last executing test programs:

16m51.41607439s ago: executing program 0 (id=1):
socket$kcm(0x10, 0x2, 0x4)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x0})
close(r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)

16m50.065628599s ago: executing program 0 (id=9):
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x46, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
syz_clone(0x42164000, 0x0, 0x810, 0x0, 0x0, 0x0)

16m34.158866906s ago: executing program 32 (id=9):
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x46, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
syz_clone(0x42164000, 0x0, 0x810, 0x0, 0x0, 0x0)

5.651843965s ago: executing program 3 (id=3945):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b9, 0x0, @perf_config_ext={0x6000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}]}}, 0x0, 0x66}, 0x20)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014200d00090009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0)

5.459584726s ago: executing program 3 (id=3948):
socket$kcm(0x10, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/174, 0xae, <r1=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x26}, 0x28)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r3 = gettid()
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x4, 0x6, 0xf, 0x0, 0x9, 0x2830, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb24d, 0x1, @perf_config_ext={0x9, 0x7fffffff}, 0x801, 0x200, 0x7, 0x5, 0x2, 0xf, 0x9, 0x0, 0x81, 0x0, 0x7d0}, r3, 0xd, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
getpid()
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.338766457s ago: executing program 4 (id=3951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x6000, 0x0}, 0x10)

5.032788799s ago: executing program 3 (id=3952):
r0 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x16, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9238}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0xa, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x75, &(0x7f0000000140)=""/117, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x11, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0xf, 0x30, 0x0, @void, @void, @void, @value, r1}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)='-\x00'}, 0x30)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0xa, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000d40)="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", 0x1c8}, {&(0x7f0000000f40)="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", 0x124}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4018}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000980)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x1800, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)

5.032293279s ago: executing program 4 (id=3953):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32)

5.030379869s ago: executing program 1 (id=3954):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xf1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.91322398s ago: executing program 2 (id=3956):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000006100"], 0x0, 0x2a}, 0x28)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}}, 0x0, 0x0, r0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x10, &(0x7f0000000200)=r4, 0x4)
r5 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r6 = socket$kcm(0x1e, 0x6, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) (async)
r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x118442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r11, 0x84, 0x21, &(0x7f0000000000), 0x8) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r8}, 0x18) (async)
close(0x3)
r12 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

4.80081686s ago: executing program 1 (id=3958):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.79099844s ago: executing program 4 (id=3959):
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000300)={r0})
r1 = syz_clone(0x2400, &(0x7f0000000140)="3093effd78e9fca2c7c93c76f081f4670927d9735721dc7e1056c64698cff6f4331074d382b4a1508ddae0", 0x2b, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="4c9c6f42bdf6dde39ba5aa7935a6b07122f682c2831b804f887da9e101d9067081aa3e2f2ccd0076c2efe596919eda11d4ed7388a5c27525b6bdcdf94e780f9142b3d4e4b619f2d3db9e6d27ed93f114cbde1130e1b5abae874b6a6b2913338bff656e6a611fc318abeeef9b443a698fb258312669530d659620a191fd18a9fe6d9673e656f54e0d7a785710b6198f33a45914056b05d0102b9df100f94205ef183443f92d05a028a8b23d26adbd0bb7b832918dbaf38518a0e3a9b1bfe17157a265935b595266380fe933d679832664eb36cace33dde667e9b109b52d")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x5, 0x36, 0x21, 0x0, 0x7, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x280b, 0x1, @perf_config_ext={0x9, 0x4}, 0x28, 0x5, 0x4, 0x1, 0xffffffffffffff74, 0x80000000, 0x81, 0x0, 0x4, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc6800, 0x0)
close(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffff}, @initr0, @exit, @alu={0x5, 0x1, 0x8, 0xa, 0xa, 0x0, 0x8000000000000008}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x94)

4.613360232s ago: executing program 2 (id=3960):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0xf7e5)
write$cgroup_subtree(r0, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8596, 0x0, 0x20000, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xf9b, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x2, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.396899682s ago: executing program 5 (id=3961):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{}, 0x0, 0x0}, 0x20)
socket$kcm(0xa, 0x2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22)
sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

4.039725125s ago: executing program 3 (id=3962):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, r5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="00000000002100006be65560d127", 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3.731914987s ago: executing program 5 (id=3963):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x29, 0xf, 0x0)

3.620942508s ago: executing program 4 (id=3964):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000004000000279cf40846040000000400006e81c1a1f2a45331ef1b47ebbe58c5962a31a714d8e998c340f2c7fbd10530", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000001c0)=""/59, 0x3b}], 0x2, &(0x7f0000000400)=""/55, 0x37}, 0x2000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe0}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)

1.409246271s ago: executing program 1 (id=3965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32)

1.314884782s ago: executing program 5 (id=3966):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000000000007110a10000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x7}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x2, 0x1, &(0x7f0000000080))
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x7, 0xfffffffc}}, 0x80, 0x0, 0x1d}, 0x44)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c0000000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r6 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000395bb930000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.236928632s ago: executing program 3 (id=3967):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090000000000000000000000010500000008000000000000000000000300000000040000000200000001000000000000000000000b"], 0x0, 0x5a}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x11, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.236538902s ago: executing program 2 (id=3968):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0xfd, 0x0, 0x1, 0x0, 0x40000000000000, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}})

1.199180952s ago: executing program 1 (id=3969):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32)

1.059287263s ago: executing program 2 (id=3970):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000ffff000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14143b7f000001000000001800000000000000000055f507"], 0x38}, 0x20040000)

870.592874ms ago: executing program 5 (id=3971):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x4000, 0x6, @empty}, 0x80, 0x0}, 0x20000041)
sendmsg$sock(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x24000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xd112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x105, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

796.725045ms ago: executing program 4 (id=3972):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000}, 0x0, 0xfff, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)="d8000000140081054e81f782db44b9040a9708020a000000040000a118000200fec0000000000e1208000f010081", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x110, 0x4, 0x0, 0x4)
r5 = getpid()
perf_event_open(0x0, r5, 0x9, r1, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
recvmsg$unix(r3, 0x0, 0x40002002)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

791.200125ms ago: executing program 2 (id=3973):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{}, 0x0, 0x0}, 0x20)
socket$kcm(0xa, 0x2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22)
sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

744.788035ms ago: executing program 1 (id=3974):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}, {0x10, 0x110, 0xc}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xb, 0x7}, 0x2018, 0x9, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
r3 = gettid()
write$cgroup_pid(r2, &(0x7f00000001c0)=r3, 0x12)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4)

681.751906ms ago: executing program 3 (id=3975):
r0 = perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0xf4, 0x40, 0x7d, 0xfd, 0x0, 0x8, 0x2000, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2, 0x8, 0xffffffff, 0x6, 0x4, 0x4d, 0x1000, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, r0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000009c0)={0x3, <r1=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={r1, 0x8, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="f9ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014c200c1b7030000000000008500000083000000bf0900000080000000000000001e706d17e1875b86f08347090100000000009500000000000000186800000400000000000000010001001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0xa, 0x3, 0x73)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604400000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8)

339.647348ms ago: executing program 5 (id=3976):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1800}, 0x48)
r6 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x23)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
r9 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)={r8})

261.382618ms ago: executing program 2 (id=3977):
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/N'], 0x6a)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8010}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef)
syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0)

97.756279ms ago: executing program 1 (id=3978):
bpf$MAP_CREATE(0x4100000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

74.084579ms ago: executing program 5 (id=3979):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000000000007110a10000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x7}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x2, 0x1, &(0x7f0000000080))
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x7, 0xfffffffc}}, 0x80, 0x0, 0x1d}, 0x44)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c0000000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r6 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000395bb930000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

0s ago: executing program 4 (id=3980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32)

kernel console output (not intermixed with test programs):

9 bytes leftover after parsing attributes in process `syz.4.2663'.
[  794.144196][T13191] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2665'.
[  794.543532][T13203] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2668'.
[  794.807487][T13213] netlink: 'syz.3.2673': attribute type 3 has an invalid length.
[  794.815308][T13213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2673'.
[  794.859159][T13217] IPv6: Can't replace route, no match found
[  794.883960][T13211] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  797.580466][T13241] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2680'.
[  797.729031][T13245] netlink: 'syz.2.2683': attribute type 10 has an invalid length.
[  798.574794][T13245] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.592926][T13245] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.612260][T13245] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.621855][T13245] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.712844][T13264] netlink: 'syz.5.2687': attribute type 3 has an invalid length.
[  798.733012][T13264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2687'.
[  798.950814][T13270] netlink: 'syz.3.2686': attribute type 10 has an invalid length.
[  798.986053][T13269] IPv6: Can't replace route, no match found
[  799.056558][T13277] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  800.436558][T13294] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2694'.
[  800.748493][T13301] FAULT_INJECTION: forcing a failure.
[  800.748493][T13301] name failslab, interval 1, probability 0, space 0, times 0
[  800.852949][T13301] CPU: 0 PID: 13301 Comm: syz.4.2696 Not tainted syzkaller #0
[  800.860696][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  800.870805][T13301] Call Trace:
[  800.874142][T13301]  <TASK>
[  800.877113][T13301]  dump_stack_lvl+0x168/0x22e
[  800.881845][T13301]  ? show_regs_print_info+0x12/0x12
[  800.887107][T13301]  ? load_image+0x3b0/0x3b0
[  800.891767][T13301]  ? __might_sleep+0xd0/0xd0
[  800.896434][T13301]  ? __lock_acquire+0x7c50/0x7c50
[  800.901679][T13301]  ? mark_lock+0x94/0x320
[  800.906070][T13301]  should_fail_ex+0x399/0x4d0
[  800.910823][T13301]  should_failslab+0x5/0x20
[  800.915701][T13301]  slab_pre_alloc_hook+0x59/0x310
[  800.920791][T13301]  ? __get_vm_area_node+0x122/0x330
[  800.926143][T13301]  __kmem_cache_alloc_node+0x4f/0x260
[  800.931674][T13301]  ? __get_vm_area_node+0x122/0x330
[  800.937907][T13301]  kmalloc_node_trace+0x22/0xe0
[  800.942992][T13301]  __get_vm_area_node+0x122/0x330
[  800.948242][T13301]  ? perf_trace_lock_acquire+0xf7/0x3c0
[  800.954460][T13301]  __vmalloc_node_range+0x357/0x1390
[  800.960150][T13301]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  800.966748][T13301]  ? free_vm_area+0x50/0x50
[  800.971282][T13301]  ? end_current_label_crit_section+0x170/0x170
[  800.977918][T13301]  ? __lock_acquire+0x7c50/0x7c50
[  800.983262][T13301]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  800.989556][T13301]  __vmalloc+0x76/0x80
[  800.993691][T13301]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  800.999546][T13301]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  801.004960][T13301]  ? bpf_lsm_capable+0x5/0x10
[  801.009682][T13301]  bpf_prog_alloc+0x1c/0x1b0
[  801.014322][T13301]  bpf_prog_load+0x7b6/0x15a0
[  801.019044][T13301]  ? map_freeze+0x390/0x390
[  801.023654][T13301]  ? __might_fault+0xa6/0x120
[  801.028467][T13301]  ? __might_fault+0xa6/0x120
[  801.033535][T13301]  ? __might_fault+0xc2/0x120
[  801.038315][T13301]  ? __might_fault+0xa6/0x120
[  801.043006][T13301]  ? bpf_lsm_bpf+0x5/0x10
[  801.047361][T13301]  ? security_bpf+0x7a/0xa0
[  801.051890][T13301]  __sys_bpf+0x520/0x6d0
[  801.056171][T13301]  ? bpf_link_show_fdinfo+0x340/0x340
[  801.061590][T13301]  ? lock_chain_count+0x20/0x20
[  801.066498][T13301]  __x64_sys_bpf+0x78/0x90
[  801.071025][T13301]  do_syscall_64+0x4c/0xa0
[  801.075549][T13301]  ? clear_bhb_loop+0x60/0xb0
[  801.080357][T13301]  ? clear_bhb_loop+0x60/0xb0
[  801.085230][T13301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.091266][T13301] RIP: 0033:0x7f81bc18f6c9
[  801.095909][T13301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.115541][T13301] RSP: 002b:00007f81bcf60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  801.124001][T13301] RAX: ffffffffffffffda RBX: 00007f81bc3e6090 RCX: 00007f81bc18f6c9
[  801.131991][T13301] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  801.140343][T13301] RBP: 00007f81bcf60090 R08: 0000000000000000 R09: 0000000000000000
[  801.148343][T13301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  801.156356][T13301] R13: 00007f81bc3e6128 R14: 00007f81bc3e6090 R15: 00007ffc08dc62d8
[  801.164377][T13301]  </TASK>
[  801.186458][T13301] syz.4.2696: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  801.204216][T13301] CPU: 1 PID: 13301 Comm: syz.4.2696 Not tainted syzkaller #0
[  801.212008][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  801.222295][T13301] Call Trace:
[  801.225624][T13301]  <TASK>
[  801.228589][T13301]  dump_stack_lvl+0x168/0x22e
[  801.234236][T13301]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  801.240907][T13301]  ? show_regs_print_info+0x12/0x12
[  801.246259][T13301]  ? load_image+0x3b0/0x3b0
[  801.250823][T13301]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  801.257393][T13301]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  801.264034][T13301]  warn_alloc+0x20c/0x300
[  801.268417][T13301]  ? __get_vm_area_node+0x122/0x330
[  801.273666][T13301]  ? zone_watermark_ok_safe+0x270/0x270
[  801.279271][T13301]  ? rcu_is_watching+0x11/0xa0
[  801.284304][T13301]  ? __get_vm_area_node+0x318/0x330
[  801.289559][T13301]  ? perf_trace_lock_acquire+0xf7/0x3c0
[  801.295165][T13301]  __vmalloc_node_range+0x37c/0x1390
[  801.300777][T13301]  ? free_vm_area+0x50/0x50
[  801.305350][T13301]  ? end_current_label_crit_section+0x170/0x170
[  801.312280][T13301]  ? __lock_acquire+0x7c50/0x7c50
[  801.317361][T13301]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  801.323087][T13301]  __vmalloc+0x76/0x80
[  801.327208][T13301]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  801.332921][T13301]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  801.338352][T13301]  ? bpf_lsm_capable+0x5/0x10
[  801.343092][T13301]  bpf_prog_alloc+0x1c/0x1b0
[  801.347746][T13301]  bpf_prog_load+0x7b6/0x15a0
[  801.352498][T13301]  ? map_freeze+0x390/0x390
[  801.357062][T13301]  ? __might_fault+0xa6/0x120
[  801.361791][T13301]  ? __might_fault+0xa6/0x120
[  801.366693][T13301]  ? __might_fault+0xc2/0x120
[  801.371422][T13301]  ? __might_fault+0xa6/0x120
[  801.376149][T13301]  ? bpf_lsm_bpf+0x5/0x10
[  801.380531][T13301]  ? security_bpf+0x7a/0xa0
[  801.385149][T13301]  __sys_bpf+0x520/0x6d0
[  801.389565][T13301]  ? bpf_link_show_fdinfo+0x340/0x340
[  801.395373][T13301]  ? lock_chain_count+0x20/0x20
[  801.400387][T13301]  __x64_sys_bpf+0x78/0x90
[  801.404860][T13301]  do_syscall_64+0x4c/0xa0
[  801.409427][T13301]  ? clear_bhb_loop+0x60/0xb0
[  801.414912][T13301]  ? clear_bhb_loop+0x60/0xb0
[  801.419668][T13301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.425607][T13301] RIP: 0033:0x7f81bc18f6c9
[  801.430063][T13301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.449723][T13301] RSP: 002b:00007f81bcf60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  801.458192][T13301] RAX: ffffffffffffffda RBX: 00007f81bc3e6090 RCX: 00007f81bc18f6c9
[  801.466349][T13301] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  801.474368][T13301] RBP: 00007f81bcf60090 R08: 0000000000000000 R09: 0000000000000000
[  801.482572][T13301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  801.490765][T13301] R13: 00007f81bc3e6128 R14: 00007f81bc3e6090 R15: 00007ffc08dc62d8
[  801.499075][T13301]  </TASK>
[  801.525980][T13301] Mem-Info:
[  801.530210][T13301] active_anon:6336 inactive_anon:0 isolated_anon:0
[  801.530210][T13301]  active_file:19549 inactive_file:40152 isolated_file:0
[  801.530210][T13301]  unevictable:768 dirty:118 writeback:0
[  801.530210][T13301]  slab_reclaimable:20883 slab_unreclaimable:108345
[  801.530210][T13301]  mapped:30950 shmem:1373 pagetables:663
[  801.530210][T13301]  sec_pagetables:0 bounce:0
[  801.530210][T13301]  kernel_misc_reclaimable:0
[  801.530210][T13301]  free:1303972 free_pcp:13827 free_cma:0
[  801.587961][T13301] Node 0 active_anon:25344kB inactive_anon:0kB active_file:78196kB inactive_file:160408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123800kB dirty:472kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no
[  802.532858][T13301] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  802.739528][T13301] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  802.912726][T13301] lowmem_reserve[]: 0 2527 2528 2528 2528
[  802.964989][T13301] Node 0 DMA32 free:1300292kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:25348kB inactive_anon:0kB active_file:78196kB inactive_file:160408kB unevictable:1536kB writepending:596kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:35920kB local_pcp:15940kB free_cma:0kB
[  803.158833][T13301] lowmem_reserve[]: 0 0 1 1 1
[  803.163673][T13301] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  803.191215][T13301] lowmem_reserve[]: 0 0 0 0 0
[  803.196712][T13301] Node 1 Normal free:3896296kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22568kB local_pcp:10660kB free_cma:0kB
[  803.226594][T13301] lowmem_reserve[]: 0 0 0 0 0
[  803.232175][T13301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  803.266601][T13301] Node 0 DMA32: 204*4kB (UM) 497*8kB (ME) 785*16kB (ME) 999*32kB (UME) 467*64kB (UME) 104*128kB (UME) 31*256kB (UME) 10*512kB (UME) 10*1024kB (M) 4*2048kB (UM) 287*4096kB (UM) = 1299560kB
[  803.289117][T13301] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  803.309713][T13301] Node 1 Normal: 272*4kB (UE) 65*8kB (UE) 32*16kB (UME) 25*32kB (UME) 18*64kB (UME) 8*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896296kB
[  803.336856][T13301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  803.351519][T13301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  803.363080][T13301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  803.391645][T13301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  803.444570][T13301] 61076 total pagecache pages
[  803.455620][T13301] 0 pages in swap cache
[  803.460160][T13301] Free swap  = 124996kB
[  803.464654][T13301] Total swap = 124996kB
[  803.469116][T13301] 2097051 pages RAM
[  803.472968][T13301] 0 pages HighMem/MovableOnly
[  803.477935][T13301] 415114 pages reserved
[  803.482931][T13301] 0 pages cma reserved
[  803.545633][T13315] netlink: 'syz.5.2698': attribute type 3 has an invalid length.
[  803.572739][T13316] netlink: 'syz.1.2700': attribute type 3 has an invalid length.
[  803.616335][T13316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2700'.
[  803.636435][T13315] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2698'.
[  803.803113][T13320] netlink: 'syz.4.2702': attribute type 4 has an invalid length.
[  805.244827][T13345] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2707'.
[  805.387809][T13352] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2708'.
[  805.721864][   T75] tipc: Subscription rejected, illegal request
[  805.920076][T13368] netlink: 'syz.3.2715': attribute type 3 has an invalid length.
[  805.939927][T13368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2715'.
[  806.970114][T13381] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2718'.
[  808.484691][T13388] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2721'.
[  808.708972][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  808.715669][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  808.807411][T13402] netlink: 'syz.2.2726': attribute type 3 has an invalid length.
[  808.815663][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2726'.
[  810.000918][T13430] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2733'.
[  810.065497][T13436] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2744'.
[  810.352386][T13443] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2736'.
[  810.500681][T13445] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.2737'.
[  810.673056][T13457] netlink: 'syz.1.2739': attribute type 3 has an invalid length.
[  810.700459][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2739'.
[  810.732789][T13458] netlink: 'syz.3.2741': attribute type 10 has an invalid length.
[  812.670556][T13484] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2748'.
[  814.313330][T13491] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2750'.
[  815.127777][T13510] netlink: 'syz.1.2752': attribute type 4 has an invalid length.
[  815.816456][T13517] netlink: 'syz.3.2755': attribute type 3 has an invalid length.
[  815.824507][T13517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2755'.
[  816.141038][T13528] netlink: 'syz.5.2757': attribute type 10 has an invalid length.
[  816.191810][T13525] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.2761'.
[  816.209675][T13524] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2756'.
[  816.463587][T13538] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2764'.
[  816.959896][T13552] IPv6: Can't replace route, no match found
[  816.999225][T13552] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  817.527352][T13562] IPv6: Can't replace route, no match found
[  817.535025][T13562] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  818.367398][T13566] netlink: 'syz.5.2772': attribute type 3 has an invalid length.
[  818.407625][T13566] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2772'.
[  818.525248][T13569] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2773'.
[  818.545727][T13568] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2773'.
[  818.739026][T13571] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2774'.
[  818.874828][T13577] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2776'.
[  819.655611][T13591] netlink: 'syz.4.2780': attribute type 10 has an invalid length.
[  819.927006][T13597] IPv6: Can't replace route, no match found
[  819.944727][T13597] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  820.493723][T13608] IPv6: Can't replace route, no match found
[  820.527514][T13608] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  820.668870][T13611] netlink: 'syz.4.2787': attribute type 3 has an invalid length.
[  820.719137][T13611] __nla_validate_parse: 1 callbacks suppressed
[  820.719161][T13611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2787'.
[  820.970589][T13613] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2789'.
[  821.151957][T13615] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2788'.
[  822.016822][T13637] IPv6: Can't replace route, no match found
[  822.040962][T13635] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  822.288206][T13644] netlink: 'syz.3.2797': attribute type 10 has an invalid length.
[  822.341466][T13648] netlink: 'syz.1.2800': attribute type 3 has an invalid length.
[  822.373118][T13648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2800'.
[  822.499660][T13654] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2801'.
[  822.547317][T13650] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2803'.
[  823.234019][T13669] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2817'.
[  823.359607][T13670] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.2807'.
[  823.558239][T13680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2811'.
[  823.677412][T13680] netlink: 'syz.4.2811': attribute type 3 has an invalid length.
[  823.776825][T13680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2811'.
[  823.963596][T13691] netlink: 'syz.1.2814': attribute type 10 has an invalid length.
[  824.209976][T13694] IPv6: Can't replace route, no match found
[  824.248486][T13694] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  824.347767][T13697] netlink: 'syz.4.2816': attribute type 3 has an invalid length.
[  826.533515][T13724] __nla_validate_parse: 2 callbacks suppressed
[  826.533537][T13724] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2826'.
[  827.070842][T13729] netlink: 'syz.4.2830': attribute type 29 has an invalid length.
[  827.095744][T13734] netlink: 'syz.2.2829': attribute type 3 has an invalid length.
[  827.117805][T13729] netlink: 'syz.4.2830': attribute type 29 has an invalid length.
[  827.131276][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2829'.
[  827.166334][T13736] netlink: 'syz.4.2830': attribute type 29 has an invalid length.
[  827.204966][T13739] IPv6: Can't replace route, no match found
[  827.219617][T13735] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  827.480176][T13743] netlink: 'syz.3.2833': attribute type 3 has an invalid length.
[  827.513976][T13743] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2833'.
[  828.392801][T13743] netlink: 'syz.3.2833': attribute type 10 has an invalid length.
[  828.449507][T13743] 8021q: adding VLAN 0 to HW filter on device team0
[  828.479084][T13743] bond0: (slave team0): Enslaving as an active interface with an up link
[  828.714227][T13759] IPv6: Can't replace route, no match found
[  828.739120][T13759] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  828.957248][T13769] netlink: 'syz.5.2841': attribute type 21 has an invalid length.
[  829.474458][T13779] netlink: 'syz.3.2844': attribute type 3 has an invalid length.
[  829.507508][T13779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2844'.
[  829.543857][T13781] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2845'.
[  829.701610][T13783] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.2848'.
[  829.711507][T13783] openvswitch: netlink: Message has 48126 unknown bytes.
[  829.893405][T13785] IPv6: Can't replace route, no match found
[  830.103211][T13793] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2850'.
[  830.251557][T13785] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  830.416358][T13799] netlink: 'syz.1.2851': attribute type 10 has an invalid length.
[  830.595973][T13804] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2853'.
[  830.619111][T13804] netlink: 'syz.5.2853': attribute type 39 has an invalid length.
[  830.638962][T13804] device veth0_macvtap left promiscuous mode
[  831.203681][T13818] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2858'.
[  831.242038][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2859'.
[  831.461674][T13812] IPv6: Can't replace route, no match found
[  831.469579][T13817] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  832.199340][T13835] FAULT_INJECTION: forcing a failure.
[  832.199340][T13835] name failslab, interval 1, probability 0, space 0, times 0
[  832.265243][T13835] CPU: 0 PID: 13835 Comm: syz.5.2863 Not tainted syzkaller #0
[  832.272795][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  832.282895][T13835] Call Trace:
[  832.286208][T13835]  <TASK>
[  832.289174][T13835]  dump_stack_lvl+0x168/0x22e
[  832.294333][T13835]  ? show_regs_print_info+0x12/0x12
[  832.299582][T13835]  ? load_image+0x3b0/0x3b0
[  832.304245][T13835]  ? __might_sleep+0xd0/0xd0
[  832.308970][T13835]  ? __lock_acquire+0x7c50/0x7c50
[  832.314053][T13835]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  832.320079][T13835]  should_fail_ex+0x399/0x4d0
[  832.324817][T13835]  should_failslab+0x5/0x20
[  832.329353][T13835]  slab_pre_alloc_hook+0x59/0x310
[  832.334397][T13835]  ? lockdep_hardirqs_on+0x94/0x140
[  832.339706][T13835]  ? __get_vm_area_node+0x122/0x330
[  832.345039][T13835]  __kmem_cache_alloc_node+0x4f/0x260
[  832.350431][T13835]  ? __get_vm_area_node+0x122/0x330
[  832.355739][T13835]  kmalloc_node_trace+0x22/0xe0
[  832.360622][T13835]  __get_vm_area_node+0x122/0x330
[  832.365678][T13835]  __vmalloc_node_range+0x357/0x1390
[  832.371507][T13835]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  832.377099][T13835]  ? perf_trace_preemptirq_template+0x287/0x330
[  832.383450][T13835]  ? irqentry_enter+0x33/0x50
[  832.388165][T13835]  ? free_vm_area+0x50/0x50
[  832.392684][T13835]  ? lockdep_hardirqs_on+0x94/0x140
[  832.397920][T13835]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  832.403499][T13835]  __vmalloc+0x76/0x80
[  832.407589][T13835]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  832.413442][T13835]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  832.418860][T13835]  bpf_prog_alloc+0x1c/0x1b0
[  832.423489][T13835]  bpf_prog_load+0x7b6/0x15a0
[  832.428217][T13835]  ? map_freeze+0x390/0x390
[  832.432758][T13835]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  832.438937][T13835]  ? lockdep_hardirqs_on+0x94/0x140
[  832.444171][T13835]  ? security_bpf+0x40/0xa0
[  832.448699][T13835]  ? security_bpf+0x7a/0xa0
[  832.453226][T13835]  __sys_bpf+0x520/0x6d0
[  832.457503][T13835]  ? bpf_link_show_fdinfo+0x340/0x340
[  832.463005][T13835]  ? lock_chain_count+0x20/0x20
[  832.467877][T13835]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  832.473939][T13835]  __x64_sys_bpf+0x78/0x90
[  832.478378][T13835]  do_syscall_64+0x4c/0xa0
[  832.482817][T13835]  ? clear_bhb_loop+0x60/0xb0
[  832.487514][T13835]  ? clear_bhb_loop+0x60/0xb0
[  832.492212][T13835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  832.498122][T13835] RIP: 0033:0x7f181e98f6c9
[  832.502554][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  832.522180][T13835] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  832.530636][T13835] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  832.538622][T13835] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005
[  832.546613][T13835] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  832.554598][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.562675][T13835] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  832.570677][T13835]  </TASK>
[  832.626948][T13838] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  833.048323][T13849] validate_nla: 1 callbacks suppressed
[  833.048380][T13849] netlink: 'syz.3.2867': attribute type 10 has an invalid length.
[  833.093884][T13835] syz.5.2863: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  833.116171][T13835] CPU: 1 PID: 13835 Comm: syz.5.2863 Not tainted syzkaller #0
[  833.123717][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  833.133907][T13835] Call Trace:
[  833.137229][T13835]  <TASK>
[  833.140191][T13835]  dump_stack_lvl+0x168/0x22e
[  833.144911][T13835]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  833.151386][T13835]  ? show_regs_print_info+0x12/0x12
[  833.156638][T13835]  ? load_image+0x3b0/0x3b0
[  833.161191][T13835]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  833.167665][T13835]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  833.174226][T13835]  warn_alloc+0x20c/0x300
[  833.178605][T13835]  ? __get_vm_area_node+0x122/0x330
[  833.183894][T13835]  ? zone_watermark_ok_safe+0x270/0x270
[  833.189484][T13835]  ? rcu_is_watching+0x11/0xa0
[  833.194299][T13835]  ? __get_vm_area_node+0x318/0x330
[  833.199558][T13835]  __vmalloc_node_range+0x37c/0x1390
[  833.204888][T13835]  ? perf_trace_preemptirq_template+0x287/0x330
[  833.211187][T13835]  ? irqentry_enter+0x33/0x50
[  833.215933][T13835]  ? free_vm_area+0x50/0x50
[  833.220470][T13835]  ? lockdep_hardirqs_on+0x94/0x140
[  833.225723][T13835]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  833.231321][T13835]  __vmalloc+0x76/0x80
[  833.235422][T13835]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  833.240994][T13835]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  833.246503][T13835]  bpf_prog_alloc+0x1c/0x1b0
[  833.251121][T13835]  bpf_prog_load+0x7b6/0x15a0
[  833.255829][T13835]  ? map_freeze+0x390/0x390
[  833.260357][T13835]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  833.266527][T13835]  ? lockdep_hardirqs_on+0x94/0x140
[  833.271764][T13835]  ? security_bpf+0x40/0xa0
[  833.276297][T13835]  ? security_bpf+0x7a/0xa0
[  833.280824][T13835]  __sys_bpf+0x520/0x6d0
[  833.285091][T13835]  ? bpf_link_show_fdinfo+0x340/0x340
[  833.290502][T13835]  ? lock_chain_count+0x20/0x20
[  833.295490][T13835]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  833.301501][T13835]  __x64_sys_bpf+0x78/0x90
[  833.305972][T13835]  do_syscall_64+0x4c/0xa0
[  833.310420][T13835]  ? clear_bhb_loop+0x60/0xb0
[  833.315118][T13835]  ? clear_bhb_loop+0x60/0xb0
[  833.319827][T13835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  833.325751][T13835] RIP: 0033:0x7f181e98f6c9
[  833.330191][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  833.349834][T13835] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  833.358271][T13835] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  833.366262][T13835] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005
[  833.374244][T13835] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  833.382232][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.390248][T13835] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  833.398275][T13835]  </TASK>
[  833.581177][T13835] Mem-Info:
[  833.591048][T13835] active_anon:6375 inactive_anon:0 isolated_anon:0
[  833.591048][T13835]  active_file:19549 inactive_file:40164 isolated_file:0
[  833.591048][T13835]  unevictable:768 dirty:149 writeback:0
[  833.591048][T13835]  slab_reclaimable:21109 slab_unreclaimable:108049
[  833.591048][T13835]  mapped:30970 shmem:1373 pagetables:685
[  833.591048][T13835]  sec_pagetables:0 bounce:0
[  833.591048][T13835]  kernel_misc_reclaimable:0
[  833.591048][T13835]  free:1303665 free_pcp:11740 free_cma:0
[  834.018023][T13835] Node 0 active_anon:25580kB inactive_anon:0kB active_file:78196kB inactive_file:160456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132072kB dirty:600kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10988kB pagetables:2784kB sec_pagetables:0kB all_unreclaimable? no
[  834.112808][T13835] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  834.266262][T13835] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  834.376806][T13835] lowmem_reserve[]: 0 2527 2528 2528 2528
[  834.382749][T13835] Node 0 DMA32 free:1325496kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:25380kB inactive_anon:0kB active_file:78196kB inactive_file:160456kB unevictable:1536kB writepending:600kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:12600kB local_pcp:7272kB free_cma:0kB
[  834.451565][T13835] lowmem_reserve[]: 0 0 1 1 1
[  834.456770][T13835] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  834.492259][T13835] lowmem_reserve[]: 0 0 0 0 0
[  834.566346][T13835] Node 1 Normal free:3896296kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22568kB local_pcp:10660kB free_cma:0kB
[  834.796008][T13835] lowmem_reserve[]: 0 0 0 0 0
[  834.801099][T13835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  834.814532][T13835] Node 0 DMA32: 2124*4kB (UM) 2067*8kB (UME) 2491*16kB (UME) 861*32kB (UME) 246*64kB (UME) 57*128kB (UM) 24*256kB (UME) 4*512kB (UME) 7*1024kB (M) 3*2048kB (UM) 290*4096kB (UM) = 1324824kB
[  834.833831][T13835] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  834.846705][T13835] Node 1 Normal: 272*4kB (UE) 65*8kB (UE) 32*16kB (UME) 25*32kB (UME) 18*64kB (UME) 8*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896296kB
[  834.865115][T13835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  834.886147][T13835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  834.895508][T13835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  834.957225][T13835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  835.006127][T13835] 61088 total pagecache pages
[  835.026698][T13835] 0 pages in swap cache
[  835.035822][T13858] netlink: 'syz.3.2870': attribute type 3 has an invalid length.
[  835.046398][T13835] Free swap  = 124996kB
[  835.059095][T13835] Total swap = 124996kB
[  835.096212][T13835] 2097051 pages RAM
[  835.113167][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2870'.
[  835.123324][T13835] 0 pages HighMem/MovableOnly
[  835.195957][T13835] 415114 pages reserved
[  835.225633][T13835] 0 pages cma reserved
[  835.414334][T13865] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2871'.
[  836.632239][T13899] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2881'.
[  836.661728][T13903] netlink: 'syz.1.2883': attribute type 10 has an invalid length.
[  836.718399][T13906] netlink: 'syz.2.2884': attribute type 3 has an invalid length.
[  836.727353][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'.
[  836.786256][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2884'.
[  836.878654][T13908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2885'.
[  836.956249][T13915] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2887'.
[  838.315504][T13946] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2896'.
[  838.470785][T13954] netlink: 'syz.4.2898': attribute type 3 has an invalid length.
[  838.487477][T13954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2898'.
[  838.676307][T13963] netlink: 'syz.5.2910': attribute type 3 has an invalid length.
[  838.686104][T13963] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2910'.
[  838.986624][T13965] netlink: 'syz.4.2900': attribute type 39 has an invalid length.
[  839.010003][T13978] FAULT_INJECTION: forcing a failure.
[  839.010003][T13978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  839.052647][T13978] CPU: 1 PID: 13978 Comm: syz.5.2904 Not tainted syzkaller #0
[  839.060202][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  839.070321][T13978] Call Trace:
[  839.073655][T13978]  <TASK>
[  839.076658][T13978]  dump_stack_lvl+0x168/0x22e
[  839.081382][T13978]  ? show_regs_print_info+0x12/0x12
[  839.086608][T13978]  ? load_image+0x3b0/0x3b0
[  839.091154][T13978]  ? __lock_acquire+0x7c50/0x7c50
[  839.096213][T13978]  should_fail_ex+0x399/0x4d0
[  839.100947][T13978]  _copy_from_user+0x2c/0x170
[  839.105656][T13978]  ___sys_recvmsg+0x12b/0x510
[  839.110374][T13978]  ? __sys_recvmsg+0x270/0x270
[  839.115173][T13978]  ? common_file_perm+0x171/0x1c0
[  839.120241][T13978]  ? __fget_files+0x44a/0x4d0
[  839.124960][T13978]  ? __fdget+0x17c/0x200
[  839.129239][T13978]  __x64_sys_recvmsg+0x1eb/0x2b0
[  839.134210][T13978]  ? ___sys_recvmsg+0x510/0x510
[  839.139104][T13978]  ? lockdep_hardirqs_on+0x94/0x140
[  839.144359][T13978]  do_syscall_64+0x4c/0xa0
[  839.148795][T13978]  ? clear_bhb_loop+0x60/0xb0
[  839.153500][T13978]  ? clear_bhb_loop+0x60/0xb0
[  839.158196][T13978]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  839.164105][T13978] RIP: 0033:0x7f181e98f6c9
[  839.168531][T13978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  839.188159][T13978] RSP: 002b:00007f181f8a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  839.196674][T13978] RAX: ffffffffffffffda RBX: 00007f181ebe6090 RCX: 00007f181e98f6c9
[  839.204786][T13978] RDX: 0000000000010122 RSI: 0000200000000500 RDI: 0000000000000003
[  839.212944][T13978] RBP: 00007f181f8a1090 R08: 0000000000000000 R09: 0000000000000000
[  839.220926][T13978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  839.228996][T13978] R13: 00007f181ebe6128 R14: 00007f181ebe6090 R15: 00007ffda106cff8
[  839.237014][T13978]  </TASK>
[  839.360753][T13977] syzkaller1: tun_chr_ioctl cmd 1074025677
[  839.393795][T13977] syzkaller1: linktype set to 780
[  839.420349][T13980] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  840.051060][T13997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  840.093152][T13997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  840.101321][T13997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  840.109842][T13997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  840.118079][T13997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  840.127817][T13997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  840.159110][ T2939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.341016][T14002] __nla_validate_parse: 3 callbacks suppressed
[  840.341034][T14002] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2909'.
[  840.368027][T13995] netlink: 'syz.5.2908': attribute type 21 has an invalid length.
[  840.556841][ T2939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.581312][T14008] netlink: 'syz.3.2912': attribute type 3 has an invalid length.
[  840.608900][T14008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2912'.
[  840.700504][ T2939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.226616][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
[  843.696268][T14006] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2911'.
[  843.709535][T14013] netlink: 'syz.5.2913': attribute type 10 has an invalid length.
[  843.852587][T14025] FAULT_INJECTION: forcing a failure.
[  843.852587][T14025] name failslab, interval 1, probability 0, space 0, times 0
[  843.866308][T14025] CPU: 1 PID: 14025 Comm: syz.2.2916 Not tainted syzkaller #0
[  843.873832][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  843.883932][T14025] Call Trace:
[  843.887249][T14025]  <TASK>
[  843.890206][T14025]  dump_stack_lvl+0x168/0x22e
[  843.894931][T14025]  ? sctp_sendmsg+0x15ff/0x2980
[  843.899821][T14025]  ? ___sys_sendmsg+0x21c/0x290
[  843.904716][T14025]  ? show_regs_print_info+0x12/0x12
[  843.909948][T14025]  ? load_image+0x3b0/0x3b0
[  843.914486][T14025]  should_fail_ex+0x399/0x4d0
[  843.919190][T14025]  should_failslab+0x5/0x20
[  843.923869][T14025]  slab_pre_alloc_hook+0x59/0x310
[  843.928927][T14025]  ? sctp_add_bind_addr+0x89/0x350
[  843.934092][T14025]  __kmem_cache_alloc_node+0x4f/0x260
[  843.939521][T14025]  ? sctp_add_bind_addr+0x89/0x350
[  843.944673][T14025]  kmalloc_trace+0x26/0xe0
[  843.949135][T14025]  sctp_add_bind_addr+0x89/0x350
[  843.954110][T14025]  sctp_copy_local_addr_list+0x308/0x4d0
[  843.959775][T14025]  ? sctp_copy_local_addr_list+0x98/0x4d0
[  843.965514][T14025]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  843.971604][T14025]  ? sctp_v4_is_any+0x31/0x50
[  843.976306][T14025]  ? sctp_copy_one_addr+0x93/0x660
[  843.981450][T14025]  sctp_bind_addr_copy+0xaf/0x3c0
[  843.986528][T14025]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  843.992928][T14025]  sctp_connect_new_asoc+0x2d6/0x690
[  843.998257][T14025]  ? __sctp_connect+0xd20/0xd20
[  844.003146][T14025]  ? __local_bh_enable_ip+0x12a/0x1b0
[  844.008545][T14025]  ? lock_sock_nested+0x66/0x100
[  844.013503][T14025]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  844.019068][T14025]  ? security_sctp_bind_connect+0x85/0xb0
[  844.024814][T14025]  sctp_sendmsg+0x15ff/0x2980
[  844.029545][T14025]  ? sctp_getsockopt+0x8a0/0x8a0
[  844.034531][T14025]  ? aa_af_perm+0x2b0/0x2b0
[  844.039328][T14025]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  844.045783][T14025]  ? inet_sendmsg+0xe5/0x2f0
[  844.050398][T14025]  ? inet_send_prepare+0x260/0x260
[  844.055555][T14025]  ____sys_sendmsg+0x59b/0x970
[  844.060346][T14025]  ? __sys_sendmsg_sock+0x30/0x30
[  844.065389][T14025]  ? __import_iovec+0x315/0x500
[  844.070268][T14025]  ? import_iovec+0x6f/0xa0
[  844.074815][T14025]  ___sys_sendmsg+0x21c/0x290
[  844.079535][T14025]  ? __sys_sendmsg+0x270/0x270
[  844.084333][T14025]  ? __lock_acquire+0x7c50/0x7c50
[  844.089406][T14025]  ? __fdget+0x17c/0x200
[  844.093679][T14025]  __se_sys_sendmsg+0x19e/0x270
[  844.098550][T14025]  ? __x64_sys_sendmsg+0x80/0x80
[  844.103518][T14025]  ? lockdep_hardirqs_on+0x94/0x140
[  844.108744][T14025]  do_syscall_64+0x4c/0xa0
[  844.113191][T14025]  ? clear_bhb_loop+0x60/0xb0
[  844.117888][T14025]  ? clear_bhb_loop+0x60/0xb0
[  844.122583][T14025]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.128491][T14025] RIP: 0033:0x7fa32dd8f6c9
[  844.132921][T14025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  844.152547][T14025] RSP: 002b:00007fa32ebd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  844.160979][T14025] RAX: ffffffffffffffda RBX: 00007fa32dfe5fa0 RCX: 00007fa32dd8f6c9
[  844.168973][T14025] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  844.176956][T14025] RBP: 00007fa32ebd9090 R08: 0000000000000000 R09: 0000000000000000
[  844.184939][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  844.192923][T14025] R13: 00007fa32dfe6038 R14: 00007fa32dfe5fa0 R15: 00007ffd17d9f898
[  844.200924][T14025]  </TASK>
[  844.245111][ T2939] team0: Port device netdevsim0 removed
[  844.278328][ T2939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.306192][ T4268] Bluetooth: hci1: command 0x041b tx timeout
[  844.338887][T14029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2917'.
[  844.349687][T14029] netlink: 'syz.1.2917': attribute type 39 has an invalid length.
[  844.589567][T13996] chnl_net:caif_netlink_parms(): no params data found
[  844.633977][T14031] netlink: 'syz.5.2918': attribute type 10 has an invalid length.
[  844.707524][T14031] batman_adv: batadv0: Adding interface: netdevsim0
[  844.734658][T14031] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  844.822297][T14031] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  845.378624][T14063] netlink: 'syz.3.2924': attribute type 3 has an invalid length.
[  845.387340][T13996] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.400156][T14063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2924'.
[  845.404470][T13996] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.453518][T13996] device bridge_slave_0 entered promiscuous mode
[  845.477366][T13996] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.484513][T13996] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.534278][T13996] device bridge_slave_1 entered promiscuous mode
[  845.723186][T14065] netlink: 'syz.1.2923': attribute type 21 has an invalid length.
[  845.782522][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.802041][T14066] syzkaller1: tun_chr_ioctl cmd 1074025677
[  845.815704][T14066] syzkaller1: linktype set to 780
[  845.833908][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.895864][T14077] netlink: 'syz.2.2926': attribute type 10 has an invalid length.
[  846.402425][ T4268] Bluetooth: hci1: command 0x040f tx timeout
[  848.472772][T13997] Bluetooth: hci1: command 0x0419 tx timeout
[  849.058471][T13996] team0: Port device team_slave_0 added
[  849.095938][T14093] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2928'.
[  849.127568][T13996] team0: Port device team_slave_1 added
[  849.322845][T14104] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.2930'.
[  849.333721][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.355587][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  849.444025][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  849.476380][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  849.491855][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  849.539463][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  849.553569][T14109] netlink: 'syz.2.2933': attribute type 10 has an invalid length.
[  849.566812][T14109] device batadv0 left promiscuous mode
[  849.576830][T14109] bridge0: port 3(batadv0) entered disabled state
[  849.637582][T14109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.659485][T14109] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  850.097175][T13996] device hsr_slave_0 entered promiscuous mode
[  850.136658][T13996] device hsr_slave_1 entered promiscuous mode
[  850.151738][T13996] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  850.175499][T13996] Cannot create hsr debugfs directory
[  850.633484][T14141] netlink: 'syz.2.2938': attribute type 21 has an invalid length.
[  850.956012][ T2939] device hsr_slave_0 left promiscuous mode
[  850.973612][ T2939] device hsr_slave_1 left promiscuous mode
[  851.040056][ T2939] device bridge_slave_1 left promiscuous mode
[  851.046545][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.070862][ T2939] device bridge_slave_0 left promiscuous mode
[  851.089274][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.301789][ T2939] device veth1_vlan left promiscuous mode
[  851.316473][ T2939] device veth0_vlan left promiscuous mode
[  852.085052][T14177] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2943'.
[  852.115226][ T2939] team0 (unregistering): Port device geneve1 removed
[  852.522883][ T2939] team0 (unregistering): Port device team_slave_1 removed
[  852.570086][ T2939] team0 (unregistering): Port device team_slave_0 removed
[  852.618479][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  852.668707][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  853.099019][ T2939] bond0 (unregistering): Released all slaves
[  853.180220][T14161] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.187560][T14161] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.216142][T14165] device bridge_slave_1 left promiscuous mode
[  853.222434][T14165] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.241130][T14165] device bridge_slave_0 left promiscuous mode
[  853.248523][T14165] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.308576][T14170] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2942'.
[  853.341171][T14179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2944'.
[  853.352488][T14180] netlink: 'syz.3.2944': attribute type 39 has an invalid length.
[  853.365439][T14183] FAULT_INJECTION: forcing a failure.
[  853.365439][T14183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  853.424074][T14183] CPU: 0 PID: 14183 Comm: syz.5.2945 Not tainted syzkaller #0
[  853.431625][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  853.441734][T14183] Call Trace:
[  853.445061][T14183]  <TASK>
[  853.448044][T14183]  dump_stack_lvl+0x168/0x22e
[  853.452819][T14183]  ? show_regs_print_info+0x12/0x12
[  853.458080][T14183]  ? load_image+0x3b0/0x3b0
[  853.462658][T14183]  ? __lock_acquire+0x7c50/0x7c50
[  853.467747][T14183]  ? snprintf+0xd7/0x120
[  853.472059][T14183]  should_fail_ex+0x399/0x4d0
[  853.476791][T14183]  _copy_to_user+0x2c/0x130
[  853.481333][T14183]  simple_read_from_buffer+0xe3/0x150
[  853.486767][T14183]  proc_fail_nth_read+0x19a/0x210
[  853.491854][T14183]  ? proc_fault_inject_write+0x2f0/0x2f0
[  853.497559][T14183]  ? fsnotify_perm+0x248/0x550
[  853.502372][T14183]  ? proc_fault_inject_write+0x2f0/0x2f0
[  853.508034][T14183]  vfs_read+0x2c0/0x920
[  853.512255][T14183]  ? kernel_read+0x1e0/0x1e0
[  853.516882][T14183]  ? __fget_files+0x28/0x4d0
[  853.521504][T14183]  ? __fget_files+0x44a/0x4d0
[  853.526241][T14183]  ? __fdget_pos+0x2ae/0x360
[  853.530877][T14183]  ? ksys_read+0x71/0x240
[  853.535241][T14183]  ksys_read+0x143/0x240
[  853.539535][T14183]  ? vfs_write+0x960/0x960
[  853.543985][T14183]  ? lockdep_hardirqs_on+0x94/0x140
[  853.549226][T14183]  do_syscall_64+0x4c/0xa0
[  853.553668][T14183]  ? clear_bhb_loop+0x60/0xb0
[  853.558369][T14183]  ? clear_bhb_loop+0x60/0xb0
[  853.563076][T14183]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  853.568990][T14183] RIP: 0033:0x7f181e98e0dc
[  853.573427][T14183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  853.593057][T14183] RSP: 002b:00007f181f8c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  853.601501][T14183] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98e0dc
[  853.609499][T14183] RDX: 000000000000000f RSI: 00007f181f8c20a0 RDI: 0000000000000006
[  853.617491][T14183] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  853.625494][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.633534][T14183] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  853.641644][T14183]  </TASK>
[  853.834225][T14190] netlink: 'syz.3.2949': attribute type 25 has an invalid length.
[  853.866168][T14190] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2949'.
[  853.959890][T14185] netlink: 'syz.1.2946': attribute type 10 has an invalid length.
[  854.299435][T14198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2951'.
[  854.550184][T14207] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2954'.
[  855.293983][T14203] netlink: 'syz.3.2952': attribute type 21 has an invalid length.
[  855.310280][T14225] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2956'.
[  855.634447][T14235] netlink: 'syz.2.2958': attribute type 10 has an invalid length.
[  855.694094][T13996] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  855.818893][T13996] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  855.872896][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2959'.
[  855.936191][T13996] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  855.970973][T13996] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  856.014472][T14239] netlink: 'syz.1.2959': attribute type 39 has an invalid length.
[  856.132660][T14250] IPv6: Can't replace route, no match found
[  856.165169][T14248] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  856.387147][T13996] 8021q: adding VLAN 0 to HW filter on device bond0
[  856.417202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  856.450574][T14264] FAULT_INJECTION: forcing a failure.
[  856.450574][T14264] name failslab, interval 1, probability 0, space 0, times 0
[  856.469903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  856.484863][T13996] 8021q: adding VLAN 0 to HW filter on device team0
[  856.496536][T14264] CPU: 1 PID: 14264 Comm: syz.5.2964 Not tainted syzkaller #0
[  856.504062][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  856.514170][T14264] Call Trace:
[  856.517488][T14264]  <TASK>
[  856.520451][T14264]  dump_stack_lvl+0x168/0x22e
[  856.525170][T14264]  ? show_regs_print_info+0x12/0x12
[  856.530412][T14264]  ? load_image+0x3b0/0x3b0
[  856.534970][T14264]  ? __might_sleep+0xd0/0xd0
[  856.539627][T14264]  ? __lock_acquire+0x7c50/0x7c50
[  856.544704][T14264]  should_fail_ex+0x399/0x4d0
[  856.549438][T14264]  should_failslab+0x5/0x20
[  856.554006][T14264]  slab_pre_alloc_hook+0x59/0x310
[  856.559080][T14264]  ? bpf_prog_test_run_skb+0x22b/0x11b0
[  856.564652][T14264]  __kmem_cache_alloc_node+0x4f/0x260
[  856.570050][T14264]  ? bpf_prog_test_run_skb+0x22b/0x11b0
[  856.575712][T14264]  __kmalloc+0xa0/0x240
[  856.579899][T14264]  bpf_prog_test_run_skb+0x22b/0x11b0
[  856.585464][T14264]  ? __fget_files+0x28/0x4d0
[  856.590132][T14264]  ? __fget_files+0x44a/0x4d0
[  856.594846][T14264]  ? cpu_online+0xa0/0xa0
[  856.599189][T14264]  bpf_prog_test_run+0x31e/0x390
[  856.604163][T14264]  __sys_bpf+0x593/0x6d0
[  856.608428][T14264]  ? bpf_link_show_fdinfo+0x340/0x340
[  856.613831][T14264]  ? lock_chain_count+0x20/0x20
[  856.618710][T14264]  __x64_sys_bpf+0x78/0x90
[  856.623142][T14264]  do_syscall_64+0x4c/0xa0
[  856.627592][T14264]  ? clear_bhb_loop+0x60/0xb0
[  856.632290][T14264]  ? clear_bhb_loop+0x60/0xb0
[  856.636992][T14264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  856.642912][T14264] RIP: 0033:0x7f181e98f6c9
[  856.647347][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  856.666972][T14264] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  856.675403][T14264] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  856.683473][T14264] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[  856.691457][T14264] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  856.699450][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  856.707430][T14264] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  856.715524][T14264]  </TASK>
[  856.761886][T14269] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2965'.
[  856.863473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  856.904982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  856.944466][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.951783][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.999976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  857.020437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  857.053150][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.060409][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  859.975022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  859.995890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  860.022089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  860.056499][T14277] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2969'.
[  860.091000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  860.115711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  860.144876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  860.169167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  860.187686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  860.237806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  860.257359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  860.305013][T13996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  860.353676][T13996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  860.391236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  860.407779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  860.452025][T14309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2972'.
[  860.512378][T14309] netlink: 'syz.2.2972': attribute type 39 has an invalid length.
[  860.559927][T14309] device veth0_macvtap left promiscuous mode
[  860.575885][T14318] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.2976'.
[  861.412693][T14312] netlink: 'syz.1.2974': attribute type 10 has an invalid length.
[  861.675755][T14335] IPv6: Can't replace route, no match found
[  861.711897][T14335] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  861.872002][T14346] netlink: 'syz.2.2989': attribute type 22 has an invalid length.
[  861.889785][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'.
[  861.960289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  861.996651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  862.030504][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  862.121684][T14354] IPv6: Can't replace route, no match found
[  862.187792][T14356] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  862.705644][T14368] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2984'.
[  863.171775][T14387] netlink: 'syz.5.2987': attribute type 10 has an invalid length.
[  863.567436][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  863.593904][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  863.710296][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  863.731430][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  863.761660][T13996] device veth0_vlan entered promiscuous mode
[  863.777044][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  863.833005][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  863.871010][T13996] device veth1_vlan entered promiscuous mode
[  863.919533][T14407] IPv6: Can't replace route, no match found
[  863.947559][T14407] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  864.046995][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  864.059971][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  864.101330][T14418] netlink: 'syz.5.2996': attribute type 10 has an invalid length.
[  864.134896][T13996] device veth0_macvtap entered promiscuous mode
[  864.196669][T13996] device veth1_macvtap entered promiscuous mode
[  864.251138][T14427] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2995'.
[  864.267383][T14421] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2997'.
[  864.285392][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.319811][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.371408][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.382228][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.392849][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.403514][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.413435][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.428458][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.459455][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  864.532518][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  864.549560][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  864.582787][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  864.604150][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  864.618754][T14429] IPv6: Can't replace route, no match found
[  864.628900][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.666074][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.709686][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.773960][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.840609][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.908806][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.930103][T13996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.953624][T13996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.991715][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  864.999928][T14430] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  865.034817][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  865.062405][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  865.081526][T13996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  865.102608][T13996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  865.132541][T13996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  865.143093][T13996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  865.718240][T14458] netlink: 'syz.3.3003': attribute type 22 has an invalid length.
[  865.779301][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'.
[  865.811071][T14463] netlink: 'syz.1.3004': attribute type 3 has an invalid length.
[  865.836446][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  865.876172][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.905582][T14463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3004'.
[  865.943353][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  866.015791][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.076741][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  866.124749][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  866.503426][T14483] IPv6: Can't replace route, no match found
[  866.528595][T14477] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  867.707221][T14507] netlink: 'syz.1.3016': attribute type 3 has an invalid length.
[  867.746231][T14507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3016'.
[  867.829468][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  867.843770][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  867.851907][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  867.860262][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  867.876835][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  867.885321][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  868.569780][T14509] chnl_net:caif_netlink_parms(): no params data found
[  869.918458][ T4268] Bluetooth: hci2: command 0x0409 tx timeout
[  870.149338][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  870.155680][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  870.821911][T14518] netlink: 'syz.5.3017': attribute type 22 has an invalid length.
[  870.833566][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'.
[  871.268005][T14552] Q�6�`Ҙ: renamed from lo
[  871.338586][T14509] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.345777][T14509] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.397547][T14509] device bridge_slave_0 entered promiscuous mode
[  871.425083][T14509] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.474123][T14509] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.617594][T14509] device bridge_slave_1 entered promiscuous mode
[  871.825502][T14560] IPv6: Can't replace route, no match found
[  871.857162][T14562] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  871.956894][T14509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.986612][ T4268] Bluetooth: hci2: command 0x041b tx timeout
[  872.069418][T14509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.181844][T14509] team0: Port device team_slave_0 added
[  872.217079][T14571] netlink: 'syz.1.3027': attribute type 3 has an invalid length.
[  872.252902][T14571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3027'.
[  872.387093][T14509] team0: Port device team_slave_1 added
[  872.576671][T14509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.583701][T14509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  872.696079][T14509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.811321][T14509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.823165][T14509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  872.927695][T14509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.133579][T14509] device hsr_slave_0 entered promiscuous mode
[  873.151716][T14509] device hsr_slave_1 entered promiscuous mode
[  873.165902][T14509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  873.202484][T14509] Cannot create hsr debugfs directory
[  873.354843][T14606] netlink: 'syz.3.3036': attribute type 10 has an invalid length.
[  873.421934][T14608] netlink: 'syz.1.3035': attribute type 22 has an invalid length.
[  873.457779][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'.
[  873.815679][T14625] netlink: 'syz.4.3040': attribute type 3 has an invalid length.
[  873.869129][T14625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3040'.
[  873.917517][T14629] IPv6: Can't replace route, no match found
[  873.929692][T14620] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  874.066318][ T4268] Bluetooth: hci2: command 0x040f tx timeout
[  874.795491][   T75] bond0: (slave wlan1): Releasing backup interface
[  874.957868][T14639] netlink: 'syz.4.3043': attribute type 3 has an invalid length.
[  874.975357][T14639] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.3043'.
[  876.146303][ T4268] Bluetooth: hci2: command 0x0419 tx timeout
[  878.399594][T14655] netlink: 'syz.1.3048': attribute type 10 has an invalid length.
[  878.442364][   T75] device hsr_slave_0 left promiscuous mode
[  878.474373][   T75] device hsr_slave_1 left promiscuous mode
[  878.482769][T14660] netlink: 'syz.5.3049': attribute type 2 has an invalid length.
[  878.498549][T14662] netlink: 'syz.4.3050': attribute type 3 has an invalid length.
[  878.516420][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  878.526347][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  878.542549][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  878.551084][T14662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3050'.
[  878.560935][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  878.598960][   T75] device veth1_macvtap left promiscuous mode
[  878.605148][   T75] device veth1_vlan left promiscuous mode
[  878.616520][   T75] device veth0_vlan left promiscuous mode
[  878.914224][   T75] team0 (unregistering): Port device geneve1 removed
[  879.137541][   T75] team0 (unregistering): Port device vlan0 removed
[  879.395440][   T75] team0 (unregistering): Port device team_slave_1 removed
[  879.440541][   T75] team0 (unregistering): Port device team_slave_0 removed
[  879.486299][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  879.532786][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.722007][   T75] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  879.991270][   T75] bond0 (unregistering): Released all slaves
[  880.036837][T14672] bridge0: port 3(team0) entered blocking state
[  880.046344][T14672] bridge0: port 3(team0) entered disabled state
[  880.054679][T14672] device team0 entered promiscuous mode
[  880.060473][T14672] device team_slave_0 entered promiscuous mode
[  880.075177][T14672] device team_slave_1 entered promiscuous mode
[  880.084018][T14672] bridge0: port 3(team0) entered blocking state
[  880.090434][T14672] bridge0: port 3(team0) entered forwarding state
[  880.281467][T14686] FAULT_INJECTION: forcing a failure.
[  880.281467][T14686] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.326791][T14686] CPU: 0 PID: 14686 Comm: syz.5.3055 Not tainted syzkaller #0
[  880.334350][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  880.344443][T14686] Call Trace:
[  880.347756][T14686]  <TASK>
[  880.350720][T14686]  dump_stack_lvl+0x168/0x22e
[  880.355437][T14686]  ? show_regs_print_info+0x12/0x12
[  880.360678][T14686]  ? load_image+0x3b0/0x3b0
[  880.365242][T14686]  ? __lock_acquire+0x7c50/0x7c50
[  880.370316][T14686]  should_fail_ex+0x399/0x4d0
[  880.375035][T14686]  _copy_from_user+0x2c/0x170
[  880.379735][T14686]  iovec_from_user+0x143/0x360
[  880.384523][T14686]  __import_iovec+0x6d/0x500
[  880.389137][T14686]  ? __might_fault+0xa6/0x120
[  880.393831][T14686]  import_iovec+0x6f/0xa0
[  880.398182][T14686]  ___sys_sendmsg+0x1e4/0x290
[  880.402877][T14686]  ? __sys_sendmsg+0x270/0x270
[  880.407672][T14686]  ? ktime_get_real_ts64+0x420/0x420
[  880.412985][T14686]  ? __fdget+0x17c/0x200
[  880.417254][T14686]  __se_sys_sendmsg+0x19e/0x270
[  880.422123][T14686]  ? perf_trace_preemptirq_template+0x287/0x330
[  880.428385][T14686]  ? __x64_sys_sendmsg+0x80/0x80
[  880.433356][T14686]  ? lockdep_hardirqs_on+0x94/0x140
[  880.438575][T14686]  do_syscall_64+0x4c/0xa0
[  880.443009][T14686]  ? clear_bhb_loop+0x60/0xb0
[  880.447703][T14686]  ? clear_bhb_loop+0x60/0xb0
[  880.452491][T14686]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  880.458396][T14686] RIP: 0033:0x7f181e98f6c9
[  880.462838][T14686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  880.482454][T14686] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.490888][T14686] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  880.498871][T14686] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005
[  880.506851][T14686] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  880.514835][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.522812][T14686] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  880.530806][T14686]  </TASK>
[  880.599721][T14509] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  880.625523][T14509] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  880.662266][T14509] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  880.723226][T14509] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  880.903509][T14696] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  881.043434][T14696] device syzkaller0 entered promiscuous mode
[  881.071206][T14702] netlink: 'syz.4.3060': attribute type 10 has an invalid length.
[  881.095449][T14712] netlink: 'syz.3.3062': attribute type 3 has an invalid length.
[  881.183026][T14712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3062'.
[  881.639276][T14702] device geneve1 entered promiscuous mode
[  881.646540][T14702] team0: Port device geneve1 added
[  884.393855][T14736] bridge0: port 2(team0) entered blocking state
[  884.403648][T14736] bridge0: port 2(team0) entered disabled state
[  884.653357][T14509] 8021q: adding VLAN 0 to HW filter on device bond0
[  884.699627][T14760] netlink: 'syz.3.3072': attribute type 3 has an invalid length.
[  884.779825][T14509] 8021q: adding VLAN 0 to HW filter on device team0
[  884.787232][T14760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3072'.
[  884.811154][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  884.856580][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  884.903188][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  884.957815][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  885.041413][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.048671][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.109851][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  885.163708][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  885.207624][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.214834][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.278010][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  885.309451][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  885.351533][T14769] netlink: 'syz.1.3075': attribute type 10 has an invalid length.
[  885.789691][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  885.915071][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  885.942564][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  885.976089][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  885.997038][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  886.015550][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  886.060452][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  886.129857][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  886.200076][T14509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  886.257694][T14509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  886.308694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  886.327901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  887.242739][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  887.251189][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  887.272656][T14509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  887.322421][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  887.340210][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  887.381626][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  887.402938][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  887.432061][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  887.450444][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  887.467403][T14509] device veth0_vlan entered promiscuous mode
[  887.494498][T14509] device veth1_vlan entered promiscuous mode
[  887.560430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  887.575359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  887.594846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  887.618735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  887.639138][T14509] device veth0_macvtap entered promiscuous mode
[  887.701215][T14509] device veth1_macvtap entered promiscuous mode
[  887.774368][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.805599][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.833383][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.853587][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.865188][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.882172][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.913046][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.944557][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.988354][T14509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  888.055463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  888.110472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  888.137120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  888.168089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  888.213054][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.282173][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.323811][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.365813][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.408492][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.432192][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.449944][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.488870][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.516109][T14509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.543882][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  888.567418][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  888.575805][T14822] FAULT_INJECTION: forcing a failure.
[  888.575805][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  888.594436][T14509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  888.604302][T14822] CPU: 1 PID: 14822 Comm: syz.4.3084 Not tainted syzkaller #0
[  888.611826][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  888.621929][T14822] Call Trace:
[  888.625242][T14822]  <TASK>
[  888.628210][T14822]  dump_stack_lvl+0x168/0x22e
[  888.632942][T14822]  ? show_regs_print_info+0x12/0x12
[  888.638181][T14822]  ? load_image+0x3b0/0x3b0
[  888.643160][T14822]  ? __lock_acquire+0x7c50/0x7c50
[  888.648214][T14822]  ? verify_lock_unused+0x140/0x140
[  888.653439][T14822]  ? perf_trace_lock+0xf3/0x370
[  888.658311][T14822]  should_fail_ex+0x399/0x4d0
[  888.663015][T14822]  _copy_from_user+0x2c/0x170
[  888.667731][T14822]  ___sys_sendmsg+0x155/0x290
[  888.672529][T14822]  ? __sys_sendmsg+0x270/0x270
[  888.677332][T14822]  ? __lock_acquire+0x7c50/0x7c50
[  888.682399][T14822]  ? __fdget+0x17c/0x200
[  888.686663][T14822]  __se_sys_sendmsg+0x19e/0x270
[  888.691588][T14822]  ? __x64_sys_sendmsg+0x80/0x80
[  888.696558][T14822]  ? lockdep_hardirqs_on+0x94/0x140
[  888.701785][T14822]  do_syscall_64+0x4c/0xa0
[  888.706223][T14822]  ? clear_bhb_loop+0x60/0xb0
[  888.710945][T14822]  ? clear_bhb_loop+0x60/0xb0
[  888.715642][T14822]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  888.721556][T14822] RIP: 0033:0x7f211658f6c9
[  888.725988][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  888.745624][T14822] RSP: 002b:00007f21174a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  888.754063][T14822] RAX: ffffffffffffffda RBX: 00007f21167e5fa0 RCX: 00007f211658f6c9
[  888.762060][T14822] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  888.770043][T14822] RBP: 00007f21174a6090 R08: 0000000000000000 R09: 0000000000000000
[  888.778028][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.786026][T14822] R13: 00007f21167e6038 R14: 00007f21167e5fa0 R15: 00007ffd2d4fa118
[  888.794047][T14822]  </TASK>
[  888.799430][T14509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  888.808350][T14509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  888.826700][T14509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.880353][T14826] netlink: 'syz.3.3086': attribute type 3 has an invalid length.
[  888.936136][T14826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3086'.
[  889.017569][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.073731][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.104364][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  889.112333][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.123001][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.142028][T14831] netlink: 'syz.5.3088': attribute type 10 has an invalid length.
[  889.156312][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3088'.
[  889.177520][T14831] FAULT_INJECTION: forcing a failure.
[  889.177520][T14831] name failslab, interval 1, probability 0, space 0, times 0
[  889.271454][T14831] CPU: 1 PID: 14831 Comm: syz.5.3088 Not tainted syzkaller #0
[  889.279024][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  889.289126][T14831] Call Trace:
[  889.292442][T14831]  <TASK>
[  889.295411][T14831]  dump_stack_lvl+0x168/0x22e
[  889.300156][T14831]  ? show_regs_print_info+0x12/0x12
[  889.305423][T14831]  ? load_image+0x3b0/0x3b0
[  889.309998][T14831]  ? __might_sleep+0xd0/0xd0
[  889.314685][T14831]  ? __lock_acquire+0x7c50/0x7c50
[  889.319782][T14831]  should_fail_ex+0x399/0x4d0
[  889.324532][T14831]  should_failslab+0x5/0x20
[  889.329085][T14831]  slab_pre_alloc_hook+0x59/0x310
[  889.334160][T14831]  ? br_netlink_fini+0x30/0x30
[  889.338992][T14831]  kmem_cache_alloc_node+0x5a/0x320
[  889.344228][T14831]  ? if_nlmsg_size+0x5b0/0x880
[  889.349033][T14831]  ? __alloc_skb+0xfc/0x7e0
[  889.353611][T14831]  __alloc_skb+0xfc/0x7e0
[  889.358013][T14831]  rtmsg_ifinfo_build_skb+0x80/0x180
[  889.363370][T14831]  rtmsg_ifinfo+0x71/0x120
[  889.367849][T14831]  netdev_state_change+0xe6/0x140
[  889.372925][T14831]  ? netdev_features_change+0xc0/0xc0
[  889.378341][T14831]  ? vprintk_emit+0x571/0x680
[  889.383091][T14831]  ? mutex_is_locked+0xe/0x40
[  889.387812][T14831]  ? rtnl_is_locked+0x11/0x20
[  889.392548][T14831]  do_setlink+0x3f7/0x3c40
[  889.397070][T14831]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  889.403287][T14831]  ? load_image+0x3b0/0x3b0
[  889.407873][T14831]  ? rcu_is_watching+0x11/0xa0
[  889.412696][T14831]  ? do_trace_netlink_extack+0x9c/0x220
[  889.418299][T14831]  ? __nla_validate_parse+0x20db/0x2990
[  889.423981][T14831]  ? __nla_validate+0x50/0x50
[  889.428729][T14831]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  889.434729][T14831]  ? __nla_parse+0x3c/0x50
[  889.439215][T14831]  rtnl_setlink+0x35b/0x450
[  889.443779][T14831]  ? rtnl_dump_ifinfo+0x1260/0x1260
[  889.449031][T14831]  ? __schedule+0x10f4/0x40b0
[  889.454039][T14831]  ? rtnl_dump_ifinfo+0x1260/0x1260
[  889.459293][T14831]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  889.464453][T14831]  rtnetlink_rcv_msg+0x79b/0xed0
[  889.469485][T14831]  ? rtnetlink_bind+0x80/0x80
[  889.474204][T14831]  ? __local_bh_enable_ip+0x12a/0x1b0
[  889.479647][T14831]  ? migrate_enable+0x148/0x220
[  889.484546][T14831]  ? trace_call_bpf+0xbf/0x680
[  889.489359][T14831]  ? trace_call_bpf+0xbf/0x680
[  889.494176][T14831]  ? trace_call_bpf+0x5a7/0x680
[  889.499093][T14831]  ? trace_call_bpf+0xbf/0x680
[  889.503904][T14831]  ? __dev_queue_xmit+0x26f/0x3760
[  889.509077][T14831]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  889.515062][T14831]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  889.520939][T14831]  ? perf_trace_lock+0x2ec/0x370
[  889.525952][T14831]  ? trace_event_raw_event_lock+0x230/0x230
[  889.531923][T14831]  ? __skb_clone+0x480/0x790
[  889.536616][T14831]  netlink_rcv_skb+0x1de/0x420
[  889.541443][T14831]  ? rtnetlink_bind+0x80/0x80
[  889.546183][T14831]  ? netlink_ack+0x1100/0x1100
[  889.551036][T14831]  ? netlink_deliver_tap+0x2e/0x1b0
[  889.556306][T14831]  netlink_unicast+0x74d/0x8d0
[  889.561161][T14831]  netlink_sendmsg+0x89e/0xbc0
[  889.566011][T14831]  ? netlink_getsockopt+0x540/0x540
[  889.571284][T14831]  ? aa_sock_msg_perm+0x94/0x150
[  889.576284][T14831]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  889.581632][T14831]  ? security_socket_sendmsg+0x7c/0xa0
[  889.587148][T14831]  ? netlink_getsockopt+0x540/0x540
[  889.592391][T14831]  ____sys_sendmsg+0x59b/0x970
[  889.597247][T14831]  ? __sys_sendmsg_sock+0x30/0x30
[  889.602317][T14831]  ? __import_iovec+0x315/0x500
[  889.607255][T14831]  ? import_iovec+0x6f/0xa0
[  889.611832][T14831]  ___sys_sendmsg+0x21c/0x290
[  889.616577][T14831]  ? __sys_sendmsg+0x270/0x270
[  889.621484][T14831]  ? __lock_acquire+0x7c50/0x7c50
[  889.626642][T14831]  ? __fdget+0x17c/0x200
[  889.630957][T14831]  __se_sys_sendmsg+0x19e/0x270
[  889.635872][T14831]  ? __x64_sys_sendmsg+0x80/0x80
[  889.640929][T14831]  ? lockdep_hardirqs_on+0x94/0x140
[  889.646208][T14831]  do_syscall_64+0x4c/0xa0
[  889.650670][T14831]  ? clear_bhb_loop+0x60/0xb0
[  889.655384][T14831]  ? clear_bhb_loop+0x60/0xb0
[  889.660125][T14831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  889.666076][T14831] RIP: 0033:0x7f181e98f6c9
[  889.670546][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.690203][T14831] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  889.698751][T14831] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  889.706773][T14831] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000006
[  889.714780][T14831] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  889.723052][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  889.731074][T14831] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  889.739180][T14831]  </TASK>
[  889.798455][T14832] netlink: 'syz.1.3089': attribute type 10 has an invalid length.
[  889.821811][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  889.895472][T14840] netlink: 'syz.3.3090': attribute type 10 has an invalid length.
[  890.111319][T14843] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3009'.
[  890.245839][T14847] IPv6: Can't replace route, no match found
[  890.318827][T14847] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  890.703913][T14854] netlink: 'syz.2.3096': attribute type 21 has an invalid length.
[  890.754731][T14854] netlink: 'syz.2.3096': attribute type 6 has an invalid length.
[  890.796842][T14862] netlink: 'syz.5.3099': attribute type 3 has an invalid length.
[  890.805729][T14854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3096'.
[  890.815197][T14862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3099'.
[  891.160962][   T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.178946][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  891.188674][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  891.196791][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  891.205549][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  891.214564][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  891.222073][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  891.510998][   T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.573380][T14880] netlink: 'syz.2.3102': attribute type 10 has an invalid length.
[  892.104658][T14880] team0: Port device geneve1 added
[  892.184621][   T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.214162][T14887] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3105'.
[  892.264519][   T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.563351][T14897] IPv6: Can't replace route, no match found
[  892.572916][T14905] netlink: 'syz.5.3110': attribute type 3 has an invalid length.
[  892.616170][T14905] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3110'.
[  892.640461][T14908] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  892.835133][T14874] chnl_net:caif_netlink_parms(): no params data found
[  893.266333][T13997] Bluetooth: hci0: command 0x0409 tx timeout
[  894.959215][T14928] netlink: 'syz.5.3112': attribute type 10 has an invalid length.
[  894.976350][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3112'.
[  895.346243][T13997] Bluetooth: hci0: command 0x041b tx timeout
[  895.545751][T14946] netlink: 'syz.2.3116': attribute type 10 has an invalid length.
[  896.177984][T14874] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.191225][T14874] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.202704][T14874] device bridge_slave_0 entered promiscuous mode
[  896.263238][T14962] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3118'.
[  896.284502][T14874] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.295091][T14874] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.327395][T14874] device bridge_slave_1 entered promiscuous mode
[  896.342288][T14969] netlink: 'syz.4.3121': attribute type 3 has an invalid length.
[  896.366296][T14969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3121'.
[  896.541307][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.600158][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.632304][T14970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3122'.
[  896.743296][T14976] IPv6: Can't replace route, no match found
[  896.781552][T14976] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  896.902795][T14874] team0: Port device team_slave_0 added
[  897.426644][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[  899.507007][T13997] Bluetooth: hci0: command 0x0419 tx timeout
[  899.647153][T14874] team0: Port device team_slave_1 added
[  899.782847][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.811902][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.900330][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.965574][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.985266][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  900.053320][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  900.079805][T15002] netlink: 'syz.3.3128': attribute type 10 has an invalid length.
[  900.100829][T15002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3128'.
[  900.129592][T15002] device batadv0 entered promiscuous mode
[  900.177354][T15002] bond0: (slave batadv0): Releasing backup interface
[  900.484219][T15002] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  900.587334][T15016] Q�6�`Ҙ: renamed from lo
[  900.765265][T15015] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3133'.
[  900.920945][T15025] netlink: 'syz.3.3134': attribute type 3 has an invalid length.
[  900.959414][T15025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3134'.
[  901.087534][T15030] FAULT_INJECTION: forcing a failure.
[  901.087534][T15030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.120040][T15030] CPU: 1 PID: 15030 Comm: syz.5.3136 Not tainted syzkaller #0
[  901.127583][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  901.137685][T15030] Call Trace:
[  901.141001][T15030]  <TASK>
[  901.143978][T15030]  dump_stack_lvl+0x168/0x22e
[  901.148709][T15030]  ? show_regs_print_info+0x12/0x12
[  901.153958][T15030]  ? load_image+0x3b0/0x3b0
[  901.158506][T15030]  ? __lock_acquire+0x7c50/0x7c50
[  901.163581][T15030]  should_fail_ex+0x399/0x4d0
[  901.168309][T15030]  _copy_from_user+0x2c/0x170
[  901.173028][T15030]  __sys_bpf+0x265/0x6d0
[  901.177324][T15030]  ? bpf_link_show_fdinfo+0x340/0x340
[  901.182756][T15030]  ? lock_chain_count+0x20/0x20
[  901.187668][T15030]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  901.193702][T15030]  __x64_sys_bpf+0x78/0x90
[  901.198166][T15030]  do_syscall_64+0x4c/0xa0
[  901.202620][T15030]  ? clear_bhb_loop+0x60/0xb0
[  901.207344][T15030]  ? clear_bhb_loop+0x60/0xb0
[  901.212068][T15030]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  901.218189][T15030] RIP: 0033:0x7f181e98f6c9
[  901.222646][T15030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  901.242291][T15030] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  901.250840][T15030] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  901.258856][T15030] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  901.266887][T15030] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  901.274935][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  901.282946][T15030] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  901.290974][T15030]  </TASK>
[  901.339405][T14874] device hsr_slave_0 entered promiscuous mode
[  901.499616][T14874] device hsr_slave_1 entered promiscuous mode
[  901.536401][T14874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  901.588433][T14874] Cannot create hsr debugfs directory
[  901.637771][T15047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3137'.
[  901.797619][T15045] IPv6: Can't replace route, no match found
[  901.841751][T15046] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  904.954411][T15065] netlink: 'syz.5.3151': attribute type 21 has an invalid length.
[  904.984327][T15065] netlink: 'syz.5.3151': attribute type 1 has an invalid length.
[  905.016189][T15071] netlink: 'syz.4.3143': attribute type 10 has an invalid length.
[  905.469017][T15082] netlink: 'syz.3.3146': attribute type 3 has an invalid length.
[  905.489559][T15082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3146'.
[  905.552825][   T75] device hsr_slave_0 left promiscuous mode
[  905.567163][   T75] device hsr_slave_1 left promiscuous mode
[  905.584162][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  905.592209][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.601154][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.609344][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.645258][   T75] device veth1_macvtap left promiscuous mode
[  905.657995][   T75] device veth1_vlan left promiscuous mode
[  905.664007][   T75] device veth0_vlan left promiscuous mode
[  905.858467][   T75] team0 (unregistering): Port device geneve1 removed
[  906.467880][   T75] team0 (unregistering): Port device team_slave_1 removed
[  906.511520][   T75] team0 (unregistering): Port device team_slave_0 removed
[  906.562039][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.064186][   T75] bond0 (unregistering): Released all slaves
[  907.105611][T15076] netlink: 'syz.2.3144': attribute type 10 has an invalid length.
[  907.115340][T15076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3144'.
[  907.128755][T15076] device batadv0 entered promiscuous mode
[  907.137928][T15076] bridge0: port 3(batadv0) entered blocking state
[  907.144607][T15076] bridge0: port 3(batadv0) entered disabled state
[  907.152486][T15076] bridge0: port 3(batadv0) entered blocking state
[  907.159081][T15076] bridge0: port 3(batadv0) entered forwarding state
[  907.171083][T15089] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3149'.
[  907.563212][    T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  907.572585][    T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  907.618566][T15101] IPv6: Can't replace route, no match found
[  907.625901][T15098] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3153'.
[  907.701051][T15106] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  907.730339][T15108] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3155'.
[  907.868307][T15114] netlink: 'syz.5.3157': attribute type 3 has an invalid length.
[  907.907109][T15114] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3157'.
[  908.285465][T15122] netlink: 'syz.4.3160': attribute type 10 has an invalid length.
[  908.551701][T15129] netlink: 'syz.2.3162': attribute type 10 has an invalid length.
[  908.599229][T14874] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  908.613834][T14874] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  908.647804][T14874] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  908.711244][T14874] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  908.919215][T14874] 8021q: adding VLAN 0 to HW filter on device bond0
[  908.943219][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  908.959584][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  908.979455][T14874] 8021q: adding VLAN 0 to HW filter on device team0
[  908.999435][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  909.015121][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  909.025438][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.032721][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.064312][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  909.078780][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  909.100703][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  909.145324][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.152553][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.168655][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  909.277072][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  909.326825][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  909.427789][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  909.448359][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  909.472949][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  910.119549][T14874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  910.152203][T14874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  910.164463][T15148] IPv6: Can't replace route, no match found
[  910.174955][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  910.187070][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  910.203220][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  910.213252][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  910.230665][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  910.249081][T15152] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  910.269400][T15161] netlink: 'syz.4.3168': attribute type 21 has an invalid length.
[  910.285462][T15161] netlink: 'syz.4.3168': attribute type 1 has an invalid length.
[  910.601700][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  910.633406][T15168] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3169'.
[  910.877196][T15173] netlink: 'syz.5.3170': attribute type 3 has an invalid length.
[  910.935936][T15173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3170'.
[  911.813647][T15190] netlink: 'syz.5.3174': attribute type 11 has an invalid length.
[  911.842120][T15190] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3174'.
[  911.854874][T15192] netlink: 'syz.4.3175': attribute type 29 has an invalid length.
[  912.109943][T15192] netlink: 'syz.4.3175': attribute type 29 has an invalid length.
[  912.123031][T15194] netlink: 'syz.4.3175': attribute type 29 has an invalid length.
[  912.221514][T15195] netlink: 'syz.4.3175': attribute type 29 has an invalid length.
[  912.232777][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  912.257940][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  912.297227][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.312491][T15197] netlink: 'syz.4.3175': attribute type 29 has an invalid length.
[  912.454609][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  912.523368][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  912.536247][T15187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  912.759354][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  912.787023][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  912.884909][T14874] device veth0_vlan entered promiscuous mode
[  912.944303][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  912.957525][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  913.052300][T14874] device veth1_vlan entered promiscuous mode
[  913.099228][T14874] device veth0_macvtap entered promiscuous mode
[  913.156453][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  913.193540][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  913.223730][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  913.281239][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  913.315450][T14874] device veth1_macvtap entered promiscuous mode
[  913.357860][T15216] netlink: 'syz.5.3178': attribute type 10 has an invalid length.
[  913.421447][T15222] IPv6: Can't replace route, no match found
[  913.449432][T15223] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  913.481302][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  913.500714][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  913.549425][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.576176][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.596154][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.616208][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.632920][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.645823][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.662525][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  913.685070][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.707863][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  913.725066][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.736309][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.749125][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.760062][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.778461][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.829935][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.850439][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.881407][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.894965][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  913.912538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  913.940715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  913.957179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  913.973568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  914.081998][T15233] netlink: 'syz.3.3181': attribute type 21 has an invalid length.
[  914.144878][T15233] netlink: 'syz.3.3181': attribute type 1 has an invalid length.
[  914.181236][T14874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.196703][T14874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.231189][T14874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.260885][T14874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.446628][T15244] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3183'.
[  914.778225][T15249] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3184'.
[  915.095307][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.175834][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.253241][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  915.308425][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.338224][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.403637][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  917.705926][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  917.724248][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  917.739021][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  917.751403][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  917.761173][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  917.770905][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  919.469588][T15282] IPv6: Can't replace route, no match found
[  919.478786][T15284] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  919.488466][T15290] netlink: 'syz.2.3194': attribute type 10 has an invalid length.
[  919.508356][T15292] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  919.580011][T15292] team0: Port device geneve1 added
[  919.826478][ T4268] Bluetooth: hci3: command 0x0409 tx timeout
[  921.906941][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[  923.794921][T15298] chnl_net:caif_netlink_parms(): no params data found
[  923.986132][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[  924.012068][T15372] FAULT_INJECTION: forcing a failure.
[  924.012068][T15372] name failslab, interval 1, probability 0, space 0, times 0
[  924.076362][T15372] CPU: 1 PID: 15372 Comm: syz.2.3208 Not tainted syzkaller #0
[  924.083906][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  924.094010][T15372] Call Trace:
[  924.097323][T15372]  <TASK>
[  924.100287][T15372]  dump_stack_lvl+0x168/0x22e
[  924.105042][T15372]  ? show_regs_print_info+0x12/0x12
[  924.110291][T15372]  ? load_image+0x3b0/0x3b0
[  924.114859][T15372]  ? __might_sleep+0xd0/0xd0
[  924.119502][T15372]  ? __lock_acquire+0x7c50/0x7c50
[  924.124580][T15372]  should_fail_ex+0x399/0x4d0
[  924.129308][T15372]  should_failslab+0x5/0x20
[  924.133853][T15372]  slab_pre_alloc_hook+0x59/0x310
[  924.138897][T15372]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  924.144648][T15372]  __kmem_cache_alloc_node+0x4f/0x260
[  924.150041][T15372]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  924.155782][T15372]  __kmalloc+0xa0/0x240
[  924.159973][T15372]  tomoyo_realpath_from_path+0xdf/0x5d0
[  924.165552][T15372]  tomoyo_path_number_perm+0x1e3/0x600
[  924.171062][T15372]  ? tomoyo_path_number_perm+0x1b6/0x600
[  924.176714][T15372]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  924.182194][T15372]  ? ksys_write+0x1bd/0x240
[  924.186720][T15372]  ? common_file_perm+0x171/0x1c0
[  924.191788][T15372]  ? __fget_files+0x28/0x4d0
[  924.196404][T15372]  security_file_ioctl+0x6c/0xa0
[  924.201362][T15372]  __se_sys_ioctl+0x48/0x170
[  924.205971][T15372]  do_syscall_64+0x4c/0xa0
[  924.210408][T15372]  ? clear_bhb_loop+0x60/0xb0
[  924.215095][T15372]  ? clear_bhb_loop+0x60/0xb0
[  924.219789][T15372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  924.225693][T15372] RIP: 0033:0x7f897d98f6c9
[  924.230118][T15372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  924.249741][T15372] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  924.258173][T15372] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[  924.266159][T15372] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003
[  924.274141][T15372] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[  924.282126][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.290109][T15372] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[  924.298106][T15372]  </TASK>
[  924.317547][T15372] ERROR: Out of memory at tomoyo_realpath_from_path.
[  924.356310][T15298] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.363649][T15298] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.373038][T15298] device bridge_slave_0 entered promiscuous mode
[  924.493964][T15298] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.536234][T15298] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.575612][T15298] device bridge_slave_1 entered promiscuous mode
[  924.609405][T15379] IPv6: Can't replace route, no match found
[  924.617127][T15381] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  925.021728][T15298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  925.118149][T15406] netlink: 'syz.2.3216': attribute type 21 has an invalid length.
[  925.152871][T15406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3216'.
[  925.170488][T15410] netlink: 'syz.4.3217': attribute type 1 has an invalid length.
[  925.174260][T15406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3216'.
[  925.210048][T15410] netlink: 'syz.4.3217': attribute type 3 has an invalid length.
[  925.224298][T15298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.243988][T15410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3217'.
[  925.494574][T15420] netlink: 'syz.2.3220': attribute type 10 has an invalid length.
[  925.538400][T15298] team0: Port device team_slave_0 added
[  925.632350][T15298] team0: Port device team_slave_1 added
[  925.698204][T15425] FAULT_INJECTION: forcing a failure.
[  925.698204][T15425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  925.747861][T15425] CPU: 1 PID: 15425 Comm: syz.5.3222 Not tainted syzkaller #0
[  925.755417][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  925.765517][T15425] Call Trace:
[  925.768835][T15425]  <TASK>
[  925.771808][T15425]  dump_stack_lvl+0x168/0x22e
[  925.776543][T15425]  ? show_regs_print_info+0x12/0x12
[  925.781795][T15425]  ? load_image+0x3b0/0x3b0
[  925.786359][T15425]  ? __lock_acquire+0x7c50/0x7c50
[  925.791434][T15425]  ? lock_chain_count+0x20/0x20
[  925.796334][T15425]  should_fail_ex+0x399/0x4d0
[  925.801081][T15425]  _copy_from_user+0x2c/0x170
[  925.805814][T15425]  ___sys_sendmsg+0x155/0x290
[  925.810549][T15425]  ? __sys_sendmsg+0x270/0x270
[  925.815417][T15425]  ? ktime_get_real_ts64+0x420/0x420
[  925.820772][T15425]  ? __fdget+0x17c/0x200
[  925.825082][T15425]  __se_sys_sendmsg+0x19e/0x270
[  925.829996][T15425]  ? perf_trace_preemptirq_template+0x287/0x330
[  925.836312][T15425]  ? __x64_sys_sendmsg+0x80/0x80
[  925.841321][T15425]  ? lockdep_hardirqs_on+0x94/0x140
[  925.846590][T15425]  do_syscall_64+0x4c/0xa0
[  925.851057][T15425]  ? clear_bhb_loop+0x60/0xb0
[  925.855875][T15425]  ? clear_bhb_loop+0x60/0xb0
[  925.860597][T15425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  925.866528][T15425] RIP: 0033:0x7f181e98f6c9
[  925.871003][T15425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  925.890654][T15425] RSP: 002b:00007f181f8c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  925.899129][T15425] RAX: ffffffffffffffda RBX: 00007f181ebe5fa0 RCX: 00007f181e98f6c9
[  925.907149][T15425] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005
[  925.915161][T15425] RBP: 00007f181f8c2090 R08: 0000000000000000 R09: 0000000000000000
[  925.923183][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  925.931630][T15425] R13: 00007f181ebe6038 R14: 00007f181ebe5fa0 R15: 00007ffda106cff8
[  925.939659][T15425]  </TASK>
[  925.959810][T15298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  925.986555][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  926.043426][T15298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.066751][ T4268] Bluetooth: hci3: command 0x0419 tx timeout
[  926.230967][T15298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.243810][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  926.351654][T15298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.525118][T15448] IPv6: Can't replace route, no match found
[  926.546329][T15445] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  927.778458][T15453] netlink: 'syz.1.3228': attribute type 21 has an invalid length.
[  927.804999][T15298] device hsr_slave_0 entered promiscuous mode
[  927.837097][T15298] device hsr_slave_1 entered promiscuous mode
[  931.550182][    T9] device hsr_slave_0 left promiscuous mode
[  931.569072][    T9] device hsr_slave_1 left promiscuous mode
[  931.575651][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.599346][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  931.601106][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  931.605692][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  931.707210][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.742083][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.765909][    T9] device veth1_vlan left promiscuous mode
[  931.776462][    T9] device veth0_vlan left promiscuous mode
[  932.853207][    T9] team0 (unregistering): Port device geneve1 removed
[  933.058067][    T9] team0 (unregistering): Port device vlan0 removed
[  936.307492][    T9] team0 (unregistering): Port device team_slave_1 removed
[  939.300008][    T9] team0 (unregistering): Port device team_slave_0 removed
[  939.354329][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  939.433848][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  939.647509][T15522] netlink: 'syz.2.3249': attribute type 1 has an invalid length.
[  939.659412][T15522] netlink: 'syz.2.3249': attribute type 3 has an invalid length.
[  939.677812][T15522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3249'.
[  939.896081][    T9] bond0 (unregistering): (slave team0): Releasing backup interface
[  940.044589][    T9] bond0 (unregistering): Released all slaves
[  940.096858][T15501] IPv6: Can't replace route, no match found
[  940.103975][T15502] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  940.122460][T15510] netlink: 'syz.4.3245': attribute type 10 has an invalid length.
[  940.376797][T15531] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.3252'.
[  940.981349][T15543] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3257'.
[  941.858897][T15559] netlink: 'syz.1.3261': attribute type 10 has an invalid length.
[  942.666074][T15567] IPv6: Can't replace route, no match found
[  942.673225][T15569] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  942.961910][T15298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  943.002683][T15586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3265'.
[  943.088978][T15591] netlink: 'syz.1.3265': attribute type 3 has an invalid length.
[  943.104931][T15591] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3265'.
[  943.267918][T15593] FAULT_INJECTION: forcing a failure.
[  943.267918][T15593] name failslab, interval 1, probability 0, space 0, times 0
[  943.292245][T15593] CPU: 1 PID: 15593 Comm: syz.2.3268 Not tainted syzkaller #0
[  943.299783][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  943.309903][T15593] Call Trace:
[  943.313219][T15593]  <TASK>
[  943.316195][T15593]  dump_stack_lvl+0x168/0x22e
[  943.321450][T15593]  ? show_regs_print_info+0x12/0x12
[  943.326703][T15593]  ? load_image+0x3b0/0x3b0
[  943.331262][T15593]  ? __lock_acquire+0x7c50/0x7c50
[  943.336346][T15593]  should_fail_ex+0x399/0x4d0
[  943.341084][T15593]  should_failslab+0x5/0x20
[  943.345645][T15593]  slab_pre_alloc_hook+0x59/0x310
[  943.350703][T15593]  ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0
[  943.357325][T15593]  ? bpf_test_init+0xc0/0x150
[  943.362020][T15593]  __kmem_cache_alloc_node+0x4f/0x260
[  943.367854][T15593]  ? bpf_test_init+0xc0/0x150
[  943.372548][T15593]  __kmalloc+0xa0/0x240
[  943.376756][T15593]  bpf_test_init+0xc0/0x150
[  943.381293][T15593]  bpf_prog_test_run_xdp+0x359/0xe50
[  943.386654][T15593]  ? dev_put+0x80/0x80
[  943.390750][T15593]  ? dev_put+0x80/0x80
[  943.394852][T15593]  bpf_prog_test_run+0x31e/0x390
[  943.399824][T15593]  __sys_bpf+0x593/0x6d0
[  943.404093][T15593]  ? bpf_link_show_fdinfo+0x340/0x340
[  943.409496][T15593]  ? lock_chain_count+0x20/0x20
[  943.414376][T15593]  __x64_sys_bpf+0x78/0x90
[  943.418819][T15593]  do_syscall_64+0x4c/0xa0
[  943.423248][T15593]  ? clear_bhb_loop+0x60/0xb0
[  943.427937][T15593]  ? clear_bhb_loop+0x60/0xb0
[  943.432631][T15593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  943.438556][T15593] RIP: 0033:0x7f897d98f6c9
[  943.442987][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  943.462630][T15593] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  943.471078][T15593] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[  943.479064][T15593] RDX: 000000000000001b RSI: 0000200000000640 RDI: 000000000000000a
[  943.487052][T15593] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[  943.495121][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  943.503101][T15593] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[  943.511104][T15593]  </TASK>
[  943.763231][T15298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  945.601141][T15298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  945.723386][T15601] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3272'.
[  945.784487][T15298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  945.951835][T15612] netlink: 'syz.4.3274': attribute type 10 has an invalid length.
[  946.252740][T15298] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.328674][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  946.396947][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  946.429379][T15298] 8021q: adding VLAN 0 to HW filter on device team0
[  946.456753][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  946.489730][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  946.517159][T10533] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.524428][T10533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.662637][T15627] IPv6: Can't replace route, no match found
[  946.697750][T15628] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  946.736398][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  946.744722][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  946.815806][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  946.877622][T10533] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.884828][T10533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.920742][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  947.028531][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  947.057353][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  947.095448][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  947.130432][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  947.170526][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  947.228018][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  947.305327][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  947.314793][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  947.350210][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  947.400806][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  947.429859][T15298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  948.544140][T15667] FAULT_INJECTION: forcing a failure.
[  948.544140][T15667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  948.622774][T15667] CPU: 0 PID: 15667 Comm: syz.2.3287 Not tainted syzkaller #0
[  948.630343][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  948.640449][T15667] Call Trace:
[  948.643767][T15667]  <TASK>
[  948.646733][T15667]  dump_stack_lvl+0x168/0x22e
[  948.651469][T15667]  ? show_regs_print_info+0x12/0x12
[  948.656715][T15667]  ? load_image+0x3b0/0x3b0
[  948.661349][T15667]  ? __lock_acquire+0x7c50/0x7c50
[  948.666534][T15667]  ? snprintf+0xd7/0x120
[  948.670826][T15667]  should_fail_ex+0x399/0x4d0
[  948.675557][T15667]  _copy_to_user+0x2c/0x130
[  948.680105][T15667]  simple_read_from_buffer+0xe3/0x150
[  948.685558][T15667]  proc_fail_nth_read+0x19a/0x210
[  948.690729][T15667]  ? proc_fault_inject_write+0x2f0/0x2f0
[  948.696412][T15667]  ? fsnotify_perm+0x248/0x550
[  948.701226][T15667]  ? proc_fault_inject_write+0x2f0/0x2f0
[  948.706908][T15667]  vfs_read+0x2c0/0x920
[  948.711273][T15667]  ? kernel_read+0x1e0/0x1e0
[  948.715921][T15667]  ? __fget_files+0x28/0x4d0
[  948.720565][T15667]  ? __fget_files+0x44a/0x4d0
[  948.725318][T15667]  ? __fdget_pos+0x2ae/0x360
[  948.729966][T15667]  ? ksys_read+0x71/0x240
[  948.734363][T15667]  ksys_read+0x143/0x240
[  948.738929][T15667]  ? vfs_write+0x960/0x960
[  948.743408][T15667]  ? lockdep_hardirqs_on+0x94/0x140
[  948.748674][T15667]  do_syscall_64+0x4c/0xa0
[  948.753138][T15667]  ? clear_bhb_loop+0x60/0xb0
[  948.758163][T15667]  ? clear_bhb_loop+0x60/0xb0
[  948.762893][T15667]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  948.768836][T15667] RIP: 0033:0x7f897d98e0dc
[  948.773300][T15667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  948.792959][T15667] RSP: 002b:00007f897e8d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  948.801433][T15667] RAX: ffffffffffffffda RBX: 00007f897dbe6090 RCX: 00007f897d98e0dc
[  948.809453][T15667] RDX: 000000000000000f RSI: 00007f897e8d70a0 RDI: 0000000000000006
[  948.817466][T15667] RBP: 00007f897e8d7090 R08: 0000000000000000 R09: 0000000000000000
[  948.825651][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  948.833661][T15667] R13: 00007f897dbe6128 R14: 00007f897dbe6090 R15: 00007ffe399f0e88
[  948.841696][T15667]  </TASK>
[  949.054087][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  949.067911][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  949.110824][T15298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  949.235191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  949.263431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  949.293507][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  949.315802][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  949.345664][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  949.375725][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  949.398213][T15298] device veth0_vlan entered promiscuous mode
[  949.433205][T15298] device veth1_vlan entered promiscuous mode
[  949.526849][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  949.536881][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  949.574540][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  949.597603][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  949.631373][T15298] device veth0_macvtap entered promiscuous mode
[  949.672506][T15298] device veth1_macvtap entered promiscuous mode
[  949.734595][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  949.773431][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.803928][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  949.835113][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.860202][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  949.901648][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.943290][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  949.975132][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.014214][T15298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  950.046988][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  950.064515][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  950.093676][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  950.119670][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  950.149473][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  950.189342][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.224291][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  950.254330][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.285436][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  950.316051][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.351565][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  950.382932][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  950.418053][T15298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  950.427580][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  950.455147][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  950.489311][T15298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  950.513126][T15298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  950.540060][T15298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  950.583197][T15298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  950.840892][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.864374][T15674] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3289'.
[  950.887431][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.949712][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  951.005201][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.050570][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.068688][T15679] IPv6: Can't replace route, no match found
[  951.094270][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  951.133373][T15679] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  951.867377][T15702] netlink: 'syz.2.3296': attribute type 39 has an invalid length.
[  952.224832][T15706] netlink: 'syz.2.3296': attribute type 4 has an invalid length.
[  952.268374][T15706] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3296'.
[  952.478185][T15706] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  952.682579][T13997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  952.720154][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  952.763845][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  952.816321][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  952.824512][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  952.832444][T13997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  953.498866][T15726] netlink: 'syz.4.3305': attribute type 10 has an invalid length.
[  954.053142][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.101463][T15730] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  954.131965][T15744] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3310'.
[  954.268610][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.563578][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.834644][    T9] batman_adv: batadv0: Removing interface: netdevsim0
[  954.866200][ T4268] Bluetooth: hci4: command 0x0409 tx timeout
[  955.670289][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.946284][ T4268] Bluetooth: hci4: command 0x041b tx timeout
[  957.985302][T15721] chnl_net:caif_netlink_parms(): no params data found
[  958.309047][T15721] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.373884][T15721] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.420594][T15721] device bridge_slave_0 entered promiscuous mode
[  958.646557][T15782] netlink: 'syz.2.3318': attribute type 10 has an invalid length.
[  958.688265][T15721] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.705844][T15721] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.724175][T15792] FAULT_INJECTION: forcing a failure.
[  958.724175][T15792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  958.739568][T15721] device bridge_slave_1 entered promiscuous mode
[  958.914227][T15792] CPU: 0 PID: 15792 Comm: syz.1.3322 Not tainted syzkaller #0
[  958.922231][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  958.932364][T15792] Call Trace:
[  958.935698][T15792]  <TASK>
[  958.938684][T15792]  dump_stack_lvl+0x168/0x22e
[  958.943442][T15792]  ? show_regs_print_info+0x12/0x12
[  958.948759][T15792]  ? load_image+0x3b0/0x3b0
[  958.953349][T15792]  ? __lock_acquire+0x7c50/0x7c50
[  958.958457][T15792]  ? perf_trace_lock+0x2ec/0x370
[  958.963543][T15792]  should_fail_ex+0x399/0x4d0
[  958.968397][T15792]  fpu__restore_sig+0x215/0x1190
[  958.973459][T15792]  ? copy_fpstate_to_sigframe+0xcb0/0xcb0
[  958.979280][T15792]  ? __might_fault+0xc2/0x120
[  958.984017][T15792]  ? __might_fault+0xa6/0x120
[  958.988772][T15792]  __ia32_sys_rt_sigreturn+0x649/0x790
[  958.994293][T15792]  ? trace_event_raw_event_lock+0x230/0x230
[  959.000294][T15792]  ? load_gs_index+0x120/0x120
[  959.005181][T15792]  ? lock_chain_count+0x20/0x20
[  959.010120][T15792]  ? lockdep_hardirqs_on+0x94/0x140
[  959.015474][T15792]  do_syscall_64+0x4c/0xa0
[  959.019953][T15792]  ? clear_bhb_loop+0x60/0xb0
[  959.025037][T15792]  ? clear_bhb_loop+0x60/0xb0
[  959.029779][T15792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  959.035732][T15792] RIP: 0033:0x7f2b0b98f6c9
[  959.040196][T15792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  959.059881][T15792] RSP: 002b:00007f2b09bf6038 EFLAGS: 00000246
[  959.066013][T15792] RAX: 0000000000000000 RBX: 00007f2b0bbe5fa0 RCX: 00007f2b0b98f6c9
[  959.074041][T15792] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a
[  959.082072][T15792] RBP: 00007f2b09bf6090 R08: 0000000000000000 R09: 0000000000000000
[  959.090186][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  959.098219][T15792] R13: 00007f2b0bbe6038 R14: 00007f2b0bbe5fa0 R15: 00007fff75d9c008
[  959.106282][T15792]  </TASK>
[  959.111368][ T4268] Bluetooth: hci4: command 0x040f tx timeout
[  959.222859][T15721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  959.334775][T15721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  959.500956][T15721] team0: Port device team_slave_0 added
[  959.601295][T15721] team0: Port device team_slave_1 added
[  959.625225][T15806] IPv6: Can't replace route, no match found
[  959.658244][T15809] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  959.934545][T15815] netlink: 'syz.4.3328': attribute type 10 has an invalid length.
[  960.050786][T15721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  960.066763][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.193837][T15721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  960.314177][T15721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.332766][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.436194][T15721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.186365][ T4268] Bluetooth: hci4: command 0x0419 tx timeout
[  963.507420][T15721] device hsr_slave_0 entered promiscuous mode
[  963.529921][T15721] device hsr_slave_1 entered promiscuous mode
[  963.545622][T15721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  963.564849][T15721] Cannot create hsr debugfs directory
[  964.106463][T15844] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3336'.
[  964.386104][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[  964.416668][T15865] netlink: 'syz.3.3340': attribute type 10 has an invalid length.
[  964.995674][T15865] team0: Port device geneve1 added
[  965.591346][T15869] netlink: 'syz.4.3341': attribute type 10 has an invalid length.
[  965.637043][T15875] IPv6: Can't replace route, no match found
[  965.645378][T15878] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  965.757635][    T9] device hsr_slave_0 left promiscuous mode
[  965.777202][    T9] device hsr_slave_1 left promiscuous mode
[  965.783992][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.798394][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  965.848362][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.855837][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  965.940879][    T9] bridge0: port 3(batadv0) entered disabled state
[  965.953157][    T9] device bridge_slave_0 left promiscuous mode
[  965.985492][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.117701][    T9] device veth1_macvtap left promiscuous mode
[  966.137381][    T9] device veth1_vlan left promiscuous mode
[  966.497216][    T9] team0 (unregistering): Port device geneve1 removed
[  967.193354][    T9] team0 (unregistering): Port device team_slave_1 removed
[  967.258208][    T9] team0 (unregistering): Port device team_slave_0 removed
[  967.368703][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  968.343527][    T9] team0 (unregistering): Port device bridge0 removed
[  968.477414][    T9] bond0 (unregistering): Released all slaves
[  968.625332][T15913] Q�6�`Ҙ: renamed from lo
[  968.638645][T15915] netlink: 'syz.3.3353': attribute type 10 has an invalid length.
[  968.744897][T15927] netlink: 'syz.2.3358': attribute type 10 has an invalid length.
[  968.862472][T15931] IPv6: Can't replace route, no match found
[  968.922646][T15930] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  969.098497][T15936] netlink: 'syz.1.3369': attribute type 10 has an invalid length.
[  969.777269][T15958] netlink: 'syz.4.3367': attribute type 3 has an invalid length.
[  969.805596][T15958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3367'.
[  970.700052][T15971] netlink: 'syz.1.3378': attribute type 3 has an invalid length.
[  970.760587][T15971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3378'.
[  970.864031][T15721] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  970.911834][T15721] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  970.971267][T15721] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  971.012053][T15721] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  971.145794][T15980] IPv6: Can't replace route, no match found
[  971.427203][T15980] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  971.658140][T15721] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.701528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  971.710394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  971.722382][T15721] 8021q: adding VLAN 0 to HW filter on device team0
[  971.766890][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  971.806974][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  971.830140][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.837438][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.858437][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  971.883457][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  971.903060][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.910304][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.933438][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  971.942989][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  971.952948][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  971.962788][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  971.981249][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  972.018353][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  972.049875][T16018] netlink: 'syz.2.3382': attribute type 3 has an invalid length.
[  972.065444][T16006] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3377'.
[  972.081300][T16018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3382'.
[  972.115686][T16015] netlink: 'syz.1.3381': attribute type 10 has an invalid length.
[  972.162009][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  972.172899][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  972.212396][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  972.273904][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  972.320703][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  972.354546][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  972.374429][T15721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  972.403262][T16025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3383'.
[  973.165891][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  973.183931][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  973.222002][T15721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  973.646530][T16050] netlink: 'syz.1.3389': attribute type 10 has an invalid length.
[  973.824056][T16056] IPv6: Can't replace route, no match found
[  973.901012][T16056] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  974.351300][T16070] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3393'.
[  974.389206][T16076] netlink: 'syz.1.3404': attribute type 10 has an invalid length.
[  974.413497][T16078] netlink: 'syz.4.3395': attribute type 10 has an invalid length.
[  975.646472][T16089] Q�6�`Ҙ: renamed from lo
[  975.683518][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  975.693570][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  975.720153][T15721] device veth0_vlan entered promiscuous mode
[  975.758458][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  975.796927][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  975.832087][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  975.893854][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  975.970275][T16105] IPv6: Can't replace route, no match found
[  976.015833][T15721] device veth1_vlan entered promiscuous mode
[  976.035084][T16113] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  976.121849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  976.137687][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  976.151838][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  976.164356][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  976.185220][T15721] device veth0_macvtap entered promiscuous mode
[  976.220776][T15721] device veth1_macvtap entered promiscuous mode
[  976.328921][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.365600][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.408848][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.432215][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.450692][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.463001][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.490024][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.503060][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.534824][T15721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  976.594685][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  976.613207][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  976.649032][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  976.675546][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  976.733654][T16123] IPv6: Can't replace route, no match found
[  976.750897][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.778143][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.804372][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.865661][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.904919][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.947019][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.975385][T15721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  976.986205][T15721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.002958][T15721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  977.022561][T16121] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  977.047306][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  977.058239][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  977.078760][T16131] netlink: 'syz.2.3408': attribute type 10 has an invalid length.
[  977.129941][T15721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.162301][T15721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.191985][T15721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.224314][T15721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  977.906458][T10533] wlan1: Trigger new scan to find an IBSS to join
[  978.067906][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  978.091473][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  978.114444][T16152] netlink: 'syz.4.3412': attribute type 2 has an invalid length.
[  978.154782][T16152] netlink: 14974 bytes leftover after parsing attributes in process `syz.4.3412'.
[  978.224192][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  978.258352][T16161] netlink: 'syz.3.3411': attribute type 10 has an invalid length.
[  978.771945][T16159] netlink: 'syz.2.3410': attribute type 10 has an invalid length.
[  979.777544][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.867171][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.957683][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  980.111132][T16189] IPv6: Can't replace route, no match found
[  980.130709][T16185] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  980.514193][T16203] netlink: 'syz.3.3421': attribute type 10 has an invalid length.
[  980.725227][T16211] IPv6: Can't replace route, no match found
[  980.767404][T16211] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  980.983460][T16214] netlink: 'syz.5.3424': attribute type 15 has an invalid length.
[  981.013798][T16214] netlink: 'syz.5.3424': attribute type 5 has an invalid length.
[  981.062137][T16214] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3424'.
[  981.498316][T16222] netlink: 'syz.5.3429': attribute type 1 has an invalid length.
[  982.262995][T16245] IPv6: Can't replace route, no match found
[  982.316620][T16245] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  982.833188][T16256] netlink: 'syz.4.3436': attribute type 10 has an invalid length.
[  982.867001][ T4381] wlan1: Trigger new scan to find an IBSS to join
[  983.772520][T16261] netlink: 'syz.1.3437': attribute type 10 has an invalid length.
[  984.043204][T16263] IPv6: Can't replace route, no match found
[  984.106579][T16263] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  985.106455][T16279] netlink: 'syz.2.3443': attribute type 10 has an invalid length.
[  985.526299][T16293] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3448'.
[  985.907580][   T46] wlan1: Trigger new scan to find an IBSS to join
[  988.875111][ T4582] wlan1: Trigger new scan to find an IBSS to join
[  988.946448][   T29] wlan1: Trigger new scan to find an IBSS to join
[  989.558507][   T46] wlan1: Creating new IBSS network, BSSID fa:58:a9:c3:3f:f2
[  989.986074][ T4268] Bluetooth: hci2: command 0x0406 tx timeout
[  990.181439][T16345] netlink: 'syz.2.3467': attribute type 4 has an invalid length.
[  991.357335][T16365] netlink: 'syz.3.3470': attribute type 10 has an invalid length.
[  991.907215][ T4582] wlan1: Trigger new scan to find an IBSS to join
[  993.039161][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  993.045621][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  993.906424][T10533] wlan1: Creating new IBSS network, BSSID 8a:d3:bf:2c:a7:de
[  994.688742][T16409] netlink: 'syz.5.3485': attribute type 10 has an invalid length.
[  994.956642][T16409] team0: Port device geneve1 added
[  995.174199][T16426] netlink: 'syz.4.3491': attribute type 3 has an invalid length.
[  995.230127][T16426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3491'.
[  999.082932][T16472] netlink: 'syz.1.3505': attribute type 3 has an invalid length.
[  999.116418][T16472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3505'.
[  999.490181][T16481] netlink: 'syz.1.3509': attribute type 10 has an invalid length.
[ 1000.049679][T16493] FAULT_INJECTION: forcing a failure.
[ 1000.049679][T16493] name failslab, interval 1, probability 0, space 0, times 0
[ 1000.076352][T16493] CPU: 0 PID: 16493 Comm: syz.2.3514 Not tainted syzkaller #0
[ 1000.083912][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1000.094023][T16493] Call Trace:
[ 1000.097345][T16493]  <TASK>
[ 1000.100312][T16493]  dump_stack_lvl+0x168/0x22e
[ 1000.105218][T16493]  ? show_regs_print_info+0x12/0x12
[ 1000.110474][T16493]  ? load_image+0x3b0/0x3b0
[ 1000.115040][T16493]  ? __might_sleep+0xd0/0xd0
[ 1000.119687][T16493]  ? __lock_acquire+0x7c50/0x7c50
[ 1000.124770][T16493]  ? __lock_acquire+0x13c0/0x7c50
[ 1000.129871][T16493]  should_fail_ex+0x399/0x4d0
[ 1000.134621][T16493]  should_failslab+0x5/0x20
[ 1000.139175][T16493]  slab_pre_alloc_hook+0x59/0x310
[ 1000.144252][T16493]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1000.149414][T16493]  ? __d_alloc+0x31/0x700
[ 1000.153803][T16493]  __d_alloc+0x31/0x700
[ 1000.158028][T16493]  ? ____kasan_slab_free+0x126/0x1e0
[ 1000.163367][T16493]  d_alloc_parallel+0xda/0x1530
[ 1000.168269][T16493]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.174375][T16493]  ? lockdep_init_map_type+0x9d/0x880
[ 1000.179772][T16493]  ? lockdep_init_map_type+0x9d/0x880
[ 1000.185166][T16493]  ? lockdep_softirqs_off+0x420/0x420
[ 1000.190566][T16493]  ? d_hash_and_lookup+0x1b0/0x1b0
[ 1000.195718][T16493]  ? __init_waitqueue_head+0xa5/0x150
[ 1000.201113][T16493]  __lookup_slow+0x113/0x3a0
[ 1000.205733][T16493]  ? lookup_one_len+0x2c0/0x2c0
[ 1000.210619][T16493]  ? try_to_unlazy+0x34c/0x5a0
[ 1000.215410][T16493]  ? preempt_count_add+0x8d/0x190
[ 1000.220452][T16493]  ? down_read+0x1a8/0x2d0
[ 1000.224890][T16493]  lookup_slow+0x53/0x70
[ 1000.229160][T16493]  link_path_walk+0x928/0xe50
[ 1000.233878][T16493]  ? handle_lookup_down+0x130/0x130
[ 1000.239096][T16493]  ? percpu_counter_add_batch+0x13b/0x160
[ 1000.244851][T16493]  path_openat+0x276/0x2e70
[ 1000.249387][T16493]  ? perf_trace_lock+0xf3/0x370
[ 1000.254251][T16493]  ? __x64_sys_openat+0x135/0x160
[ 1000.259297][T16493]  ? do_syscall_64+0x4c/0xa0
[ 1000.263913][T16493]  ? do_filp_open+0x3c0/0x3c0
[ 1000.268604][T16493]  ? perf_trace_lock+0xf3/0x370
[ 1000.273494][T16493]  ? trace_event_raw_event_lock+0x230/0x230
[ 1000.279424][T16493]  do_filp_open+0x1c1/0x3c0
[ 1000.283944][T16493]  ? vfs_tmpfile+0x480/0x480
[ 1000.288562][T16493]  ? noop_direct_IO+0x10/0x10
[ 1000.293288][T16493]  ? _raw_spin_unlock+0x24/0x40
[ 1000.298176][T16493]  ? alloc_fd+0x58f/0x630
[ 1000.302539][T16493]  do_sys_openat2+0x142/0x490
[ 1000.307232][T16493]  ? ct_nmi_exit+0x145/0x1c0
[ 1000.311844][T16493]  ? do_sys_open+0xe0/0xe0
[ 1000.316286][T16493]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1000.322389][T16493]  ? lock_chain_count+0x20/0x20
[ 1000.327271][T16493]  __x64_sys_openat+0x135/0x160
[ 1000.332151][T16493]  do_syscall_64+0x4c/0xa0
[ 1000.336592][T16493]  ? clear_bhb_loop+0x60/0xb0
[ 1000.341630][T16493]  ? clear_bhb_loop+0x60/0xb0
[ 1000.346347][T16493]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.352253][T16493] RIP: 0033:0x7f897d98df10
[ 1000.356682][T16493] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1000.376400][T16493] RSP: 002b:00007f897e8f7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1000.384858][T16493] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f897d98df10
[ 1000.392885][T16493] RDX: 0000000000000002 RSI: 00007f897e8f7fa0 RDI: 00000000ffffff9c
[ 1000.400878][T16493] RBP: 00007f897e8f7fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1000.408870][T16493] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1000.416852][T16493] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1000.424853][T16493]  </TASK>
[ 1000.767969][T16503] netlink: 'syz.5.3519': attribute type 3 has an invalid length.
[ 1000.775799][T16503] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3519'.
[ 1000.911508][T16506] FAULT_INJECTION: forcing a failure.
[ 1000.911508][T16506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1000.988674][T16506] CPU: 0 PID: 16506 Comm: syz.4.3520 Not tainted syzkaller #0
[ 1000.996224][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1001.006412][T16506] Call Trace:
[ 1001.009731][T16506]  <TASK>
[ 1001.012691][T16506]  dump_stack_lvl+0x168/0x22e
[ 1001.017414][T16506]  ? show_regs_print_info+0x12/0x12
[ 1001.022654][T16506]  ? load_image+0x3b0/0x3b0
[ 1001.027202][T16506]  ? __lock_acquire+0x7c50/0x7c50
[ 1001.032298][T16506]  should_fail_ex+0x399/0x4d0
[ 1001.037026][T16506]  _copy_from_user+0x2c/0x170
[ 1001.041754][T16506]  __sys_bpf+0x265/0x6d0
[ 1001.046039][T16506]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1001.051479][T16506]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1001.057686][T16506]  __x64_sys_bpf+0x78/0x90
[ 1001.062141][T16506]  do_syscall_64+0x4c/0xa0
[ 1001.066767][T16506]  ? clear_bhb_loop+0x60/0xb0
[ 1001.071465][T16506]  ? clear_bhb_loop+0x60/0xb0
[ 1001.076161][T16506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1001.082067][T16506] RIP: 0033:0x7f211658f6c9
[ 1001.086504][T16506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.106128][T16506] RSP: 002b:00007f21174a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1001.114555][T16506] RAX: ffffffffffffffda RBX: 00007f21167e5fa0 RCX: 00007f211658f6c9
[ 1001.122538][T16506] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004
[ 1001.130527][T16506] RBP: 00007f21174a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1001.138509][T16506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1001.146493][T16506] R13: 00007f21167e6038 R14: 00007f21167e5fa0 R15: 00007ffd2d4fa118
[ 1001.154492][T16506]  </TASK>
[ 1001.863952][T16531] netlink: 'syz.5.3525': attribute type 10 has an invalid length.
[ 1005.365177][T16559] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.3531'.
[ 1005.438537][T16558] netlink: 'syz.2.3533': attribute type 3 has an invalid length.
[ 1005.539609][T16558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3533'.
[ 1005.587228][T16564] netlink: 'syz.3.3535': attribute type 19 has an invalid length.
[ 1007.848181][T16604] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3546'.
[ 1008.414653][T16613] netlink: 'syz.5.3548': attribute type 10 has an invalid length.
[ 1010.903985][T16616] netlink: 'syz.2.3549': attribute type 10 has an invalid length.
[ 1011.369429][T16642] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3554'.
[ 1011.810128][T16651] FAULT_INJECTION: forcing a failure.
[ 1011.810128][T16651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1011.837832][T16651] CPU: 0 PID: 16651 Comm: syz.3.3559 Not tainted syzkaller #0
[ 1011.839063][T16648] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3558'.
[ 1011.845351][T16651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1011.845371][T16651] Call Trace:
[ 1011.845380][T16651]  <TASK>
[ 1011.845390][T16651]  dump_stack_lvl+0x168/0x22e
[ 1011.845425][T16651]  ? show_regs_print_info+0x12/0x12
[ 1011.845452][T16651]  ? load_image+0x3b0/0x3b0
[ 1011.885495][T16651]  ? __lock_acquire+0x7c50/0x7c50
[ 1011.890558][T16651]  should_fail_ex+0x399/0x4d0
[ 1011.895267][T16651]  _copy_from_user+0x2c/0x170
[ 1011.899962][T16651]  bpf_prog_test_run_xdp+0xbbe/0xe50
[ 1011.905292][T16651]  ? dev_put+0x80/0x80
[ 1011.909390][T16651]  ? dev_put+0x80/0x80
[ 1011.913482][T16651]  bpf_prog_test_run+0x31e/0x390
[ 1011.918460][T16651]  __sys_bpf+0x593/0x6d0
[ 1011.922734][T16651]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1011.928248][T16651]  ? lock_chain_count+0x20/0x20
[ 1011.933147][T16651]  __x64_sys_bpf+0x78/0x90
[ 1011.937591][T16651]  do_syscall_64+0x4c/0xa0
[ 1011.942026][T16651]  ? clear_bhb_loop+0x60/0xb0
[ 1011.946742][T16651]  ? clear_bhb_loop+0x60/0xb0
[ 1011.951457][T16651]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.957372][T16651] RIP: 0033:0x7f6afab8f6c9
[ 1011.964678][T16651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1011.984750][T16651] RSP: 002b:00007f6afba75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1011.993212][T16651] RAX: ffffffffffffffda RBX: 00007f6afade5fa0 RCX: 00007f6afab8f6c9
[ 1012.001313][T16651] RDX: 0000000000000024 RSI: 0000200000000140 RDI: 000000000000000a
[ 1012.009382][T16651] RBP: 00007f6afba75090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.017377][T16651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1012.025403][T16651] R13: 00007f6afade6038 R14: 00007f6afade5fa0 R15: 00007ffd87fbb218
[ 1012.033429][T16651]  </TASK>
[ 1012.738308][T16677] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3566'.
[ 1015.586114][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[ 1015.589031][T16704] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3573'.
[ 1015.860326][T16718] netlink: 'syz.2.3577': attribute type 10 has an invalid length.
[ 1017.581896][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3586'.
[ 1017.696158][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3586'.
[ 1017.841529][T16751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3586'.
[ 1018.137712][T16753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3586'.
[ 1020.236595][T16761] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3589'.
[ 1020.638117][T16778] netlink: 'syz.3.3593': attribute type 10 has an invalid length.
[ 1021.015645][T16793] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.3598'.
[ 1021.493667][T16806] FAULT_INJECTION: forcing a failure.
[ 1021.493667][T16806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1021.726197][T16806] CPU: 0 PID: 16806 Comm: syz.4.3604 Not tainted syzkaller #0
[ 1021.733958][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1021.744057][T16806] Call Trace:
[ 1021.747370][T16806]  <TASK>
[ 1021.750332][T16806]  dump_stack_lvl+0x168/0x22e
[ 1021.755053][T16806]  ? show_regs_print_info+0x12/0x12
[ 1021.760291][T16806]  ? load_image+0x3b0/0x3b0
[ 1021.764848][T16806]  ? __lock_acquire+0x7c50/0x7c50
[ 1021.769931][T16806]  should_fail_ex+0x399/0x4d0
[ 1021.774679][T16806]  _copy_from_user+0x2c/0x170
[ 1021.779579][T16806]  __sys_bpf+0x265/0x6d0
[ 1021.783991][T16806]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1021.789442][T16806]  ? __sys_bpf+0x1/0x6d0
[ 1021.793793][T16806]  __x64_sys_bpf+0x78/0x90
[ 1021.798288][T16806]  do_syscall_64+0x4c/0xa0
[ 1021.802856][T16806]  ? clear_bhb_loop+0x60/0xb0
[ 1021.807712][T16806]  ? clear_bhb_loop+0x60/0xb0
[ 1021.812440][T16806]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1021.818395][T16806] RIP: 0033:0x7f211658f6c9
[ 1021.822864][T16806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1021.842527][T16806] RSP: 002b:00007f21174a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1021.850996][T16806] RAX: ffffffffffffffda RBX: 00007f21167e5fa0 RCX: 00007f211658f6c9
[ 1021.859026][T16806] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012
[ 1021.867059][T16806] RBP: 00007f21174a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1021.875066][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1021.883169][T16806] R13: 00007f21167e6038 R14: 00007f21167e5fa0 R15: 00007ffd2d4fa118
[ 1021.891569][T16806]  </TASK>
[ 1024.992646][T16832] netlink: 'syz.5.3609': attribute type 10 has an invalid length.
[ 1025.065366][T16834] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3610'.
[ 1025.699440][   T29] tipc: Subscription rejected, illegal request
[ 1026.027738][T16850] netlink: 'syz.5.3615': attribute type 11 has an invalid length.
[ 1026.056675][T16850] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3615'.
[ 1026.149354][T16850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1026.514326][T16865] netlink: 'syz.4.3620': attribute type 10 has an invalid length.
[ 1028.251442][T16865] bond0: (slave bond_slave_0): Releasing backup interface
[ 1029.549508][T16872] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.3624'.
[ 1029.580848][T16873] netlink: 'syz.5.3623': attribute type 3 has an invalid length.
[ 1029.609767][T16873] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3623'.
[ 1029.701263][T16878] netlink: 'syz.3.3625': attribute type 10 has an invalid length.
[ 1029.783928][T16883] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3628'.
[ 1029.794124][T16883] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.3628'.
[ 1029.834642][T16883] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3628'.
[ 1029.849833][T16883] tc_dump_action: action bad kind
[ 1029.947600][T16883] device syzkaller0 entered promiscuous mode
[ 1030.017503][T16890] IPv6: Can't replace route, no match found
[ 1030.060397][T16885] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1030.963282][T16914] netlink: 'syz.3.3636': attribute type 21 has an invalid length.
[ 1031.002585][T16914] FAULT_INJECTION: forcing a failure.
[ 1031.002585][T16914] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.060428][T16914] CPU: 0 PID: 16914 Comm: syz.3.3636 Not tainted syzkaller #0
[ 1031.067976][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1031.078116][T16914] Call Trace:
[ 1031.081448][T16914]  <TASK>
[ 1031.084677][T16914]  dump_stack_lvl+0x168/0x22e
[ 1031.089512][T16914]  ? show_regs_print_info+0x12/0x12
[ 1031.094871][T16914]  ? load_image+0x3b0/0x3b0
[ 1031.099437][T16914]  ? perf_trace_lock_acquire+0xf7/0x3c0
[ 1031.105039][T16914]  ? verify_lock_unused+0x140/0x140
[ 1031.110295][T16914]  ? perf_trace_lock_acquire+0xf7/0x3c0
[ 1031.115893][T16914]  should_fail_ex+0x399/0x4d0
[ 1031.120604][T16914]  should_failslab+0x5/0x20
[ 1031.125140][T16914]  slab_pre_alloc_hook+0x59/0x310
[ 1031.130185][T16914]  kmem_cache_alloc+0x56/0x2f0
[ 1031.134961][T16914]  ? skb_clone+0x1e7/0x370
[ 1031.139408][T16914]  skb_clone+0x1e7/0x370
[ 1031.143670][T16914]  __netlink_deliver_tap+0x3ed/0x800
[ 1031.148983][T16914]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1031.154295][T16914]  netlink_deliver_tap+0x19c/0x1b0
[ 1031.159426][T16914]  netlink_sendskb+0x64/0x130
[ 1031.164391][T16914]  rtnl_unicast+0x4a/0x60
[ 1031.169259][T16914]  ? inet_rtm_getroute+0xccc/0x2710
[ 1031.174478][T16914]  inet_rtm_getroute+0x1b0a/0x2710
[ 1031.179616][T16914]  ? inet_rtm_getroute+0xccc/0x2710
[ 1031.184857][T16914]  ? ip_rt_multicast_event+0x80/0x80
[ 1031.190252][T16914]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1031.195933][T16914]  ? ct_nmi_exit+0x145/0x1c0
[ 1031.200575][T16914]  ? __lock_acquire+0x7c50/0x7c50
[ 1031.205647][T16914]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[ 1031.210807][T16914]  ? ip_rt_multicast_event+0x80/0x80
[ 1031.216114][T16914]  rtnetlink_rcv_msg+0x7f1/0xed0
[ 1031.221082][T16914]  ? rtnetlink_bind+0x80/0x80
[ 1031.225775][T16914]  ? __local_bh_enable_ip+0x12a/0x1b0
[ 1031.231172][T16914]  ? lockdep_hardirqs_on+0x94/0x140
[ 1031.236410][T16914]  ? __local_bh_enable_ip+0x12a/0x1b0
[ 1031.241802][T16914]  ? _local_bh_enable+0xa0/0xa0
[ 1031.246683][T16914]  ? __dev_queue_xmit+0x26f/0x3760
[ 1031.251807][T16914]  ? __dev_queue_xmit+0x26f/0x3760
[ 1031.256931][T16914]  ? __dev_queue_xmit+0x15c9/0x3760
[ 1031.262236][T16914]  ? __dev_queue_xmit+0x26f/0x3760
[ 1031.267387][T16914]  ? netdev_core_pick_tx+0x340/0x340
[ 1031.272685][T16914]  ? ref_tracker_free+0x630/0x7c0
[ 1031.277753][T16914]  ? refcount_inc+0x70/0x70
[ 1031.282291][T16914]  ? __copy_skb_header+0x417/0x5a0
[ 1031.287465][T16914]  ? __skb_clone+0x480/0x790
[ 1031.292081][T16914]  netlink_rcv_skb+0x1de/0x420
[ 1031.296911][T16914]  ? rtnetlink_bind+0x80/0x80
[ 1031.301635][T16914]  ? netlink_ack+0x1100/0x1100
[ 1031.306447][T16914]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1031.311681][T16914]  netlink_unicast+0x74d/0x8d0
[ 1031.316489][T16914]  netlink_sendmsg+0x89e/0xbc0
[ 1031.321324][T16914]  ? netlink_getsockopt+0x540/0x540
[ 1031.326547][T16914]  ? aa_sock_msg_perm+0x94/0x150
[ 1031.331518][T16914]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1031.336819][T16914]  ? security_socket_sendmsg+0x7c/0xa0
[ 1031.342297][T16914]  ? netlink_getsockopt+0x540/0x540
[ 1031.347511][T16914]  ____sys_sendmsg+0x59b/0x970
[ 1031.352302][T16914]  ? __sys_sendmsg_sock+0x30/0x30
[ 1031.357344][T16914]  ? __import_iovec+0x315/0x500
[ 1031.362223][T16914]  ? import_iovec+0x6f/0xa0
[ 1031.366755][T16914]  ___sys_sendmsg+0x21c/0x290
[ 1031.371457][T16914]  ? __sys_sendmsg+0x270/0x270
[ 1031.376258][T16914]  ? __lock_acquire+0x7c50/0x7c50
[ 1031.381370][T16914]  ? __fdget+0x17c/0x200
[ 1031.385638][T16914]  __se_sys_sendmsg+0x19e/0x270
[ 1031.390697][T16914]  ? __x64_sys_sendmsg+0x80/0x80
[ 1031.395675][T16914]  ? lockdep_hardirqs_on+0x94/0x140
[ 1031.400917][T16914]  do_syscall_64+0x4c/0xa0
[ 1031.405361][T16914]  ? clear_bhb_loop+0x60/0xb0
[ 1031.410091][T16914]  ? clear_bhb_loop+0x60/0xb0
[ 1031.414881][T16914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1031.420791][T16914] RIP: 0033:0x7f6afab8f6c9
[ 1031.425230][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1031.444963][T16914] RSP: 002b:00007f6afba75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1031.453485][T16914] RAX: ffffffffffffffda RBX: 00007f6afade5fa0 RCX: 00007f6afab8f6c9
[ 1031.461498][T16914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1031.469482][T16914] RBP: 00007f6afba75090 R08: 0000000000000000 R09: 0000000000000000
[ 1031.477466][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1031.485455][T16914] R13: 00007f6afade6038 R14: 00007f6afade5fa0 R15: 00007ffd87fbb218
[ 1031.493460][T16914]  </TASK>
[ 1035.911917][T16901] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3633'.
[ 1035.922758][T16915] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3638'.
[ 1035.933609][T16922] netlink: 'syz.3.3641': attribute type 10 has an invalid length.
[ 1036.175799][T16936] IPv6: Can't replace route, no match found
[ 1036.199400][T16936] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1036.999546][T16961] netlink: 'syz.1.3655': attribute type 21 has an invalid length.
[ 1037.320539][T16964] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3656'.
[ 1037.842224][T16972] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3658'.
[ 1038.134636][T16981] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3660'.
[ 1038.177795][T16983] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1038.212699][T16979] IPv6: Can't replace route, no match found
[ 1038.234843][T16981] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3660'.
[ 1038.534227][ T4268] Bluetooth: hci3: ISO packet for unknown connection handle 29
[ 1038.845266][T17004] FAULT_INJECTION: forcing a failure.
[ 1038.845266][T17004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1038.886316][T17005] netlink: 'syz.3.3669': attribute type 10 has an invalid length.
[ 1038.889387][T17004] CPU: 1 PID: 17004 Comm: syz.2.3670 Not tainted syzkaller #0
[ 1038.901765][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1038.911866][T17004] Call Trace:
[ 1038.915280][T17004]  <TASK>
[ 1038.918249][T17004]  dump_stack_lvl+0x168/0x22e
[ 1038.922995][T17004]  ? show_regs_print_info+0x12/0x12
[ 1038.928813][T17004]  ? load_image+0x3b0/0x3b0
[ 1038.933377][T17004]  ? __might_fault+0xa6/0x120
[ 1038.938108][T17004]  should_fail_ex+0x399/0x4d0
[ 1038.942941][T17004]  copyin+0x1b/0x120
[ 1038.946893][T17004]  _copy_from_iter+0x45a/0x10c0
[ 1038.951888][T17004]  ? copyout_mc+0x110/0x110
[ 1038.956793][T17004]  ? __virt_addr_valid+0x188/0x540
[ 1038.961964][T17004]  ? __virt_addr_valid+0x188/0x540
[ 1038.967139][T17004]  ? __virt_addr_valid+0x465/0x540
[ 1038.972397][T17004]  ? __check_object_size+0x500/0xa40
[ 1038.977804][T17004]  netlink_sendmsg+0x746/0xbc0
[ 1038.982641][T17004]  ? netlink_getsockopt+0x540/0x540
[ 1038.987898][T17004]  ? aa_sock_msg_perm+0x94/0x150
[ 1038.992928][T17004]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1038.998315][T17004]  ? security_socket_sendmsg+0x7c/0xa0
[ 1039.003924][T17004]  ? netlink_getsockopt+0x540/0x540
[ 1039.009182][T17004]  ____sys_sendmsg+0x59b/0x970
[ 1039.014005][T17004]  ? __sys_sendmsg_sock+0x30/0x30
[ 1039.019137][T17004]  ? __import_iovec+0x315/0x500
[ 1039.024026][T17004]  ? import_iovec+0x6f/0xa0
[ 1039.028555][T17004]  ___sys_sendmsg+0x21c/0x290
[ 1039.033279][T17004]  ? __sys_sendmsg+0x270/0x270
[ 1039.038083][T17004]  ? __lock_acquire+0x7c50/0x7c50
[ 1039.043145][T17004]  ? __fdget+0x17c/0x200
[ 1039.047411][T17004]  __se_sys_sendmsg+0x19e/0x270
[ 1039.052288][T17004]  ? __x64_sys_sendmsg+0x80/0x80
[ 1039.057256][T17004]  ? lockdep_hardirqs_on+0x94/0x140
[ 1039.062483][T17004]  do_syscall_64+0x4c/0xa0
[ 1039.066916][T17004]  ? clear_bhb_loop+0x60/0xb0
[ 1039.071612][T17004]  ? clear_bhb_loop+0x60/0xb0
[ 1039.076315][T17004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1039.082226][T17004] RIP: 0033:0x7f897d98f6c9
[ 1039.086655][T17004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1039.106364][T17004] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1039.114792][T17004] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[ 1039.122800][T17004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1039.130794][T17004] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1039.138789][T17004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1039.146868][T17004] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1039.154871][T17004]  </TASK>
[ 1039.807678][T17005] device veth0_vlan left promiscuous mode
[ 1039.888803][T17005] device veth0_vlan entered promiscuous mode
[ 1039.958295][T17005] team0: Device veth0_vlan failed to register rx_handler
[ 1040.054755][T17009] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3669'.
[ 1040.071168][T17018] netlink: 'syz.2.3673': attribute type 10 has an invalid length.
[ 1040.329781][T17025] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3674'.
[ 1040.634338][T17023] netlink: 'syz.4.3676': attribute type 10 has an invalid length.
[ 1040.642553][T17023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3676'.
[ 1040.652577][T17023] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[ 1041.196432][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[ 1042.398476][T17055] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3684'.
[ 1042.414508][T17062] netlink: 'syz.1.3686': attribute type 2 has an invalid length.
[ 1042.423358][T17062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3686'.
[ 1042.450451][T17070] IPv6: Can't replace route, no match found
[ 1042.497168][T17071] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1044.616236][T17075] netlink: 'syz.2.3690': attribute type 10 has an invalid length.
[ 1044.633741][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.652197][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.668930][T17075] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1044.805532][T17082] netlink: 'syz.4.3693': attribute type 10 has an invalid length.
[ 1044.989277][T17088] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3692'.
[ 1045.043892][T17093] IPv6: Can't replace route, no match found
[ 1045.055762][T17093] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1045.203683][T17093] netlink: 'syz.2.3695': attribute type 10 has an invalid length.
[ 1045.312949][T17093] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1045.832787][T17109] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.3701'.
[ 1046.068200][T17117] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3707'.
[ 1046.128371][T17121] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.3707'.
[ 1046.642634][T17125] netlink: 'syz.1.3708': attribute type 10 has an invalid length.
[ 1046.661279][T17126] netlink: 'syz.3.3706': attribute type 10 has an invalid length.
[ 1046.690340][T17126] team0: Port device netdevsim0 added
[ 1049.510119][T17122] netlink: 'syz.3.3706': attribute type 10 has an invalid length.
[ 1049.532799][T17122] team0: Port device netdevsim0 removed
[ 1049.540903][T17122] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1050.773076][T17164] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3718'.
[ 1050.819668][T17166] netlink: 'syz.3.3720': attribute type 10 has an invalid length.
[ 1050.837917][T17168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3719'.
[ 1050.876774][T17170] netlink: 'syz.1.3719': attribute type 39 has an invalid length.
[ 1050.923619][T17170] device veth0_macvtap left promiscuous mode
[ 1051.911192][T17178] FAULT_INJECTION: forcing a failure.
[ 1051.911192][T17178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.983627][T17178] CPU: 1 PID: 17178 Comm: syz.5.3724 Not tainted syzkaller #0
[ 1051.991246][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1052.001344][T17178] Call Trace:
[ 1052.004676][T17178]  <TASK>
[ 1052.007645][T17178]  dump_stack_lvl+0x168/0x22e
[ 1052.012371][T17178]  ? show_regs_print_info+0x12/0x12
[ 1052.017630][T17178]  ? load_image+0x3b0/0x3b0
[ 1052.022198][T17178]  ? __lock_acquire+0x7c50/0x7c50
[ 1052.027625][T17178]  ? lock_chain_count+0x20/0x20
[ 1052.032537][T17178]  should_fail_ex+0x399/0x4d0
[ 1052.037447][T17178]  _copy_from_user+0x2c/0x170
[ 1052.042169][T17178]  ___sys_sendmsg+0x155/0x290
[ 1052.046888][T17178]  ? __sys_sendmsg+0x270/0x270
[ 1052.051721][T17178]  ? ktime_get_real_ts64+0x420/0x420
[ 1052.057063][T17178]  ? __fdget+0x17c/0x200
[ 1052.061353][T17178]  __se_sys_sendmsg+0x19e/0x270
[ 1052.066310][T17178]  ? perf_trace_preemptirq_template+0x287/0x330
[ 1052.072606][T17178]  ? __x64_sys_sendmsg+0x80/0x80
[ 1052.077604][T17178]  ? lockdep_hardirqs_on+0x94/0x140
[ 1052.082851][T17178]  do_syscall_64+0x4c/0xa0
[ 1052.087308][T17178]  ? clear_bhb_loop+0x60/0xb0
[ 1052.092023][T17178]  ? clear_bhb_loop+0x60/0xb0
[ 1052.096732][T17178]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1052.102663][T17178] RIP: 0033:0x7f0ff5d8f6c9
[ 1052.107106][T17178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1052.127005][T17178] RSP: 002b:00007f0ff6b85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1052.135443][T17178] RAX: ffffffffffffffda RBX: 00007f0ff5fe5fa0 RCX: 00007f0ff5d8f6c9
[ 1052.143436][T17178] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000007
[ 1052.151421][T17178] RBP: 00007f0ff6b85090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.159495][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.167488][T17178] R13: 00007f0ff5fe6038 R14: 00007f0ff5fe5fa0 R15: 00007fff3076bc28
[ 1052.175579][T17178]  </TASK>
[ 1052.649540][T17200] IPv6: Can't replace route, no match found
[ 1052.661153][T17200] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1052.681008][T17200] netlink: 'syz.5.3727': attribute type 10 has an invalid length.
[ 1052.700675][T17200] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1052.711301][T17203] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3728'.
[ 1053.065292][T17212] IPv6: Can't replace route, no match found
[ 1053.142874][T17212] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1053.220022][T17213] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3731'.
[ 1053.258691][T17212] netlink: 'syz.1.3732': attribute type 10 has an invalid length.
[ 1053.424140][T17212] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1053.435375][T17216] netlink: 'syz.3.3733': attribute type 10 has an invalid length.
[ 1054.075075][T17238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3740'.
[ 1054.122426][T17241] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3740'.
[ 1054.348803][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3743'.
[ 1054.393276][T17253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3743'.
[ 1054.469736][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.476311][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.652423][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'.
[ 1054.955757][T17266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3747'.
[ 1056.272251][T17285] FAULT_INJECTION: forcing a failure.
[ 1056.272251][T17285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1056.366568][T17285] CPU: 1 PID: 17285 Comm: syz.2.3755 Not tainted syzkaller #0
[ 1056.374138][T17285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1056.384705][T17285] Call Trace:
[ 1056.388048][T17285]  <TASK>
[ 1056.391124][T17285]  dump_stack_lvl+0x168/0x22e
[ 1056.395887][T17285]  ? show_regs_print_info+0x12/0x12
[ 1056.401180][T17285]  ? load_image+0x3b0/0x3b0
[ 1056.405781][T17285]  ? __lock_acquire+0x7c50/0x7c50
[ 1056.410882][T17285]  ? preempt_count_add+0x8d/0x190
[ 1056.415987][T17285]  should_fail_ex+0x399/0x4d0
[ 1056.420769][T17285]  _copy_to_user+0x2c/0x130
[ 1056.425352][T17285]  put_user_ifreq+0x74/0xb0
[ 1056.429939][T17285]  sock_do_ioctl+0x251/0x2f0
[ 1056.434600][T17285]  ? sock_show_fdinfo+0xb0/0xb0
[ 1056.439537][T17285]  sock_ioctl+0x4ed/0x6e0
[ 1056.443920][T17285]  ? sock_poll+0x3f0/0x3f0
[ 1056.448418][T17285]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1056.453402][T17285]  ? security_file_ioctl+0x7c/0xa0
[ 1056.458551][T17285]  ? sock_poll+0x3f0/0x3f0
[ 1056.463006][T17285]  __se_sys_ioctl+0xfa/0x170
[ 1056.467638][T17285]  do_syscall_64+0x4c/0xa0
[ 1056.472096][T17285]  ? clear_bhb_loop+0x60/0xb0
[ 1056.476805][T17285]  ? clear_bhb_loop+0x60/0xb0
[ 1056.481519][T17285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1056.487447][T17285] RIP: 0033:0x7f897d98f6c9
[ 1056.491894][T17285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.511537][T17285] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1056.519992][T17285] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[ 1056.527990][T17285] RDX: 0000200000000280 RSI: 0000000000008927 RDI: 0000000000000006
[ 1056.535998][T17285] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1056.544004][T17285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1056.552010][T17285] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1056.560051][T17285]  </TASK>
[ 1056.913278][T17297] netlink: 'syz.5.3759': attribute type 10 has an invalid length.
[ 1056.946223][T17297] __nla_validate_parse: 6 callbacks suppressed
[ 1056.946263][T17297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3759'.
[ 1056.994647][T17297] device ipvlan1 entered promiscuous mode
[ 1057.074097][T17297] bridge0: port 3(ipvlan1) entered blocking state
[ 1057.113267][T17297] bridge0: port 3(ipvlan1) entered disabled state
[ 1057.163634][T17297] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1057.251989][T17302] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3761'.
[ 1057.402167][T17313] netlink: 'syz.4.3765': attribute type 10 has an invalid length.
[ 1057.600833][T17318] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3767'.
[ 1057.929955][T17323] IPv6: Can't replace route, no match found
[ 1057.953312][T17321] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1058.057337][T17324] IPv6: Can't replace route, no match found
[ 1058.097240][T17324] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1058.542988][T17337] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3773'.
[ 1059.861437][T17358] netlink: 'syz.3.3782': attribute type 10 has an invalid length.
[ 1059.898181][T17351] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.3778'.
[ 1060.677488][T17377] FAULT_INJECTION: forcing a failure.
[ 1060.677488][T17377] name failslab, interval 1, probability 0, space 0, times 0
[ 1060.874576][T17376] IPv6: Can't replace route, no match found
[ 1060.883388][T17377] CPU: 1 PID: 17377 Comm: syz.2.3787 Not tainted syzkaller #0
[ 1060.890914][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1060.901093][T17377] Call Trace:
[ 1060.904420][T17377]  <TASK>
[ 1060.907379][T17377]  dump_stack_lvl+0x168/0x22e
[ 1060.912114][T17377]  ? show_regs_print_info+0x12/0x12
[ 1060.917536][T17377]  ? load_image+0x3b0/0x3b0
[ 1060.922810][T17377]  ? __might_sleep+0xd0/0xd0
[ 1060.927868][T17377]  ? __lock_acquire+0x7c50/0x7c50
[ 1060.933401][T17377]  should_fail_ex+0x399/0x4d0
[ 1060.938176][T17377]  should_failslab+0x5/0x20
[ 1060.943783][T17377]  slab_pre_alloc_hook+0x59/0x310
[ 1060.948990][T17377]  ? __get_vm_area_node+0x122/0x330
[ 1060.954806][T17377]  __kmem_cache_alloc_node+0x4f/0x260
[ 1060.960240][T17377]  ? __get_vm_area_node+0x122/0x330
[ 1060.965494][T17377]  kmalloc_node_trace+0x22/0xe0
[ 1060.970400][T17377]  __get_vm_area_node+0x122/0x330
[ 1060.975516][T17377]  ? __local_bh_enable_ip+0x12a/0x1b0
[ 1060.980944][T17377]  __vmalloc_node_range+0x357/0x1390
[ 1060.986281][T17377]  ? netlink_sendmsg+0x5dd/0xbc0
[ 1060.991269][T17377]  ? release_sock+0x2b/0x1b0
[ 1060.995935][T17377]  ? netlink_insert+0x101f/0x13b0
[ 1061.001118][T17377]  ? netlink_insert+0x274/0x13b0
[ 1061.006132][T17377]  ? free_vm_area+0x50/0x50
[ 1061.010714][T17377]  ? netlink_sendmsg+0x5dd/0xbc0
[ 1061.015725][T17377]  vmalloc+0x75/0x80
[ 1061.019681][T17377]  ? netlink_sendmsg+0x5dd/0xbc0
[ 1061.024748][T17377]  netlink_sendmsg+0x5dd/0xbc0
[ 1061.029591][T17377]  ? netlink_getsockopt+0x540/0x540
[ 1061.035220][T17377]  ? aa_sock_msg_perm+0x94/0x150
[ 1061.040768][T17377]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1061.046097][T17377]  ? security_socket_sendmsg+0x7c/0xa0
[ 1061.051609][T17377]  ? netlink_getsockopt+0x540/0x540
[ 1061.056874][T17377]  ____sys_sendmsg+0x59b/0x970
[ 1061.061705][T17377]  ? __sys_sendmsg_sock+0x30/0x30
[ 1061.066819][T17377]  ? __import_iovec+0x315/0x500
[ 1061.071748][T17377]  ? import_iovec+0x6f/0xa0
[ 1061.076312][T17377]  ___sys_sendmsg+0x21c/0x290
[ 1061.081038][T17377]  ? __sys_sendmsg+0x270/0x270
[ 1061.085874][T17377]  ? __lock_acquire+0x7c50/0x7c50
[ 1061.091314][T17377]  ? __fdget+0x17c/0x200
[ 1061.095608][T17377]  __se_sys_sendmsg+0x19e/0x270
[ 1061.100510][T17377]  ? __x64_sys_sendmsg+0x80/0x80
[ 1061.105596][T17377]  ? lockdep_hardirqs_on+0x94/0x140
[ 1061.110862][T17377]  do_syscall_64+0x4c/0xa0
[ 1061.115319][T17377]  ? clear_bhb_loop+0x60/0xb0
[ 1061.120130][T17377]  ? clear_bhb_loop+0x60/0xb0
[ 1061.124861][T17377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1061.130801][T17377] RIP: 0033:0x7f897d98f6c9
[ 1061.135253][T17377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1061.155517][T17377] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1061.163976][T17377] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[ 1061.171983][T17377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1061.179991][T17377] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1061.187996][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1061.196000][T17377] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1061.204034][T17377]  </TASK>
[ 1061.266390][T17380] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1061.627167][T17388] IPv6: Can't replace route, no match found
[ 1061.647183][T17388] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1062.523597][T17397] netlink: 'syz.3.3785': attribute type 11 has an invalid length.
[ 1062.573901][T17397] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3785'.
[ 1062.843455][T17368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.945893][T17377] syz.2.3787: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[ 1062.945930][T17403] netlink: 'syz.4.3795': attribute type 10 has an invalid length.
[ 1062.972251][T17401] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3794'.
[ 1062.982371][T17377] ,cpuset=syz2,mems_allowed=0-1
[ 1063.104283][T17377] CPU: 0 PID: 17377 Comm: syz.2.3787 Not tainted syzkaller #0
[ 1063.111832][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1063.122097][T17377] Call Trace:
[ 1063.125389][T17377]  <TASK>
[ 1063.128345][T17377]  dump_stack_lvl+0x168/0x22e
[ 1063.133047][T17377]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1063.139501][T17377]  ? show_regs_print_info+0x12/0x12
[ 1063.144727][T17377]  ? load_image+0x3b0/0x3b0
[ 1063.149260][T17377]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1063.155708][T17377]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[ 1063.162331][T17377]  warn_alloc+0x20c/0x300
[ 1063.166690][T17377]  ? __get_vm_area_node+0x122/0x330
[ 1063.171907][T17377]  ? zone_watermark_ok_safe+0x270/0x270
[ 1063.177476][T17377]  ? rcu_is_watching+0x11/0xa0
[ 1063.182265][T17377]  ? __get_vm_area_node+0x318/0x330
[ 1063.187492][T17377]  ? __local_bh_enable_ip+0x12a/0x1b0
[ 1063.192934][T17377]  __vmalloc_node_range+0x37c/0x1390
[ 1063.198249][T17377]  ? release_sock+0x2b/0x1b0
[ 1063.202907][T17377]  ? netlink_insert+0x101f/0x13b0
[ 1063.207964][T17377]  ? netlink_insert+0x274/0x13b0
[ 1063.213015][T17377]  ? free_vm_area+0x50/0x50
[ 1063.217551][T17377]  ? netlink_sendmsg+0x5dd/0xbc0
[ 1063.222511][T17377]  vmalloc+0x75/0x80
[ 1063.226512][T17377]  ? netlink_sendmsg+0x5dd/0xbc0
[ 1063.231489][T17377]  netlink_sendmsg+0x5dd/0xbc0
[ 1063.236287][T17377]  ? netlink_getsockopt+0x540/0x540
[ 1063.241507][T17377]  ? aa_sock_msg_perm+0x94/0x150
[ 1063.246470][T17377]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1063.251891][T17377]  ? security_socket_sendmsg+0x7c/0xa0
[ 1063.257375][T17377]  ? netlink_getsockopt+0x540/0x540
[ 1063.262679][T17377]  ____sys_sendmsg+0x59b/0x970
[ 1063.267556][T17377]  ? __sys_sendmsg_sock+0x30/0x30
[ 1063.272614][T17377]  ? __import_iovec+0x315/0x500
[ 1063.277491][T17377]  ? import_iovec+0x6f/0xa0
[ 1063.282026][T17377]  ___sys_sendmsg+0x21c/0x290
[ 1063.286730][T17377]  ? __sys_sendmsg+0x270/0x270
[ 1063.291533][T17377]  ? __lock_acquire+0x7c50/0x7c50
[ 1063.296592][T17377]  ? __fdget+0x17c/0x200
[ 1063.300856][T17377]  __se_sys_sendmsg+0x19e/0x270
[ 1063.305988][T17377]  ? __x64_sys_sendmsg+0x80/0x80
[ 1063.310955][T17377]  ? lockdep_hardirqs_on+0x94/0x140
[ 1063.316175][T17377]  do_syscall_64+0x4c/0xa0
[ 1063.320617][T17377]  ? clear_bhb_loop+0x60/0xb0
[ 1063.325311][T17377]  ? clear_bhb_loop+0x60/0xb0
[ 1063.330002][T17377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.335909][T17377] RIP: 0033:0x7f897d98f6c9
[ 1063.340347][T17377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1063.360140][T17377] RSP: 002b:00007f897e8f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.368573][T17377] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98f6c9
[ 1063.376574][T17377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1063.384755][T17377] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.392754][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.400766][T17377] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1063.409560][T17377]  </TASK>
[ 1063.582125][T17377] Mem-Info:
[ 1063.585322][T17377] active_anon:24460 inactive_anon:0 isolated_anon:0
[ 1063.585322][T17377]  active_file:20972 inactive_file:40263 isolated_file:0
[ 1063.585322][T17377]  unevictable:768 dirty:187 writeback:0
[ 1063.585322][T17377]  slab_reclaimable:21195 slab_unreclaimable:95003
[ 1063.585322][T17377]  mapped:31064 shmem:19512 pagetables:627
[ 1063.585322][T17377]  sec_pagetables:0 bounce:0
[ 1063.585322][T17377]  kernel_misc_reclaimable:0
[ 1063.585322][T17377]  free:1297004 free_pcp:13591 free_cma:0
[ 1063.671170][T17377] Node 0 active_anon:94940kB inactive_anon:0kB active_file:83888kB inactive_file:160852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124256kB dirty:748kB writeback:0kB shmem:73612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11200kB pagetables:2608kB sec_pagetables:0kB all_unreclaimable? no
[ 1063.791407][T17407] IPv6: Can't replace route, no match found
[ 1063.834451][T17407] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1063.916161][T17377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1063.977425][T17407] netlink: 'syz.5.3796': attribute type 10 has an invalid length.
[ 1064.454000][T17377] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1064.490043][T17377] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1064.496394][T17377] Node 0 DMA32 free:1316156kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:67668kB inactive_anon:0kB active_file:83888kB inactive_file:160852kB unevictable:1536kB writepending:752kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:21260kB local_pcp:18348kB free_cma:0kB
[ 1064.546272][T17377] lowmem_reserve[]: 0 0 1 1 1
[ 1064.551835][T17377] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[ 1064.717882][T17377] lowmem_reserve[]: 0 0 0 0 0
[ 1064.778112][T17377] Node 1 Normal free:3896296kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22568kB local_pcp:10660kB free_cma:0kB
[ 1064.915546][T17424] netlink: 'syz.3.3800': attribute type 16 has an invalid length.
[ 1064.928995][T17377] lowmem_reserve[]: 0 0 0 0 0
[ 1064.933851][T17377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1064.982663][T17424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3800'.
[ 1065.013414][T17424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.018125][T17377] Node 0 DMA32: 1605*4kB (UM) 2266*8kB (UME) 1898*16kB (UME) 1561*32kB (UME) 366*64kB (UME) 123*128kB (UME) 45*256kB (UM) 34*512kB (UME) 8*1024kB (UE) 3*2048kB (UME) 281*4096kB (UM) = 1338276kB
[ 1065.054140][T17377] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1065.054500][T17423] IPv6: Can't replace route, no match found
[ 1065.073488][T17377] Node 1 Normal: 272*4kB (UE) 65*8kB (UE) 32*16kB (UME) 25*32kB (UME) 18*64kB (UME) 8*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896296kB
[ 1065.073732][T17377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1065.073752][T17377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1065.115047][T17377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1065.125056][T17377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1065.141169][T17377] 68555 total pagecache pages
[ 1065.145915][T17377] 0 pages in swap cache
[ 1065.150360][T17377] Free swap  = 124996kB
[ 1065.154862][T17377] Total swap = 124996kB
[ 1065.177279][T17377] 2097051 pages RAM
[ 1065.196825][T17425] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1065.223189][T17377] 0 pages HighMem/MovableOnly
[ 1065.264862][T17377] 415114 pages reserved
[ 1065.269291][T17377] 0 pages cma reserved
[ 1065.438928][T17434] netlink: 'syz.4.3804': attribute type 10 has an invalid length.
[ 1065.470597][T17434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3804'.
[ 1065.517993][T17434] device ipvlan1 entered promiscuous mode
[ 1065.592682][T17434] bridge0: port 4(ipvlan1) entered blocking state
[ 1065.614376][T17434] bridge0: port 4(ipvlan1) entered disabled state
[ 1065.677770][T17434] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1065.731450][T17432] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3806'.
[ 1065.995412][T17442] netlink: 'syz.1.3808': attribute type 10 has an invalid length.
[ 1066.360203][T17455] netlink: 'syz.4.3810': attribute type 12 has an invalid length.
[ 1066.396284][T17455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3810'.
[ 1066.820127][T17463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3815'.
[ 1066.881939][T17463] netlink: 'syz.1.3815': attribute type 3 has an invalid length.
[ 1066.905328][T17463] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3815'.
[ 1067.350623][T17469] IPv6: Can't replace route, no match found
[ 1067.363530][T17469] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1069.204504][T17473] FAULT_INJECTION: forcing a failure.
[ 1069.204504][T17473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1069.280044][T17473] CPU: 0 PID: 17473 Comm: syz.2.3819 Not tainted syzkaller #0
[ 1069.287622][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1069.297910][T17473] Call Trace:
[ 1069.301233][T17473]  <TASK>
[ 1069.304207][T17473]  dump_stack_lvl+0x168/0x22e
[ 1069.308958][T17473]  ? show_regs_print_info+0x12/0x12
[ 1069.314215][T17473]  ? load_image+0x3b0/0x3b0
[ 1069.318796][T17473]  ? __lock_acquire+0x7c50/0x7c50
[ 1069.323884][T17473]  ? snprintf+0xd7/0x120
[ 1069.328203][T17473]  should_fail_ex+0x399/0x4d0
[ 1069.332936][T17473]  _copy_to_user+0x2c/0x130
[ 1069.337486][T17473]  simple_read_from_buffer+0xe3/0x150
[ 1069.342913][T17473]  proc_fail_nth_read+0x19a/0x210
[ 1069.347995][T17473]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1069.353778][T17473]  ? fsnotify_perm+0x248/0x550
[ 1069.358595][T17473]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1069.364290][T17473]  vfs_read+0x2c0/0x920
[ 1069.368516][T17473]  ? kernel_read+0x1e0/0x1e0
[ 1069.373163][T17473]  ? __fget_files+0x28/0x4d0
[ 1069.377798][T17473]  ? __fget_files+0x44a/0x4d0
[ 1069.382623][T17473]  ? __fdget_pos+0x2ae/0x360
[ 1069.387260][T17473]  ? ksys_read+0x71/0x240
[ 1069.391643][T17473]  ksys_read+0x143/0x240
[ 1069.395945][T17473]  ? vfs_write+0x960/0x960
[ 1069.400420][T17473]  ? lockdep_hardirqs_on+0x94/0x140
[ 1069.405691][T17473]  do_syscall_64+0x4c/0xa0
[ 1069.410156][T17473]  ? clear_bhb_loop+0x60/0xb0
[ 1069.414882][T17473]  ? clear_bhb_loop+0x60/0xb0
[ 1069.419609][T17473]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1069.425718][T17473] RIP: 0033:0x7f897d98e0dc
[ 1069.430174][T17473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1069.449865][T17473] RSP: 002b:00007f897e8f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1069.458678][T17473] RAX: ffffffffffffffda RBX: 00007f897dbe5fa0 RCX: 00007f897d98e0dc
[ 1069.466695][T17473] RDX: 000000000000000f RSI: 00007f897e8f80a0 RDI: 0000000000000005
[ 1069.474712][T17473] RBP: 00007f897e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1069.482726][T17473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1069.490827][T17473] R13: 00007f897dbe6038 R14: 00007f897dbe5fa0 R15: 00007ffe399f0e88
[ 1069.498872][T17473]  </TASK>
[ 1069.660546][T17482] netlink: 'syz.4.3823': attribute type 10 has an invalid length.
[ 1070.035902][T17486] netlink: 'syz.2.3824': attribute type 10 has an invalid length.
[ 1070.079984][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3824'.
[ 1070.175267][T17486] device ipvlan1 entered promiscuous mode
[ 1070.293512][T17486] bridge0: port 4(ipvlan1) entered blocking state
[ 1070.400831][T17486] bridge0: port 4(ipvlan1) entered disabled state
[ 1070.459130][T17486] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1070.815557][T17499] netlink: 'syz.5.3829': attribute type 12 has an invalid length.
[ 1070.827144][T17499] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3829'.
[ 1071.173275][T17511] netlink: 'syz.3.3831': attribute type 21 has an invalid length.
[ 1071.182082][T17511] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1072.037097][T17531] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3836'.
[ 1074.490994][T17538] netlink: 'syz.4.3839': attribute type 10 has an invalid length.
[ 1074.569272][T17542] netlink: 'syz.1.3841': attribute type 10 has an invalid length.
[ 1074.588116][T17542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3841'.
[ 1074.609079][T17542] device ipvlan1 entered promiscuous mode
[ 1074.713683][T17542] bridge0: port 3(ipvlan1) entered blocking state
[ 1074.733854][T17542] bridge0: port 3(ipvlan1) entered disabled state
[ 1074.824944][T17542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1075.596913][T17565] netlink: 'syz.1.3847': attribute type 12 has an invalid length.
[ 1075.618492][T17565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3847'.
[ 1075.743094][T17571] netlink: 'syz.5.3849': attribute type 10 has an invalid length.
[ 1075.985792][T17571] device veth1_macvtap left promiscuous mode
[ 1076.063786][T17574] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3850'.
[ 1076.325636][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.355594][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.375909][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.398878][T17586] netlink: 'syz.1.3855': attribute type 21 has an invalid length.
[ 1076.419744][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.436117][T17586] netlink: 'syz.1.3855': attribute type 11 has an invalid length.
[ 1076.453473][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.536681][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.586674][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.656994][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1076.833349][T17591] netlink: 'syz.2.3857': attribute type 10 has an invalid length.
[ 1077.106395][ T4268] Bluetooth: hci4: command 0x0406 tx timeout
[ 1079.975532][T17609] netlink: 'syz.3.3861': attribute type 10 has an invalid length.
[ 1080.788459][T17634] netlink: 'syz.1.3868': attribute type 1 has an invalid length.
[ 1080.921222][T17639] __nla_validate_parse: 25 callbacks suppressed
[ 1080.921246][T17639] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3869'.
[ 1080.980344][T17640] netlink: 'syz.3.3867': attribute type 12 has an invalid length.
[ 1081.005438][T17640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3867'.
[ 1081.912695][T17662] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3874'.
[ 1081.935580][T17662] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3874'.
[ 1081.966465][T17658] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3874'.
[ 1082.066350][T17670] FAULT_INJECTION: forcing a failure.
[ 1082.066350][T17670] name failslab, interval 1, probability 0, space 0, times 0
[ 1082.091418][T17670] CPU: 0 PID: 17670 Comm: syz.4.3875 Not tainted syzkaller #0
[ 1082.099070][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1082.109172][T17670] Call Trace:
[ 1082.112503][T17670]  <TASK>
[ 1082.115483][T17670]  dump_stack_lvl+0x168/0x22e
[ 1082.120228][T17670]  ? show_regs_print_info+0x12/0x12
[ 1082.125492][T17670]  ? load_image+0x3b0/0x3b0
[ 1082.130063][T17670]  ? __might_sleep+0xd0/0xd0
[ 1082.134711][T17670]  ? __lock_acquire+0x7c50/0x7c50
[ 1082.139799][T17670]  should_fail_ex+0x399/0x4d0
[ 1082.144540][T17670]  should_failslab+0x5/0x20
[ 1082.149094][T17670]  slab_pre_alloc_hook+0x59/0x310
[ 1082.154163][T17670]  ? netlink_dump+0xd5/0xcd0
[ 1082.158818][T17670]  kmem_cache_alloc_node+0x5a/0x320
[ 1082.164076][T17670]  ? __alloc_skb+0xfc/0x7e0
[ 1082.168636][T17670]  __alloc_skb+0xfc/0x7e0
[ 1082.173022][T17670]  netlink_dump+0x1d1/0xcd0
[ 1082.177576][T17670]  ? __check_object_size+0x93/0xa40
[ 1082.182828][T17670]  ? __skb_try_recv_datagram+0x3d6/0x4d0
[ 1082.188534][T17670]  ? netlink_lookup+0x200/0x200
[ 1082.193457][T17670]  ? refcount_dec_and_test+0x4f/0x70
[ 1082.198849][T17670]  netlink_recvmsg+0x668/0xd90
[ 1082.203686][T17670]  ? netlink_sendmsg+0xbc0/0xbc0
[ 1082.208671][T17670]  ? aa_sk_perm+0x7e5/0x920
[ 1082.213231][T17670]  ? aa_af_perm+0x2b0/0x2b0
[ 1082.217781][T17670]  ? perf_trace_lock+0xf3/0x370
[ 1082.222686][T17670]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1082.228012][T17670]  ? security_socket_recvmsg+0x85/0xb0
[ 1082.233533][T17670]  ? netlink_sendmsg+0xbc0/0xbc0
[ 1082.238534][T17670]  ____sys_recvmsg+0x292/0x580
[ 1082.243362][T17670]  ? __sys_recvmsg_sock+0x40/0x40
[ 1082.248463][T17670]  ? import_iovec+0x6f/0xa0
[ 1082.253027][T17670]  ___sys_recvmsg+0x1b2/0x510
[ 1082.257756][T17670]  ? __sys_recvmsg+0x270/0x270
[ 1082.262574][T17670]  ? common_file_perm+0x171/0x1c0
[ 1082.267668][T17670]  ? __fget_files+0x44a/0x4d0
[ 1082.270524][T17675] netlink: 83988 bytes leftover after parsing attributes in process `syz.1.3879'.
[ 1082.272566][T17670]  ? __fdget+0x17c/0x200
[ 1082.286175][T17670]  __x64_sys_recvmsg+0x1eb/0x2b0
[ 1082.291168][T17670]  ? ___sys_recvmsg+0x510/0x510
[ 1082.296103][T17670]  ? lockdep_hardirqs_on+0x94/0x140
[ 1082.301369][T17670]  do_syscall_64+0x4c/0xa0
[ 1082.305925][T17670]  ? clear_bhb_loop+0x60/0xb0
[ 1082.310671][T17670]  ? clear_bhb_loop+0x60/0xb0
[ 1082.315404][T17670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1082.321444][T17670] RIP: 0033:0x7f211658f6c9
[ 1082.325918][T17670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1082.345660][T17670] RSP: 002b:00007f2117485038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1082.354218][T17670] RAX: ffffffffffffffda RBX: 00007f21167e6090 RCX: 00007f211658f6c9
[ 1082.362244][T17670] RDX: 0000000000010122 RSI: 0000200000000500 RDI: 0000000000000003
[ 1082.370264][T17670] RBP: 00007f2117485090 R08: 0000000000000000 R09: 0000000000000000
[ 1082.378292][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1082.386574][T17670] R13: 00007f21167e6128 R14: 00007f21167e6090 R15: 00007ffd2d4fa118
[ 1082.394609][T17670]  </TASK>
[ 1082.766784][T17685] netlink: 'syz.4.3880': attribute type 16 has an invalid length.
[ 1082.823523][T17685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3880'.
[ 1082.884975][T17685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.634910][T17689] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3883'.
[ 1083.692922][T17696] netlink: 'syz.2.3885': attribute type 10 has an invalid length.
[ 1083.982320][T17701] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3886'.
[ 1084.493089][T17714] dvmrp1: tun_chr_ioctl cmd 35622
[ 1084.554687][T17720] dvmrp1: tun_chr_ioctl cmd 1074025672
[ 1084.676047][T17720] dvmrp1: ignored: set checksum disabled
[ 1084.681994][T17715] dvmrp1: tun_chr_ioctl cmd 35622
[ 1084.945777][T17707] netlink: 'syz.4.3887': attribute type 11 has an invalid length.
[ 1084.981888][T17707] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3887'.
[ 1085.023955][T17730] netlink: 'syz.1.3896': attribute type 10 has an invalid length.
[ 1085.107019][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1085.128859][T17730] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1085.272755][T17699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1085.361991][T17737] bond0: (slave netdevsim0): Error: Slave device does not support XDP
[ 1086.137855][T17742] netlink: 'syz.1.3900': attribute type 10 has an invalid length.
[ 1087.010025][T17756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3906'.
[ 1087.105906][T17756] netlink: 'syz.2.3906': attribute type 39 has an invalid length.
[ 1087.676627][T17756] device veth0_macvtap left promiscuous mode
[ 1088.132383][T17773] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3911'.
[ 1088.167524][T17771] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3910'.
[ 1088.214996][T17780] netlink: 'syz.2.3913': attribute type 10 has an invalid length.
[ 1088.861403][T17789] IPv6: Can't replace route, no match found
[ 1089.333825][T17796] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3919'.
[ 1089.723045][T17815] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3925'.
[ 1093.170303][T17846] netlink: 'syz.4.3938': attribute type 22 has an invalid length.
[ 1093.178845][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'.
[ 1093.593614][T17858] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3943'.
[ 1093.874370][T17871] IPv6: Can't replace route, no match found
[ 1094.194747][T17879] netlink: 'syz.3.3952': attribute type 10 has an invalid length.
[ 1094.213843][T17879] netlink: 'syz.3.3952': attribute type 19 has an invalid length.
[ 1094.242931][T17879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3952'.
[ 1095.254021][T17908] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3961'.
[ 1098.018617][T17927] IPv6: Can't replace route, no match found
[ 1098.312831][T17939] netlink: 'syz.5.3971': attribute type 2 has an invalid length.
[ 1098.320800][T17939] netlink: 193088 bytes leftover after parsing attributes in process `syz.5.3971'.
[ 1098.466005][T17939] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3971'.
[ 1098.649689][T17942] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3973'.
[ 1098.887133][T17950] netlink: 'syz.3.3975': attribute type 10 has an invalid length.
[ 1098.916322][T17950] device bridge_slave_1 left promiscuous mode
[ 1098.922736][T17950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.419774][T17959] IPv6: Can't replace route, no match found
[ 1099.553023][T17964] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1100.225677][T17142] udevd[17142]: failed to send result of seq 18159 to main daemon: Connection refused
[ 1100.686619][ T2939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.794028][ T2939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.989316][ T2939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.063435][ T2939] bond0: (slave netdevsim0): Releasing backup interface
[ 1101.073868][ T2939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.041447][ T2939] device hsr_slave_0 left promiscuous mode
[ 1102.048633][ T2939] device hsr_slave_1 left promiscuous mode
[ 1102.055013][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1102.062881][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1102.071075][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1102.081398][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1102.089440][ T2939] device bridge_slave_0 left promiscuous mode
[ 1102.096558][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.118555][ T2939] device veth1_macvtap left promiscuous mode
[ 1102.124741][ T2939] device veth0_macvtap left promiscuous mode
[ 1102.130993][ T2939] device veth1_vlan left promiscuous mode
[ 1102.225388][ T2939] team0 (unregistering): Port device geneve1 removed
[ 1102.590107][ T2939] team0 (unregistering): Port device team_slave_1 removed
[ 1102.632933][ T2939] team0 (unregistering): Port device team_slave_0 removed
[ 1102.678362][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1102.725280][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1103.169386][ T2939] bond0 (unregistering): Released all slaves
[ 1103.665395][ T2939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.721668][ T2939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.781125][ T2939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.824304][ T2939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.942025][ T2939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.005113][ T2939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.062332][ T2939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.102116][ T2939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.191354][ T2939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.272059][ T2939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.319215][ T2939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.380691][ T2939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.494147][ T2939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.561501][ T2939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.614871][ T2939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.670759][ T2939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1105.928761][ T2939] bond0: (slave wlan1): Releasing backup interface
[ 1106.141542][ T2939] bond0: (slave wlan1): Releasing backup interface
[ 1106.549884][ T2939] bond0: (slave wlan1): Releasing backup interface
[ 1106.693039][ T2939] device hsr_slave_0 left promiscuous mode
[ 1106.699919][ T2939] device hsr_slave_1 left promiscuous mode
[ 1106.711854][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.719429][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.727750][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.735178][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.743025][ T2939] device bridge_slave_1 left promiscuous mode
[ 1106.749345][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.758585][ T2939] device bridge_slave_0 left promiscuous mode
[ 1106.764850][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.779286][ T2939] device hsr_slave_0 left promiscuous mode
[ 1106.785694][ T2939] device hsr_slave_1 left promiscuous mode
[ 1106.792474][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.800324][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.808598][ T2939] bridge0: port 3(batadv0) entered disabled state
[ 1106.817525][ T2939] device bridge_slave_1 left promiscuous mode
[ 1106.823757][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.833519][ T2939] device bridge_slave_0 left promiscuous mode
[ 1106.839977][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.853383][ T2939] device hsr_slave_0 left promiscuous mode
[ 1106.860405][ T2939] device hsr_slave_1 left promiscuous mode
[ 1106.867234][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.874675][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.882722][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.890283][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.898753][ T2939] device team0 left promiscuous mode
[ 1106.904076][ T2939] device team_slave_0 left promiscuous mode
[ 1106.912794][ T2939] device team_slave_1 left promiscuous mode
[ 1106.919337][ T2939] device geneve1 left promiscuous mode
[ 1106.925008][ T2939] bridge0: port 3(team0) entered disabled state
[ 1106.933459][ T2939] device bridge_slave_1 left promiscuous mode
[ 1106.939905][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.949686][ T2939] device bridge_slave_0 left promiscuous mode
[ 1106.955871][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.969191][ T2939] device hsr_slave_0 left promiscuous mode
[ 1106.975579][ T2939] device hsr_slave_1 left promiscuous mode
[ 1106.982250][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.989867][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.002429][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1107.010358][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1107.018192][ T2939] device bridge_slave_1 left promiscuous mode
[ 1107.024415][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.033458][ T2939] device bridge_slave_0 left promiscuous mode
[ 1107.040084][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.103254][ T2939] device veth0_macvtap left promiscuous mode
[ 1107.109625][ T2939] device veth1_vlan left promiscuous mode
[ 1107.115544][ T2939] device veth0_vlan left promiscuous mode
[ 1107.122619][ T2939] device veth1_macvtap left promiscuous mode
[ 1107.128907][ T2939] device veth1_vlan left promiscuous mode
[ 1107.135676][ T2939] device veth0_vlan left promiscuous mode
[ 1107.142636][ T2939] device veth1_macvtap left promiscuous mode
[ 1107.149205][ T2939] device veth0_macvtap left promiscuous mode
[ 1107.155433][ T2939] device veth1_vlan left promiscuous mode
[ 1107.161753][ T2939] device veth0_vlan left promiscuous mode
[ 1107.169545][ T2939] device veth1_macvtap left promiscuous mode
[ 1107.175668][ T2939] device veth1_vlan left promiscuous mode
[ 1107.181569][ T2939] device veth0_vlan left promiscuous mode
[ 1107.545300][ T2939] team0 (unregistering): Port device geneve1 removed
[ 1107.897986][ T2939] team0 (unregistering): Port device team_slave_1 removed
[ 1107.943476][ T2939] team0 (unregistering): Port device team_slave_0 removed
[ 1107.989038][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1108.032803][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1108.464816][ T2939] bond0 (unregistering): Released all slaves
[ 1108.630043][ T2939] team0 (unregistering): Port device geneve1 removed
[ 1108.937448][ T2939] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1108.987545][ T2939] team0 (unregistering): Port device team_slave_1 removed
[ 1109.030910][ T2939] team0 (unregistering): Port device team_slave_0 removed
[ 1109.073987][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1109.117863][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface