last executing test programs:

5.388193016s ago: executing program 1 (id=4796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r2], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r3, &(0x7f0000000680), 0x0}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ff080b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000a2e946f800000000000000008500000053000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a80)={&(0x7f00000000c0)="cff66f40ca611b95d7f4db7c6c44a0e0f2bdc9d50e22d2f868f36b576b79733fa8ff346e8b3d221d320fb61148", &(0x7f0000000840)=""/250, &(0x7f0000000940)="f5e198f7664f8f0c1ea6f98bfa5557490835f94ae6e6311da10d9f2bbb492253a7d9b17e849eddd2b1a3fa67d21a969dc2643b222e376244fc9938422e97cf003b70690b4e884f7fffcad448e28aba58fdb541a2c2fcecbd777ec04ea50d9890ae00cbeef7f02611435e71f9d71f1a7b3f99fcce9fdacff1490ffc721c4ae2690ff2afa9af0e3a0e3cf41f0c7519afcf57da301cd9aed0428e9c8e0e8373f6517ea587eacc8934387bffc7c2bb9c3abcae6b9cadf68a1a1850c4c663c9e7687f0525f5790896c3", &(0x7f0000000a40)="87c1", 0x2, r5}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000f5ff000000000000002b0fddda000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x98}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_int(r11, &(0x7f0000000240)='cpuset.mem_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r12, &(0x7f0000000280)=0x9, 0x12)

5.316433421s ago: executing program 0 (id=4797):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007200060010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5.099202406s ago: executing program 0 (id=4798):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000008100000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

5.076601337s ago: executing program 0 (id=4799):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4301, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001140))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000012c0), 0x2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
r4 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5411, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0xffffffff}]})
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)

5.017059072s ago: executing program 1 (id=4800):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x27, &(0x7f0000000040), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x200, 0x1}, 0x200, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38)
socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x100)

4.867164162s ago: executing program 0 (id=4801):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

4.669906885s ago: executing program 0 (id=4802):
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010021005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000)

4.527341445s ago: executing program 0 (id=4803):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000000)=r2, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)='%pK    \x00'}, 0x20) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r2, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xdd, &(0x7f0000001480)=[{}, {}], 0x10, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) (rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0xe2, 0xccde, 0x18000000, 0x1a, r3, 0x6, '\x00', r4, r2, 0x4, 0x2, 0x0, 0xe}, 0x50)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98)
close(0x3) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/27], 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 32)
write$cgroup_devices(r10, 0x0, 0x9) (async, rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000680), 0x3ba, r8}, 0x38) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r6}, 0xc) (async)
r12 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) (async)
sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000300)=@nl=@unspec={0x0, 0x0, 0x0, 0xf5ff}, 0x80, 0x0}, 0x0)

2.813001704s ago: executing program 3 (id=4815):
r0 = socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)
socket$kcm(0x2, 0x200000000000003, 0x106)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002480)="2264385b8c40411c1e72d288bcbae4d97b715c2476183507cbd23c558042085c9e08024b7b6bb16ab2edfe2591443798c8c9732807175519c7318679df9417de957d765dfe850131edc610abfd255d42f454b65dd180216c90ba260b20f4e9a4bbb4ca72cdc78b087bd89f30d7956c", 0x6f}], 0x1}, 0x4000040)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e0000002d008188042f8eeae0b8402e7b6e67d83c0000", 0x17}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ee, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x34}, 0xfffffe8a)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

2.543106653s ago: executing program 3 (id=4817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000280000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.507289246s ago: executing program 2 (id=4818):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000001c0)="5cddff0016006b0800000000f5ff009a3fe3d46e17aa0a04f6bed0e2378148b7a60864160af36504bb4a43eee80fd1716dbbbc001af5ac56b37fb73cc48c154b7973c2f6cd312bcf16dd6c2b7e74fdea7f2fc138d40038001d001931a0e69ce517d34460bc06000000a705251e4c82949a3651f60a84c9f4d49380", 0x73}], 0x100001ba, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100)

2.463027129s ago: executing program 3 (id=4819):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x4098, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446cafffe00000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.279107482s ago: executing program 3 (id=4820):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xc0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x8800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"})

1.919317066s ago: executing program 1 (id=4821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000d73ad05f5c39e9dc199db35c193bb107dcd4f88f4b007b128b0b995d77d2bf6fbebc7f9fce14d2547c2fb63ad85d15017880350749d2d9723625f4125d1204dbe485c51b3be320161279684948b5fcf3a74a83d91627155bdba5585895bf25173006a05821d6c65ef81f3d6aaf42c2334be84539a3e757e24635b2e87baed695000b35de1d9ce23cdbf3cf12eb93807f09e4b45f6351874807bfe172d4f733ac4c111e90", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00011c00"/20, @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="010000000300"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000003000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYRES16=r1], 0x50) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000000880ed282ba04956a51c97bd95b36c6adb0f32c50fc714a357961f86856cbc58183006bfb69715c17c8869a432a20dabc187c83f71748f3f052d4ae6fda1d1f91c05a40002b947f044952ee54cc1a33ca820531a5ea543762a1adc80990c72c7d2c3ad88fa9254d72d47c03a3240c7322dc736fa0cb14a240855f24d750a51b46cd7e8f4cec38c027f9d9c9a92ef7b54a1ecfa22f49764ea5b07f3271bd0048892779f159981fee9b35274ab01a6ccbdb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r2}) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) (async, rerun: 32)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x5b, &(0x7f0000000940)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0xa27, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0xffffff9d, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x9a) (async, rerun: 64)
socket$kcm(0x15, 0x5, 0x0) (async, rerun: 64)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000205434974276847226490af888121ec84e0cfe88fd0bf833fe8f9f1651828a498a8dc86310956d20ed5fc8cb5c441973a8418e56c2cbea0558870ba81ac941b3ccbe9feabcb724a4e410b20b"], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) (rerun: 64)
close(r3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00!\x00\x00\x00\x00\x00\x00\x00'], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000058500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.829531493s ago: executing program 1 (id=4822):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000001018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.73517673s ago: executing program 1 (id=4823):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x2100}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x11d, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50)

1.669041314s ago: executing program 1 (id=4824):
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x8}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

1.513633455s ago: executing program 2 (id=4826):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback}}}], 0x20}, 0x7000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=<r6=>0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYRES8=r6, @ANYRESHEX=r2, @ANYRES8=0x0], &(0x7f0000000580)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r7 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r7, 0x1, 0x28, &(0x7f0000000000), 0x4)
recvmsg(r7, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'pim6reg1\x00', @remote})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1], 0x50)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0}, 0xd)
r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0xfffffffffffffeb2)
r13 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000400)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14)
ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000000340)='\xff\xff\xff\xff\xff\xff')
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r12)

1.335216927s ago: executing program 3 (id=4827):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000600e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)

933.999945ms ago: executing program 3 (id=4828):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c241af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850023000600000095000000000000000000"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}]}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

706.67686ms ago: executing program 2 (id=4829):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x27, &(0x7f0000000040), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x200, 0x1}, 0x200, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
close(r3)
socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x100)

277.65194ms ago: executing program 2 (id=4830):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x7, 0xffffffff, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000240), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x18}, 0x70)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)

133.152541ms ago: executing program 2 (id=4831):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000080020b7080000000500007b8af8ff00000000b708000035fd00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 2 (id=4832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400"/20, @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e31239aca9c9e59f7f7f1314d7ed1626bf8d091e4700"/41], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008100"/28], 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x989}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000180)='GPL\x00', 0xfffffffa, 0xc1, &(0x7f0000000900)=""/193, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x6, 0x8000, 0xdc}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a80)=[r3, r3, r3], &(0x7f0000000ac0)=[{0x5, 0x5, 0xc, 0xa}, {0x1, 0x2, 0x10, 0x9}, {0x4, 0x3, 0x8000000e, 0x6}, {0x2, 0x1, 0xb, 0x2}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x3, 0xb, 0x2}, {0x4, 0x2, 0x2}], 0x10, 0x1}, 0x94)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x1, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="080935bde916"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
socket$kcm(0x29, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ngth.
[  542.670175][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'.
[  542.767223][T15846] netlink: 'syz.0.3371': attribute type 10 has an invalid length.
[  542.776277][T15846] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3371'.
[  542.965665][T15861] netlink: 'syz.0.3379': attribute type 10 has an invalid length.
[  542.994224][T15861] team0: Device dummy0 is up. Set it down before adding it as a team port
[  543.034218][T15858] pim6reg1: entered promiscuous mode
[  543.043545][T15858] pim6reg1: entered allmulticast mode
[  543.183490][T15866] syzkaller0: entered promiscuous mode
[  543.189024][T15866] syzkaller0: entered allmulticast mode
[  543.364019][T15877] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3384'.
[  544.017094][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'.
[  544.173087][T15888] netlink: 'syz.2.3388': attribute type 10 has an invalid length.
[  544.182636][T15888] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3388'.
[  544.387976][T15904] pim6reg1: entered promiscuous mode
[  544.398791][T15904] pim6reg1: entered allmulticast mode
[  544.546863][T15914] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3396'.
[  544.637321][T15916] netlink: 'syz.3.3397': attribute type 10 has an invalid length.
[  545.203187][T15936] netlink: 'syz.0.3402': attribute type 10 has an invalid length.
[  545.211742][T15936] netlink: 'syz.0.3402': attribute type 19 has an invalid length.
[  545.223904][T15936] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.3402'.
[  545.296884][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'.
[  545.378325][T15934] netlink: 'syz.3.3403': attribute type 10 has an invalid length.
[  545.387531][T15934] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3403'.
[  545.617281][T15940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.638343][T15940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.659630][T15940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.683623][T15940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.722782][T15940] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  545.745079][T15940] batman_adv: batadv0: Removing interface: veth0_vlan
[  545.916685][T15947] netlink: 'syz.0.3405': attribute type 21 has an invalid length.
[  545.934205][T15950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  545.941649][T15950] IPv6: NLM_F_CREATE should be set when creating new route
[  545.949355][T15950] IPv6: NLM_F_CREATE should be set when creating new route
[  545.956917][T15950] IPv6: NLM_F_CREATE should be set when creating new route
[  546.152025][T15956] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3412'.
[  546.690446][T15987] syzkaller0: entered promiscuous mode
[  546.710345][T15987] syzkaller0: entered allmulticast mode
[  548.098013][T16030] netlink: 'syz.0.3438': attribute type 10 has an invalid length.
[  548.136144][T16030] __nla_validate_parse: 5 callbacks suppressed
[  548.136212][T16030] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3438'.
[  548.442562][T16040] syzkaller0: entered promiscuous mode
[  548.453384][T16040] syzkaller0: entered allmulticast mode
[  548.857638][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.866409][T16055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.882549][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.891648][T16055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.906660][T16055] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  548.916093][T16055] batman_adv: batadv0: Removing interface: veth0_vlan
[  549.082079][T16059] netlink: 'syz.2.3448': attribute type 21 has an invalid length.
[  549.110423][T16062] C: renamed from team_slave_0 (while UP)
[  549.136425][T16062] netlink: 'syz.1.3450': attribute type 3 has an invalid length.
[  549.154979][T16062] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3450'.
[  550.356027][T16095] syzkaller0: entered promiscuous mode
[  550.361596][T16095] syzkaller0: entered allmulticast mode
[  551.700155][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'.
[  552.096450][T16119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3468'.
[  552.608104][T16134] netlink: 'syz.1.3473': attribute type 21 has an invalid length.
[  552.649415][T16130] tap1: tun_chr_ioctl cmd 1074025677
[  552.663918][T16130] tap1: linktype set to 778
[  552.906232][T16145] syzkaller0: entered promiscuous mode
[  552.947169][T16145] syzkaller0: entered allmulticast mode
[  553.683262][T16161] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3482'.
[  554.178969][T16171] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3485'.
[  554.268489][T16171] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3485'.
[  554.288598][T16176] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3487'.
[  554.344303][T16176] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3487'.
[  555.500158][T16202] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3497'.
[  555.553451][T16202] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3497'.
[  557.063868][T16267] netlink: 'syz.1.3517': attribute type 10 has an invalid length.
[  557.099900][T16267] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3517'.
[  557.923804][T16271] netlink: 'syz.0.3519': attribute type 10 has an invalid length.
[  557.942078][T16271] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3519'.
[  558.590588][T16274] syzkaller0: entered promiscuous mode
[  558.664646][T16274] syzkaller0: entered allmulticast mode
[  563.008912][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.016775][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  563.052629][T16323] netlink: 'syz.3.3535': attribute type 21 has an invalid length.
[  563.708887][T16342] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3541'.
[  563.730393][T16345] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3541'.
[  564.017481][T16358] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3545'.
[  565.124543][T16386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3556'.
[  565.497082][T16397] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3559'.
[  565.664722][T16402] syzkaller0: entered promiscuous mode
[  565.670274][T16402] syzkaller0: entered allmulticast mode
[  565.746689][T16404] netlink: 'syz.0.3562': attribute type 10 has an invalid length.
[  567.720785][T16449] netlink: 'syz.2.3577': attribute type 21 has an invalid length.
[  567.843740][T16410] netlink: 'syz.0.3564': attribute type 4 has an invalid length.
[  567.903453][T16410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3564'.
[  568.773773][T16410] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  569.083153][T16465] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3581'.
[  569.084517][T16463] pim6reg1: entered promiscuous mode
[  569.103450][T16463] pim6reg1: entered allmulticast mode
[  569.393493][T16474] netlink: 'syz.3.3581': attribute type 15 has an invalid length.
[  569.401512][T16474] netlink: 'syz.3.3581': attribute type 7 has an invalid length.
[  569.471954][T16473] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3581'.
[  569.686312][T16493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3588'.
[  569.705595][T16493] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3588'.
[  570.161244][T16507] pim6reg1: entered promiscuous mode
[  570.202026][T16507] pim6reg1: entered allmulticast mode
[  570.267277][T16514] netlink: 'syz.1.3598': attribute type 6 has an invalid length.
[  570.283817][T16514] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3598'.
[  570.450867][T16523] netlink: 'syz.3.3602': attribute type 10 has an invalid length.
[  570.483326][T16523] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3602'.
[  570.597854][T16526] netlink: 'syz.1.3603': attribute type 10 has an invalid length.
[  570.606865][T16526] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3603'.
[  571.378264][T16557] pim6reg1: entered promiscuous mode
[  571.385671][T16557] pim6reg1: entered allmulticast mode
[  571.860047][T16569] syzkaller0: entered promiscuous mode
[  571.873359][T16569] syzkaller0: entered allmulticast mode
[  572.882679][T16585] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.3624'.
[  572.912973][T16587] netlink: 'syz.3.3625': attribute type 1 has an invalid length.
[  572.932003][T16587] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3625'.
[  573.161611][T16599] pim6reg1: entered promiscuous mode
[  573.173759][T16599] pim6reg1: entered allmulticast mode
[  574.323823][T16618] syzkaller0: entered promiscuous mode
[  574.340175][T16618] syzkaller0: entered allmulticast mode
[  574.567731][T16622] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3638'.
[  575.069018][T16622] netlink: 'syz.0.3638': attribute type 15 has an invalid length.
[  575.083377][T16622] netlink: 'syz.0.3638': attribute type 7 has an invalid length.
[  575.128979][T16622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3638'.
[  575.275154][T16634] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.3642'.
[  575.444759][T16640] netlink: 'syz.0.3644': attribute type 10 has an invalid length.
[  575.452647][T16640] team0: Device dummy0 is up. Set it down before adding it as a team port
[  575.522554][T16644] pim6reg1: entered promiscuous mode
[  575.535156][T16644] pim6reg1: entered allmulticast mode
[  575.908786][T16657] syzkaller0: entered promiscuous mode
[  575.943485][T16657] syzkaller0: entered allmulticast mode
[  576.129888][T16665] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3653'.
[  576.154461][T16667] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3661'.
[  576.515003][T16668] netlink: 'syz.1.3653': attribute type 15 has an invalid length.
[  576.523158][T16668] netlink: 'syz.1.3653': attribute type 7 has an invalid length.
[  576.549470][T16668] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3653'.
[  576.762807][T16670] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.3654'.
[  576.778915][T16673] netlink: 'syz.2.3655': attribute type 9 has an invalid length.
[  576.787572][T16673] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3655'.
[  576.986066][T16684] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3659'.
[  577.380751][T16697] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3663'.
[  583.022975][T16706] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3665'.
[  583.204617][T16712] netlink: 'syz.3.3666': attribute type 21 has an invalid length.
[  583.233812][T16712] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3666'.
[  583.318187][T16712] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3666'.
[  583.340056][T16719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3666'.
[  583.474212][T16721] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode
[  583.496260][T16721] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  583.538585][T16706] netlink: 'syz.2.3665': attribute type 15 has an invalid length.
[  583.555549][T16706] netlink: 'syz.2.3665': attribute type 7 has an invalid length.
[  583.689183][T16714] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3665'.
[  586.081189][T16789] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3702'.
[  586.169211][T16789] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  587.616062][T16823] netlink: 'syz.0.3705': attribute type 10 has an invalid length.
[  587.630847][T16827] netlink: 'syz.2.3708': attribute type 9 has an invalid length.
[  587.658024][T16823] veth0_macvtap: left promiscuous mode
[  587.665960][T16827] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3708'.
[  588.647738][T16847] pim6reg1: entered promiscuous mode
[  588.653107][T16847] pim6reg1: entered allmulticast mode
[  589.056406][T16861] netlink: 'syz.1.3722': attribute type 10 has an invalid length.
[  589.234002][T16865] netlink: 'syz.0.3723': attribute type 2 has an invalid length.
[  589.242032][T16865] netlink: 'syz.0.3723': attribute type 8 has an invalid length.
[  589.326915][T16865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3723'.
[  589.385052][T16873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3727'.
[  589.807377][T16881] netlink: 'syz.0.3730': attribute type 10 has an invalid length.
[  589.854913][T16881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3730'.
[  589.863989][T16886] netlink: 'syz.1.3732': attribute type 9 has an invalid length.
[  589.864014][T16886] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3732'.
[  590.012374][T16881] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  590.864250][T16902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3735'.
[  593.125687][T16928] pim6reg1: entered promiscuous mode
[  593.142464][T16928] pim6reg1: entered allmulticast mode
[  594.560562][T16940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3749'.
[  594.619835][T16940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.805510][T16953] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3754'.
[  595.328935][T16964] pim6reg1: entered promiscuous mode
[  595.345959][T16964] pim6reg1: entered allmulticast mode
[  596.460292][T17007] netlink: 'syz.1.3769': attribute type 10 has an invalid length.
[  596.483995][T17007] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3769'.
[  597.555257][T17037] syzkaller0: entered promiscuous mode
[  597.560789][T17037] syzkaller0: entered allmulticast mode
[  597.934705][T17052] pim6reg1: entered promiscuous mode
[  597.940286][T17052] pim6reg1: entered allmulticast mode
[  600.829326][T17082] netlink: 'syz.3.3802': attribute type 21 has an invalid length.
[  600.837390][T17082] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3802'.
[  600.857666][T17082] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3802'.
[  600.963994][T17085] pim6reg1: entered promiscuous mode
[  600.983742][T17085] pim6reg1: entered allmulticast mode
[  601.172433][T17096] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3807'.
[  601.249872][T17098] netlink: 'syz.1.3809': attribute type 10 has an invalid length.
[  601.487651][T17105] syzkaller0: entered promiscuous mode
[  601.496670][T17105] syzkaller0: entered allmulticast mode
[  601.511045][T16994] tipc: Subscription rejected, illegal request
[  601.620281][T17116] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3814'.
[  601.710735][T17121] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3815'.
[  601.721506][T17121] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3815'.
[  601.818671][T17123] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3816'.
[  601.828210][T17123] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3816'.
[  602.052381][T17131] pim6reg1: entered promiscuous mode
[  602.058641][T17131] pim6reg1: entered allmulticast mode
[  602.471715][T17138] netlink: 'syz.0.3823': attribute type 9 has an invalid length.
[  602.482441][T17138] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3823'.
[  603.035826][T17154] netlink: 'syz.1.3828': attribute type 3 has an invalid length.
[  603.082182][T17154] netlink: 'syz.1.3828': attribute type 275 has an invalid length.
[  603.156434][T17158] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3829'.
[  603.198904][T17158] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  603.213441][T17158] CPU: 0 PID: 17158 Comm: syz.3.3829 Not tainted syzkaller #0
[  603.220963][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  603.231050][T17158] Call Trace:
[  603.234363][T17158]  <TASK>
[  603.237322][T17158]  dump_stack_lvl+0x18c/0x250
[  603.242046][T17158]  ? show_regs_print_info+0x20/0x20
[  603.247283][T17158]  ? load_image+0x420/0x420
[  603.251836][T17158]  sysfs_warn_dup+0x8e/0xa0
[  603.256366][T17158]  sysfs_do_create_link_sd+0xc0/0x110
[  603.261774][T17158]  device_add_class_symlinks+0x1cf/0x240
[  603.267448][T17158]  device_add+0x507/0xc20
[  603.271821][T17158]  wiphy_register+0x1dad/0x2ae0
[  603.276721][T17158]  ? cfg80211_event_work+0x40/0x40
[  603.281860][T17158]  ? minstrel_ht_alloc+0x88a/0x990
[  603.287007][T17158]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  603.293084][T17158]  ieee80211_register_hw+0x3464/0x4250
[  603.298565][T17158]  ? ieee80211_tasklet_handler+0x20/0x20
[  603.304194][T17158]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  603.310097][T17158]  ? __debug_object_init+0xec/0x450
[  603.315301][T17158]  ? __asan_memset+0x22/0x40
[  603.319890][T17158]  ? __hrtimer_init+0x186/0x270
[  603.324744][T17158]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  603.330480][T17158]  ? mac80211_hwsim_free+0x220/0x220
[  603.335760][T17158]  ? rcu_is_watching+0x15/0xb0
[  603.340522][T17158]  ? kstrndup+0xbd/0x140
[  603.344769][T17158]  hwsim_new_radio_nl+0xdc9/0x1a90
[  603.349891][T17158]  ? mark_lock+0x94/0x320
[  603.354233][T17158]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  603.360565][T17158]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  603.366718][T17158]  ? lockdep_hardirqs_on+0x98/0x150
[  603.371918][T17158]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  603.378081][T17158]  genl_family_rcv_msg_doit+0x211/0x310
[  603.383627][T17158]  ? end_current_label_crit_section+0x170/0x170
[  603.389871][T17158]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  603.395768][T17158]  ? bpf_lsm_capable+0x9/0x10
[  603.400443][T17158]  ? security_capable+0x89/0xb0
[  603.405310][T17158]  genl_rcv_msg+0x619/0x7a0
[  603.409819][T17158]  ? genl_bind+0x360/0x360
[  603.414232][T17158]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  603.420567][T17158]  netlink_rcv_skb+0x241/0x4d0
[  603.425337][T17158]  ? genl_bind+0x360/0x360
[  603.429750][T17158]  ? netlink_ack+0x1180/0x1180
[  603.434528][T17158]  ? __lock_acquire+0x7d40/0x7d40
[  603.439556][T17158]  ? down_read+0x1ac/0x2e0
[  603.443972][T17158]  genl_rcv+0x28/0x40
[  603.447950][T17158]  netlink_unicast+0x751/0x8d0
[  603.452728][T17158]  netlink_sendmsg+0x8d0/0xbf0
[  603.457502][T17158]  ? netlink_getsockopt+0x590/0x590
[  603.462705][T17158]  ? aa_sock_msg_perm+0x94/0x150
[  603.467648][T17158]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  603.472931][T17158]  ? security_socket_sendmsg+0x80/0xa0
[  603.478389][T17158]  ? netlink_getsockopt+0x590/0x590
[  603.483593][T17158]  ____sys_sendmsg+0x5ba/0x960
[  603.488360][T17158]  ? __asan_memset+0x22/0x40
[  603.492981][T17158]  ? __sys_sendmsg_sock+0x30/0x30
[  603.498000][T17158]  ? __import_iovec+0x5f2/0x850
[  603.502853][T17158]  ? import_iovec+0x73/0xa0
[  603.507353][T17158]  ___sys_sendmsg+0x2a6/0x360
[  603.512032][T17158]  ? __sys_sendmsg+0x2a0/0x2a0
[  603.516833][T17158]  __se_sys_sendmsg+0x1c2/0x2b0
[  603.521688][T17158]  ? __x64_sys_sendmsg+0x80/0x80
[  603.526641][T17158]  ? syscall_enter_from_user_mode+0x2e/0x80
[  603.532538][T17158]  do_syscall_64+0x55/0xa0
[  603.536952][T17158]  ? clear_bhb_loop+0x40/0x90
[  603.541631][T17158]  ? clear_bhb_loop+0x40/0x90
[  603.546307][T17158]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  603.552207][T17158] RIP: 0033:0x7f0cb079c819
[  603.556619][T17158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.576226][T17158] RSP: 002b:00007f0cb15c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  603.584637][T17158] RAX: ffffffffffffffda RBX: 00007f0cb0a15fa0 RCX: 00007f0cb079c819
[  603.592603][T17158] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  603.600575][T17158] RBP: 00007f0cb0832c91 R08: 0000000000000000 R09: 0000000000000000
[  603.608540][T17158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  603.616509][T17158] R13: 00007f0cb0a16038 R14: 00007f0cb0a15fa0 R15: 00007ffd9a685dd8
[  603.624492][T17158]  </TASK>
[  603.718975][T17166] pim6reg1: entered promiscuous mode
[  603.734833][T17166] pim6reg1: entered allmulticast mode
[  604.013686][T17174] netlink: 'syz.2.3835': attribute type 11 has an invalid length.
[  604.051513][T17174] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  604.852931][T17204] pim6reg1: entered promiscuous mode
[  604.860625][T17204] pim6reg1: entered allmulticast mode
[  606.614384][T17231] __nla_validate_parse: 3 callbacks suppressed
[  606.614402][T17231] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.3855'.
[  606.736449][T17233] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3852'.
[  608.153678][T17255] pim6reg1: entered promiscuous mode
[  608.159058][T17255] pim6reg1: entered allmulticast mode
[  613.315820][T17314] netlink: 'syz.3.3881': attribute type 10 has an invalid length.
[  613.425761][T17320] macsec0: entered promiscuous mode
[  613.440093][T17320] macsec0: entered allmulticast mode
[  613.451448][T17320] veth1_macvtap: entered allmulticast mode
[  615.347989][T17355] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3892'.
[  615.393521][T17355] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3892'.
[  615.407112][T17358] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3893'.
[  615.419161][T17358] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3893'.
[  615.603741][T17360] netlink: 'syz.3.3894': attribute type 2 has an invalid length.
[  615.611775][T17362] netlink: 'syz.0.3895': attribute type 10 has an invalid length.
[  615.623031][T17362] team0: Device dummy0 is up. Set it down before adding it as a team port
[  615.655295][T17360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3894'.
[  615.736550][T17366] netlink: 'syz.1.3896': attribute type 9 has an invalid length.
[  615.792898][T17366] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3896'.
[  615.870484][T17365] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3894'.
[  616.362806][T17376] pim6reg1: entered promiscuous mode
[  616.378655][T17376] pim6reg1: entered allmulticast mode
[  616.897007][T17389] netlink: 'syz.2.3903': attribute type 10 has an invalid length.
[  616.943387][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3903'.
[  616.975874][T17389] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  617.791282][T17417] netlink: 'syz.2.3915': attribute type 10 has an invalid length.
[  617.943019][T17417] team0: Port device geneve1 added
[  618.036707][T17425] netlink: 'syz.3.3917': attribute type 10 has an invalid length.
[  618.179754][T17425] team0: Port device macvlan0 added
[  618.322192][T17425] syz.3.3917 (17425) used greatest stack depth: 18792 bytes left
[  618.529897][T17435] netlink: 'syz.2.3919': attribute type 21 has an invalid length.
[  618.574625][T17435] netlink: 'syz.2.3919': attribute type 30 has an invalid length.
[  618.687698][T17437] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3921'.
[  618.784085][T17437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3921'.
[  619.013699][T17449] netlink: 'syz.2.3924': attribute type 10 has an invalid length.
[  619.537967][T17459] netlink: 'syz.1.3927': attribute type 6 has an invalid length.
[  619.591858][T17463] netlink: 'syz.3.3930': attribute type 1 has an invalid length.
[  619.727451][T17466] netlink: 'syz.1.3932': attribute type 10 has an invalid length.
[  619.769780][T17466] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  620.204876][T17473] netlink: 'syz.3.3934': attribute type 10 has an invalid length.
[  620.434938][T17487] netlink: 'syz.0.3938': attribute type 10 has an invalid length.
[  620.442834][T17487] __nla_validate_parse: 6 callbacks suppressed
[  620.442847][T17487] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3938'.
[  621.924816][T17514] pim6reg1: entered promiscuous mode
[  621.930168][T17514] pim6reg1: entered allmulticast mode
[  624.449759][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  624.461309][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  624.681115][T17532] netlink: 'syz.2.3951': attribute type 10 has an invalid length.
[  624.706650][T17536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3952'.
[  624.889647][T17543] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3955'.
[  625.705804][T17559] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3961'.
[  625.715410][T17559] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3961'.
[  626.158602][T17573] pim6reg1: entered promiscuous mode
[  626.173257][T17573] pim6reg1: entered allmulticast mode
[  626.184380][T17572] netlink: 'syz.3.3965': attribute type 10 has an invalid length.
[  626.360949][T17574] macvlan1: entered promiscuous mode
[  626.556313][T17579] netlink: 'syz.1.3967': attribute type 9 has an invalid length.
[  626.613357][T17579] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3967'.
[  627.615948][T17606] netlink: 'syz.0.3979': attribute type 10 has an invalid length.
[  627.635341][T17606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'.
[  627.683720][T17606] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  628.373746][T17640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3992'.
[  628.387354][T17640] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3992'.
[  628.413015][T17643] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3993'.
[  628.900392][T17666] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.4004'.
[  629.444488][T17674] netlink: 'syz.1.4006': attribute type 10 has an invalid length.
[  629.452615][T17674] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4006'.
[  629.653096][T17690] netlink: 'syz.1.4011': attribute type 27 has an invalid length.
[  629.670435][T17690] netlink: 'syz.1.4011': attribute type 4 has an invalid length.
[  629.693919][T17690] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4011'.
[  630.143929][T17704] netlink: 'syz.2.4016': attribute type 29 has an invalid length.
[  630.172449][T17704] netlink: 'syz.2.4016': attribute type 29 has an invalid length.
[  630.193041][T17704] netlink: 'syz.2.4016': attribute type 29 has an invalid length.
[  630.553629][T17718] netlink: 'syz.2.4019': attribute type 5 has an invalid length.
[  630.695272][T17722] netlink: 'syz.3.4023': attribute type 1 has an invalid length.
[  630.704701][T17722] netlink: 'syz.3.4023': attribute type 4 has an invalid length.
[  631.215251][T17738] syzkaller0: entered promiscuous mode
[  631.220932][T17738] syzkaller0: entered allmulticast mode
[  631.267116][T17747] netlink: 'syz.0.4034': attribute type 21 has an invalid length.
[  631.275748][T17747] netlink: 'syz.0.4034': attribute type 7 has an invalid length.
[  633.094761][T17744] netlink: 'syz.1.4033': attribute type 2 has an invalid length.
[  633.102611][T17744] netlink: 'syz.1.4033': attribute type 8 has an invalid length.
[  633.112390][T17744] __nla_validate_parse: 2 callbacks suppressed
[  633.112420][T17744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4033'.
[  633.130068][T17745] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4033'.
[  634.465000][T17792] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4049'.
[  634.815683][T17795] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4050'.
[  636.540625][T17812] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4054'.
[  636.553105][T17812] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4054'.
[  637.087185][T17824] validate_nla: 5 callbacks suppressed
[  637.087202][T17824] netlink: 'syz.1.4058': attribute type 10 has an invalid length.
[  637.108812][T17824] team0: Device dummy0 is up. Set it down before adding it as a team port
[  637.293408][T17835] pim6reg1: entered promiscuous mode
[  637.298777][T17835] pim6reg1: entered allmulticast mode
[  637.478858][T17840] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4065'.
[  637.520297][T17840] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.4065'.
[  637.791511][T17842] netlink: 'syz.2.4066': attribute type 10 has an invalid length.
[  637.801812][T17842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4066'.
[  637.851487][T17842] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  638.001735][T17849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4076'.
[  638.248828][T17853] netlink: 'syz.2.4068': attribute type 10 has an invalid length.
[  638.258174][T17853] __nla_validate_parse: 1 callbacks suppressed
[  638.258302][T17853] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4068'.
[  639.192056][T17898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.797074][T17910] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4089'.
[  639.807825][T17910] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  640.276263][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'.
[  640.337304][T17924] netlink: 'syz.2.4095': attribute type 10 has an invalid length.
[  640.346258][T17924] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4095'.
[  640.966347][T17941] syzkaller0: entered promiscuous mode
[  640.971983][T17941] syzkaller0: entered allmulticast mode
[  643.324179][T18003] netlink: 'syz.1.4126': attribute type 10 has an invalid length.
[  643.348752][T18003] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4126'.
[  643.392458][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'.
[  643.401871][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'.
[  643.443008][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'.
[  643.452932][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'.
[  643.875196][T18030] syzkaller0: entered promiscuous mode
[  643.880812][T18030] syzkaller0: entered allmulticast mode
[  643.905117][T18031] FAULT_INJECTION: forcing a failure.
[  643.905117][T18031] name failslab, interval 1, probability 0, space 0, times 0
[  643.920568][T18031] CPU: 0 PID: 18031 Comm: syz.2.4137 Not tainted syzkaller #0
[  643.928099][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  643.938183][T18031] Call Trace:
[  643.941484][T18031]  <TASK>
[  643.944443][T18031]  dump_stack_lvl+0x18c/0x250
[  643.949165][T18031]  ? show_regs_print_info+0x20/0x20
[  643.954405][T18031]  ? load_image+0x420/0x420
[  643.958943][T18031]  ? __might_sleep+0xe0/0xe0
[  643.963567][T18031]  ? __lock_acquire+0x7d40/0x7d40
[  643.968632][T18031]  should_fail_ex+0x39d/0x4d0
[  643.973354][T18031]  should_failslab+0x9/0x20
[  643.977899][T18031]  slab_pre_alloc_hook+0x59/0x310
[  643.982951][T18031]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  643.988701][T18031]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  643.994457][T18031]  __kmem_cache_alloc_node+0x53/0x250
[  643.999875][T18031]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  644.005619][T18031]  __kmalloc+0xa4/0x230
[  644.009796][T18031]  tomoyo_realpath_from_path+0xe3/0x5d0
[  644.015363][T18031]  tomoyo_path_number_perm+0x248/0x620
[  644.020832][T18031]  ? tomoyo_path_number_perm+0x217/0x620
[  644.026466][T18031]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  644.031925][T18031]  ? ksys_write+0x1c4/0x260
[  644.036461][T18031]  ? __fget_files+0x28/0x4b0
[  644.041048][T18031]  ? __fget_files+0x28/0x4b0
[  644.045649][T18031]  security_file_ioctl+0x70/0xa0
[  644.050585][T18031]  __se_sys_ioctl+0x48/0x170
[  644.055176][T18031]  do_syscall_64+0x55/0xa0
[  644.059590][T18031]  ? clear_bhb_loop+0x40/0x90
[  644.064268][T18031]  ? clear_bhb_loop+0x40/0x90
[  644.068950][T18031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.074843][T18031] RIP: 0033:0x7fdec2d9c819
[  644.079257][T18031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.098871][T18031] RSP: 002b:00007fdec3b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  644.107289][T18031] RAX: ffffffffffffffda RBX: 00007fdec3016090 RCX: 00007fdec2d9c819
[  644.115257][T18031] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a
[  644.123231][T18031] RBP: 00007fdec3b93090 R08: 0000000000000000 R09: 0000000000000000
[  644.131201][T18031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.139172][T18031] R13: 00007fdec3016128 R14: 00007fdec3016090 R15: 00007ffdde6f2d58
[  644.147156][T18031]  </TASK>
[  644.158813][T18031] ERROR: Out of memory at tomoyo_realpath_from_path.
[  644.166069][T18031] syzkaller0: entered promiscuous mode
[  644.180967][T18031] syzkaller0: entered allmulticast mode
[  644.203095][T18037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4139'.
[  644.250863][T18039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4140'.
[  644.318385][T18040] netlink: 'syz.1.4140': attribute type 10 has an invalid length.
[  644.351056][T18040] veth0_vlan: left promiscuous mode
[  644.378224][T18040] veth0_vlan: entered promiscuous mode
[  644.395902][T18040] team0: Device veth0_vlan failed to register rx_handler
[  644.422889][T18042] netlink: 'syz.3.4141': attribute type 10 has an invalid length.
[  644.460983][T18040] syzkaller0: entered promiscuous mode
[  644.478633][T18040] syzkaller0: entered allmulticast mode
[  645.464610][T18064] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.4150'.
[  645.536981][T18066] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4151'.
[  645.895434][T18077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4156'.
[  646.009641][T18084] netlink: 'syz.2.4159': attribute type 10 has an invalid length.
[  646.126760][T18087] netlink: 'syz.0.4160': attribute type 9 has an invalid length.
[  646.795506][T18105] netlink: 'syz.0.4166': attribute type 1 has an invalid length.
[  649.428247][T18123] netlink: 'syz.1.4172': attribute type 10 has an invalid length.
[  649.443741][T18123] team0: Device dummy0 is up. Set it down before adding it as a team port
[  650.422443][T18145] FAULT_INJECTION: forcing a failure.
[  650.422443][T18145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.440428][T18145] CPU: 1 PID: 18145 Comm: syz.2.4179 Not tainted syzkaller #0
[  650.447931][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  650.458001][T18145] Call Trace:
[  650.461303][T18145]  <TASK>
[  650.464246][T18145]  dump_stack_lvl+0x18c/0x250
[  650.468952][T18145]  ? show_regs_print_info+0x20/0x20
[  650.474190][T18145]  ? load_image+0x420/0x420
[  650.478728][T18145]  ? __might_fault+0xaa/0x120
[  650.483431][T18145]  ? __lock_acquire+0x7d40/0x7d40
[  650.488479][T18145]  should_fail_ex+0x39d/0x4d0
[  650.493190][T18145]  _copy_from_user+0x2f/0xe0
[  650.497797][T18145]  ____sys_sendmsg+0x2fd/0x960
[  650.502582][T18145]  ? __lock_acquire+0x7d40/0x7d40
[  650.507630][T18145]  ? __sys_sendmsg_sock+0x30/0x30
[  650.512667][T18145]  ? __import_iovec+0x3fa/0x850
[  650.517539][T18145]  ? import_iovec+0x73/0xa0
[  650.522067][T18145]  ___sys_sendmsg+0x2a6/0x360
[  650.526771][T18145]  ? __sys_sendmsg+0x2a0/0x2a0
[  650.531573][T18145]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  650.537856][T18145]  __se_sys_sendmsg+0x1c2/0x2b0
[  650.542727][T18145]  ? __x64_sys_sendmsg+0x80/0x80
[  650.547697][T18145]  ? lockdep_hardirqs_on+0x98/0x150
[  650.552930][T18145]  do_syscall_64+0x55/0xa0
[  650.557367][T18145]  ? clear_bhb_loop+0x40/0x90
[  650.562066][T18145]  ? clear_bhb_loop+0x40/0x90
[  650.566759][T18145]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.572677][T18145] RIP: 0033:0x7fdec2d9c819
[  650.577108][T18145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.596737][T18145] RSP: 002b:00007fdec3bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.605178][T18145] RAX: ffffffffffffffda RBX: 00007fdec3015fa0 RCX: 00007fdec2d9c819
[  650.613171][T18145] RDX: 0000000007000000 RSI: 0000200000000380 RDI: 0000000000000006
[  650.621167][T18145] RBP: 00007fdec3bb4090 R08: 0000000000000000 R09: 0000000000000000
[  650.629154][T18145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.637175][T18145] R13: 00007fdec3016038 R14: 00007fdec3015fa0 R15: 00007ffdde6f2d58
[  650.645170][T18145]  </TASK>
[  650.797443][T18145] pim6reg1: entered promiscuous mode
[  650.804595][T18145] pim6reg1: entered allmulticast mode
[  651.011179][T18157] __nla_validate_parse: 5 callbacks suppressed
[  651.011250][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[  651.180329][T18157] netlink: 'syz.0.4182': attribute type 10 has an invalid length.
[  651.196365][T18157] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4182'.
[  651.346500][T18163] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4184'.
[  651.356230][T18163] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4184'.
[  652.007695][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4194'.
[  652.088721][T18190] netlink: 'syz.3.4194': attribute type 10 has an invalid length.
[  652.106725][T18190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4194'.
[  652.147581][T18196] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4197'.
[  652.300522][T18204] netlink: 'syz.0.4200': attribute type 21 has an invalid length.
[  652.328053][T18204] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4200'.
[  652.339430][T18204] netlink: 'syz.0.4200': attribute type 4 has an invalid length.
[  652.363951][T18204] netlink: 'syz.0.4200': attribute type 5 has an invalid length.
[  652.372549][T18204] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4200'.
[  652.512709][T18214] netlink: 'syz.2.4205': attribute type 10 has an invalid length.
[  652.718846][T18222] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4209'.
[  652.820048][T18219] netlink: 'syz.3.4208': attribute type 10 has an invalid length.
[  653.728711][T18262] netlink: 'syz.0.4223': attribute type 10 has an invalid length.
[  653.823754][T18262] team0: Device hsr_slave_0 failed to register rx_handler
[  654.858874][T18315] netlink: 'syz.2.4240': attribute type 10 has an invalid length.
[  655.301155][T18336] netlink: 'syz.3.4246': attribute type 10 has an invalid length.
[  655.646613][T18357] netlink: 'syz.0.4253': attribute type 21 has an invalid length.
[  655.657403][T18357] netlink: 'syz.0.4253': attribute type 7 has an invalid length.
[  656.142231][T18377] netlink: 'syz.3.4260': attribute type 4 has an invalid length.
[  656.150777][T18377] __nla_validate_parse: 7 callbacks suppressed
[  656.150788][T18377] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4260'.
[  656.647093][T18389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4264'.
[  656.660309][T18391] netlink: 'syz.3.4265': attribute type 10 has an invalid length.
[  656.782793][T18395] netlink: 'syz.3.4267': attribute type 9 has an invalid length.
[  656.791840][T18395] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4267'.
[  656.829544][T18397] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4268'.
[  656.848739][T18397] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.4268'.
[  657.426556][T18415] netlink: 'syz.1.4274': attribute type 10 has an invalid length.
[  657.436001][T18415] team0: Device dummy0 is up. Set it down before adding it as a team port
[  658.791360][T18451] FAULT_INJECTION: forcing a failure.
[  658.791360][T18451] name failslab, interval 1, probability 0, space 0, times 0
[  658.807114][T18451] CPU: 1 PID: 18451 Comm: syz.1.4288 Not tainted syzkaller #0
[  658.814637][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  658.824720][T18451] Call Trace:
[  658.828023][T18451]  <TASK>
[  658.830975][T18451]  dump_stack_lvl+0x18c/0x250
[  658.835692][T18451]  ? show_regs_print_info+0x20/0x20
[  658.840915][T18451]  ? load_image+0x420/0x420
[  658.845444][T18451]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  658.851453][T18451]  ? lockdep_hardirqs_on+0x98/0x150
[  658.856680][T18451]  ? lock_chain_count+0x20/0x20
[  658.861527][T18451]  should_fail_ex+0x39d/0x4d0
[  658.866218][T18451]  should_failslab+0x9/0x20
[  658.870753][T18451]  slab_pre_alloc_hook+0x59/0x310
[  658.875806][T18451]  kmem_cache_alloc+0x5a/0x2d0
[  658.880595][T18451]  ? dst_alloc+0x105/0x170
[  658.885043][T18451]  dst_alloc+0x105/0x170
[  658.889321][T18451]  ip_route_output_key_hash_rcu+0x14f6/0x2370
[  658.895422][T18451]  ? ip_route_output_key_hash+0x13d/0x330
[  658.901164][T18451]  ip_route_output_key_hash+0x1f3/0x330
[  658.906712][T18451]  ? ip_route_input_rcu+0x30f0/0x30f0
[  658.912082][T18451]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  658.918246][T18451]  ip_route_output_flow+0x2a/0x150
[  658.923361][T18451]  ? security_sk_classify_flow+0x7b/0x90
[  658.928993][T18451]  udp_sendmsg+0x1603/0x23b0
[  658.933587][T18451]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  658.938441][T18451]  ? udp_cmsg_send+0x350/0x350
[  658.943208][T18451]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  658.949189][T18451]  ? lock_chain_count+0x20/0x20
[  658.954033][T18451]  ? inet_sendmsg+0x14b/0x2f0
[  658.958709][T18451]  ? __local_bh_enable_ip+0x13a/0x1c0
[  658.964075][T18451]  ? _local_bh_enable+0xa0/0xa0
[  658.968920][T18451]  ? do_raw_spin_unlock+0x121/0x230
[  658.974112][T18451]  ? inet_sendmsg+0x14b/0x2f0
[  658.978783][T18451]  ? inet_sendmsg+0x14b/0x2f0
[  658.983453][T18451]  ? inet_send_prepare+0x260/0x260
[  658.988582][T18451]  ____sys_sendmsg+0x5ba/0x960
[  658.993362][T18451]  ? __lock_acquire+0x7d40/0x7d40
[  658.998395][T18451]  ? __sys_sendmsg_sock+0x30/0x30
[  659.003416][T18451]  ? __import_iovec+0x3fa/0x850
[  659.008268][T18451]  ? import_iovec+0x73/0xa0
[  659.012767][T18451]  ___sys_sendmsg+0x2a6/0x360
[  659.017443][T18451]  ? __sys_sendmsg+0x2a0/0x2a0
[  659.022242][T18451]  __se_sys_sendmsg+0x1c2/0x2b0
[  659.027094][T18451]  ? __x64_sys_sendmsg+0x80/0x80
[  659.032042][T18451]  ? syscall_enter_from_user_mode+0x2e/0x80
[  659.037936][T18451]  do_syscall_64+0x55/0xa0
[  659.042342][T18451]  ? clear_bhb_loop+0x40/0x90
[  659.047012][T18451]  ? clear_bhb_loop+0x40/0x90
[  659.051683][T18451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  659.057569][T18451] RIP: 0033:0x7f6ff739c819
[  659.061978][T18451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.081579][T18451] RSP: 002b:00007f6ff82bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.089989][T18451] RAX: ffffffffffffffda RBX: 00007f6ff7615fa0 RCX: 00007f6ff739c819
[  659.097957][T18451] RDX: 0000000007000000 RSI: 0000200000000380 RDI: 0000000000000006
[  659.105923][T18451] RBP: 00007f6ff82bc090 R08: 0000000000000000 R09: 0000000000000000
[  659.113886][T18451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.121852][T18451] R13: 00007f6ff7616038 R14: 00007f6ff7615fa0 R15: 00007fff2a229618
[  659.129832][T18451]  </TASK>
[  659.209029][T18455] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4290'.
[  659.248173][T18455] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4290'.
[  659.285706][T18460] pim6reg1: entered promiscuous mode
[  659.291058][T18460] pim6reg1: entered allmulticast mode
[  659.421024][T18462] syzkaller0: entered allmulticast mode
[  661.658917][T18493] netlink: 'syz.2.4305': attribute type 21 has an invalid length.
[  661.667154][T18493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  661.674447][T18493] IPv6: NLM_F_CREATE should be set when creating new route
[  661.681765][T18493] IPv6: NLM_F_CREATE should be set when creating new route
[  661.689076][T18493] IPv6: NLM_F_CREATE should be set when creating new route
[  662.369357][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'.
[  662.388089][T18503] netlink: 'syz.1.4308': attribute type 10 has an invalid length.
[  662.403344][T18503] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4308'.
[  662.471853][T18511] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4312'.
[  662.504688][T18511] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.4312'.
[  662.917160][T18532] pim6reg1: entered promiscuous mode
[  662.922521][T18532] pim6reg1: entered allmulticast mode
[  663.198347][T18543] netlink: 'syz.2.4323': attribute type 10 has an invalid length.
[  663.223419][T18543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4323'.
[  663.234004][T18543] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  664.086084][T18574] netlink: 'syz.1.4336': attribute type 9 has an invalid length.
[  664.094206][T18574] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4336'.
[  664.206028][T18582] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4338'.
[  664.369128][T18590] netlink: 'syz.3.4341': attribute type 10 has an invalid length.
[  664.390519][T18590] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4341'.
[  665.340379][T18612] netlink: 'syz.2.4350': attribute type 10 has an invalid length.
[  665.576627][T18621] pim6reg1: entered promiscuous mode
[  665.593153][T18621] pim6reg1: entered allmulticast mode
[  665.881062][T18635] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.4359'.
[  665.926609][T18638] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4361'.
[  666.068192][T18646] C: renamed from team_slave_0 (while UP)
[  666.278975][T18650] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  666.698782][T18664] netlink: 'syz.1.4372': attribute type 10 has an invalid length.
[  666.836683][T18669] syzkaller0: entered promiscuous mode
[  666.842245][T18669] syzkaller0: entered allmulticast mode
[  666.955247][T18675] netlink: 'syz.0.4375': attribute type 9 has an invalid length.
[  667.282403][T18687] FAULT_INJECTION: forcing a failure.
[  667.282403][T18687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.295668][T18687] CPU: 1 PID: 18687 Comm: syz.0.4380 Not tainted syzkaller #0
[  667.303156][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  667.313240][T18687] Call Trace:
[  667.316562][T18687]  <TASK>
[  667.319497][T18687]  dump_stack_lvl+0x18c/0x250
[  667.324191][T18687]  ? show_regs_print_info+0x20/0x20
[  667.329394][T18687]  ? load_image+0x420/0x420
[  667.333909][T18687]  ? __might_fault+0xaa/0x120
[  667.338597][T18687]  ? __lock_acquire+0x7d40/0x7d40
[  667.343630][T18687]  should_fail_ex+0x39d/0x4d0
[  667.348316][T18687]  _copy_from_user+0x2f/0xe0
[  667.352927][T18687]  sock_do_ioctl+0x190/0x310
[  667.357582][T18687]  ? sock_show_fdinfo+0xb0/0xb0
[  667.362456][T18687]  sock_ioctl+0x5ba/0x7e0
[  667.366797][T18687]  ? sock_poll+0x3e0/0x3e0
[  667.371314][T18687]  ? bpf_lsm_file_ioctl+0x9/0x10
[  667.376252][T18687]  ? security_file_ioctl+0x80/0xa0
[  667.381363][T18687]  ? sock_poll+0x3e0/0x3e0
[  667.385786][T18687]  __se_sys_ioctl+0xfd/0x170
[  667.390398][T18687]  do_syscall_64+0x55/0xa0
[  667.394817][T18687]  ? clear_bhb_loop+0x40/0x90
[  667.399500][T18687]  ? clear_bhb_loop+0x40/0x90
[  667.404202][T18687]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.410129][T18687] RIP: 0033:0x7fb45eb9c819
[  667.414563][T18687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.434197][T18687] RSP: 002b:00007fb45cdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  667.442620][T18687] RAX: ffffffffffffffda RBX: 00007fb45ee16090 RCX: 00007fb45eb9c819
[  667.450594][T18687] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a
[  667.458607][T18687] RBP: 00007fb45cdd5090 R08: 0000000000000000 R09: 0000000000000000
[  667.466586][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.474559][T18687] R13: 00007fb45ee16128 R14: 00007fb45ee16090 R15: 00007ffe6763f788
[  667.482574][T18687]  </TASK>
[  667.819958][T18696] netlink: 'syz.2.4384': attribute type 10 has an invalid length.
[  667.828886][T18696] team0: Device dummy0 is up. Set it down before adding it as a team port
[  668.793112][T18737] syz.0.4401[18737] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  668.794130][T18737] syz.0.4401[18737] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.189866][T18754] __nla_validate_parse: 5 callbacks suppressed
[  669.189902][T18754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4409'.
[  669.220991][T18754] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4409'.
[  669.481383][T18768] netlink: 'syz.0.4413': attribute type 10 has an invalid length.
[  669.495044][T18770] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  669.598111][T18771] pim6reg1: entered promiscuous mode
[  669.604318][T18771] pim6reg1: entered allmulticast mode
[  669.722815][T18773] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4416'.
[  670.075947][T18781] syzkaller0: entered allmulticast mode
[  670.835425][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4427'.
[  670.942413][T18797] netlink: 'syz.0.4427': attribute type 10 has an invalid length.
[  670.955174][T18797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4427'.
[  671.226909][T18809] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4431'.
[  671.253585][T18809] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.4431'.
[  671.435379][T18813] syz.1.4432: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  671.485932][T18813] CPU: 0 PID: 18813 Comm: syz.1.4432 Not tainted syzkaller #0
[  671.493465][T18813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  671.503552][T18813] Call Trace:
[  671.503624][T18816] delete_channel: no stack
[  671.506831][T18813]  <TASK>
[  671.506841][T18813]  dump_stack_lvl+0x18c/0x250
[  671.506873][T18813]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  671.525103][T18813]  ? show_regs_print_info+0x20/0x20
[  671.530346][T18813]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  671.536560][T18813]  warn_alloc+0x246/0x340
[  671.540923][T18813]  ? stack_trace_save+0xaa/0x100
[  671.545875][T18813]  ? zone_watermark_ok_safe+0x230/0x230
[  671.551435][T18813]  ? kasan_set_track+0x5f/0x70
[  671.556202][T18813]  ? kasan_set_track+0x4e/0x70
[  671.560971][T18813]  ? __kasan_kmalloc+0x8f/0xa0
[  671.565731][T18813]  ? xsk_init_queue+0xad/0x100
[  671.570496][T18813]  ? xsk_setsockopt+0x4e5/0x760
[  671.575348][T18813]  ? do_sock_setsockopt+0x175/0x1a0
[  671.580546][T18813]  ? __x64_sys_setsockopt+0x182/0x200
[  671.585923][T18813]  __vmalloc_node_range+0x126/0x1330
[  671.591239][T18813]  ? free_vm_area+0x50/0x50
[  671.595752][T18813]  vmalloc_user+0x74/0x80
[  671.600083][T18813]  ? xskq_create+0xbf/0x170
[  671.604585][T18813]  xskq_create+0xbf/0x170
[  671.608915][T18813]  xsk_init_queue+0xad/0x100
[  671.613510][T18813]  xsk_setsockopt+0x4e5/0x760
[  671.618198][T18813]  ? xsk_poll+0x680/0x680
[  671.622531][T18813]  ? __fget_files+0x28/0x4b0
[  671.627122][T18813]  ? __fget_files+0x28/0x4b0
[  671.631718][T18813]  ? aa_sock_opt_perm+0x74/0x100
[  671.636658][T18813]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  671.642201][T18813]  ? security_socket_setsockopt+0x7e/0xa0
[  671.647921][T18813]  ? xsk_poll+0x680/0x680
[  671.652257][T18813]  do_sock_setsockopt+0x175/0x1a0
[  671.657288][T18813]  ? __fdget+0x180/0x210
[  671.661543][T18813]  __x64_sys_setsockopt+0x182/0x200
[  671.666745][T18813]  do_syscall_64+0x55/0xa0
[  671.671155][T18813]  ? clear_bhb_loop+0x40/0x90
[  671.675834][T18813]  ? clear_bhb_loop+0x40/0x90
[  671.680522][T18813]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.686420][T18813] RIP: 0033:0x7f6ff739c819
[  671.690836][T18813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.710451][T18813] RSP: 002b:00007f6ff82bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  671.718958][T18813] RAX: ffffffffffffffda RBX: 00007f6ff7615fa0 RCX: 00007f6ff739c819
[  671.726933][T18813] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  671.734913][T18813] RBP: 00007f6ff7432c91 R08: 0000000000000004 R09: 0000000000000000
[  671.742886][T18813] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  671.750853][T18813] R13: 00007f6ff7616038 R14: 00007f6ff7615fa0 R15: 00007fff2a229618
[  671.758835][T18813]  </TASK>
[  671.956113][T18813] Mem-Info:
[  671.959741][T18813] active_anon:24465 inactive_anon:0 isolated_anon:0
[  671.959741][T18813]  active_file:19201 inactive_file:40175 isolated_file:0
[  671.959741][T18813]  unevictable:768 dirty:313 writeback:0
[  671.959741][T18813]  slab_reclaimable:11082 slab_unreclaimable:93892
[  671.959741][T18813]  mapped:35950 shmem:17624 pagetables:572
[  671.959741][T18813]  sec_pagetables:0 bounce:0
[  671.959741][T18813]  kernel_misc_reclaimable:0
[  671.959741][T18813]  free:1328653 free_pcp:8146 free_cma:0
[  672.015504][T18813] Node 0 active_anon:98380kB inactive_anon:0kB active_file:76804kB inactive_file:160496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105816kB dirty:1252kB writeback:0kB shmem:69572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no
[  672.052100][T18813] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  672.085615][T18813] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  672.115053][T18813] lowmem_reserve[]: 0 2521 2522 2522 2522
[  672.121330][T18813] Node 0 DMA32 free:1400028kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:98044kB inactive_anon:0kB active_file:76804kB inactive_file:159672kB unevictable:1536kB writepending:1252kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:17496kB local_pcp:13332kB free_cma:0kB
[  672.161513][T18813] lowmem_reserve[]: 0 0 0 0 0
[  672.167482][T18813] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  672.199035][T18813] lowmem_reserve[]: 0 0 0 0 0
[  672.209014][T18813] Node 1 Normal free:3898496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:4800kB free_cma:0kB
[  672.241249][T18813] lowmem_reserve[]: 0 0 0 0 0
[  672.247430][T18813] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  672.263884][T18832] pim6reg1: entered promiscuous mode
[  672.269239][T18832] pim6reg1: entered allmulticast mode
[  672.275847][T18813] Node 0 DMA32: 1959*4kB (UM) 478*8kB (UM) 497*16kB (U) 280*32kB (U) 820*64kB (UE) 973*128kB (UME) 389*256kB (UM) 124*512kB (UM) 47*1024kB (UME) 40*2048kB (UME) 220*4096kB (UM) = 1399836kB
[  672.296318][T18813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  672.309430][T18813] Node 1 Normal: 246*4kB (UME) 53*8kB (UME) 40*16kB (UME) 138*32kB (UME) 45*64kB (UE) 14*128kB (UME) 3*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3898496kB
[  672.327810][T18813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  672.338206][T18813] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  672.348158][T18813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  672.359995][T18813] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  672.410470][T18813] 71603 total pagecache pages
[  672.423989][T18813] 0 pages in swap cache
[  672.438495][T18813] Free swap  = 124996kB
[  672.442713][T18813] Total swap = 124996kB
[  672.459960][T18813] 2097051 pages RAM
[  672.486861][T18813] 0 pages HighMem/MovableOnly
[  672.491604][T18813] 416926 pages reserved
[  672.588679][T18813] 0 pages cma reserved
[  672.781279][T18842] netlink: 'syz.2.4441': attribute type 10 has an invalid length.
[  672.808079][T18842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4441'.
[  672.845305][T18842] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  673.469868][T18861] netlink: 'syz.1.4450': attribute type 10 has an invalid length.
[  673.478271][T18861] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4450'.
[  673.906706][T18870] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4453'.
[  674.041182][T18879] netlink: 'syz.3.4456': attribute type 10 has an invalid length.
[  674.287634][T18886] delete_channel: no stack
[  674.531125][T18901] pim6reg1: entered promiscuous mode
[  674.543519][T18901] pim6reg1: entered allmulticast mode
[  674.946848][T18913] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4467'.
[  675.136749][T18921] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4478'.
[  675.162521][T18917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  675.188241][T18921] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.4478'.
[  675.198658][T18919] netlink: 'syz.1.4477': attribute type 9 has an invalid length.
[  675.208380][T18919] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4477'.
[  675.460758][T18926] delete_channel: no stack
[  675.539369][T18930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4472'.
[  675.680157][T18938] netlink: 'syz.0.4475': attribute type 10 has an invalid length.
[  675.934804][T18946] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4482'.
[  675.974919][T18950] netlink: 'syz.3.4483': attribute type 21 has an invalid length.
[  676.024606][T18950] syzkaller0: entered promiscuous mode
[  676.030143][T18950] syzkaller0: entered allmulticast mode
[  676.327961][T18965] netlink: 'syz.1.4488': attribute type 10 has an invalid length.
[  676.336596][T18965] team0: Device dummy0 is up. Set it down before adding it as a team port
[  676.533443][T18973] netlink: 'syz.1.4491': attribute type 21 has an invalid length.
[  676.541542][T18973] netlink: 'syz.1.4491': attribute type 7 has an invalid length.
[  676.587569][T18975] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4492'.
[  676.862452][T18985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  677.047210][T18991] FAULT_INJECTION: forcing a failure.
[  677.047210][T18991] name failslab, interval 1, probability 0, space 0, times 0
[  677.060183][T18991] CPU: 0 PID: 18991 Comm: syz.3.4496 Not tainted syzkaller #0
[  677.067667][T18991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  677.077724][T18991] Call Trace:
[  677.081000][T18991]  <TASK>
[  677.083948][T18991]  dump_stack_lvl+0x18c/0x250
[  677.088671][T18991]  ? show_regs_print_info+0x20/0x20
[  677.093911][T18991]  ? load_image+0x420/0x420
[  677.098451][T18991]  ? __lock_acquire+0x7d40/0x7d40
[  677.103515][T18991]  should_fail_ex+0x39d/0x4d0
[  677.108228][T18991]  should_failslab+0x9/0x20
[  677.112760][T18991]  slab_pre_alloc_hook+0x59/0x310
[  677.117827][T18991]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  677.124433][T18991]  ? qdisc_alloc+0x94/0xa50
[  677.128936][T18991]  ? qdisc_alloc+0x94/0xa50
[  677.133435][T18991]  __kmem_cache_alloc_node+0x53/0x250
[  677.138817][T18991]  ? qdisc_alloc+0x94/0xa50
[  677.143314][T18991]  __kmalloc_node+0xa4/0x230
[  677.147923][T18991]  qdisc_alloc+0x94/0xa50
[  677.152258][T18991]  qdisc_create_dflt+0x63/0x430
[  677.157111][T18991]  dev_activate+0x397/0x11a0
[  677.161709][T18991]  __dev_open+0x347/0x430
[  677.166039][T18991]  ? dev_open+0x190/0x190
[  677.170371][T18991]  __dev_change_flags+0x211/0x6a0
[  677.175403][T18991]  ? dev_get_flags+0x1c0/0x1c0
[  677.180164][T18991]  ? mutex_lock_nested+0x20/0x20
[  677.185104][T18991]  dev_change_flags+0x88/0x1a0
[  677.189870][T18991]  dev_ioctl+0x7b4/0x1140
[  677.194201][T18991]  sock_do_ioctl+0x239/0x310
[  677.198801][T18991]  ? sock_show_fdinfo+0xb0/0xb0
[  677.203660][T18991]  sock_ioctl+0x5ba/0x7e0
[  677.207988][T18991]  ? sock_poll+0x3e0/0x3e0
[  677.212408][T18991]  ? bpf_lsm_file_ioctl+0x9/0x10
[  677.217339][T18991]  ? security_file_ioctl+0x80/0xa0
[  677.222442][T18991]  ? sock_poll+0x3e0/0x3e0
[  677.226859][T18991]  __se_sys_ioctl+0xfd/0x170
[  677.231456][T18991]  do_syscall_64+0x55/0xa0
[  677.235868][T18991]  ? clear_bhb_loop+0x40/0x90
[  677.240542][T18991]  ? clear_bhb_loop+0x40/0x90
[  677.245220][T18991]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  677.251109][T18991] RIP: 0033:0x7f0cb079c819
[  677.255524][T18991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.275125][T18991] RSP: 002b:00007f0cb15a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  677.283539][T18991] RAX: ffffffffffffffda RBX: 00007f0cb0a16090 RCX: 00007f0cb079c819
[  677.291505][T18991] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a
[  677.299473][T18991] RBP: 00007f0cb15a3090 R08: 0000000000000000 R09: 0000000000000000
[  677.307443][T18991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.315414][T18991] R13: 00007f0cb0a16128 R14: 00007f0cb0a16090 R15: 00007ffd9a685dd8
[  677.323398][T18991]  </TASK>
[  677.351895][T18991] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  677.360255][T18991] syzkaller0: entered promiscuous mode
[  677.367631][T18991] syzkaller0: entered allmulticast mode
[  677.375171][T18993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4498'.
[  677.392047][T18993] netlink: 'syz.2.4498': attribute type 17 has an invalid length.
[  677.401413][T18993] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4498'.
[  677.412398][T18993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  677.776057][T19008] bond0: (slave bond_slave_0): Releasing backup interface
[  678.253796][T19026] validate_nla: 1 callbacks suppressed
[  678.253813][T19026] netlink: 'syz.2.4511': attribute type 29 has an invalid length.
[  678.268491][T19026] netlink: 'syz.2.4511': attribute type 29 has an invalid length.
[  678.439404][T19037] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4515'.
[  679.176544][T19069] netlink: 'syz.3.4528': attribute type 22 has an invalid length.
[  681.120249][T19109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  682.107702][T19139] pim6reg1: entered promiscuous mode
[  682.114086][T19139] pim6reg1: entered allmulticast mode
[  682.663845][T19146] bridge_slave_0: entered allmulticast mode
[  682.706236][T19146] netlink: 'syz.0.4552': attribute type 2 has an invalid length.
[  682.722287][T19146] __nla_validate_parse: 2 callbacks suppressed
[  682.722305][T19146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4552'.
[  683.210861][T19173] netlink: 'syz.3.4562': attribute type 10 has an invalid length.
[  683.414767][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'.
[  683.571159][T19188] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4569'.
[  683.687911][T19184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  684.389081][T19206] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4575'.
[  684.424178][T19206] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.4575'.
[  685.061118][T19225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4580'.
[  685.268362][T19233] netlink: 'syz.2.4583': attribute type 10 has an invalid length.
[  685.372500][T19233] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  685.475125][T19239] netlink: 'syz.0.4586': attribute type 10 has an invalid length.
[  685.483022][T19239] team0: Device dummy0 is up. Set it down before adding it as a team port
[  685.651476][T19246] netlink: 'syz.1.4590': attribute type 21 has an invalid length.
[  685.663322][T19246] netlink: 'syz.1.4590': attribute type 7 has an invalid length.
[  685.887700][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  685.898817][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  685.955803][T19252] can: request_module (can-proto-0) failed.
[  686.106916][T19258] syzkaller0: entered promiscuous mode
[  686.112463][T19258] syzkaller0: entered allmulticast mode
[  686.373503][T19264] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4595'.
[  687.544381][T19289] syzkaller0: entered promiscuous mode
[  687.549920][T19289] syzkaller0: entered allmulticast mode
[  688.477656][T19291] netlink: 'syz.0.4606': attribute type 4 has an invalid length.
[  688.536027][T19291] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4606'.
[  688.585927][T19291] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  690.560901][T19336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4621'.
[  690.598146][T19336] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4621'.
[  691.072703][T19349] netlink: 'syz.0.4627': attribute type 10 has an invalid length.
[  691.124470][T19349] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4627'.
[  692.671496][T19352] netlink: 'syz.0.4627': attribute type 4 has an invalid length.
[  693.957795][T19403] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4643'.
[  693.993360][T19403] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4643'.
[  694.207423][T19405] bridge_slave_0: entered allmulticast mode
[  694.221286][T19405] netlink: 'syz.1.4644': attribute type 2 has an invalid length.
[  694.229498][T19405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4644'.
[  695.378282][T19441] pim6reg1: entered promiscuous mode
[  695.403401][T19441] pim6reg1: entered allmulticast mode
[  695.701930][T19446] netlink: 'syz.2.4657': attribute type 1 has an invalid length.
[  695.711980][T19446] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4657'.
[  695.741942][T19446] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4657'.
[  695.802985][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'.
[  695.820950][T19447] netlink: 'syz.1.4656': attribute type 10 has an invalid length.
[  695.863430][T19447] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4656'.
[  695.936020][T19446] can: request_module (can-proto-0) failed.
[  696.088517][T19453] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4659'.
[  696.164649][T19453] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4659'.
[  696.699036][T19471] syz.1.4667[19471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  696.699559][T19471] syz.1.4667[19471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  697.942433][T19489] pim6reg1: entered promiscuous mode
[  697.964019][T19489] pim6reg1: entered allmulticast mode
[  699.504714][T19516] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4681'.
[  699.565024][T19517] netlink: 'syz.3.4680': attribute type 10 has an invalid length.
[  699.621943][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4680'.
[  699.656946][T19517] ipvlan1: entered promiscuous mode
[  699.703908][T19517] ipvlan1: entered allmulticast mode
[  699.723573][T19517] veth0_vlan: entered allmulticast mode
[  699.784134][T19517] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  700.000524][T19518] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4681'.
[  700.082435][T19516] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4681'.
[  700.562545][T19524] netlink: 'syz.3.4684': attribute type 10 has an invalid length.
[  702.708100][T19552] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4694'.
[  702.923544][T19552] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4694'.
[  704.390089][T19572] pim6reg1: entered promiscuous mode
[  704.425970][T19572] pim6reg1: entered allmulticast mode
[  705.230516][T19588] netlink: 'syz.3.4706': attribute type 21 has an invalid length.
[  705.248730][T19588] netlink: 'syz.3.4706': attribute type 7 has an invalid length.
[  706.536840][T19607] netlink: 'syz.3.4713': attribute type 3 has an invalid length.
[  706.608151][T19607] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4713'.
[  708.092927][T19623] netlink: 'syz.1.4719': attribute type 2 has an invalid length.
[  708.125139][T19623] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4719'.
[  708.185245][T19623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4719'.
[  709.006891][T19635] syzkaller0: entered promiscuous mode
[  709.012441][T19635] syzkaller0: entered allmulticast mode
[  709.102469][T19637] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4724'.
[  709.997056][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  710.007320][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  710.037833][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  710.063560][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  710.071477][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  710.094072][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  711.102844][T19671] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4736'.
[  711.122830][T19671] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4736'.
[  711.160762][T19653] chnl_net:caif_netlink_parms(): no params data found
[  711.276815][ T7969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.312438][T19677] netlink: 'syz.0.4738': attribute type 1 has an invalid length.
[  711.360098][T19677] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4738'.
[  711.492628][ T7969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.656533][ T7969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.865704][ T7969] bond0: (slave netdevsim0): Releasing backup interface
[  711.895684][ T7969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.947114][T19653] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.994218][T19653] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.012084][T19653] bridge_slave_0: entered allmulticast mode
[  712.019589][T19653] bridge_slave_0: entered promiscuous mode
[  712.028893][T19653] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.046542][T19653] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.052576][T19694] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4744'.
[  712.083691][T19653] bridge_slave_1: entered allmulticast mode
[  712.110957][T19653] bridge_slave_1: entered promiscuous mode
[  712.202521][T19653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.214098][ T5769] Bluetooth: hci0: command tx timeout
[  712.239681][T19653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.378518][T19653] team0: Port device team_slave_0 added
[  712.431938][T19653] team0: Port device team_slave_1 added
[  712.504286][T19653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.511300][T19653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.541506][T19653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.569250][T19653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.583334][T19653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.615149][T19653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.703677][ T7969] ip6gretap0 (unregistering): left allmulticast mode
[  712.710506][ T7969] ip6gretap0 (unregistering): left promiscuous mode
[  712.719775][ T7969] : port 1(ip6gretap0) entered disabled state
[  712.909204][T19653] hsr_slave_0: entered promiscuous mode
[  712.925976][T19653] hsr_slave_1: entered promiscuous mode
[  712.932930][T19653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  712.945801][T19653] Cannot create hsr debugfs directory
[  714.058957][T19750] FAULT_INJECTION: forcing a failure.
[  714.058957][T19750] name failslab, interval 1, probability 0, space 0, times 0
[  714.104177][T19750] CPU: 1 PID: 19750 Comm: syz.0.4761 Not tainted syzkaller #0
[  714.111709][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  714.121786][T19750] Call Trace:
[  714.125085][T19750]  <TASK>
[  714.128029][T19750]  dump_stack_lvl+0x18c/0x250
[  714.132737][T19750]  ? show_regs_print_info+0x20/0x20
[  714.137967][T19750]  ? load_image+0x420/0x420
[  714.142511][T19750]  should_fail_ex+0x39d/0x4d0
[  714.147224][T19750]  should_failslab+0x9/0x20
[  714.151755][T19750]  slab_pre_alloc_hook+0x59/0x310
[  714.156822][T19750]  kmem_cache_alloc+0x5a/0x2d0
[  714.161618][T19750]  ? __nf_conntrack_alloc+0x99/0x380
[  714.166928][T19750]  __nf_conntrack_alloc+0x99/0x380
[  714.172062][T19750]  init_conntrack+0x177/0xf10
[  714.176756][T19750]  ? early_drop+0x7f0/0x7f0
[  714.181279][T19750]  ? nf_conntrack_in+0x932/0x15c0
[  714.186316][T19750]  nf_conntrack_in+0xc06/0x15c0
[  714.191200][T19750]  ? nf_ct_pernet+0x270/0x270
[  714.195897][T19750]  ? ipt_do_table+0x2c1/0x15e0
[  714.200682][T19750]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  714.206863][T19750]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  714.212332][T19750]  ? ipv4_conntrack_local+0x123/0x200
[  714.217720][T19750]  ? ipv4_conntrack_in+0x20/0x20
[  714.222674][T19750]  nf_hook_slow+0xbd/0x200
[  714.227131][T19750]  ? nf_hook+0x390/0x390
[  714.231383][T19750]  nf_hook+0x228/0x390
[  714.235465][T19750]  ? nf_hook+0xa2/0x390
[  714.239633][T19750]  ? __ip_local_out+0x5f0/0x5f0
[  714.244504][T19750]  ? nf_hook+0x390/0x390
[  714.248757][T19750]  ? ip_fast_csum+0x1ee/0x2b0
[  714.253446][T19750]  __ip_local_out+0x4db/0x5f0
[  714.258129][T19750]  ? nf_hook+0x390/0x390
[  714.262381][T19750]  ip_send_skb+0x4c/0x1d0
[  714.266733][T19750]  udp_send_skb+0xa37/0x13a0
[  714.271367][T19750]  udp_sendmsg+0x1b16/0x23b0
[  714.275990][T19750]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  714.280863][T19750]  ? udp_cmsg_send+0x350/0x350
[  714.285651][T19750]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  714.291653][T19750]  ? lock_chain_count+0x20/0x20
[  714.296504][T19750]  ? inet_sendmsg+0x14b/0x2f0
[  714.301180][T19750]  ? __local_bh_enable_ip+0x13a/0x1c0
[  714.306544][T19750]  ? _local_bh_enable+0xa0/0xa0
[  714.311387][T19750]  ? inet_sendmsg+0x14b/0x2f0
[  714.316064][T19750]  ? inet_sendmsg+0x14b/0x2f0
[  714.320738][T19750]  ? inet_send_prepare+0x260/0x260
[  714.325847][T19750]  ____sys_sendmsg+0x5ba/0x960
[  714.330606][T19750]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  714.336759][T19750]  ? __sys_sendmsg_sock+0x30/0x30
[  714.341769][T19750]  ? __import_iovec+0x3fa/0x850
[  714.346620][T19750]  ? import_iovec+0x73/0xa0
[  714.351117][T19750]  ___sys_sendmsg+0x2a6/0x360
[  714.355790][T19750]  ? __sys_sendmsg+0x2a0/0x2a0
[  714.360561][T19750]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  714.366816][T19750]  __se_sys_sendmsg+0x1c2/0x2b0
[  714.371674][T19750]  ? __x64_sys_sendmsg+0x80/0x80
[  714.376616][T19750]  ? lockdep_hardirqs_on+0x98/0x150
[  714.381811][T19750]  do_syscall_64+0x55/0xa0
[  714.386220][T19750]  ? clear_bhb_loop+0x40/0x90
[  714.390890][T19750]  ? clear_bhb_loop+0x40/0x90
[  714.395563][T19750]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  714.401454][T19750] RIP: 0033:0x7fb45eb9c819
[  714.405865][T19750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.425469][T19750] RSP: 002b:00007fb45cdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.433881][T19750] RAX: ffffffffffffffda RBX: 00007fb45ee15fa0 RCX: 00007fb45eb9c819
[  714.441846][T19750] RDX: 0000000007000000 RSI: 0000200000000380 RDI: 0000000000000006
[  714.449810][T19750] RBP: 00007fb45cdf6090 R08: 0000000000000000 R09: 0000000000000000
[  714.457772][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.465735][T19750] R13: 00007fb45ee16038 R14: 00007fb45ee15fa0 R15: 00007ffe6763f788
[  714.473711][T19750]  </TASK>
[  714.514980][ T5769] Bluetooth: hci0: command tx timeout
[  714.547680][T19653] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  714.709767][ T7969] bond0: (slave wlan1): Releasing backup interface
[  714.759881][T19765] netlink: 'syz.1.4762': attribute type 10 has an invalid length.
[  714.783940][T19765] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4762'.
[  714.793071][T19653] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  714.819675][T19763] pim6reg1: entered promiscuous mode
[  714.836192][T19763] pim6reg1: entered allmulticast mode
[  714.862927][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'.
[  714.919022][T19653] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  714.944799][T19653] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  715.122216][T19773] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4765'.
[  715.145390][ T7969] veth1_macvtap: left promiscuous mode
[  715.151231][ T7969] veth1_vlan: left promiscuous mode
[  715.170813][ T7969] veth0_vlan: left promiscuous mode
[  715.527591][ T7969] team0 (unregistering): Port device geneve1 removed
[  716.207567][ T7969] team0 (unregistering): Port device team_slave_1 removed
[  716.260407][ T7969] team0 (unregistering): Port device team_slave_0 removed
[  716.325416][ T7969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.524807][ T5769] Bluetooth: hci0: command tx timeout
[  716.696063][ T7969] bond0 (unregistering): Released all slaves
[  716.728151][T19773] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4765'.
[  716.738845][T19775] netlink: 'syz.0.4766': attribute type 10 has an invalid length.
[  716.766553][T19775] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link
[  716.934324][T19791] netlink: 'syz.3.4773': attribute type 21 has an invalid length.
[  717.079102][T19653] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.149235][T19653] 8021q: adding VLAN 0 to HW filter on device team0
[  717.178511][T16989] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.185731][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.210266][T16989] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.217458][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.601418][T19653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.641817][T19822] pim6reg1: entered promiscuous mode
[  717.648259][T19822] pim6reg1: entered allmulticast mode
[  717.685479][T19653] veth0_vlan: entered promiscuous mode
[  717.724027][T19653] veth1_vlan: entered promiscuous mode
[  717.752512][T19653] veth0_macvtap: entered promiscuous mode
[  717.769594][T19653] veth1_macvtap: entered promiscuous mode
[  717.799631][T19653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.812175][T19653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.827752][T19653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.846703][T19653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.857450][T19653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.873665][T19653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.892820][T19653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.907748][T19653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.918045][T19653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.929513][T19653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.038082][T16988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.064201][T16988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.107179][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.115888][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.603442][ T5769] Bluetooth: hci0: command tx timeout
[  718.659927][T19843] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4785'.
[  718.862071][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  718.872421][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  718.887072][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  718.904797][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  718.912810][ T5767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  718.922767][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  719.161802][T19847] chnl_net:caif_netlink_parms(): no params data found
[  719.330437][T19847] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.338698][T19847] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.352496][T19847] bridge_slave_0: entered allmulticast mode
[  719.360251][T19847] bridge_slave_0: entered promiscuous mode
[  719.369558][T19847] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.377005][T19847] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.384430][T19847] bridge_slave_1: entered allmulticast mode
[  719.391837][T19847] bridge_slave_1: entered promiscuous mode
[  719.430866][T19847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  719.444520][T19847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  719.486551][T19847] team0: Port device team_slave_0 added
[  719.496220][T19847] team0: Port device team_slave_1 added
[  719.527652][T19847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  719.534851][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.563892][T19847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  719.576816][T19876] netlink: 'syz.2.4793': attribute type 10 has an invalid length.
[  719.585807][T19876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4793'.
[  719.595092][T19876] ipvlan1: entered promiscuous mode
[  719.600327][T19876] ipvlan1: entered allmulticast mode
[  719.605705][T19876] veth0_vlan: entered allmulticast mode
[  719.613093][T19876] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  719.629386][T19847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  719.636642][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.667135][T19847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.724100][T19847] hsr_slave_0: entered promiscuous mode
[  719.731460][T19847] hsr_slave_1: entered promiscuous mode
[  719.738546][T19847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.747207][T19847] Cannot create hsr debugfs directory
[  719.756139][T19878] netlink: 'syz.2.4794': attribute type 10 has an invalid length.
[  719.944447][T19847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.079140][T19847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.289100][T19847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.339920][T19883] netlink: 'syz.1.4796': attribute type 21 has an invalid length.
[  720.409744][T19847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.442045][T19887] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4798'.
[  720.608061][T19847] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  720.622577][T19847] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  720.658533][T19847] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  720.711788][T19847] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  720.912397][T19896] netlink: 'syz.0.4802': attribute type 10 has an invalid length.
[  720.920662][T19896] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4802'.
[  720.978423][T19847] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.000022][T19847] 8021q: adding VLAN 0 to HW filter on device team0
[  721.010242][ T5767] Bluetooth: hci2: command tx timeout
[  721.023940][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.031079][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.050427][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.057589][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  721.238653][T19847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.280681][T19847] veth0_vlan: entered promiscuous mode
[  721.291550][T19847] veth1_vlan: entered promiscuous mode
[  721.320140][T19847] veth0_macvtap: entered promiscuous mode
[  721.329327][T19847] veth1_macvtap: entered promiscuous mode
[  721.346263][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.358330][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.368378][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.378946][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.390745][T19847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.404112][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.415684][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.425801][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.436335][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.449427][T19847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.462006][T19847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.470881][T19847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.479645][T19847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.489111][T19847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.553089][ T7969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.564634][ T7969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.590507][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.598500][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.229700][T19928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4811'.
[  722.323272][T19930] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4812'.
[  722.435615][T19930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  722.688340][T19934] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4814'.
[  722.698975][T19934] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4814'.
[  723.085290][ T5767] Bluetooth: hci2: command tx timeout
[  723.135299][T19945] netlink: 'syz.3.4819': attribute type 10 has an invalid length.
[  723.400676][T19949] bridge0: port 3(veth0_to_bridge) entered blocking state
[  723.408875][T19949] bridge0: port 3(veth0_to_bridge) entered disabled state
[  723.420807][T19949] veth0_to_bridge: entered allmulticast mode
[  723.430116][T19949] veth0_to_bridge: entered promiscuous mode
[  723.443427][T19949] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  723.461658][T19949] bridge0: port 3(veth0_to_bridge) entered blocking state
[  723.469279][T19949] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  724.235922][T19963] bridge_slave_1: left allmulticast mode
[  724.243511][T19963] bridge_slave_1: left promiscuous mode
[  724.267614][T19963] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.303971][T19963] bridge_slave_0: left allmulticast mode
[  724.323781][T19963] bridge_slave_0: left promiscuous mode
[  724.341205][T19963] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.377193][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  724.386190][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  724.396002][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  724.407773][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  724.417477][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  724.425306][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  724.564537][T19965] netlink: 'syz.3.4827': attribute type 10 has an invalid length.
[  724.572421][T19965] team0: Device dummy0 is up. Set it down before adding it as a team port
[  724.668894][T16997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.787481][T16997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.036257][T16997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.167096][ T5767] Bluetooth: hci2: command tx timeout
[  725.255678][T16997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.332205][T19967] chnl_net:caif_netlink_parms(): no params data found
[  725.638927][T19967] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.673730][T19967] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.701477][T19967] bridge_slave_0: entered allmulticast mode
[  725.717822][T19967] bridge_slave_0: entered promiscuous mode
[  725.859711][T19967] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.943424][T19967] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.115831][T19967] bridge_slave_1: entered allmulticast mode
[  726.365703][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.383309][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.400517][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.418133][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.435501][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.452911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.468521][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.485858][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.503358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.520307][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  726.897903][T19967] bridge_slave_1: entered promiscuous mode
[  726.905369][ T5767] Bluetooth: hci4: command tx timeout
[  730.780085][ T5767] Bluetooth: hci2: command tx timeout
[  730.819327][ T5767] Bluetooth: hci4: command tx timeout
[  731.373853][    C0] net_ratelimit: 5258 callbacks suppressed
[  731.373872][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.393584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.406096][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.418554][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.419081][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  731.432218][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.456189][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.468675][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.481498][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  731.482351][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.579593][ T5769] Bluetooth: hci4: command tx timeout
[  736.386757][    C0] net_ratelimit: 1013 callbacks suppressed
[  736.386840][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.393262][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  736.408801][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.436944][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.443806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  736.455883][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.479697][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.497895][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.509347][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  736.518749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.393310][    C1] net_ratelimit: 530 callbacks suppressed
[  741.393329][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  741.402656][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.415095][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.440197][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  741.452296][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.475527][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.486549][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  741.492321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.526578][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.526827][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  746.403243][    C1] net_ratelimit: 635 callbacks suppressed
[  746.403262][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  746.405437][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.433568][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  746.450631][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.460540][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  746.469664][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.493909][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.510289][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.531542][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  746.531729][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  750.429572][ T5767] Bluetooth: hci4: command tx timeout
[  751.418986][    C0] net_ratelimit: 577 callbacks suppressed
[  751.419092][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.433249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  751.440557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.472135][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.488522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.504402][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.513298][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  751.522903][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.554368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.567809][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  756.426542][    C0] net_ratelimit: 673 callbacks suppressed
[  756.426600][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.426845][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  756.436756][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.473943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.485511][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  756.491791][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.513298][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  756.515576][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.519803][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.557401][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  761.433378][    C0] net_ratelimit: 592 callbacks suppressed
[  761.433466][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.456059][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.473217][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  761.474925][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.503943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.524178][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  761.527290][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.554448][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.572617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.594742][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.445313][    C0] net_ratelimit: 653 callbacks suppressed
[  766.445366][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.464537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  766.471909][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.512507][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  766.516316][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.540772][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.553771][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  766.558713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.582004][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.601599][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  771.453405][    C1] net_ratelimit: 664 callbacks suppressed
[  771.453497][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  771.461610][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.465931][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.508997][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.517454][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  771.524408][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.559259][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.568975][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  771.588878][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.601104][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  776.472476][    C1] net_ratelimit: 613 callbacks suppressed
[  776.472495][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  776.473680][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.510170][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.511852][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  776.526209][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.557113][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.569810][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  776.579262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.625813][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  776.632059][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.480774][    C0] net_ratelimit: 565 callbacks suppressed
[  781.480857][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.505914][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.524439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.537575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  781.539798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.572310][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  781.574537][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.605753][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.613611][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  781.623813][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.498639][    C1] net_ratelimit: 615 callbacks suppressed
[  786.498657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  786.499766][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.527440][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  786.535872][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.562773][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.574998][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  786.577755][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.608325][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.625122][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.631816][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  791.506429][    C0] net_ratelimit: 659 callbacks suppressed
[  791.506510][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.525077][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  791.539224][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.556555][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.569281][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  791.571937][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.601208][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.618555][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.632264][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  791.635170][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.518515][    C1] net_ratelimit: 660 callbacks suppressed
[  796.518536][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  796.537502][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.575481][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.593626][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  796.602725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.632838][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  796.636974][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.705028][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.732735][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.742117][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  801.533788][    C0] net_ratelimit: 244 callbacks suppressed
[  801.533846][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.546133][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  801.561300][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.622856][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  801.633947][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.653251][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.653467][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  801.669265][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.708041][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.724468][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.550893][    C1] net_ratelimit: 599 callbacks suppressed
[  806.550913][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  806.556835][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.579644][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  806.587914][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.617147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.626588][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  806.634414][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.671413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  806.672657][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.703481][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.556615][    C1] net_ratelimit: 618 callbacks suppressed
[  811.556635][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  811.564368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.581619][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  811.593139][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.622409][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.640438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.643252][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  811.658553][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.685361][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.699913][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  816.570610][    C1] net_ratelimit: 633 callbacks suppressed
[  816.570630][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  816.571553][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  816.586404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.634690][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.643859][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  816.651368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.684310][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  816.684561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  816.705411][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.733323][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  821.587233][    C0] net_ratelimit: 687 callbacks suppressed
[  821.587314][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  821.603036][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  821.608492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  821.636616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  821.650109][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  821.652436][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  821.686693][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  821.698986][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  821.716070][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  821.725817][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  826.598346][    C1] net_ratelimit: 642 callbacks suppressed
[  826.598365][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  826.607306][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  826.635320][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  826.642881][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  826.687101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  826.698335][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  826.705375][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  826.760182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  826.763645][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  826.806826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  831.612062][    C1] net_ratelimit: 341 callbacks suppressed
[  831.612082][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  831.613572][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  831.646924][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  831.666481][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  831.668490][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  831.695807][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  831.713248][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  831.718846][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  831.729260][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  831.760951][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  836.616101][    C1] net_ratelimit: 593 callbacks suppressed
[  836.616156][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  836.622581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  836.654152][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  836.670907][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  836.671277][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  836.687350][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  836.719786][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  836.735806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  836.736173][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  836.764936][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.593229][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  838.600224][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P19967/1:b..l
[  838.608668][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=93613, q=400 ncpus=2)
[  838.616413][    C1] task:syz-executor    state:R  running task     stack:21704 pid:19967 ppid:19961  flags:0x00004000
[  838.628356][    C1] Call Trace:
[  838.631655][    C1]  <TASK>
[  838.634605][    C1]  __schedule+0x1553/0x45a0
[  838.639145][    C1]  ? mark_lock+0x94/0x320
[  838.643492][    C1]  ? mark_lock+0x94/0x320
[  838.647841][    C1]  ? asan.module_dtor+0x20/0x20
[  838.652707][    C1]  ? mark_lock+0x94/0x320
[  838.657060][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  838.663073][    C1]  ? preempt_schedule_irq+0xb4/0x150
[  838.668382][    C1]  preempt_schedule_irq+0xbf/0x150
[  838.673517][    C1]  ? preempt_schedule_notrace+0x110/0x110
[  838.679267][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  838.685093][    C1]  irqentry_exit+0x67/0x70
[  838.689523][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  838.695514][    C1] RIP: 0010:lock_acquire+0x208/0x420
[  838.700789][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[  838.720374][    C1] RSP: 0018:ffffc90003236660 EFLAGS: 00000206
[  838.726423][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 860a4c909676d700
[  838.734374][    C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0
[  838.742327][    C1] RBP: ffffc90003236770 R08: dffffc0000000000 R09: 1ffffffff22388a0
[  838.750278][    C1] R10: dffffc0000000000 R11: fffffbfff22388a1 R12: 1ffff92000646cd8
[  838.758227][    C1] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000
[  838.766197][    C1]  ? read_lock_is_recursive+0x20/0x20
[  838.771557][    C1]  ? deref_stack_reg+0x1bd/0x240
[  838.776475][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  838.782526][    C1]  is_bpf_text_address+0x47/0x2a0
[  838.787532][    C1]  ? is_bpf_text_address+0x26/0x2a0
[  838.792708][    C1]  ? is_bpf_text_address+0x26/0x2a0
[  838.797886][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  838.803959][    C1]  kernel_text_address+0xa0/0xd0
[  838.808883][    C1]  __kernel_text_address+0xd/0x30
[  838.813893][    C1]  unwind_get_return_address+0x5d/0xc0
[  838.819331][    C1]  ? stack_trace_save+0x100/0x100
[  838.824338][    C1]  arch_stack_walk+0x11d/0x190
[  838.829089][    C1]  stack_trace_save+0xaa/0x100
[  838.833835][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  838.838960][    C1]  kasan_set_track+0x4e/0x70
[  838.843552][    C1]  ? kasan_set_track+0x4e/0x70
[  838.848296][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  838.853045][    C1]  ? ipv6_add_dev+0x10a/0x11e0
[  838.857792][    C1]  ? addrconf_notify+0x67b/0x1010
[  838.862799][    C1]  ? notifier_call_chain+0x197/0x380
[  838.868067][    C1]  ? register_netdevice+0x16a5/0x1bb0
[  838.873419][    C1]  ? veth_newlink+0x5d3/0xc30
[  838.878078][    C1]  ? rtnl_newlink+0x1542/0x20a0
[  838.882925][    C1]  ? rtnetlink_rcv_msg+0x869/0xfa0
[  838.888013][    C1]  ? netlink_rcv_skb+0x241/0x4d0
[  838.892937][    C1]  ? netlink_unicast+0x751/0x8d0
[  838.897854][    C1]  ? netlink_sendmsg+0x8d0/0xbf0
[  838.902777][    C1]  ? __sys_sendto+0x4a9/0x6b0
[  838.907432][    C1]  ? __x64_sys_sendto+0xde/0xf0
[  838.912266][    C1]  ? do_syscall_64+0x55/0xa0
[  838.916832][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  838.922899][    C1]  __kasan_kmalloc+0x8f/0xa0
[  838.927473][    C1]  ipv6_add_dev+0x10a/0x11e0
[  838.932074][    C1]  addrconf_notify+0x67b/0x1010
[  838.936915][    C1]  notifier_call_chain+0x197/0x380
[  838.942016][    C1]  register_netdevice+0x16a5/0x1bb0
[  838.947232][    C1]  ? netif_stacked_transfer_operstate+0x210/0x210
[  838.953640][    C1]  ? dev_addr_check+0x20/0x240
[  838.958398][    C1]  ? netif_inherit_tso_max+0x1f8/0x340
[  838.963847][    C1]  veth_newlink+0x5d3/0xc30
[  838.968366][    C1]  ? veth_validate+0x1f0/0x1f0
[  838.973114][    C1]  ? rtnl_create_link+0x30e/0xd00
[  838.978114][    C1]  ? rtnl_newlink+0x1455/0x20a0
[  838.982944][    C1]  ? rtnetlink_rcv_msg+0x869/0xfa0
[  838.988034][    C1]  ? netlink_rcv_skb+0x241/0x4d0
[  838.992954][    C1]  ? netlink_unicast+0x751/0x8d0
[  838.997876][    C1]  ? __sys_sendto+0x4a9/0x6b0
[  839.002530][    C1]  ? __x64_sys_sendto+0xde/0xf0
[  839.007383][    C1]  ? do_syscall_64+0x55/0xa0
[  839.012009][    C1]  ? __asan_memcpy+0x40/0x70
[  839.016622][    C1]  ? alloc_netdev_mqs+0xc34/0x1040
[  839.021720][    C1]  ? validate_linkmsg+0x719/0x910
[  839.026729][    C1]  ? veth_validate+0x1f0/0x1f0
[  839.031482][    C1]  rtnl_newlink+0x1542/0x20a0
[  839.036146][    C1]  ? rtnl_newlink+0x531/0x20a0
[  839.040902][    C1]  ? rtnl_setlink+0x4e0/0x4e0
[  839.045559][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[  839.051708][    C1]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  839.056798][    C1]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  839.061933][    C1]  ? rtnl_setlink+0x4e0/0x4e0
[  839.066763][    C1]  rtnetlink_rcv_msg+0x869/0xfa0
[  839.071684][    C1]  ? rtnetlink_bind+0x80/0x80
[  839.076338][    C1]  ? mark_lock+0x94/0x320
[  839.080649][    C1]  ? __lock_acquire+0x1273/0x7d40
[  839.085652][    C1]  ? __kernel_text_address+0xd/0x30
[  839.090838][    C1]  ? mark_lock+0x94/0x320
[  839.095148][    C1]  ? mark_lock+0x94/0x320
[  839.099454][    C1]  ? __lock_acquire+0x1273/0x7d40
[  839.104461][    C1]  ? kmalloc_reserve+0x95/0x240
[  839.109291][    C1]  ? verify_lock_unused+0x140/0x140
[  839.114467][    C1]  ? verify_lock_unused+0x140/0x140
[  839.119650][    C1]  netlink_rcv_skb+0x241/0x4d0
[  839.124398][    C1]  ? rtnetlink_bind+0x80/0x80
[  839.129059][    C1]  ? netlink_ack+0x1180/0x1180
[  839.133814][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  839.138818][    C1]  ? net_generic+0x1e/0x240
[  839.143322][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  839.148509][    C1]  netlink_unicast+0x751/0x8d0
[  839.153266][    C1]  netlink_sendmsg+0x8d0/0xbf0
[  839.158019][    C1]  ? netlink_getsockopt+0x590/0x590
[  839.163203][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  839.168128][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  839.173396][    C1]  ? security_socket_sendmsg+0x80/0xa0
[  839.178854][    C1]  __sys_sendto+0x4a9/0x6b0
[  839.183344][    C1]  ? __ia32_sys_getpeername+0x90/0x90
[  839.188719][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  839.193923][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  839.199887][    C1]  ? lock_chain_count+0x20/0x20
[  839.204717][    C1]  __x64_sys_sendto+0xde/0xf0
[  839.209372][    C1]  do_syscall_64+0x55/0xa0
[  839.213765][    C1]  ? clear_bhb_loop+0x40/0x90
[  839.218424][    C1]  ? clear_bhb_loop+0x40/0x90
[  839.223086][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  839.228961][    C1] RIP: 0033:0x7f167d95d04e
[  839.233361][    C1] RSP: 002b:00007ffee71fbf98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  839.241756][    C1] RAX: ffffffffffffffda RBX: 0000555586fb9500 RCX: 00007f167d95d04e
[  839.249710][    C1] RDX: 0000000000000088 RSI: 00007f167e744670 RDI: 0000000000000003
[  839.257661][    C1] RBP: 0000000000000001 R08: 00007ffee71fc014 R09: 000000000000000c
[  839.265610][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  839.273578][    C1] R13: 0000000000000000 R14: 00007f167e744670 R15: 0000000000000000
[  839.281541][    C1]  </TASK>
[  839.284559][    C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g93613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  839.295768][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  839.305758][    C1] rcu: RCU grace-period kthread stack dump:
[  839.311661][    C1] task:rcu_preempt     state:R  running task     stack:26952 pid:17    ppid:2      flags:0x00004000
[  839.322473][    C1] Call Trace:
[  839.325768][    C1]  <TASK>
[  839.328714][    C1]  __schedule+0x1553/0x45a0
[  839.333263][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  839.339182][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  839.345105][    C1]  ? asan.module_dtor+0x20/0x20
[  839.349981][    C1]  ? enqueue_timer+0x4cd/0x550
[  839.354771][    C1]  ? __mod_timer+0x984/0xdb0
[  839.359388][    C1]  schedule+0xbd/0x170
[  839.363489][    C1]  schedule_timeout+0x188/0x2d0
[  839.368371][    C1]  ? console_conditional_schedule+0x40/0x40
[  839.374287][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  839.380210][    C1]  ? update_process_times+0x1b0/0x1b0
[  839.385611][    C1]  ? prepare_to_swait_event+0x339/0x360
[  839.391182][    C1]  rcu_gp_fqs_loop+0x313/0x1590
[  839.396067][    C1]  ? dump_blkd_tasks+0x810/0x810
[  839.401025][    C1]  ? rcu_gp_init+0x1560/0x1560
[  839.405799][    C1]  ? rcu_gp_cleanup+0xb41/0xc90
[  839.410667][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  839.415882][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  839.421099][    C1]  rcu_gp_kthread+0x9d/0x3b0
[  839.425709][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  839.430835][    C1]  ? __kthread_parkme+0x7a/0x1c0
[  839.435784][    C1]  ? __kthread_parkme+0x162/0x1c0
[  839.440831][    C1]  kthread+0x2fa/0x390
[  839.444914][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  839.450130][    C1]  ? kthread_blkcg+0xd0/0xd0
[  839.454740][    C1]  ret_from_fork+0x48/0x80
[  839.459173][    C1]  ? kthread_blkcg+0xd0/0xd0
[  839.463778][    C1]  ret_from_fork_asm+0x11/0x20
[  839.468570][    C1]  </TASK>
[  839.471597][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  839.477930][    C1] CPU: 1 PID: 19985 Comm: syz.2.4832 Not tainted syzkaller #0
[  839.485403][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  839.495470][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x89/0x120
[  839.502080][    C1] Code: 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 b4 8e 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 <4e> 8b 54 ce 10 65 44 8b 1d a2 8e 7c 7e 41 81 e3 00 01 ff 00 74 13
[  839.521699][    C1] RSP: 0018:ffffc900001f03d0 EFLAGS: 00000202
[  839.527784][    C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003
[  839.535763][    C1] RDX: ffffffff813b3f02 RSI: ffffffff8cfa07a0 RDI: 0000000000000004
[  839.543749][    C1] RBP: ffffc900001f0518 R08: ffff888026f80000 R09: 0000000000000007
[  839.551733][    C1] R10: 0000000000000008 R11: 0000000000000100 R12: ffffc900001f04c8
[  839.559721][    C1] R13: dffffc0000000000 R14: 0000000000000004 R15: ffffffff8f0e485e
[  839.567708][    C1] FS:  00007fcdf31886c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  839.576651][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  839.583247][    C1] CR2: 00007fcdf2617dac CR3: 0000000068bb1000 CR4: 00000000003506e0
[  839.591235][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  839.599218][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  839.607204][    C1] Call Trace:
[  839.610493][    C1]  <IRQ>
[  839.613351][    C1]  unwind_next_frame+0x742/0x2970
[  839.618404][    C1]  ? copy_process+0x16f7/0x3d80
[  839.623274][    C1]  ? copy_process+0x16f7/0x3d80
[  839.628135][    C1]  ? stack_trace_save+0x100/0x100
[  839.633176][    C1]  arch_stack_walk+0x144/0x190
[  839.637959][    C1]  ? copy_process+0x16f7/0x3d80
[  839.642830][    C1]  stack_trace_save+0xaa/0x100
[  839.647611][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  839.652749][    C1]  kasan_set_track+0x4e/0x70
[  839.657356][    C1]  ? kasan_set_track+0x4e/0x70
[  839.662132][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  839.667174][    C1]  ? slab_post_alloc_hook+0x6e/0x4b0
[  839.672478][    C1]  ? kmem_cache_alloc+0x11a/0x2d0
[  839.677523][    C1]  ? skb_clone+0x1eb/0x370
[  839.681957][    C1]  ? hsr_forward_skb+0xf4c/0x2140
[  839.687004][    C1]  ? send_hsr_supervision_frame+0x5fb/0xb90
[  839.692910][    C1]  ? hsr_announce+0x198/0x350
[  839.697608][    C1]  ? call_timer_fn+0x189/0x540
[  839.702380][    C1]  ? __run_timers+0x542/0x800
[  839.707071][    C1]  ? run_timer_softirq+0x67/0xf0
[  839.712021][    C1]  ? handle_softirqs+0x280/0x820
[  839.716970][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  839.721746][    C1]  ? irq_exit_rcu+0x9/0x20
[  839.726177][    C1]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  839.732001][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  839.738172][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x90/0x90
[  839.744432][    C1]  ? mm_counter_file+0x89/0x2c0
[  839.749291][    C1]  ? copy_page_range+0x1276/0x3670
[  839.754420][    C1]  ? copy_mm+0x11cb/0x1d50
[  839.758844][    C1]  ? copy_process+0x16f7/0x3d80
[  839.763739][    C1]  __kasan_slab_alloc+0x6c/0x80
[  839.768608][    C1]  slab_post_alloc_hook+0x6e/0x4b0
[  839.773744][    C1]  kmem_cache_alloc+0x11a/0x2d0
[  839.778611][    C1]  ? skb_clone+0x1eb/0x370
[  839.783048][    C1]  skb_clone+0x1eb/0x370
[  839.787308][    C1]  hsr_forward_skb+0xf4c/0x2140
[  839.792178][    C1]  ? hsr_forward_skb+0xa5/0x2140
[  839.797139][    C1]  ? prp_fill_frame_info+0x6f0/0x6f0
[  839.802438][    C1]  ? do_raw_spin_lock+0x11f/0x2c0
[  839.807480][    C1]  ? __asan_memset+0x22/0x40
[  839.812088][    C1]  ? __skb_pad+0x400/0x600
[  839.816519][    C1]  send_hsr_supervision_frame+0x5fb/0xb90
[  839.822265][    C1]  hsr_announce+0x198/0x350
[  839.826788][    C1]  ? read_lock_is_recursive+0x20/0x20
[  839.832171][    C1]  ? hsr_announce+0x84/0x350
[  839.836772][    C1]  ? hsr_dev_finalize+0x800/0x800
[  839.841808][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  839.845200][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  839.847793][    C1]  call_timer_fn+0x189/0x540
[  839.858625][    C1]  ? hsr_dev_finalize+0x800/0x800
[  839.863664][    C1]  ? call_timer_fn+0xd2/0x540
[  839.868351][    C1]  ? __run_timers+0x800/0x800
[  839.873052][    C1]  ? hsr_dev_finalize+0x800/0x800
[  839.878093][    C1]  __run_timers+0x542/0x800
[  839.882623][    C1]  ? detach_timer+0x2b0/0x2b0
[  839.887324][    C1]  run_timer_softirq+0x67/0xf0
[  839.892113][    C1]  handle_softirqs+0x280/0x820
[  839.895692][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  839.896885][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  839.907899][    C1]  ? do_softirq+0x1a0/0x1a0
[  839.912427][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  839.917650][    C1]  __irq_exit_rcu+0xd3/0x190
[  839.922256][    C1]  ? irq_exit_rcu+0x20/0x20
[  839.926779][    C1]  irq_exit_rcu+0x9/0x20
[  839.931033][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  839.936680][    C1]  </IRQ>
[  839.939618][    C1]  <TASK>
[  839.942563][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  839.948565][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80
[  839.955348][    C1] Code: c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0d a0 8f 7c 7e 65 8b 15 a1 8f 7c
[  839.974975][    C1] RSP: 0018:ffffc900032d7508 EFLAGS: 00000246
[  839.981062][    C1] RAX: 1ffffd40000e9b50 RBX: ffffea000074da80 RCX: 0000000000080000
[  839.989046][    C1] RDX: ffffc9000e4cd000 RSI: 00fff00000000000 RDI: ffffffffffffffff
[  839.997035][    C1] RBP: ffffc900032d7850 R08: ffffea000074dab3 R09: 1ffffd40000e9b56
[  840.005021][    C1] R10: dffffc0000000000 R11: fffff940000e9b57 R12: dffffc0000000000
[  840.013004][    C1] R13: 1ffffd40000e9b51 R14: ffffea000074da88 R15: 00fff00000000000
[  840.021029][    C1]  ? vm_normal_page+0x99/0x1e0
[  840.025816][    C1]  mm_counter_file+0x89/0x2c0
[  840.030515][    C1]  copy_page_range+0x1276/0x3670
[  840.035506][    C1]  ? pfn_valid+0x450/0x450
[  840.039942][    C1]  ? mas_wr_store_entry+0x151/0x340
[  840.045171][    C1]  ? mas_store+0x37e/0x550
[  840.049606][    C1]  ? mas_empty_area_rev+0x1960/0x1960
[  840.055003][    C1]  ? up_write+0x1c3/0x410
[  840.059345][    C1]  ? anon_vma_interval_tree_verify+0x150/0x150
[  840.065518][    C1]  copy_mm+0x11cb/0x1d50
[  840.069789][    C1]  ? copy_signal+0x680/0x680
[  840.074391][    C1]  ? lockdep_init_map_type+0x9c/0x8e0
[  840.079796][    C1]  ? __init_rwsem+0x122/0x160
[  840.084486][    C1]  ? copy_signal+0x556/0x680
[  840.089105][    C1]  copy_process+0x16f7/0x3d80
[  840.093812][    C1]  ? debug_object_activate+0x304/0x4f0
[  840.099306][    C1]  ? copy_process+0x96e/0x3d80
[  840.104106][    C1]  ? __pidfd_prepare+0x140/0x140
[  840.109072][    C1]  ? ktime_get+0x7f/0x280
[  840.113429][    C1]  kernel_clone+0x24b/0x8a0
[  840.117952][    C1]  ? hrtimer_interrupt+0x597/0x9c0
[  840.123086][    C1]  ? ktime_get+0x7f/0x280
[  840.127443][    C1]  ? create_io_thread+0x190/0x190
[  840.132481][    C1]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  840.138776][    C1]  __x64_sys_clone+0x1b7/0x230
[  840.143561][    C1]  ? __ia32_sys_vfork+0x140/0x140
[  840.148625][    C1]  ? syscall_enter_from_user_mode+0x2e/0x80
[  840.154536][    C1]  do_syscall_64+0x55/0xa0
[  840.158964][    C1]  ? clear_bhb_loop+0x40/0x90
[  840.163653][    C1]  ? clear_bhb_loop+0x40/0x90
[  840.168347][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  840.174263][    C1] RIP: 0033:0x7fcdf239c819
[  840.178693][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.198324][    C1] RSP: 002b:00007fcdf3187fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  840.206761][    C1] RAX: ffffffffffffffda RBX: 00007fcdf2615fa0 RCX: 00007fcdf239c819
[  840.214753][    C1] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[  840.222737][    C1] RBP: 00007fcdf2432c91 R08: 0000000000000000 R09: 0000000000000000
[  840.230720][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  840.238712][    C1] R13: 00007fcdf2616038 R14: 00007fcdf2615fa0 R15: 00007fff91ed5628
[  840.246728][    C1]  </TASK>
[  841.624494][    C0] net_ratelimit: 1474 callbacks suppressed
[  841.624586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  841.652108][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  841.668585][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  841.670051][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  841.681091][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  841.695657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  841.705091][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  841.723107][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  841.729100][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  841.743641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  846.633340][    C1] net_ratelimit: 11370 callbacks suppressed
[  846.633359][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  846.634153][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  846.639758][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  846.654492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  846.663830][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  846.683926][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  846.687822][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  846.702187][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  846.711848][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:f6:a8:7a:40:13, vlan:0)
[  846.726555][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  847.453392][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  847.473848][ T1288] ieee802154 phy1 wpan1: encryption failed: -22