243920][T14579] netlink: 'syz.3.3228': attribute type 10 has an invalid length.
[  753.259689][T13726] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  753.317524][T14579] team0: Device veth1_vlan failed to register rx_handler
[  753.474456][ T4362] device vlan0 left promiscuous mode
[  753.495282][ T4362] À: port 1(vlan0) entered disabled state
[  753.546751][ T4362] device hsr_slave_0 left promiscuous mode
[  753.582906][ T4362] device veth0_macvtap left promiscuous mode
[  753.612506][ T4362] device veth1_vlan left promiscuous mode
[  753.635190][ T4362] device veth0_vlan left promiscuous mode
[  753.906500][T14589] netlink: 'syz.0.3232': attribute type 11 has an invalid length.
[  753.919182][T14589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3232'.
[  753.960256][T14589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  755.841422][T13726] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[  756.345352][T14586] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3232'.
[  756.375533][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  756.483380][T14409] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  756.564617][T14409] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  756.594732][T14409] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  756.649700][T14409] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  758.012951][T14409] 8021q: adding VLAN 0 to HW filter on device bond0
[  758.100844][ T9616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  758.124569][ T9616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  758.188302][T14409] 8021q: adding VLAN 0 to HW filter on device team0
[  758.231716][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  758.242774][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  758.253590][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.260914][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  758.283448][T13726] Bluetooth: hci5: unexpected event 0x31 length: 15 > 6
[  758.301890][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  758.338061][T14659] netlink: 'syz.2.3251': attribute type 3 has an invalid length.
[  758.359561][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  758.373494][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  758.383317][T14659] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3251'.
[  758.404291][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.411523][ T9619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  758.450143][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  758.491485][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  758.521030][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  758.536998][T14668] netlink: 'syz.0.3254': attribute type 29 has an invalid length.
[  758.585086][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  758.616686][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  758.637099][T14668] netlink: 'syz.0.3254': attribute type 29 has an invalid length.
[  758.646180][T14670] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3255'.
[  758.748354][T14670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  758.897884][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  758.915948][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  758.938592][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  758.954470][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  758.997750][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  759.020406][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  759.088502][T14409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  759.089285][T14671] netlink: 'syz.3.3255': attribute type 11 has an invalid length.
[  759.135800][T14671] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3255'.
[  759.231797][T14671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  759.566061][T14691] netlink: 'syz.4.3260': attribute type 10 has an invalid length.
[  759.720228][T14696] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3262'.
[  759.760725][T14696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  759.861238][T13726] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  760.139381][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  760.181293][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  760.227618][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  760.297275][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  760.326309][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  760.424742][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  760.454491][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  760.498065][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  760.516875][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  760.535754][T14409] device veth0_vlan entered promiscuous mode
[  760.571292][T14409] device veth1_vlan entered promiscuous mode
[  760.581154][T14711] netlink: 'syz.0.3267': attribute type 3 has an invalid length.
[  760.598907][T14711] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3267'.
[  760.663467][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  760.684055][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  760.693355][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  760.709446][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  760.724346][T14409] device veth0_macvtap entered promiscuous mode
[  760.741959][T14409] device veth1_macvtap entered promiscuous mode
[  760.796848][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.814145][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.826662][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.844767][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.873318][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.891063][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.904100][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.923221][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.936228][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  760.956608][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  760.981680][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  761.018302][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  761.045993][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  761.081398][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  761.107222][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  761.149365][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  761.169972][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  761.184678][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  761.201071][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  761.212082][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  761.244867][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  761.269045][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  761.288837][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  761.332292][T14409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  761.363948][T14409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  761.388315][T14409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  761.423240][T14409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  761.591251][T13726] Bluetooth: hci5: unexpected event 0x31 length: 15 > 6
[  761.657124][ T9606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  761.681514][ T9606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.704285][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  761.765059][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  761.802274][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.840861][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  762.989089][T14749] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3189'.
[  763.411713][T14759] netlink: 'syz.4.3284': attribute type 3 has an invalid length.
[  763.449764][T14759] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3284'.
[  763.702083][T13726] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  764.676860][T13726] Bluetooth: hci0: command 0x0406 tx timeout
[  765.624882][T14807] netlink: 'syz.0.3303': attribute type 3 has an invalid length.
[  765.628191][T13726] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  765.655407][T14807] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3303'.
[  765.777431][T14815] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3305'.
[  765.794801][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'.
[  765.820931][T14818] netlink: 'syz.2.3306': attribute type 16 has an invalid length.
[  765.831847][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'.
[  765.852898][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'.
[  765.878604][T14818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3306'.
[  765.896604][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'.
[  766.450443][T14830] Dead loop on virtual device ip6_vti0, fix it urgently!
[  768.980277][T14864] netlink: 'syz.3.3322': attribute type 3 has an invalid length.
[  769.116790][T14864] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3322'.
[  771.443201][T14907] FAULT_INJECTION: forcing a failure.
[  771.443201][T14907] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  771.515494][T14902] netlink: 'syz.3.3336': attribute type 3 has an invalid length.
[  771.530957][T14907] CPU: 0 PID: 14907 Comm: syz.4.3338 Not tainted syzkaller #0
[  771.538546][T14907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  771.548665][T14907] Call Trace:
[  771.551992][T14907]  <TASK>
[  771.554997][T14907]  dump_stack_lvl+0x188/0x24e
[  771.559755][T14907]  ? show_regs_print_info+0x12/0x12
[  771.566540][T14907]  ? load_image+0x400/0x400
[  771.571211][T14907]  ? __lock_acquire+0x7d10/0x7d10
[  771.576340][T14907]  should_fail_ex+0x399/0x4d0
[  771.581113][T14907]  _copy_from_user+0x2c/0x170
[  771.587425][T14907]  generic_map_update_batch+0x4a1/0x810
[  771.593054][T14907]  ? rcu_read_unlock+0xa0/0xa0
[  771.597892][T14907]  ? __fdget+0x17c/0x200
[  771.602211][T14907]  ? rcu_read_unlock+0xa0/0xa0
[  771.607030][T14907]  bpf_map_do_batch+0x466/0x600
[  771.611952][T14907]  __sys_bpf+0x6f7/0x780
[  771.616278][T14907]  ? bpf_link_show_fdinfo+0x380/0x380
[  771.621754][T14907]  ? lock_chain_count+0x20/0x20
[  771.626687][T14907]  __x64_sys_bpf+0x78/0x90
[  771.631173][T14907]  do_syscall_64+0x4c/0xa0
[  771.635677][T14907]  ? clear_bhb_loop+0x60/0xb0
[  771.640432][T14907]  ? clear_bhb_loop+0x60/0xb0
[  771.645157][T14907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  771.651087][T14907] RIP: 0033:0x7fbd4b19bf79
[  771.655532][T14907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.675203][T14907] RSP: 002b:00007fbd4bfea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  771.683668][T14907] RAX: ffffffffffffffda RBX: 00007fbd4b415fa0 RCX: 00007fbd4b19bf79
[  771.691675][T14907] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  771.699677][T14907] RBP: 00007fbd4bfea090 R08: 0000000000000000 R09: 0000000000000000
[  771.707675][T14907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  771.715706][T14907] R13: 00007fbd4b416038 R14: 00007fbd4b415fa0 R15: 00007ffd7ad0cbf8
[  771.723729][T14907]  </TASK>
[  771.759893][T14902] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3336'.
[  774.424734][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'.
[  775.421748][T14968] netlink: 1011 bytes leftover after parsing attributes in process `syz.2.3359'.
[  775.477561][T14968] bridge_slave_1: default FDB implementation only supports local addresses
[  776.632187][T14991] netlink: 'syz.2.3368': attribute type 3 has an invalid length.
[  776.755068][T14991] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3368'.
[  776.900047][T15000] netlink: 'syz.1.3371': attribute type 1 has an invalid length.
[  776.920234][T15000] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3371'.
[  777.532057][T15010] netlink: 'syz.0.3374': attribute type 3 has an invalid length.
[  777.633811][T15010] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3374'.
[  779.763435][T15065] netlink: 'syz.0.3397': attribute type 3 has an invalid length.
[  779.851299][T15071] netlink: 'syz.3.3401': attribute type 21 has an invalid length.
[  779.909985][T15065] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3397'.
[  779.960497][T15069] netlink: 'syz.1.3400': attribute type 1 has an invalid length.
[  779.973239][T15071] netlink: 'syz.3.3401': attribute type 10 has an invalid length.
[  780.035439][T15069] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3400'.
[  780.117780][T15071] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  780.140096][T15078] netlink: 'syz.3.3401': attribute type 21 has an invalid length.
[  780.184836][T15078] IPv6: NLM_F_CREATE should be specified when creating new route
[  780.222961][T15078] IPv6: Can't replace route, no match found
[  780.598832][T15090] tap0: tun_chr_ioctl cmd 1074025677
[  780.610055][T15090] tap0: linktype set to 804
[  780.964806][T15107] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3412'.
[  781.471984][T15115] netlink: 'syz.1.3415': attribute type 3 has an invalid length.
[  781.513439][T15115] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3415'.
[  781.884580][T15121] netlink: 'syz.0.3418': attribute type 3 has an invalid length.
[  781.905208][T15121] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3418'.
[  784.061961][T15137] netlink: 'syz.0.3424': attribute type 2 has an invalid length.
[  784.083617][T15137] netlink: 'syz.0.3424': attribute type 1 has an invalid length.
[  784.101410][T15137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3424'.
[  784.175674][T15142] netlink: 'syz.1.3425': attribute type 10 has an invalid length.
[  784.184326][T15142] team0: Device vxcan1 is up. Set it down before adding it as a team port
[  784.362288][T15152] netlink: 'syz.0.3429': attribute type 3 has an invalid length.
[  784.406492][T15152] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3429'.
[  784.508003][T15155] netlink: 'syz.4.3430': attribute type 10 has an invalid length.
[  784.534043][T15158] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3433'.
[  784.599373][T15158] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  784.625185][T15158] CPU: 1 PID: 15158 Comm: syz.3.3433 Not tainted syzkaller #0
[  784.632784][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  784.642944][T15158] Call Trace:
[  784.646312][T15158]  <TASK>
[  784.649329][T15158]  dump_stack_lvl+0x188/0x24e
[  784.654142][T15158]  ? show_regs_print_info+0x12/0x12
[  784.659470][T15158]  ? load_image+0x400/0x400
[  784.664166][T15158]  sysfs_warn_dup+0x8a/0xa0
[  784.668791][T15158]  sysfs_do_create_link_sd+0xc0/0x110
[  784.674301][T15158]  device_add+0x7ed/0xfb0
[  784.678811][T15158]  wiphy_register+0x1d9f/0x2ac0
[  784.683872][T15158]  ? cfg80211_event_work+0x40/0x40
[  784.689109][T15158]  ? minstrel_ht_alloc+0x894/0xa20
[  784.694370][T15158]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  784.700576][T15158]  ieee80211_register_hw+0x2d00/0x39f0
[  784.706225][T15158]  ? ieee80211_register_hw+0xeb1/0x39f0
[  784.712495][T15158]  ? ieee80211_register_hw+0xeb1/0x39f0
[  784.718204][T15158]  ? ieee80211_tasklet_handler+0x20/0x20
[  784.724001][T15158]  ? memset+0x1e/0x40
[  784.728105][T15158]  ? __hrtimer_init+0x186/0x270
[  784.733137][T15158]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  784.739177][T15158]  hwsim_new_radio_nl+0xafa/0xce0
[  784.744393][T15158]  genl_family_rcv_msg_doit+0x22a/0x330
[  784.750137][T15158]  ? end_current_label_crit_section+0x170/0x170
[  784.756503][T15158]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  784.762582][T15158]  ? bpf_lsm_capable+0x5/0x10
[  784.767393][T15158]  ? security_capable+0x85/0xb0
[  784.772354][T15158]  genl_rcv_msg+0x604/0x790
[  784.777002][T15158]  ? genl_bind+0x360/0x360
[  784.781599][T15158]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  784.788088][T15158]  netlink_rcv_skb+0x1fb/0x450
[  784.792930][T15158]  ? genl_bind+0x360/0x360
[  784.797438][T15158]  ? netlink_ack+0x1170/0x1170
[  784.802311][T15158]  ? down_read+0x1a8/0x2d0
[  784.806833][T15158]  genl_rcv+0x24/0x40
[  784.810900][T15158]  netlink_unicast+0x74d/0x8d0
[  784.815799][T15158]  netlink_sendmsg+0x8ad/0xbd0
[  784.820679][T15158]  ? netlink_getsockopt+0x550/0x550
[  784.825959][T15158]  ? aa_sock_msg_perm+0x94/0x150
[  784.831115][T15158]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  784.836468][T15158]  ? security_socket_sendmsg+0x7c/0xa0
[  784.842007][T15158]  ? netlink_getsockopt+0x550/0x550
[  784.847281][T15158]  ____sys_sendmsg+0x5be/0x970
[  784.852165][T15158]  ? __sys_sendmsg_sock+0x30/0x30
[  784.857259][T15158]  ? __import_iovec+0x315/0x500
[  784.862199][T15158]  ? import_iovec+0x6f/0xa0
[  784.866784][T15158]  ___sys_sendmsg+0x2a2/0x360
[  784.871532][T15158]  ? try_to_wake_up+0x6ae/0x1080
[  784.876584][T15158]  ? __sys_sendmsg+0x290/0x290
[  784.881507][T15158]  ? __lock_acquire+0x7d10/0x7d10
[  784.886599][T15158]  ? rcu_read_lock_sched_held+0x86/0x110
[  784.892398][T15158]  __se_sys_sendmsg+0x1bb/0x2a0
[  784.897317][T15158]  ? ct_nmi_exit+0x145/0x1c0
[  784.901988][T15158]  ? __x64_sys_sendmsg+0x80/0x80
[  784.907173][T15158]  ? lockdep_hardirqs_on+0x94/0x140
[  784.912450][T15158]  do_syscall_64+0x4c/0xa0
[  784.916931][T15158]  ? clear_bhb_loop+0x60/0xb0
[  784.921677][T15158]  ? clear_bhb_loop+0x60/0xb0
[  784.926428][T15158]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  784.932384][T15158] RIP: 0033:0x7f212ad9bf79
[  784.936894][T15158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.956587][T15158] RSP: 002b:00007f212bb70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  784.965254][T15158] RAX: ffffffffffffffda RBX: 00007f212b015fa0 RCX: 00007f212ad9bf79
[  784.973294][T15158] RDX: 0000000007000000 RSI: 0000200000000000 RDI: 0000000000000005
[  784.981511][T15158] RBP: 00007f212ae327e0 R08: 0000000000000000 R09: 0000000000000000
[  784.989547][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  784.997574][T15158] R13: 00007f212b016038 R14: 00007f212b015fa0 R15: 00007ffd1cf7a398
[  785.005671][T15158]  </TASK>
[  786.530988][T15184] netlink: 'syz.0.3442': attribute type 16 has an invalid length.
[  786.575087][T15184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3442'.
[  786.913935][T15203] netlink: 'syz.2.3447': attribute type 1 has an invalid length.
[  787.028783][T15203] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3447'.
[  790.493601][T15274] netlink: 'syz.2.3472': attribute type 9 has an invalid length.
[  790.578932][T15274] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3472'.
[  792.480483][T15285] netlink: 'syz.1.3478': attribute type 3 has an invalid length.
[  792.556784][T15285] netlink: 'syz.1.3478': attribute type 1 has an invalid length.
[  792.610612][T15285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3478'.
[  795.187519][T15306] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3485'.
[  795.187996][T15302] netlink: 'syz.0.3484': attribute type 3 has an invalid length.
[  795.221634][T15302] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3484'.
[  795.250553][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  798.413751][T15331] netlink: 'syz.0.3495': attribute type 2 has an invalid length.
[  798.643325][T15331] device 0 entered promiscuous mode
[  798.878263][T15345] netlink: 'syz.1.3497': attribute type 4 has an invalid length.
[  798.907742][T15345] netlink: 'syz.1.3497': attribute type 1 has an invalid length.
[  798.941822][T15345] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3497'.
[  799.243694][T15352] netlink: 'syz.0.3500': attribute type 3 has an invalid length.
[  799.274432][T15352] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3500'.
[  799.711767][T15361] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.720691][T15361] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.465707][T13726] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  801.685858][T15409] netlink: 'syz.0.3521': attribute type 3 has an invalid length.
[  801.774494][T15409] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3521'.
[  803.990130][T15459] netlink: 'syz.2.3541': attribute type 3 has an invalid length.
[  804.018757][T15459] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3541'.
[  804.308784][T15464] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3542'.
[  804.328362][T15463] delete_channel: no stack
[  804.633741][T15477] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3547'.
[  805.342791][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'.
[  805.630864][T15498] netlink: 'syz.1.3555': attribute type 10 has an invalid length.
[  805.840245][T15503] device syzkaller0 entered promiscuous mode
[  806.056349][T15514] netlink: 'syz.1.3561': attribute type 3 has an invalid length.
[  806.064459][T15514] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.3561'.
[  808.677948][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  808.684359][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  809.119066][T15568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3579'.
[  809.692047][T15579] netlink: 'syz.0.3584': attribute type 3 has an invalid length.
[  809.718574][T15580] netlink: 'syz.3.3583': attribute type 3 has an invalid length.
[  809.808649][T15579] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3584'.
[  809.855728][T15580] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3583'.
[  810.734011][T15611] netlink: 'syz.2.3595': attribute type 2 has an invalid length.
[  810.749066][T15610] netlink: 'syz.0.3604': attribute type 3 has an invalid length.
[  810.791211][T15610] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3604'.
[  811.499312][T15611] device 0 entered promiscuous mode
[  812.525571][T15640] netlink: 'syz.1.3613': attribute type 1 has an invalid length.
[  812.575264][T15640] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3613'.
[  812.643088][T15650] mac80211_hwsim hwsim39 »»»»»»l!: renamed from wlan0
[  813.006184][T15659] netlink: 'syz.3.3610': attribute type 3 has an invalid length.
[  813.014477][T15659] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3610'.
[  813.776420][T15679] device syzkaller0 entered promiscuous mode
[  814.061200][T13726] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  815.751082][T15712] netlink: 'syz.2.3632': attribute type 3 has an invalid length.
[  815.790417][T15712] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3632'.
[  819.250204][T15706] netlink: 'syz.3.3629': attribute type 10 has an invalid length.
[  819.261595][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3629'.
[  819.274472][T15706] bridge0: port 4(veth0_vlan) entered blocking state
[  819.287362][T15706] bridge0: port 4(veth0_vlan) entered disabled state
[  819.298817][T15706] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  819.420191][T15725] netlink: 'syz.0.3636': attribute type 10 has an invalid length.
[  820.900339][T15759] netlink: 'syz.0.3650': attribute type 3 has an invalid length.
[  820.936328][T15759] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3650'.
[  820.995159][ T4281] Bluetooth: hci5: command 0x0406 tx timeout
[  821.065568][T15764] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3652'.
[  824.472688][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'.
[  824.791443][T15803] netlink: 'syz.4.3666': attribute type 10 has an invalid length.
[  824.894614][T15805] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3664'.
[  824.987949][T15805] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  825.606841][T15813] netlink: 'syz.0.3667': attribute type 2 has an invalid length.
[  825.815706][T15815] device syzkaller0 entered promiscuous mode
[  826.351477][T15824] netlink: 'syz.2.3672': attribute type 3 has an invalid length.
[  826.395725][T15824] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3672'.
[  827.397002][T15840] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3677'.
[  828.633223][T15865] FAULT_INJECTION: forcing a failure.
[  828.633223][T15865] name failslab, interval 1, probability 0, space 0, times 0
[  828.658158][T15865] CPU: 1 PID: 15865 Comm: syz.0.3687 Not tainted syzkaller #0
[  828.665709][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  828.675833][T15865] Call Trace:
[  828.679159][T15865]  <TASK>
[  828.682143][T15865]  dump_stack_lvl+0x188/0x24e
[  828.686888][T15865]  ? show_regs_print_info+0x12/0x12
[  828.692152][T15865]  ? load_image+0x400/0x400
[  828.696718][T15865]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  828.702762][T15865]  should_fail_ex+0x399/0x4d0
[  828.707502][T15865]  should_failslab+0x5/0x20
[  828.712063][T15865]  slab_pre_alloc_hook+0x59/0x310
[  828.717131][T15865]  ? lockdep_hardirqs_on+0x94/0x140
[  828.722376][T15865]  kmem_cache_alloc+0x56/0x2f0
[  828.727193][T15865]  ? skb_clone+0x1e7/0x370
[  828.731672][T15865]  skb_clone+0x1e7/0x370
[  828.735980][T15865]  bpf_clone_redirect+0x163/0x4a0
[  828.741090][T15865]  bpf_prog_dde6c29962cc7727+0x56/0x5b
[  828.746603][T15865]  ? __kprobes_text_end+0x92c00/0x92c00
[  828.752204][T15865]  ? lockdep_hardirqs_on+0x94/0x140
[  828.757472][T15865]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  828.763700][T15865]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  828.769999][T15865]  ? seqcount_lockdep_reader_access+0x196/0x1d0
[  828.776306][T15865]  ? ktime_get_real_ts64+0x440/0x440
[  828.781651][T15865]  ? read_lock_is_recursive+0x10/0x10
[  828.787102][T15865]  ? __cant_sleep+0x220/0x220
[  828.791838][T15865]  ? ktime_get+0x247/0x270
[  828.796322][T15865]  bpf_test_run+0x2b6/0x830
[  828.800896][T15865]  ? convert___skb_to_skb+0x580/0x580
[  828.806339][T15865]  ? convert___skb_to_skb+0x3d/0x580
[  828.811682][T15865]  bpf_prog_test_run_skb+0xaa6/0x12a0
[  828.817133][T15865]  ? cpu_online+0xa0/0xa0
[  828.821518][T15865]  bpf_prog_test_run+0x31e/0x390
[  828.826522][T15865]  __sys_bpf+0x62b/0x780
[  828.830820][T15865]  ? bpf_link_show_fdinfo+0x380/0x380
[  828.836262][T15865]  ? lock_chain_count+0x20/0x20
[  828.841172][T15865]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  828.847214][T15865]  __x64_sys_bpf+0x78/0x90
[  828.851689][T15865]  do_syscall_64+0x4c/0xa0
[  828.856169][T15865]  ? clear_bhb_loop+0x60/0xb0
[  828.860918][T15865]  ? clear_bhb_loop+0x60/0xb0
[  828.865658][T15865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  828.871628][T15865] RIP: 0033:0x7f9dc3b9bf79
[  828.876093][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  828.895762][T15865] RSP: 002b:00007f9dc497d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  828.904236][T15865] RAX: ffffffffffffffda RBX: 00007f9dc3e15fa0 RCX: 00007f9dc3b9bf79
[  828.912262][T15865] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a
[  828.920289][T15865] RBP: 00007f9dc497d090 R08: 0000000000000000 R09: 0000000000000000
[  828.928318][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  828.936343][T15865] R13: 00007f9dc3e16038 R14: 00007f9dc3e15fa0 R15: 00007ffd68d0c1b8
[  828.944384][T15865]  </TASK>
[  829.646570][T15880] netlink: 'syz.2.3693': attribute type 29 has an invalid length.
[  829.684563][T15880] netlink: 'syz.2.3693': attribute type 29 has an invalid length.
[  830.284228][T15898] netlink: 'syz.4.3700': attribute type 21 has an invalid length.
[  830.352808][T15898] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3700'.
[  830.859640][T15903] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3703'.
[  836.387462][T15951] netlink: 'syz.4.3719': attribute type 10 has an invalid length.
[  837.732833][T15988] netlink: 'syz.1.3735': attribute type 1 has an invalid length.
[  837.830036][T15988] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3735'.
[  837.928719][T15984] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3732'.
[  841.482715][T13726] Bluetooth: hci2: command 0x0406 tx timeout
[  844.806308][T16029] netlink: 'syz.3.3753': attribute type 3 has an invalid length.
[  844.845803][T16029] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3753'.
[  845.842678][T16044] netlink: 'syz.1.3758': attribute type 39 has an invalid length.
[  846.032445][T16048] netlink: 'syz.3.3759': attribute type 6 has an invalid length.
[  846.563311][T16062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3764'.
[  846.705502][T16066] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3766'.
[  847.436206][T16083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3774'.
[  848.050184][T16092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3778'.
[  848.326452][T16102] netlink: 'syz.0.3780': attribute type 6 has an invalid length.
[  849.038417][T16121] netlink: 'syz.3.3787': attribute type 21 has an invalid length.
[  849.672600][T16140] netlink: 'syz.3.3796': attribute type 1 has an invalid length.
[  849.704604][T16140] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3796'.
[  853.082419][T16153] netlink: 'syz.1.3800': attribute type 6 has an invalid length.
[  853.614103][T16179] netlink: 'syz.1.3812': attribute type 3 has an invalid length.
[  853.631163][T16179] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.3812'.
[  854.309576][T16189] netlink: 'syz.4.3813': attribute type 10 has an invalid length.
[  854.340853][T16189] team0: Device veth1_vlan failed to register rx_handler
[  854.559949][T16194] netlink: 'syz.0.3815': attribute type 2 has an invalid length.
[  854.818026][T16198] netlink: 'syz.1.3817': attribute type 3 has an invalid length.
[  854.834598][T16198] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3817'.
[  854.860318][T16194] device 1 entered promiscuous mode
[  854.943660][T16204] netlink: 'syz.2.3820': attribute type 10 has an invalid length.
[  854.963101][T16204] team0: Port device netdevsim0 added
[  855.187387][T16212] netlink: 'syz.3.3824': attribute type 10 has an invalid length.
[  855.231129][T16212] team0: Device vxcan1 is up. Set it down before adding it as a team port
[  855.378635][T16218] netlink: 'syz.4.3828': attribute type 3 has an invalid length.
[  855.412796][T16218] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3828'.
[  858.289132][T16288] netlink: 'syz.4.3853': attribute type 3 has an invalid length.
[  858.311269][T16288] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3853'.
[  858.420915][T16287] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3852'.
[  858.452289][T16287] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  858.506635][T16293] netlink: 'syz.0.3855': attribute type 10 has an invalid length.
[  858.549610][T16293] device syz_tun entered promiscuous mode
[  858.677986][T16293] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  859.122571][T16302] can: request_module (can-proto-0) failed.
[  859.133472][T16307] can: request_module (can-proto-0) failed.
[  860.126146][T16321] netlink: 'syz.4.3863': attribute type 10 has an invalid length.
[  860.239154][T16321] bond0: (slave bond_slave_0): Releasing backup interface
[  860.386506][T16319] delete_channel: no stack
[  860.660939][T16331] netlink: 'syz.4.3867': attribute type 29 has an invalid length.
[  860.724522][T16329] netlink: 'syz.0.3866': attribute type 3 has an invalid length.
[  860.724611][T16331] netlink: 'syz.4.3867': attribute type 29 has an invalid length.
[  860.772788][T16329] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3866'.
[  861.668491][T16353] netlink: 'syz.3.3875': attribute type 10 has an invalid length.
[  861.771631][T16353] bond0: (slave wlan1): Releasing backup interface
[  861.929241][T16353] device wlan1 entered promiscuous mode
[  861.956277][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  862.033241][T16353] team0: Device wlan1 is of different type
[  862.310933][T16356] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3876'.
[  862.341468][T16366] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3878'.
[  864.038725][T16395] netlink: 'syz.0.3888': attribute type 3 has an invalid length.
[  864.091143][T16395] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.3888'.
[  864.162045][T16393] netlink: 'syz.4.3889': attribute type 4 has an invalid length.
[  864.312265][T16404] FAULT_INJECTION: forcing a failure.
[  864.312265][T16404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  864.338345][T16404] CPU: 0 PID: 16404 Comm: syz.1.3892 Not tainted syzkaller #0
[  864.345892][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  864.355993][T16404] Call Trace:
[  864.359333][T16404]  <TASK>
[  864.362325][T16404]  dump_stack_lvl+0x188/0x24e
[  864.367071][T16404]  ? show_regs_print_info+0x12/0x12
[  864.372388][T16404]  ? load_image+0x400/0x400
[  864.376963][T16404]  ? __lock_acquire+0x7d10/0x7d10
[  864.382053][T16404]  should_fail_ex+0x399/0x4d0
[  864.386802][T16404]  _copy_from_user+0x2c/0x170
[  864.391660][T16404]  ___sys_sendmsg+0x1c3/0x360
[  864.396396][T16404]  ? __sys_sendmsg+0x290/0x290
[  864.401252][T16404]  ? __lock_acquire+0x7d10/0x7d10
[  864.406349][T16404]  __se_sys_sendmsg+0x1bb/0x2a0
[  864.411241][T16404]  ? ct_nmi_exit+0x145/0x1c0
[  864.415855][T16404]  ? __x64_sys_sendmsg+0x80/0x80
[  864.420860][T16404]  ? lockdep_hardirqs_on+0x94/0x140
[  864.426082][T16404]  do_syscall_64+0x4c/0xa0
[  864.430527][T16404]  ? clear_bhb_loop+0x60/0xb0
[  864.435241][T16404]  ? clear_bhb_loop+0x60/0xb0
[  864.439949][T16404]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  864.445886][T16404] RIP: 0033:0x7f6f6879bf79
[  864.450335][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.469991][T16404] RSP: 002b:00007f6f69571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  864.478437][T16404] RAX: ffffffffffffffda RBX: 00007f6f68a15fa0 RCX: 00007f6f6879bf79
[  864.486443][T16404] RDX: 00000000000408c4 RSI: 00002000000000c0 RDI: 000000000000000d
[  864.494442][T16404] RBP: 00007f6f69571090 R08: 0000000000000000 R09: 0000000000000000
[  864.502435][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  864.510518][T16404] R13: 00007f6f68a16038 R14: 00007f6f68a15fa0 R15: 00007ffde62ca278
[  864.518526][T16404]  </TASK>
[  864.718561][T16407] netlink: 'syz.3.3903': attribute type 1 has an invalid length.
[  864.745192][T16407] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3903'.
[  864.936526][T16412] netlink: 'syz.4.3893': attribute type 10 has an invalid length.
[  865.037899][T16412] team0: Port device wlan1 added
[  868.954699][T16443] netlink: 'syz.3.3908': attribute type 3 has an invalid length.
[  869.041464][T16443] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3908'.
[  869.714339][T16451] device syzkaller0 entered promiscuous mode
[  870.122792][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  870.129231][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  870.306911][T16468] netlink: 'syz.2.3910': attribute type 10 has an invalid length.
[  870.393203][T16468] team0: Port device wlan1 added
[  871.358534][T16491] netlink: 'syz.1.3922': attribute type 3 has an invalid length.
[  871.375217][T16491] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.3922'.
[  875.407614][T16487] netlink: 'syz.3.3920': attribute type 10 has an invalid length.
[  875.763273][T16498] netlink: 'syz.2.3923': attribute type 22 has an invalid length.
[  875.778053][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'.
[  876.482440][ T4281] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  876.497066][T16519] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3931'.
[  876.731486][T16524] netlink: 'syz.1.3930': attribute type 10 has an invalid length.
[  876.754814][T16528] netlink: 'syz.0.3934': attribute type 1 has an invalid length.
[  876.785410][T16528] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3934'.
[  876.979264][T16534] netlink: 'syz.2.3936': attribute type 3 has an invalid length.
[  877.027910][T16524] team0: Port device wlan1 added
[  877.050577][T16534] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3936'.
[  877.229778][T16544] netlink: 'syz.0.3939': attribute type 10 has an invalid length.
[  880.922151][T16568] netlink: 'syz.0.3949': attribute type 39 has an invalid length.
[  881.892846][T16574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3951'.
[  883.175234][T16598] device sit0 entered promiscuous mode
[  883.293781][T16601] netlink: 'syz.4.3960': attribute type 10 has an invalid length.
[  884.900920][T16625] netlink: 'syz.0.3967': attribute type 10 has an invalid length.
[  884.921686][T16625] bond0: (slave bond_slave_0): Releasing backup interface
[  885.193015][T16634] device syzkaller0 entered promiscuous mode
[  886.313853][T16654] netlink: 'syz.0.3976': attribute type 3 has an invalid length.
[  886.328505][T16654] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3976'.
[  888.327516][T16648] netlink: 'syz.3.3974': attribute type 10 has an invalid length.
[  888.349139][T16648] bond0: (slave netdevsim0): Releasing backup interface
[  888.359657][T16648] device netdevsim0 entered promiscuous mode
[  888.366867][T16648] team0: Port device netdevsim0 added
[  888.380227][T16657] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  888.406989][T16657] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  888.471661][T16657] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  888.571628][T16667] netlink: 'syz.0.3980': attribute type 10 has an invalid length.
[  888.910858][T16681] device wlan1 entered promiscuous mode
[  889.530770][T16674] netlink: 'syz.3.3981': attribute type 10 has an invalid length.
[  889.552983][T16674] team0: Device veth1_vlan failed to register rx_handler
[  890.343026][ T4281] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  890.899730][T16721] netlink: 'syz.1.4000': attribute type 13 has an invalid length.
[  890.940861][T16721] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4000'.
[  890.979423][T16721] syz_tun: refused to change device tx_queue_len
[  891.003011][T16721] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  892.031915][ T4281] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  892.155093][T16756] netlink: 'syz.1.4012': attribute type 3 has an invalid length.
[  892.214811][T16756] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.4012'.
[  892.687067][T16758] delete_channel: no stack
[  893.010821][T16782] device wlan1 entered promiscuous mode
[  893.329190][ T4281] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  893.588922][T16801] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.4031'.
[  893.683060][T16802] netlink: 'syz.1.4031': attribute type 7 has an invalid length.
[  893.737028][T16802] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.4031'.
[  894.117408][T16812] netlink: 'syz.3.4036': attribute type 3 has an invalid length.
[  894.153887][T16812] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.4036'.
[  894.652108][T16828] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4042'.
[  894.666815][T16828] bridge_slave_1: default FDB implementation only supports local addresses
[  897.624239][T16834] device wlan1 left promiscuous mode
[  898.154637][T16854] netlink: 'syz.0.4053': attribute type 29 has an invalid length.
[  898.214730][T16854] netlink: 'syz.0.4053': attribute type 29 has an invalid length.
[  898.853613][T16872] netlink: 'syz.4.4059': attribute type 39 has an invalid length.
[  898.867038][T16870] netlink: 'syz.2.4058': attribute type 3 has an invalid length.
[  898.907182][T16870] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4058'.
[  899.204107][T16878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  899.225520][T16878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  899.269399][T16878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  899.287798][T16878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  899.426007][T13726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  899.435122][T13726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  899.443042][T13726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  899.454042][T13726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  899.464662][ T8324] bond0: (slave syz_tun): Releasing backup interface
[  899.473446][T13726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  899.489857][T13726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  899.714717][T16881] chnl_net:caif_netlink_parms(): no params data found
[  900.038643][T16881] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.084736][T16881] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.130641][T16881] device bridge_slave_0 entered promiscuous mode
[  900.170741][T16903] netlink: 'syz.0.4068': attribute type 10 has an invalid length.
[  900.231987][T16881] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.248404][T16881] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.267753][T16907] Dead loop on virtual device ip6_vti0, fix it urgently!
[  900.281432][T16881] device bridge_slave_1 entered promiscuous mode
[  900.416039][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.494006][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.614237][T16881] team0: Port device team_slave_0 added
[  900.633310][T16881] team0: Port device team_slave_1 added
[  900.878455][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.895879][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  900.969726][T16919] netlink: 'syz.2.4076': attribute type 3 has an invalid length.
[  900.975202][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.979377][T16919] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4076'.
[  900.999445][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.999470][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  900.999505][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.139771][T16881] device hsr_slave_0 entered promiscuous mode
[  901.176894][T16881] device hsr_slave_1 entered promiscuous mode
[  901.564346][T13726] Bluetooth: hci3: command 0x0409 tx timeout
[  901.790786][T16881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.217892][T16951] netlink: 'syz.0.4087': attribute type 39 has an invalid length.
[  902.771051][T16881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.958274][T16881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.133702][T16881] device netdevsim0 left promiscuous mode
[  903.184350][T16881] team0: Port device netdevsim0 removed
[  903.201195][T16881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.230343][T16966] netlink: 'syz.0.4091': attribute type 46 has an invalid length.
[  903.241233][T16966] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4091'.
[  903.331066][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'.
[  903.506172][T16981] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  903.639252][T13726] Bluetooth: hci3: command 0x041b tx timeout
[  903.726357][T16981] team0: Port device geneve1 added
[  903.772866][T16881] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  903.800756][T16881] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  903.818027][T16881] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  903.829769][T16881] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  904.125939][T16881] 8021q: adding VLAN 0 to HW filter on device bond0
[  904.176861][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  904.192678][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  904.219024][T16881] 8021q: adding VLAN 0 to HW filter on device team0
[  904.257526][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  904.270892][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  904.285759][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.292999][ T9612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  904.340002][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  904.372049][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  904.424278][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  904.480000][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.487277][ T9612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  904.550223][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  904.812645][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  904.828482][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  904.879922][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  904.902876][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  904.933052][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  904.994276][ T9612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  905.040133][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  905.059484][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  905.184840][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  905.234008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  905.267409][T16881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  905.716737][T13726] Bluetooth: hci3: command 0x040f tx timeout
[  906.113996][T17038] syz.4.4111[17038] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  906.121419][T17038] syz.4.4111[17038] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  906.351871][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  906.445331][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  906.472405][T16881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  906.576789][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  906.603549][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  906.708304][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  906.742466][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  906.796599][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  906.828319][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  906.859202][T16881] device veth0_vlan entered promiscuous mode
[  906.905712][T16881] device veth1_vlan entered promiscuous mode
[  906.986741][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  907.000589][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  907.040121][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  907.066051][T17051] netlink: 'syz.4.4118': attribute type 3 has an invalid length.
[  907.082878][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  907.101003][T17051] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.4118'.
[  907.127257][T16881] device veth0_macvtap entered promiscuous mode
[  907.169799][T16881] device veth1_macvtap entered promiscuous mode
[  907.302912][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  907.324044][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.349921][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  907.374934][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.385703][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  907.399389][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.412275][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  907.427898][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.463204][T16881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  907.477444][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  907.527960][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  907.541983][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  907.553274][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  907.570970][T17057] netlink: 'syz.0.4120': attribute type 16 has an invalid length.
[  907.582858][T17057] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4120'.
[  907.727856][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.745290][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.755667][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.766454][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.776583][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.787385][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.796547][T13726] Bluetooth: hci3: command 0x0419 tx timeout
[  907.798575][T16881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.845067][T16881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.882517][T16881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.904290][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  907.933211][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  907.951596][T16881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.976471][T16881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.985613][T16881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.994764][T16881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.306845][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.314745][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.343029][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  908.502040][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.578855][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.683433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  909.615695][T17092] netlink: 'syz.2.4132': attribute type 3 has an invalid length.
[  909.662543][T17092] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4132'.
[  911.708567][T17111] netlink: 'syz.0.4136': attribute type 1 has an invalid length.
[  911.735194][T17111] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4136'.
[  911.867283][T17119] FAULT_INJECTION: forcing a failure.
[  911.867283][T17119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  911.925033][T17119] CPU: 0 PID: 17119 Comm: syz.4.4139 Not tainted syzkaller #0
[  911.932666][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  911.942761][T17119] Call Trace:
[  911.946085][T17119]  <TASK>
[  911.949066][T17119]  dump_stack_lvl+0x188/0x24e
[  911.953797][T17119]  ? show_regs_print_info+0x12/0x12
[  911.959045][T17119]  ? load_image+0x400/0x400
[  911.963592][T17119]  ? __lock_acquire+0x7d10/0x7d10
[  911.968672][T17119]  should_fail_ex+0x399/0x4d0
[  911.973413][T17119]  _copy_from_user+0x2c/0x170
[  911.978175][T17119]  ___sys_sendmsg+0x1c3/0x360
[  911.982942][T17119]  ? __sys_sendmsg+0x290/0x290
[  911.987792][T17119]  ? __lock_acquire+0x7d10/0x7d10
[  911.992886][T17119]  __se_sys_sendmsg+0x1bb/0x2a0
[  911.997863][T17119]  ? __x64_sys_sendmsg+0x80/0x80
[  912.002841][T17119]  ? lockdep_hardirqs_on+0x94/0x140
[  912.008075][T17119]  do_syscall_64+0x4c/0xa0
[  912.012524][T17119]  ? clear_bhb_loop+0x60/0xb0
[  912.017231][T17119]  ? clear_bhb_loop+0x60/0xb0
[  912.021938][T17119]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  912.027863][T17119] RIP: 0033:0x7fbd4b19bf79
[  912.032310][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  912.051943][T17119] RSP: 002b:00007fbd4bfea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  912.060401][T17119] RAX: ffffffffffffffda RBX: 00007fbd4b415fa0 RCX: 00007fbd4b19bf79
[  912.068397][T17119] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003
[  912.076412][T17119] RBP: 00007fbd4bfea090 R08: 0000000000000000 R09: 0000000000000000
[  912.084432][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.092440][T17119] R13: 00007fbd4b416038 R14: 00007fbd4b415fa0 R15: 00007ffd7ad0cbf8
[  912.100458][T17119]  </TASK>
[  912.236514][T17128] netlink: 'syz.1.4143': attribute type 3 has an invalid length.
[  912.265409][T17128] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.4143'.
[  912.357564][T17129] netlink: 'syz.0.4142': attribute type 10 has an invalid length.
[  912.884222][T17129] team0: Port device netdevsim0 added
[  913.920321][T17160] device syzkaller0 entered promiscuous mode
[  914.360764][ T4351] syzkaller0: tun_net_xmit 48
[  916.152509][T17161] netlink: 'syz.3.4150': attribute type 46 has an invalid length.
[  916.439931][T17182] netlink: 'syz.1.4158': attribute type 3 has an invalid length.
[  916.490937][T17182] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.4158'.
[  916.867304][T17191] syz.2.4156[17191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  916.867517][T17191] syz.2.4156[17191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  919.358915][T17177] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  919.385135][T17177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  919.409497][T17177] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  919.542300][T17203] netlink: 'syz.3.4162': attribute type 10 has an invalid length.
[  919.634800][T17203] team0: Device veth1_vlan failed to register rx_handler
[  920.608130][T17230] netlink: 'syz.3.4168': attribute type 3 has an invalid length.
[  920.653467][T17230] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4168'.
[  922.540381][T17249] syz.0.4171[17249] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  922.542688][T17249] syz.0.4171[17249] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  924.060175][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4181'.
[  924.080977][T17283] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.4182'.
[  924.094589][T17283] openvswitch: netlink: Key type 386 is out of range max 32
[  924.778051][T17305] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  924.786632][T17305] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  924.798929][T17305] netlink: 'syz.4.4191': attribute type 29 has an invalid length.
[  924.939212][T17308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4192'.
[  926.052103][T17346] FAULT_INJECTION: forcing a failure.
[  926.052103][T17346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.115219][T17346] CPU: 1 PID: 17346 Comm: syz.0.4208 Not tainted syzkaller #0
[  926.122774][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  926.132889][T17346] Call Trace:
[  926.136218][T17346]  <TASK>
[  926.139196][T17346]  dump_stack_lvl+0x188/0x24e
[  926.143941][T17346]  ? show_regs_print_info+0x12/0x12
[  926.149194][T17346]  ? load_image+0x400/0x400
[  926.153763][T17346]  ? __lock_acquire+0x7d10/0x7d10
[  926.158862][T17346]  ? apparmor_capable+0xdc/0x190
[  926.163857][T17346]  should_fail_ex+0x399/0x4d0
[  926.168611][T17346]  _copy_from_user+0x2c/0x170
[  926.173344][T17346]  __sys_bpf+0x2ea/0x780
[  926.177676][T17346]  ? bpf_link_show_fdinfo+0x380/0x380
[  926.183107][T17346]  ? lock_chain_count+0x20/0x20
[  926.188000][T17346]  __x64_sys_bpf+0x78/0x90
[  926.192451][T17346]  do_syscall_64+0x4c/0xa0
[  926.196903][T17346]  ? clear_bhb_loop+0x60/0xb0
[  926.201606][T17346]  ? clear_bhb_loop+0x60/0xb0
[  926.206323][T17346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  926.212329][T17346] RIP: 0033:0x7f9dc3b9bf79
[  926.216770][T17346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  926.236426][T17346] RSP: 002b:00007f9dc497d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  926.244884][T17346] RAX: ffffffffffffffda RBX: 00007f9dc3e15fa0 RCX: 00007f9dc3b9bf79
[  926.252885][T17346] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  926.260884][T17346] RBP: 00007f9dc497d090 R08: 0000000000000000 R09: 0000000000000000
[  926.268885][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  926.276879][T17346] R13: 00007f9dc3e16038 R14: 00007f9dc3e15fa0 R15: 00007ffd68d0c1b8
[  926.284894][T17346]  </TASK>
[  926.335944][T17351] netlink: 'syz.3.4209': attribute type 10 has an invalid length.
[  926.563304][T17351] team0 (unregistering): Port device team_slave_0 removed
[  926.772616][T17351] team0 (unregistering): Port device team_slave_1 removed
[  926.799984][T17360] netlink: 'syz.0.4214': attribute type 3 has an invalid length.
[  926.826541][T17360] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.4214'.
[  926.985142][T17366] netlink: 'syz.1.4215': attribute type 29 has an invalid length.
[  927.905246][T17366] netlink: 'syz.1.4215': attribute type 29 has an invalid length.
[  928.476386][T17390] FAULT_INJECTION: forcing a failure.
[  928.476386][T17390] name failslab, interval 1, probability 0, space 0, times 0
[  928.497271][T17390] CPU: 1 PID: 17390 Comm: syz.1.4224 Not tainted syzkaller #0
[  928.504833][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  928.514938][T17390] Call Trace:
[  928.518258][T17390]  <TASK>
[  928.521255][T17390]  dump_stack_lvl+0x188/0x24e
[  928.525992][T17390]  ? show_regs_print_info+0x12/0x12
[  928.531248][T17390]  ? load_image+0x400/0x400
[  928.535806][T17390]  ? __might_sleep+0xd0/0xd0
[  928.540443][T17390]  ? __lock_acquire+0x7d10/0x7d10
[  928.545523][T17390]  should_fail_ex+0x399/0x4d0
[  928.550272][T17390]  should_failslab+0x5/0x20
[  928.554843][T17390]  slab_pre_alloc_hook+0x59/0x310
[  928.559939][T17390]  kmem_cache_alloc+0x56/0x2f0
[  928.564763][T17390]  ? __alloc_file+0x25/0x230
[  928.569425][T17390]  __alloc_file+0x25/0x230
[  928.573892][T17390]  alloc_empty_file+0x90/0x180
[  928.578705][T17390]  alloc_file+0x5c/0x5f0
[  928.583018][T17390]  alloc_file_pseudo+0x180/0x200
[  928.588006][T17390]  ? alloc_empty_file_noaccount+0x80/0x80
[  928.593780][T17390]  ? alloc_fd+0x58f/0x630
[  928.598168][T17390]  anon_inode_getfd+0xc6/0x1c0
[  928.602982][T17390]  btf_new_fd+0x5f1/0x780
[  928.607379][T17390]  __sys_bpf+0x612/0x780
[  928.611685][T17390]  ? bpf_link_show_fdinfo+0x380/0x380
[  928.617125][T17390]  ? lock_chain_count+0x20/0x20
[  928.622038][T17390]  __x64_sys_bpf+0x78/0x90
[  928.626509][T17390]  do_syscall_64+0x4c/0xa0
[  928.630968][T17390]  ? clear_bhb_loop+0x60/0xb0
[  928.635709][T17390]  ? clear_bhb_loop+0x60/0xb0
[  928.640440][T17390]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  928.646394][T17390] RIP: 0033:0x7f6f6879bf79
[  928.650865][T17390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  928.670538][T17390] RSP: 002b:00007f6f69571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  928.679022][T17390] RAX: ffffffffffffffda RBX: 00007f6f68a15fa0 RCX: 00007f6f6879bf79
[  928.687130][T17390] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012
[  928.695147][T17390] RBP: 00007f6f69571090 R08: 0000000000000000 R09: 0000000000000000
[  928.703163][T17390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  928.711186][T17390] R13: 00007f6f68a16038 R14: 00007f6f68a15fa0 R15: 00007ffde62ca278
[  928.719228][T17390]  </TASK>
[  928.969556][T17392] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.4223'.
[  929.044814][T17400] netlink: 'syz.0.4228': attribute type 3 has an invalid length.
[  929.065203][T17400] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.4228'.
[  929.093373][T17392] openvswitch: netlink: Key type 386 is out of range max 32
[  929.448158][T17405] netlink: 'syz.4.4229': attribute type 39 has an invalid length.
[  930.124451][T17420] IPv6: NLM_F_CREATE should be specified when creating new route
[  930.150389][T17420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4236'.
[  930.210106][T17420] netlink: 'syz.3.4236': attribute type 10 has an invalid length.
[  930.243811][T17420] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.4236'.
[  930.683098][T17428] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4238'.
[  930.767696][ T9604] device vlan0 left promiscuous mode
[  930.773375][ T9604] À: port 1(vlan0) entered disabled state
[  930.787329][T17443] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4242'.
[  930.863216][T17443] openvswitch: netlink: Key type 386 is out of range max 32
[  931.091091][ T9604] device hsr_slave_0 left promiscuous mode
[  931.104723][ T9604] device hsr_slave_1 left promiscuous mode
[  931.112559][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.131644][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  931.163764][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.185142][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.193328][ T9604] bridge0: port 3(team0) entered disabled state
[  931.218377][ T9604] device bridge_slave_1 left promiscuous mode
[  931.224689][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.277316][ T9604] device bridge_slave_0 left promiscuous mode
[  931.283708][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.583269][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  931.589803][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  931.790755][T17455] netlink: 'syz.0.4245': attribute type 3 has an invalid length.
[  931.822378][T17455] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.4245'.
[  932.544230][ T9604] device team_slave_1 left promiscuous mode
[  932.560748][ T9604] team0 (unregistering): Port device team_slave_1 removed
[  932.692305][ T9604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  932.723827][T17472] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.4251'.
[  932.760748][ T9604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  933.191793][ T9604] bond0 (unregistering): Released all slaves
[  933.323959][T17448] netlink: 'syz.1.4243': attribute type 39 has an invalid length.
[  933.367051][T17470] delete_channel: no stack
[  933.507170][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4251'.
[  933.521407][T17474] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4251'.
[  934.297434][T17499] netlink: 'syz.1.4262': attribute type 10 has an invalid length.
[  934.621304][T17499] team0 (unregistering): Port device team_slave_0 removed
[  934.722065][T17499] team0 (unregistering): Port device team_slave_1 removed
[  934.827076][T17499] team0 (unregistering): Port device wlan1 removed
[  934.895689][T17500] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4261'.
[  935.267397][T17500] team0: Port device team_slave_0 removed
[  935.286278][T17500] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  935.362071][T17508] netlink: 'syz.3.4264': attribute type 10 has an invalid length.
[  935.394598][T17508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4264'.
[  935.427218][T17508] bridge0: port 3(veth0_vlan) entered blocking state
[  935.457299][T17508] bridge0: port 3(veth0_vlan) entered disabled state
[  935.499060][T17508] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  935.545137][T17511] netlink: 'syz.2.4266': attribute type 39 has an invalid length.
[  935.799219][T17505] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.4264'.
[  935.981364][T17521] device syzkaller0 entered promiscuous mode
[  936.768973][T17550] delete_channel: no stack
[  938.795324][T17547] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4274'.
[  938.822973][T17560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4280'.
[  939.041948][T17566] netlink: 'syz.2.4281': attribute type 3 has an invalid length.
[  939.060496][T17566] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4281'.
[  939.110747][T17570] netlink: 'syz.3.4283': attribute type 3 has an invalid length.
[  939.120542][T17570] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.4283'.
[  939.160946][T17575] Dead loop on virtual device ip6_vti0, fix it urgently!
[  942.147603][T17601] netlink: 'syz.2.4303': attribute type 3 has an invalid length.
[  942.191472][T17601] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4303'.
[  942.374167][T17609] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4296'.
[  942.406143][T17609] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  943.181224][T17623] netlink: 'syz.0.4302': attribute type 39 has an invalid length.
[  943.443000][T17629] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4306'.
[  943.452632][T17629] bridge_slave_1: default FDB implementation only supports local addresses
[  943.564926][T17631] netlink: 'syz.3.4307': attribute type 39 has an invalid length.
[  944.856817][T17654] FAULT_INJECTION: forcing a failure.
[  944.856817][T17654] name failslab, interval 1, probability 0, space 0, times 0
[  944.915236][T17654] CPU: 0 PID: 17654 Comm: syz.2.4314 Not tainted syzkaller #0
[  944.922792][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  944.932899][T17654] Call Trace:
[  944.936225][T17654]  <TASK>
[  944.939204][T17654]  dump_stack_lvl+0x188/0x24e
[  944.943964][T17654]  ? show_regs_print_info+0x12/0x12
[  944.949263][T17654]  ? load_image+0x400/0x400
[  944.953817][T17654]  ? __lock_acquire+0x7d10/0x7d10
[  944.958885][T17654]  should_fail_ex+0x399/0x4d0
[  944.963642][T17654]  should_failslab+0x5/0x20
[  944.968207][T17654]  slab_pre_alloc_hook+0x59/0x310
[  944.973290][T17654]  kmem_cache_alloc_lru+0x49/0x2e0
[  944.978434][T17654]  ? __d_alloc+0x31/0x700
[  944.982854][T17654]  ? alloc_fd+0x58f/0x630
[  944.987216][T17654]  __d_alloc+0x31/0x700
[  944.991395][T17654]  ? do_raw_spin_lock+0x128/0x2f0
[  944.996456][T17654]  d_alloc_pseudo+0x19/0x70
[  945.000986][T17654]  alloc_file_pseudo+0xe0/0x200
[  945.005872][T17654]  ? alloc_empty_file_noaccount+0x80/0x80
[  945.011615][T17654]  ? alloc_fd+0x58f/0x630
[  945.015984][T17654]  anon_inode_getfd+0xc6/0x1c0
[  945.020802][T17654]  btf_new_fd+0x5f1/0x780
[  945.025169][T17654]  __sys_bpf+0x612/0x780
[  945.029447][T17654]  ? bpf_link_show_fdinfo+0x380/0x380
[  945.034870][T17654]  ? lock_chain_count+0x20/0x20
[  945.039767][T17654]  __x64_sys_bpf+0x78/0x90
[  945.044221][T17654]  do_syscall_64+0x4c/0xa0
[  945.048687][T17654]  ? clear_bhb_loop+0x60/0xb0
[  945.053395][T17654]  ? clear_bhb_loop+0x60/0xb0
[  945.058116][T17654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  945.064057][T17654] RIP: 0033:0x7f4b4699bf79
[  945.068505][T17654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  945.088228][T17654] RSP: 002b:00007f4b4781d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  945.096678][T17654] RAX: ffffffffffffffda RBX: 00007f4b46c15fa0 RCX: 00007f4b4699bf79
[  945.104686][T17654] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012
[  945.112682][T17654] RBP: 00007f4b4781d090 R08: 0000000000000000 R09: 0000000000000000
[  945.120680][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  945.128683][T17654] R13: 00007f4b46c16038 R14: 00007f4b46c15fa0 R15: 00007ffe594079c8
[  945.136697][T17654]  </TASK>
[  945.768304][T17671] netlink: 'syz.3.4320': attribute type 39 has an invalid length.
[  946.206178][T17685] netlink: 'syz.1.4324': attribute type 39 has an invalid length.
[  946.500207][T17692] netlink: 'syz.3.4329': attribute type 1 has an invalid length.
[  946.530090][T17692] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4329'.
[  947.664004][T17690] device syzkaller0 entered promiscuous mode
[  947.851103][T17714] FAULT_INJECTION: forcing a failure.
[  947.851103][T17714] name failslab, interval 1, probability 0, space 0, times 0
[  947.887372][T17714] CPU: 1 PID: 17714 Comm: syz.3.4333 Not tainted syzkaller #0
[  947.894944][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  947.905057][T17714] Call Trace:
[  947.908432][T17714]  <TASK>
[  947.911440][T17714]  dump_stack_lvl+0x188/0x24e
[  947.916187][T17714]  ? verify_lock_unused+0x140/0x140
[  947.921506][T17714]  ? show_regs_print_info+0x12/0x12
[  947.926776][T17714]  ? load_image+0x400/0x400
[  947.931380][T17714]  should_fail_ex+0x399/0x4d0
[  947.936155][T17714]  should_failslab+0x5/0x20
[  947.940725][T17714]  slab_pre_alloc_hook+0x59/0x310
[  947.945822][T17714]  kmem_cache_alloc+0x56/0x2f0
[  947.950641][T17714]  ? __nf_conntrack_alloc+0x99/0x380
[  947.955979][T17714]  __nf_conntrack_alloc+0x99/0x380
[  947.961133][T17714]  init_conntrack+0x25b/0x11a0
[  947.965942][T17714]  ? early_drop+0x870/0x870
[  947.970574][T17714]  ? nf_conntrack_find_get+0x670/0x670
[  947.976079][T17714]  ? __siphash_unaligned+0x25b/0x3a0
[  947.981412][T17714]  nf_conntrack_in+0xd3e/0x17b0
[  947.986314][T17714]  ? nf_ct_pernet+0x270/0x270
[  947.991039][T17714]  ? ipt_do_table+0x2bd/0x15a0
[  947.995844][T17714]  ? get_random_u32+0x4cd/0x910
[  948.000723][T17714]  ? read_lock_is_recursive+0x10/0x10
[  948.006129][T17714]  ? ipv4_conntrack_defrag+0x284/0x5b0
[  948.011624][T17714]  ? get_random_u32+0x16b/0x910
[  948.016510][T17714]  ? ipv4_conntrack_local+0x11f/0x200
[  948.021927][T17714]  ? ipv4_conntrack_in+0x20/0x20
[  948.026900][T17714]  nf_hook_slow+0xb9/0x200
[  948.031350][T17714]  ? nf_hook+0x390/0x390
[  948.035652][T17714]  nf_hook+0x224/0x390
[  948.039841][T17714]  ? nf_hook+0x9e/0x390
[  948.044024][T17714]  ? __ip_local_out+0x5d0/0x5d0
[  948.048908][T17714]  ? nf_hook+0x390/0x390
[  948.053181][T17714]  ? ip_fast_csum+0x1ea/0x2b0
[  948.057938][T17714]  __ip_local_out+0x49c/0x5d0
[  948.062653][T17714]  ? nf_hook+0x390/0x390
[  948.066952][T17714]  ip_send_skb+0x48/0x1c0
[  948.071315][T17714]  udp_send_skb+0xa88/0x1580
[  948.075955][T17714]  udp_sendmsg+0x73f/0x23b0
[  948.080502][T17714]  ? udp_sendmsg+0x23b0/0x23b0
[  948.085311][T17714]  ? __lock_acquire+0x12f4/0x7d10
[  948.090371][T17714]  ? udp_cmsg_send+0x350/0x350
[  948.095177][T17714]  ? verify_lock_unused+0x140/0x140
[  948.100430][T17714]  ? verify_lock_unused+0x140/0x140
[  948.105662][T17714]  ? tomoyo_check_open_permission+0x1bf/0x440
[  948.111764][T17714]  ? tomoyo_check_path_number_acl+0x280/0x280
[  948.117870][T17714]  ? aa_label_sk_perm+0x456/0x5b0
[  948.122932][T17714]  udpv6_sendmsg+0xa00/0x2420
[  948.127646][T17714]  ? udpv6_sendmsg+0x2420/0x2420
[  948.132646][T17714]  ? udp_v6_early_demux+0xf80/0xf80
[  948.137904][T17714]  ? verify_lock_unused+0x140/0x140
[  948.143155][T17714]  ? __lock_acquire+0x12f4/0x7d10
[  948.148270][T17714]  ? inet_send_prepare+0x58/0x260
[  948.153337][T17714]  ? inet6_sendmsg+0x5b/0xd0
[  948.157959][T17714]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  948.163190][T17714]  ____sys_sendmsg+0x5be/0x970
[  948.168008][T17714]  ? __sys_sendmsg_sock+0x30/0x30
[  948.173080][T17714]  ? __import_iovec+0x315/0x500
[  948.177966][T17714]  ? import_iovec+0x6f/0xa0
[  948.182503][T17714]  ___sys_sendmsg+0x2a2/0x360
[  948.187228][T17714]  ? __sys_sendmsg+0x290/0x290
[  948.192046][T17714]  ? __lock_acquire+0x7d10/0x7d10
[  948.197131][T17714]  __se_sys_sendmsg+0x1bb/0x2a0
[  948.202023][T17714]  ? __x64_sys_sendmsg+0x80/0x80
[  948.207054][T17714]  ? lockdep_hardirqs_on+0x94/0x140
[  948.212290][T17714]  do_syscall_64+0x4c/0xa0
[  948.216756][T17714]  ? clear_bhb_loop+0x60/0xb0
[  948.221500][T17714]  ? clear_bhb_loop+0x60/0xb0
[  948.226227][T17714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  948.232162][T17714] RIP: 0033:0x7f5d03b9bf79
[  948.236608][T17714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  948.256252][T17714] RSP: 002b:00007f5d01dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  948.264701][T17714] RAX: ffffffffffffffda RBX: 00007f5d03e16090 RCX: 00007f5d03b9bf79
[  948.272697][T17714] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003
[  948.280697][T17714] RBP: 00007f5d01dd5090 R08: 0000000000000000 R09: 0000000000000000
[  948.288787][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  948.296786][T17714] R13: 00007f5d03e16128 R14: 00007f5d03e16090 R15: 00007ffea794e168
[  948.304913][T17714]  </TASK>
[  950.561879][T17719] netlink: 'syz.1.4336': attribute type 39 has an invalid length.
[  951.018463][T17739] netlink: 'syz.4.4341': attribute type 39 has an invalid length.
[  953.280374][T17756] device syzkaller0 entered promiscuous mode
[  953.474404][T17762] netlink: 'syz.3.4346': attribute type 2 has an invalid length.
[  953.484192][T17762] netlink: 'syz.3.4346': attribute type 1 has an invalid length.
[  953.498614][T17762] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4346'.
[  967.336248][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  967.351695][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  967.360552][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  967.369160][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  967.376999][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  967.384329][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  969.475103][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[  971.555015][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[  973.635033][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[  975.715357][ T4283] Bluetooth: hci4: command 0x0419 tx timeout
[  977.637627][T12708] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2672 jiffies s: 321305 root: 0x2/.
[  977.664954][T12708] rcu: blocking rcu_node structures (internal RCU debug):
[  977.672164][T12708] Sending NMI from CPU 0 to CPUs 1:
[  977.677616][    C1] NMI backtrace for cpu 1
[  977.677627][    C1] CPU: 1 PID: 17727 Comm: syz.2.4338 Not tainted syzkaller #0
[  977.677645][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  977.677655][    C1] RIP: 0010:kasan_check_range+0x5e/0x290
[  977.677687][    C1] Code: bc 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 <4b> 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38
[  977.677703][    C1] RSP: 0018:ffffc900001e0898 EFLAGS: 00000806
[  977.677719][    C1] RAX: ffffffff818ecd01 RBX: ffff8880b8f3b9f0 RCX: ffffffff818ecd7d
[  977.677732][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8f3b9f8
[  977.677743][    C1] RBP: ffffc900001e09b0 R08: ffff8880b8f3b9fb R09: 1ffff110171e773f
[  977.677757][    C1] R10: dffffc0000000000 R11: ffffed10171e773f R12: dffffc0000000001
[  977.677770][    C1] R13: 0000000000000000 R14: 1ffff110171e773f R15: dffffc0000000000
[  977.677782][    C1] FS:  00007f4b4781d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  977.677803][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  977.677815][    C1] CR2: 0000000000000000 CR3: 000000005d7f3000 CR4: 00000000003506e0
[  977.677830][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  977.677841][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  977.677852][    C1] Call Trace:
[  977.677857][    C1]  <IRQ>
[  977.677866][    C1]  irq_work_single+0x2d/0x230
[  977.677896][    C1]  irq_work_run+0x159/0x2f0
[  977.677921][    C1]  ? irq_work_single+0x230/0x230
[  977.677946][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  977.677973][    C1]  ? lock_chain_count+0x20/0x20
[  977.678000][    C1]  __sysvec_irq_work+0xba/0x350
[  977.678020][    C1]  sysvec_irq_work+0x4a/0xc0
[  977.678047][    C1]  asm_sysvec_irq_work+0x16/0x20
[  977.678067][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  977.678086][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  977.678099][    C1] RSP: 0018:ffffc900001e0aa0 EFLAGS: 00000206
[  977.678113][    C1] RAX: 81d819de32761a00 RBX: 1ffff9200003c15c RCX: 81d819de32761a00
[  977.678126][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20
[  977.678138][    C1] RBP: ffffc900001e0b90 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[  977.678151][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246
[  977.678163][    C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002
[  977.678186][    C1]  ? mac80211_hwsim_beacon_tx+0x61e/0xae0
[  977.678209][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  977.678234][    C1]  __rcu_read_unlock+0x78/0xd0
[  977.678250][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  977.678276][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  977.678294][    C1]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[  977.678321][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  977.678351][    C1]  __hrtimer_run_queues+0x560/0xd70
[  977.678384][    C1]  ? hw_scan_work+0xf50/0xf50
[  977.678415][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  977.678434][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  977.678463][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  977.678485][    C1]  handle_softirqs+0x2a1/0x930
[  977.678507][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  977.678526][    C1]  ? do_softirq+0x210/0x210
[  977.678545][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  977.678564][    C1]  __irq_exit_rcu+0x13b/0x230
[  977.678580][    C1]  ? irq_exit_rcu+0x20/0x20
[  977.678603][    C1]  irq_exit_rcu+0x5/0x20
[  977.678623][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  977.678652][    C1]  </IRQ>
[  977.678656][    C1]  <TASK>
[  977.678662][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  977.678683][    C1] RIP: 0010:preempt_count_sub+0x0/0x160
[  977.678703][    C1] Code: 48 c7 c1 e8 00 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 6e ff ff ff 48 c7 c7 e8 00 20 8e e8 f9 74 7a 00 89 df e9 5b ff ff ff 66 90 <55> 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 40 c1 bf 96 48 c1 e8
[  977.678717][    C1] RSP: 0018:ffffc90003d17c58 EFLAGS: 00000206
[  977.678731][    C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 81d819de32761a00
[  977.678743][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001
[  977.678755][    C1] RBP: ffffc90003d17ce0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[  977.678768][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000
[  977.678781][    C1] R13: dffffc0000000000 R14: ffffffff96f171b0 R15: 1ffff920007a2f8c
[  977.678805][    C1]  _raw_spin_unlock_irqrestore+0xc1/0x120
[  977.678824][    C1]  ? _raw_spin_unlock+0x40/0x40
[  977.678845][    C1]  ? __debug_object_init+0xec/0x450
[  977.678869][    C1]  init_timer_key+0x3e/0x320
[  977.678899][    C1]  sock_init_data_uid+0x70/0xbe0
[  977.678925][    C1]  __netlink_create+0x7e/0x2d0
[  977.678952][    C1]  netlink_create+0x3a7/0x510
[  977.678979][    C1]  ? sock_diag_rcv+0x40/0x40
[  977.678998][    C1]  __sock_create+0x4a2/0x940
[  977.679027][    C1]  __sys_socket+0xc4/0x190
[  977.679055][    C1]  __x64_sys_socket+0x76/0x80
[  977.679079][    C1]  do_syscall_64+0x4c/0xa0
[  977.679101][    C1]  ? clear_bhb_loop+0x60/0xb0
[  977.679129][    C1]  ? clear_bhb_loop+0x60/0xb0
[  977.679151][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.679171][    C1] RIP: 0033:0x7f4b4699bf79
[  977.679185][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.679200][    C1] RSP: 002b:00007f4b4781d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  977.679217][    C1] RAX: ffffffffffffffda RBX: 00007f4b46c15fa0 RCX: 00007f4b4699bf79
[  977.679230][    C1] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010
[  977.679240][    C1] RBP: 00007f4b46a327e0 R08: 0000000000000000 R09: 0000000000000000
[  977.679251][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.679261][    C1] R13: 00007f4b46c16038 R14: 00007f4b46c15fa0 R15: 00007ffe594079c8
[  977.679284][    C1]  </TASK>