last executing test programs:

23m20.29588549s ago: executing program 4 (id=829):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r0}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r0}, 0x38)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440))
r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x69, 0xc7, 0x8, 0x0, 0x7, 0x2008, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x2}, 0x1040, 0x8, 0x4, 0xd, 0x868, 0x80b1, 0x8, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x4404)

23m19.286298379s ago: executing program 4 (id=836):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000800100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200fe6a00"/25], 0x50)

23m19.015102195s ago: executing program 4 (id=841):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x16ac, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x6, 0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000140)="c1188e19b95de5fe4284860186dda955d7c84d7a7f9ea77d737d598e5751b15a469fafe17e46465f", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x32}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00), 0x4)
socket$kcm(0x10, 0x2, 0x0)

23m18.395699701s ago: executing program 4 (id=845):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000500))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)

23m18.010961524s ago: executing program 4 (id=849):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000"], 0x0, 0x42}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11}, 0x48)

23m16.095036755s ago: executing program 4 (id=858):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000400000120000400858fa2860000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffff8, 0x4, @perf_bp={0x0, 0xc}, 0x17191, 0x95f, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0x7ffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x23, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5})
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20, r6}, 0x18)

23m0.52561655s ago: executing program 32 (id=858):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000400000120000400858fa2860000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffff8, 0x4, @perf_bp={0x0, 0xc}, 0x17191, 0x95f, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0x7ffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x23, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5})
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20, r6}, 0x18)

12.983652313s ago: executing program 3 (id=8270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0xc8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffcfe6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000300000000180100002020642500000000002020200d788455d87b1af8ff00000000bfa10400000000156925ff2c33a60d"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
close(r5)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r7=>0x0})
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000ffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"})

11.64554437s ago: executing program 1 (id=8276):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x1, 0x4, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r0}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

11.541788836s ago: executing program 1 (id=8277):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

11.142036619s ago: executing program 1 (id=8278):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000034ccf4ce00040000000800000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
socketpair(0x2, 0x2, 0x1, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d56000005b200000900000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240)=r4, 0x5a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r5, 0x27, &(0x7f0000000300)}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))

9.089526327s ago: executing program 3 (id=8279):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x7fffffff}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

8.872449529s ago: executing program 1 (id=8281):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0xf3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48)

7.734220865s ago: executing program 3 (id=8286):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xc8}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000005c0)="a75f04ebffffff6f2f3534fdb86736", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x11, 0x3, 0x300, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x8d, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579d", 0x5dc}, 0x50)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xfdef)

7.722379676s ago: executing program 1 (id=8287):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

7.524111427s ago: executing program 1 (id=8299):
syz_open_procfs$namespace(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$OBJ_PIN_MAP(0x7, &(0x7f0000000080)=@generic={0x0}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000083, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.618077749s ago: executing program 3 (id=8292):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000042af8fcedad121074e8008000000b704080000000000850000000700000018110000ea22830bb0d713723bf23c7a24cc5b7c7d1f60", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
write$cgroup_type(r4, &(0x7f00000001c0), 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair(0x10, 0x5, 0x4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200a1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x100001, 0x8, 0x9b, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x301, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xa}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
close(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000ffffffff000000020000000000000000cfcc400679debda97ed97f7d0408981caf2f4bdabf8df3c44501bd44a2bcc9f1d494f9503bf4d27d54c973240492d24f48720b3d7fca234441125674c01f3618f0535d6f49bf1e91", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.2665373s ago: executing program 5 (id=8294):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

5.877468362s ago: executing program 3 (id=8295):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.95808622s ago: executing program 5 (id=8298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x4}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

2.546265084s ago: executing program 0 (id=8302):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0400, 0x0)

2.456770209s ago: executing program 5 (id=8304):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"})

2.154345467s ago: executing program 0 (id=8305):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000600000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee238915339de7bf13fd3701b", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.011120375s ago: executing program 5 (id=8307):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x2f)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

1.790331647s ago: executing program 0 (id=8308):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffab)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x4d}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef)

1.694435833s ago: executing program 2 (id=8309):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2734], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.528201773s ago: executing program 5 (id=8310):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x101}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})

1.468149946s ago: executing program 0 (id=8311):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='GPL\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x88, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94)
r8 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r11, &(0x7f0000000d40), 0x0}, 0x20)
r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r12, @ANYRES32=r7, @ANYRES8, @ANYRES64, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3ff, 0x81, 0x1ff, 0x80, r5, 0x7, '\x00', 0x0, r6, 0x2, 0x4, 0x3, 0x4}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, r2, 0x3, 0x2, r2, @void, @value=r3}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)

1.467730176s ago: executing program 2 (id=8312):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.22004382s ago: executing program 2 (id=8313):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)

989.628144ms ago: executing program 2 (id=8314):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20)

846.397702ms ago: executing program 0 (id=8315):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7)
close(0xffffffffffffffff)

721.303499ms ago: executing program 5 (id=8316):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)

470.353634ms ago: executing program 2 (id=8317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

449.445265ms ago: executing program 3 (id=8318):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)

162.208111ms ago: executing program 0 (id=8319):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

0s ago: executing program 2 (id=8320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

413.574398][T28395]  ? clear_bhb_loop+0x60/0xb0
[ 1413.579112][T28395]  ? clear_bhb_loop+0x60/0xb0
[ 1413.583823][T28395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1413.589816][T28395] RIP: 0033:0x7fb5a435b78e
[ 1413.594276][T28395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1413.613931][T28395] RSP: 002b:00007fb5a52a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1413.622375][T28395] RAX: ffffffffffffffda RBX: 00007fb5a52a86c0 RCX: 00007fb5a435b78e
[ 1413.630553][T28395] RDX: 000000000000000f RSI: 00007fb5a52a80a0 RDI: 0000000000000005
[ 1413.638550][T28395] RBP: 00007fb5a52a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.646549][T28395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1413.654543][T28395] R13: 00007fb5a4616038 R14: 00007fb5a4615fa0 R15: 00007ffedb8643e8
[ 1413.662646][T28395]  </TASK>
[ 1413.685565][T28391] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7010'.
[ 1413.719457][T28391] device bond0 entered promiscuous mode
[ 1413.738970][T28391] device bond_slave_0 entered promiscuous mode
[ 1413.756453][T28391] device bond_slave_1 entered promiscuous mode
[ 1413.766005][T28391] bridge0: port 3(bond0) entered blocking state
[ 1413.789892][T28391] bridge0: port 3(bond0) entered disabled state
[ 1413.858941][T28391] bridge0: port 3(bond0) entered blocking state
[ 1413.865832][T28391] bridge0: port 3(bond0) entered forwarding state
[ 1414.070972][T28410] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7018'.
[ 1414.815991][T28431] netlink: 'syz.2.7029': attribute type 10 has an invalid length.
[ 1414.826458][T28431] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7029'.
[ 1414.871752][T28432] netlink: 'syz.0.7028': attribute type 29 has an invalid length.
[ 1414.881304][T28432] netlink: 'syz.0.7028': attribute type 3 has an invalid length.
[ 1414.889817][T28432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7028'.
[ 1415.124468][T28439] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.7033'.
[ 1415.969201][T28465] netlink: 'syz.3.7043': attribute type 10 has an invalid length.
[ 1415.988833][T28465] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7043'.
[ 1416.038919][T28465] device batadv_slave_1 entered promiscuous mode
[ 1416.233968][T28473] netlink: 'syz.1.7045': attribute type 29 has an invalid length.
[ 1416.275259][T28473] netlink: 'syz.1.7045': attribute type 3 has an invalid length.
[ 1416.297002][T28473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7045'.
[ 1416.499155][T24663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1416.515496][T24663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1416.524772][T24663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1416.535891][T24663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1416.544090][T24663] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1416.552172][T24663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1416.852500][T20044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.053586][T20044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.241649][T20044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.321310][T28510] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[ 1417.334318][T28507] netlink: 'syz.0.7057': attribute type 10 has an invalid length.
[ 1417.348187][T28507] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7057'.
[ 1417.411626][T20044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.704756][T28482] chnl_net:caif_netlink_parms(): no params data found
[ 1418.007709][T28527] netlink: 'syz.2.7061': attribute type 10 has an invalid length.
[ 1418.016327][T28527] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7061'.
[ 1418.035089][T28527] device bond0 entered promiscuous mode
[ 1418.041192][T28527] device bond_slave_0 entered promiscuous mode
[ 1418.051064][T28527] device bond_slave_1 entered promiscuous mode
[ 1418.058555][T28527] device dummy0 entered promiscuous mode
[ 1418.066706][T28527] bridge0: port 3(bond0) entered blocking state
[ 1418.073889][T28527] bridge0: port 3(bond0) entered disabled state
[ 1418.099379][T28527] bridge0: port 3(bond0) entered blocking state
[ 1418.106507][T28527] bridge0: port 3(bond0) entered forwarding state
[ 1418.144737][T28482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1418.152250][T28482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1418.198203][T28482] device bridge_slave_0 entered promiscuous mode
[ 1418.232761][T28482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1418.382021][T28482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1418.430935][T28482] device bridge_slave_1 entered promiscuous mode
[ 1418.641606][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[ 1418.959422][T28482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1419.176884][T28482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1419.369800][T28482] team0: Port device team_slave_0 added
[ 1419.511331][T28482] team0: Port device team_slave_1 added
[ 1419.554491][T28560] netlink: 'syz.3.7072': attribute type 10 has an invalid length.
[ 1419.574511][T28560] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7072'.
[ 1419.664340][T28482] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1419.684969][T28482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1419.793739][T28482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1419.870368][T28482] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1419.888860][T28482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1419.991622][T28482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1420.235052][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[ 1420.399108][T28482] device hsr_slave_0 entered promiscuous mode
[ 1420.440676][T28482] device hsr_slave_1 entered promiscuous mode
[ 1420.489709][T28482] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1420.520790][T28482] Cannot create hsr debugfs directory
[ 1420.724364][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[ 1421.110000][T28613] netlink: 'syz.0.7086': attribute type 10 has an invalid length.
[ 1421.135285][T28613] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7086'.
[ 1421.591122][T28622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7089'.
[ 1421.860177][T20044] bridge0: port 4(team0) entered disabled state
[ 1421.895084][T20044] device bridge_slave_1 left promiscuous mode
[ 1421.901553][T20044] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.916102][T20044] device bridge_slave_0 left promiscuous mode
[ 1421.922411][T20044] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.011562][T20044] device veth1_vlan left promiscuous mode
[ 1422.017651][T20044] device veth0_vlan left promiscuous mode
[ 1422.803821][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[ 1423.280470][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.286889][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.560525][T20044] device geneve1 left promiscuous mode
[ 1424.571481][T20044] team0 (unregistering): Port device geneve1 removed
[ 1424.879196][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[ 1424.994522][T20044] device team_slave_1 left promiscuous mode
[ 1425.001632][T20044] team0 (unregistering): Port device team_slave_1 removed
[ 1425.058887][T20044] device team_slave_0 left promiscuous mode
[ 1425.066471][T20044] team0 (unregistering): Port device team_slave_0 removed
[ 1425.550107][T28626] netlink: 'syz.3.7091': attribute type 27 has an invalid length.
[ 1425.618684][T28638] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.7094'.
[ 1425.792946][T28654] netlink: 'syz.3.7098': attribute type 10 has an invalid length.
[ 1425.818250][T28654] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7098'.
[ 1426.451901][T28482] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1426.501565][T28482] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1426.546466][T28482] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1426.856078][T28482] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1426.902807][T28678] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1427.160597][T28482] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1427.187117][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1427.200098][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1427.220389][T28482] 8021q: adding VLAN 0 to HW filter on device team0
[ 1427.240689][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1427.254431][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1427.273620][T20044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1427.280864][T20044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1427.325895][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1427.341079][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1427.361898][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1427.384706][T20044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1427.392026][T20044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1427.425329][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1427.457832][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1427.476842][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1427.518195][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1427.565388][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1427.590419][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1427.646748][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1427.682165][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1427.723575][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1427.759456][T28482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1427.829006][T28482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1427.880838][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1427.897613][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1428.335929][T28720] netlink: 'syz.2.7112': attribute type 10 has an invalid length.
[ 1428.405107][T28720] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7112'.
[ 1428.787912][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1428.810889][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1428.830352][T28482] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1429.624693][T28742] netlink: 'syz.0.7119': attribute type 10 has an invalid length.
[ 1429.761482][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1429.781312][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1429.891307][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1429.911609][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1429.925755][T28482] device veth0_vlan entered promiscuous mode
[ 1429.947433][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1429.977087][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1430.070429][T28482] device veth1_vlan entered promiscuous mode
[ 1430.193998][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1430.213098][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1430.240289][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1430.261676][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1430.304235][T28482] device veth0_macvtap entered promiscuous mode
[ 1430.326497][T28482] device veth1_macvtap entered promiscuous mode
[ 1430.352083][T28482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.363611][T28482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.376396][T28482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.397430][T28482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.416067][T28482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.434166][T28482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.454178][T28482] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1430.468749][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1430.483479][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1430.494743][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1430.514349][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1430.546765][T28482] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1430.559550][T28482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.569212][T28482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.578204][T28482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.587353][T28482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.609734][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1430.624681][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1431.189670][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1431.210622][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1431.229932][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1431.329001][ T7583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1431.361921][ T7583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1431.404368][T28777] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7128'.
[ 1431.428907][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1431.453431][T28777] netlink: zone id is out of range
[ 1431.481711][T28777] netlink: zone id is out of range
[ 1431.511772][T28777] netlink: zone id is out of range
[ 1431.545103][T28777] netlink: zone id is out of range
[ 1431.580929][T28777] netlink: zone id is out of range
[ 1431.586608][T28777] netlink: zone id is out of range
[ 1431.609684][T28777] netlink: zone id is out of range
[ 1431.637388][T28777] netlink: zone id is out of range
[ 1431.660136][T28777] netlink: zone id is out of range
[ 1431.678554][T28777] netlink: zone id is out of range
[ 1431.911656][T28794] netlink: 'syz.3.7135': attribute type 29 has an invalid length.
[ 1431.928882][T28798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7136'.
[ 1431.948968][T28794] netlink: 'syz.3.7135': attribute type 29 has an invalid length.
[ 1431.979096][T28798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7136'.
[ 1431.992470][T28800] netlink: 'syz.3.7135': attribute type 29 has an invalid length.
[ 1432.015214][T28802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7136'.
[ 1432.030021][T28803] netlink: 'syz.3.7135': attribute type 29 has an invalid length.
[ 1432.124175][T28798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7136'.
[ 1432.185464][T28805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7137'.
[ 1432.303311][T28806] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7137'.
[ 1432.970794][T28820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7141'.
[ 1433.052208][T28820] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1433.172350][T28829] netlink: 'syz.1.7145': attribute type 25 has an invalid length.
[ 1433.359830][T28836] netlink: 'syz.5.7146': attribute type 3 has an invalid length.
[ 1433.406931][T28836] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7146'.
[ 1434.088042][ T7060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1434.125625][T28858] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7154'.
[ 1434.620197][T28874] netlink: 'syz.5.7160': attribute type 10 has an invalid length.
[ 1434.720560][T28874] bond0: (slave bond_slave_0): Releasing backup interface
[ 1435.544783][T28891] device syzkaller0 entered promiscuous mode
[ 1439.794712][T28929] netlink: 'syz.5.7176': attribute type 21 has an invalid length.
[ 1440.966222][T28969] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1440.993737][T28969] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1441.049784][T28970] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1441.066405][T28974] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1441.119822][T28979] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1441.144532][T28979] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7191'.
[ 1441.154648][T28976] netlink: 'syz.0.7188': attribute type 10 has an invalid length.
[ 1441.179826][T28976] bond0: (slave bond_slave_0): Releasing backup interface
[ 1441.571591][T28986] netlink: 'syz.5.7193': attribute type 1 has an invalid length.
[ 1441.836967][T28990] syz.3.7194[28990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1441.846350][T28990] syz.3.7194[28990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1442.109321][T29000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7197'.
[ 1442.433278][T29010] netlink: 'syz.3.7201': attribute type 25 has an invalid length.
[ 1442.486689][T29010] netlink: 'syz.3.7201': attribute type 1 has an invalid length.
[ 1442.541082][T29010] bridge0: port 1(bridge_slave_0) entered learning state
[ 1442.670487][T29019] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7204'.
[ 1443.422201][T29034] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7207'.
[ 1443.750638][T29044] FAULT_INJECTION: forcing a failure.
[ 1443.750638][T29044] name failslab, interval 1, probability 0, space 0, times 0
[ 1443.763413][T29044] CPU: 0 PID: 29044 Comm: syz.0.7211 Not tainted syzkaller #0
[ 1443.770951][T29044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1443.781064][T29044] Call Trace:
[ 1443.784390][T29044]  <TASK>
[ 1443.787386][T29044]  dump_stack_lvl+0x188/0x24e
[ 1443.792129][T29044]  ? show_regs_print_info+0x12/0x12
[ 1443.797384][T29044]  ? load_image+0x400/0x400
[ 1443.801958][T29044]  should_fail_ex+0x399/0x4d0
[ 1443.806717][T29044]  should_failslab+0x5/0x20
[ 1443.811292][T29044]  slab_pre_alloc_hook+0x59/0x310
[ 1443.816385][T29044]  kmem_cache_alloc+0x56/0x2f0
[ 1443.821202][T29044]  ? dst_alloc+0x101/0x160
[ 1443.825689][T29044]  dst_alloc+0x101/0x160
[ 1443.830088][T29044]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1443.836247][T29044]  ? ip_route_output_key_hash+0x139/0x330
[ 1443.842036][T29044]  ip_route_output_key_hash+0x1ef/0x330
[ 1443.847650][T29044]  ? ip_route_input_rcu+0x3160/0x3160
[ 1443.853124][T29044]  ? memset+0x1e/0x40
[ 1443.857161][T29044]  ip_route_output_flow+0x26/0x150
[ 1443.862336][T29044]  ip_tunnel_xmit+0x993/0x2440
[ 1443.867177][T29044]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[ 1443.872269][T29044]  ? skb_push+0x8a/0xd0
[ 1443.876487][T29044]  ? gre_build_header+0x25b/0x9a0
[ 1443.881612][T29044]  ipgre_xmit+0x79d/0xb20
[ 1443.886002][T29044]  dev_hard_start_xmit+0x262/0x870
[ 1443.891188][T29044]  __dev_queue_xmit+0x1a7f/0x37f0
[ 1443.896275][T29044]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1443.901442][T29044]  ? netdev_core_pick_tx+0x340/0x340
[ 1443.906814][T29044]  ? skb_release_data+0x1d2/0x7c0
[ 1443.911915][T29044]  __bpf_redirect+0x917/0x1180
[ 1443.916749][T29044]  bpf_clone_redirect+0x26c/0x3c0
[ 1443.921851][T29044]  bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a
[ 1443.927460][T29044]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1443.933508][T29044]  ? lock_chain_count+0x20/0x20
[ 1443.938438][T29044]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[ 1443.944752][T29044]  ? lockdep_hardirqs_on+0x94/0x140
[ 1443.950540][T29044]  ? ktime_get+0x7b/0x270
[ 1443.954925][T29044]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[ 1443.961273][T29044]  ? ktime_get_real_ts64+0x440/0x440
[ 1443.966614][T29044]  ? read_lock_is_recursive+0x10/0x10
[ 1443.972052][T29044]  ? __cant_sleep+0x220/0x220
[ 1443.976782][T29044]  ? ktime_get+0x247/0x270
[ 1443.981261][T29044]  bpf_test_run+0x2b6/0x830
[ 1443.985843][T29044]  ? convert___skb_to_skb+0x580/0x580
[ 1443.991279][T29044]  ? eth_get_headlen+0x200/0x200
[ 1443.996266][T29044]  ? __build_skb+0x257/0x3c0
[ 1444.001000][T29044]  ? bpf_prog_test_run_skb+0x773/0x12a0
[ 1444.006598][T29044]  ? convert___skb_to_skb+0x3d/0x580
[ 1444.011946][T29044]  bpf_prog_test_run_skb+0xaa6/0x12a0
[ 1444.017391][T29044]  ? cpu_online+0xa0/0xa0
[ 1444.021777][T29044]  bpf_prog_test_run+0x31e/0x390
[ 1444.026822][T29044]  __sys_bpf+0x62b/0x780
[ 1444.031124][T29044]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1444.036571][T29044]  ? lock_chain_count+0x20/0x20
[ 1444.041488][T29044]  __x64_sys_bpf+0x78/0x90
[ 1444.045967][T29044]  do_syscall_64+0x4c/0xa0
[ 1444.050440][T29044]  ? clear_bhb_loop+0x60/0xb0
[ 1444.055179][T29044]  ? clear_bhb_loop+0x60/0xb0
[ 1444.059915][T29044]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1444.065868][T29044] RIP: 0033:0x7fb5a439aeb9
[ 1444.070334][T29044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1444.089995][T29044] RSP: 002b:00007fb5a52a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1444.093520][T29049] FAULT_INJECTION: forcing a failure.
[ 1444.093520][T29049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1444.098453][T29044] RAX: ffffffffffffffda RBX: 00007fb5a4615fa0 RCX: 00007fb5a439aeb9
[ 1444.098490][T29044] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1444.098505][T29044] RBP: 00007fb5a52a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1444.098520][T29044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1444.143652][T29044] R13: 00007fb5a4616038 R14: 00007fb5a4615fa0 R15: 00007ffedb8643e8
[ 1444.151742][T29044]  </TASK>
[ 1444.176595][T29049] CPU: 1 PID: 29049 Comm: syz.2.7212 Not tainted syzkaller #0
[ 1444.184148][T29049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1444.194249][T29049] Call Trace:
[ 1444.197571][T29049]  <TASK>
[ 1444.200542][T29049]  dump_stack_lvl+0x188/0x24e
[ 1444.205275][T29049]  ? show_regs_print_info+0x12/0x12
[ 1444.210522][T29049]  ? load_image+0x400/0x400
[ 1444.215074][T29049]  ? __lock_acquire+0x7d10/0x7d10
[ 1444.220153][T29049]  ? snprintf+0xe5/0x140
[ 1444.224439][T29049]  should_fail_ex+0x399/0x4d0
[ 1444.229181][T29049]  _copy_to_user+0x2c/0x130
[ 1444.233740][T29049]  simple_read_from_buffer+0xe3/0x150
[ 1444.239172][T29049]  proc_fail_nth_read+0x1a6/0x220
[ 1444.244257][T29049]  ? proc_fault_inject_write+0x310/0x310
[ 1444.249937][T29049]  ? fsnotify_perm+0x248/0x550
[ 1444.254757][T29049]  ? proc_fault_inject_write+0x310/0x310
[ 1444.260437][T29049]  vfs_read+0x2de/0xa00
[ 1444.264649][T29049]  ? kernel_read+0x1e0/0x1e0
[ 1444.269293][T29049]  ? __fget_files+0x28/0x4b0
[ 1444.273932][T29049]  ? __fget_files+0x28/0x4b0
[ 1444.278582][T29049]  ? __fget_files+0x43d/0x4b0
[ 1444.283321][T29049]  ? __fdget_pos+0x2ae/0x360
[ 1444.287994][T29049]  ? ksys_read+0x71/0x250
[ 1444.292381][T29049]  ksys_read+0x14c/0x250
[ 1444.296697][T29049]  ? vfs_write+0xa30/0xa30
[ 1444.301177][T29049]  ? lockdep_hardirqs_on+0x94/0x140
[ 1444.306443][T29049]  do_syscall_64+0x4c/0xa0
[ 1444.310909][T29049]  ? clear_bhb_loop+0x60/0xb0
[ 1444.315645][T29049]  ? clear_bhb_loop+0x60/0xb0
[ 1444.320377][T29049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1444.326331][T29049] RIP: 0033:0x7f4e8275b78e
[ 1444.330796][T29049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1444.350457][T29049] RSP: 002b:00007f4e8359cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1444.358944][T29049] RAX: ffffffffffffffda RBX: 00007f4e8359d6c0 RCX: 00007f4e8275b78e
[ 1444.367400][T29049] RDX: 000000000000000f RSI: 00007f4e8359d0a0 RDI: 0000000000000003
[ 1444.375525][T29049] RBP: 00007f4e8359d090 R08: 0000000000000000 R09: 0000000000000000
[ 1444.383560][T29049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1444.391585][T29049] R13: 00007f4e82a16128 R14: 00007f4e82a16090 R15: 00007fff272692e8
[ 1444.399635][T29049]  </TASK>
[ 1444.545926][T29051] netlink: 'syz.5.7213': attribute type 10 has an invalid length.
[ 1444.580021][T29051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1444.616072][T29051] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1444.683212][T29051] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1444.695772][T29053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1444.713400][T29060] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7214'.
[ 1444.906247][T29072] netlink: 'syz.5.7220': attribute type 10 has an invalid length.
[ 1445.000647][T29072] 8021q: adding VLAN 0 to HW filter on device team0
[ 1445.134426][T29072] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1446.667416][T29110] netlink: 'syz.3.7231': attribute type 10 has an invalid length.
[ 1447.113563][T29110] team0 (unregistering): Port device team_slave_0 removed
[ 1447.211988][T29110] team0 (unregistering): Port device team_slave_1 removed
[ 1447.264721][T29110] team0 (unregistering): Port device geneve0 removed
[ 1447.987489][T29151] netlink: 'syz.1.7247': attribute type 10 has an invalid length.
[ 1448.699228][T29151] 8021q: adding VLAN 0 to HW filter on device team0
[ 1448.762496][T29151] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1450.022223][T29209] netlink: 'syz.1.7267': attribute type 10 has an invalid length.
[ 1450.038444][T29209] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7267'.
[ 1451.094704][T29225] netlink: 'syz.0.7272': attribute type 3 has an invalid length.
[ 1451.152917][T29227] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7273'.
[ 1451.160706][T29225] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7272'.
[ 1451.266444][T29227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1451.741695][T29250] netlink: 'syz.3.7281': attribute type 10 has an invalid length.
[ 1451.753983][T29250] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7281'.
[ 1452.053063][T29259] netlink: 'syz.5.7285': attribute type 27 has an invalid length.
[ 1452.452273][ T4286] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[ 1452.470301][T29261] netlink: 'syz.2.7286': attribute type 2 has an invalid length.
[ 1452.502839][T29268] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.7289'.
[ 1452.576521][T29261] netlink: 'syz.2.7286': attribute type 1 has an invalid length.
[ 1452.595625][T29261] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7286'.
[ 1453.236196][T29274] netlink: 'syz.0.7290': attribute type 5 has an invalid length.
[ 1453.383774][T29280] netlink: 'syz.5.7293': attribute type 4 has an invalid length.
[ 1453.415067][T29280] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7293'.
[ 1453.888315][T29280] net_ratelimit: 66 callbacks suppressed
[ 1453.888430][T29280] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1453.964669][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7295'.
[ 1453.991878][T29288] netlink: 'syz.3.7294': attribute type 10 has an invalid length.
[ 1454.010250][T29288] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7294'.
[ 1454.177884][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7298'.
[ 1454.274168][T29299] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1454.445347][T29305] FAULT_INJECTION: forcing a failure.
[ 1454.445347][T29305] name failslab, interval 1, probability 0, space 0, times 0
[ 1454.472082][T29305] CPU: 1 PID: 29305 Comm: syz.3.7302 Not tainted syzkaller #0
[ 1454.479642][T29305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1454.489754][T29305] Call Trace:
[ 1454.493092][T29305]  <TASK>
[ 1454.496068][T29305]  dump_stack_lvl+0x188/0x24e
[ 1454.500810][T29305]  ? show_regs_print_info+0x12/0x12
[ 1454.506082][T29305]  ? load_image+0x400/0x400
[ 1454.510644][T29305]  ? __might_sleep+0xd0/0xd0
[ 1454.515292][T29305]  ? __lock_acquire+0x7d10/0x7d10
[ 1454.520384][T29305]  should_fail_ex+0x399/0x4d0
[ 1454.525131][T29305]  should_failslab+0x5/0x20
[ 1454.529706][T29305]  slab_pre_alloc_hook+0x59/0x310
[ 1454.534791][T29305]  kmem_cache_alloc_node+0x5a/0x320
[ 1454.540046][T29305]  ? __alloc_skb+0xfc/0x7e0
[ 1454.544619][T29305]  __alloc_skb+0xfc/0x7e0
[ 1454.549039][T29305]  ? netlink_autobind+0xda/0x300
[ 1454.554059][T29305]  netlink_sendmsg+0x654/0xbd0
[ 1454.558971][T29305]  ? netlink_getsockopt+0x550/0x550
[ 1454.564235][T29305]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1454.570472][T29305]  ? aa_sock_msg_perm+0x94/0x150
[ 1454.575484][T29305]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1454.580868][T29305]  ? security_socket_sendmsg+0x7c/0xa0
[ 1454.586408][T29305]  ? netlink_getsockopt+0x550/0x550
[ 1454.591674][T29305]  ____sys_sendmsg+0x5be/0x970
[ 1454.596519][T29305]  ? audit_tree_destroy_watch+0x20/0x20
[ 1454.602131][T29305]  ? __sys_sendmsg_sock+0x30/0x30
[ 1454.607236][T29305]  ? __import_iovec+0x315/0x500
[ 1454.612148][T29305]  ? import_iovec+0x6f/0xa0
[ 1454.616706][T29305]  ___sys_sendmsg+0x2a2/0x360
[ 1454.621449][T29305]  ? __sys_sendmsg+0x290/0x290
[ 1454.626310][T29305]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1454.631223][T29305]  ? __x64_sys_sendmsg+0x80/0x80
[ 1454.636227][T29305]  ? lockdep_hardirqs_on+0x94/0x140
[ 1454.641495][T29305]  do_syscall_64+0x4c/0xa0
[ 1454.645972][T29305]  ? clear_bhb_loop+0x60/0xb0
[ 1454.650703][T29305]  ? clear_bhb_loop+0x60/0xb0
[ 1454.655433][T29305]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1454.661373][T29305] RIP: 0033:0x7f183fd9aeb9
[ 1454.665832][T29305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1454.685492][T29305] RSP: 002b:00007f1840ba5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1454.693971][T29305] RAX: ffffffffffffffda RBX: 00007f1840015fa0 RCX: 00007f183fd9aeb9
[ 1454.702053][T29305] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008
[ 1454.710080][T29305] RBP: 00007f1840ba5090 R08: 0000000000000000 R09: 0000000000000000
[ 1454.718115][T29305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1454.726138][T29305] R13: 00007f1840016038 R14: 00007f1840015fa0 R15: 00007ffd9cdffae8
[ 1454.734176][T29305]  </TASK>
[ 1454.746823][T29309] FAULT_INJECTION: forcing a failure.
[ 1454.746823][T29309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1454.769643][T29309] CPU: 1 PID: 29309 Comm: syz.1.7304 Not tainted syzkaller #0
[ 1454.777188][T29309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1454.787292][T29309] Call Trace:
[ 1454.790626][T29309]  <TASK>
[ 1454.793600][T29309]  dump_stack_lvl+0x188/0x24e
[ 1454.798342][T29309]  ? show_regs_print_info+0x12/0x12
[ 1454.803598][T29309]  ? load_image+0x400/0x400
[ 1454.808154][T29309]  ? __lock_acquire+0x7d10/0x7d10
[ 1454.813240][T29309]  should_fail_ex+0x399/0x4d0
[ 1454.817994][T29309]  _copy_from_user+0x2c/0x170
[ 1454.822727][T29309]  kstrtouint_from_user+0xda/0x170
[ 1454.827907][T29309]  ? kstrtol_from_user+0x190/0x190
[ 1454.833113][T29309]  proc_fail_nth_write+0x8b/0x200
[ 1454.838198][T29309]  ? proc_fail_nth_read+0x220/0x220
[ 1454.843455][T29309]  ? common_file_perm+0x171/0x1c0
[ 1454.848543][T29309]  ? proc_fail_nth_read+0x220/0x220
[ 1454.853796][T29309]  vfs_write+0x2e6/0xa30
[ 1454.858107][T29309]  ? file_end_write+0x250/0x250
[ 1454.863021][T29309]  ? __fget_files+0x28/0x4b0
[ 1454.867680][T29309]  ? __fget_files+0x28/0x4b0
[ 1454.872333][T29309]  ? __fget_files+0x43d/0x4b0
[ 1454.877081][T29309]  ? __fdget_pos+0x2ae/0x360
[ 1454.881727][T29309]  ? ksys_write+0x71/0x250
[ 1454.886207][T29309]  ksys_write+0x14c/0x250
[ 1454.890621][T29309]  ? __ia32_sys_read+0x80/0x80
[ 1454.895465][T29309]  ? lockdep_hardirqs_on+0x94/0x140
[ 1454.900737][T29309]  do_syscall_64+0x4c/0xa0
[ 1454.905216][T29309]  ? clear_bhb_loop+0x60/0xb0
[ 1454.909978][T29309]  ? clear_bhb_loop+0x60/0xb0
[ 1454.914716][T29309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1454.920677][T29309] RIP: 0033:0x7fd62135b78e
[ 1454.925177][T29309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1454.944844][T29309] RSP: 002b:00007fd6221affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1454.953330][T29309] RAX: ffffffffffffffda RBX: 00007fd6221b06c0 RCX: 00007fd62135b78e
[ 1454.961471][T29309] RDX: 0000000000000001 RSI: 00007fd6221b00a0 RDI: 0000000000000004
[ 1454.969500][T29309] RBP: 00007fd6221b0090 R08: 0000000000000000 R09: 0000000000000000
[ 1454.977613][T29309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1454.985634][T29309] R13: 00007fd621616128 R14: 00007fd621616090 R15: 00007ffe63a9db18
[ 1454.993655][T29309]  </TASK>
[ 1455.550207][T29327] netlink: 'syz.3.7311': attribute type 10 has an invalid length.
[ 1455.559215][T29327] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 1455.889719][T29331] netlink: 'syz.2.7312': attribute type 4 has an invalid length.
[ 1455.933748][T29331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7312'.
[ 1456.101219][T29331] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1456.286969][T29347] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7318'.
[ 1456.332154][T29347] device hsr_slave_0 left promiscuous mode
[ 1456.375307][T29347] device hsr_slave_1 left promiscuous mode
[ 1456.691295][T29352] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1456.709934][T29349] device wg2 left promiscuous mode
[ 1456.732834][T29358] device wg2 entered promiscuous mode
[ 1457.041031][T29367] netlink: 'syz.3.7325': attribute type 10 has an invalid length.
[ 1457.093885][T29367] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7325'.
[ 1457.869834][T29391] netlink: 'syz.3.7331': attribute type 4 has an invalid length.
[ 1457.917234][T29391] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7331'.
[ 1457.935817][T29393] FAULT_INJECTION: forcing a failure.
[ 1457.935817][T29393] name failslab, interval 1, probability 0, space 0, times 0
[ 1457.995703][T29393] CPU: 1 PID: 29393 Comm: syz.2.7332 Not tainted syzkaller #0
[ 1458.003277][T29393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1458.013404][T29393] Call Trace:
[ 1458.016735][T29393]  <TASK>
[ 1458.019712][T29393]  dump_stack_lvl+0x188/0x24e
[ 1458.024446][T29393]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1458.030660][T29393]  ? show_regs_print_info+0x12/0x12
[ 1458.035919][T29393]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1458.042136][T29393]  ? audit_tree_destroy_watch+0x20/0x20
[ 1458.047736][T29393]  should_fail_ex+0x399/0x4d0
[ 1458.052483][T29393]  should_failslab+0x5/0x20
[ 1458.057052][T29393]  slab_pre_alloc_hook+0x59/0x310
[ 1458.062126][T29393]  ? __lock_acquire+0x7d10/0x7d10
[ 1458.067193][T29393]  ? kvmalloc_node+0x6c/0x180
[ 1458.071916][T29393]  __kmem_cache_alloc_node+0x4f/0x260
[ 1458.077330][T29393]  ? schedule_delayed_monitor_work+0x160/0x160
[ 1458.083526][T29393]  ? kvmalloc_node+0x6c/0x180
[ 1458.088239][T29393]  __kmalloc_node+0xa0/0x240
[ 1458.092874][T29393]  kvmalloc_node+0x6c/0x180
[ 1458.097430][T29393]  bpf_test_run_xdp_live+0x1dd/0x1a90
[ 1458.102859][T29393]  ? bpf_dispatcher_xdp+0x800/0x1000
[ 1458.108175][T29393]  ? bpf_dispatcher_change_prog+0xcbb/0xf10
[ 1458.114121][T29393]  ? bpf_dispatcher_xdp+0x800/0x1000
[ 1458.119443][T29393]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1458.125082][T29393]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1458.131378][T29393]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1458.136898][T29393]  bpf_prog_test_run_xdp+0x736/0xf10
[ 1458.142227][T29393]  ? dev_put+0x80/0x80
[ 1458.146340][T29393]  ? dev_put+0x80/0x80
[ 1458.150437][T29393]  bpf_prog_test_run+0x31e/0x390
[ 1458.155424][T29393]  __sys_bpf+0x62b/0x780
[ 1458.159710][T29393]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1458.165130][T29393]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1458.171330][T29393]  __x64_sys_bpf+0x78/0x90
[ 1458.175790][T29393]  do_syscall_64+0x4c/0xa0
[ 1458.180250][T29393]  ? clear_bhb_loop+0x60/0xb0
[ 1458.184958][T29393]  ? clear_bhb_loop+0x60/0xb0
[ 1458.189669][T29393]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1458.195591][T29393] RIP: 0033:0x7f4e8279aeb9
[ 1458.200045][T29393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1458.219696][T29393] RSP: 002b:00007f4e835be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1458.228150][T29393] RAX: ffffffffffffffda RBX: 00007f4e82a15fa0 RCX: 00007f4e8279aeb9
[ 1458.236153][T29393] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1458.244154][T29393] RBP: 00007f4e835be090 R08: 0000000000000000 R09: 0000000000000000
[ 1458.252224][T29393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1458.260223][T29393] R13: 00007f4e82a16038 R14: 00007f4e82a15fa0 R15: 00007fff272692e8
[ 1458.268241][T29393]  </TASK>
[ 1458.402759][T29391] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1459.077934][T29413] netlink: 'syz.3.7336': attribute type 10 has an invalid length.
[ 1459.131179][T29413] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7336'.
[ 1459.220680][T29416] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7337'.
[ 1459.315705][T29416] device hsr_slave_0 left promiscuous mode
[ 1459.814974][T29416] device hsr_slave_1 left promiscuous mode
[ 1460.088845][T29432] netlink: 'syz.1.7345': attribute type 10 has an invalid length.
[ 1460.972913][T29453] netlink: 'syz.2.7349': attribute type 1 has an invalid length.
[ 1461.002007][T29453] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7349'.
[ 1461.096779][T29454] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.7349'.
[ 1461.302929][T29448] netlink: 'syz.1.7348': attribute type 4 has an invalid length.
[ 1461.310961][T29448] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7348'.
[ 1461.368087][T29448] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1461.415287][T29454] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1461.436429][T29454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1461.475173][T29454] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1461.670589][T29459] sctp: [Deprecated]: syz.0.7350 (pid 29459) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1461.670589][T29459] Use struct sctp_sack_info instead
[ 1461.811106][T29461] netlink: 'syz.5.7352': attribute type 10 has an invalid length.
[ 1461.832049][T29461] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7352'.
[ 1461.843542][T29461] device batadv_slave_1 entered promiscuous mode
[ 1461.853849][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1461.870867][T29461] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1462.236995][T29476] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7357'.
[ 1463.201493][T29490] device pim6reg1 entered promiscuous mode
[ 1465.179472][ T7057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1465.391304][T29493] netlink: 'syz.5.7363': attribute type 10 has an invalid length.
[ 1465.415121][T29493] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7363'.
[ 1465.624589][T29495] netlink: 'syz.0.7364': attribute type 4 has an invalid length.
[ 1465.645045][T29495] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7364'.
[ 1465.673484][T29495] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1466.086627][T29513] netlink: 'syz.1.7370': attribute type 10 has an invalid length.
[ 1466.112493][T29517] FAULT_INJECTION: forcing a failure.
[ 1466.112493][T29517] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1466.130405][T29513] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7370'.
[ 1466.155352][T29517] CPU: 1 PID: 29517 Comm: syz.3.7373 Not tainted syzkaller #0
[ 1466.162914][T29517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1466.173024][T29517] Call Trace:
[ 1466.176346][T29517]  <TASK>
[ 1466.179322][T29517]  dump_stack_lvl+0x188/0x24e
[ 1466.184071][T29517]  ? show_regs_print_info+0x12/0x12
[ 1466.189329][T29517]  ? load_image+0x400/0x400
[ 1466.193937][T29517]  ? __lock_acquire+0x7d10/0x7d10
[ 1466.199032][T29517]  ? snprintf+0xe5/0x140
[ 1466.203320][T29517]  should_fail_ex+0x399/0x4d0
[ 1466.208073][T29517]  _copy_to_user+0x2c/0x130
[ 1466.212635][T29517]  simple_read_from_buffer+0xe3/0x150
[ 1466.218081][T29517]  proc_fail_nth_read+0x1a6/0x220
[ 1466.223177][T29517]  ? proc_fault_inject_write+0x310/0x310
[ 1466.228872][T29517]  ? fsnotify_perm+0x248/0x550
[ 1466.233706][T29517]  ? proc_fault_inject_write+0x310/0x310
[ 1466.239394][T29517]  vfs_read+0x2de/0xa00
[ 1466.243705][T29517]  ? kernel_read+0x1e0/0x1e0
[ 1466.248353][T29517]  ? __fget_files+0x28/0x4b0
[ 1466.253000][T29517]  ? __fget_files+0x28/0x4b0
[ 1466.257646][T29517]  ? __fget_files+0x43d/0x4b0
[ 1466.262395][T29517]  ? __fdget_pos+0x2ae/0x360
[ 1466.267049][T29517]  ? ksys_read+0x71/0x250
[ 1466.271445][T29517]  ksys_read+0x14c/0x250
[ 1466.275747][T29517]  ? vfs_write+0xa30/0xa30
[ 1466.280226][T29517]  ? lockdep_hardirqs_on+0x94/0x140
[ 1466.285489][T29517]  do_syscall_64+0x4c/0xa0
[ 1466.289973][T29517]  ? clear_bhb_loop+0x60/0xb0
[ 1466.294737][T29517]  ? clear_bhb_loop+0x60/0xb0
[ 1466.299470][T29517]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1466.305419][T29517] RIP: 0033:0x7f183fd5b78e
[ 1466.309888][T29517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1466.329559][T29517] RSP: 002b:00007f1840ba4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1466.338040][T29517] RAX: ffffffffffffffda RBX: 00007f1840ba56c0 RCX: 00007f183fd5b78e
[ 1466.346076][T29517] RDX: 000000000000000f RSI: 00007f1840ba50a0 RDI: 0000000000000003
[ 1466.354114][T29517] RBP: 00007f1840ba5090 R08: 0000000000000000 R09: 0000000000000000
[ 1466.362140][T29517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1466.370174][T29517] R13: 00007f1840016038 R14: 00007f1840015fa0 R15: 00007ffd9cdffae8
[ 1466.378230][T29517]  </TASK>
[ 1467.223759][T29546] netlink: 'syz.5.7383': attribute type 25 has an invalid length.
[ 1467.237799][T29546] netlink: 'syz.5.7383': attribute type 39 has an invalid length.
[ 1467.272408][T29543] netlink: 'syz.0.7381': attribute type 4 has an invalid length.
[ 1467.291311][T29543] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7381'.
[ 1467.333730][T29543] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1467.523347][T29557] netlink: 'syz.2.7387': attribute type 10 has an invalid length.
[ 1467.556463][T29557] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7387'.
[ 1468.348605][T29581] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7395'.
[ 1468.449344][T29584] netlink: 'syz.1.7396': attribute type 10 has an invalid length.
[ 1468.462194][T29582] delete_channel: no stack
[ 1468.462570][T29582] delete_channel: no stack
[ 1468.518314][T29584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7396'.
[ 1468.602086][T29584] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1468.651412][T29584] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1468.789852][T29584] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1468.847626][T29596] netlink: 'syz.3.7399': attribute type 4 has an invalid length.
[ 1468.866804][T29596] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7399'.
[ 1468.897365][T29596] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1469.010009][T29600] netlink: 'syz.5.7401': attribute type 10 has an invalid length.
[ 1469.107334][T29600] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7401'.
[ 1469.878045][T29618] netlink: 'syz.5.7407': attribute type 4 has an invalid length.
[ 1469.888403][T29618] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7407'.
[ 1469.901152][T29618] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1471.059366][T29631] netlink: 'syz.5.7412': attribute type 4 has an invalid length.
[ 1471.164972][T29631] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7412'.
[ 1471.265312][T29631] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1471.553166][T29634] netlink: 'syz.2.7413': attribute type 10 has an invalid length.
[ 1471.567018][T29634] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7413'.
[ 1472.261729][T29644] netlink: 'syz.5.7415': attribute type 1 has an invalid length.
[ 1472.270434][T29644] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.7415'.
[ 1472.351614][T29645] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.7415'.
[ 1473.037102][T29654] netlink: 'syz.1.7419': attribute type 39 has an invalid length.
[ 1473.075151][T29654] netlink: 'syz.1.7419': attribute type 1 has an invalid length.
[ 1473.083619][T29654] bridge0: port 1(bridge_slave_0) entered learning state
[ 1473.553843][T29663] netlink: 'syz.1.7423': attribute type 4 has an invalid length.
[ 1473.596302][T29663] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7423'.
[ 1473.613952][T29663] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1473.655273][T29669] netlink: 'syz.0.7425': attribute type 4 has an invalid length.
[ 1473.695176][T29669] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7425'.
[ 1473.715514][T29669] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1473.928544][T29673] netlink: 'syz.2.7427': attribute type 10 has an invalid length.
[ 1473.966262][T29673] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7427'.
[ 1474.040463][T29680] netlink: 'syz.0.7429': attribute type 21 has an invalid length.
[ 1474.742083][T29700] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7437'.
[ 1475.261289][T29707] netlink: 'syz.2.7439': attribute type 4 has an invalid length.
[ 1475.345271][T29707] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7439'.
[ 1475.534331][T29707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1476.232371][T29722] FAULT_INJECTION: forcing a failure.
[ 1476.232371][T29722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1476.285280][T29722] CPU: 0 PID: 29722 Comm: syz.1.7444 Not tainted syzkaller #0
[ 1476.292861][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1476.302972][T29722] Call Trace:
[ 1476.306291][T29722]  <TASK>
[ 1476.309266][T29722]  dump_stack_lvl+0x188/0x24e
[ 1476.314021][T29722]  ? show_regs_print_info+0x12/0x12
[ 1476.319283][T29722]  ? load_image+0x400/0x400
[ 1476.323836][T29722]  ? __lock_acquire+0x7d10/0x7d10
[ 1476.328923][T29722]  should_fail_ex+0x399/0x4d0
[ 1476.333669][T29722]  _copy_from_user+0x2c/0x170
[ 1476.338399][T29722]  __sys_bpf+0x2ea/0x780
[ 1476.342725][T29722]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1476.348179][T29722]  ? lock_chain_count+0x20/0x20
[ 1476.353101][T29722]  __x64_sys_bpf+0x78/0x90
[ 1476.357583][T29722]  do_syscall_64+0x4c/0xa0
[ 1476.362051][T29722]  ? clear_bhb_loop+0x60/0xb0
[ 1476.366789][T29722]  ? clear_bhb_loop+0x60/0xb0
[ 1476.371531][T29722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1476.377474][T29722] RIP: 0033:0x7fd62139aeb9
[ 1476.381921][T29722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1476.401654][T29722] RSP: 002b:00007fd6221d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1476.410101][T29722] RAX: ffffffffffffffda RBX: 00007fd621615fa0 RCX: 00007fd62139aeb9
[ 1476.418191][T29722] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1476.426197][T29722] RBP: 00007fd6221d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1476.434368][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1476.442364][T29722] R13: 00007fd621616038 R14: 00007fd621615fa0 R15: 00007ffe63a9db18
[ 1476.450387][T29722]  </TASK>
[ 1476.591511][T29727] netlink: 'syz.2.7445': attribute type 10 has an invalid length.
[ 1476.628334][T29727] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7445'.
[ 1480.058267][T29741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7450'.
[ 1480.486061][T29751] netlink: 'syz.0.7455': attribute type 4 has an invalid length.
[ 1480.494223][T29751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7455'.
[ 1480.523385][T29758] FAULT_INJECTION: forcing a failure.
[ 1480.523385][T29758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1480.553716][T29751] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1480.560604][T29758] CPU: 0 PID: 29758 Comm: syz.2.7456 Not tainted syzkaller #0
[ 1480.577295][T29758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1480.587408][T29758] Call Trace:
[ 1480.590727][T29758]  <TASK>
[ 1480.593695][T29758]  dump_stack_lvl+0x188/0x24e
[ 1480.598440][T29758]  ? show_regs_print_info+0x12/0x12
[ 1480.603697][T29758]  ? load_image+0x400/0x400
[ 1480.608256][T29758]  ? __lock_acquire+0x7d10/0x7d10
[ 1480.613390][T29758]  should_fail_ex+0x399/0x4d0
[ 1480.618133][T29758]  _copy_from_user+0x2c/0x170
[ 1480.622867][T29758]  ___sys_sendmsg+0x1c3/0x360
[ 1480.627611][T29758]  ? __sys_sendmsg+0x290/0x290
[ 1480.632460][T29758]  ? __lock_acquire+0x7d10/0x7d10
[ 1480.637603][T29758]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1480.642517][T29758]  ? ct_nmi_exit+0x145/0x1c0
[ 1480.647160][T29758]  ? __x64_sys_sendmsg+0x80/0x80
[ 1480.652178][T29758]  ? lockdep_hardirqs_on+0x94/0x140
[ 1480.657441][T29758]  do_syscall_64+0x4c/0xa0
[ 1480.661922][T29758]  ? clear_bhb_loop+0x60/0xb0
[ 1480.666652][T29758]  ? clear_bhb_loop+0x60/0xb0
[ 1480.671374][T29758]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1480.677318][T29758] RIP: 0033:0x7f4e8279aeb9
[ 1480.681779][T29758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1480.701531][T29758] RSP: 002b:00007f4e835be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1480.710003][T29758] RAX: ffffffffffffffda RBX: 00007f4e82a15fa0 RCX: 00007f4e8279aeb9
[ 1480.718026][T29758] RDX: 000000000000fffe RSI: 0000200000000340 RDI: 0000000000000003
[ 1480.726083][T29758] RBP: 00007f4e835be090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.734092][T29758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1480.742093][T29758] R13: 00007f4e82a16038 R14: 00007f4e82a15fa0 R15: 00007fff272692e8
[ 1480.750120][T29758]  </TASK>
[ 1480.772069][T29761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7458'.
[ 1481.040510][T29766] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7459'.
[ 1481.170502][T29770] netlink: 'syz.3.7460': attribute type 10 has an invalid length.
[ 1481.991576][T29798] netlink: 'syz.1.7471': attribute type 10 has an invalid length.
[ 1482.019178][T29798] bond0: (slave bond_slave_0): Releasing backup interface
[ 1482.110050][T29802] netlink: 'syz.3.7472': attribute type 4 has an invalid length.
[ 1482.123416][T29802] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7472'.
[ 1482.135155][T29802] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1482.828249][T29824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1482.864359][T29816] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7477'.
[ 1483.276280][T29835] netlink: 'syz.1.7484': attribute type 10 has an invalid length.
[ 1484.134079][T29849] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7489'.
[ 1484.727548][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.733951][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.936327][T29867] netlink: 'syz.2.7492': attribute type 4 has an invalid length.
[ 1484.944463][T29867] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7492'.
[ 1484.973877][T29867] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1485.241004][T29878] netlink: 'syz.1.7495': attribute type 10 has an invalid length.
[ 1485.481317][T29886] netlink: 'syz.2.7500': attribute type 10 has an invalid length.
[ 1485.493784][T29886] bond0: (slave bond_slave_0): Releasing backup interface
[ 1485.504504][T29886] device bond_slave_0 left promiscuous mode
[ 1486.080796][T29899] netlink: 'syz.0.7506': attribute type 10 has an invalid length.
[ 1487.145532][T29923] netlink: 'syz.0.7514': attribute type 10 has an invalid length.
[ 1488.172071][T29950] netlink: 'syz.5.7522': attribute type 10 has an invalid length.
[ 1488.192689][T29948] netlink: 'syz.0.7532': attribute type 4 has an invalid length.
[ 1488.212989][T29948] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7532'.
[ 1488.241644][T29948] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1488.605786][T29965] netlink: 'syz.1.7526': attribute type 10 has an invalid length.
[ 1489.134133][T29979] netlink: 'syz.2.7531': attribute type 4 has an invalid length.
[ 1489.193822][T29979] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7531'.
[ 1489.226628][T29979] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1489.749976][T29996] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[ 1491.909867][T30001] netlink: 'syz.3.7539': attribute type 4 has an invalid length.
[ 1491.931687][T30001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7539'.
[ 1491.949724][T30001] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1492.208237][T30010] netlink: 'syz.0.7540': attribute type 10 has an invalid length.
[ 1492.549481][T30024] netlink: 'syz.0.7549': attribute type 27 has an invalid length.
[ 1492.816870][T30036] netlink: 'syz.0.7553': attribute type 4 has an invalid length.
[ 1492.837358][T30036] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7553'.
[ 1492.858576][T30036] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1493.086208][T30043] netlink: 'syz.1.7556': attribute type 4 has an invalid length.
[ 1493.135052][T30043] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7556'.
[ 1493.165147][T30043] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1493.228944][T30052] netlink: 'syz.0.7558': attribute type 25 has an invalid length.
[ 1493.249818][T30052] netlink: 'syz.0.7558': attribute type 7 has an invalid length.
[ 1493.290282][T30053] netlink: 'syz.3.7559': attribute type 10 has an invalid length.
[ 1493.353415][T30053] bond0: (slave bond_slave_0): Releasing backup interface
[ 1493.408385][T30053] device bond_slave_0 left promiscuous mode
[ 1493.551511][T30056] netlink: 'syz.2.7560': attribute type 10 has an invalid length.
[ 1493.630055][T30060] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7561'.
[ 1493.656083][T30060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1493.961821][T30073] netlink: 'syz.0.7566': attribute type 10 has an invalid length.
[ 1494.012939][T30073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7566'.
[ 1494.496509][T30084] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7570'.
[ 1494.532461][T30087] netlink: 'syz.1.7569': attribute type 4 has an invalid length.
[ 1494.584301][T30087] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7569'.
[ 1494.613533][T30087] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1495.191652][T30109] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7577'.
[ 1495.235248][T30109] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1495.297129][T30108] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1495.496617][T30119] 
: renamed from bond_slave_0
[ 1495.790627][T30126] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7584'.
[ 1496.210833][ T7031] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1496.778294][T30148] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[ 1497.129653][ T7057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1497.583622][T30163] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7598'.
[ 1497.641743][T30162] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7596'.
[ 1497.696201][T30162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1497.967698][T30169] validate_nla: 3 callbacks suppressed
[ 1497.967719][T30169] netlink: 'syz.1.7599': attribute type 10 has an invalid length.
[ 1498.067422][T30169] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7599'.
[ 1498.076936][ T7057] wlan1: Trigger new scan to find an IBSS to join
[ 1498.095664][T30173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7601'.
[ 1498.402149][T30186] FAULT_INJECTION: forcing a failure.
[ 1498.402149][T30186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1498.425185][T30186] CPU: 0 PID: 30186 Comm: syz.2.7606 Not tainted syzkaller #0
[ 1498.432742][T30186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1498.442848][T30186] Call Trace:
[ 1498.446174][T30186]  <TASK>
[ 1498.449149][T30186]  dump_stack_lvl+0x188/0x24e
[ 1498.453883][T30186]  ? show_regs_print_info+0x12/0x12
[ 1498.459137][T30186]  ? load_image+0x400/0x400
[ 1498.463700][T30186]  ? __lock_acquire+0x7d10/0x7d10
[ 1498.468805][T30186]  should_fail_ex+0x399/0x4d0
[ 1498.473550][T30186]  _copy_to_user+0x2c/0x130
[ 1498.478119][T30186]  bpf_obj_get_info_by_fd+0x288d/0x2f50
[ 1498.483739][T30186]  ? __lock_acquire+0x7d10/0x7d10
[ 1498.488836][T30186]  ? bpf_map_get_fd_by_id+0x310/0x310
[ 1498.494265][T30186]  ? get_pid_task+0x1c/0x1e0
[ 1498.498959][T30186]  ? __might_fault+0xa6/0x120
[ 1498.503681][T30186]  ? __might_fault+0xc2/0x120
[ 1498.508435][T30186]  ? __might_fault+0xa6/0x120
[ 1498.513157][T30186]  ? bpf_lsm_bpf+0x5/0x10
[ 1498.517533][T30186]  ? security_bpf+0x7a/0xa0
[ 1498.522095][T30186]  __sys_bpf+0x505/0x780
[ 1498.526400][T30186]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1498.531851][T30186]  ? lock_chain_count+0x20/0x20
[ 1498.536777][T30186]  __x64_sys_bpf+0x78/0x90
[ 1498.541254][T30186]  do_syscall_64+0x4c/0xa0
[ 1498.545713][T30186]  ? clear_bhb_loop+0x60/0xb0
[ 1498.550442][T30186]  ? clear_bhb_loop+0x60/0xb0
[ 1498.555162][T30186]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1498.561095][T30186] RIP: 0033:0x7f4e8279aeb9
[ 1498.565555][T30186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1498.585247][T30186] RSP: 002b:00007f4e835be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1498.593725][T30186] RAX: ffffffffffffffda RBX: 00007f4e82a15fa0 RCX: 00007f4e8279aeb9
[ 1498.601753][T30186] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f
[ 1498.609767][T30186] RBP: 00007f4e835be090 R08: 0000000000000000 R09: 0000000000000000
[ 1498.617779][T30186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1498.625796][T30186] R13: 00007f4e82a16038 R14: 00007f4e82a15fa0 R15: 00007fff272692e8
[ 1498.633826][T30186]  </TASK>
[ 1499.403835][T30210] netlink: 763 bytes leftover after parsing attributes in process `syz.1.7613'.
[ 1499.561720][T30214] netlink: 'syz.0.7614': attribute type 10 has an invalid length.
[ 1499.583408][T30214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7614'.
[ 1499.944959][T30228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7620'.
[ 1499.974994][T30228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7620'.
[ 1500.008705][T30228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7620'.
[ 1500.050478][T30232] FAULT_INJECTION: forcing a failure.
[ 1500.050478][T30232] name failslab, interval 1, probability 0, space 0, times 0
[ 1500.100334][T30236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7620'.
[ 1500.150628][T30232] CPU: 0 PID: 30232 Comm: syz.1.7622 Not tainted syzkaller #0
[ 1500.158184][T30232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1500.168287][T30232] Call Trace:
[ 1500.171614][T30232]  <TASK>
[ 1500.174592][T30232]  dump_stack_lvl+0x188/0x24e
[ 1500.179331][T30232]  ? show_regs_print_info+0x12/0x12
[ 1500.184591][T30232]  ? load_image+0x400/0x400
[ 1500.189138][T30232]  ? __might_sleep+0xd0/0xd0
[ 1500.193775][T30232]  ? __lock_acquire+0x7d10/0x7d10
[ 1500.198852][T30232]  should_fail_ex+0x399/0x4d0
[ 1500.203597][T30232]  should_failslab+0x5/0x20
[ 1500.208160][T30232]  slab_pre_alloc_hook+0x59/0x310
[ 1500.213235][T30232]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1500.218827][T30232]  __kmem_cache_alloc_node+0x4f/0x260
[ 1500.224254][T30232]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1500.229842][T30232]  __kmalloc+0xa0/0x240
[ 1500.234053][T30232]  bpf_prog_test_run_skb+0x234/0x12a0
[ 1500.239472][T30232]  ? __fget_files+0x28/0x4b0
[ 1500.244118][T30232]  ? __fget_files+0x28/0x4b0
[ 1500.248762][T30232]  ? __fget_files+0x43d/0x4b0
[ 1500.253527][T30232]  ? cpu_online+0xa0/0xa0
[ 1500.257909][T30232]  bpf_prog_test_run+0x31e/0x390
[ 1500.262900][T30232]  __sys_bpf+0x62b/0x780
[ 1500.267205][T30232]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1500.272662][T30232]  ? lock_chain_count+0x20/0x20
[ 1500.277582][T30232]  __x64_sys_bpf+0x78/0x90
[ 1500.282084][T30232]  do_syscall_64+0x4c/0xa0
[ 1500.286554][T30232]  ? clear_bhb_loop+0x60/0xb0
[ 1500.291299][T30232]  ? clear_bhb_loop+0x60/0xb0
[ 1500.296030][T30232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1500.301989][T30232] RIP: 0033:0x7fd62139aeb9
[ 1500.306531][T30232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1500.326190][T30232] RSP: 002b:00007fd6221d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1500.334665][T30232] RAX: ffffffffffffffda RBX: 00007fd621615fa0 RCX: 00007fd62139aeb9
[ 1500.342766][T30232] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1500.350819][T30232] RBP: 00007fd6221d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1500.358854][T30232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1500.366873][T30232] R13: 00007fd621616038 R14: 00007fd621615fa0 R15: 00007ffe63a9db18
[ 1500.374912][T30232]  </TASK>
[ 1501.227028][T30230] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1501.548447][T30248] netlink: 'syz.5.7628': attribute type 5 has an invalid length.
[ 1501.563675][T30245] netlink: 'syz.1.7625': attribute type 3 has an invalid length.
[ 1501.584736][T30245] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7625'.
[ 1501.722859][T30255] netlink: 'syz.0.7630': attribute type 10 has an invalid length.
[ 1501.741892][T30255] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7630'.
[ 1502.075747][    T9] wlan1: Trigger new scan to find an IBSS to join
[ 1502.114760][T30275] netlink: 763 bytes leftover after parsing attributes in process `syz.5.7633'.
[ 1502.305944][ T4286] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11
[ 1502.983953][T30292] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7640'.
[ 1504.076195][ T7583] wlan1: Creating new IBSS network, BSSID 3a:56:54:20:b2:f2
[ 1504.077529][T30302] netlink: 'syz.0.7645': attribute type 10 has an invalid length.
[ 1504.577219][T30326] __nla_validate_parse: 2 callbacks suppressed
[ 1504.577264][T30326] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7653'.
[ 1505.115196][ T7057] wlan1: Trigger new scan to find an IBSS to join
[ 1505.173600][T30342] netlink: 'syz.5.7657': attribute type 25 has an invalid length.
[ 1505.201635][T30342] netlink: 'syz.5.7657': attribute type 28 has an invalid length.
[ 1505.480280][T30353] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7660'.
[ 1505.563757][T30360] netlink: 'syz.5.7662': attribute type 10 has an invalid length.
[ 1505.579789][T30360] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7662'.
[ 1505.740367][T30358] delete_channel: no stack
[ 1505.753021][T30358] delete_channel: no stack
[ 1506.119420][T30368] netlink: 'syz.0.7665': attribute type 10 has an invalid length.
[ 1506.137436][T30368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7665'.
[ 1506.200860][T30373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7666'.
[ 1507.359843][T30404] netlink: 'syz.0.7676': attribute type 10 has an invalid length.
[ 1507.391073][T30403] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.7675'.
[ 1507.434712][T30404] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7676'.
[ 1507.527140][T30399] netlink: 'syz.2.7685': attribute type 11 has an invalid length.
[ 1507.572408][T30399] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7685'.
[ 1507.601323][T30399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1508.075311][    T9] wlan1: Trigger new scan to find an IBSS to join
[ 1508.498395][T30424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7682'.
[ 1508.993280][T30435] netlink: 'syz.0.7688': attribute type 2 has an invalid length.
[ 1509.297531][T30438] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.7688'.
[ 1509.897241][T30435] device 0 entered promiscuous mode
[ 1509.943334][T30441] netlink: 'syz.3.7689': attribute type 10 has an invalid length.
[ 1510.183672][T30449] netlink: 'syz.3.7690': attribute type 10 has an invalid length.
[ 1510.191726][T30449] __nla_validate_parse: 1 callbacks suppressed
[ 1510.191742][T30449] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7690'.
[ 1510.381017][ T7050] wlan1: Creating new IBSS network, BSSID 42:21:ea:8f:62:1e
[ 1510.772557][T30461] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7691'.
[ 1510.916965][T30462] netlink: 'syz.3.7695': attribute type 4 has an invalid length.
[ 1510.933142][T30460] netlink: 'syz.2.7692': attribute type 3 has an invalid length.
[ 1510.959827][T30462] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7695'.
[ 1510.969127][T30460] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7692'.
[ 1510.979454][T30462] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1511.324638][T30475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7698'.
[ 1511.418306][T30479] netlink: 'syz.0.7700': attribute type 10 has an invalid length.
[ 1512.650565][T30505] netlink: 'syz.3.7707': attribute type 11 has an invalid length.
[ 1512.808742][T30507] netlink: 'syz.0.7710': attribute type 25 has an invalid length.
[ 1512.833682][T30505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7707'.
[ 1512.929959][T30507] netlink: 'syz.0.7710': attribute type 1 has an invalid length.
[ 1512.985367][T30505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1513.010936][T30507] bridge0: port 1(bridge_slave_0) entered learning state
[ 1513.285478][T30520] netlink: 'syz.2.7711': attribute type 4 has an invalid length.
[ 1513.377920][T30520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7711'.
[ 1513.415032][T30520] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1513.473882][T30523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7713'.
[ 1513.969581][T30535] netlink: 'syz.2.7717': attribute type 10 has an invalid length.
[ 1514.232630][T30535] 8021q: adding VLAN 0 to HW filter on device team0
[ 1514.280440][T30535] device team0 entered promiscuous mode
[ 1514.340541][T30535] device team_slave_0 entered promiscuous mode
[ 1514.369513][T30535] device team_slave_1 entered promiscuous mode
[ 1514.453717][T30535] device geneve0 entered promiscuous mode
[ 1514.471201][T30535] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1515.232629][T30567] FAULT_INJECTION: forcing a failure.
[ 1515.232629][T30567] name failslab, interval 1, probability 0, space 0, times 0
[ 1515.272640][T30567] CPU: 0 PID: 30567 Comm: syz.0.7724 Not tainted syzkaller #0
[ 1515.280194][T30567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1515.290301][T30567] Call Trace:
[ 1515.293625][T30567]  <TASK>
[ 1515.296601][T30567]  dump_stack_lvl+0x188/0x24e
[ 1515.301337][T30567]  ? show_regs_print_info+0x12/0x12
[ 1515.306607][T30567]  ? load_image+0x400/0x400
[ 1515.311159][T30567]  ? __might_sleep+0xd0/0xd0
[ 1515.315813][T30567]  ? __lock_acquire+0x7d10/0x7d10
[ 1515.320914][T30567]  should_fail_ex+0x399/0x4d0
[ 1515.325667][T30567]  should_failslab+0x5/0x20
[ 1515.330274][T30567]  slab_pre_alloc_hook+0x59/0x310
[ 1515.335356][T30567]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1515.341123][T30567]  __kmem_cache_alloc_node+0x4f/0x260
[ 1515.346546][T30567]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1515.352135][T30567]  __kmalloc+0xa0/0x240
[ 1515.356349][T30567]  bpf_prog_test_run_skb+0x234/0x12a0
[ 1515.361786][T30567]  ? __fget_files+0x28/0x4b0
[ 1515.366427][T30567]  ? __fget_files+0x28/0x4b0
[ 1515.371070][T30567]  ? __fget_files+0x43d/0x4b0
[ 1515.375808][T30567]  ? cpu_online+0xa0/0xa0
[ 1515.380282][T30567]  bpf_prog_test_run+0x31e/0x390
[ 1515.385282][T30567]  __sys_bpf+0x62b/0x780
[ 1515.389586][T30567]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1515.395023][T30567]  ? lock_chain_count+0x20/0x20
[ 1515.399939][T30567]  __x64_sys_bpf+0x78/0x90
[ 1515.404409][T30567]  do_syscall_64+0x4c/0xa0
[ 1515.408874][T30567]  ? clear_bhb_loop+0x60/0xb0
[ 1515.413596][T30567]  ? clear_bhb_loop+0x60/0xb0
[ 1515.418413][T30567]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1515.424349][T30567] RIP: 0033:0x7fb5a439aeb9
[ 1515.428809][T30567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1515.448470][T30567] RSP: 002b:00007fb5a5266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1515.456935][T30567] RAX: ffffffffffffffda RBX: 00007fb5a4616180 RCX: 00007fb5a439aeb9
[ 1515.464948][T30567] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1515.472963][T30567] RBP: 00007fb5a5266090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.480981][T30567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1515.489003][T30567] R13: 00007fb5a4616218 R14: 00007fb5a4616180 R15: 00007ffedb8643e8
[ 1515.497047][T30567]  </TASK>
[ 1518.047459][T30561] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7723'.
[ 1518.071835][T30555] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7721'.
[ 1518.082898][T30570] netlink: 'syz.1.7725': attribute type 10 has an invalid length.
[ 1518.091646][T30570] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7725'.
[ 1518.241965][T30574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7726'.
[ 1518.828168][T30597] netlink: 'syz.3.7735': attribute type 10 has an invalid length.
[ 1519.378592][T30605] netlink: 'syz.0.7736': attribute type 10 has an invalid length.
[ 1519.475004][T30605] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7736'.
[ 1521.315611][T30624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7742'.
[ 1522.213132][T30647] can: request_module (can-proto-3) failed.
[ 1522.256969][T30638] device syzkaller0 entered promiscuous mode
[ 1523.048143][T30658] netlink: 'syz.5.7750': attribute type 10 has an invalid length.
[ 1523.064865][T30658] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7750'.
[ 1523.287004][T30663] netlink: 'syz.3.7761': attribute type 39 has an invalid length.
[ 1523.371640][T30670] netlink: 'syz.5.7753': attribute type 49 has an invalid length.
[ 1524.293287][T30670] netlink: 'syz.5.7753': attribute type 49 has an invalid length.
[ 1524.322876][T30673] netlink: 'syz.5.7753': attribute type 21 has an invalid length.
[ 1524.370504][T30686] FAULT_INJECTION: forcing a failure.
[ 1524.370504][T30686] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1524.391458][T30686] CPU: 0 PID: 30686 Comm: syz.0.7756 Not tainted syzkaller #0
[ 1524.399010][T30686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1524.409109][T30686] Call Trace:
[ 1524.412432][T30686]  <TASK>
[ 1524.415395][T30686]  dump_stack_lvl+0x188/0x24e
[ 1524.420128][T30686]  ? show_regs_print_info+0x12/0x12
[ 1524.425368][T30686]  ? load_image+0x400/0x400
[ 1524.429910][T30686]  ? __might_fault+0xa6/0x120
[ 1524.434622][T30686]  should_fail_ex+0x399/0x4d0
[ 1524.439346][T30686]  copyin+0x1b/0x120
[ 1524.443283][T30686]  _copy_from_iter+0x559/0x1130
[ 1524.448183][T30686]  ? copyout_mc+0x110/0x110
[ 1524.452733][T30686]  ? __virt_addr_valid+0x188/0x540
[ 1524.457885][T30686]  ? __virt_addr_valid+0x188/0x540
[ 1524.463033][T30686]  ? __virt_addr_valid+0x465/0x540
[ 1524.468184][T30686]  ? __check_object_size+0x500/0xa40
[ 1524.473506][T30686]  skb_copy_datagram_from_iter+0xef/0x690
[ 1524.479270][T30686]  ? skb_put+0x117/0x210
[ 1524.483552][T30686]  packet_sendmsg+0x3727/0x4e60
[ 1524.488468][T30686]  ? __might_sleep+0xd0/0xd0
[ 1524.493115][T30686]  ? verify_lock_unused+0x140/0x140
[ 1524.498410][T30686]  ? aa_sk_perm+0x81f/0x950
[ 1524.502974][T30686]  ? packet_getsockopt+0x9a0/0x9a0
[ 1524.508138][T30686]  ? aa_sock_msg_perm+0x94/0x150
[ 1524.513111][T30686]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1524.518426][T30686]  ? security_socket_sendmsg+0x7c/0xa0
[ 1524.523928][T30686]  ? packet_getsockopt+0x9a0/0x9a0
[ 1524.529099][T30686]  ____sys_sendmsg+0x5be/0x970
[ 1524.533906][T30686]  ? __sys_sendmsg_sock+0x30/0x30
[ 1524.538964][T30686]  ? __import_iovec+0x315/0x500
[ 1524.543856][T30686]  ? import_iovec+0x6f/0xa0
[ 1524.548396][T30686]  ___sys_sendmsg+0x2a2/0x360
[ 1524.553113][T30686]  ? __sys_sendmsg+0x290/0x290
[ 1524.557956][T30686]  ? __lock_acquire+0x7d10/0x7d10
[ 1524.563063][T30686]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1524.567965][T30686]  ? __x64_sys_sendmsg+0x80/0x80
[ 1524.572959][T30686]  ? lockdep_hardirqs_on+0x94/0x140
[ 1524.578200][T30686]  do_syscall_64+0x4c/0xa0
[ 1524.582651][T30686]  ? clear_bhb_loop+0x60/0xb0
[ 1524.587363][T30686]  ? clear_bhb_loop+0x60/0xb0
[ 1524.592088][T30686]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1524.598011][T30686] RIP: 0033:0x7fb5a439aeb9
[ 1524.602458][T30686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1524.622186][T30686] RSP: 002b:00007fb5a52a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1524.630632][T30686] RAX: ffffffffffffffda RBX: 00007fb5a4615fa0 RCX: 00007fb5a439aeb9
[ 1524.638637][T30686] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1524.646634][T30686] RBP: 00007fb5a52a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1524.654633][T30686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1524.662629][T30686] R13: 00007fb5a4616038 R14: 00007fb5a4615fa0 R15: 00007ffedb8643e8
[ 1524.670643][T30686]  </TASK>
[ 1524.790566][T30689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7757'.
[ 1525.222105][T30702] can: request_module (can-proto-3) failed.
[ 1526.167920][T30709] netlink: 'syz.0.7765': attribute type 10 has an invalid length.
[ 1526.179210][T30709] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7765'.
[ 1526.219058][T30726] device syzkaller0 entered promiscuous mode
[ 1526.235189][T30726] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1528.135983][T30739] netlink: 'syz.2.7769': attribute type 10 has an invalid length.
[ 1528.171821][T30756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7772'.
[ 1528.329182][T30758] netlink: 'syz.1.7773': attribute type 39 has an invalid length.
[ 1529.211452][T30769] can: request_module (can-proto-3) failed.
[ 1529.948442][T30773] netlink: 'syz.3.7777': attribute type 10 has an invalid length.
[ 1529.960740][T30773] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7777'.
[ 1530.201663][T30790] netlink: 'syz.5.7780': attribute type 10 has an invalid length.
[ 1530.256180][T30790] team0: Port device wlan1 added
[ 1530.543448][T30797] netlink: 'syz.2.7782': attribute type 2 has an invalid length.
[ 1530.579852][T30797] netlink: 'syz.2.7782': attribute type 8 has an invalid length.
[ 1530.600221][T30797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7782'.
[ 1530.736355][T30809] netlink: 'syz.5.7785': attribute type 10 has an invalid length.
[ 1531.212149][T30832] netlink: 'syz.2.7793': attribute type 10 has an invalid length.
[ 1531.235227][T30832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7793'.
[ 1531.244327][T30834] netlink: 'syz.5.7794': attribute type 27 has an invalid length.
[ 1531.360541][T30838] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7805'.
[ 1531.730754][T30844] netlink: 'syz.1.7796': attribute type 3 has an invalid length.
[ 1531.779657][T30844] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7796'.
[ 1532.124559][T30863] netlink: 'syz.1.7806': attribute type 25 has an invalid length.
[ 1532.164722][T30855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7801'.
[ 1532.608107][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7809'.
[ 1532.671194][T30879] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7810'.
[ 1533.346994][T30896] device wlan1 entered promiscuous mode
[ 1533.381979][T30896] team0: Port device wlan1 added
[ 1533.635464][T30909] validate_nla: 6 callbacks suppressed
[ 1533.635554][T30909] netlink: 'syz.2.7821': attribute type 10 has an invalid length.
[ 1533.821011][T30912] netlink: 'syz.0.7820': attribute type 2 has an invalid length.
[ 1533.871697][T30912] netlink: 'syz.0.7820': attribute type 8 has an invalid length.
[ 1533.916679][T30912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7820'.
[ 1534.026341][T30918] netlink: 'syz.3.7824': attribute type 10 has an invalid length.
[ 1534.079096][T30918] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7824'.
[ 1534.829425][T30950] netlink: 'syz.2.7833': attribute type 10 has an invalid length.
[ 1534.932854][T30963] FAULT_INJECTION: forcing a failure.
[ 1534.932854][T30963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1535.002960][T30950] device wlan1 entered promiscuous mode
[ 1535.029044][T30950] team0: Port device wlan1 added
[ 1535.084891][T30963] CPU: 1 PID: 30963 Comm: syz.3.7835 Not tainted syzkaller #0
[ 1535.092425][T30963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1535.102518][T30963] Call Trace:
[ 1535.105830][T30963]  <TASK>
[ 1535.108800][T30963]  dump_stack_lvl+0x188/0x24e
[ 1535.113508][T30963]  ? show_regs_print_info+0x12/0x12
[ 1535.118737][T30963]  ? load_image+0x400/0x400
[ 1535.123264][T30963]  ? __lock_acquire+0x7d10/0x7d10
[ 1535.128322][T30963]  should_fail_ex+0x399/0x4d0
[ 1535.133047][T30963]  _copy_from_user+0x2c/0x170
[ 1535.137753][T30963]  ___sys_sendmsg+0x1c3/0x360
[ 1535.142471][T30963]  ? __sys_sendmsg+0x290/0x290
[ 1535.147279][T30963]  ? trace_call_bpf+0xbf/0x6b0
[ 1535.152096][T30963]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1535.156983][T30963]  ? __x64_sys_sendmsg+0x80/0x80
[ 1535.161966][T30963]  ? lockdep_hardirqs_on+0x94/0x140
[ 1535.167197][T30963]  do_syscall_64+0x4c/0xa0
[ 1535.171651][T30963]  ? clear_bhb_loop+0x60/0xb0
[ 1535.176355][T30963]  ? clear_bhb_loop+0x60/0xb0
[ 1535.181069][T30963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1535.186985][T30963] RIP: 0033:0x7f183fd9aeb9
[ 1535.191419][T30963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1535.211054][T30963] RSP: 002b:00007f1840b84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1535.219493][T30963] RAX: ffffffffffffffda RBX: 00007f1840016090 RCX: 00007f183fd9aeb9
[ 1535.227490][T30963] RDX: 0000000000000885 RSI: 0000200000010340 RDI: 0000000000000003
[ 1535.235493][T30963] RBP: 00007f1840b84090 R08: 0000000000000000 R09: 0000000000000000
[ 1535.243483][T30963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1535.251475][T30963] R13: 00007f1840016128 R14: 00007f1840016090 R15: 00007ffd9cdffae8
[ 1535.259483][T30963]  </TASK>
[ 1535.386702][T30970] netlink: 'syz.2.7838': attribute type 10 has an invalid length.
[ 1535.406687][T30970] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7838'.
[ 1535.423008][T30969] netlink: 'syz.1.7837': attribute type 10 has an invalid length.
[ 1535.795574][T30976] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1538.127844][T31018] netlink: 'syz.5.7853': attribute type 10 has an invalid length.
[ 1538.155749][T31018] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7853'.
[ 1538.559358][T31031] bridge0: port 3(bond0) entered disabled state
[ 1538.568221][T31031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1538.579666][T31031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1538.692541][T31035] netlink: 'syz.0.7862': attribute type 10 has an invalid length.
[ 1538.725272][T31035] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[ 1540.443330][ T7031] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1540.469566][T31062] netlink: 'syz.2.7869': attribute type 10 has an invalid length.
[ 1540.483267][T31062] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7869'.
[ 1541.366089][ T7060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1541.382555][T31074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7873'.
[ 1541.393687][T31074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7873'.
[ 1541.619050][T31074] delete_channel: no stack
[ 1541.820890][T31087] FAULT_INJECTION: forcing a failure.
[ 1541.820890][T31087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1541.874367][T31087] CPU: 1 PID: 31087 Comm: syz.1.7876 Not tainted syzkaller #0
[ 1541.881921][T31087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1541.892029][T31087] Call Trace:
[ 1541.895351][T31087]  <TASK>
[ 1541.898321][T31087]  dump_stack_lvl+0x188/0x24e
[ 1541.903055][T31087]  ? show_regs_print_info+0x12/0x12
[ 1541.908323][T31087]  ? load_image+0x400/0x400
[ 1541.912883][T31087]  ? __lock_acquire+0x7d10/0x7d10
[ 1541.917965][T31087]  ? snprintf+0xe5/0x140
[ 1541.922256][T31087]  should_fail_ex+0x399/0x4d0
[ 1541.926998][T31087]  _copy_to_user+0x2c/0x130
[ 1541.931560][T31087]  simple_read_from_buffer+0xe3/0x150
[ 1541.937003][T31087]  proc_fail_nth_read+0x1a6/0x220
[ 1541.942130][T31087]  ? proc_fault_inject_write+0x310/0x310
[ 1541.947878][T31087]  ? fsnotify_perm+0x248/0x550
[ 1541.952695][T31087]  ? proc_fault_inject_write+0x310/0x310
[ 1541.958388][T31087]  vfs_read+0x2de/0xa00
[ 1541.962615][T31087]  ? kernel_read+0x1e0/0x1e0
[ 1541.967274][T31087]  ? __fget_files+0x28/0x4b0
[ 1541.971961][T31087]  ? __fget_files+0x28/0x4b0
[ 1541.976625][T31087]  ? __fget_files+0x43d/0x4b0
[ 1541.981382][T31087]  ? __fdget_pos+0x2ae/0x360
[ 1541.981607][T31086] netlink: 'syz.5.7877': attribute type 21 has an invalid length.
[ 1541.986031][T31087]  ? ksys_read+0x71/0x250
[ 1541.986069][T31087]  ksys_read+0x14c/0x250
[ 1541.986103][T31087]  ? vfs_write+0xa30/0xa30
[ 1541.986138][T31087]  ? lockdep_hardirqs_on+0x94/0x140
[ 1541.986177][T31087]  do_syscall_64+0x4c/0xa0
[ 1541.986204][T31087]  ? clear_bhb_loop+0x60/0xb0
[ 1542.021423][T31087]  ? clear_bhb_loop+0x60/0xb0
[ 1542.026155][T31087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1542.032082][T31087] RIP: 0033:0x7fd62135b78e
[ 1542.036529][T31087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1542.056209][T31087] RSP: 002b:00007fd6221d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1542.064664][T31087] RAX: ffffffffffffffda RBX: 00007fd6221d16c0 RCX: 00007fd62135b78e
[ 1542.072665][T31087] RDX: 000000000000000f RSI: 00007fd6221d10a0 RDI: 0000000000000006
[ 1542.080666][T31087] RBP: 00007fd6221d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1542.088670][T31087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1542.096670][T31087] R13: 00007fd621616038 R14: 00007fd621615fa0 R15: 00007ffe63a9db18
[ 1542.104687][T31087]  </TASK>
[ 1542.133296][T31086] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7877'.
[ 1542.198744][T31094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7878'.
[ 1542.610925][T31103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7882'.
[ 1542.634155][T31103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7882'.
[ 1542.659845][T31103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7882'.
[ 1542.694940][T31103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7882'.
[ 1542.765523][T31107] netlink: 'syz.1.7884': attribute type 10 has an invalid length.
[ 1542.773771][T31107] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7884'.
[ 1543.115746][T24663] Bluetooth: hci1: command 0x0406 tx timeout
[ 1546.161166][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.167605][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.838559][T31123] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.7888'.
[ 1547.136278][T31132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7890'.
[ 1548.661646][T31162] netlink: 'syz.2.7902': attribute type 25 has an invalid length.
[ 1548.680661][T31162] netlink: 'syz.2.7902': attribute type 28 has an invalid length.
[ 1548.899005][T31166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7904'.
[ 1549.043041][T31164] delete_channel: no stack
[ 1549.063017][T31164] delete_channel: no stack
[ 1549.819393][T31182] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.7908'.
[ 1550.219435][T31182] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[ 1550.244977][T31182] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[ 1550.274125][T31182] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[ 1552.096089][T31205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7917'.
[ 1552.151998][T31215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7921'.
[ 1554.096907][T31261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7934'.
[ 1554.222341][T31265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7936'.
[ 1554.771217][T31269] netlink: 'syz.5.7938': attribute type 10 has an invalid length.
[ 1554.814438][T31269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7938'.
[ 1555.512732][T31286] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7942'.
[ 1556.183518][T24663] Bluetooth: hci4: Dropping invalid advertising data
[ 1556.191068][T24663] Bluetooth: hci4: unknown advertising packet type: 0xdc
[ 1556.191099][T24663] Bluetooth: hci4: Malformed LE Event: 0x02
[ 1558.276529][T31313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7949'.
[ 1558.447471][T31320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7950'.
[ 1558.890052][T31330] netlink: 'syz.2.7954': attribute type 21 has an invalid length.
[ 1559.179013][T31335] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1559.213207][T31335] netlink: 'syz.2.7956': attribute type 3 has an invalid length.
[ 1559.241863][T31335] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7956'.
[ 1560.135227][T31345] netlink: 'syz.2.7962': attribute type 10 has an invalid length.
[ 1560.153750][T31345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7962'.
[ 1560.194499][T31345] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1560.242378][T31351] netlink: 'syz.5.7961': attribute type 2 has an invalid length.
[ 1560.254435][T31352] FAULT_INJECTION: forcing a failure.
[ 1560.254435][T31352] name failslab, interval 1, probability 0, space 0, times 0
[ 1560.272817][T31351] netlink: 'syz.5.7961': attribute type 1 has an invalid length.
[ 1560.280923][T31345] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1560.281937][T31351] netlink: 'syz.5.7961': attribute type 4 has an invalid length.
[ 1560.329679][T31352] CPU: 0 PID: 31352 Comm: syz.3.7963 Not tainted syzkaller #0
[ 1560.337244][T31352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1560.347390][T31352] Call Trace:
[ 1560.350724][T31352]  <TASK>
[ 1560.353698][T31352]  dump_stack_lvl+0x188/0x24e
[ 1560.358451][T31352]  ? show_regs_print_info+0x12/0x12
[ 1560.363713][T31352]  ? load_image+0x400/0x400
[ 1560.368307][T31352]  should_fail_ex+0x399/0x4d0
[ 1560.373063][T31352]  should_failslab+0x5/0x20
[ 1560.376795][T31345] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1560.377620][T31352]  slab_pre_alloc_hook+0x59/0x310
[ 1560.377683][T31352]  kmem_cache_alloc+0x56/0x2f0
[ 1560.377707][T31352]  ? skb_clone+0x1e7/0x370
[ 1560.377748][T31352]  skb_clone+0x1e7/0x370
[ 1560.403261][T31352]  bpf_clone_redirect+0xa9/0x3c0
[ 1560.408278][T31352]  bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a
[ 1560.413802][T31352]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1560.419858][T31352]  ? lock_chain_count+0x20/0x20
[ 1560.424781][T31352]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[ 1560.431086][T31352]  ? lockdep_hardirqs_on+0x94/0x140
[ 1560.436364][T31352]  ? ktime_get+0x7b/0x270
[ 1560.440743][T31352]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[ 1560.447041][T31352]  ? ktime_get_real_ts64+0x440/0x440
[ 1560.452389][T31352]  ? read_lock_is_recursive+0x10/0x10
[ 1560.457927][T31352]  ? __cant_sleep+0x220/0x220
[ 1560.462663][T31352]  ? bpf_test_timer_continue+0x142/0x380
[ 1560.468361][T31352]  bpf_test_run+0x2b6/0x830
[ 1560.472943][T31352]  ? convert___skb_to_skb+0x580/0x580
[ 1560.478399][T31352]  ? eth_get_headlen+0x200/0x200
[ 1560.483387][T31352]  ? __build_skb+0x257/0x3c0
[ 1560.488040][T31352]  ? bpf_prog_test_run_skb+0x773/0x12a0
[ 1560.493655][T31352]  ? convert___skb_to_skb+0x3d/0x580
[ 1560.499000][T31352]  bpf_prog_test_run_skb+0xaa6/0x12a0
[ 1560.504440][T31352]  ? cpu_online+0xa0/0xa0
[ 1560.508825][T31352]  bpf_prog_test_run+0x31e/0x390
[ 1560.513825][T31352]  __sys_bpf+0x62b/0x780
[ 1560.518126][T31352]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1560.523596][T31352]  ? lock_chain_count+0x20/0x20
[ 1560.528526][T31352]  __x64_sys_bpf+0x78/0x90
[ 1560.533004][T31352]  do_syscall_64+0x4c/0xa0
[ 1560.537484][T31352]  ? clear_bhb_loop+0x60/0xb0
[ 1560.542213][T31352]  ? clear_bhb_loop+0x60/0xb0
[ 1560.547038][T31352]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1560.552992][T31352] RIP: 0033:0x7f183fd9aeb9
[ 1560.557481][T31352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1560.577166][T31352] RSP: 002b:00007f1840ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1560.585638][T31352] RAX: ffffffffffffffda RBX: 00007f1840015fa0 RCX: 00007f183fd9aeb9
[ 1560.593666][T31352] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1560.601687][T31352] RBP: 00007f1840ba5090 R08: 0000000000000000 R09: 0000000000000000
[ 1560.609712][T31352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1560.617727][T31352] R13: 00007f1840016038 R14: 00007f1840015fa0 R15: 00007ffd9cdffae8
[ 1560.625780][T31352]  </TASK>
[ 1560.665043][T31351] netlink: 208312 bytes leftover after parsing attributes in process `syz.5.7961'.
[ 1560.970392][T31362] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7965'.
[ 1561.440120][T31379] FAULT_INJECTION: forcing a failure.
[ 1561.440120][T31379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1561.459272][T31379] CPU: 1 PID: 31379 Comm: syz.5.7969 Not tainted syzkaller #0
[ 1561.466824][T31379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1561.476924][T31379] Call Trace:
[ 1561.480302][T31379]  <TASK>
[ 1561.483271][T31379]  dump_stack_lvl+0x188/0x24e
[ 1561.488010][T31379]  ? show_regs_print_info+0x12/0x12
[ 1561.493294][T31379]  ? load_image+0x400/0x400
[ 1561.497882][T31379]  ? __lock_acquire+0x7d10/0x7d10
[ 1561.502973][T31379]  should_fail_ex+0x399/0x4d0
[ 1561.507728][T31379]  _copy_from_user+0x2c/0x170
[ 1561.512461][T31379]  iovec_from_user+0x143/0x360
[ 1561.517276][T31379]  __import_iovec+0x6d/0x500
[ 1561.521921][T31379]  ? __might_fault+0xc2/0x120
[ 1561.526653][T31379]  import_iovec+0x6f/0xa0
[ 1561.531032][T31379]  ___sys_sendmsg+0x252/0x360
[ 1561.535775][T31379]  ? __sys_sendmsg+0x290/0x290
[ 1561.540629][T31379]  ? __lock_acquire+0x7d10/0x7d10
[ 1561.545747][T31379]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1561.550666][T31379]  ? ct_nmi_exit+0x145/0x1c0
[ 1561.555319][T31379]  ? __x64_sys_sendmsg+0x80/0x80
[ 1561.560332][T31379]  ? lockdep_hardirqs_on+0x94/0x140
[ 1561.565680][T31379]  do_syscall_64+0x4c/0xa0
[ 1561.570149][T31379]  ? clear_bhb_loop+0x60/0xb0
[ 1561.574879][T31379]  ? clear_bhb_loop+0x60/0xb0
[ 1561.579609][T31379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1561.585548][T31379] RIP: 0033:0x7fb1bff9aeb9
[ 1561.590010][T31379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1561.609755][T31379] RSP: 002b:00007fb1c0dcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1561.618265][T31379] RAX: ffffffffffffffda RBX: 00007fb1c0215fa0 RCX: 00007fb1bff9aeb9
[ 1561.626298][T31379] RDX: 000000000000fffe RSI: 0000200000000340 RDI: 0000000000000003
[ 1561.634311][T31379] RBP: 00007fb1c0dcf090 R08: 0000000000000000 R09: 0000000000000000
[ 1561.642338][T31379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1561.650346][T31379] R13: 00007fb1c0216038 R14: 00007fb1c0215fa0 R15: 00007ffe2072ef28
[ 1561.658371][T31379]  </TASK>
[ 1561.749178][T31376] netlink: 'syz.1.7970': attribute type 4 has an invalid length.
[ 1561.778348][T31376] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7970'.
[ 1561.821074][T31376] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1562.031503][T31387] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1562.074518][T31387] netlink: 'syz.3.7973': attribute type 3 has an invalid length.
[ 1562.122950][T31387] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7973'.
[ 1562.400392][T31399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7977'.
[ 1563.162247][T31420] netlink: 'syz.0.7987': attribute type 4 has an invalid length.
[ 1563.210247][T31420] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7987'.
[ 1563.266892][T31420] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1563.366561][T31428] FAULT_INJECTION: forcing a failure.
[ 1563.366561][T31428] name failslab, interval 1, probability 0, space 0, times 0
[ 1563.380077][T31428] CPU: 1 PID: 31428 Comm: syz.3.7989 Not tainted syzkaller #0
[ 1563.387611][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1563.396036][T31427] device lo entered promiscuous mode
[ 1563.397720][T31428] Call Trace:
[ 1563.406420][T31428]  <TASK>
[ 1563.409432][T31428]  dump_stack_lvl+0x188/0x24e
[ 1563.414169][T31428]  ? verify_lock_unused+0x140/0x140
[ 1563.419528][T31428]  ? show_regs_print_info+0x12/0x12
[ 1563.424782][T31428]  ? load_image+0x400/0x400
[ 1563.429333][T31428]  ? __lock_acquire+0x12f4/0x7d10
[ 1563.434543][T31428]  should_fail_ex+0x399/0x4d0
[ 1563.439297][T31428]  should_failslab+0x5/0x20
[ 1563.443844][T31428]  slab_pre_alloc_hook+0x59/0x310
[ 1563.448896][T31428]  ? skb_network_protocol+0x525/0x780
[ 1563.454302][T31428]  kmem_cache_alloc_node+0x5a/0x320
[ 1563.459526][T31428]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1563.465539][T31428]  ? __alloc_skb+0xfc/0x7e0
[ 1563.470077][T31428]  __alloc_skb+0xfc/0x7e0
[ 1563.474439][T31428]  skb_segment+0xe7b/0x3fb0
[ 1563.478983][T31428]  ? __skb_checksum+0x7a0/0x7a0
[ 1563.483883][T31428]  ? mark_lock+0x94/0x320
[ 1563.488260][T31428]  ? csum_tcpudp_nofold+0x1b/0x50
[ 1563.493327][T31428]  ? udp4_ufo_fragment+0x49e/0x820
[ 1563.498485][T31428]  inet_gso_segment+0x5cc/0x1400
[ 1563.503476][T31428]  ? inet_sk_state_store+0x90/0x90
[ 1563.508623][T31428]  skb_mac_gso_segment+0x2ff/0x620
[ 1563.513769][T31428]  ? skb_mac_gso_segment+0x181/0x620
[ 1563.519086][T31428]  ? skb_eth_gso_segment+0x250/0x250
[ 1563.524409][T31428]  __skb_gso_segment+0x316/0x4b0
[ 1563.529390][T31428]  validate_xmit_skb+0x4c1/0xe80
[ 1563.534370][T31428]  ? validate_xmit_skb_list+0x120/0x120
[ 1563.540557][T31428]  ? __might_fault+0xa6/0x120
[ 1563.545268][T31428]  __dev_queue_xmit+0x1501/0x37f0
[ 1563.550331][T31428]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1563.555482][T31428]  ? netdev_core_pick_tx+0x340/0x340
[ 1563.560803][T31428]  ? virtio_net_hdr_to_skb+0xac2/0x1290
[ 1563.566384][T31428]  ? __virt_addr_valid+0x188/0x540
[ 1563.571534][T31428]  ? packet_extra_vlan_len_allowed+0x200/0x200
[ 1563.577711][T31428]  ? skb_copy_datagram_from_iter+0x5a8/0x690
[ 1563.583720][T31428]  ? skb_put+0x117/0x210
[ 1563.587997][T31428]  packet_sendmsg+0x3bc3/0x4e60
[ 1563.592945][T31428]  ? __might_sleep+0xd0/0xd0
[ 1563.597588][T31428]  ? verify_lock_unused+0x140/0x140
[ 1563.602851][T31428]  ? aa_sk_perm+0x81f/0x950
[ 1563.607395][T31428]  ? packet_getsockopt+0x9a0/0x9a0
[ 1563.612567][T31428]  ? aa_sock_msg_perm+0x94/0x150
[ 1563.617539][T31428]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1563.622908][T31428]  ? security_socket_sendmsg+0x7c/0xa0
[ 1563.628431][T31428]  ? packet_getsockopt+0x9a0/0x9a0
[ 1563.633584][T31428]  ____sys_sendmsg+0x5be/0x970
[ 1563.638394][T31428]  ? __sys_sendmsg_sock+0x30/0x30
[ 1563.643500][T31428]  ? __import_iovec+0x315/0x500
[ 1563.648398][T31428]  ? import_iovec+0x6f/0xa0
[ 1563.653028][T31428]  ___sys_sendmsg+0x2a2/0x360
[ 1563.657750][T31428]  ? __sys_sendmsg+0x290/0x290
[ 1563.662562][T31428]  ? __lock_acquire+0x7d10/0x7d10
[ 1563.667640][T31428]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1563.672528][T31428]  ? ct_nmi_exit+0x145/0x1c0
[ 1563.677149][T31428]  ? __x64_sys_sendmsg+0x80/0x80
[ 1563.682135][T31428]  ? lockdep_hardirqs_on+0x94/0x140
[ 1563.687389][T31428]  do_syscall_64+0x4c/0xa0
[ 1563.691866][T31428]  ? clear_bhb_loop+0x60/0xb0
[ 1563.696583][T31428]  ? clear_bhb_loop+0x60/0xb0
[ 1563.701290][T31428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1563.707208][T31428] RIP: 0033:0x7f183fd9aeb9
[ 1563.711694][T31428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1563.731347][T31428] RSP: 002b:00007f1840ba5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1563.739793][T31428] RAX: ffffffffffffffda RBX: 00007f1840015fa0 RCX: 00007f183fd9aeb9
[ 1563.747808][T31428] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1563.755818][T31428] RBP: 00007f1840ba5090 R08: 0000000000000000 R09: 0000000000000000
[ 1563.763816][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1563.771857][T31428] R13: 00007f1840016038 R14: 00007f1840015fa0 R15: 00007ffd9cdffae8
[ 1563.779879][T31428]  </TASK>
[ 1563.792245][T31427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1564.195708][T31435] netlink: 'syz.1.7992': attribute type 21 has an invalid length.
[ 1564.204424][T31435] netlink: 'syz.1.7992': attribute type 1 has an invalid length.
[ 1564.213185][T31435] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7992'.
[ 1564.315613][T31443] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.7994'.
[ 1565.528683][T31478] netlink: 'syz.0.8005': attribute type 4 has an invalid length.
[ 1565.587834][T31478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8005'.
[ 1565.713480][T31478] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1566.412221][T31485] netlink: 'syz.3.8008': attribute type 10 has an invalid length.
[ 1566.420236][T31485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8008'.
[ 1566.431280][T31485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8008'.
[ 1566.931986][T31490] netlink: 'syz.5.8007': attribute type 21 has an invalid length.
[ 1567.077752][T31490] netlink: 'syz.5.8007': attribute type 1 has an invalid length.
[ 1567.432047][T31490] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8007'.
[ 1569.359170][T31507] bond0: (slave dummy0): Error: Slave device does not support XDP
[ 1569.462914][T31505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8014'.
[ 1569.951385][T31516] device syzkaller0 entered promiscuous mode
[ 1570.016615][T31530] netlink: 'syz.5.8021': attribute type 4 has an invalid length.
[ 1570.038213][T31530] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8021'.
[ 1570.056390][T31530] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1572.603002][ T5608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1573.153064][T31536] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8023'.
[ 1573.168172][T31550] netlink: 'syz.2.8025': attribute type 21 has an invalid length.
[ 1573.180832][T31550] netlink: 'syz.2.8025': attribute type 1 has an invalid length.
[ 1573.189383][T31550] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8025'.
[ 1573.209201][T31565] pimreg0: tun_chr_ioctl cmd 35111
[ 1573.225177][T31566] pimreg0: tun_chr_ioctl cmd 2147767520
[ 1573.519957][ T7031] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1573.564146][T31578] FAULT_INJECTION: forcing a failure.
[ 1573.564146][T31578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1573.603925][T31578] CPU: 0 PID: 31578 Comm: syz.2.8033 Not tainted syzkaller #0
[ 1573.611537][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1573.621690][T31578] Call Trace:
[ 1573.625013][T31578]  <TASK>
[ 1573.627986][T31578]  dump_stack_lvl+0x188/0x24e
[ 1573.632708][T31578]  ? show_regs_print_info+0x12/0x12
[ 1573.637958][T31578]  ? load_image+0x400/0x400
[ 1573.642498][T31578]  ? __lock_acquire+0x7d10/0x7d10
[ 1573.647568][T31578]  should_fail_ex+0x399/0x4d0
[ 1573.652310][T31578]  _copy_from_user+0x2c/0x170
[ 1573.657028][T31578]  iovec_from_user+0x143/0x360
[ 1573.661821][T31578]  __import_iovec+0x6d/0x500
[ 1573.666442][T31578]  import_iovec+0x6f/0xa0
[ 1573.670846][T31578]  ___sys_sendmsg+0x252/0x360
[ 1573.675574][T31578]  ? __sys_sendmsg+0x290/0x290
[ 1573.680390][T31578]  ? __lock_acquire+0x7d10/0x7d10
[ 1573.685491][T31578]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1573.690381][T31578]  ? __x64_sys_sendmsg+0x80/0x80
[ 1573.695362][T31578]  ? lockdep_hardirqs_on+0x94/0x140
[ 1573.700607][T31578]  do_syscall_64+0x4c/0xa0
[ 1573.705056][T31578]  ? clear_bhb_loop+0x60/0xb0
[ 1573.709767][T31578]  ? clear_bhb_loop+0x60/0xb0
[ 1573.714477][T31578]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1573.720397][T31578] RIP: 0033:0x7f4e8279aeb9
[ 1573.724846][T31578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1573.744484][T31578] RSP: 002b:00007f4e8359d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1573.752933][T31578] RAX: ffffffffffffffda RBX: 00007f4e82a16090 RCX: 00007f4e8279aeb9
[ 1573.760952][T31578] RDX: 0000000000000885 RSI: 0000200000010340 RDI: 0000000000000003
[ 1573.768959][T31578] RBP: 00007f4e8359d090 R08: 0000000000000000 R09: 0000000000000000
[ 1573.776957][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1573.784973][T31578] R13: 00007f4e82a16128 R14: 00007f4e82a16090 R15: 00007fff272692e8
[ 1573.792987][T31578]  </TASK>
[ 1573.805143][T31581] netlink: 'syz.3.8035': attribute type 1 has an invalid length.
[ 1573.812982][T31581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8035'.
[ 1573.846681][T31581] netlink: 'syz.3.8035': attribute type 6 has an invalid length.
[ 1573.854606][T31581] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8035'.
[ 1573.930548][T31577] netlink: 'syz.5.8034': attribute type 4 has an invalid length.
[ 1573.953957][T31577] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8034'.
[ 1573.968760][T31577] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1574.067971][T31587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8038'.
[ 1574.168614][ T5608] tipc: Subscription rejected, illegal request
[ 1574.306180][T31594] netlink: 'syz.5.8041': attribute type 10 has an invalid length.
[ 1574.868983][T31613] netlink: 'syz.5.8048': attribute type 10 has an invalid length.
[ 1575.491053][T31619] netlink: 'syz.1.8051': attribute type 4 has an invalid length.
[ 1575.532505][T31619] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8051'.
[ 1575.611206][T31619] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1576.034113][T31638] netlink: 'syz.3.8057': attribute type 21 has an invalid length.
[ 1576.047848][T31640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8059'.
[ 1576.055456][T31638] netlink: 'syz.3.8057': attribute type 11 has an invalid length.
[ 1576.090364][T31640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8059'.
[ 1576.111778][T31643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8059'.
[ 1576.137319][T31640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8059'.
[ 1576.154118][T31645] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.8060'.
[ 1576.241957][T31645] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.8060'.
[ 1576.715549][T31659] FAULT_INJECTION: forcing a failure.
[ 1576.715549][T31659] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.743017][T31659] CPU: 0 PID: 31659 Comm: syz.0.8066 Not tainted syzkaller #0
[ 1576.750581][T31659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1576.760686][T31659] Call Trace:
[ 1576.764007][T31659]  <TASK>
[ 1576.766985][T31659]  dump_stack_lvl+0x188/0x24e
[ 1576.771720][T31659]  ? show_regs_print_info+0x12/0x12
[ 1576.776985][T31659]  ? load_image+0x400/0x400
[ 1576.781552][T31659]  ? __might_sleep+0xd0/0xd0
[ 1576.786220][T31659]  ? __lock_acquire+0x7d10/0x7d10
[ 1576.791307][T31659]  should_fail_ex+0x399/0x4d0
[ 1576.796050][T31659]  should_failslab+0x5/0x20
[ 1576.800611][T31659]  slab_pre_alloc_hook+0x59/0x310
[ 1576.805683][T31659]  ? sk_prot_alloc+0xe7/0x210
[ 1576.810388][T31659]  __kmem_cache_alloc_node+0x4f/0x260
[ 1576.815842][T31659]  ? sk_prot_alloc+0xe7/0x210
[ 1576.820548][T31659]  __kmalloc+0xa0/0x240
[ 1576.824745][T31659]  sk_prot_alloc+0xe7/0x210
[ 1576.829287][T31659]  ? sk_alloc+0x20/0x340
[ 1576.833561][T31659]  sk_alloc+0x36/0x340
[ 1576.837666][T31659]  ? bpf_ctx_init+0x163/0x1a0
[ 1576.842369][T31659]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[ 1576.847950][T31659]  bpf_prog_test_run_skb+0x35e/0x12a0
[ 1576.853530][T31659]  ? __fget_files+0x28/0x4b0
[ 1576.858196][T31659]  ? __fget_files+0x43d/0x4b0
[ 1576.862912][T31659]  ? cpu_online+0xa0/0xa0
[ 1576.867284][T31659]  bpf_prog_test_run+0x31e/0x390
[ 1576.872268][T31659]  __sys_bpf+0x62b/0x780
[ 1576.876547][T31659]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1576.881971][T31659]  ? lock_chain_count+0x20/0x20
[ 1576.886867][T31659]  __x64_sys_bpf+0x78/0x90
[ 1576.891320][T31659]  do_syscall_64+0x4c/0xa0
[ 1576.895768][T31659]  ? clear_bhb_loop+0x60/0xb0
[ 1576.900472][T31659]  ? clear_bhb_loop+0x60/0xb0
[ 1576.905180][T31659]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1576.911100][T31659] RIP: 0033:0x7fb5a439aeb9
[ 1576.915538][T31659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1576.935171][T31659] RSP: 002b:00007fb5a52a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1576.943616][T31659] RAX: ffffffffffffffda RBX: 00007fb5a4615fa0 RCX: 00007fb5a439aeb9
[ 1576.951612][T31659] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1576.959610][T31659] RBP: 00007fb5a52a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1576.967611][T31659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1576.975602][T31659] R13: 00007fb5a4616038 R14: 00007fb5a4615fa0 R15: 00007ffedb8643e8
[ 1576.983617][T31659]  </TASK>
[ 1577.259445][T31661] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8067'.
[ 1577.280566][T31661] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1578.592920][T31705] validate_nla: 4 callbacks suppressed
[ 1578.592963][T31705] netlink: 'syz.5.8084': attribute type 4 has an invalid length.
[ 1578.679483][T31705] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8084'.
[ 1578.745688][T31705] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1579.233643][T31721] netlink: 'syz.1.8088': attribute type 10 has an invalid length.
[ 1580.222280][T31730] netlink: 'syz.3.8093': attribute type 25 has an invalid length.
[ 1580.256716][T31730] netlink: 'syz.3.8093': attribute type 28 has an invalid length.
[ 1580.709549][T31742] delete_channel: no stack
[ 1580.716043][T31742] delete_channel: no stack
[ 1581.302256][T31747] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8098'.
[ 1583.850375][T31765] netlink: 'syz.5.8102': attribute type 4 has an invalid length.
[ 1583.877678][T31765] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8102'.
[ 1583.893385][T31765] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1584.033710][T31771] netlink: 'syz.3.8104': attribute type 10 has an invalid length.
[ 1584.521667][T31789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8120'.
[ 1588.409834][T31824] netlink: 'syz.5.8122': attribute type 21 has an invalid length.
[ 1588.424277][T31824] netlink: 'syz.5.8122': attribute type 3 has an invalid length.
[ 1588.433201][T31824] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8122'.
[ 1588.464700][T31826] netlink: 'syz.2.8123': attribute type 21 has an invalid length.
[ 1588.482682][T31828] netlink: 'syz.5.8122': attribute type 28 has an invalid length.
[ 1588.496959][T31820] netlink: 'syz.3.8118': attribute type 4 has an invalid length.
[ 1588.576497][T31820] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8118'.
[ 1588.640251][T31828] netlink: 'syz.5.8122': attribute type 29 has an invalid length.
[ 1588.707372][T31820] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1588.759768][T31828] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8122'.
[ 1589.207090][T31833] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1589.241067][T31833] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8124'.
[ 1589.350025][T31835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8126'.
[ 1589.588728][T31848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8130'.
[ 1589.600678][T31838] device wg2 entered promiscuous mode
[ 1589.654206][T31848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8130'.
[ 1589.689901][T31849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8130'.
[ 1589.775395][T31848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8130'.
[ 1590.552821][T31874] device sit0 entered promiscuous mode
[ 1591.146077][T31888] FAULT_INJECTION: forcing a failure.
[ 1591.146077][T31888] name failslab, interval 1, probability 0, space 0, times 0
[ 1591.158829][T31888] CPU: 0 PID: 31888 Comm: syz.2.8144 Not tainted syzkaller #0
[ 1591.166327][T31888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1591.176417][T31888] Call Trace:
[ 1591.179719][T31888]  <TASK>
[ 1591.182672][T31888]  dump_stack_lvl+0x188/0x24e
[ 1591.187384][T31888]  ? show_regs_print_info+0x12/0x12
[ 1591.192616][T31888]  ? load_image+0x400/0x400
[ 1591.197141][T31888]  ? stack_trace_save+0xa6/0xf0
[ 1591.202041][T31888]  should_fail_ex+0x399/0x4d0
[ 1591.206759][T31888]  should_failslab+0x5/0x20
[ 1591.211293][T31888]  slab_pre_alloc_hook+0x59/0x310
[ 1591.216351][T31888]  kmem_cache_alloc+0x56/0x2f0
[ 1591.221144][T31888]  ? dst_alloc+0x101/0x160
[ 1591.225622][T31888]  dst_alloc+0x101/0x160
[ 1591.229985][T31888]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1591.236108][T31888]  ? ip_route_output_key_hash+0x139/0x330
[ 1591.241874][T31888]  ip_route_output_key_hash+0x1ef/0x330
[ 1591.247459][T31888]  ? ip_route_input_rcu+0x3160/0x3160
[ 1591.252885][T31888]  ? lockdep_hardirqs_on+0x94/0x140
[ 1591.258145][T31888]  ? memset+0x1e/0x40
[ 1591.262156][T31888]  ip_route_output_flow+0x26/0x150
[ 1591.267318][T31888]  ip_tunnel_xmit+0x993/0x2440
[ 1591.272148][T31888]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[ 1591.277206][T31888]  ? skb_push+0x8a/0xd0
[ 1591.281396][T31888]  ? gre_build_header+0x25b/0x9a0
[ 1591.286470][T31888]  ipgre_xmit+0x79d/0xb20
[ 1591.290844][T31888]  dev_hard_start_xmit+0x262/0x870
[ 1591.296005][T31888]  __dev_queue_xmit+0x1a7f/0x37f0
[ 1591.301089][T31888]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1591.306233][T31888]  ? netdev_core_pick_tx+0x340/0x340
[ 1591.311573][T31888]  ? skb_release_data+0x1d2/0x7c0
[ 1591.316646][T31888]  __bpf_redirect+0x917/0x1180
[ 1591.321449][T31888]  bpf_clone_redirect+0x26c/0x3c0
[ 1591.326510][T31888]  bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a
[ 1591.332000][T31888]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1591.338019][T31888]  ? lock_chain_count+0x20/0x20
[ 1591.342933][T31888]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[ 1591.349214][T31888]  ? lockdep_hardirqs_on+0x94/0x140
[ 1591.354455][T31888]  ? ktime_get+0x7b/0x270
[ 1591.358818][T31888]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[ 1591.365098][T31888]  ? ktime_get_real_ts64+0x440/0x440
[ 1591.370441][T31888]  ? read_lock_is_recursive+0x10/0x10
[ 1591.375883][T31888]  ? __cant_sleep+0x220/0x220
[ 1591.380638][T31888]  ? bpf_test_timer_continue+0x142/0x380
[ 1591.386321][T31888]  bpf_test_run+0x2b6/0x830
[ 1591.390871][T31888]  ? convert___skb_to_skb+0x580/0x580
[ 1591.396273][T31888]  ? eth_get_headlen+0x200/0x200
[ 1591.401240][T31888]  ? __build_skb+0x257/0x3c0
[ 1591.405878][T31888]  ? bpf_prog_test_run_skb+0x773/0x12a0
[ 1591.411536][T31888]  ? convert___skb_to_skb+0x3d/0x580
[ 1591.416872][T31888]  bpf_prog_test_run_skb+0xaa6/0x12a0
[ 1591.422285][T31888]  ? cpu_online+0xa0/0xa0
[ 1591.426644][T31888]  bpf_prog_test_run+0x31e/0x390
[ 1591.431729][T31888]  __sys_bpf+0x62b/0x780
[ 1591.436009][T31888]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1591.441461][T31888]  ? lock_chain_count+0x20/0x20
[ 1591.446357][T31888]  __x64_sys_bpf+0x78/0x90
[ 1591.450810][T31888]  do_syscall_64+0x4c/0xa0
[ 1591.455263][T31888]  ? clear_bhb_loop+0x60/0xb0
[ 1591.459992][T31888]  ? clear_bhb_loop+0x60/0xb0
[ 1591.464723][T31888]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1591.470661][T31888] RIP: 0033:0x7f4e8279aeb9
[ 1591.475105][T31888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1591.494761][T31888] RSP: 002b:00007f4e835be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1591.503215][T31888] RAX: ffffffffffffffda RBX: 00007f4e82a15fa0 RCX: 00007f4e8279aeb9
[ 1591.511219][T31888] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1591.519218][T31888] RBP: 00007f4e835be090 R08: 0000000000000000 R09: 0000000000000000
[ 1591.527216][T31888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1591.535285][T31888] R13: 00007f4e82a16038 R14: 00007f4e82a15fa0 R15: 00007fff272692e8
[ 1591.543320][T31888]  </TASK>
[ 1591.637153][T31894] device wg2 entered promiscuous mode
[ 1591.681378][T31893] FAULT_INJECTION: forcing a failure.
[ 1591.681378][T31893] name failslab, interval 1, probability 0, space 0, times 0
[ 1591.725092][T31893] CPU: 0 PID: 31893 Comm: syz.5.8147 Not tainted syzkaller #0
[ 1591.732657][T31893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1591.742772][T31893] Call Trace:
[ 1591.746112][T31893]  <TASK>
[ 1591.749092][T31893]  dump_stack_lvl+0x188/0x24e
[ 1591.753856][T31893]  ? show_regs_print_info+0x12/0x12
[ 1591.759138][T31893]  ? load_image+0x400/0x400
[ 1591.763804][T31893]  ? __might_sleep+0xd0/0xd0
[ 1591.768506][T31893]  ? __lock_acquire+0x7d10/0x7d10
[ 1591.773608][T31893]  ? trace_event_raw_event_lock+0x250/0x250
[ 1591.779587][T31893]  should_fail_ex+0x399/0x4d0
[ 1591.784360][T31893]  should_failslab+0x5/0x20
[ 1591.788932][T31893]  slab_pre_alloc_hook+0x59/0x310
[ 1591.794013][T31893]  ? sk_prot_alloc+0xe7/0x210
[ 1591.798751][T31893]  __kmem_cache_alloc_node+0x4f/0x260
[ 1591.804194][T31893]  ? sk_prot_alloc+0xe7/0x210
[ 1591.808930][T31893]  __kmalloc+0xa0/0x240
[ 1591.813165][T31893]  sk_prot_alloc+0xe7/0x210
[ 1591.817736][T31893]  ? sk_alloc+0x20/0x340
[ 1591.822039][T31893]  sk_alloc+0x36/0x340
[ 1591.826163][T31893]  ? bpf_ctx_init+0x163/0x1a0
[ 1591.830892][T31893]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[ 1591.836678][T31893]  bpf_prog_test_run_skb+0x35e/0x12a0
[ 1591.842110][T31893]  ? __fget_files+0x28/0x4b0
[ 1591.846766][T31893]  ? __fget_files+0x43d/0x4b0
[ 1591.851522][T31893]  ? cpu_online+0xa0/0xa0
[ 1591.855920][T31893]  bpf_prog_test_run+0x31e/0x390
[ 1591.860939][T31893]  __sys_bpf+0x62b/0x780
[ 1591.865246][T31893]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1591.870702][T31893]  ? lock_chain_count+0x20/0x20
[ 1591.875625][T31893]  __x64_sys_bpf+0x78/0x90
[ 1591.880104][T31893]  do_syscall_64+0x4c/0xa0
[ 1591.884606][T31893]  ? clear_bhb_loop+0x60/0xb0
[ 1591.889352][T31893]  ? clear_bhb_loop+0x60/0xb0
[ 1591.894099][T31893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1591.900057][T31893] RIP: 0033:0x7fb1bff9aeb9
[ 1591.904538][T31893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1591.924211][T31893] RSP: 002b:00007fb1c0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1591.932700][T31893] RAX: ffffffffffffffda RBX: 00007fb1c0215fa0 RCX: 00007fb1bff9aeb9
[ 1591.940741][T31893] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1591.948777][T31893] RBP: 00007fb1c0dcf090 R08: 0000000000000000 R09: 0000000000000000
[ 1591.956812][T31893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1591.964844][T31893] R13: 00007fb1c0216038 R14: 00007fb1c0215fa0 R15: 00007ffe2072ef28
[ 1591.972890][T31893]  </TASK>
[ 1592.780936][T31921] netlink: 'syz.3.8155': attribute type 2 has an invalid length.
[ 1592.919218][T31921] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.8155'.
[ 1593.421689][T31917] netlink: 'syz.5.8153': attribute type 10 has an invalid length.
[ 1594.350347][T31951] netlink: 'syz.2.8163': attribute type 3 has an invalid length.
[ 1594.378122][T31951] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8163'.
[ 1596.330859][T31934] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8159'.
[ 1596.359527][T31944] device wg2 entered promiscuous mode
[ 1596.603433][T31963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.628722][T31962] netlink: 'syz.5.8166': attribute type 10 has an invalid length.
[ 1596.821764][T31962] team0: Port device wlan1 removed
[ 1597.021816][T31962] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1597.065252][T31963] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1597.072627][T31963] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1597.132733][T31967] netlink: 'syz.3.8169': attribute type 10 has an invalid length.
[ 1597.652934][T31987] netlink: 'syz.0.8176': attribute type 10 has an invalid length.
[ 1598.604942][T32009] 
@ÿ: renamed from bond_slave_0
[ 1600.982858][T32070] tun0: tun_chr_ioctl cmd 1074025677
[ 1601.035338][T32070] tun0: linktype set to 1
[ 1604.765475][ T7583] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1607.227586][T32134] 
@ÿ: renamed from bond_slave_0
[ 1607.719293][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.725976][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.418176][T32253] device syzkaller0 entered promiscuous mode
[ 1619.116663][T32289] device syzkaller0 entered promiscuous mode
[ 1623.655043][T32353] 
@ÿ: renamed from bond_slave_0
[ 1624.034969][T32360] nr0: tun_chr_ioctl cmd 21731
[ 1625.848996][T32392] 
[ 1625.851771][T32392] =============================
[ 1625.856871][T32392] WARNING: suspicious RCU usage
[ 1625.861776][T32392] syzkaller #0 Not tainted
[ 1625.866374][T32392] -----------------------------
[ 1625.871272][T32392] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1625.880014][T32392] 
[ 1625.880014][T32392] other info that might help us debug this:
[ 1625.880014][T32392] 
[ 1625.890378][T32392] 
[ 1625.890378][T32392] rcu_scheduler_active = 2, debug_locks = 1
[ 1625.898582][T32392] 1 lock held by syz.0.8319/32392:
[ 1625.903743][T32392]  #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1625.914090][T32392] 
[ 1625.914090][T32392] stack backtrace:
[ 1625.920245][T32392] CPU: 0 PID: 32392 Comm: syz.0.8319 Not tainted syzkaller #0
[ 1625.927761][T32392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1625.937871][T32392] Call Trace:
[ 1625.941195][T32392]  <TASK>
[ 1625.944173][T32392]  dump_stack_lvl+0x188/0x24e
[ 1625.948934][T32392]  ? show_regs_print_info+0x12/0x12
[ 1625.954195][T32392]  ? load_image+0x400/0x400
[ 1625.958760][T32392]  lockdep_rcu_suspicious+0x1dd/0x300
[ 1625.964203][T32392]  get_callchain_entry+0x2a5/0x3b0
[ 1625.969380][T32392]  get_perf_callchain+0xc4/0x490
[ 1625.974384][T32392]  ? put_callchain_entry+0xb0/0xb0
[ 1625.979561][T32392]  ? plist_add+0x3d4/0x480
[ 1625.984033][T32392]  ? verify_lock_unused+0x140/0x140
[ 1625.989282][T32392]  __bpf_get_stack+0x2de/0x520
[ 1625.994086][T32392]  ? stack_map_get_build_id_offset+0x970/0x970
[ 1626.000280][T32392]  ? bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1626.005942][T32392]  bpf_get_stack_raw_tp+0x189/0x1c0
[ 1626.011179][T32392]  bpf_prog_14d9fb3786f83342+0x3d/0x41
[ 1626.016671][T32392]  bpf_prog_run_pin_on_cpu+0xaa/0x150
[ 1626.022162][T32392]  bpf_prog_test_run_syscall+0x313/0x4a0
[ 1626.027849][T32392]  ? sock_gen_cookie+0x60/0x60
[ 1626.032649][T32392]  ? sock_gen_cookie+0x60/0x60
[ 1626.037446][T32392]  bpf_prog_test_run+0x31e/0x390
[ 1626.042418][T32392]  __sys_bpf+0x62b/0x780
[ 1626.046702][T32392]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1626.052121][T32392]  ? lock_chain_count+0x20/0x20
[ 1626.057025][T32392]  __x64_sys_bpf+0x78/0x90
[ 1626.061479][T32392]  do_syscall_64+0x4c/0xa0
[ 1626.065925][T32392]  ? clear_bhb_loop+0x60/0xb0
[ 1626.070728][T32392]  ? clear_bhb_loop+0x60/0xb0
[ 1626.075434][T32392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1626.081355][T32392] RIP: 0033:0x7fb5a439aeb9
[ 1626.085798][T32392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1626.105428][T32392] RSP: 002b:00007fb5a52a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1626.113871][T32392] RAX: ffffffffffffffda RBX: 00007fb5a4615fa0 RCX: 00007fb5a439aeb9
[ 1626.121874][T32392] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[ 1626.129960][T32392] RBP: 00007fb5a4408c1f R08: 0000000000000000 R09: 0000000000000000
[ 1626.137956][T32392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1626.145953][T32392] R13: 00007fb5a4616038 R14: 00007fb5a4615fa0 R15: 00007ffedb8643e8
[ 1626.153961][T32392]  </TASK>