last executing test programs:

47.401702422s ago: executing program 0 (id=1033):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @local, 0xf}}}, 0x80, 0x0}, 0x2004b761)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x1e, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x40086}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x3, 0x2, 0x36, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x8, 0x4, 0x9, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000540)='GPL\x00', 0x9, 0xde, &(0x7f0000000940)=""/222, 0x0, 0x49}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0xf0ff1f00000000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x4}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x8000})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x22, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$TUNSETIFF(r9, 0x8907, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))

43.779041101s ago: executing program 0 (id=1045):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0xa, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x98, &(0x7f0000000080)=""/152, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x86}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x11, 0x0, &(0x7f0000000140)="511c1a256db66639bc14241cface611263", 0x0, 0x10fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20805, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)="140000002a000b6c8cff", 0xa}, {&(0x7f0000000580)="b56b46e52d76061a1371", 0xa}], 0x2}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

42.043661894s ago: executing program 0 (id=1043):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffff}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x1, 0x5}, {0x10, 0xda, 0x401}, {0xe, 0xdd, 0xb}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xff}}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x0, 0x61, 0x5f]}}, &(0x7f0000000700)=""/194, 0x75, 0xc2, 0x1, 0x5}, 0x28)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003020000ec0b000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r6}, 0x38)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000f0000000800000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0000000000008c080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe04a1190008800d00000003600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f00a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000", 0x62}], 0x1}, 0x0)
r8 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000080)='cpu&20\t&&')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xfffffffe, '\x00', r3, r4, 0x5, 0x5, 0x4}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x8510, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x4000, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x89400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400002, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x2, 0x2}, {0x6, 0x4, 0x6}]})

40.526153101s ago: executing program 0 (id=1049):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
openat$tun(0xffffffffffffff9c, 0x0, 0x280a63, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711869000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)

39.948184576s ago: executing program 0 (id=1059):
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x4, 0x1dfb, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x2, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0, 0x88000}, 0x88010)

36.858908172s ago: executing program 0 (id=1054):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xcb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1)
syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)

32.032285091s ago: executing program 2 (id=1064):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x8}, 0x100e64, 0xc78, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240048c1)
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800d00007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004040)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33)
sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}, 0x20044044)

30.670088054s ago: executing program 2 (id=1066):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

30.131731548s ago: executing program 2 (id=1069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0xb5)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x2000})

24.947169345s ago: executing program 2 (id=1073):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f02000005090000d7ffffff0003000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28)

24.36427954s ago: executing program 2 (id=1074):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x1400, &(0x7f0000000740)=[{&(0x7f0000000080)=""/56, 0x38}], 0x1}, 0x100)

22.760487709s ago: executing program 2 (id=1075):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x0})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080))

21.819700223s ago: executing program 32 (id=1054):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xcb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1)
syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)

10.768078755s ago: executing program 1 (id=1082):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r1}, 0x94)
socket$kcm(0x28, 0x5, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0)
close(0x3)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80)

10.440123583s ago: executing program 3 (id=1083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu\t\t')
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu\t\t') (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async)

10.068405642s ago: executing program 3 (id=1084):
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x9}, 0x45)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa000000000000711014000000000089a3d4ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x84, 0x18, 0x0, 0x0)

10.050564223s ago: executing program 1 (id=1085):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x62)

9.556224825s ago: executing program 3 (id=1086):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x1, 0x0, &(0x7f0000000100)="ff", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xc}, 0x8008, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000000000004d9f047e84b491baf59543c9172a4b2900000037000048730d98b82736caad217e762094021bcfb25368daae3bf15a71117605dd488756b8f57f9b4713896c917882e0bf7adb45292b239260ed57"], 0x10}, 0x97)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x15410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x112084, 0x400000, 0x7, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000001cffffffffffffff0000001700"/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

9.072815157s ago: executing program 1 (id=1087):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0xb5)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x2000})

7.497383846s ago: executing program 33 (id=1075):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x0})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080))

7.450831637s ago: executing program 3 (id=1089):
r0 = socket$kcm(0xa, 0x2, 0x88)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x97ffffff}, 0x20008810)

7.198386093s ago: executing program 3 (id=1090):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r5)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd)

7.197667973s ago: executing program 1 (id=1091):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x5, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x60042, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{}, {0x5}]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x35, 0x1, 0x3}, {0x4d, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {}, {0x6}]})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x1, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg(r6, &(0x7f0000001a00)={&(0x7f0000000140)=@rc={0x1f, @any, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=ANY=[], 0x1198}, 0x20000044)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x8000008000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0xe, 0x5, 0x0, 0xd, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x3fe}, 0x12114, 0x8005, 0x7, 0x8, 0x6, 0x2, 0x80b1, 0x0, 0x9, 0x0, 0x40000000})
r8 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x80044943, &(0x7f0000000a00)={r8})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x9, 0x1, 0x5, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

745.982222ms ago: executing program 3 (id=1092):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x2000000000000300, &(0x7f0000001640)=ANY=[@ANYBLOB="b40500000000000061100c00000000006301ff7f00000000950009", @ANYRES32=0x0, @ANYBLOB="eb6e59b6ad0895360f2655cc0c3bbaf27b0e3b31af41a57199be24ad10698241186f07aa01500cde23c453bf6044b0ec00af524b52350de89f2fe4dbb939be66baf996165751178ba6be95a6d54a40e0c2157353cd5b31a2bb03911f9741fb88428a21ebeb3b1faf4c3129d46f7d792830e703797928a9d36759bfb5f93af0b5e8c1e5d8fa5e56c7738ebb6c7bcaced76b9385c8a44ab0c2b351ee1e57a69b820c8e9eeca78af5f059f919b73fb59da1509283fd775ec6d8dad94928872bfa871ffabbcbbe25b043782ec2b43810755718c31b96c07d4d124e2290388ba0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4)
perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4020, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180)=r0, 0x4)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r6 = socket$kcm(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r7=>0x0})
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r8 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r9, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c00032d053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x100000000)
socket$kcm(0x10, 0x7, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

427.89792ms ago: executing program 1 (id=1093):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50)

0s ago: executing program 1 (id=1094):
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x92, &(0x7f0000002700)=""/146}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='e'], 0x27)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f01000000000000000000000000000000990000000000000004c9d920c1926c72310afac149cd6b0c00000000000000000000000c00000000000000000100000f03000000000000000000de92fd95439d8e1360cd27affea9a60fd175e469fc8614637792fd723662be3ce48d75218da08682cc379178e7f65dbeb50bb60f164c4cf40f1819c905fc48a927c6162a6599e4287a430237631361ada20db458d7128b8db339af5d6057633bc3898ec07d900134813ba40171482700"/256], 0x0, 0x82, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8940, &(0x7f0000000080))
close(r4)

kernel console output (not intermixed with test programs):

3f0
[  323.139113][ T7958]  ? inet_sendmsg+0x7e/0x2a0
[  323.143755][ T7958]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  323.149100][ T7958]  ? inet_send_prepare+0x250/0x250
[  323.154269][ T7958]  ____sys_sendmsg+0x61b/0x980
[  323.159082][ T7958]  ? __asan_memset+0x22/0x40
[  323.163710][ T7958]  ? __sys_sendmsg_sock+0x30/0x30
[  323.168779][ T7958]  ? __import_iovec+0x5f2/0x850
[  323.173693][ T7958]  ? import_iovec+0x73/0xa0
[  323.178295][ T7958]  ___sys_sendmsg+0x2a6/0x360
[  323.183052][ T7958]  ? get_pid_task+0x20/0x1e0
[  323.187691][ T7958]  ? __sys_sendmsg+0x2b0/0x2b0
[  323.192518][ T7958]  ? __lock_acquire+0x7d80/0x7d80
[  323.197612][ T7958]  __se_sys_sendmsg+0x1d0/0x2c0
[  323.202531][ T7958]  ? __x64_sys_sendmsg+0x80/0x80
[  323.207526][ T7958]  ? lockdep_hardirqs_on+0x98/0x150
[  323.212774][ T7958]  do_syscall_64+0x55/0xb0
[  323.217222][ T7958]  ? clear_bhb_loop+0x40/0x90
[  323.221933][ T7958]  ? clear_bhb_loop+0x40/0x90
[  323.226648][ T7958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.232583][ T7958] RIP: 0033:0x7fc65cf9e019
[  323.237043][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.256714][ T7958] RSP: 002b:00007fc65df30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.265176][ T7958] RAX: ffffffffffffffda RBX: 00007fc65d225fa0 RCX: 00007fc65cf9e019
[  323.273199][ T7958] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003
[  323.281215][ T7958] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  323.289668][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  323.297669][ T7958] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  323.305698][ T7958]  </TASK>
[  325.435661][ T7967] FAULT_INJECTION: forcing a failure.
[  325.435661][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.449311][ T7967] CPU: 0 PID: 7967 Comm: syz.1.619 Not tainted syzkaller #0
[  325.456681][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  325.466799][ T7967] Call Trace:
[  325.470184][ T7967]  <TASK>
[  325.473280][ T7967]  dump_stack_lvl+0x18c/0x250
[  325.478035][ T7967]  ? show_regs_print_info+0x20/0x20
[  325.483286][ T7967]  ? load_image+0x420/0x420
[  325.487844][ T7967]  ? __might_fault+0xaa/0x120
[  325.492562][ T7967]  ? __lock_acquire+0x7d80/0x7d80
[  325.497618][ T7967]  ? __virt_addr_valid+0x10c/0x380
[  325.502785][ T7967]  should_fail_ex+0x394/0x4c0
[  325.507510][ T7967]  _copy_from_user+0x2f/0xe0
[  325.512128][ T7967]  generic_map_update_batch+0x58c/0x800
[  325.517719][ T7967]  ? rcu_read_unlock+0xa0/0xa0
[  325.522621][ T7967]  ? __fdget+0x180/0x210
[  325.527080][ T7967]  ? rcu_read_unlock+0xa0/0xa0
[  325.531891][ T7967]  bpf_map_do_batch+0x3f2/0x600
[  325.536797][ T7967]  ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10
[  325.543367][ T7967]  __sys_bpf+0x381/0x890
[  325.547653][ T7967]  ? bpf_link_show_fdinfo+0x390/0x390
[  325.553077][ T7967]  ? lock_chain_count+0x20/0x20
[  325.558060][ T7967]  __x64_sys_bpf+0x7c/0x90
[  325.562638][ T7967]  do_syscall_64+0x55/0xb0
[  325.567116][ T7967]  ? clear_bhb_loop+0x40/0x90
[  325.571839][ T7967]  ? clear_bhb_loop+0x40/0x90
[  325.576583][ T7967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.582509][ T7967] RIP: 0033:0x7fd34219e019
[  325.587048][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.606709][ T7967] RSP: 002b:00007fd342fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  325.615356][ T7967] RAX: ffffffffffffffda RBX: 00007fd342425fa0 RCX: 00007fd34219e019
[  325.624038][ T7967] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  325.632241][ T7967] RBP: 00007fd342fe7090 R08: 0000000000000000 R09: 0000000000000000
[  325.640478][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  325.648667][ T7967] R13: 00007fd342426038 R14: 00007fd342425fa0 R15: 00007ffc9b18c948
[  325.656692][ T7967]  </TASK>
[  327.865911][ T7954] netlink: 128 bytes leftover after parsing attributes in process `syz.0.615'.
[  327.900580][ T7954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.944380][ T7971] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  327.952304][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.620'.
[  327.970676][ T7971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.123629][ T7977] FAULT_INJECTION: forcing a failure.
[  328.123629][ T7977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.145343][ T7977] CPU: 1 PID: 7977 Comm: syz.2.621 Not tainted syzkaller #0
[  328.152828][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.162970][ T7977] Call Trace:
[  328.166350][ T7977]  <TASK>
[  328.169342][ T7977]  dump_stack_lvl+0x18c/0x250
[  328.174095][ T7977]  ? show_regs_print_info+0x20/0x20
[  328.179373][ T7977]  ? load_image+0x420/0x420
[  328.183948][ T7977]  ? __might_fault+0xaa/0x120
[  328.188778][ T7977]  ? __lock_acquire+0x7d80/0x7d80
[  328.193881][ T7977]  should_fail_ex+0x394/0x4c0
[  328.198735][ T7977]  _copy_to_user+0x2f/0xa0
[  328.203243][ T7977]  ip_tunnel_siocdevprivate+0x162/0x1f0
[  328.208986][ T7977]  ? ip_tunnel_update+0xae0/0xae0
[  328.214082][ T7977]  ? __mutex_trylock_common+0x160/0x270
[  328.219713][ T7977]  ipip6_tunnel_siocdevprivate+0x362/0x16e0
[  328.225662][ T7977]  ? rcu_is_watching+0x15/0xb0
[  328.230463][ T7977]  ? sit_tunnel_xmit+0x2390/0x2390
[  328.235616][ T7977]  ? trace_contention_end+0x39/0xe0
[  328.240851][ T7977]  ? __mutex_lock+0x30d/0xc80
[  328.245577][ T7977]  ? dev_load+0x21/0x1f0
[  328.249868][ T7977]  ? dev_ioctl+0x83c/0x1140
[  328.254412][ T7977]  ? __lock_acquire+0x7d80/0x7d80
[  328.259487][ T7977]  ? mutex_lock_nested+0x20/0x20
[  328.264487][ T7977]  ? full_name_hash+0x92/0xe0
[  328.269206][ T7977]  ? dev_ifsioc+0x957/0xc40
[  328.273862][ T7977]  dev_ioctl+0x84c/0x1140
[  328.278243][ T7977]  sock_ioctl+0x74c/0x7e0
[  328.282659][ T7977]  ? sock_poll+0x3e0/0x3e0
[  328.287234][ T7977]  ? bpf_lsm_file_ioctl+0x9/0x10
[  328.292503][ T7977]  ? security_file_ioctl+0x80/0xa0
[  328.297710][ T7977]  ? sock_poll+0x3e0/0x3e0
[  328.302532][ T7977]  __se_sys_ioctl+0xfd/0x170
[  328.307399][ T7977]  do_syscall_64+0x55/0xb0
[  328.311879][ T7977]  ? clear_bhb_loop+0x40/0x90
[  328.316623][ T7977]  ? clear_bhb_loop+0x40/0x90
[  328.321356][ T7977]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  328.327284][ T7977] RIP: 0033:0x7fc70839e019
[  328.331737][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.351388][ T7977] RSP: 002b:00007fc709275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  328.359862][ T7977] RAX: ffffffffffffffda RBX: 00007fc708625fa0 RCX: 00007fc70839e019
[  328.367983][ T7977] RDX: 0000200000000900 RSI: 00000000000089f0 RDI: 0000000000000004
[  328.375986][ T7977] RBP: 00007fc709275090 R08: 0000000000000000 R09: 0000000000000000
[  328.384083][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.392084][ T7977] R13: 00007fc708626038 R14: 00007fc708625fa0 R15: 00007ffe0c7f9368
[  328.400119][ T7977]  </TASK>
[  328.481611][ T7978] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.622'.
[  328.753170][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.162816][ T8002] syzkaller0: entered promiscuous mode
[  332.171988][ T8002] syzkaller0: entered allmulticast mode
[  332.383976][ T8011] sit0: entered allmulticast mode
[  332.406314][ T8012] sit0: entered promiscuous mode
[  332.613504][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.636075][ T8018] bridge0: entered allmulticast mode
[  332.876593][ T8028] FAULT_INJECTION: forcing a failure.
[  332.876593][ T8028] name failslab, interval 1, probability 0, space 0, times 0
[  332.922370][ T8028] CPU: 1 PID: 8028 Comm: syz.0.636 Not tainted syzkaller #0
[  332.929820][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.940042][ T8028] Call Trace:
[  332.943380][ T8028]  <TASK>
[  332.946367][ T8028]  dump_stack_lvl+0x18c/0x250
[  332.951108][ T8028]  ? show_regs_print_info+0x20/0x20
[  332.956373][ T8028]  ? load_image+0x420/0x420
[  332.960954][ T8028]  ? __might_sleep+0xe0/0xe0
[  332.965612][ T8028]  ? __lock_acquire+0x7d80/0x7d80
[  332.970716][ T8028]  should_fail_ex+0x394/0x4c0
[  332.975476][ T8028]  should_failslab+0x9/0x20
[  332.980048][ T8028]  slab_pre_alloc_hook+0x59/0x300
[  332.985159][ T8028]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  332.991206][ T8028]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  332.996999][ T8028]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  333.002801][ T8028]  __kmem_cache_alloc_node+0x53/0x250
[  333.008252][ T8028]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  333.014039][ T8028]  __kmalloc+0xa7/0x240
[  333.018301][ T8028]  tomoyo_realpath_from_path+0xe6/0x5c0
[  333.023930][ T8028]  tomoyo_path_number_perm+0x248/0x5e0
[  333.029549][ T8028]  ? tomoyo_path_number_perm+0x217/0x5e0
[  333.035232][ T8028]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  333.040732][ T8028]  ? trace_call_bpf+0xc3/0x6c0
[  333.045538][ T8028]  ? trace_call_bpf+0xc3/0x6c0
[  333.050342][ T8028]  ? trace_call_bpf+0x5e9/0x6c0
[  333.055263][ T8028]  ? __fget_files+0x28/0x460
[  333.059911][ T8028]  security_file_ioctl+0x70/0xa0
[  333.064910][ T8028]  __se_sys_ioctl+0x48/0x170
[  333.069602][ T8028]  do_syscall_64+0x55/0xb0
[  333.074062][ T8028]  ? clear_bhb_loop+0x40/0x90
[  333.078784][ T8028]  ? clear_bhb_loop+0x40/0x90
[  333.083512][ T8028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  333.089433][ T8028] RIP: 0033:0x7ff47479e019
[  333.093874][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.113532][ T8028] RSP: 002b:00007ff4756a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  333.122060][ T8028] RAX: ffffffffffffffda RBX: 00007ff474a26090 RCX: 00007ff47479e019
[  333.130059][ T8028] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b
[  333.138057][ T8028] RBP: 00007ff4756a6090 R08: 0000000000000000 R09: 0000000000000000
[  333.146109][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.154290][ T8028] R13: 00007ff474a26128 R14: 00007ff474a26090 R15: 00007ffdcb7bdbb8
[  333.162320][ T8028]  </TASK>
[  333.176348][ T8028] ERROR: Out of memory at tomoyo_realpath_from_path.
[  333.190467][ T8026] can: request_module (can-proto-0) failed.
[  336.296951][ T8035] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.639'.
[  336.309159][ T8035] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  336.321039][ T8033] can: request_module (can-proto-0) failed.
[  337.792548][ T8019] bridge_slave_0: left allmulticast mode
[  337.798723][ T8019] bridge_slave_0: left promiscuous mode
[  337.806891][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.843592][ T8019] bond0: (slave bridge0): Releasing backup interface
[  337.853261][ T8019] bridge0 (unregistering): left promiscuous mode
[  338.191280][ T8048] netlink: 'syz.0.642': attribute type 10 has an invalid length.
[  338.201694][ T8048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.642'.
[  338.234818][ T8048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.981985][ T8069] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.651'.
[  342.059980][ T8067] syzkaller0: entered promiscuous mode
[  342.084537][ T8067] syzkaller0: entered allmulticast mode
[  342.156462][ T8077] netlink: 'syz.3.652': attribute type 2 has an invalid length.
[  342.174512][ T8077] netlink: 'syz.3.652': attribute type 8 has an invalid length.
[  342.194890][ T8077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.652'.
[  342.211546][ T8077] FAULT_INJECTION: forcing a failure.
[  342.211546][ T8077] name failslab, interval 1, probability 0, space 0, times 0
[  342.274227][ T8077] CPU: 1 PID: 8077 Comm: syz.3.652 Not tainted syzkaller #0
[  342.281660][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  342.291888][ T8077] Call Trace:
[  342.295236][ T8077]  <TASK>
[  342.298336][ T8077]  dump_stack_lvl+0x18c/0x250
[  342.303104][ T8077]  ? show_regs_print_info+0x20/0x20
[  342.308477][ T8077]  ? load_image+0x420/0x420
[  342.313124][ T8077]  ? mark_lock+0x94/0x320
[  342.318057][ T8077]  ? verify_lock_unused+0x140/0x140
[  342.324240][ T8077]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  342.330694][ T8077]  should_fail_ex+0x394/0x4c0
[  342.335627][ T8077]  should_failslab+0x9/0x20
[  342.340195][ T8077]  slab_pre_alloc_hook+0x59/0x300
[  342.345296][ T8077]  ? nsim_fib_event_nb+0x187/0x1040
[  342.350614][ T8077]  __kmem_cache_alloc_node+0x53/0x250
[  342.356263][ T8077]  ? nsim_fib_event_nb+0x187/0x1040
[  342.361533][ T8077]  kmalloc_trace+0x2a/0xe0
[  342.366038][ T8077]  nsim_fib_event_nb+0x187/0x1040
[  342.371233][ T8077]  ? read_lock_is_recursive+0x20/0x20
[  342.376701][ T8077]  notifier_call_chain+0x18f/0x380
[  342.381978][ T8077]  ? atomic_notifier_call_chain+0x26/0x180
[  342.388121][ T8077]  atomic_notifier_call_chain+0xda/0x180
[  342.394089][ T8077]  call_fib_notifiers+0x31/0x60
[  342.399374][ T8077]  call_fib_entry_notifiers+0x159/0x200
[  342.405356][ T8077]  ? fib_find_node+0x2f0/0x2f0
[  342.410304][ T8077]  ? lockdep_rtnl_is_held+0x26/0x30
[  342.415586][ T8077]  ? fib_find_node+0x2ad/0x2f0
[  342.420543][ T8077]  fib_table_insert+0xca1/0x1b00
[  342.426113][ T8077]  ? l3mdev_fib_table+0x18/0x160
[  342.431716][ T8077]  ? fib_new_table+0x10a/0x2d0
[  342.436657][ T8077]  fib_magic+0x2ce/0x3b0
[  342.441707][ T8077]  ? fib_add_ifaddr+0x5d0/0x5d0
[  342.446676][ T8077]  ? addr_event+0x83/0x470
[  342.451189][ T8077]  fib_add_ifaddr+0x139/0x5d0
[  342.456056][ T8077]  fib_inetaddr_event+0x140/0x1d0
[  342.461346][ T8077]  notifier_call_chain+0x18f/0x380
[  342.466567][ T8077]  blocking_notifier_call_chain+0x6a/0x90
[  342.472818][ T8077]  __inet_insert_ifa+0x9c8/0xbd0
[  342.477849][ T8077]  ? inet_rcu_free_ifa+0xc0/0xc0
[  342.482869][ T8077]  inet_rtm_newaddr+0xb93/0x1a20
[  342.487968][ T8077]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[  342.494094][ T8077]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[  342.500393][ T8077]  rtnetlink_rcv_msg+0x843/0xf90
[  342.505517][ T8077]  ? rtnetlink_rcv_msg+0x220/0xf90
[  342.511070][ T8077]  ? rtnetlink_bind+0x80/0x80
[  342.515839][ T8077]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  342.521897][ T8077]  ? lock_chain_count+0x20/0x20
[  342.526810][ T8077]  ? __local_bh_enable_ip+0x13a/0x1c0
[  342.532361][ T8077]  ? lockdep_hardirqs_on+0x98/0x150
[  342.537621][ T8077]  ? __local_bh_enable_ip+0x13a/0x1c0
[  342.543028][ T8077]  ? _local_bh_enable+0xa0/0xa0
[  342.547916][ T8077]  ? __dev_queue_xmit+0x275/0x3630
[  342.553089][ T8077]  ? __dev_queue_xmit+0x1bc2/0x3630
[  342.558350][ T8077]  ? __dev_queue_xmit+0x275/0x3630
[  342.563591][ T8077]  ? ref_tracker_free+0x686/0x830
[  342.568793][ T8077]  netlink_rcv_skb+0x235/0x4c0
[  342.573672][ T8077]  ? rtnetlink_bind+0x80/0x80
[  342.578452][ T8077]  ? netlink_ack+0x1160/0x1160
[  342.583313][ T8077]  ? __lock_acquire+0x7d80/0x7d80
[  342.588444][ T8077]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.594161][ T8077]  netlink_unicast+0x7b1/0x930
[  342.599563][ T8077]  netlink_sendmsg+0x8d0/0xbf0
[  342.604465][ T8077]  ? netlink_getsockopt+0x590/0x590
[  342.609868][ T8077]  ? apparmor_socket_sendmsg+0x8e/0x330
[  342.615484][ T8077]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  342.621408][ T8077]  ? security_socket_sendmsg+0x80/0xa0
[  342.627017][ T8077]  ? netlink_getsockopt+0x590/0x590
[  342.632437][ T8077]  ____sys_sendmsg+0x61b/0x980
[  342.637282][ T8077]  ? __asan_memset+0x22/0x40
[  342.641970][ T8077]  ? __sys_sendmsg_sock+0x30/0x30
[  342.647242][ T8077]  ? __import_iovec+0x5f2/0x850
[  342.652516][ T8077]  ? import_iovec+0x73/0xa0
[  342.657124][ T8077]  ___sys_sendmsg+0x2a6/0x360
[  342.661905][ T8077]  ? get_pid_task+0x20/0x1e0
[  342.666678][ T8077]  ? __sys_sendmsg+0x2b0/0x2b0
[  342.671568][ T8077]  ? __lock_acquire+0x7d80/0x7d80
[  342.676713][ T8077]  __se_sys_sendmsg+0x1d0/0x2c0
[  342.681648][ T8077]  ? __x64_sys_sendmsg+0x80/0x80
[  342.686672][ T8077]  ? lockdep_hardirqs_on+0x98/0x150
[  342.691941][ T8077]  do_syscall_64+0x55/0xb0
[  342.696458][ T8077]  ? clear_bhb_loop+0x40/0x90
[  342.701211][ T8077]  ? clear_bhb_loop+0x40/0x90
[  342.705979][ T8077]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.711930][ T8077] RIP: 0033:0x7fc65cf9e019
[  342.716513][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.736207][ T8077] RSP: 002b:00007fc65df30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.745097][ T8077] RAX: ffffffffffffffda RBX: 00007fc65d225fa0 RCX: 00007fc65cf9e019
[  342.753933][ T8077] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  342.761978][ T8077] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  342.770102][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  342.778136][ T8077] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  342.786625][ T8077]  </TASK>
[  348.437653][ T8100] IPv6: Can't replace route, no match found
[  348.756096][ T8107] syzkaller0: entered promiscuous mode
[  348.762497][ T8107] syzkaller0: entered allmulticast mode
[  349.589846][ T8122] IPv6: NLM_F_CREATE should be specified when creating new route
[  349.617509][ T8122] netlink: 1 bytes leftover after parsing attributes in process `syz.1.662'.
[  350.033376][ T8136] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.664'.
[  352.699769][ T8136] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.664'.
[  352.869662][ T8150] syzkaller0: entered promiscuous mode
[  352.886179][ T8150] syzkaller0: entered allmulticast mode
[  353.649300][ T8176] netlink: 21 bytes leftover after parsing attributes in process `syz.2.675'.
[  353.659463][ T8176] ksmbd: Unknown IPC event: 0, ignore.
[  355.373263][ T8166] syzkaller0: entered promiscuous mode
[  355.379056][ T8166] syzkaller0: entered allmulticast mode
[  361.033387][ T8188] IPv6: NLM_F_CREATE should be specified when creating new route
[  361.041407][ T8188] netlink: 1 bytes leftover after parsing attributes in process `syz.3.679'.
[  361.313417][ T8206] syzkaller0: entered promiscuous mode
[  361.327934][ T8206] syzkaller0: entered allmulticast mode
[  362.249316][ T8226] netlink: 'syz.3.691': attribute type 29 has an invalid length.
[  364.972037][ T8211] IPv6: Can't replace route, no match found
[  364.984758][ T8226] netlink: 'syz.3.691': attribute type 29 has an invalid length.
[  365.129929][ T8235] FAULT_INJECTION: forcing a failure.
[  365.129929][ T8235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.164537][ T8235] CPU: 1 PID: 8235 Comm: syz.1.694 Not tainted syzkaller #0
[  365.171942][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  365.182073][ T8235] Call Trace:
[  365.185531][ T8235]  <TASK>
[  365.188581][ T8235]  dump_stack_lvl+0x18c/0x250
[  365.193488][ T8235]  ? show_regs_print_info+0x20/0x20
[  365.198805][ T8235]  ? load_image+0x420/0x420
[  365.203427][ T8235]  ? __might_fault+0xaa/0x120
[  365.208227][ T8235]  ? __lock_acquire+0x7d80/0x7d80
[  365.213354][ T8235]  ? __virt_addr_valid+0x10c/0x380
[  365.218575][ T8235]  should_fail_ex+0x394/0x4c0
[  365.223379][ T8235]  _copy_from_user+0x2f/0xe0
[  365.228035][ T8235]  csum_and_copy_from_iter+0x46e/0x1480
[  365.233674][ T8235]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  365.239361][ T8235]  ? __kasan_slab_alloc+0x6c/0x80
[  365.244490][ T8235]  ? slab_post_alloc_hook+0x86/0x4d0
[  365.249846][ T8235]  ? rcu_is_watching+0x15/0xb0
[  365.254678][ T8235]  ip_generic_getfrag+0x163/0x2f0
[  365.259822][ T8235]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  365.264755][ T8235]  ? __build_skb_around+0x245/0x3c0
[  365.270059][ T8235]  ? __alloc_skb+0x1b2/0x2c0
[  365.274696][ T8235]  ? skb_put+0x112/0x210
[  365.278998][ T8235]  __ip_append_data+0x2f3b/0x3bf0
[  365.284080][ T8235]  ? lockdep_hardirqs_on+0x98/0x150
[  365.289364][ T8235]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  365.294295][ T8235]  ? ip_setup_cork+0x840/0x840
[  365.299113][ T8235]  ? ipv4_mtu+0x313/0x430
[  365.303623][ T8235]  ? ip_setup_cork+0x527/0x840
[  365.308438][ T8235]  ? lockdep_hardirqs_on+0x98/0x150
[  365.313738][ T8235]  ip_append_data+0x10d/0x180
[  365.318669][ T8235]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  365.323775][ T8235]  udp_sendmsg+0x459/0x23d0
[  365.328471][ T8235]  ? release_sock+0x2f/0x1c0
[  365.333235][ T8235]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  365.338164][ T8235]  ? udp_cmsg_send+0x350/0x350
[  365.343056][ T8235]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  365.349111][ T8235]  ? lock_chain_count+0x20/0x20
[  365.354045][ T8235]  ? inet_sendmsg+0x10d/0x2a0
[  365.358834][ T8235]  ? __local_bh_enable_ip+0x13a/0x1c0
[  365.364296][ T8235]  ? _local_bh_enable+0xa0/0xa0
[  365.369209][ T8235]  ? do_raw_spin_unlock+0x121/0x230
[  365.374515][ T8235]  ? inet_sendmsg+0x10d/0x2a0
[  365.379267][ T8235]  ? inet_sendmsg+0x10d/0x2a0
[  365.384000][ T8235]  ? inet_send_prepare+0x250/0x250
[  365.389177][ T8235]  ____sys_sendmsg+0x61b/0x980
[  365.394015][ T8235]  ? __sys_sendmsg_sock+0x30/0x30
[  365.399112][ T8235]  ? __import_iovec+0x3fa/0x850
[  365.404045][ T8235]  ? import_iovec+0x73/0xa0
[  365.408620][ T8235]  ___sys_sendmsg+0x2a6/0x360
[  365.413375][ T8235]  ? get_pid_task+0x20/0x1e0
[  365.418036][ T8235]  ? __sys_sendmsg+0x2b0/0x2b0
[  365.422888][ T8235]  ? __lock_acquire+0x7d80/0x7d80
[  365.428002][ T8235]  __se_sys_sendmsg+0x1d0/0x2c0
[  365.432907][ T8235]  ? __x64_sys_sendmsg+0x80/0x80
[  365.437947][ T8235]  ? lockdep_hardirqs_on+0x98/0x150
[  365.443225][ T8235]  do_syscall_64+0x55/0xb0
[  365.447708][ T8235]  ? clear_bhb_loop+0x40/0x90
[  365.452596][ T8235]  ? clear_bhb_loop+0x40/0x90
[  365.457337][ T8235]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.463295][ T8235] RIP: 0033:0x7fd34219e019
[  365.467845][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.487558][ T8235] RSP: 002b:00007fd342fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.496084][ T8235] RAX: ffffffffffffffda RBX: 00007fd342425fa0 RCX: 00007fd34219e019
[  365.504165][ T8235] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000003
[  365.512160][ T8235] RBP: 00007fd342fe7090 R08: 0000000000000000 R09: 0000000000000000
[  365.520158][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  365.528157][ T8235] R13: 00007fd342426038 R14: 00007fd342425fa0 R15: 00007ffc9b18c948
[  365.536179][ T8235]  </TASK>
[  365.713838][ T8239] syzkaller0: entered promiscuous mode
[  365.720390][ T8239] syzkaller0: entered allmulticast mode
[  366.261346][ T8259] sctp: [Deprecated]: syz.0.701 (pid 8259) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.261346][ T8259] Use struct sctp_sack_info instead
[  366.618536][ T8264] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.702'.
[  366.648290][ T8264] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  366.999539][ T8267] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  367.014672][ T8267] netlink: 'syz.1.703': attribute type 3 has an invalid length.
[  367.029634][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.703'.
[  367.076573][ T8267] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  368.580127][ T8267] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  368.785177][ T8275] FAULT_INJECTION: forcing a failure.
[  368.785177][ T8275] name failslab, interval 1, probability 0, space 0, times 0
[  368.833306][ T8275] CPU: 1 PID: 8275 Comm: syz.1.705 Not tainted syzkaller #0
[  368.840722][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  368.850850][ T8275] Call Trace:
[  368.854192][ T8275]  <TASK>
[  368.857180][ T8275]  dump_stack_lvl+0x18c/0x250
[  368.861955][ T8275]  ? show_regs_print_info+0x20/0x20
[  368.867287][ T8275]  ? load_image+0x420/0x420
[  368.871875][ T8275]  ? verify_lock_unused+0x140/0x140
[  368.877159][ T8275]  should_fail_ex+0x394/0x4c0
[  368.881938][ T8275]  should_failslab+0x9/0x20
[  368.886530][ T8275]  slab_pre_alloc_hook+0x59/0x300
[  368.891651][ T8275]  kmem_cache_alloc+0x5a/0x2c0
[  368.896496][ T8275]  ? skb_clone+0x1eb/0x370
[  368.900996][ T8275]  skb_clone+0x1eb/0x370
[  368.905366][ T8275]  __netlink_deliver_tap+0x411/0x7f0
[  368.910842][ T8275]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.916286][ T8275]  netlink_deliver_tap+0x19c/0x1b0
[  368.921466][ T8275]  netlink_unicast+0x77b/0x930
[  368.926420][ T8275]  netlink_sendmsg+0x8d0/0xbf0
[  368.931278][ T8275]  ? netlink_getsockopt+0x590/0x590
[  368.936554][ T8275]  ? apparmor_socket_sendmsg+0x8e/0x330
[  368.942233][ T8275]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  368.947606][ T8275]  ? security_socket_sendmsg+0x80/0xa0
[  368.953262][ T8275]  ? netlink_getsockopt+0x590/0x590
[  368.958541][ T8275]  ____sys_sendmsg+0x61b/0x980
[  368.963386][ T8275]  ? __asan_memset+0x22/0x40
[  368.968054][ T8275]  ? __sys_sendmsg_sock+0x30/0x30
[  368.973137][ T8275]  ? __import_iovec+0x5f2/0x850
[  368.978064][ T8275]  ? import_iovec+0x73/0xa0
[  368.982679][ T8275]  ___sys_sendmsg+0x2a6/0x360
[  368.987422][ T8275]  ? get_pid_task+0x20/0x1e0
[  368.992098][ T8275]  ? __sys_sendmsg+0x2b0/0x2b0
[  368.997000][ T8275]  ? __lock_acquire+0x7d80/0x7d80
[  369.002146][ T8275]  __se_sys_sendmsg+0x1d0/0x2c0
[  369.002156][ T8278] netlink: 'syz.3.707': attribute type 9 has an invalid length.
[  369.007039][ T8275]  ? __x64_sys_sendmsg+0x80/0x80
[  369.007097][ T8275]  ? lockdep_hardirqs_on+0x98/0x150
[  369.007132][ T8275]  do_syscall_64+0x55/0xb0
[  369.007155][ T8275]  ? clear_bhb_loop+0x40/0x90
[  369.007180][ T8275]  ? clear_bhb_loop+0x40/0x90
[  369.007207][ T8275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.020245][ T8280] netlink: 'syz.0.704': attribute type 29 has an invalid length.
[  369.025156][ T8275] RIP: 0033:0x7fd34219e019
[  369.025183][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.025201][ T8275] RSP: 002b:00007fd342fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.025224][ T8275] RAX: ffffffffffffffda RBX: 00007fd342425fa0 RCX: 00007fd34219e019
[  369.025239][ T8275] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  369.025253][ T8275] RBP: 00007fd342fe7090 R08: 0000000000000000 R09: 0000000000000000
[  369.025266][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.025278][ T8275] R13: 00007fd342426038 R14: 00007fd342425fa0 R15: 00007ffc9b18c948
[  369.025311][ T8275]  </TASK>
[  369.134050][ T8278] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.707'.
[  369.193045][ T8282] netlink: 'syz.3.707': attribute type 10 has an invalid length.
[  369.208108][ T8280] netlink: 'syz.0.704': attribute type 29 has an invalid length.
[  369.519076][ T8289] netlink: 'syz.1.710': attribute type 10 has an invalid length.
[  369.529835][ T8289] netlink: 2 bytes leftover after parsing attributes in process `syz.1.710'.
[  369.542343][ T8289] hsr0: entered promiscuous mode
[  370.080063][ T8306] FAULT_INJECTION: forcing a failure.
[  370.080063][ T8306] name failslab, interval 1, probability 0, space 0, times 0
[  370.151001][ T8306] CPU: 0 PID: 8306 Comm: syz.3.714 Not tainted syzkaller #0
[  370.158450][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.168579][ T8306] Call Trace:
[  370.171987][ T8306]  <TASK>
[  370.174983][ T8306]  dump_stack_lvl+0x18c/0x250
[  370.179830][ T8306]  ? show_regs_print_info+0x20/0x20
[  370.185104][ T8306]  ? load_image+0x420/0x420
[  370.189690][ T8306]  ? __might_sleep+0xe0/0xe0
[  370.194353][ T8306]  ? __lock_acquire+0x7d80/0x7d80
[  370.199446][ T8306]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  370.205172][ T8306]  should_fail_ex+0x394/0x4c0
[  370.209976][ T8306]  should_failslab+0x9/0x20
[  370.214645][ T8306]  slab_pre_alloc_hook+0x59/0x300
[  370.219765][ T8306]  kmem_cache_alloc_node+0x5e/0x310
[  370.225047][ T8306]  ? __alloc_skb+0x103/0x2c0
[  370.229731][ T8306]  __alloc_skb+0x103/0x2c0
[  370.234220][ T8306]  __ip_append_data+0x2acf/0x3bf0
[  370.239342][ T8306]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  370.244392][ T8306]  ? ip_setup_cork+0x840/0x840
[  370.249217][ T8306]  ? __local_bh_enable_ip+0x13a/0x1c0
[  370.254661][ T8306]  ? lockdep_hardirqs_on+0x98/0x150
[  370.259930][ T8306]  ip_append_data+0x10d/0x180
[  370.264671][ T8306]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  370.269588][ T8306]  udp_sendmsg+0x5f6/0x23d0
[  370.274171][ T8306]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  370.279080][ T8306]  ? udp_cmsg_send+0x350/0x350
[  370.283922][ T8306]  ? __lock_acquire+0x7d80/0x7d80
[  370.289026][ T8306]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  370.295514][ T8306]  ? aa_sock_msg_perm+0x94/0x150
[  370.300526][ T8306]  ? sock_rps_record_flow+0x19/0x3f0
[  370.305878][ T8306]  ? inet_sendmsg+0x7e/0x2a0
[  370.310530][ T8306]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  370.315946][ T8306]  sock_write_iter+0x2dc/0x420
[  370.320814][ T8306]  ? sock_read_iter+0x3f0/0x3f0
[  370.325748][ T8306]  ? common_file_perm+0x198/0x1f0
[  370.330863][ T8306]  vfs_write+0x474/0x9a0
[  370.335234][ T8306]  ? file_end_write+0x250/0x250
[  370.340148][ T8306]  ? __fget_files+0x3fc/0x460
[  370.344938][ T8306]  ? __fdget_pos+0x1d8/0x330
[  370.349596][ T8306]  ? ksys_write+0x74/0x260
[  370.354100][ T8306]  ksys_write+0x151/0x260
[  370.358533][ T8306]  ? __ia32_sys_read+0x90/0x90
[  370.363369][ T8306]  ? lockdep_hardirqs_on+0x98/0x150
[  370.368625][ T8306]  do_syscall_64+0x55/0xb0
[  370.373080][ T8306]  ? clear_bhb_loop+0x40/0x90
[  370.377807][ T8306]  ? clear_bhb_loop+0x40/0x90
[  370.382542][ T8306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.388482][ T8306] RIP: 0033:0x7fc65cf9e019
[  370.392947][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.412597][ T8306] RSP: 002b:00007fc65df0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  370.421060][ T8306] RAX: ffffffffffffffda RBX: 00007fc65d226090 RCX: 00007fc65cf9e019
[  370.429073][ T8306] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 000000000000000a
[  370.437091][ T8306] RBP: 00007fc65df0f090 R08: 0000000000000000 R09: 0000000000000000
[  370.445201][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  370.453232][ T8306] R13: 00007fc65d226128 R14: 00007fc65d226090 R15: 00007fff0cac9418
[  370.461258][ T8306]  </TASK>
[  370.475767][ T8308] netlink: 'syz.0.713': attribute type 10 has an invalid length.
[  370.557554][ T8308] team0: Port device wlan1 added
[  370.654858][ T8310] syzkaller0: entered promiscuous mode
[  370.675980][ T8310] syzkaller0: entered allmulticast mode
[  371.213654][ T8337] netlink: 'syz.2.721': attribute type 29 has an invalid length.
[  373.032789][ T8337] netlink: 'syz.2.721': attribute type 29 has an invalid length.
[  373.044415][ T8345] netlink: 144 bytes leftover after parsing attributes in process `syz.3.723'.
[  373.414313][ T8354] netlink: 144 bytes leftover after parsing attributes in process `syz.3.726'.
[  373.595329][ T8350] netlink: 'syz.0.725': attribute type 21 has an invalid length.
[  373.615517][ T8350] netlink: 128 bytes leftover after parsing attributes in process `syz.0.725'.
[  373.636510][ T8350] netlink: 'syz.0.725': attribute type 5 has an invalid length.
[  373.656931][ T8350] netlink: 3 bytes leftover after parsing attributes in process `syz.0.725'.
[  373.835046][ T8355] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.726'.
[  374.379871][ T8364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.730'.
[  374.667076][ T8373] netlink: 'syz.0.734': attribute type 39 has an invalid length.
[  375.033421][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'.
[  375.541793][ T8376] C: renamed from team_slave_0 (while UP)
[  375.557656][ T8376] netlink: 'syz.3.735': attribute type 3 has an invalid length.
[  375.573280][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'.
[  375.584908][ T8376] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  375.610380][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'.
[  375.644513][ T8382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'.
[  376.698740][ T8412] C: renamed from team_slave_0 (while UP)
[  376.763511][ T8412] netlink: 'syz.0.746': attribute type 3 has an invalid length.
[  376.772821][ T8412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  377.211858][ T8424] FAULT_INJECTION: forcing a failure.
[  377.211858][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.225686][ T8424] CPU: 0 PID: 8424 Comm: syz.3.752 Not tainted syzkaller #0
[  377.233037][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.243251][ T8424] Call Trace:
[  377.246591][ T8424]  <TASK>
[  377.249570][ T8424]  dump_stack_lvl+0x18c/0x250
[  377.254308][ T8424]  ? show_regs_print_info+0x20/0x20
[  377.259581][ T8424]  ? load_image+0x420/0x420
[  377.264150][ T8424]  ? __might_fault+0xaa/0x120
[  377.268885][ T8424]  ? __lock_acquire+0x7d80/0x7d80
[  377.273962][ T8424]  should_fail_ex+0x394/0x4c0
[  377.278699][ T8424]  _copy_from_user+0x2f/0xe0
[  377.283368][ T8424]  ___sys_sendmsg+0x1c7/0x360
[  377.288123][ T8424]  ? get_pid_task+0x20/0x1e0
[  377.292786][ T8424]  ? __sys_sendmsg+0x2b0/0x2b0
[  377.297676][ T8424]  ? __lock_acquire+0x7d80/0x7d80
[  377.302808][ T8424]  __se_sys_sendmsg+0x1d0/0x2c0
[  377.307705][ T8424]  ? perf_trace_preemptirq_template+0x269/0x330
[  377.314144][ T8424]  ? __x64_sys_sendmsg+0x80/0x80
[  377.319691][ T8424]  ? lockdep_hardirqs_on+0x98/0x150
[  377.324969][ T8424]  do_syscall_64+0x55/0xb0
[  377.329443][ T8424]  ? clear_bhb_loop+0x40/0x90
[  377.334179][ T8424]  ? clear_bhb_loop+0x40/0x90
[  377.338947][ T8424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.344893][ T8424] RIP: 0033:0x7fc65cf9e019
[  377.349375][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.369061][ T8424] RSP: 002b:00007fc65df30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.377537][ T8424] RAX: ffffffffffffffda RBX: 00007fc65d225fa0 RCX: 00007fc65cf9e019
[  377.385558][ T8424] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005
[  377.393581][ T8424] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  377.401595][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.409609][ T8424] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  377.417648][ T8424]  </TASK>
[  377.923295][ T8438] netlink: 'syz.2.757': attribute type 10 has an invalid length.
[  377.965885][ T8438] bond0: entered promiscuous mode
[  377.998014][ T8438] bond_slave_0: entered promiscuous mode
[  378.033790][ T8438] bond_slave_1: entered promiscuous mode
[  378.061214][ T8438] bridge0: port 3(bond0) entered blocking state
[  378.077274][ T8438] bridge0: port 3(bond0) entered disabled state
[  378.089051][ T8438] bond0: entered allmulticast mode
[  378.097446][ T8438] bond_slave_0: entered allmulticast mode
[  378.103828][ T8438] bond_slave_1: entered allmulticast mode
[  378.177961][ T8438] bridge0: port 3(bond0) entered blocking state
[  378.185307][ T8438] bridge0: port 3(bond0) entered forwarding state
[  378.914111][ T8460] C: renamed from team_slave_0 (while UP)
[  379.041000][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  379.047576][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  379.389099][ T8460] netlink: 'syz.1.763': attribute type 3 has an invalid length.
[  379.408244][ T8460] __nla_validate_parse: 8 callbacks suppressed
[  379.408327][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  379.426692][ T8460] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  379.800395][ T8472] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.765'.
[  379.847348][ T8472] netlink: 'syz.3.765': attribute type 5 has an invalid length.
[  379.861453][ T8475] netlink: 'syz.0.767': attribute type 21 has an invalid length.
[  379.924425][ T8475] netlink: 'syz.0.767': attribute type 7 has an invalid length.
[  380.044590][ T8483] FAULT_INJECTION: forcing a failure.
[  380.044590][ T8483] name failslab, interval 1, probability 0, space 0, times 0
[  380.071236][ T8483] CPU: 1 PID: 8483 Comm: syz.1.770 Not tainted syzkaller #0
[  380.078641][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  380.088778][ T8483] Call Trace:
[  380.092115][ T8483]  <TASK>
[  380.095106][ T8483]  dump_stack_lvl+0x18c/0x250
[  380.099869][ T8483]  ? show_regs_print_info+0x20/0x20
[  380.105146][ T8483]  ? load_image+0x420/0x420
[  380.109729][ T8483]  ? __lock_acquire+0x7d80/0x7d80
[  380.114814][ T8483]  ? rcu_is_watching+0x15/0xb0
[  380.119690][ T8483]  ? __alloc_pages+0x276/0x460
[  380.124514][ T8483]  should_fail_ex+0x394/0x4c0
[  380.129264][ T8483]  should_failslab+0x9/0x20
[  380.133814][ T8483]  slab_pre_alloc_hook+0x59/0x300
[  380.138979][ T8483]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  380.145038][ T8483]  __kmem_cache_alloc_node+0x53/0x250
[  380.150468][ T8483]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  380.156403][ T8483]  kmalloc_trace+0x2a/0xe0
[  380.160903][ T8483]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  380.166674][ T8483]  ? sctp_stream_interleave_init+0x55/0x90
[  380.172710][ T8483]  sctp_association_new+0x15be/0x25b0
[  380.178202][ T8483]  sctp_connect_new_asoc+0x2de/0x6a0
[  380.183536][ T8483]  ? __sctp_connect+0xd80/0xd80
[  380.188422][ T8483]  ? __local_bh_enable_ip+0x13a/0x1c0
[  380.193837][ T8483]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  380.199422][ T8483]  ? security_sctp_bind_connect+0x89/0xb0
[  380.205181][ T8483]  sctp_sendmsg+0x1519/0x27b0
[  380.209916][ T8483]  ? sctp_getsockopt+0xb60/0xb60
[  380.214907][ T8483]  ? aa_af_perm+0x330/0x330
[  380.219560][ T8483]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  380.226135][ T8483]  ? sock_rps_record_flow+0x19/0x3f0
[  380.231498][ T8483]  ? inet_sendmsg+0xce/0x2a0
[  380.236144][ T8483]  ? inet_send_prepare+0x250/0x250
[  380.241330][ T8483]  ____sys_sendmsg+0x61b/0x980
[  380.246165][ T8483]  ? __asan_memset+0x22/0x40
[  380.250870][ T8483]  ? __sys_sendmsg_sock+0x30/0x30
[  380.255950][ T8483]  ? __import_iovec+0x5f2/0x850
[  380.260900][ T8483]  ? import_iovec+0x73/0xa0
[  380.265463][ T8483]  ___sys_sendmsg+0x2a6/0x360
[  380.270192][ T8483]  ? get_pid_task+0x20/0x1e0
[  380.274854][ T8483]  ? __sys_sendmsg+0x2b0/0x2b0
[  380.279687][ T8483]  ? __lock_acquire+0x7d80/0x7d80
[  380.284775][ T8483]  __se_sys_sendmsg+0x1d0/0x2c0
[  380.289660][ T8483]  ? perf_trace_preemptirq_template+0x269/0x330
[  380.295986][ T8483]  ? __x64_sys_sendmsg+0x80/0x80
[  380.301059][ T8483]  ? lockdep_hardirqs_on+0x98/0x150
[  380.306391][ T8483]  do_syscall_64+0x55/0xb0
[  380.310863][ T8483]  ? clear_bhb_loop+0x40/0x90
[  380.315576][ T8483]  ? clear_bhb_loop+0x40/0x90
[  380.320283][ T8483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.326209][ T8483] RIP: 0033:0x7fd34219e019
[  380.330648][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.350303][ T8483] RSP: 002b:00007fd342fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.358753][ T8483] RAX: ffffffffffffffda RBX: 00007fd342425fa0 RCX: 00007fd34219e019
[  380.366778][ T8483] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004
[  380.374787][ T8483] RBP: 00007fd342fe7090 R08: 0000000000000000 R09: 0000000000000000
[  380.382777][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.390777][ T8483] R13: 00007fd342426038 R14: 00007fd342425fa0 R15: 00007ffc9b18c948
[  380.398791][ T8483]  </TASK>
[  383.268664][ T8509] netlink: 'syz.1.778': attribute type 2 has an invalid length.
[  383.280728][ T8509] netlink: 'syz.1.778': attribute type 8 has an invalid length.
[  383.293620][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.778'.
[  383.487071][ T8511] netlink: 'syz.2.779': attribute type 39 has an invalid length.
[  384.686082][ T8529] netlink: 56737 bytes leftover after parsing attributes in process `syz.0.787'.
[  384.706974][ T8516] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.779'.
[  384.754909][ T8516] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.779'.
[  384.875899][ T8511] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.779'.
[  384.939392][ T8531] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.779'.
[  384.992616][ T8536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  385.686304][ T8557] netlink: 'syz.1.796': attribute type 10 has an invalid length.
[  386.021026][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'.
[  386.051254][ T8564] netlink: 152 bytes leftover after parsing attributes in process `syz.0.797'.
[  386.075910][ T8564] tc_dump_action: action bad kind
[  386.089563][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'.
[  386.119115][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'.
[  386.150100][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'.
[  386.343237][ T8569] FAULT_INJECTION: forcing a failure.
[  386.343237][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  386.407113][ T8569] CPU: 1 PID: 8569 Comm: syz.0.799 Not tainted syzkaller #0
[  386.414694][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.424990][ T8569] Call Trace:
[  386.428332][ T8569]  <TASK>
[  386.431323][ T8569]  dump_stack_lvl+0x18c/0x250
[  386.436085][ T8569]  ? show_regs_print_info+0x20/0x20
[  386.441367][ T8569]  ? load_image+0x420/0x420
[  386.445983][ T8569]  ? __might_fault+0xaa/0x120
[  386.450735][ T8569]  ? __lock_acquire+0x7d80/0x7d80
[  386.455847][ T8569]  ? __virt_addr_valid+0x10c/0x380
[  386.461045][ T8569]  should_fail_ex+0x394/0x4c0
[  386.465817][ T8569]  _copy_from_user+0x2f/0xe0
[  386.470484][ T8569]  csum_and_copy_from_iter+0x46e/0x1480
[  386.476229][ T8569]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  386.482199][ T8569]  ? __kasan_slab_alloc+0x6c/0x80
[  386.487298][ T8569]  ? slab_post_alloc_hook+0x86/0x4d0
[  386.492690][ T8569]  ? rcu_is_watching+0x15/0xb0
[  386.497568][ T8569]  ip_generic_getfrag+0x163/0x2f0
[  386.502686][ T8569]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  386.507619][ T8569]  ? __build_skb_around+0x245/0x3c0
[  386.512891][ T8569]  ? __alloc_skb+0x1b2/0x2c0
[  386.517595][ T8569]  ? skb_put+0x112/0x210
[  386.521905][ T8569]  __ip_append_data+0x2f3b/0x3bf0
[  386.527011][ T8569]  ? lockdep_hardirqs_on+0x98/0x150
[  386.532317][ T8569]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  386.537269][ T8569]  ? ip_setup_cork+0x840/0x840
[  386.542090][ T8569]  ? ipv4_mtu+0x313/0x430
[  386.546466][ T8569]  ? ip_setup_cork+0x527/0x840
[  386.551264][ T8569]  ? lockdep_hardirqs_on+0x98/0x150
[  386.556520][ T8569]  ip_append_data+0x10d/0x180
[  386.561239][ T8569]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  386.566132][ T8569]  udp_sendmsg+0x459/0x23d0
[  386.571370][ T8569]  ? release_sock+0x2f/0x1c0
[  386.576007][ T8569]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  386.580921][ T8569]  ? udp_cmsg_send+0x350/0x350
[  386.585739][ T8569]  ? lockdep_hardirqs_on+0x98/0x150
[  386.591014][ T8569]  ? inet_sendmsg+0x10d/0x2a0
[  386.595779][ T8569]  ? _local_bh_enable+0xa0/0xa0
[  386.600680][ T8569]  ? do_raw_spin_unlock+0x121/0x230
[  386.605946][ T8569]  ? inet_sendmsg+0x10d/0x2a0
[  386.610669][ T8569]  ? inet_sendmsg+0x10d/0x2a0
[  386.615428][ T8569]  ? inet_send_prepare+0x250/0x250
[  386.620592][ T8569]  ____sys_sendmsg+0x61b/0x980
[  386.625408][ T8569]  ? __sys_sendmsg_sock+0x30/0x30
[  386.630482][ T8569]  ? __import_iovec+0x3fa/0x850
[  386.635393][ T8569]  ? import_iovec+0x73/0xa0
[  386.639949][ T8569]  ___sys_sendmsg+0x2a6/0x360
[  386.644667][ T8569]  ? get_pid_task+0x20/0x1e0
[  386.649394][ T8569]  ? __sys_sendmsg+0x2b0/0x2b0
[  386.654217][ T8569]  ? __lock_acquire+0x7d80/0x7d80
[  386.659323][ T8569]  __se_sys_sendmsg+0x1d0/0x2c0
[  386.664235][ T8569]  ? __x64_sys_sendmsg+0x80/0x80
[  386.669239][ T8569]  ? lockdep_hardirqs_on+0x98/0x150
[  386.674498][ T8569]  do_syscall_64+0x55/0xb0
[  386.678961][ T8569]  ? clear_bhb_loop+0x40/0x90
[  386.683701][ T8569]  ? clear_bhb_loop+0x40/0x90
[  386.688418][ T8569]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.694389][ T8569] RIP: 0033:0x7ff47479e019
[  386.698850][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.718498][ T8569] RSP: 002b:00007ff4756c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.726981][ T8569] RAX: ffffffffffffffda RBX: 00007ff474a25fa0 RCX: 00007ff47479e019
[  386.734989][ T8569] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000006
[  386.743103][ T8569] RBP: 00007ff4756c7090 R08: 0000000000000000 R09: 0000000000000000
[  386.751105][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  386.759110][ T8569] R13: 00007ff474a26038 R14: 00007ff474a25fa0 R15: 00007ffdcb7bdbb8
[  386.767128][ T8569]  </TASK>
[  388.515027][ T8593] FAULT_INJECTION: forcing a failure.
[  388.515027][ T8593] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  388.592311][ T8593] CPU: 1 PID: 8593 Comm: syz.2.809 Not tainted syzkaller #0
[  388.599747][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  388.609882][ T8593] Call Trace:
[  388.613233][ T8593]  <TASK>
[  388.616236][ T8593]  dump_stack_lvl+0x18c/0x250
[  388.621010][ T8593]  ? show_regs_print_info+0x20/0x20
[  388.626288][ T8593]  ? load_image+0x420/0x420
[  388.630925][ T8593]  ? __lock_acquire+0x7d80/0x7d80
[  388.636077][ T8593]  should_fail_ex+0x394/0x4c0
[  388.640904][ T8593]  prepare_alloc_pages+0x1e1/0x5b0
[  388.646140][ T8593]  __alloc_pages+0x134/0x460
[  388.650865][ T8593]  ? zone_statistics+0x170/0x170
[  388.655944][ T8593]  ? alloc_pages+0x4e1/0x740
[  388.660667][ T8593]  ? do_raw_spin_unlock+0x121/0x230
[  388.665976][ T8593]  __get_free_pages+0xc/0x30
[  388.670673][ T8593]  kasan_populate_vmalloc_pte+0x35/0x100
[  388.676435][ T8593]  __apply_to_page_range+0x860/0xdd0
[  388.681875][ T8593]  ? kasan_populate_vmalloc+0x70/0x70
[  388.687348][ T8593]  ? apply_to_page_range+0x50/0x50
[  388.692567][ T8593]  ? do_raw_spin_unlock+0x121/0x230
[  388.697896][ T8593]  alloc_vmap_area+0x1d26/0x1e50
[  388.702999][ T8593]  ? vm_map_ram+0xcf0/0xcf0
[  388.707628][ T8593]  ? rcu_is_watching+0x15/0xb0
[  388.712508][ T8593]  __get_vm_area_node+0x162/0x370
[  388.717650][ T8593]  __vmalloc_node_range+0x36f/0x1320
[  388.723046][ T8593]  ? reuseport_array_alloc+0x98/0x120
[  388.728555][ T8593]  ? aa_get_newest_label+0xfd/0x5c0
[  388.733849][ T8593]  ? end_current_label_crit_section+0x170/0x170
[  388.740249][ T8593]  ? free_vm_area+0x50/0x50
[  388.744877][ T8593]  ? apparmor_capable+0x137/0x1a0
[  388.750024][ T8593]  bpf_map_area_alloc+0xf1/0x110
[  388.755067][ T8593]  ? reuseport_array_alloc+0x98/0x120
[  388.760666][ T8593]  reuseport_array_alloc+0x98/0x120
[  388.766085][ T8593]  map_create+0x877/0x12f0
[  388.770690][ T8593]  __sys_bpf+0x651/0x890
[  388.775048][ T8593]  ? bpf_link_show_fdinfo+0x390/0x390
[  388.780589][ T8593]  ? lock_chain_count+0x20/0x20
[  388.785621][ T8593]  __x64_sys_bpf+0x7c/0x90
[  388.790160][ T8593]  do_syscall_64+0x55/0xb0
[  388.794689][ T8593]  ? clear_bhb_loop+0x40/0x90
[  388.799505][ T8593]  ? clear_bhb_loop+0x40/0x90
[  388.804285][ T8593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  388.810279][ T8593] RIP: 0033:0x7fc70839e019
[  388.814877][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.834741][ T8593] RSP: 002b:00007fc709275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  388.843388][ T8593] RAX: ffffffffffffffda RBX: 00007fc708625fa0 RCX: 00007fc70839e019
[  388.851412][ T8593] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000
[  388.859436][ T8593] RBP: 00007fc709275090 R08: 0000000000000000 R09: 0000000000000000
[  388.867465][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  388.875502][ T8593] R13: 00007fc708626038 R14: 00007fc708625fa0 R15: 00007ffe0c7f9368
[  388.883574][ T8593]  </TASK>
[  389.370923][ T8607] FAULT_INJECTION: forcing a failure.
[  389.370923][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  389.423702][ T8607] CPU: 1 PID: 8607 Comm: syz.0.815 Not tainted syzkaller #0
[  389.431114][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.441324][ T8607] Call Trace:
[  389.444665][ T8607]  <TASK>
[  389.447647][ T8607]  dump_stack_lvl+0x18c/0x250
[  389.452393][ T8607]  ? show_regs_print_info+0x20/0x20
[  389.457660][ T8607]  ? load_image+0x420/0x420
[  389.462238][ T8607]  ? __might_fault+0xaa/0x120
[  389.466976][ T8607]  ? __lock_acquire+0x7d80/0x7d80
[  389.472090][ T8607]  should_fail_ex+0x394/0x4c0
[  389.476820][ T8607]  _copy_to_user+0x2f/0xa0
[  389.481276][ T8607]  finalize_log+0xe4/0x160
[  389.485748][ T8607]  ? btf_parse_struct_metas+0xde0/0xde0
[  389.491341][ T8607]  ? btf_check_type_tags+0x674/0x680
[  389.496675][ T8607]  btf_new_fd+0x757/0x9e0
[  389.501171][ T8607]  ? bpf_btf_show_fdinfo+0x80/0x80
[  389.506445][ T8607]  ? capable+0x88/0xe0
[  389.510607][ T8607]  __sys_bpf+0x670/0x890
[  389.514952][ T8607]  ? bpf_link_show_fdinfo+0x390/0x390
[  389.520379][ T8607]  ? lock_chain_count+0x20/0x20
[  389.525285][ T8607]  __x64_sys_bpf+0x7c/0x90
[  389.529744][ T8607]  do_syscall_64+0x55/0xb0
[  389.534197][ T8607]  ? clear_bhb_loop+0x40/0x90
[  389.538912][ T8607]  ? clear_bhb_loop+0x40/0x90
[  389.543627][ T8607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.549564][ T8607] RIP: 0033:0x7ff47479e019
[  389.554011][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.573647][ T8607] RSP: 002b:00007ff4756c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  389.582095][ T8607] RAX: ffffffffffffffda RBX: 00007ff474a25fa0 RCX: 00007ff47479e019
[  389.590092][ T8607] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[  389.598125][ T8607] RBP: 00007ff4756c7090 R08: 0000000000000000 R09: 0000000000000000
[  389.606125][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  389.614125][ T8607] R13: 00007ff474a26038 R14: 00007ff474a25fa0 R15: 00007ffdcb7bdbb8
[  389.622138][ T8607]  </TASK>
[  390.073021][ T8610] netlink: 'syz.2.817': attribute type 10 has an invalid length.
[  390.173491][ T8610] veth1_to_bridge: entered promiscuous mode
[  390.205502][ T8610] veth1_to_bridge: entered allmulticast mode
[  390.227367][ T8610] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  390.319319][ T8618] FAULT_INJECTION: forcing a failure.
[  390.319319][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.374618][ T8618] CPU: 1 PID: 8618 Comm: syz.3.820 Not tainted syzkaller #0
[  390.382024][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  390.392129][ T8618] Call Trace:
[  390.395444][ T8618]  <TASK>
[  390.398393][ T8618]  dump_stack_lvl+0x18c/0x250
[  390.403102][ T8618]  ? show_regs_print_info+0x20/0x20
[  390.408353][ T8618]  ? load_image+0x420/0x420
[  390.412884][ T8618]  ? __lock_acquire+0x7d80/0x7d80
[  390.417979][ T8618]  ? snprintf+0xe9/0x140
[  390.422281][ T8618]  should_fail_ex+0x394/0x4c0
[  390.427019][ T8618]  _copy_to_user+0x2f/0xa0
[  390.431488][ T8618]  simple_read_from_buffer+0xe7/0x150
[  390.436921][ T8618]  proc_fail_nth_read+0x1e8/0x260
[  390.442058][ T8618]  ? proc_fault_inject_write+0x360/0x360
[  390.447745][ T8618]  ? fsnotify_perm+0x271/0x5e0
[  390.452550][ T8618]  ? proc_fault_inject_write+0x360/0x360
[  390.458217][ T8618]  vfs_read+0x298/0x990
[  390.462453][ T8618]  ? kernel_read+0x1e0/0x1e0
[  390.467110][ T8618]  ? __fget_files+0x28/0x460
[  390.471759][ T8618]  ? __fget_files+0x3fc/0x460
[  390.476483][ T8618]  ? __fdget_pos+0x2a3/0x330
[  390.481244][ T8618]  ? ksys_read+0x74/0x260
[  390.485628][ T8618]  ksys_read+0x151/0x260
[  390.489936][ T8618]  ? vfs_write+0x9a0/0x9a0
[  390.494453][ T8618]  ? syscall_enter_from_user_mode+0x2e/0x80
[  390.500414][ T8618]  do_syscall_64+0x55/0xb0
[  390.504878][ T8618]  ? clear_bhb_loop+0x40/0x90
[  390.509600][ T8618]  ? clear_bhb_loop+0x40/0x90
[  390.514336][ T8618]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  390.520279][ T8618] RIP: 0033:0x7fc65cf5e84e
[  390.524726][ T8618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  390.544451][ T8618] RSP: 002b:00007fc65df2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  390.552926][ T8618] RAX: ffffffffffffffda RBX: 00007fc65df306c0 RCX: 00007fc65cf5e84e
[  390.561048][ T8618] RDX: 000000000000000f RSI: 00007fc65df300a0 RDI: 000000000000000c
[  390.569066][ T8618] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  390.577074][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.585081][ T8618] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  390.593112][ T8618]  </TASK>
[  390.605730][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.617807][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.629819][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.641709][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.653695][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.665585][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.677626][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.689525][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.701124][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  390.712909][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  391.618838][ T8631] netlink: 'syz.1.822': attribute type 4 has an invalid length.
[  391.720820][ T8631] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.822'.
[  395.614552][    C1] net_ratelimit: 9477 callbacks suppressed
[  395.614711][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.632387][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.644180][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.655940][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.667837][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.679677][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.691643][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.703501][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.715268][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  395.727061][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  396.293292][ T8663] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.831'.
[  396.377686][ T8669] FAULT_INJECTION: forcing a failure.
[  396.377686][ T8669] name failslab, interval 1, probability 0, space 0, times 0
[  396.457953][ T8669] CPU: 0 PID: 8669 Comm: syz.1.833 Not tainted syzkaller #0
[  396.465365][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  396.475984][ T8669] Call Trace:
[  396.479339][ T8669]  <TASK>
[  396.482319][ T8669]  dump_stack_lvl+0x18c/0x250
[  396.487077][ T8669]  ? show_regs_print_info+0x20/0x20
[  396.492334][ T8669]  ? load_image+0x420/0x420
[  396.496918][ T8669]  ? __lock_acquire+0x7d80/0x7d80
[  396.502037][ T8669]  ? trace_raw_output_contention_end+0xd0/0xd0
[  396.508259][ T8669]  should_fail_ex+0x394/0x4c0
[  396.513012][ T8669]  should_failslab+0x9/0x20
[  396.517587][ T8669]  slab_pre_alloc_hook+0x59/0x300
[  396.522700][ T8669]  ? __inet_diag_dump_start+0x8b/0x9f0
[  396.528337][ T8669]  __kmem_cache_alloc_node+0x53/0x250
[  396.533800][ T8669]  ? __inet_diag_dump_start+0x8b/0x9f0
[  396.539335][ T8669]  kmalloc_trace+0x2a/0xe0
[  396.543817][ T8669]  __inet_diag_dump_start+0x8b/0x9f0
[  396.549160][ T8669]  ? netlink_lookup+0x30/0x200
[  396.553979][ T8669]  ? netlink_lookup+0x30/0x200
[  396.558812][ T8669]  __netlink_dump_start+0x43c/0x7a0
[  396.564080][ T8669]  inet_diag_handler_cmd+0x1e0/0x2c0
[  396.569423][ T8669]  ? sock_diag_lock_handler+0x19/0x280
[  396.575063][ T8669]  ? inet_diag_unregister+0xb0/0xb0
[  396.580319][ T8669]  ? inet_diag_handler_get_info+0x790/0x790
[  396.586360][ T8669]  ? inet_diag_dump_start+0x20/0x20
[  396.591638][ T8669]  ? inet_diag_dump+0x50/0x50
[  396.596393][ T8669]  ? sock_diag_lock_handler+0x19/0x280
[  396.601938][ T8669]  ? inet_diag_unregister+0xb0/0xb0
[  396.607195][ T8669]  sock_diag_rcv_msg+0x3d3/0x5f0
[  396.612239][ T8669]  netlink_rcv_skb+0x235/0x4c0
[  396.617082][ T8669]  ? sock_diag_bind+0xb0/0xb0
[  396.621837][ T8669]  ? netlink_ack+0x1160/0x1160
[  396.626680][ T8669]  ? __lock_acquire+0x7d80/0x7d80
[  396.631782][ T8669]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.637060][ T8669]  sock_diag_rcv+0x2a/0x40
[  396.641571][ T8669]  netlink_unicast+0x7b1/0x930
[  396.646445][ T8669]  netlink_sendmsg+0x8d0/0xbf0
[  396.651291][ T8669]  ? netlink_getsockopt+0x590/0x590
[  396.656561][ T8669]  ? apparmor_socket_sendmsg+0x8e/0x330
[  396.662185][ T8669]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  396.667547][ T8669]  ? security_socket_sendmsg+0x80/0xa0
[  396.673166][ T8669]  ? netlink_getsockopt+0x590/0x590
[  396.678432][ T8669]  ____sys_sendmsg+0x61b/0x980
[  396.683268][ T8669]  ? __asan_memset+0x22/0x40
[  396.687924][ T8669]  ? __sys_sendmsg_sock+0x30/0x30
[  396.693007][ T8669]  ? __import_iovec+0x5f2/0x850
[  396.697962][ T8669]  ? import_iovec+0x73/0xa0
[  396.702545][ T8669]  ___sys_sendmsg+0x2a6/0x360
[  396.707477][ T8669]  ? get_pid_task+0x20/0x1e0
[  396.712143][ T8669]  ? __sys_sendmsg+0x2b0/0x2b0
[  396.716994][ T8669]  ? __lock_acquire+0x7d80/0x7d80
[  396.722130][ T8669]  __se_sys_sendmsg+0x1d0/0x2c0
[  396.727050][ T8669]  ? __x64_sys_sendmsg+0x80/0x80
[  396.732069][ T8669]  ? lockdep_hardirqs_on+0x98/0x150
[  396.737347][ T8669]  do_syscall_64+0x55/0xb0
[  396.741834][ T8669]  ? clear_bhb_loop+0x40/0x90
[  396.746573][ T8669]  ? clear_bhb_loop+0x40/0x90
[  396.751314][ T8669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.757270][ T8669] RIP: 0033:0x7fd34219e019
[  396.761737][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.781410][ T8669] RSP: 002b:00007fd342fc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.790061][ T8669] RAX: ffffffffffffffda RBX: 00007fd342426090 RCX: 00007fd34219e019
[  396.798129][ T8669] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000004
[  396.806166][ T8669] RBP: 00007fd342fc6090 R08: 0000000000000000 R09: 0000000000000000
[  396.814395][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.822448][ T8669] R13: 00007fd342426128 R14: 00007fd342426090 R15: 00007ffc9b18c948
[  396.830608][ T8669]  </TASK>
[  400.626287][    C1] net_ratelimit: 5028 callbacks suppressed
[  400.626403][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.681655][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.742033][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.795709][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.832882][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.914143][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  400.962785][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  401.004848][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  401.057782][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  401.118284][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  403.941628][ T8721] netlink: 140 bytes leftover after parsing attributes in process `syz.0.851'.
[  405.634531][    C1] net_ratelimit: 6450 callbacks suppressed
[  405.634551][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.652728][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.665174][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.677465][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.690005][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.702557][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.714751][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.726891][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.739014][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  405.751259][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  408.457770][ T8763] netlink: 'syz.3.862': attribute type 10 has an invalid length.
[  408.727156][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.862'.
[  410.604214][ T8780] netlink: 'syz.2.866': attribute type 10 has an invalid length.
[  410.626913][ T8780] netlink: 2 bytes leftover after parsing attributes in process `syz.2.866'.
[  410.644743][    C1] net_ratelimit: 8786 callbacks suppressed
[  410.644760][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.651206][ T8780] hsr0: entered promiscuous mode
[  410.662500][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.663508][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.690988][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.702858][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.714797][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.726646][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.738504][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.743035][ T8780] bridge0: port 4(hsr0) entered blocking state
[  410.750306][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.750823][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  410.847206][ T8780] bridge0: port 4(hsr0) entered disabled state
[  410.901524][ T8780] hsr0: entered allmulticast mode
[  410.920568][ T8780] hsr_slave_0: entered allmulticast mode
[  410.943335][ T8780] hsr_slave_1: entered allmulticast mode
[  410.993040][ T8780] bridge0: port 4(hsr0) entered blocking state
[  410.999505][ T8780] bridge0: port 4(hsr0) entered forwarding state
[  411.414641][ T8792] netlink: 140 bytes leftover after parsing attributes in process `syz.3.868'.
[  412.539463][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.605221][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.656577][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.713773][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.263796][ T8811] FAULT_INJECTION: forcing a failure.
[  413.263796][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.404030][ T8811] CPU: 1 PID: 8811 Comm: syz.3.878 Not tainted syzkaller #0
[  413.411487][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  413.421621][ T8811] Call Trace:
[  413.424957][ T8811]  <TASK>
[  413.427934][ T8811]  dump_stack_lvl+0x18c/0x250
[  413.432706][ T8811]  ? show_regs_print_info+0x20/0x20
[  413.437964][ T8811]  ? load_image+0x420/0x420
[  413.442542][ T8811]  ? __lock_acquire+0x7d80/0x7d80
[  413.447631][ T8811]  ? snprintf+0xe9/0x140
[  413.451965][ T8811]  should_fail_ex+0x394/0x4c0
[  413.456769][ T8811]  _copy_to_user+0x2f/0xa0
[  413.461266][ T8811]  simple_read_from_buffer+0xe7/0x150
[  413.466701][ T8811]  proc_fail_nth_read+0x1e8/0x260
[  413.471790][ T8811]  ? proc_fault_inject_write+0x360/0x360
[  413.477493][ T8811]  ? fsnotify_perm+0x271/0x5e0
[  413.482320][ T8811]  ? proc_fault_inject_write+0x360/0x360
[  413.488057][ T8811]  vfs_read+0x298/0x990
[  413.492304][ T8811]  ? kernel_read+0x1e0/0x1e0
[  413.496975][ T8811]  ? __fget_files+0x28/0x460
[  413.501653][ T8811]  ? __fget_files+0x3fc/0x460
[  413.506400][ T8811]  ? __fdget_pos+0x2a3/0x330
[  413.511075][ T8811]  ? ksys_read+0x74/0x260
[  413.515485][ T8811]  ksys_read+0x151/0x260
[  413.519784][ T8811]  ? vfs_write+0x9a0/0x9a0
[  413.524255][ T8811]  ? lockdep_hardirqs_on+0x98/0x150
[  413.529520][ T8811]  do_syscall_64+0x55/0xb0
[  413.533987][ T8811]  ? clear_bhb_loop+0x40/0x90
[  413.538728][ T8811]  ? clear_bhb_loop+0x40/0x90
[  413.543442][ T8811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.549390][ T8811] RIP: 0033:0x7fc65cf5e84e
[  413.553868][ T8811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  413.573511][ T8811] RSP: 002b:00007fc65df2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  413.581991][ T8811] RAX: ffffffffffffffda RBX: 00007fc65df306c0 RCX: 00007fc65cf5e84e
[  413.590025][ T8811] RDX: 000000000000000f RSI: 00007fc65df300a0 RDI: 0000000000000004
[  413.598034][ T8811] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  413.606038][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.614064][ T8811] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  413.622114][ T8811]  </TASK>
[  415.655043][    C1] net_ratelimit: 5015 callbacks suppressed
[  415.655066][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.674314][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.686944][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.699112][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.711409][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.723775][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.736129][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.748396][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.760674][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  415.773024][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  416.456494][ T8818] netlink: 'syz.0.881': attribute type 10 has an invalid length.
[  416.484963][ T8818] netlink: 2 bytes leftover after parsing attributes in process `syz.0.881'.
[  416.527413][ T8818] hsr0: entered promiscuous mode
[  416.588662][ T8818] bridge0: port 2(hsr0) entered blocking state
[  416.612781][ T8818] bridge0: port 2(hsr0) entered disabled state
[  416.654535][ T8818] hsr0: entered allmulticast mode
[  416.695225][ T8818] hsr_slave_0: entered allmulticast mode
[  416.716893][ T8818] hsr_slave_1: entered allmulticast mode
[  416.790560][ T8818] bridge0: port 2(hsr0) entered blocking state
[  416.797439][ T8818] bridge0: port 2(hsr0) entered forwarding state
[  416.981380][ T8826] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1
[  417.909202][ T8836] : port 1(team0) entered blocking state
[  417.964036][ T8836] : port 1(team0) entered disabled state
[  418.048583][ T8836] team0: entered allmulticast mode
[  418.053839][ T8836] team_slave_0: entered allmulticast mode
[  418.077374][ T8836] team_slave_1: entered allmulticast mode
[  418.102320][ T8836] team0: entered promiscuous mode
[  418.184710][ T8836] team_slave_0: entered promiscuous mode
[  418.190882][ T8836] team_slave_1: entered promiscuous mode
[  418.300798][ T8839] netlink: 71 bytes leftover after parsing attributes in process `syz.3.887'.
[  418.739767][ T8845] FAULT_INJECTION: forcing a failure.
[  418.739767][ T8845] name failslab, interval 1, probability 0, space 0, times 0
[  418.752563][ T8845] CPU: 0 PID: 8845 Comm: syz.1.888 Not tainted syzkaller #0
[  418.759914][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  418.770046][ T8845] Call Trace:
[  418.773435][ T8845]  <TASK>
[  418.776423][ T8845]  dump_stack_lvl+0x18c/0x250
[  418.781196][ T8845]  ? show_regs_print_info+0x20/0x20
[  418.786563][ T8845]  ? load_image+0x420/0x420
[  418.791167][ T8845]  should_fail_ex+0x394/0x4c0
[  418.795962][ T8845]  should_failslab+0x9/0x20
[  418.800987][ T8845]  slab_pre_alloc_hook+0x59/0x300
[  418.806267][ T8845]  kmem_cache_alloc+0x5a/0x2c0
[  418.811122][ T8845]  ? skb_clone+0x1eb/0x370
[  418.815716][ T8845]  skb_clone+0x1eb/0x370
[  418.820028][ T8845]  bpf_clone_redirect+0x16d/0x4a0
[  418.825221][ T8845]  bpf_prog_208b094576c80b22+0x5e/0x63
[  418.830751][ T8845]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  418.836861][ T8845]  ? __lock_acquire+0x7d80/0x7d80
[  418.841981][ T8845]  ? lock_chain_count+0x20/0x20
[  418.847007][ T8845]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  418.853435][ T8845]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  418.858951][ T8845]  ? ktime_get+0x7f/0x280
[  418.863427][ T8845]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  418.869827][ T8845]  ? ktime_get_real_ts64+0x440/0x440
[  418.875295][ T8845]  ? __x64_sys_bpf+0x7c/0x90
[  418.880077][ T8845]  ? __local_bh_disable_ip+0x108/0x1a0
[  418.885991][ T8845]  ? __cant_sleep+0x220/0x220
[  418.890764][ T8845]  ? read_tsc+0x9/0x20
[  418.894903][ T8845]  ? ktime_get+0x24b/0x280
[  418.899497][ T8845]  ? bpf_test_run+0x174/0x870
[  418.904245][ T8845]  bpf_test_run+0x2df/0x870
[  418.908845][ T8845]  ? bpf_test_run+0x174/0x870
[  418.913595][ T8845]  ? dst_hold+0x70/0x70
[  418.917817][ T8845]  ? eth_get_headlen+0x210/0x210
[  418.922925][ T8845]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  418.928396][ T8845]  ? cpu_online+0x60/0x60
[  418.932788][ T8845]  bpf_prog_test_run+0x31f/0x390
[  418.937804][ T8845]  __sys_bpf+0x49d/0x890
[  418.942206][ T8845]  ? bpf_link_show_fdinfo+0x390/0x390
[  418.947662][ T8845]  ? lock_chain_count+0x20/0x20
[  418.952585][ T8845]  __x64_sys_bpf+0x7c/0x90
[  418.957069][ T8845]  do_syscall_64+0x55/0xb0
[  418.961547][ T8845]  ? clear_bhb_loop+0x40/0x90
[  418.966339][ T8845]  ? clear_bhb_loop+0x40/0x90
[  418.971081][ T8845]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  418.977182][ T8845] RIP: 0033:0x7fd34219e019
[  418.981743][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.001518][ T8845] RSP: 002b:00007fd342fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  419.010011][ T8845] RAX: ffffffffffffffda RBX: 00007fd342425fa0 RCX: 00007fd34219e019
[  419.018093][ T8845] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  419.026124][ T8845] RBP: 00007fd342fe7090 R08: 0000000000000000 R09: 0000000000000000
[  419.034159][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.042277][ T8845] R13: 00007fd342426038 R14: 00007fd342425fa0 R15: 00007ffc9b18c948
[  419.050333][ T8845]  </TASK>
[  419.332029][ T8850] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  420.428500][ T8860] netlink: 'syz.1.893': attribute type 10 has an invalid length.
[  420.575365][ T8860] netlink: 2 bytes leftover after parsing attributes in process `syz.1.893'.
[  420.664958][    C1] net_ratelimit: 4424 callbacks suppressed
[  420.664980][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.683067][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.695327][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.707743][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.719902][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.732043][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.744187][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.756312][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.768580][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  420.780915][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.585026][ T8893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.905'.
[  425.674877][    C1] net_ratelimit: 4854 callbacks suppressed
[  425.674894][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.693098][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.705342][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.717455][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.729678][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.741853][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.754080][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.766243][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.778517][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  425.790750][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  428.722501][ T8927] netlink: 'syz.3.913': attribute type 5 has an invalid length.
[  429.392776][ T8939] netlink: 'syz.1.916': attribute type 39 has an invalid length.
[  430.684408][    C1] net_ratelimit: 4795 callbacks suppressed
[  430.684431][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.702682][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.715148][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.727601][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.739935][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.752257][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.763072][ T8942] netlink: 128 bytes leftover after parsing attributes in process `syz.2.918'.
[  430.774658][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.777282][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.798165][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  430.810784][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  431.760617][ T8958] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[  431.847909][ T8958] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.922'.
[  431.984560][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.108359][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.275012][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.283236][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.548086][ T8967] netlink: 'syz.1.923': attribute type 10 has an invalid length.
[  433.593560][ T8967] bond0: left promiscuous mode
[  433.624632][ T8967] bond_slave_1: left promiscuous mode
[  433.709891][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.740536][ T8967] team0: Port device bond0 added
[  433.976093][ T8973] netlink: 'syz.0.925': attribute type 5 has an invalid length.
[  433.983889][ T8973] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  434.098306][ T8973] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.925'.
[  434.367898][ T8982] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.927'.
[  435.694598][    C1] net_ratelimit: 3550 callbacks suppressed
[  435.694619][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.712665][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.724894][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.737136][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.749371][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.761569][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.773783][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.785934][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.798132][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  435.810261][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  436.809532][ T8979] veth1_to_bond: entered allmulticast mode
[  437.386704][ T8990] netlink: 14 bytes leftover after parsing attributes in process `syz.2.928'.
[  438.303945][ T9003] syzkaller0: entered promiscuous mode
[  438.325806][ T9003] syzkaller0: entered allmulticast mode
[  439.061457][ T9020] netlink: 144 bytes leftover after parsing attributes in process `syz.3.938'.
[  440.535150][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.541597][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  440.704469][    C1] net_ratelimit: 5811 callbacks suppressed
[  440.704494][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.722683][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.734996][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.747386][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.759878][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.772207][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.784645][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.797031][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.809385][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  440.821861][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.715102][    C1] net_ratelimit: 5847 callbacks suppressed
[  445.715126][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.733348][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.745595][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.757794][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.769883][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.782114][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.794186][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.806157][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.818243][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  445.830314][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  446.378133][ T9046] netlink: 'syz.2.944': attribute type 2 has an invalid length.
[  446.410052][ T9046] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.944'.
[  446.472935][ T9046] FAULT_INJECTION: forcing a failure.
[  446.472935][ T9046] name failslab, interval 1, probability 0, space 0, times 0
[  446.548433][ T9046] CPU: 0 PID: 9046 Comm: syz.2.944 Not tainted syzkaller #0
[  446.555929][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.566047][ T9046] Call Trace:
[  446.569371][ T9046]  <TASK>
[  446.572357][ T9046]  dump_stack_lvl+0x18c/0x250
[  446.577149][ T9046]  ? show_regs_print_info+0x20/0x20
[  446.582412][ T9046]  ? load_image+0x420/0x420
[  446.587002][ T9046]  ? __might_sleep+0xe0/0xe0
[  446.591662][ T9046]  ? __lock_acquire+0x7d80/0x7d80
[  446.596861][ T9046]  should_fail_ex+0x394/0x4c0
[  446.601649][ T9046]  should_failslab+0x9/0x20
[  446.606225][ T9046]  slab_pre_alloc_hook+0x59/0x300
[  446.611374][ T9046]  ? genl_start+0x1c9/0x6c0
[  446.616030][ T9046]  __kmem_cache_alloc_node+0x53/0x250
[  446.621491][ T9046]  ? genl_start+0x1c9/0x6c0
[  446.626071][ T9046]  kmalloc_trace+0x2a/0xe0
[  446.630563][ T9046]  genl_start+0x1c9/0x6c0
[  446.634997][ T9046]  __netlink_dump_start+0x43c/0x7a0
[  446.640273][ T9046]  genl_family_rcv_msg_dumpit+0x214/0x310
[  446.646067][ T9046]  ? genl_rcv_msg+0x7a0/0x7a0
[  446.650821][ T9046]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  446.657164][ T9046]  ? lockdep_hardirqs_on+0x98/0x150
[  446.662445][ T9046]  ? genl_family_rcv_msg_doit+0x310/0x310
[  446.668234][ T9046]  ? genl_start+0x6c0/0x6c0
[  446.672798][ T9046]  ? genl_dumpit+0x1a0/0x1a0
[  446.677473][ T9046]  ? genl_rcv_msg+0x39f/0x7a0
[  446.682226][ T9046]  genl_rcv_msg+0x5de/0x7a0
[  446.686814][ T9046]  ? genl_bind+0x360/0x360
[  446.691294][ T9046]  ? devlink_nl_health_reporter_fill+0xbf0/0xbf0
[  446.697856][ T9046]  netlink_rcv_skb+0x235/0x4c0
[  446.702692][ T9046]  ? genl_bind+0x360/0x360
[  446.707179][ T9046]  ? netlink_ack+0x1160/0x1160
[  446.712029][ T9046]  ? __lock_acquire+0x7d80/0x7d80
[  446.717139][ T9046]  ? down_read+0x1ac/0x2e0
[  446.721734][ T9046]  genl_rcv+0x28/0x40
[  446.725786][ T9046]  netlink_unicast+0x7b1/0x930
[  446.730632][ T9046]  netlink_sendmsg+0x8d0/0xbf0
[  446.735470][ T9046]  ? netlink_getsockopt+0x590/0x590
[  446.740788][ T9046]  ? apparmor_socket_sendmsg+0x8e/0x330
[  446.746413][ T9046]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  446.751786][ T9046]  ? security_socket_sendmsg+0x80/0xa0
[  446.757339][ T9046]  ? netlink_getsockopt+0x590/0x590
[  446.762608][ T9046]  ____sys_sendmsg+0x61b/0x980
[  446.767613][ T9046]  ? __asan_memset+0x22/0x40
[  446.772272][ T9046]  ? __sys_sendmsg_sock+0x30/0x30
[  446.777373][ T9046]  ? __import_iovec+0x5f2/0x850
[  446.782312][ T9046]  ? import_iovec+0x73/0xa0
[  446.786986][ T9046]  ___sys_sendmsg+0x2a6/0x360
[  446.791739][ T9046]  ? __sys_sendmsg+0x2b0/0x2b0
[  446.796587][ T9046]  ? ktime_get+0x7f/0x280
[  446.801309][ T9046]  __se_sys_sendmsg+0x1d0/0x2c0
[  446.806228][ T9046]  ? perf_trace_preemptirq_template+0x269/0x330
[  446.812777][ T9046]  ? __x64_sys_sendmsg+0x80/0x80
[  446.817812][ T9046]  ? lockdep_hardirqs_on+0x98/0x150
[  446.823104][ T9046]  do_syscall_64+0x55/0xb0
[  446.827693][ T9046]  ? clear_bhb_loop+0x40/0x90
[  446.832445][ T9046]  ? clear_bhb_loop+0x40/0x90
[  446.837194][ T9046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.843174][ T9046] RIP: 0033:0x7fc70839e019
[  446.847661][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.867337][ T9046] RSP: 002b:00007fc709275028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.875839][ T9046] RAX: ffffffffffffffda RBX: 00007fc708625fa0 RCX: 00007fc70839e019
[  446.883869][ T9046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  446.891906][ T9046] RBP: 00007fc709275090 R08: 0000000000000000 R09: 0000000000000000
[  446.899977][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.908035][ T9046] R13: 00007fc708626038 R14: 00007fc708625fa0 R15: 00007ffe0c7f9368
[  446.916190][ T9046]  </TASK>
[  449.220962][ T9077] netlink: 'syz.1.953': attribute type 10 has an invalid length.
[  449.439627][ T9081] delete_channel: no stack
[  450.724937][    C1] net_ratelimit: 5226 callbacks suppressed
[  450.724970][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.743240][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.755495][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.767753][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.780075][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.792415][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.805092][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.817532][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.829816][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  450.842250][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  451.419461][ T9114] FAULT_INJECTION: forcing a failure.
[  451.419461][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.458418][ T9114] CPU: 1 PID: 9114 Comm: syz.3.965 Not tainted syzkaller #0
[  451.466251][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  451.476374][ T9114] Call Trace:
[  451.479715][ T9114]  <TASK>
[  451.482697][ T9114]  dump_stack_lvl+0x18c/0x250
[  451.487444][ T9114]  ? show_regs_print_info+0x20/0x20
[  451.492702][ T9114]  ? load_image+0x420/0x420
[  451.497283][ T9114]  ? __lock_acquire+0x7d80/0x7d80
[  451.502374][ T9114]  ? __virt_addr_valid+0x10c/0x380
[  451.507566][ T9114]  should_fail_ex+0x394/0x4c0
[  451.512326][ T9114]  _copy_from_user+0x2f/0xe0
[  451.516987][ T9114]  map_update_elem+0x501/0x710
[  451.521813][ T9114]  __sys_bpf+0x6b5/0x890
[  451.526092][ T9114]  ? bpf_link_show_fdinfo+0x390/0x390
[  451.531504][ T9114]  ? lock_chain_count+0x20/0x20
[  451.536403][ T9114]  __x64_sys_bpf+0x7c/0x90
[  451.540847][ T9114]  do_syscall_64+0x55/0xb0
[  451.545297][ T9114]  ? clear_bhb_loop+0x40/0x90
[  451.549999][ T9114]  ? clear_bhb_loop+0x40/0x90
[  451.554702][ T9114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.560625][ T9114] RIP: 0033:0x7fc65cf9e019
[  451.565074][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.584747][ T9114] RSP: 002b:00007fc65df30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  451.593193][ T9114] RAX: ffffffffffffffda RBX: 00007fc65d225fa0 RCX: 00007fc65cf9e019
[  451.601210][ T9114] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002
[  451.609232][ T9114] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  451.617259][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.625374][ T9114] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  451.633429][ T9114]  </TASK>
[  452.274983][ T9130] FAULT_INJECTION: forcing a failure.
[  452.274983][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.288562][ T9130] CPU: 0 PID: 9130 Comm: syz.3.970 Not tainted syzkaller #0
[  452.295934][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.306060][ T9130] Call Trace:
[  452.309395][ T9130]  <TASK>
[  452.312380][ T9130]  dump_stack_lvl+0x18c/0x250
[  452.317127][ T9130]  ? show_regs_print_info+0x20/0x20
[  452.322387][ T9130]  ? load_image+0x420/0x420
[  452.326964][ T9130]  ? __might_fault+0xaa/0x120
[  452.331715][ T9130]  ? __lock_acquire+0x7d80/0x7d80
[  452.336847][ T9130]  should_fail_ex+0x394/0x4c0
[  452.341621][ T9130]  _copy_from_user+0x2f/0xe0
[  452.346371][ T9130]  ___sys_sendmsg+0x1c7/0x360
[  452.351126][ T9130]  ? get_pid_task+0x20/0x1e0
[  452.355788][ T9130]  ? __sys_sendmsg+0x2b0/0x2b0
[  452.360646][ T9130]  ? __lock_acquire+0x7d80/0x7d80
[  452.365763][ T9130]  __se_sys_sendmsg+0x1d0/0x2c0
[  452.370699][ T9130]  ? __x64_sys_sendmsg+0x80/0x80
[  452.375741][ T9130]  ? lockdep_hardirqs_on+0x98/0x150
[  452.381016][ T9130]  do_syscall_64+0x55/0xb0
[  452.385581][ T9130]  ? clear_bhb_loop+0x40/0x90
[  452.390318][ T9130]  ? clear_bhb_loop+0x40/0x90
[  452.395050][ T9130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.401001][ T9130] RIP: 0033:0x7fc65cf9e019
[  452.405468][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.425137][ T9130] RSP: 002b:00007fc65df0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.433617][ T9130] RAX: ffffffffffffffda RBX: 00007fc65d226090 RCX: 00007fc65cf9e019
[  452.441655][ T9130] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000005
[  452.449681][ T9130] RBP: 00007fc65df0f090 R08: 0000000000000000 R09: 0000000000000000
[  452.457730][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.465797][ T9130] R13: 00007fc65d226128 R14: 00007fc65d226090 R15: 00007fff0cac9418
[  452.473858][ T9130]  </TASK>
[  452.859443][ T9136] bridge0: port 3(gretap0) entered blocking state
[  452.870632][ T9136] bridge0: port 3(gretap0) entered disabled state
[  452.890362][ T9136] gretap0: entered allmulticast mode
[  453.094089][ T9136] gretap0: entered promiscuous mode
[  453.135621][ T9136] bridge0: port 3(gretap0) entered blocking state
[  453.142345][ T9136] bridge0: port 3(gretap0) entered forwarding state
[  454.277518][ T9155] netlink: 'syz.0.975': attribute type 9 has an invalid length.
[  454.354487][ T9155] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.975'.
[  454.669776][ T9154] netlink: 38143 bytes leftover after parsing attributes in process `syz.1.977'.
[  455.734371][    C1] net_ratelimit: 3866 callbacks suppressed
[  455.734395][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.752354][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.764615][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.776766][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.788964][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.803503][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.815873][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.827914][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.839948][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  455.852183][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  458.278651][ T9182] bridge0: port 5(gretap0) entered blocking state
[  458.319906][ T9182] bridge0: port 5(gretap0) entered disabled state
[  458.362918][ T9182] gretap0: entered allmulticast mode
[  458.496855][ T9182] gretap0: entered promiscuous mode
[  458.661583][ T9191] netlink: 'syz.0.995': attribute type 11 has an invalid length.
[  458.670895][ T9191] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.995'.
[  458.686565][ T9182] bridge0: port 5(gretap0) entered blocking state
[  458.693219][ T9182] bridge0: port 5(gretap0) entered forwarding state
[  458.733488][ T9193] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.988'.
[  458.747381][ T9190] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.988'.
[  459.072783][ T9198] delete_channel: no stack
[  460.744784][    C1] net_ratelimit: 5157 callbacks suppressed
[  460.744809][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.763780][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.777026][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.790123][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.803633][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.816735][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.829676][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.842684][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.855684][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  460.868584][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  461.417926][ T9222] bridge0: port 2(gretap0) entered blocking state
[  461.496363][ T9222] bridge0: port 2(gretap0) entered disabled state
[  461.513634][ T9222] gretap0: entered allmulticast mode
[  461.532358][ T9222] gretap0: entered promiscuous mode
[  461.595218][ T9222] bridge0: port 2(gretap0) entered blocking state
[  461.601899][ T9222] bridge0: port 2(gretap0) entered forwarding state
[  462.772792][ T9240] delete_channel: no stack
[  462.806047][ T9246] netlink: 'syz.3.1009': attribute type 3 has an invalid length.
[  462.821343][ T9246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1009'.
[  465.800721][    C1] net_ratelimit: 2976 callbacks suppressed
[  465.801212][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  465.883214][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  465.950223][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  465.963842][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  465.976532][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  465.988963][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  466.001410][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  466.013856][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  466.026263][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  466.044837][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  466.088247][ T9279] FAULT_INJECTION: forcing a failure.
[  466.088247][ T9279] name failslab, interval 1, probability 0, space 0, times 0
[  466.185893][ T9279] CPU: 0 PID: 9279 Comm: syz.3.1019 Not tainted syzkaller #0
[  466.193473][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.203585][ T9279] Call Trace:
[  466.206917][ T9279]  <TASK>
[  466.209913][ T9279]  dump_stack_lvl+0x18c/0x250
[  466.214674][ T9279]  ? show_regs_print_info+0x20/0x20
[  466.219934][ T9279]  ? load_image+0x420/0x420
[  466.224504][ T9279]  ? __might_sleep+0xe0/0xe0
[  466.229261][ T9279]  ? __lock_acquire+0x7d80/0x7d80
[  466.234363][ T9279]  should_fail_ex+0x394/0x4c0
[  466.239209][ T9279]  should_failslab+0x9/0x20
[  466.243780][ T9279]  slab_pre_alloc_hook+0x59/0x300
[  466.248872][ T9279]  ? __lock_acquire+0x7d80/0x7d80
[  466.253955][ T9279]  kmem_cache_alloc_node+0x5e/0x310
[  466.259238][ T9279]  ? __alloc_skb+0x103/0x2c0
[  466.263894][ T9279]  __alloc_skb+0x103/0x2c0
[  466.268391][ T9279]  netlink_sendmsg+0x66a/0xbf0
[  466.273325][ T9279]  ? netlink_getsockopt+0x590/0x590
[  466.278594][ T9279]  ? apparmor_socket_sendmsg+0x8e/0x330
[  466.284251][ T9279]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  466.289617][ T9279]  ? security_socket_sendmsg+0x80/0xa0
[  466.295142][ T9279]  ? netlink_getsockopt+0x590/0x590
[  466.300434][ T9279]  ____sys_sendmsg+0x61b/0x980
[  466.305267][ T9279]  ? __asan_memset+0x22/0x40
[  466.309929][ T9279]  ? __sys_sendmsg_sock+0x30/0x30
[  466.315106][ T9279]  ? __import_iovec+0x5f2/0x850
[  466.320066][ T9279]  ? import_iovec+0x73/0xa0
[  466.324746][ T9279]  ___sys_sendmsg+0x2a6/0x360
[  466.329501][ T9279]  ? __sys_sendmsg+0x2b0/0x2b0
[  466.334439][ T9279]  ? trace_call_bpf+0xc3/0x6c0
[  466.339309][ T9279]  __se_sys_sendmsg+0x1d0/0x2c0
[  466.344232][ T9279]  ? perf_trace_preemptirq_template+0x269/0x330
[  466.350590][ T9279]  ? __x64_sys_sendmsg+0x80/0x80
[  466.355614][ T9279]  ? lockdep_hardirqs_on+0x98/0x150
[  466.360901][ T9279]  do_syscall_64+0x55/0xb0
[  466.365387][ T9279]  ? clear_bhb_loop+0x40/0x90
[  466.370136][ T9279]  ? clear_bhb_loop+0x40/0x90
[  466.374880][ T9279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  466.380845][ T9279] RIP: 0033:0x7fc65cf9e019
[  466.385322][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.405003][ T9279] RSP: 002b:00007fc65df30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.413489][ T9279] RAX: ffffffffffffffda RBX: 00007fc65d225fa0 RCX: 00007fc65cf9e019
[  466.421523][ T9279] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000003
[  466.429558][ T9279] RBP: 00007fc65df30090 R08: 0000000000000000 R09: 0000000000000000
[  466.437613][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.445640][ T9279] R13: 00007fc65d226038 R14: 00007fc65d225fa0 R15: 00007fff0cac9418
[  466.453703][ T9279]  </TASK>
[  466.704134][ T9285] netlink: 'syz.0.1021': attribute type 10 has an invalid length.
[  466.793233][ T9285] netlink: 'syz.0.1021': attribute type 9 has an invalid length.
[  466.894329][ T9285] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1021'.
[  470.804847][    C1] net_ratelimit: 1713 callbacks suppressed
[  470.804869][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.823433][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.835799][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.848112][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.860593][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.872894][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.885269][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.897590][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.909929][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  470.922345][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  473.028830][ T9318] delete_channel: no stack
[  473.381489][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'.
[  473.437899][ T9328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1033'.
[  475.814729][    C1] net_ratelimit: 4224 callbacks suppressed
[  475.814754][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.833238][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.845431][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.857803][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.870595][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.882895][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.895236][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.907470][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.919782][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  475.932031][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.825043][    C1] net_ratelimit: 3128 callbacks suppressed
[  480.825066][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.843392][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.855821][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.868234][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.880801][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.893204][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.905634][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.918059][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.930507][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  480.942866][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  484.430595][ T9417] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1058'.
[  485.835359][    C1] net_ratelimit: 1312 callbacks suppressed
[  485.835384][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.854368][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.867374][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.880430][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.893909][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.906909][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.919870][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.932924][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.945982][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  485.958980][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  487.731141][ T9425] netlink: 'syz.2.1061': attribute type 21 has an invalid length.
[  487.746044][ T9425] IPv6: NLM_F_CREATE should be specified when creating new route
[  487.753995][ T9425] IPv6: Can't replace route, no match found
[  487.902289][ T9424] netlink: 'syz.2.1061': attribute type 10 has an invalid length.
[  487.996918][ T9424] wg1: entered promiscuous mode
[  488.018852][ T9424] wg1: entered allmulticast mode
[  488.024172][ T9424] team0: Device wg1 is of different type
[  490.845186][    C1] net_ratelimit: 4046 callbacks suppressed
[  490.845210][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.863441][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.875782][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.888170][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.900629][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.914413][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.926767][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.939014][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.951423][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  490.963792][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  495.220144][ T9469] netlink: 'syz.3.1071': attribute type 10 has an invalid length.
[  495.228465][ T9469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'.
[  495.242793][ T9469] caif0: entered promiscuous mode
[  495.253759][ T9469] caif0: entered allmulticast mode
[  495.872964][    C1] net_ratelimit: 5247 callbacks suppressed
[  495.873034][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  495.902983][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  495.923732][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  495.946026][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  495.972371][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  496.003264][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  496.035758][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  496.060378][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  496.081308][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  496.104910][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  499.129998][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  499.144816][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  499.153462][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  499.163646][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  499.171863][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  499.180154][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  500.881487][    C1] net_ratelimit: 938 callbacks suppressed
[  500.881543][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  500.911115][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  500.932829][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  500.962180][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  500.987154][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.010390][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.033047][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.064137][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.093676][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.118819][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  501.214808][ T5780] Bluetooth: hci4: command tx timeout
[  501.870835][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  501.882280][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  503.304607][ T5780] Bluetooth: hci4: command tx timeout
[  505.374497][ T5780] Bluetooth: hci4: command tx timeout
[  505.885114][    C1] net_ratelimit: 355 callbacks suppressed
[  505.885200][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  505.927174][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  505.957491][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  505.990293][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.019879][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.052679][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.082789][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.111224][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.139713][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  506.169628][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  507.454576][ T5780] Bluetooth: hci4: command tx timeout
[  509.713449][ T9523] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  509.736895][ T9523] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1081'.
[  510.897262][    C1] net_ratelimit: 2332 callbacks suppressed
[  510.897303][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  510.921947][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  510.941116][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  510.961587][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  510.987195][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.013788][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.036957][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.059714][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.080834][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.103206][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  511.196637][ T9502] chnl_net:caif_netlink_parms(): no params data found
[  513.631944][ T2977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.056481][ T9561] delete_channel: no stack
[  514.079662][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.087150][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.095263][ T9502] bridge_slave_0: entered allmulticast mode
[  514.103029][ T9502] bridge_slave_0: entered promiscuous mode
[  514.112777][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.120574][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.128510][ T9502] bridge_slave_1: entered allmulticast mode
[  514.136881][ T9502] bridge_slave_1: entered promiscuous mode
[  514.202245][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.216866][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.338593][ T2977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.491638][ T9567] syzkaller0: entered promiscuous mode
[  514.501556][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  514.515809][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  514.525820][ T9567] syzkaller0: entered allmulticast mode
[  514.538561][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  514.583092][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  514.642113][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  514.671512][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  515.904652][    C1] net_ratelimit: 4517 callbacks suppressed
[  515.904673][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.923186][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.935348][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.947581][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.959836][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.972111][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.984358][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  515.996572][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  516.008820][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  516.021107][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  516.819726][ T5777] Bluetooth: hci3: command tx timeout
[  518.898739][ T5777] Bluetooth: hci3: command tx timeout
[  519.582912][ T2977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.638367][ T9502] team0: Port device team_slave_0 added
[  519.910303][ T9581] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1092'.
[  520.101852][ T2977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.198059][ T9502] team0: Port device team_slave_1 added
[  520.264579][ T9581] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.1092'.
[  520.384179][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.405747][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.485698][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.578196][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.616511][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.653484][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.914374][    C1] net_ratelimit: 5331 callbacks suppressed
[  520.914395][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.932637][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.945235][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.958382][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.970800][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.983184][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  520.985289][ T5777] Bluetooth: hci3: command tx timeout
[  520.997054][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  521.012233][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  521.024647][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  521.036951][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  521.530277][ T9502] hsr_slave_0: entered promiscuous mode
[  521.556011][ T9502] hsr_slave_1: entered promiscuous mode
[  521.570761][ T9502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  521.580990][ T9502] Cannot create hsr debugfs directory
[  522.392066][ T9577] chnl_net:caif_netlink_parms(): no params data found
[  522.933390][ T9502] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  523.058928][ T5777] Bluetooth: hci3: command tx timeout
[  523.088793][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.155535][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.181866][ T9577] bridge_slave_0: entered allmulticast mode
[  523.218099][ T9577] bridge_slave_0: entered promiscuous mode
[  523.239877][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.252570][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.260382][ T9577] bridge_slave_1: entered allmulticast mode
[  523.273704][ T9577] bridge_slave_1: entered promiscuous mode
[  523.281644][ T9502] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  523.303335][ T9502] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  523.497254][ T9502] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  523.701471][ T9577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.842779][ T9577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.942709][ T2977] bridge0: port 3(gretap0) entered disabled state
[  524.053515][ T2977] gretap0 (unregistering): left allmulticast mode
[  524.074278][ T2977] gretap0 (unregistering): left promiscuous mode
[  524.080824][ T2977] bridge0: port 3(gretap0) entered disabled state
[  524.202409][ T9577] team0: Port device team_slave_0 added
[  524.212995][ T9577] team0: Port device team_slave_1 added
[  524.512845][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.521903][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.565009][ T9577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.795290][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.802338][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.904443][ T9577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.428133][ T9577] hsr_slave_0: entered promiscuous mode
[  525.448721][ T9577] hsr_slave_1: entered promiscuous mode
[  525.465633][ T9577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  525.473281][ T9577] Cannot create hsr debugfs directory
[  525.775094][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.920017][ T2977] 
[  525.922477][ T2977] ======================================================
[  525.924441][    C1] net_ratelimit: 5089 callbacks suppressed
[  525.924482][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  525.929512][ T2977] WARNING: possible circular locking dependency detected
[  525.929550][ T2977] syzkaller #0 Not tainted
[  525.937514][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  525.946451][ T2977] ------------------------------------------------------
[  525.946460][ T2977] kworker/u4:11/2977 is trying to acquire lock:
[  525.946472][ T2977] ffff8880778bcd80 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[  525.956648][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  525.958423][ T2977] 
[  525.958423][ T2977] but task is already holding lock:
[  525.958432][ T2977] ffff888022f48768
[  525.971784][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  525.976699][ T2977]  (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  525.985533][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  525.992547][ T2977] 
[  525.992547][ T2977] which lock already depends on the new lock.
[  525.992547][ T2977] 
[  525.992556][ T2977] 
[  525.992556][ T2977] the existing dependency chain (in reverse order) is:
[  526.006193][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  526.011092][ T2977] 
[  526.011092][ T2977] -> #1 (
[  526.017258][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  526.026024][ T2977] &rdev->wiphy.mtx){+.+.}-{3:3}:
[  526.026050][ T2977]        __mutex_lock+0x135/0xc80
[  526.037189][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  526.046125][ T2977]        ieee80211_open+0x144/0x200
[  526.046157][ T2977]        __dev_open+0x2cb/0x430
[  526.059037][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  526.065708][ T2977]        dev_open+0xab/0x190
[  526.065735][ T2977]        team_add_slave+0x703/0x28a0
[  526.079118][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  526.081979][ T2977]        do_setlink+0xcde/0x3f40
[  526.161670][ T2977]        rtnl_newlink+0x1848/0x2170
[  526.166935][ T2977]        rtnetlink_rcv_msg+0x843/0xf90
[  526.172449][ T2977]        netlink_rcv_skb+0x235/0x4c0
[  526.177792][ T2977]        netlink_unicast+0x7b1/0x930
[  526.183147][ T2977]        netlink_sendmsg+0x8d0/0xbf0
[  526.188484][ T2977]        ____sys_sendmsg+0x61b/0x980
[  526.193835][ T2977]        ___sys_sendmsg+0x2a6/0x360
[  526.199202][ T2977]        __se_sys_sendmsg+0x1d0/0x2c0
[  526.204668][ T2977]        do_syscall_64+0x55/0xb0
[  526.209673][ T2977]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.216154][ T2977] 
[  526.216154][ T2977] -> #0 (team->team_lock_key#4){+.+.}-{3:3}:
[  526.224395][ T2977]        __lock_acquire+0x37ef/0x7d80
[  526.229836][ T2977]        lock_acquire+0x19e/0x420
[  526.234920][ T2977]        __mutex_lock+0x135/0xc80
[  526.240086][ T2977]        team_del_slave+0x31/0x1b0
[  526.245925][ T2977]        team_device_event+0x297/0xa30
[  526.251615][ T2977]        notifier_call_chain+0x18f/0x380
[  526.257314][ T2977]        unregister_netdevice_many_notify+0x1037/0x1910
[  526.264315][ T2977]        unregister_netdevice_queue+0x2e9/0x330
[  526.270618][ T2977]        _cfg80211_unregister_wdev+0x16d/0x580
[  526.276922][ T2977]        ieee80211_remove_interfaces+0x4b3/0x690
[  526.283317][ T2977]        ieee80211_unregister_hw+0x5d/0x2a0
[  526.289363][ T2977]        mac80211_hwsim_del_radio+0x289/0x480
[  526.295515][ T2977]        hwsim_exit_net+0x58d/0x650
[  526.300877][ T2977]        cleanup_net+0x707/0xbb0
[  526.306125][ T2977]        process_scheduled_works+0xa60/0x1600
[  526.312246][ T2977]        worker_thread+0xa5e/0xfe0
[  526.317443][ T2977]        kthread+0x2fa/0x390
[  526.322078][ T2977]        ret_from_fork+0x48/0x80
[  526.327068][ T2977]        ret_from_fork_asm+0x11/0x20
[  526.332471][ T2977] 
[  526.332471][ T2977] other info that might help us debug this:
[  526.332471][ T2977] 
[  526.342743][ T2977]  Possible unsafe locking scenario:
[  526.342743][ T2977] 
[  526.350227][ T2977]        CPU0                    CPU1
[  526.355632][ T2977]        ----                    ----
[  526.361039][ T2977]   lock(&rdev->wiphy.mtx);
[  526.365588][ T2977]                                lock(team->team_lock_key#4);
[  526.373104][ T2977]                                lock(&rdev->wiphy.mtx);
[  526.380173][ T2977]   lock(team->team_lock_key#4);
[  526.385176][ T2977] 
[  526.385176][ T2977]  *** DEADLOCK ***
[  526.385176][ T2977] 
[  526.393529][ T2977] 5 locks held by kworker/u4:11/2977:
[  526.398941][ T2977]  #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  526.409936][ T2977]  #1: ffffc9000bf07d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  526.420555][ T2977]  #2: ffffffff8e3ca0d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  526.430125][ T2977]  #3: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  526.440036][ T2977]  #4: ffff888022f48768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  526.450904][ T2977] 
[  526.450904][ T2977] stack backtrace:
[  526.456833][ T2977] CPU: 0 PID: 2977 Comm: kworker/u4:11 Not tainted syzkaller #0
[  526.464511][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  526.474611][ T2977] Workqueue: netns cleanup_net
[  526.479433][ T2977] Call Trace:
[  526.482755][ T2977]  <TASK>
[  526.485741][ T2977]  dump_stack_lvl+0x18c/0x250
[  526.490477][ T2977]  ? load_image+0x420/0x420
[  526.495087][ T2977]  ? show_regs_print_info+0x20/0x20
[  526.500443][ T2977]  ? print_circular_bug+0x12b/0x1a0
[  526.505702][ T2977]  check_noncircular+0x2fc/0x400
[  526.510698][ T2977]  ? print_deadlock_bug+0x5d0/0x5d0
[  526.515952][ T2977]  ? lockdep_lock+0xf5/0x230
[  526.520591][ T2977]  ? _find_first_zero_bit+0xd6/0x100
[  526.525936][ T2977]  __lock_acquire+0x37ef/0x7d80
[  526.530857][ T2977]  ? verify_lock_unused+0x140/0x140
[  526.536111][ T2977]  ? verify_lock_unused+0x140/0x140
[  526.541374][ T2977]  ? __up_read+0x2b8/0x6b0
[  526.545844][ T2977]  lock_acquire+0x19e/0x420
[  526.550416][ T2977]  ? team_del_slave+0x31/0x1b0
[  526.555255][ T2977]  ? __might_sleep+0xe0/0xe0
[  526.559906][ T2977]  ? read_lock_is_recursive+0x20/0x20
[  526.565340][ T2977]  __mutex_lock+0x135/0xc80
[  526.569896][ T2977]  ? team_del_slave+0x31/0x1b0
[  526.574731][ T2977]  ? __mutex_lock+0x30d/0xc80
[  526.579458][ T2977]  ? team_del_slave+0x31/0x1b0
[  526.584322][ T2977]  ? mutex_lock_nested+0x20/0x20
[  526.589582][ T2977]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  526.595295][ T2977]  team_del_slave+0x31/0x1b0
[  526.599980][ T2977]  team_device_event+0x297/0xa30
[  526.605007][ T2977]  notifier_call_chain+0x18f/0x380
[  526.610188][ T2977]  unregister_netdevice_many_notify+0x1037/0x1910
[  526.616663][ T2977]  ? unregister_netdevice_many+0x20/0x20
[  526.622479][ T2977]  ? kernfs_remove_by_name_ns+0x117/0x150
[  526.628289][ T2977]  ? __lock_acquire+0x7d80/0x7d80
[  526.633382][ T2977]  unregister_netdevice_queue+0x2e9/0x330
[  526.639191][ T2977]  ? list_netdevice+0x730/0x730
[  526.644112][ T2977]  ? kernfs_remove_by_name_ns+0x117/0x150
[  526.649907][ T2977]  _cfg80211_unregister_wdev+0x16d/0x580
[  526.655617][ T2977]  ieee80211_remove_interfaces+0x4b3/0x690
[  526.661500][ T2977]  ? ieee80211_do_stop+0x2000/0x2000
[  526.666878][ T2977]  ? rcu_is_watching+0x15/0xb0
[  526.671708][ T2977]  ieee80211_unregister_hw+0x5d/0x2a0
[  526.677143][ T2977]  mac80211_hwsim_del_radio+0x289/0x480
[  526.682751][ T2977]  ? rhashtable_remove_fast+0xc00/0xc00
[  526.688486][ T2977]  hwsim_exit_net+0x58d/0x650
[  526.693225][ T2977]  ? hwsim_init_net+0x90/0x90
[  526.697964][ T2977]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  526.703916][ T2977]  cleanup_net+0x707/0xbb0
[  526.708393][ T2977]  ? ops_free_list+0x3b0/0x3b0
[  526.713219][ T2977]  ? _raw_spin_unlock_irq+0x23/0x50
[  526.718480][ T2977]  ? process_scheduled_works+0x975/0x1600
[  526.724306][ T2977]  ? process_scheduled_works+0x975/0x1600
[  526.730088][ T2977]  process_scheduled_works+0xa60/0x1600
[  526.735908][ T2977]  ? worker_attach_to_pool+0x370/0x370
[  526.741443][ T2977]  ? assign_work+0x3cc/0x5d0
[  526.746110][ T2977]  worker_thread+0xa5e/0xfe0
[  526.750771][ T2977]  ? _raw_spin_unlock+0x40/0x40
[  526.755692][ T2977]  ? __kthread_parkme+0x71/0x1c0
[  526.760689][ T2977]  kthread+0x2fa/0x390
[  526.764813][ T2977]  ? pr_cont_work+0x550/0x550
[  526.769568][ T2977]  ? kthread_blkcg+0xd0/0xd0
[  526.774207][ T2977]  ret_from_fork+0x48/0x80
[  526.778668][ T2977]  ? kthread_blkcg+0xd0/0xd0
[  526.783313][ T2977]  ret_from_fork_asm+0x11/0x20
[  526.788146][ T2977]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  527.200889][ T2977] team0: Port device wlan1 removed
[  529.422813][ T2977] hsr_slave_0: left promiscuous mode
[  529.448147][ T2977] hsr_slave_1: left promiscuous mode
[  529.488839][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.497831][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.519909][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.529014][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.543095][ T2977] hsr0: left allmulticast mode
[  529.551170][ T2977] bridge0: port 2(hsr0) entered disabled state
[  529.573236][ T2977] bridge_slave_0: left allmulticast mode
[  529.579050][ T2977] bridge_slave_0: left promiscuous mode
[  529.587862][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.672814][ T2977] veth1_macvtap: left promiscuous mode
[  529.678555][ T2977] veth0_macvtap: left promiscuous mode
[  529.686279][ T2977] veth1_vlan: left promiscuous mode
[  529.691674][ T2977] veth0_vlan: left promiscuous mode
[  530.542955][ T2977] team0 (unregistering): Port device team_slave_1 removed
[  530.609817][ T2977] team0 (unregistering): Port device C removed
[  530.687170][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.934261][    C1] net_ratelimit: 5612 callbacks suppressed
[  530.934284][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  530.952228][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  530.964109][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  530.976144][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  530.988171][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.000247][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.012091][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.023847][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.035695][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.047611][    C1] bridge0: received packet on bond0 with own address as source address (addr:d2:2e:73:1e:2c:fe, vlan:0)
[  531.305395][ T2977] bond0 (unregistering): Released all slaves
[  533.071951][ T2977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.204367][ T2977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.312664][ T2977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.485830][ T2977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.816560][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.953516][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.111089][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.231958][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.538189][ T2977] tipc: Left network mode