last executing test programs:

13m3.828863036s ago: executing program 2 (id=15):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x100032, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x8000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xff9, &(0x7f0000002500)=""/4089, 0x0, 0x68}, 0x94)

13m3.274695605s ago: executing program 2 (id=18):
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc78, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2)
openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000010000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

13m2.501285231s ago: executing program 2 (id=21):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x13100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800, 0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedd07910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaa", @ANYRES32], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb790700117df27538e4a5dd6317ce6200000000988e89f1e1b595e98d92873946dc875785fd4aa2f30597c0730dcdc32b477574edca86df200e5bf97241d35ae6", @ANYRES16, @ANYRES8=r0], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa92a, 0x8000000000ca, 0xffffffff, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0xfffffffd, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb400d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r8, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0xc}, {0x10000002, 0x10, 0x2, 0x6}], 0x10, 0x4000001}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

13m1.215265044s ago: executing program 2 (id=25):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000001040)={&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000180)="c316e1fe4c04c048689f78", 0xb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)="ce3954d13a4bab87ca50c165767bbc83dde551df9441f9ab2a498753c7b4409a0bb42f6feac59a294f549d6fb841ee9a3d37c0ef6d1ed79b981f6cbac86b1bd31a22757427f1591dd145c48278b7704d673ed8e91eda2128a2b570cd3afb01c018b0014321670453a538ca4a13da4a2f24766ce7060af51d73fa0b2ebd919db72a57c4036ad594e4b3d8ee6e29b2b2f8", 0x90}, {&(0x7f0000000500)="9f116c07a21de91e6266348ea267ce5babb5df710ddfa0ae9cba7c916c309180abfe3476008da92ccb8d042925101db9fd0c5f5d2b1e561e08a7bd255e20ff5f30bff75623ff2fb3ed7fbaa224140e9cea984568c7a6079e56993cf5e3d6c99d17faa6f29ffdf1fe4e830796374f8186a3bae4", 0x73}, {&(0x7f0000000780)="e95bddf88d89282c514ba118da53d8448e5170c8185138e80971a00f9ad1a0d0b2dbbbd08023d22cf2119c12f59908f31ae4d896043959727c4de5fe9257f454dee358543e2e6cefb0ca55fc01b7af004ba29f5d17f2a5ea67bfb7d6fd4417f1bdfd0b59f0bba3d0f69c9c41d3fb5b0fa5a7e5e28aa728d889f259b61d9a81feeb016ef433b82778e06b1d191964521c3d00f48695b753c0184d6ffe78b43e9ec1c5e017bac9704a2ac2bf3279636757c7197f4314cabcd7eda03b2caf9740ac2399bb30ebffd9106e7a0e30f56369569f8a3d3e14b4e87b5ffd6d1ee14812bb3eb4af2754ec0d4344d837", 0xeb}, {&(0x7f0000000880)="5ad32f7b1edcd459fe95", 0xa}, {&(0x7f00000008c0)="52e8ae7b8c5a3b", 0x7}, {&(0x7f00000009c0)="f361e9240ca7c2a27d8649c035717fa72cf3ff504ef810947e209cdf8508ec534cce1fabcc21de63dcd4c878ce187dd9811a7f603a5161", 0x37}, {&(0x7f0000000a00)="9234051750a1c74f3a70c851a546faf76d92fb5dbe28cffda5438205a0a88882ffc2b1191a1a9ad08a3c4653f9cfa86e607910c5", 0x34}, {&(0x7f0000000a40)="c757ff668661dbfd4aafac156027d124e560997960788eb833a16aa6cada0f07d249ed54920e72373698e1c078acf7e21e9298016c4a20a157f40e8fffdc197be2214c6de32737cc08a021122c5a8d43ef3343d4a64522cd0a3bb751564dcea32931d471e4e4c4d91742450db4f0f00d0a19efff0eda258466fcdaa11be4b6f653db9ff08e16ce07eafb82", 0x8b}], 0xa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x3e0}, 0x81)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x6b, 0x1ef7}, 0x11efa, 0x6, 0x27c6, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000000000000000000000ffff7a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x2, 0x7, 0x0)
sendmsg$inet(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
syz_clone(0x1001100, 0x0, 0x0, 0x0, 0x0, 0x0)

13m0.122699831s ago: executing program 2 (id=28):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x92c, 0x2, 0x0, 0x1, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000300), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7)

12m57.843439437s ago: executing program 2 (id=42):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x92c, 0x2, 0x0, 0x1, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000300), 0x12)

12m42.652777027s ago: executing program 32 (id=42):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x92c, 0x2, 0x0, 0x1, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000300), 0x12)

7.030253771s ago: executing program 0 (id=4693):
r0 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNGETFILTER(r2, 0x801054db, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000101000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c2188", 0x43}, {&(0x7f0000000200)="68af78cb67d00ea9499626", 0xb}], 0x2}, 0x811)

5.82668212s ago: executing program 3 (id=4701):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee6}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000004000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x15, 0x5, 0x0)
recvmsg(r2, 0x0, 0x40000061)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48, 0x97ffffff}, 0x200040c4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x3, 0x300)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)

5.709542244s ago: executing program 1 (id=4702):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000fb99000000000000020000791228000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xc000000}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300)

5.688194634s ago: executing program 0 (id=4703):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r1, 0x13, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) (async)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2d, 'pids'}]}, 0x6) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) (async)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000380)) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r0, 0xbd, 0x18}, 0xc) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'bridge_slave_1\x00', 0x2000})
r7 = openat$cgroup_type(r4, &(0x7f0000000440), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000480), 0x9) (async)
r8 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r8, &(0x7f0000001700)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/242, 0xf2}], 0x3}, 0x40010002)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19f, 0x19f, 0x6, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3}, {0x6}, {0x8}, {0x5, 0x3}, {0x10, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0xb, 0x3}]}, @datasec={0x1, 0x6, 0x0, 0xf, 0x3, [{0x5, 0x2, 0x9}, {0x3, 0xdae, 0x2}, {0x3, 0x6a358369, 0xd6a}, {0x2, 0x101, 0x541}, {0x2, 0x2, 0x4}, {0x3, 0x1, 0x2}], "b45fdc"}, @struct={0x8, 0x6, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x4, 0x4}, {0x10, 0x4, 0x3}, {0x1, 0x4, 0x800}, {0x3, 0x2, 0x9}, {0x6, 0x0, 0x5}, {0x10, 0x2, 0x6}]}, @struct={0x7, 0x5, 0x0, 0x4, 0x0, 0x2, [{0xa, 0x4, 0x4}, {0xd, 0x1, 0x5}, {0xa, 0x4, 0x7b3ef722}, {0x10, 0x0, 0x2}, {0xb, 0x5, 0xfffffff2}]}, @struct={0x9, 0x5, 0x0, 0x4, 0x0, 0x18a, [{0x7, 0x3, 0x2}, {0x5, 0x0, 0x2}, {0x6, 0x4, 0xd75a}, {0x3, 0x2, 0x8}, {0x1, 0x4, 0x2}]}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0xe, [{0xc, 0xffffff06, 0xfffffffe}]}]}, {0x0, [0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000001900)=""/62, 0x1be, 0x3e}, 0x28)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x6, '\x00', 0x0, r10, 0x1, 0x0, 0x4}, 0x50)
close(r10) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000001a00)={r8})
write$cgroup_pid(r5, &(0x7f0000001a40)=0xffffffffffffffff, 0x12) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ac0)=@o_path={&(0x7f0000001a80)='./file0\x00', 0x0, 0x4000, r2}, 0x18) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000001b00)=r9, 0x4) (async)
r12 = syz_clone(0x20102080, &(0x7f0000001b40)="c9576f419f41c89dad07b276111c16a7451626bfbf9039e7ede61d353ac530", 0x1f, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)="260e0cdbc809285e3709e310cd1fe1d14b12cfb3bc238da7f3aec255fc3be9c55869110fd962ecb8fea55a1ae426868966e16bd90d2b40b71ad1512df148e413de5ce02e9d1902050861bac2dfb098d004a7b63a093f9c4b72cdbd7a22f98e7ddfa7592af343d3c4562ed9d964458db249171c389574a37d4eeff1ff4930411d1c8874e066d098273d5109ab63a648bbe5de9b4939089ed3f4a9a8cca85ce6daef04dcc8610ddea73dc0fb44cc691a65393fce")
r13 = perf_event_open$cgroup(&(0x7f0000001cc0)={0x3, 0x80, 0x5b, 0x43, 0xa4, 0x4c, 0x0, 0x7f, 0x44101, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x7, 0x5}, 0x0, 0x80000000, 0x3, 0x1, 0x1, 0x5, 0x465, 0x0, 0x10001, 0x0, 0x8000}, r4, 0x9, 0xffffffffffffffff, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d80)={r12, r13, 0x0, 0xc, &(0x7f0000001d40)='cgroup.type\x00'}, 0x30) (async)
openat$cgroup_procs(r4, &(0x7f0000001dc0)='tasks\x00', 0x2, 0x0) (async)
openat$cgroup_freezer_state(r4, &(0x7f0000001e00), 0x2, 0x0) (async)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r14, &(0x7f0000001e80)='cpuacct.usage_user\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001fc0)={r11, &(0x7f0000001ec0)="31832b78bfbe7509962a26b8bc550214f8a18eca4be820da3484fa3a012914cdb0ac8c9640f83e418b7c6f14d152f4f2903463e2ac919f30486a09706bf51ce8058e9fefbe77e075dbb826276fd1dc3241ffa4f52f9fdaa332141cd028695dbf1709e56c37f481fb120040eeaf59b5cf7a8aaf82feefef36dd96d2a678e69bd3dd7730600921b1232afd79b88f62050ce3204f456ffd867a333a4f3dd71101222bc82256eaa9aac56420e468edd62ca797a79f55eacf7a07b8750a3303bfbfe08df9d53274a287a33661ef16048969eb82352ac6c5d3da52d93e17755ba6b8b610cc05dd4716cc"}, 0x20)

5.590019268s ago: executing program 3 (id=4705):
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001840))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20)
socketpair(0x25, 0x5, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x56)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

5.357341525s ago: executing program 0 (id=4706):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000006c0)={'xfrm0\x00', 0x600})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0xa, 0x1, 0x106)

4.688039087s ago: executing program 1 (id=4708):
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0xa, 0x4, 0x8, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x6b, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xf, 0x2}, {0x1, 0x4, 0xa, 0xa}, {0x3, 0x2, 0x5, 0xb}, {0x1, 0x5, 0x8, 0x4}], 0x10, 0x3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000440), 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x2, &(0x7f0000000680)=""/220, 0xdc}, 0x20)

4.687708617s ago: executing program 4 (id=4709):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000380)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a002c0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

3.226023485s ago: executing program 1 (id=4710):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x343b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)

3.002686992s ago: executing program 4 (id=4711):
r0 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNGETFILTER(r2, 0x801054db, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000101000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c2188", 0x43}, {&(0x7f0000000200)="68af78cb67d00ea9499626", 0xb}], 0x2}, 0x811)

3.001460442s ago: executing program 3 (id=4712):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2000}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28)

2.950276354s ago: executing program 0 (id=4713):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4c}, 0x28)
ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0xf0ff1f00000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x18)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6b, &(0x7f0000000000)=r4, 0x10)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000740)=@raw=[@ringbuf_query, @ringbuf_query, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @generic={0xc, 0x7, 0x7, 0x5, 0x9}], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001540)={&(0x7f0000000140)="11b6c8eb67ec9ed589c231c53b478e3fad62fb1a988d0a80c38a75a09c27574c422bea194a33ed75ef2cbd7fa69bc3242fbf02154da42a8e39412d37acb8d9f1bd4030a6ed328538ed9721c3fe3424b4ca036ce4e6de5eadfe59e9fc26323408ef92742f57", &(0x7f00000001c0)=""/30, &(0x7f0000000440)="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", &(0x7f0000001440)="8b8e977627ae9ae65e81e3d74d0374c790d74ad41fc3b64d4c40ff4381128d82a2b703c4ac92a4b15022ae570124dc57b80470aa255860f35eb88195333341c6cbd8c3f316e5c9c8546c8e4a963f8ba1c285d1309c0911bbe00aed9d871b9e14110ef6fe8c8e312cdfebca7e19dac83eebb2d9e59e55db16afa94b0da1ac7507b6a67fb41cb985cad9261f0ea5dee5bf495768f6206f9edb107119ce361671b7cf8461b8299af7ca0e19bd56147f87a3c00f31b0bfa20b522642ad9137aaf7d7b3cdba4312b61711ebea9f6760dabe99ebd48e25d2", 0x8, r8, 0x4}, 0x38)
write$cgroup_pressure(r4, &(0x7f0000000100)={'some', 0x20, 0x1, 0x20, 0x10000}, 0x2f)
ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000000c0))
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001740)=[0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f00000017c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001880)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{r4, <r12=>0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x8, 0x26, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f6e}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x2, 0x4, 0xb, 0x1, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x3, 0xb, 0x0, 0x18, 0x14}, @ldst={0x1, 0x0, 0x6, 0x7, 0x3, 0x40}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000016c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', r11, @cgroup_skb=0x1, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, &(0x7f0000001ac0)=[r12, r8], 0x0, 0x10, 0x7ff}, 0x94)
ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1)

2.802628709s ago: executing program 1 (id=4714):
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0xa, 0x4, 0x8, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x6b, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xf, 0x2}, {0x1, 0x4, 0xa, 0xa}, {0x3, 0x2, 0x5, 0xb}, {0x1, 0x5, 0x8, 0x4}], 0x10, 0x3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000440), 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x2, &(0x7f0000000680)=""/220, 0xdc}, 0x20)

2.801986189s ago: executing program 3 (id=4715):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040))
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x14, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000000)
recvmsg$kcm(r4, 0x0, 0x0)
recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r4, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, 0x0, 0x480c4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3e064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10940, 0x100000001, 0x0, 0x1, 0x0, 0xfbff, 0x0, 0x0, 0x9000000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

1.972417926s ago: executing program 3 (id=4716):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r1 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000006c0)={'xfrm0\x00', 0x600})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.934774727s ago: executing program 1 (id=4717):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000006c0)={'xfrm0\x00', 0x600})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0xa, 0x1, 0x106)

1.796970432s ago: executing program 4 (id=4718):
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc78, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2)
openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x8004, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000010000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.674654736s ago: executing program 0 (id=4719):
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0xa, 0x4, 0x8, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x6b, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xf, 0x2}, {0x1, 0x4, 0xa, 0xa}, {0x3, 0x2, 0x5, 0xb}, {0x1, 0x5, 0x8, 0x4}], 0x10, 0x3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000440), 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x2, &(0x7f0000000680)=""/220, 0xdc}, 0x20)

1.53743992s ago: executing program 4 (id=4720):
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0x0, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x10, 0x8, 0x2, 0x9, 0x793, 0x48, 0x0, 0x5, 0x3000000, 0x801}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

1.177181422s ago: executing program 4 (id=4721):
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001840))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20)
socketpair(0x25, 0x5, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x56)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

99.329087ms ago: executing program 3 (id=4722):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000006c0)={'xfrm0\x00', 0x600})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0xa, 0x1, 0x106)

94.648247ms ago: executing program 0 (id=4730):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r1 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000006c0)={'xfrm0\x00', 0x600})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

46.921639ms ago: executing program 1 (id=4723):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x240000c0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb4123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000007}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

0s ago: executing program 4 (id=4724):
socketpair(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x2}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$sock(r4, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119b00640000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a2, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

.2838'.
[  597.309372][T14601] `: renamed from syz_tun (while UP)
[  597.319733][T14607] netlink: 'syz.3.2838': attribute type 33 has an invalid length.
[  597.344562][T14607] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2838'.
[  597.480409][T14609] netlink: 'syz.1.2840': attribute type 21 has an invalid length.
[  597.503149][T14609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  597.523491][T14609] netlink: 'syz.1.2840': attribute type 21 has an invalid length.
[  597.550853][T14609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  597.682307][T14613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2843'.
[  598.172869][T14621] netlink: 'syz.4.2846': attribute type 10 has an invalid length.
[  598.801146][T14621] geneve0: entered promiscuous mode
[  598.817474][T14621] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  599.537272][T14654] netlink: 'syz.4.2857': attribute type 21 has an invalid length.
[  599.546543][T14654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.987078][T14657] netlink: 'syz.4.2857': attribute type 21 has an invalid length.
[  600.003982][T14657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  600.368978][T14670] __nla_validate_parse: 4 callbacks suppressed
[  600.369042][T14670] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2861'.
[  600.554238][T14676] netlink: 'syz.0.2867': attribute type 21 has an invalid length.
[  600.579194][T14676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  600.595522][T14676] netlink: 'syz.0.2867': attribute type 21 has an invalid length.
[  600.618713][T14676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  600.746652][T14681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2865'.
[  601.036565][T14688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2870'.
[  601.462940][T14692] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2872'.
[  601.496941][T14692] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  601.505070][T14692] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2872'.
[  601.676843][T14699] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2873'.
[  601.715723][T14699] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2873'.
[  602.018320][T14708] netlink: 'syz.1.2877': attribute type 2 has an invalid length.
[  602.030626][T14708] netlink: 'syz.1.2877': attribute type 8 has an invalid length.
[  602.050930][T14708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2877'.
[  602.460597][T14713] netlink: 'syz.3.2879': attribute type 29 has an invalid length.
[  602.482056][T14713] netlink: 'syz.3.2879': attribute type 29 has an invalid length.
[  602.503834][T14713] netlink: 'syz.3.2879': attribute type 29 has an invalid length.
[  602.515812][T14715] netlink: 'syz.4.2880': attribute type 10 has an invalid length.
[  602.540779][T14713] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2879'.
[  602.958111][T14742] netlink: 206132 bytes leftover after parsing attributes in process `syz.0.2891'.
[  602.984370][T14742] openvswitch: netlink: IP tunnel dst address not specified
[  604.057161][T14768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  604.085189][T14768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  604.250717][T14783] `: entered promiscuous mode
[  605.509545][T14820] validate_nla: 5 callbacks suppressed
[  605.509561][T14820] netlink: 'syz.1.2917': attribute type 10 has an invalid length.
[  605.567362][T14820] 8021q: adding VLAN 0 to HW filter on device team0
[  605.596678][T14820] bond0: (slave team0): Enslaving as an active interface with an up link
[  605.650417][T14822] __nla_validate_parse: 6 callbacks suppressed
[  605.650449][T14822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2917'.
[  605.723865][T14822] team0: entered promiscuous mode
[  605.747301][T14822] team_slave_0: entered promiscuous mode
[  605.767901][T14822] team_slave_1: entered promiscuous mode
[  605.805577][T14822] team0: entered allmulticast mode
[  605.817537][T14822] team_slave_0: entered allmulticast mode
[  605.850402][T14822] team_slave_1: entered allmulticast mode
[  606.738893][T14844] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2926'.
[  606.780671][T14844] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2926'.
[  607.508558][T14871] 
: renamed from bond_slave_0 (while UP)
[  607.561720][T14873] netlink: 'syz.1.2936': attribute type 21 has an invalid length.
[  607.570104][T14873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  607.579381][T14873] netlink: 'syz.1.2936': attribute type 21 has an invalid length.
[  607.587507][T14873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.226493][T14886] netlink: 'syz.3.2937': attribute type 10 has an invalid length.
[  608.338745][T14886] 8021q: adding VLAN 0 to HW filter on device team0
[  608.381320][T14886] bond0: (slave team0): Enslaving as an active interface with an up link
[  608.613478][T14890] netlink: 'syz.1.2942': attribute type 10 has an invalid length.
[  608.646664][T14890] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  608.879598][T14903] netlink: 'syz.1.2948': attribute type 21 has an invalid length.
[  608.889225][T14903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.898671][T14903] netlink: 'syz.1.2948': attribute type 21 has an invalid length.
[  608.908589][T14903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.952240][T14904] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2945'.
[  608.962037][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'.
[  609.027857][T14907] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2947'.
[  609.043858][T14907] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2947'.
[  610.811451][T14937] netlink: 'syz.1.2957': attribute type 21 has an invalid length.
[  610.823443][T14937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  610.832894][T14937] netlink: 'syz.1.2957': attribute type 21 has an invalid length.
[  610.843837][T14937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  611.542026][T14940] netlink: 'syz.4.2958': attribute type 10 has an invalid length.
[  611.705743][T14952] netlink: 'syz.3.2964': attribute type 10 has an invalid length.
[  611.734003][T14952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2964'.
[  611.780038][T14953] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2961'.
[  611.820409][T14953] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2961'.
[  612.166801][T14971] netlink: 'syz.4.2970': attribute type 21 has an invalid length.
[  612.186335][T14971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  612.199342][T14971] netlink: 'syz.4.2970': attribute type 21 has an invalid length.
[  612.208087][T14971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  612.273501][T14973] netlink: 'syz.3.2971': attribute type 9 has an invalid length.
[  612.287605][T14973] netlink: 151880 bytes leftover after parsing attributes in process `syz.3.2971'.
[  612.626918][T14987] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2975'.
[  612.683786][T14987] bridge_slave_1: entered promiscuous mode
[  612.864999][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'.
[  612.900809][T14997] netlink: 'syz.1.2979': attribute type 10 has an invalid length.
[  612.932881][T14997] team0: Device wg1 is up. Set it down before adding it as a team port
[  612.974084][T15000] netlink: 'syz.3.2981': attribute type 21 has an invalid length.
[  612.982106][T15000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  613.046817][T15003] netlink: 'syz.3.2981': attribute type 21 has an invalid length.
[  613.070288][T15003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  613.418142][T15015] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2985'.
[  613.429913][T15015] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2985'.
[  613.549427][T15021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2990'.
[  613.725106][T15023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2991'.
[  613.854346][T15033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  613.886041][T15033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  614.169479][T15039] FAULT_INJECTION: forcing a failure.
[  614.169479][T15039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  614.224198][T15039] CPU: 0 PID: 15039 Comm: syz.1.2998 Not tainted syzkaller #0
[  614.231751][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  614.241847][T15039] Call Trace:
[  614.245152][T15039]  <TASK>
[  614.248107][T15039]  dump_stack_lvl+0x18c/0x250
[  614.252815][T15039]  ? show_regs_print_info+0x20/0x20
[  614.258048][T15039]  ? load_image+0x420/0x420
[  614.262595][T15039]  ? __might_fault+0xaa/0x120
[  614.267319][T15039]  ? __lock_acquire+0x7d40/0x7d40
[  614.272403][T15039]  should_fail_ex+0x39d/0x4d0
[  614.277152][T15039]  _copy_to_user+0x2f/0xa0
[  614.281625][T15039]  generic_map_lookup_batch+0x8bd/0xc60
[  614.287232][T15039]  ? bpf_map_update_value+0x720/0x720
[  614.292666][T15039]  ? __fdget+0x180/0x210
[  614.296972][T15039]  ? bpf_map_update_value+0x720/0x720
[  614.302399][T15039]  bpf_map_do_batch+0x2cb/0x610
[  614.307305][T15039]  ? bpf_lsm_bpf+0x9/0x10
[  614.311705][T15039]  ? security_bpf+0x7e/0xa0
[  614.316269][T15039]  __sys_bpf+0x7d7/0x890
[  614.320576][T15039]  ? bpf_link_show_fdinfo+0x390/0x390
[  614.326021][T15039]  ? lock_chain_count+0x20/0x20
[  614.330924][T15039]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  614.336974][T15039]  __x64_sys_bpf+0x7c/0x90
[  614.341445][T15039]  do_syscall_64+0x55/0xb0
[  614.345920][T15039]  ? clear_bhb_loop+0x40/0x90
[  614.350645][T15039]  ? clear_bhb_loop+0x40/0x90
[  614.355369][T15039]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  614.361320][T15039] RIP: 0033:0x7f4b4459ce59
[  614.365791][T15039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.385464][T15039] RSP: 002b:00007f4b4543d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.393936][T15039] RAX: ffffffffffffffda RBX: 00007f4b44815fa0 RCX: 00007f4b4459ce59
[  614.401965][T15039] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  614.409986][T15039] RBP: 00007f4b4543d090 R08: 0000000000000000 R09: 0000000000000000
[  614.418008][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  614.426057][T15039] R13: 00007f4b44816038 R14: 00007f4b44815fa0 R15: 00007ffc7c7c3988
[  614.434121][T15039]  </TASK>
[  615.555067][T15073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  615.563949][T15073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.170705][T15096] validate_nla: 6 callbacks suppressed
[  616.170724][T15096] netlink: 'syz.3.3018': attribute type 21 has an invalid length.
[  616.254006][T15096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.374980][T15096] netlink: 'syz.3.3018': attribute type 21 has an invalid length.
[  616.394123][T15096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.447275][T15089] netlink: 'syz.0.3014': attribute type 10 has an invalid length.
[  616.779924][T15107] __nla_validate_parse: 5 callbacks suppressed
[  616.779942][T15107] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3022'.
[  617.244621][T15113] syzkaller0: entered promiscuous mode
[  617.250319][T15113] syzkaller0: entered allmulticast mode
[  619.822806][T15125] netlink: 'syz.0.3028': attribute type 21 has an invalid length.
[  619.831114][T15125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  619.840141][T15130] netlink: 'syz.0.3028': attribute type 21 has an invalid length.
[  619.848522][T15130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  619.859552][T15133] netlink: 'syz.1.3030': attribute type 10 has an invalid length.
[  619.905932][T15133] team0: Device hsr_slave_0 failed to register rx_handler
[  619.958038][T15152] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3036'.
[  620.084248][T15161] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3037'.
[  620.101196][T15161] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3037'.
[  620.898964][T15176] netlink: 'syz.4.3045': attribute type 21 has an invalid length.
[  620.909385][T15176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  620.928191][T15176] netlink: 'syz.4.3045': attribute type 21 has an invalid length.
[  620.942728][T15176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  620.957776][T15173] netlink: 'syz.1.3044': attribute type 4 has an invalid length.
[  620.975424][T15173] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3044'.
[  621.554006][T15187] dvmrp1: tun_chr_ioctl cmd 2148553947
[  621.581343][T15184] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3047'.
[  621.594708][T15187] dvmrp1: tun_chr_ioctl cmd 1074025672
[  621.596279][ T5792] Bluetooth: hci5: command 0x0406 tx timeout
[  621.624207][T15187] dvmrp1: ignored: set checksum disabled
[  622.137181][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3052'.
[  622.352787][T15201] netlink: 'syz.1.3054': attribute type 21 has an invalid length.
[  622.361904][T15201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.371776][T15201] netlink: 'syz.1.3054': attribute type 21 has an invalid length.
[  622.393837][T15201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.784999][T15217] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3058'.
[  622.797683][T15217] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3058'.
[  623.835332][T15222] delete_channel: no stack
[  623.913489][T15230] netlink: 'syz.0.3063': attribute type 10 has an invalid length.
[  623.991873][T15234] netlink: 'syz.3.3065': attribute type 21 has an invalid length.
[  624.013016][T15234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  624.021392][T15234] netlink: 'syz.3.3065': attribute type 21 has an invalid length.
[  624.036141][T15234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  624.232630][T15242] FAULT_INJECTION: forcing a failure.
[  624.232630][T15242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.253353][T15242] CPU: 0 PID: 15242 Comm: syz.3.3069 Not tainted syzkaller #0
[  624.260906][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  624.271025][T15242] Call Trace:
[  624.274345][T15242]  <TASK>
[  624.277314][T15242]  dump_stack_lvl+0x18c/0x250
[  624.282054][T15242]  ? show_regs_print_info+0x20/0x20
[  624.287318][T15242]  ? load_image+0x420/0x420
[  624.291878][T15242]  ? __might_fault+0xaa/0x120
[  624.296611][T15242]  ? __lock_acquire+0x7d40/0x7d40
[  624.301710][T15242]  should_fail_ex+0x39d/0x4d0
[  624.306469][T15242]  _copy_to_user+0x2f/0xa0
[  624.310949][T15242]  bpf_test_finish+0x25a/0x650
[  624.315809][T15242]  ? convert_skb_to___skb+0x420/0x420
[  624.321247][T15242]  ? read_tsc+0x9/0x20
[  624.325379][T15242]  ? __rcu_read_unlock+0x7c/0xd0
[  624.330389][T15242]  bpf_prog_test_run_flow_dissector+0x4c9/0x640
[  624.336709][T15242]  ? xdp_convert_buff_to_md+0x200/0x200
[  624.342327][T15242]  ? __fget_files+0x28/0x4b0
[  624.346969][T15242]  ? __fget_files+0x28/0x4b0
[  624.351628][T15242]  ? xdp_convert_buff_to_md+0x200/0x200
[  624.357233][T15242]  bpf_prog_test_run+0x321/0x390
[  624.362220][T15242]  __sys_bpf+0x49d/0x890
[  624.366527][T15242]  ? bpf_link_show_fdinfo+0x390/0x390
[  624.371965][T15242]  ? lock_chain_count+0x20/0x20
[  624.376877][T15242]  __x64_sys_bpf+0x7c/0x90
[  624.381338][T15242]  do_syscall_64+0x55/0xb0
[  624.385805][T15242]  ? clear_bhb_loop+0x40/0x90
[  624.390526][T15242]  ? clear_bhb_loop+0x40/0x90
[  624.395258][T15242]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  624.401207][T15242] RIP: 0033:0x7f937399ce59
[  624.405665][T15242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.425324][T15242] RSP: 002b:00007f9374795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  624.433807][T15242] RAX: ffffffffffffffda RBX: 00007f9373c15fa0 RCX: 00007f937399ce59
[  624.441838][T15242] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a
[  624.449872][T15242] RBP: 00007f9374795090 R08: 0000000000000000 R09: 0000000000000000
[  624.457903][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.465927][T15242] R13: 00007f9373c16038 R14: 00007f9373c15fa0 R15: 00007ffda76d6e78
[  624.473967][T15242]  </TASK>
[  624.602771][T15247] netlink: 'syz.4.3070': attribute type 3 has an invalid length.
[  624.624046][T15247] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3070'.
[  624.721935][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  624.728766][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  625.820888][T15275] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3075'.
[  625.852130][T15275] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3075'.
[  625.874481][T15278] netlink: 'syz.1.3078': attribute type 21 has an invalid length.
[  625.897156][T15278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  625.927572][T15281] netlink: 'syz.1.3078': attribute type 21 has an invalid length.
[  625.953857][T15281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  626.458833][ T5088] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  626.742712][T15311] netlink: 'syz.0.3092': attribute type 21 has an invalid length.
[  626.751274][T15311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  626.762181][T15311] netlink: 'syz.0.3092': attribute type 21 has an invalid length.
[  626.770368][T15311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  627.215860][T15334] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3099'.
[  627.244184][T15334] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3099'.
[  627.379382][T15338] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3101'.
[  627.400066][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'.
[  627.617781][T15344] netlink: 'syz.3.3104': attribute type 21 has an invalid length.
[  627.626650][T15344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  627.635889][T15344] netlink: 'syz.3.3104': attribute type 21 has an invalid length.
[  627.645736][T15344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  627.824890][T15350] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.3107'.
[  628.260553][T15364] netlink: 'syz.4.3113': attribute type 21 has an invalid length.
[  628.268767][T15364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.284293][T15364] netlink: 'syz.4.3113': attribute type 21 has an invalid length.
[  628.302871][T15364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.531104][T15374] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3117'.
[  628.585499][T15382] netlink: 'syz.4.3117': attribute type 21 has an invalid length.
[  628.604698][T15382] netlink: 'syz.4.3117': attribute type 6 has an invalid length.
[  628.612532][T15382] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3117'.
[  628.635375][ T5792] Bluetooth: hci5: ACL packet for unknown connection handle 0
[  628.748746][T15388] netlink: 'syz.0.3123': attribute type 21 has an invalid length.
[  628.756874][T15388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.766349][T15388] netlink: 'syz.0.3123': attribute type 21 has an invalid length.
[  628.774701][T15388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.924585][T15397] netlink: 'syz.0.3125': attribute type 21 has an invalid length.
[  628.940520][T15397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.994510][T15398] netlink: 'syz.3.3121': attribute type 3 has an invalid length.
[  629.009009][T15398] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3121'.
[  629.031410][T15399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  629.268702][T15414] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3130'.
[  629.317798][T15414] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3130'.
[  629.913103][T15432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  629.922413][T15432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.404933][T15444] tap0: tun_chr_ioctl cmd 1074025677
[  630.418173][T15444] tap0: linktype set to 778
[  630.447031][T15444] tap0: tun_chr_ioctl cmd 2147767511
[  630.707264][T15449] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  630.802488][T15453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.827575][T15456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  631.475241][T15473] hsr0: entered promiscuous mode
[  631.488052][T15473] bridge0: port 3(hsr0) entered blocking state
[  631.496478][T15473] bridge0: port 3(hsr0) entered disabled state
[  631.508469][T15473] hsr0: entered allmulticast mode
[  631.514377][T15473] hsr_slave_0: entered allmulticast mode
[  631.766098][T15480] bond0: (slave team0): Releasing backup interface
[  631.833026][T15480] bridge0: port 4(team0) entered blocking state
[  631.866734][T15480] bridge0: port 4(team0) entered disabled state
[  631.927963][T15483] syzkaller0: entered promiscuous mode
[  631.933491][T15483] syzkaller0: entered allmulticast mode
[  631.953084][T15486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  631.972201][T15486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  632.329340][ T5792] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  632.628216][T15498] validate_nla: 13 callbacks suppressed
[  632.628234][T15498] netlink: 'syz.3.3167': attribute type 10 has an invalid length.
[  632.652129][T15498] __nla_validate_parse: 3 callbacks suppressed
[  632.652186][T15498] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3167'.
[  632.707872][T15498] hsr0: entered promiscuous mode
[  632.756593][T15498] bridge0: port 2(hsr0) entered blocking state
[  632.774548][T15498] bridge0: port 2(hsr0) entered disabled state
[  632.798921][T15498] hsr0: entered allmulticast mode
[  632.815449][T15498] hsr_slave_0: entered allmulticast mode
[  632.829027][T15498] hsr_slave_1: entered allmulticast mode
[  632.937426][T15498] bridge0: port 2(hsr0) entered blocking state
[  632.945950][T15498] bridge0: port 2(hsr0) entered forwarding state
[  633.072736][T15509] netlink: 'syz.0.3170': attribute type 10 has an invalid length.
[  633.294202][T15516] netlink: 'syz.3.3173': attribute type 10 has an invalid length.
[  633.537680][T15521] FAULT_INJECTION: forcing a failure.
[  633.537680][T15521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.588102][T15521] CPU: 1 PID: 15521 Comm: syz.1.3176 Not tainted syzkaller #0
[  633.595720][T15521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  633.605882][T15521] Call Trace:
[  633.609265][T15521]  <TASK>
[  633.612293][T15521]  dump_stack_lvl+0x18c/0x250
[  633.617100][T15521]  ? show_regs_print_info+0x20/0x20
[  633.622408][T15521]  ? load_image+0x420/0x420
[  633.627031][T15521]  ? __lock_acquire+0x7d40/0x7d40
[  633.632162][T15521]  ? __virt_addr_valid+0x18c/0x540
[  633.637408][T15521]  should_fail_ex+0x39d/0x4d0
[  633.642231][T15521]  _copy_from_user+0x2f/0xe0
[  633.646928][T15521]  bpf_prog_test_run_skb+0x26c/0x18c0
[  633.652417][T15521]  ? __fget_files+0x28/0x4b0
[  633.657096][T15521]  ? __fget_files+0x28/0x4b0
[  633.661793][T15521]  ? __fget_files+0x43d/0x4b0
[  633.666650][T15521]  ? cpu_online+0x60/0x60
[  633.671092][T15521]  bpf_prog_test_run+0x321/0x390
[  633.676149][T15521]  __sys_bpf+0x49d/0x890
[  633.680518][T15521]  ? bpf_link_show_fdinfo+0x390/0x390
[  633.686085][T15521]  ? lock_chain_count+0x20/0x20
[  633.691092][T15521]  __x64_sys_bpf+0x7c/0x90
[  633.695617][T15521]  do_syscall_64+0x55/0xb0
[  633.700134][T15521]  ? clear_bhb_loop+0x40/0x90
[  633.704903][T15521]  ? clear_bhb_loop+0x40/0x90
[  633.709715][T15521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.715734][T15521] RIP: 0033:0x7f4b4459ce59
[  633.720367][T15521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.740091][T15521] RSP: 002b:00007f4b4543d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  633.748625][T15521] RAX: ffffffffffffffda RBX: 00007f4b44815fa0 RCX: 00007f4b4459ce59
[  633.756688][T15521] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  633.764748][T15521] RBP: 00007f4b4543d090 R08: 0000000000000000 R09: 0000000000000000
[  633.772808][T15521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.780875][T15521] R13: 00007f4b44816038 R14: 00007f4b44815fa0 R15: 00007ffc7c7c3988
[  633.789078][T15521]  </TASK>
[  634.349932][T15533] netlink: 'syz.4.3179': attribute type 4 has an invalid length.
[  634.368347][T15533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3179'.
[  634.449767][T15533] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  634.501418][T15536] netlink: 'syz.4.3179': attribute type 11 has an invalid length.
[  634.545133][T15536] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3179'.
[  634.672468][T15540] netlink: 'syz.0.3182': attribute type 10 has an invalid length.
[  634.682268][T15540] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3182'.
[  634.692584][T15540] hsr0: entered promiscuous mode
[  635.104988][T15550] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3187'.
[  635.288741][T15556] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.3189'.
[  636.345747][T15578] netlink: 'syz.4.3195': attribute type 21 has an invalid length.
[  636.363822][T15578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  636.371732][T15578] netlink: 'syz.4.3195': attribute type 21 has an invalid length.
[  636.390612][T15578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  636.627482][T15590] netlink: 'syz.0.3199': attribute type 1 has an invalid length.
[  636.635898][T15591] netlink: 'syz.0.3199': attribute type 1 has an invalid length.
[  636.673791][T15591] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3199'.
[  636.686528][T15590] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3199'.
[  636.959071][ T5088] Bluetooth: hci1: command 0x0406 tx timeout
[  637.002302][T15603] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3203'.
[  637.294527][T15603] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3203'.
[  637.539716][T15614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.803448][T15614] validate_nla: 3 callbacks suppressed
[  637.803475][T15614] netlink: 'syz.0.3206': attribute type 21 has an invalid length.
[  637.826162][T15614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.840039][T15616] bridge0: port 4(team0) entered disabled state
[  637.932930][T15616] hsr0: left allmulticast mode
[  637.941651][T15616] hsr_slave_0: left allmulticast mode
[  637.953038][T15616] bridge0: port 3(hsr0) entered disabled state
[  638.031855][T15616] bridge_slave_1: left allmulticast mode
[  638.046019][T15616] bridge_slave_1: left promiscuous mode
[  638.061233][T15616] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.131796][T15616] bridge_slave_0: left allmulticast mode
[  638.141887][T15616] bridge_slave_0: left promiscuous mode
[  638.151861][T15616] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.329838][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'.
[  638.647996][T15633] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3212'.
[  638.663295][T15634] netlink: 'syz.1.3220': attribute type 9 has an invalid length.
[  638.677177][T15634] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3220'.
[  638.834337][T15634] netlink: 'syz.1.3220': attribute type 9 has an invalid length.
[  638.853806][T15634] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3220'.
[  639.016374][T15641] netlink: 'syz.3.3215': attribute type 9 has an invalid length.
[  639.038863][T15641] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3215'.
[  639.147369][T15644] netlink: 'syz.3.3215': attribute type 9 has an invalid length.
[  639.164653][T15644] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3215'.
[  640.237349][T15662] netlink: 'syz.4.3219': attribute type 10 has an invalid length.
[  640.254472][T15662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3219'.
[  640.452327][T15672] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3223'.
[  640.677215][T15682] netlink: 'syz.1.3227': attribute type 2 has an invalid length.
[  640.692934][T15682] netlink: 'syz.1.3227': attribute type 8 has an invalid length.
[  640.735479][T15682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3227'.
[  642.265092][T15700] netlink: 'syz.1.3240': attribute type 10 has an invalid length.
[  642.276080][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3240'.
[  642.776961][T15726] netlink: 'syz.0.3243': attribute type 9 has an invalid length.
[  642.891252][T15726] netlink: 'syz.0.3243': attribute type 9 has an invalid length.
[  643.401999][T15745] netlink: 'syz.3.3251': attribute type 21 has an invalid length.
[  643.410183][T15745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.419812][T15745] netlink: 'syz.3.3251': attribute type 21 has an invalid length.
[  643.428025][T15745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.673967][T15755] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  644.095321][T15769] __nla_validate_parse: 5 callbacks suppressed
[  644.095341][T15769] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3258'.
[  644.163685][T15769] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3258'.
[  644.178672][T15774] netlink: 'syz.3.3261': attribute type 39 has an invalid length.
[  645.019850][T15789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3268'.
[  645.101361][T15787] netlink: 'syz.3.3267': attribute type 10 has an invalid length.
[  645.110662][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3267'.
[  645.167365][T15787] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  645.204293][T15784] delete_channel: no stack
[  645.359872][T15797] netlink: 'syz.0.3270': attribute type 10 has an invalid length.
[  645.380404][T15797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3270'.
[  645.401985][T15797] virt_wifi0: entered promiscuous mode
[  645.430710][T15797] virt_wifi0: entered allmulticast mode
[  645.455793][T15797] batman_adv: batadv0: Adding interface: virt_wifi0
[  645.470462][T15797] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.500816][T15797] batman_adv: batadv0: Interface activated: virt_wifi0
[  646.055587][T15827] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3275'.
[  646.128488][T15827] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3275'.
[  646.209563][T15832] netlink: 'syz.3.3281': attribute type 10 has an invalid length.
[  647.993307][T15879] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3298'.
[  648.024040][T15879] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3298'.
[  648.449189][T15894] netlink: 'syz.4.3304': attribute type 39 has an invalid length.
[  648.566745][T15894] hsr_slave_1 (unregistering): left promiscuous mode
[  649.943162][T15936] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3318'.
[  650.120502][T15936] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3318'.
[  650.201444][T15938] netlink: 'syz.3.3320': attribute type 29 has an invalid length.
[  650.210039][T15938] netlink: 'syz.3.3320': attribute type 29 has an invalid length.
[  650.226078][T15938] netlink: 'syz.3.3320': attribute type 29 has an invalid length.
[  650.770857][T15957] netlink: 'syz.3.3328': attribute type 21 has an invalid length.
[  650.796983][T15957] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3328'.
[  650.808734][T15957] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3328'.
[  650.857610][T15957] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3328'.
[  650.889987][T15958] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3328'.
[  650.919414][T15958] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  651.092877][T15960] netlink: 'syz.1.3329': attribute type 9 has an invalid length.
[  651.105310][T15960] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3329'.
[  651.179061][T15962] netlink: 'syz.1.3329': attribute type 9 has an invalid length.
[  651.196978][T15962] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3329'.
[  651.328842][T15969] netlink: 'syz.3.3332': attribute type 10 has an invalid length.
[  651.681437][T15981] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.3337'.
[  651.816631][T15983] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3336'.
[  652.037801][T15986] syzkaller1: tun_chr_ioctl cmd 1074025677
[  652.080061][T15986] syzkaller1: linktype set to 786
[  652.663450][T15996] bridge0: port 2(hsr0) entered disabled state
[  652.673619][T15996] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.702556][T15996] bridge0: entered promiscuous mode
[  653.862521][T16031] netlink: 'syz.0.3355': attribute type 10 has an invalid length.
[  653.919794][T16031] 8021q: adding VLAN 0 to HW filter on device team0
[  653.968808][T16031] bond0: (slave team0): Enslaving as an active interface with an up link
[  653.998453][T16035] netlink: 'syz.0.3355': attribute type 10 has an invalid length.
[  654.024900][T16035] team0: entered promiscuous mode
[  654.040295][T16035] team_slave_0: entered promiscuous mode
[  654.055648][T16035] team_slave_1: entered promiscuous mode
[  654.075819][T16035] team0: entered allmulticast mode
[  654.081170][T16035] team_slave_0: entered allmulticast mode
[  654.088516][T16035] team_slave_1: entered allmulticast mode
[  654.096551][T16035] bond0: (slave team0): Releasing backup interface
[  654.114877][T16035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  654.440021][T16041] netlink: 'syz.3.3359': attribute type 10 has an invalid length.
[  654.567249][T16043] syzkaller0: entered promiscuous mode
[  654.572808][T16043] syzkaller0: entered allmulticast mode
[  655.440735][T16064] syzkaller0: entered promiscuous mode
[  655.446476][T16064] syzkaller0: entered allmulticast mode
[  655.467681][T16064] syzkaller0: mtu less than device minimum
[  655.662652][T16072] __nla_validate_parse: 6 callbacks suppressed
[  655.662780][T16072] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3370'.
[  655.750747][T16072] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3370'.
[  656.829584][T16082] netlink: 'syz.1.3374': attribute type 10 has an invalid length.
[  656.885765][T16082] team0: Device ipvlan1 failed to register rx_handler
[  657.444114][ T5088] Bluetooth: hci4: command 0x0406 tx timeout
[  657.698485][T16122] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3387'.
[  657.708365][T16122] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3387'.
[  658.092634][T16142] macsec0: entered promiscuous mode
[  658.394062][T16148] netlink: 'syz.3.3396': attribute type 13 has an invalid length.
[  658.425998][T16148] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.3396'.
[  659.766943][T16166] netlink: 'syz.1.3401': attribute type 4 has an invalid length.
[  659.783715][T16166] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3401'.
[  662.505278][T16185] FAULT_INJECTION: forcing a failure.
[  662.505278][T16185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  662.548491][T16185] CPU: 0 PID: 16185 Comm: syz.4.3410 Not tainted syzkaller #0
[  662.556134][T16185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  662.566240][T16185] Call Trace:
[  662.569570][T16185]  <TASK>
[  662.572540][T16185]  dump_stack_lvl+0x18c/0x250
[  662.577282][T16185]  ? show_regs_print_info+0x20/0x20
[  662.582530][T16185]  ? load_image+0x420/0x420
[  662.587078][T16185]  ? __might_fault+0xaa/0x120
[  662.591806][T16185]  ? __lock_acquire+0x7d40/0x7d40
[  662.596902][T16185]  should_fail_ex+0x39d/0x4d0
[  662.601647][T16185]  _copy_to_user+0x2f/0xa0
[  662.606108][T16185]  generic_map_lookup_batch+0x8bd/0xc60
[  662.611715][T16185]  ? bpf_map_update_value+0x720/0x720
[  662.617162][T16185]  ? __fdget+0x180/0x210
[  662.621446][T16185]  ? bpf_map_update_value+0x720/0x720
[  662.626852][T16185]  bpf_map_do_batch+0x2cb/0x610
[  662.631749][T16185]  ? bpf_lsm_bpf+0x9/0x10
[  662.636130][T16185]  ? security_bpf+0x7e/0xa0
[  662.640692][T16185]  __sys_bpf+0x7d7/0x890
[  662.644993][T16185]  ? bpf_link_show_fdinfo+0x390/0x390
[  662.650427][T16185]  ? lock_chain_count+0x20/0x20
[  662.655329][T16185]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  662.661385][T16185]  __x64_sys_bpf+0x7c/0x90
[  662.665854][T16185]  do_syscall_64+0x55/0xb0
[  662.670330][T16185]  ? clear_bhb_loop+0x40/0x90
[  662.675056][T16185]  ? clear_bhb_loop+0x40/0x90
[  662.679808][T16185]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  662.685760][T16185] RIP: 0033:0x7f8d3f19ce59
[  662.690213][T16185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.709904][T16185] RSP: 002b:00007f8d3ffd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  662.718372][T16185] RAX: ffffffffffffffda RBX: 00007f8d3f415fa0 RCX: 00007f8d3f19ce59
[  662.726396][T16185] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  662.734420][T16185] RBP: 00007f8d3ffd4090 R08: 0000000000000000 R09: 0000000000000000
[  662.742432][T16185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  662.750437][T16185] R13: 00007f8d3f416038 R14: 00007f8d3f415fa0 R15: 00007ffefb27dcc8
[  662.758457][T16185]  </TASK>
[  662.796295][T16189] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3409'.
[  662.815638][T16189] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3409'.
[  663.292675][T16207] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3418'.
[  663.303112][T16207] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  663.358049][T16207] tc_dump_action: action bad kind
[  664.261461][T16223] netlink: 'syz.4.3424': attribute type 9 has an invalid length.
[  664.269413][T16223] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3424'.
[  664.355607][T16223] netlink: 'syz.4.3424': attribute type 9 has an invalid length.
[  664.370711][T16223] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3424'.
[  664.695475][T16233] netlink: 'syz.0.3425': attribute type 27 has an invalid length.
[  664.988752][T16237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3427'.
[  665.675044][T16269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  665.682368][T16269] IPv6: NLM_F_CREATE should be set when creating new route
[  665.689738][T16269] IPv6: NLM_F_CREATE should be set when creating new route
[  665.697092][T16269] IPv6: NLM_F_CREATE should be set when creating new route
[  665.760513][T16273] netlink: 'syz.0.3442': attribute type 9 has an invalid length.
[  665.771839][T16273] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3442'.
[  665.859896][T16273] netlink: 'syz.0.3442': attribute type 9 has an invalid length.
[  665.868036][T16273] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3442'.
[  666.031526][T16277] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3444'.
[  666.043987][T16277] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  666.813421][T16291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3448'.
[  667.013511][T16293] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  667.123430][T16293] tc_dump_action: action bad kind
[  668.190067][T16327] dvmrp1: tun_chr_ioctl cmd 2148553947
[  668.200055][T16327] dvmrp1: tun_chr_ioctl cmd 1074025672
[  668.217322][T16327] dvmrp1: ignored: set checksum disabled
[  668.224645][T16329] netlink: 'syz.3.3460': attribute type 10 has an invalid length.
[  668.410258][T16339] __nla_validate_parse: 1 callbacks suppressed
[  668.410620][T16339] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3463'.
[  668.427541][T16339] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3463'.
[  668.838094][T16350] netlink: 'syz.1.3469': attribute type 21 has an invalid length.
[  668.847538][T16350] netlink: 'syz.1.3469': attribute type 1 has an invalid length.
[  668.855853][T16350] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3469'.
[  669.366104][T16355] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3470'.
[  669.380125][T16355] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  669.409310][T16361] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3478'.
[  669.431765][T16361] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3478'.
[  669.462353][T16355] tc_dump_action: action bad kind
[  670.594697][T16387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3482'.
[  670.811823][T16393] netlink: 'syz.4.3482': attribute type 11 has an invalid length.
[  670.846502][T16393] netlink: 'syz.4.3482': attribute type 1 has an invalid length.
[  670.879359][T16393] netlink: 'syz.4.3482': attribute type 1 has an invalid length.
[  670.919083][T16393] netlink: 'syz.4.3482': attribute type 2 has an invalid length.
[  670.951740][T16393] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.3482'.
[  671.413907][T16405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3489'.
[  671.618094][T16410] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3490'.
[  671.888601][T16398] delete_channel: no stack
[  672.054726][T16417] netlink: 'syz.1.3493': attribute type 21 has an invalid length.
[  672.102155][T16419] tap0: tun_chr_ioctl cmd 1074025680
[  672.803115][ T5088] Bluetooth: hci2: command 0x0406 tx timeout
[  673.292995][T16461] netlink: 'syz.3.3506': attribute type 10 has an invalid length.
[  674.178933][T16496] __nla_validate_parse: 1 callbacks suppressed
[  674.178978][T16496] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3521'.
[  674.209728][T16502] syzkaller1: tun_chr_ioctl cmd 1074025677
[  674.219861][T16496] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  674.234608][T16502] syzkaller1: linktype set to 786
[  674.317285][T16496] tc_dump_action: action bad kind
[  674.862876][T16517] netlink: 'syz.0.3529': attribute type 9 has an invalid length.
[  674.906609][T16517] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3529'.
[  675.077444][T16520] netlink: 'syz.0.3529': attribute type 9 has an invalid length.
[  675.126916][T16520] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3529'.
[  675.754759][T16532] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3534'.
[  675.773961][T16532] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  675.873179][T16532] tc_dump_action: action bad kind
[  676.265466][T16545] netlink: 'syz.4.3538': attribute type 10 has an invalid length.
[  677.027445][T16545] team0: left promiscuous mode
[  677.032870][T16545] team_slave_0: left promiscuous mode
[  677.040319][T16545] team_slave_1: left promiscuous mode
[  677.059597][T16545] team0: left allmulticast mode
[  677.065130][T16545] team_slave_0: left allmulticast mode
[  677.070727][T16545] team_slave_1: left allmulticast mode
[  677.083448][T16549] netlink: 'syz.4.3538': attribute type 10 has an invalid length.
[  677.091693][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'.
[  677.102362][T16549] team0: entered promiscuous mode
[  677.109424][T16549] team_slave_0: entered promiscuous mode
[  677.116968][T16549] team_slave_1: entered promiscuous mode
[  677.122921][T16549] team0: entered allmulticast mode
[  677.128166][T16549] team_slave_0: entered allmulticast mode
[  677.134032][T16549] team_slave_1: entered allmulticast mode
[  677.140743][T16549] 8021q: adding VLAN 0 to HW filter on device team0
[  677.148986][T16549] bond0: (slave team0): Releasing backup interface
[  677.170841][T16549] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  677.187085][T16548] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3540'.
[  677.470827][ T5792] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  677.479112][ T5792] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  677.541568][T16559] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3542'.
[  677.579999][T16559] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  677.603287][T16566] syzkaller0: entered promiscuous mode
[  677.618034][T16566] syzkaller0: entered allmulticast mode
[  677.675091][T16559] tc_dump_action: action bad kind
[  678.172822][T16584] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3548'.
[  678.368886][T16584] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3548'.
[  678.509194][T16578] netlink: 'syz.1.3549': attribute type 10 has an invalid length.
[  678.571593][T16578] team0: Device ipvlan1 failed to register rx_handler
[  679.089043][T16595] netlink: 'syz.3.3554': attribute type 10 has an invalid length.
[  679.107448][T16595] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3554'.
[  679.339539][T16606] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3557'.
[  679.358271][T16609] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3565'.
[  679.384879][T16609] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3565'.
[  679.395727][T16606] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  679.417176][T16610] tc_dump_action: action bad kind
[  679.962087][T16620] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3563'.
[  679.962218][T16614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  679.984152][T16620] hsr_slave_0: left promiscuous mode
[  680.145442][T16626] netlink: 'syz.1.3566': attribute type 9 has an invalid length.
[  680.174000][T16626] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3566'.
[  680.551783][T16630] netlink: 'syz.0.3568': attribute type 10 has an invalid length.
[  680.560795][T16630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3568'.
[  680.572230][T16630] team0: left promiscuous mode
[  680.581088][T16630] team_slave_0: left promiscuous mode
[  680.604459][T16630] team_slave_1: left promiscuous mode
[  680.636598][T16630] 8021q: adding VLAN 0 to HW filter on device team0
[  680.674177][T16630] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  681.162451][T16646] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3572'.
[  681.192153][T16646] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  681.410867][T16646] tc_dump_action: action bad kind
[  681.441422][T16644] netlink: 'syz.1.3574': attribute type 10 has an invalid length.
[  681.599372][T16659] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3577'.
[  681.628175][T16659] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3577'.
[  681.990289][T16663] netlink: 'syz.4.3579': attribute type 10 has an invalid length.
[  682.038608][T16663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3579'.
[  682.427758][T16676] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  683.343766][T16678] tc_dump_action: action bad kind
[  683.843118][T16700] syz.3.3591[16700] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  683.843370][T16700] syz.3.3591[16700] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  684.117400][T16707] FAULT_INJECTION: forcing a failure.
[  684.117400][T16707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  684.175938][T16707] CPU: 1 PID: 16707 Comm: syz.3.3594 Not tainted syzkaller #0
[  684.183567][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  684.193681][T16707] Call Trace:
[  684.197018][T16707]  <TASK>
[  684.199987][T16707]  dump_stack_lvl+0x18c/0x250
[  684.204721][T16707]  ? show_regs_print_info+0x20/0x20
[  684.209989][T16707]  ? load_image+0x420/0x420
[  684.210410][T16709] netlink: 'syz.0.3595': attribute type 9 has an invalid length.
[  684.214524][T16707]  ? __might_fault+0xaa/0x120
[  684.214550][T16707]  ? __lock_acquire+0x7d40/0x7d40
[  684.214578][T16707]  should_fail_ex+0x39d/0x4d0
[  684.214615][T16707]  _copy_to_user+0x2f/0xa0
[  684.214644][T16707]  generic_map_lookup_batch+0x860/0xc60
[  684.214680][T16707]  ? bpf_map_update_value+0x720/0x720
[  684.214706][T16707]  ? __fdget+0x180/0x210
[  684.214736][T16707]  ? bpf_map_update_value+0x720/0x720
[  684.232194][T16707]  bpf_map_do_batch+0x2cb/0x610
[  684.266834][T16707]  ? bpf_lsm_bpf+0x9/0x10
[  684.271219][T16707]  ? security_bpf+0x7e/0xa0
[  684.275763][T16707]  __sys_bpf+0x7d7/0x890
[  684.280048][T16707]  ? bpf_link_show_fdinfo+0x390/0x390
[  684.285467][T16707]  ? lock_chain_count+0x20/0x20
[  684.290357][T16707]  __x64_sys_bpf+0x7c/0x90
[  684.294818][T16707]  do_syscall_64+0x55/0xb0
[  684.299265][T16707]  ? clear_bhb_loop+0x40/0x90
[  684.303962][T16707]  ? clear_bhb_loop+0x40/0x90
[  684.308661][T16707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  684.314584][T16707] RIP: 0033:0x7f937399ce59
[  684.319025][T16707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.338663][T16707] RSP: 002b:00007f9374795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  684.347106][T16707] RAX: ffffffffffffffda RBX: 00007f9373c15fa0 RCX: 00007f937399ce59
[  684.355098][T16707] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  684.363157][T16707] RBP: 00007f9374795090 R08: 0000000000000000 R09: 0000000000000000
[  684.371186][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  684.379180][T16707] R13: 00007f9373c16038 R14: 00007f9373c15fa0 R15: 00007ffda76d6e78
[  684.387209][T16707]  </TASK>
[  684.474279][T16714] netlink: 'syz.1.3596': attribute type 10 has an invalid length.
[  684.516705][T16716] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  684.556979][T16714] wg1: entered promiscuous mode
[  684.575746][T16714] wg1: entered allmulticast mode
[  684.585675][T16714] team0: Device wg1 is of different type
[  684.630450][T16713] netlink: 'syz.0.3595': attribute type 9 has an invalid length.
[  684.653827][T16713] __nla_validate_parse: 3 callbacks suppressed
[  684.653845][T16713] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3595'.
[  684.923828][T16724] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3600'.
[  684.966197][T16724] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  686.015823][T16724] tc_dump_action: action bad kind
[  686.082217][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.089408][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.250821][T16734] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3604'.
[  686.485026][T16747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  686.492386][T16747] IPv6: NLM_F_CREATE should be set when creating new route
[  686.499818][T16747] IPv6: NLM_F_CREATE should be set when creating new route
[  686.507143][T16747] IPv6: NLM_F_CREATE should be set when creating new route
[  686.964844][T16738] netlink: 'syz.4.3606': attribute type 10 has an invalid length.
[  687.071442][T16738] team0: Device ipvlan1 failed to register rx_handler
[  688.313850][T16767] tc_dump_action: action bad kind
[  688.942959][T16762] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3613'.
[  689.151891][T16762] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  689.325507][T16773] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.3615'.
[  689.447474][T16775] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3618'.
[  690.034895][T16780] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  690.050769][T16780] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode
[  690.217146][T16786] netlink: 'syz.0.3623': attribute type 29 has an invalid length.
[  690.246826][T16786] netlink: 'syz.0.3623': attribute type 29 has an invalid length.
[  690.277361][T16791] netlink: 'syz.0.3623': attribute type 29 has an invalid length.
[  690.481005][T16799] netlink: 'syz.4.3627': attribute type 10 has an invalid length.
[  690.490152][T16799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3627'.
[  690.500686][T16799] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  691.019865][T16806] netlink: 'syz.3.3630': attribute type 4 has an invalid length.
[  691.052711][T16806] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3630'.
[  691.986212][T16822] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3635'.
[  692.327184][T16829] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3640'.
[  692.373898][T16829] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  692.390445][T16833] tc_dump_action: action bad kind
[  692.680815][T16839] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3641'.
[  692.713987][T16839] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  692.730580][T16840] tc_dump_action: action bad kind
[  692.893781][T16849] netlink: 'syz.4.3645': attribute type 10 has an invalid length.
[  693.436724][T16858] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3649'.
[  693.467186][T16858] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.3649'.
[  693.537626][T16866] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3651'.
[  693.565570][T16866] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  693.581154][T16870] tc_dump_action: action bad kind
[  693.702194][T16873] dvmrp1: tun_chr_ioctl cmd 2148553947
[  693.712528][T16873] dvmrp1: tun_chr_ioctl cmd 1074025672
[  693.734931][T16873] dvmrp1: ignored: set checksum disabled
[  694.046437][T16879] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3656'.
[  694.086485][T16879] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  694.122227][T16884] tc_dump_action: action bad kind
[  694.799569][T16898] netlink: 'syz.1.3663': attribute type 10 has an invalid length.
[  694.846868][T16898] team0: Device hsr_slave_0 failed to register rx_handler
[  695.254975][T16912] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3666'.
[  695.278059][T16912] tipc: Started in network mode
[  695.283020][T16912] tipc: Node identity b, cluster identity 73
[  695.292571][T16912] tipc: Node number set to 11
[  695.316970][T16917] netlink: 'syz.0.3670': attribute type 14 has an invalid length.
[  695.653746][T16931] __nla_validate_parse: 2 callbacks suppressed
[  695.653769][T16931] netlink: 209816 bytes leftover after parsing attributes in process `syz.0.3676'.
[  695.670457][T16931] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.3676'.
[  696.059413][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3683'.
[  696.540807][T16957] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3688'.
[  696.594689][T16957] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  696.609584][T16962] tc_dump_action: action bad kind
[  696.619994][T16959] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3689'.
[  696.632775][T16959] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  696.648983][T16963] tc_dump_action: action bad kind
[  696.878544][T16974] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3693'.
[  696.888445][T16974] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3693'.
[  697.007877][T16977] netlink: 'syz.0.3696': attribute type 10 has an invalid length.
[  697.099007][T16977] team0: Device hsr_slave_0 failed to register rx_handler
[  697.423085][T16988] netlink: 'syz.4.3700': attribute type 10 has an invalid length.
[  697.447081][T16988] syz_tun: entered promiscuous mode
[  697.485598][T16988] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  698.030804][T17005] netlink: 'syz.3.3706': attribute type 9 has an invalid length.
[  698.049369][T17005] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3706'.
[  698.180993][T17007] netlink: 'syz.3.3706': attribute type 9 has an invalid length.
[  698.220784][T17007] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3706'.
[  698.857361][T17011] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3708'.
[  699.008343][T17018] delete_channel: no stack
[  699.411244][T17024] syzkaller1: tun_chr_ioctl cmd 1074025677
[  699.420191][T17024] syzkaller1: linktype set to 786
[  699.429455][T17023] netlink: 'syz.1.3714': attribute type 10 has an invalid length.
[  699.462820][T17023] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  699.740282][T17032] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  699.774447][T17029] netlink: 'syz.4.3715': attribute type 10 has an invalid length.
[  699.917846][T17029] hsr_slave_0: entered promiscuous mode
[  699.928727][T17029] hsr_slave_0: entered allmulticast mode
[  699.976639][T17029] team0: Port device hsr_slave_0 added
[  701.386559][T17066] __nla_validate_parse: 2 callbacks suppressed
[  701.386576][T17066] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.3727'.
[  701.403850][T17069] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3735'.
[  701.430470][T17072] netlink: 'syz.3.3728': attribute type 39 has an invalid length.
[  701.955702][T17082] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3733'.
[  703.188566][T17114] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3741'.
[  703.337894][T17116] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3750'.
[  703.373050][T17116] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3750'.
[  704.293521][T17132] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3751'.
[  704.346751][T17132] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  704.391043][T17134] tc_dump_action: action bad kind
[  704.557896][T17133] netlink: 'syz.1.3749': attribute type 10 has an invalid length.
[  704.597719][T17133] team0: Device ipvlan1 failed to register rx_handler
[  705.674197][T17150] netlink: 'syz.0.3754': attribute type 10 has an invalid length.
[  705.736603][T17150] team0: left allmulticast mode
[  705.741589][T17150] team_slave_0: left allmulticast mode
[  705.862061][T17150] team_slave_1: left allmulticast mode
[  705.986136][T17150] 8021q: adding VLAN 0 to HW filter on device team0
[  706.101248][T17150] bond0: (slave team0): Enslaving as an active interface with an up link
[  706.457281][T17157] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3758'.
[  706.516229][T17157] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.3758'.
[  707.033275][T17174] netlink: 'syz.1.3765': attribute type 10 has an invalid length.
[  707.050773][T17169] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3763'.
[  707.071389][T17174] team0: Device wg1 is of different type
[  707.078600][T17169] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  707.155950][T17169] tc_dump_action: action bad kind
[  707.420378][ T5792] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  707.525181][T17190] FAULT_INJECTION: forcing a failure.
[  707.525181][T17190] name failslab, interval 1, probability 0, space 0, times 0
[  707.539335][T17190] CPU: 0 PID: 17190 Comm: syz.1.3769 Not tainted syzkaller #0
[  707.546871][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.556986][T17190] Call Trace:
[  707.560306][T17190]  <TASK>
[  707.563274][T17190]  dump_stack_lvl+0x18c/0x250
[  707.568012][T17190]  ? show_regs_print_info+0x20/0x20
[  707.573257][T17190]  ? load_image+0x420/0x420
[  707.577809][T17190]  ? __might_sleep+0xe0/0xe0
[  707.582445][T17190]  ? __lock_acquire+0x7d40/0x7d40
[  707.587525][T17190]  should_fail_ex+0x39d/0x4d0
[  707.592267][T17190]  should_failslab+0x9/0x20
[  707.596821][T17190]  slab_pre_alloc_hook+0x59/0x310
[  707.601898][T17190]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  707.607663][T17190]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  707.613457][T17190]  __kmem_cache_alloc_node+0x53/0x250
[  707.618905][T17190]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  707.624673][T17190]  __kmalloc+0xa4/0x230
[  707.628896][T17190]  tomoyo_realpath_from_path+0xe3/0x5d0
[  707.634509][T17190]  tomoyo_path_number_perm+0x248/0x620
[  707.640019][T17190]  ? tomoyo_path_number_perm+0x217/0x620
[  707.645715][T17190]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  707.651229][T17190]  ? ksys_write+0x1c4/0x260
[  707.655826][T17190]  ? __fget_files+0x28/0x4b0
[  707.660472][T17190]  ? __fget_files+0x28/0x4b0
[  707.665134][T17190]  security_file_ioctl+0x70/0xa0
[  707.670118][T17190]  __se_sys_ioctl+0x48/0x170
[  707.674750][T17190]  do_syscall_64+0x55/0xb0
[  707.679201][T17190]  ? clear_bhb_loop+0x40/0x90
[  707.683910][T17190]  ? clear_bhb_loop+0x40/0x90
[  707.688633][T17190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  707.694568][T17190] RIP: 0033:0x7f4b4459ce59
[  707.699013][T17190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.718662][T17190] RSP: 002b:00007f4b453fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.727126][T17190] RAX: ffffffffffffffda RBX: 00007f4b44816180 RCX: 00007f4b4459ce59
[  707.735127][T17190] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000008
[  707.743125][T17190] RBP: 00007f4b453fb090 R08: 0000000000000000 R09: 0000000000000000
[  707.751119][T17190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.759142][T17190] R13: 00007f4b44816218 R14: 00007f4b44816180 R15: 00007ffc7c7c3988
[  707.767194][T17190]  </TASK>
[  707.790600][T17190] ERROR: Out of memory at tomoyo_realpath_from_path.
[  708.646867][T17205] netlink: 'syz.3.3775': attribute type 41 has an invalid length.
[  708.775596][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3777'.
[  708.852937][T17214] FAULT_INJECTION: forcing a failure.
[  708.852937][T17214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.973698][T17214] CPU: 0 PID: 17214 Comm: syz.4.3778 Not tainted syzkaller #0
[  708.981264][T17214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  708.991378][T17214] Call Trace:
[  708.994705][T17214]  <TASK>
[  708.997677][T17214]  dump_stack_lvl+0x18c/0x250
[  709.002412][T17214]  ? show_regs_print_info+0x20/0x20
[  709.007682][T17214]  ? load_image+0x420/0x420
[  709.012258][T17214]  ? __might_fault+0xaa/0x120
[  709.016990][T17214]  ? __lock_acquire+0x7d40/0x7d40
[  709.022073][T17214]  ? __phys_addr+0x99/0x170
[  709.026643][T17214]  should_fail_ex+0x39d/0x4d0
[  709.031393][T17214]  _copy_to_user+0x2f/0xa0
[  709.035868][T17214]  generic_map_lookup_batch+0x8bd/0xc60
[  709.041493][T17214]  ? bpf_map_update_value+0x720/0x720
[  709.046919][T17214]  ? bpf_map_update_value+0x720/0x720
[  709.052349][T17214]  ? bpf_map_do_batch+0x2c0/0x610
[  709.057441][T17214]  ? bpf_map_update_value+0x720/0x720
[  709.062871][T17214]  bpf_map_do_batch+0x2cb/0x610
[  709.067784][T17214]  ? bpf_lsm_bpf+0x9/0x10
[  709.072171][T17214]  ? security_bpf+0x7e/0xa0
[  709.076743][T17214]  __sys_bpf+0x7d7/0x890
[  709.081042][T17214]  ? bpf_link_show_fdinfo+0x390/0x390
[  709.086484][T17214]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  709.092731][T17214]  __x64_sys_bpf+0x7c/0x90
[  709.097212][T17214]  do_syscall_64+0x55/0xb0
[  709.101684][T17214]  ? clear_bhb_loop+0x40/0x90
[  709.106420][T17214]  ? clear_bhb_loop+0x40/0x90
[  709.111164][T17214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  709.117123][T17214] RIP: 0033:0x7f8d3f19ce59
[  709.121599][T17214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.141270][T17214] RSP: 002b:00007f8d3ffd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  709.149752][T17214] RAX: ffffffffffffffda RBX: 00007f8d3f415fa0 RCX: 00007f8d3f19ce59
[  709.157782][T17214] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  709.165809][T17214] RBP: 00007f8d3ffd4090 R08: 0000000000000000 R09: 0000000000000000
[  709.173841][T17214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  709.181871][T17214] R13: 00007f8d3f416038 R14: 00007f8d3f415fa0 R15: 00007ffefb27dcc8
[  709.189914][T17214]  </TASK>
[  710.047199][T17241] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3788'.
[  710.120824][T17243] netlink: 'syz.4.3789': attribute type 9 has an invalid length.
[  710.161621][T17243] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3789'.
[  710.277241][T17248] netlink: 'syz.4.3789': attribute type 9 has an invalid length.
[  710.288709][T17248] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3789'.
[  711.421480][T17308] netlink: 'syz.3.3810': attribute type 10 has an invalid length.
[  711.495977][T17308] team0: Device wg1 is of different type
[  712.305492][T17330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3819'.
[  713.442255][T17345] netlink: 1042 bytes leftover after parsing attributes in process `syz.4.3824'.
[  713.531219][T17345] netlink: 'syz.4.3824': attribute type 10 has an invalid length.
[  713.563760][T17345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3824'.
[  713.640825][T17345] 8021q: adding VLAN 0 to HW filter on device team0
[  713.718557][T17345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  713.802140][T17354] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3828'.
[  713.835654][T17354] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  713.956122][T17354] tc_dump_action: action bad kind
[  714.043737][T17363] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.3830'.
[  714.658365][ T5792] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  715.269357][T17379] netlink: 'syz.3.3835': attribute type 4 has an invalid length.
[  715.393680][T17379] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3835'.
[  716.696698][T17390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3839'.
[  717.019599][T17406] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3843'.
[  717.083983][T17406] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3843'.
[  717.229245][T17409] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3845'.
[  717.254213][T17409] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  717.263209][T17412] tc_dump_action: action bad kind
[  717.353648][T17416] netlink: 'syz.1.3847': attribute type 10 has an invalid length.
[  718.171881][T17422] netlink: 'syz.1.3849': attribute type 10 has an invalid length.
[  718.205088][T17422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3849'.
[  718.472275][T17422] 8021q: adding VLAN 0 to HW filter on device team0
[  718.491473][T17422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  720.046136][T17451] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3860'.
[  720.060259][T17451] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  720.087989][T17455] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3861'.
[  720.099298][T17455] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3861'.
[  720.146246][T17451] tc_dump_action: action bad kind
[  720.807849][T17459] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.3862'.
[  720.847553][T17459] netlink: 'syz.0.3862': attribute type 10 has an invalid length.
[  720.863856][T17459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3862'.
[  720.873522][T17459] team0: entered promiscuous mode
[  720.880230][T17459] team_slave_0: entered promiscuous mode
[  720.909686][T17459] team_slave_1: entered promiscuous mode
[  720.923304][T17459] team0: entered allmulticast mode
[  720.930487][T17459] team_slave_0: entered allmulticast mode
[  720.939930][T17459] team_slave_1: entered allmulticast mode
[  720.969541][T17459] bond0: (slave team0): Releasing backup interface
[  721.012742][T17459] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  721.035848][T17464] netlink: 'syz.4.3864': attribute type 7 has an invalid length.
[  721.151903][T17469] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3868'.
[  721.171114][T17469] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3868'.
[  721.483995][T17479] netlink: 'syz.1.3872': attribute type 17 has an invalid length.
[  721.491940][T17479] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3872'.
[  721.571690][T17479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  721.982289][T17487] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3874'.
[  722.100565][T17496] FAULT_INJECTION: forcing a failure.
[  722.100565][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  722.140284][T17496] CPU: 0 PID: 17496 Comm: syz.4.3877 Not tainted syzkaller #0
[  722.147857][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  722.157979][T17496] Call Trace:
[  722.161338][T17496]  <TASK>
[  722.164324][T17496]  dump_stack_lvl+0x18c/0x250
[  722.169090][T17496]  ? show_regs_print_info+0x20/0x20
[  722.174363][T17496]  ? load_image+0x420/0x420
[  722.178935][T17496]  ? __might_fault+0xaa/0x120
[  722.183690][T17496]  ? __lock_acquire+0x7d40/0x7d40
[  722.184005][T17498] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  722.188836][T17496]  should_fail_ex+0x39d/0x4d0
[  722.188884][T17496]  _copy_from_user+0x2f/0xe0
[  722.188924][T17496]  ___sys_sendmsg+0x1c7/0x360
[  722.188952][T17496]  ? get_pid_task+0x20/0x1e0
[  722.188989][T17496]  ? __sys_sendmsg+0x2a0/0x2a0
[  722.189083][T17496]  ? __lock_acquire+0x7d40/0x7d40
[  722.205659][T17498] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  722.206289][T17496]  __se_sys_sendmsg+0x1c2/0x2b0
[  722.220369][T17496]  ? __x64_sys_sendmsg+0x80/0x80
[  722.220426][T17496]  ? lockdep_hardirqs_on+0x98/0x150
[  722.248359][T17496]  do_syscall_64+0x55/0xb0
[  722.252808][T17496]  ? clear_bhb_loop+0x40/0x90
[  722.257515][T17496]  ? clear_bhb_loop+0x40/0x90
[  722.262322][T17496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  722.268295][T17496] RIP: 0033:0x7f8d3f19ce59
[  722.272770][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.292439][T17496] RSP: 002b:00007f8d3ffb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.300952][T17496] RAX: ffffffffffffffda RBX: 00007f8d3f416090 RCX: 00007f8d3f19ce59
[  722.308993][T17496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  722.317024][T17496] RBP: 00007f8d3ffb3090 R08: 0000000000000000 R09: 0000000000000000
[  722.325039][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.333066][T17496] R13: 00007f8d3f416128 R14: 00007f8d3f416090 R15: 00007ffefb27dcc8
[  722.341119][T17496]  </TASK>
[  722.358961][ T5792] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  724.453779][T17557] __nla_validate_parse: 3 callbacks suppressed
[  724.453799][T17557] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3893'.
[  724.637254][T17557] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3893'.
[  725.187533][T17571] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3899'.
[  725.212039][T17571] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  725.375266][T17573] tc_dump_action: action bad kind
[  726.577860][T17607] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3910'.
[  726.617759][T17607] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3910'.
[  727.347449][T17620] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3914'.
[  727.367826][T17620] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  727.386302][T17623] netlink: 'syz.1.3915': attribute type 10 has an invalid length.
[  727.489203][T17621] tc_dump_action: action bad kind
[  728.364013][T17637] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3920'.
[  728.383778][T17637] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  728.518197][T17637] tc_dump_action: action bad kind
[  728.945885][T17649] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3924'.
[  729.010942][T17649] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3924'.
[  730.320706][T17664] netlink: 'syz.3.3929': attribute type 10 has an invalid length.
[  730.359262][T17664] geneve0: entered promiscuous mode
[  730.371509][T17669] netlink: 'syz.1.3931': attribute type 9 has an invalid length.
[  730.400248][T17669] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3931'.
[  730.534854][T17664] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  730.769738][T17671] netlink: 'syz.1.3931': attribute type 9 has an invalid length.
[  730.789740][T17671] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3931'.
[  730.959245][T17679] netlink: 209340 bytes leftover after parsing attributes in process `syz.3.3933'.
[  731.816009][T17692] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3938'.
[  732.268719][T17692] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3938'.
[  732.936833][T17705] delete_channel: no stack
[  733.329084][T17717] syzkaller1: tun_chr_ioctl cmd 1074025677
[  733.362006][T17717] syzkaller1: linktype set to 786
[  734.586494][T17734] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3950'.
[  734.680971][T17734] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3950'.
[  737.311215][T17781] netlink: 'syz.0.3964': attribute type 10 has an invalid length.
[  737.515931][T17789] netlink: 'syz.4.3968': attribute type 10 has an invalid length.
[  737.578542][T17789] team0: left promiscuous mode
[  737.583427][T17789] team_slave_0: left promiscuous mode
[  737.625571][T17793] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3965'.
[  737.650972][T17789] team_slave_1: left promiscuous mode
[  737.667213][T17789] hsr_slave_0: left promiscuous mode
[  737.693281][T17789] team0: left allmulticast mode
[  737.704034][T17789] team_slave_0: left allmulticast mode
[  737.719894][T17789] team_slave_1: left allmulticast mode
[  737.744083][T17789] hsr_slave_0: left allmulticast mode
[  737.802574][T17789] 8021q: adding VLAN 0 to HW filter on device team0
[  737.839490][T17789] bond0: (slave team0): Enslaving as an active interface with an up link
[  737.890892][T17791] netlink: 'syz.4.3968': attribute type 10 has an invalid length.
[  737.909191][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3968'.
[  737.935116][T17791] team0: entered promiscuous mode
[  737.940360][T17791] team_slave_0: entered promiscuous mode
[  737.946590][T17791] team_slave_1: entered promiscuous mode
[  737.952605][T17791] hsr_slave_0: entered promiscuous mode
[  737.965202][T17791] team0: entered allmulticast mode
[  737.974803][T17791] team_slave_0: entered allmulticast mode
[  737.987247][T17791] team_slave_1: entered allmulticast mode
[  738.000158][T17791] hsr_slave_0: entered allmulticast mode
[  738.012407][T17791] bond0: (slave team0): Releasing backup interface
[  738.043894][T17791] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  738.075194][T17793] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3965'.
[  738.563178][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3973'.
[  738.637383][T17813] netlink: 10479 bytes leftover after parsing attributes in process `syz.0.3973'.
[  738.675244][T17813] netlink: 'syz.0.3973': attribute type 1 has an invalid length.
[  738.882414][T17818] syzkaller0: entered promiscuous mode
[  738.915192][T17818] syzkaller0: entered allmulticast mode
[  739.310143][T17831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3979'.
[  739.319219][T17830] netlink: 'syz.0.3978': attribute type 10 has an invalid length.
[  739.330034][T17831] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  739.387198][T17832] tc_dump_action: action bad kind
[  741.369780][T17851] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3983'.
[  741.394050][T17851] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3983'.
[  742.357343][T17872] netlink: 'syz.1.3992': attribute type 10 has an invalid length.
[  742.380725][T17872] geneve0: entered promiscuous mode
[  742.492189][T17872] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  742.601528][T17882] tc_dump_action: action bad kind
[  742.606702][T17877] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3994'.
[  742.622865][T17881] netlink: 'syz.3.3997': attribute type 10 has an invalid length.
[  742.637615][T17877] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  743.317701][T17881] team0: Device hsr_slave_0 failed to register rx_handler
[  743.379747][T17890] netlink: 'syz.1.3998': attribute type 10 has an invalid length.
[  743.424272][T17890] team0: left promiscuous mode
[  743.442909][T17890] team_slave_0: left promiscuous mode
[  743.459921][T17890] team_slave_1: left promiscuous mode
[  743.474061][T17890] team0: left allmulticast mode
[  743.488236][T17890] team_slave_0: left allmulticast mode
[  743.513793][T17890] team_slave_1: left allmulticast mode
[  743.596993][T17890] 8021q: adding VLAN 0 to HW filter on device team0
[  743.619088][T17890] bond0: (slave team0): Enslaving as an active interface with an up link
[  743.831217][T17899] netlink: 'syz.4.4002': attribute type 10 has an invalid length.
[  743.842374][T17899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4002'.
[  743.894273][T17899] 8021q: adding VLAN 0 to HW filter on device team0
[  743.911051][T17899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  743.944873][T17900] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4001'.
[  743.977489][T17900] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4001'.
[  744.275656][T17914] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4007'.
[  744.293978][T17914] netlink: get zone limit has 4 unknown bytes
[  744.344934][ T5792] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  744.611345][T17924] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4010'.
[  744.646757][T17924] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  744.706948][T17924] tc_dump_action: action bad kind
[  745.042387][T17925] netlink: 'syz.4.4009': attribute type 10 has an invalid length.
[  745.691180][T17946] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4017'.
[  745.704031][T17946] netlink: get zone limit has 4 unknown bytes
[  745.721180][ T5792] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  745.743331][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'.
[  745.778403][T17948] netlink: 10479 bytes leftover after parsing attributes in process `syz.1.4016'.
[  745.793847][T17948] netlink: 'syz.1.4016': attribute type 1 has an invalid length.
[  745.840953][T17950] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4024'.
[  745.877026][T17950] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  745.899555][T17951] tc_dump_action: action bad kind
[  747.176864][T17968] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[  747.189230][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4025'.
[  747.225175][T17968] team0: entered promiscuous mode
[  747.236336][T17968] team_slave_0: entered promiscuous mode
[  747.251114][T17968] team_slave_1: entered promiscuous mode
[  747.266468][T17968] team0: entered allmulticast mode
[  747.280399][T17968] team_slave_0: entered allmulticast mode
[  747.294179][T17968] team_slave_1: entered allmulticast mode
[  747.311145][T17968] 8021q: adding VLAN 0 to HW filter on device team0
[  747.356292][T17968] bond0: (slave team0): Releasing backup interface
[  747.472278][T17968] bridge0: port 3(team0) entered blocking state
[  747.482622][T17968] bridge0: port 3(team0) entered disabled state
[  747.520486][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  747.527094][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  747.797343][T17981] netlink: get zone limit has 4 unknown bytes
[  747.831060][ T5792] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  748.377963][T17996] netlink: 'syz.4.4032': attribute type 1 has an invalid length.
[  748.706798][T18007] netlink: 'syz.3.4035': attribute type 29 has an invalid length.
[  748.747215][T18007] netlink: 'syz.3.4035': attribute type 29 has an invalid length.
[  748.780215][T18007] netlink: 'syz.3.4035': attribute type 29 has an invalid length.
[  749.342934][T18016] netlink: 'syz.0.4039': attribute type 10 has an invalid length.
[  749.354186][T18016] __nla_validate_parse: 4 callbacks suppressed
[  749.354222][T18016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4039'.
[  749.454902][T18016] 8021q: adding VLAN 0 to HW filter on device team0
[  749.495154][T18016] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  751.417807][T18031] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4040'.
[  751.490161][T18031] netlink: get zone limit has 4 unknown bytes
[  751.572951][ T5792] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15
[  752.265464][T18056] netlink: 'syz.3.4053': attribute type 10 has an invalid length.
[  752.284837][T18056] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4053'.
[  752.394026][T18052] netlink: 'syz.1.4051': attribute type 6 has an invalid length.
[  752.401867][T18052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4051'.
[  755.722356][T18106] netlink: 'syz.1.4074': attribute type 10 has an invalid length.
[  755.744970][T18106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4074'.
[  756.664841][T18119] netlink: 'syz.4.4070': attribute type 1 has an invalid length.
[  758.314329][T18134] team_slave_0: left promiscuous mode
[  758.330541][T18134] team_slave_0: left allmulticast mode
[  758.433468][T18134] team0: Port device team_slave_0 removed
[  758.994111][T18151] netlink: 'syz.1.4079': attribute type 2 has an invalid length.
[  759.306230][T18154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4080'.
[  760.386589][T18183] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4090'.
[  760.418683][T18183] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4090'.
[  764.175472][T18247] FAULT_INJECTION: forcing a failure.
[  764.175472][T18247] name failslab, interval 1, probability 0, space 0, times 0
[  764.246563][T18247] CPU: 1 PID: 18247 Comm: syz.3.4111 Not tainted syzkaller #0
[  764.254146][T18247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  764.264265][T18247] Call Trace:
[  764.267600][T18247]  <TASK>
[  764.270570][T18247]  dump_stack_lvl+0x18c/0x250
[  764.275307][T18247]  ? show_regs_print_info+0x20/0x20
[  764.280556][T18247]  ? load_image+0x420/0x420
[  764.285105][T18247]  ? __might_sleep+0xe0/0xe0
[  764.289759][T18247]  ? __lock_acquire+0x7d40/0x7d40
[  764.294883][T18247]  should_fail_ex+0x39d/0x4d0
[  764.299637][T18247]  should_failslab+0x9/0x20
[  764.304196][T18247]  slab_pre_alloc_hook+0x59/0x310
[  764.309267][T18247]  ? __lock_acquire+0x7d40/0x7d40
[  764.314341][T18247]  kmem_cache_alloc_node+0x60/0x320
[  764.319612][T18247]  ? __alloc_skb+0x103/0x2c0
[  764.324254][T18247]  __alloc_skb+0x103/0x2c0
[  764.328719][T18247]  netlink_sendmsg+0x66a/0xbf0
[  764.333553][T18247]  ? netlink_getsockopt+0x590/0x590
[  764.338809][T18247]  ? aa_sock_msg_perm+0x94/0x150
[  764.343807][T18247]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  764.349138][T18247]  ? security_socket_sendmsg+0x80/0xa0
[  764.354639][T18247]  ? netlink_getsockopt+0x590/0x590
[  764.359903][T18247]  ____sys_sendmsg+0x5ba/0x960
[  764.364731][T18247]  ? __asan_memset+0x22/0x40
[  764.369371][T18247]  ? __sys_sendmsg_sock+0x30/0x30
[  764.374431][T18247]  ? __import_iovec+0x5f2/0x850
[  764.379338][T18247]  ? import_iovec+0x73/0xa0
[  764.383889][T18247]  ___sys_sendmsg+0x2a6/0x360
[  764.388614][T18247]  ? get_pid_task+0x20/0x1e0
[  764.393263][T18247]  ? __sys_sendmsg+0x2a0/0x2a0
[  764.398121][T18247]  ? __lock_acquire+0x7d40/0x7d40
[  764.403238][T18247]  __se_sys_sendmsg+0x1c2/0x2b0
[  764.408142][T18247]  ? __x64_sys_sendmsg+0x80/0x80
[  764.413158][T18247]  ? lockdep_hardirqs_on+0x98/0x150
[  764.418413][T18247]  do_syscall_64+0x55/0xb0
[  764.422875][T18247]  ? clear_bhb_loop+0x40/0x90
[  764.427597][T18247]  ? clear_bhb_loop+0x40/0x90
[  764.432321][T18247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  764.438267][T18247] RIP: 0033:0x7f937399ce59
[  764.442735][T18247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.462389][T18247] RSP: 002b:00007f9374774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  764.470853][T18247] RAX: ffffffffffffffda RBX: 00007f9373c16090 RCX: 00007f937399ce59
[  764.478870][T18247] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  764.486881][T18247] RBP: 00007f9374774090 R08: 0000000000000000 R09: 0000000000000000
[  764.494887][T18247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  764.502895][T18247] R13: 00007f9373c16128 R14: 00007f9373c16090 R15: 00007ffda76d6e78
[  764.510935][T18247]  </TASK>
[  764.548919][ T5792] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30
[  765.736692][T18277] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4120'.
[  765.758154][T18277] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.4120'.
[  767.638522][T18310] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4132'.
[  767.670901][T18310] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  767.700041][T18310] tc_dump_action: action bad kind
[  767.831400][T18315] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4133'.
[  767.857358][T18315] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  768.585186][T18316] tc_dump_action: action bad kind
[  768.822845][T18326] tc_dump_action: action bad kind
[  768.978538][T18320] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4143'.
[  769.016112][T18320] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  770.652156][T18361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4146'.
[  770.692935][T18361] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  770.801802][T18366] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4148'.
[  770.838542][T18366] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  771.816967][T18369] tc_dump_action: action bad kind
[  771.863715][T18370] tc_dump_action: action bad kind
[  772.349856][T18384] netlink: 'syz.3.4154': attribute type 9 has an invalid length.
[  772.358161][T18384] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4154'.
[  772.791567][T18392] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.4156'.
[  772.849495][T18392] delete_channel: no stack
[  772.867652][T18392] delete_channel: no stack
[  774.940078][T18385] netlink: 'syz.3.4154': attribute type 9 has an invalid length.
[  774.948722][T18385] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4154'.
[  775.069602][T18397] netlink: 209340 bytes leftover after parsing attributes in process `syz.0.4157'.
[  775.260235][T18405] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4160'.
[  775.290740][T18407] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4161'.
[  775.294479][T18405] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  775.333742][T18407] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  775.372896][T18413] tc_dump_action: action bad kind
[  775.389888][T18412] tc_dump_action: action bad kind
[  776.419248][T18425] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.4167'.
[  776.459433][T18425] delete_channel: no stack
[  776.469188][T18425] delete_channel: no stack
[  776.509672][T18423] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4176'.
[  776.519706][T18423] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  776.567423][T18423] tc_dump_action: action bad kind
[  776.790800][T18438] netlink: 'syz.4.4171': attribute type 10 has an invalid length.
[  776.799294][T18438] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4171'.
[  777.613284][T18457] netlink: 'syz.4.4179': attribute type 10 has an invalid length.
[  777.639890][T18457] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  777.790364][T18461] netlink: 'syz.1.4190': attribute type 39 has an invalid length.
[  777.825347][T18463] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.4181'.
[  777.861967][T18463] delete_channel: no stack
[  777.868798][T18463] delete_channel: no stack
[  777.875248][T18465] netlink: 'syz.3.4182': attribute type 10 has an invalid length.
[  777.897414][T18465] team0: left allmulticast mode
[  777.902371][T18465] team_slave_0: left allmulticast mode
[  777.923613][T18465] team_slave_1: left allmulticast mode
[  777.929179][T18465] team0: left promiscuous mode
[  777.934256][T18465] team_slave_0: left promiscuous mode
[  777.951974][T18465] team_slave_1: left promiscuous mode
[  777.959412][T18465] bridge0: port 3(team0) entered disabled state
[  777.975904][T18465] 8021q: adding VLAN 0 to HW filter on device team0
[  777.986712][T18465] bond0: (slave team0): Enslaving as an active interface with an up link
[  778.017493][T18469] netlink: 'syz.3.4182': attribute type 10 has an invalid length.
[  778.027243][T18469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4182'.
[  778.037108][T18469] team0: entered promiscuous mode
[  778.042321][T18469] team_slave_0: entered promiscuous mode
[  778.049500][T18469] team_slave_1: entered promiscuous mode
[  778.055809][T18469] team0: entered allmulticast mode
[  778.061175][T18469] team_slave_0: entered allmulticast mode
[  778.068629][T18469] team_slave_1: entered allmulticast mode
[  778.078552][T18469] bond0: (slave team0): Releasing backup interface
[  778.095779][T18469] bridge0: port 3(team0) entered blocking state
[  778.102389][T18469] bridge0: port 3(team0) entered disabled state
[  778.111789][T18471] netlink: 'syz.4.4184': attribute type 39 has an invalid length.
[  778.174991][T18472] syzkaller0: entered promiscuous mode
[  778.184297][T18472] syzkaller0: entered allmulticast mode
[  778.391524][T18474] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4185'.
[  778.413341][T18474] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  778.467350][T18474] tc_dump_action: action bad kind
[  780.898463][T18502] syzkaller0: entered promiscuous mode
[  780.920555][T18502] syzkaller0: entered allmulticast mode
[  782.222391][T18525] tc_dump_action: action bad kind
[  782.252896][T18526] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  783.331070][T18533] tc_dump_action: action bad kind
[  784.587059][T18551] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4211'.
[  784.625296][T18551] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4211'.
[  784.669062][T18553] netlink: 'syz.4.4213': attribute type 10 has an invalid length.
[  784.681981][T18553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4213'.
[  784.709578][T18553] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  784.762646][T18556] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4210'.
[  785.407132][T18559] netlink: 'syz.4.4214': attribute type 10 has an invalid length.
[  785.424952][T18559] team0: Device ipvlan1 failed to register rx_handler
[  785.766318][T18571] tc_dump_action: action bad kind
[  785.898250][T18575] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4218'.
[  785.936841][T18575] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  785.969532][T18577] tc_dump_action: action bad kind
[  786.046780][T18583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4220'.
[  786.059668][T18583] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4220'.
[  787.383021][T18596] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4225'.
[  787.409696][T18596] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4225'.
[  788.272311][T18615] tc_dump_action: action bad kind
[  788.808243][T18613] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  789.497650][T18637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4238'.
[  790.458646][T18648] netlink: set zone limit has 8 unknown bytes
[  790.624941][T18654] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4241'.
[  790.646489][T18654] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4241'.
[  790.959722][T18653] netlink: 'syz.0.4242': attribute type 10 has an invalid length.
[  790.981938][T18653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4242'.
[  791.336064][T18664] tc_dump_action: action bad kind
[  792.576148][T18675] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4248'.
[  792.804841][T11022] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  792.929980][T18675] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  793.109626][T18675] batman_adv: batadv0: Removing interface: virt_wifi0
[  793.387344][T18691] netlink: 'syz.1.4254': attribute type 10 has an invalid length.
[  793.400439][T18691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4254'.
[  793.689244][T18701] tc_dump_action: action bad kind
[  794.126707][T18708] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4258'.
[  794.137807][T18708] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4258'.
[  795.961861][T18715] netlink: 'syz.1.4260': attribute type 16 has an invalid length.
[  795.973206][T18715] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4260'.
[  797.351415][T18752] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4271'.
[  797.383815][T18752] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  797.508700][T18752] tc_dump_action: action bad kind
[  797.542125][T18757] netlink: 'syz.4.4272': attribute type 9 has an invalid length.
[  797.552465][T18757] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4272'.
[  800.641642][T18792] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4282'.
[  800.665102][T18792] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  800.713213][T18792] tc_dump_action: action bad kind
[  802.267537][T18815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  802.275679][T18815] IPv6: NLM_F_CREATE should be set when creating new route
[  804.100450][T18841] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4295'.
[  804.138371][T18842] tc_dump_action: action bad kind
[  804.199049][T18841] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  804.387964][T18855] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4297'.
[  804.455308][T18855] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4297'.
[  805.652888][T18872] lo: entered promiscuous mode
[  806.666925][T18881] dvmrp1: tun_chr_ioctl cmd 2148553947
[  806.683929][T18881] dvmrp1: tun_chr_ioctl cmd 1074025672
[  806.703951][T18881] dvmrp1: ignored: set checksum disabled
[  806.856780][T18888] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4312'.
[  806.875022][T18888] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  806.896785][T18890] tc_dump_action: action bad kind
[  807.380926][T18896] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4313'.
[  807.487299][T18896] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4313'.
[  808.396704][T18917] sit0: entered allmulticast mode
[  808.449162][T18920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4320'.
[  808.493979][T18921] sit0: entered promiscuous mode
[  809.026633][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.033035][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  809.061879][T18925] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4322'.
[  809.116318][T18927] tc_dump_action: action bad kind
[  809.143665][T18925] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  809.896022][T18947] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4328'.
[  809.922721][T18947] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4328'.
[  810.380984][T18957] netlink: 'syz.0.4332': attribute type 10 has an invalid length.
[  810.402860][T18957] syz_tun: entered promiscuous mode
[  811.224952][T18980] C: renamed from team_slave_0
[  811.244107][T18980] netlink: 'syz.4.4340': attribute type 3 has an invalid length.
[  811.252936][T18980] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4340'.
[  811.268701][T18980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  811.681493][T18992] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4345'.
[  811.837020][T18992] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4345'.
[  812.399595][T19006] syzkaller1: tun_chr_ioctl cmd 1074025677
[  812.414035][T19006] syzkaller1: linktype set to 786
[  812.653475][T19013] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  812.795581][T19014] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.4353'.
[  813.015401][T19016] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4354'.
[  813.581300][T19036] netlink: 'syz.4.4362': attribute type 3 has an invalid length.
[  813.600496][T19036] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.4362'.
[  813.778195][T19043] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4363'.
[  817.601040][T19043] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4363'.
[  818.552685][T19081] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4376'.
[  818.569598][T19081] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4376'.
[  818.723878][T19086] syzkaller0: entered promiscuous mode
[  818.729714][T19086] syzkaller0: entered allmulticast mode
[  818.753653][T19086] syzkaller0: mtu greater than device maximum
[  820.171209][T19117] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4388'.
[  820.502074][T19118] netlink: 'syz.0.4387': attribute type 10 has an invalid length.
[  820.550019][T19125] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4389'.
[  820.568915][T19118] team0: Device ipvlan1 failed to register rx_handler
[  820.601103][T19125] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  820.666323][T19125] tc_dump_action: action bad kind
[  820.809013][T19132] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4391'.
[  822.813249][T19132] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4391'.
[  823.453867][T19162] netlink: 'syz.0.4399': attribute type 29 has an invalid length.
[  823.501451][T19162] netlink: 'syz.0.4399': attribute type 29 has an invalid length.
[  823.537760][T19163] netlink: 'syz.0.4399': attribute type 29 has an invalid length.
[  823.577618][T19164] netlink: 'syz.0.4399': attribute type 29 has an invalid length.
[  823.899554][T19169] netlink: 'syz.4.4401': attribute type 10 has an invalid length.
[  823.944019][T19169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4401'.
[  824.249255][T19183] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4406'.
[  824.279288][T19183] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4406'.
[  824.418420][T19186] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4407'.
[  825.002709][T19174] netlink: 'syz.3.4404': attribute type 10 has an invalid length.
[  825.108661][T19174] team0: Device ipvlan1 failed to register rx_handler
[  825.432210][T19191] netlink: 'syz.0.4408': attribute type 10 has an invalid length.
[  825.463747][T19191] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4408'.
[  826.240650][T19209] netlink: 'syz.3.4414': attribute type 10 has an invalid length.
[  826.251987][T19209] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4414'.
[  826.532977][T19215] netlink: 'syz.0.4416': attribute type 10 has an invalid length.
[  826.660430][T19221] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4418'.
[  826.693714][T19221] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4418'.
[  826.844485][T19225] netlink: 'syz.3.4420': attribute type 9 has an invalid length.
[  826.861851][T19225] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4420'.
[  826.949483][T19226] netlink: 'syz.3.4420': attribute type 9 has an invalid length.
[  827.741437][T19247] netlink: 'syz.4.4425': attribute type 15 has an invalid length.
[  827.817940][T19247] __nla_validate_parse: 1 callbacks suppressed
[  827.817976][T19247] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4425'.
[  827.934845][T19247] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4425'.
[  828.093375][T19240] netlink: 'syz.1.4423': attribute type 10 has an invalid length.
[  828.107795][T19240] team0: Device ipvlan1 failed to register rx_handler
[  828.429769][T19268] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4431'.
[  828.951720][T19280] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4435'.
[  828.981327][T19280] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4435'.
[  829.425921][T19290] netlink: 'syz.4.4440': attribute type 10 has an invalid length.
[  829.436846][T19290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4440'.
[  829.448662][T19290] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  829.465217][T19292] netlink: 'syz.3.4441': attribute type 2 has an invalid length.
[  830.093455][T19313] netlink: 'syz.1.4449': attribute type 4 has an invalid length.
[  830.112381][T19313] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4449'.
[  830.168263][T19317] netlink: 'syz.3.4450': attribute type 10 has an invalid length.
[  830.189978][T19317] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4450'.
[  830.844820][T19335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  831.013900][T19341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4461'.
[  831.291010][T19349] validate_nla: 1 callbacks suppressed
[  831.291030][T19349] netlink: 'syz.1.4464': attribute type 10 has an invalid length.
[  831.327379][T19349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4464'.
[  832.327416][T19377] netlink: 'syz.1.4476': attribute type 27 has an invalid length.
[  832.367520][T19377] netlink: 'syz.1.4476': attribute type 4 has an invalid length.
[  832.409137][T19375] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  832.496787][T19375] tc_dump_action: action bad kind
[  834.551952][T19412] __nla_validate_parse: 4 callbacks suppressed
[  834.551975][T19412] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4488'.
[  835.247213][T19427] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4491'.
[  835.303778][T19427] bridge_slave_1: default FDB implementation only supports local addresses
[  835.344791][T19429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4493'.
[  836.024683][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'.
[  836.593851][T19460] syz.0.4502 (19460) used obsolete PPPIOCDETACH ioctl
[  836.779809][T19463] sit0: entered allmulticast mode
[  836.936157][T19465] bond_slave_1: entered promiscuous mode
[  836.971606][T19465] bond_slave_1: entered allmulticast mode
[  837.219478][T19471] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4506'.
[  837.244306][T19471] team_slave_0: left promiscuous mode
[  837.255439][T19471] team_slave_0: left allmulticast mode
[  837.326760][T19471] team0: Port device team_slave_0 removed
[  837.358077][T19471] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  838.446356][T19486] netlink: 'syz.0.4510': attribute type 10 has an invalid length.
[  840.784540][T19509] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4520'.
[  840.843629][T19509] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  843.062696][T19541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4530'.
[  843.632813][T19541] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  843.787342][T19547] syzkaller1: tun_chr_ioctl cmd 1074025677
[  843.800709][T19547] syzkaller1: linktype set to 786
[  843.960116][T19556] netlink: 'syz.3.4533': attribute type 30 has an invalid length.
[  844.265718][T19566] netlink: 'syz.0.4537': attribute type 9 has an invalid length.
[  844.295681][T19566] netlink: 209828 bytes leftover after parsing attributes in process `syz.0.4537'.
[  844.414205][T19567] netlink: 'syz.0.4537': attribute type 9 has an invalid length.
[  844.462938][T19567] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4537'.
[  844.632594][T19571] netlink: 'syz.1.4539': attribute type 10 has an invalid length.
[  844.655246][T19571] bond0: (slave netdevsim0): Releasing backup interface
[  845.270860][T19589] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4546'.
[  845.291679][T19589] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4546'.
[  845.967486][T19601] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4551'.
[  846.022894][T19601] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  846.734774][T19622] FAULT_INJECTION: forcing a failure.
[  846.734774][T19622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.774528][T19622] CPU: 0 PID: 19622 Comm: syz.0.4560 Not tainted syzkaller #0
[  846.782087][T19622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  846.792199][T19622] Call Trace:
[  846.795529][T19622]  <TASK>
[  846.798505][T19622]  dump_stack_lvl+0x18c/0x250
[  846.803244][T19622]  ? show_regs_print_info+0x20/0x20
[  846.808495][T19622]  ? load_image+0x420/0x420
[  846.813050][T19622]  ? __might_fault+0xaa/0x120
[  846.817779][T19622]  ? __lock_acquire+0x7d40/0x7d40
[  846.822871][T19622]  should_fail_ex+0x39d/0x4d0
[  846.827621][T19622]  _copy_from_user+0x2f/0xe0
[  846.832268][T19622]  __sys_bpf+0x23e/0x890
[  846.836577][T19622]  ? bpf_link_show_fdinfo+0x390/0x390
[  846.842004][T19622]  ? lock_chain_count+0x20/0x20
[  846.846895][T19622]  __x64_sys_bpf+0x7c/0x90
[  846.851342][T19622]  do_syscall_64+0x55/0xb0
[  846.855787][T19622]  ? clear_bhb_loop+0x40/0x90
[  846.860496][T19622]  ? clear_bhb_loop+0x40/0x90
[  846.865209][T19622]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  846.871138][T19622] RIP: 0033:0x7fcd60b9ce59
[  846.875580][T19622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.895224][T19622] RSP: 002b:00007fcd61aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  846.903667][T19622] RAX: ffffffffffffffda RBX: 00007fcd60e15fa0 RCX: 00007fcd60b9ce59
[  846.911665][T19622] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  846.919662][T19622] RBP: 00007fcd61aaf090 R08: 0000000000000000 R09: 0000000000000000
[  846.927670][T19622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.935668][T19622] R13: 00007fcd60e16038 R14: 00007fcd60e15fa0 R15: 00007fff40c193f8
[  846.943683][T19622]  </TASK>
[  847.347992][T19637] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4563'.
[  847.409367][T19637] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4563'.
[  847.513462][T19636] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4564'.
[  847.870788][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4567'.
[  848.238646][T19656] syzkaller0: entered promiscuous mode
[  848.253540][T19656] syzkaller0: entered allmulticast mode
[  851.252091][T19661] syzkaller0: mtu greater than device maximum
[  851.868305][T19677] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4574'.
[  851.899696][T19677] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  851.945203][T19683] netlink: 'syz.4.4577': attribute type 9 has an invalid length.
[  851.961573][T19677] tc_dump_action: action bad kind
[  851.977820][T19683] netlink: 209828 bytes leftover after parsing attributes in process `syz.4.4577'.
[  852.212583][T19687] netlink: 'syz.4.4577': attribute type 9 has an invalid length.
[  852.246086][T19687] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4577'.
[  853.653346][T19689] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4578'.
[  853.663852][T19689] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.4578'.
[  854.279210][T19707] netlink: 'syz.3.4582': attribute type 10 has an invalid length.
[  854.335577][T19707] team0: left allmulticast mode
[  854.413994][T19707] team_slave_1: left allmulticast mode
[  854.481936][T19707] team0: left promiscuous mode
[  854.527022][T19707] team_slave_1: left promiscuous mode
[  854.552761][T19707] bridge0: port 3(team0) entered disabled state
[  854.589467][T19707] 8021q: adding VLAN 0 to HW filter on device team0
[  854.630806][T19707] bond0: (slave team0): Enslaving as an active interface with an up link
[  855.300012][T19725] netlink: 'syz.3.4589': attribute type 9 has an invalid length.
[  855.344811][T19725] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.4589'.
[  855.502176][T19726] netlink: 'syz.3.4589': attribute type 9 has an invalid length.
[  855.574641][T19726] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4589'.
[  855.767644][T19718] netlink: 'syz.1.4587': attribute type 10 has an invalid length.
[  855.829726][T19718] team0: Device ipvlan1 failed to register rx_handler
[  856.136817][T19733] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4590'.
[  856.159971][T19733] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4590'.
[  856.916996][T19763] sctp: [Deprecated]: syz.1.4595 (pid 19763) Use of struct sctp_assoc_value in delayed_ack socket option.
[  856.916996][T19763] Use struct sctp_sack_info instead
[  857.099729][T19766] netlink: 'syz.0.4601': attribute type 10 has an invalid length.
[  857.111651][T19766] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4601'.
[  857.241328][T19770] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4600'.
[  857.252422][T19770] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  857.394495][T19770] tc_dump_action: action bad kind
[  857.523612][T19773] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4602'.
[  858.351133][T19777] netlink: 'syz.0.4604': attribute type 9 has an invalid length.
[  858.383699][T19777] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4604'.
[  859.555789][T19779] netlink: 'syz.0.4604': attribute type 9 has an invalid length.
[  859.582513][T19779] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4604'.
[  859.716795][T19781] netlink: 'syz.1.4605': attribute type 9 has an invalid length.
[  859.725378][T19781] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4605'.
[  859.778793][T19783] netlink: 'syz.3.4606': attribute type 10 has an invalid length.
[  860.698335][T19801] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4613'.
[  861.062876][T19812] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4615'.
[  861.101745][T19812] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  861.177886][T19814] tc_dump_action: action bad kind
[  862.317949][T19829] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4622'.
[  862.348263][T19829] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  862.384472][T19830] tc_dump_action: action bad kind
[  862.397354][T19834] netlink: 'syz.3.4624': attribute type 10 has an invalid length.
[  862.410356][T19834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4624'.
[  862.505700][T19835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4623'.
[  862.534778][T19835] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  862.560253][T19839] tc_dump_action: action bad kind
[  864.636687][T19859] netlink: 'syz.4.4629': attribute type 4 has an invalid length.
[  864.678000][T19859] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4629'.
[  864.952987][T19864] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4631'.
[  864.993826][T19864] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  865.043642][T19865] tc_dump_action: action bad kind
[  865.800556][T19870] tap0: tun_chr_ioctl cmd 35108
[  866.061477][T19882] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4636'.
[  866.078188][T19882] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  866.119797][T19882] tc_dump_action: action bad kind
[  866.333849][T19890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4639'.
[  867.614696][T19907] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4644'.
[  867.660517][T19907] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4644'.
[  868.407517][T19926] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4651'.
[  868.443341][T19926] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  868.653761][T19926] tc_dump_action: action bad kind
[  869.775535][T19955] FAULT_INJECTION: forcing a failure.
[  869.775535][T19955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  869.831060][T19955] CPU: 1 PID: 19955 Comm: syz.4.4659 Not tainted syzkaller #0
[  869.838618][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  869.848737][T19955] Call Trace:
[  869.852043][T19955]  <TASK>
[  869.854990][T19955]  dump_stack_lvl+0x18c/0x250
[  869.859693][T19955]  ? show_regs_print_info+0x20/0x20
[  869.864912][T19955]  ? load_image+0x420/0x420
[  869.869437][T19955]  ? __lock_acquire+0x7d40/0x7d40
[  869.874490][T19955]  ? snprintf+0xe9/0x140
[  869.878794][T19955]  should_fail_ex+0x39d/0x4d0
[  869.883501][T19955]  _copy_to_user+0x2f/0xa0
[  869.887943][T19955]  simple_read_from_buffer+0xe7/0x150
[  869.893345][T19955]  proc_fail_nth_read+0x1e8/0x260
[  869.898402][T19955]  ? proc_fault_inject_write+0x360/0x360
[  869.904059][T19955]  ? fsnotify_perm+0x271/0x5e0
[  869.908843][T19955]  ? proc_fault_inject_write+0x360/0x360
[  869.914511][T19955]  vfs_read+0x28b/0x970
[  869.918707][T19955]  ? kernel_read+0x1e0/0x1e0
[  869.923324][T19955]  ? __fget_files+0x28/0x4b0
[  869.927943][T19955]  ? __fget_files+0x28/0x4b0
[  869.932563][T19955]  ? __fget_files+0x43d/0x4b0
[  869.937274][T19955]  ? __fdget_pos+0x2a3/0x330
[  869.941887][T19955]  ? ksys_read+0x75/0x260
[  869.946263][T19955]  ksys_read+0x150/0x260
[  869.950535][T19955]  ? vfs_write+0x990/0x990
[  869.954994][T19955]  ? lockdep_hardirqs_on+0x98/0x150
[  869.960223][T19955]  do_syscall_64+0x55/0xb0
[  869.964663][T19955]  ? clear_bhb_loop+0x40/0x90
[  869.969361][T19955]  ? clear_bhb_loop+0x40/0x90
[  869.974058][T19955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  869.979991][T19955] RIP: 0033:0x7f8d3f15d68e
[  869.984431][T19955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  870.004057][T19955] RSP: 002b:00007f8d3ffb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  870.012491][T19955] RAX: ffffffffffffffda RBX: 00007f8d3ffb36c0 RCX: 00007f8d3f15d68e
[  870.020481][T19955] RDX: 000000000000000f RSI: 00007f8d3ffb30a0 RDI: 0000000000000008
[  870.028474][T19955] RBP: 00007f8d3ffb3090 R08: 0000000000000000 R09: 0000000000000000
[  870.036489][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  870.044498][T19955] R13: 00007f8d3f416128 R14: 00007f8d3f416090 R15: 00007ffefb27dcc8
[  870.052506][T19955]  </TASK>
[  870.160004][T19958] dvmrp1: tun_chr_ioctl cmd 2148553947
[  870.176084][T19958] dvmrp1: tun_chr_ioctl cmd 1074025672
[  870.185399][T19958] dvmrp1: ignored: set checksum disabled
[  870.202614][T19959] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4661'.
[  870.302216][T19959] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4661'.
[  870.428434][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  870.437749][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  870.649454][T19970] netlink: 'syz.1.4665': attribute type 2 has an invalid length.
[  870.692010][T19970] netlink: 'syz.1.4665': attribute type 1 has an invalid length.
[  870.720151][T19970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4665'.
[  871.512079][T19979] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4667'.
[  871.553717][T19979] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  872.034152][T19979] tc_dump_action: action bad kind
[  873.597961][T20017] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4676'.
[  873.648990][T20017] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4676'.
[  873.766373][T20029] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4681'.
[  873.779487][T20029] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  874.411210][T20030] tc_dump_action: action bad kind
[  875.193958][T20047] netlink: 'syz.3.4685': attribute type 12 has an invalid length.
[  875.212232][T20047] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4685'.
[  876.589508][T20078] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4695'.
[  876.613682][T20078] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  876.643168][T20079] dvmrp1: tun_chr_ioctl cmd 2148553947
[  876.751156][T20076] tc_dump_action: action bad kind
[  876.769477][T20074] dvmrp1: tun_chr_ioctl cmd 1074025672
[  876.838250][T20074] dvmrp1: ignored: set checksum disabled
[  877.963325][T20111] netlink: 'syz.4.4707': attribute type 10 has an invalid length.
[  877.986611][T20109] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4705'.
[  878.037084][T20111] bond0: (slave netdevsim0): Releasing backup interface
[  878.118061][T20109] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4705'.
[  878.222507][T20114] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4706'.
[  878.254066][T20114] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  878.318645][T20115] tc_dump_action: action bad kind
[  879.881409][T20121] netlink: 'syz.4.4709': attribute type 10 has an invalid length.
[  879.891800][T20121] team0: left promiscuous mode
[  879.902352][T20121] team_slave_1: left promiscuous mode
[  879.908203][T20121] hsr_slave_0: left promiscuous mode
[  879.916115][T20121] team0: left allmulticast mode
[  879.921142][T20121] team_slave_1: left allmulticast mode
[  879.926725][T20121] hsr_slave_0: left allmulticast mode
[  879.958755][T20121] 8021q: adding VLAN 0 to HW filter on device team0
[  879.985934][T20121] bond0: (slave team0): Enslaving as an active interface with an up link
[  879.998708][T20123] netlink: 'syz.4.4709': attribute type 10 has an invalid length.
[  880.036871][T20123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4709'.
[  880.056448][T20123] team0: entered promiscuous mode
[  880.072965][T20123] team_slave_1: entered promiscuous mode
[  880.084876][T20123] hsr_slave_0: entered promiscuous mode
[  880.093744][T20123] team0: entered allmulticast mode
[  880.098929][T20123] team_slave_1: entered allmulticast mode
[  880.113543][T20123] hsr_slave_0: entered allmulticast mode
[  880.125356][T20123] bond0: (slave team0): Releasing backup interface
[  880.152816][T20123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  880.354862][T20129] dvmrp1: tun_chr_ioctl cmd 2148553947
[  880.364325][T20129] dvmrp1: tun_chr_ioctl cmd 1074025672
[  880.372062][T20129] dvmrp1: ignored: set checksum disabled
[  881.509765][T20150] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4716'.
[  881.558303][T20150] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  881.623672][T20147] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4717'.
[  881.668657][T20150] tc_dump_action: action bad kind
[  881.674640][T20147] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  881.721057][T20151] tc_dump_action: action bad kind
[  882.589897][T20159] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4721'.
[  883.111666][T20159] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4721'.
[  883.210823][T20164] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4722'.
[  883.221214][T20164] openvswitch: netlink: Tunnel attr 11249 out of range max 16
[  883.304754][T20164] tc_dump_action: action bad kind
[  883.317973][T20171] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4730'.
[  883.342665][T20168] ==================================================================
[  883.350962][T20168] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[  883.358948][T20168] Write of size 56 at addr ffff888062286f90 by task syz.1.4723/20168
[  883.367039][T20168] 
[  883.369459][T20168] CPU: 0 PID: 20168 Comm: syz.1.4723 Not tainted syzkaller #0
[  883.376983][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  883.387064][T20168] Call Trace:
[  883.390371][T20168]  <TASK>
[  883.393330][T20168]  dump_stack_lvl+0x18c/0x250
[  883.398046][T20168]  ? __lock_acquire+0x7d40/0x7d40
[  883.403110][T20168]  ? show_regs_print_info+0x20/0x20
[  883.408350][T20168]  ? load_image+0x420/0x420
[  883.412887][T20168]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  883.418394][T20168]  ? __virt_addr_valid+0x18c/0x540
[  883.423549][T20168]  ? __virt_addr_valid+0x469/0x540
[  883.428699][T20168]  print_report+0xa8/0x210
[  883.433155][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  883.438318][T20168]  kasan_report+0x117/0x150
[  883.442875][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  883.448046][T20168]  kasan_check_range+0x241/0x290
[  883.453027][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  883.458177][T20168]  __asan_memcpy+0x40/0x70
[  883.462634][T20168]  __bpf_get_stackid+0x6bf/0x900
[  883.467631][T20168]  bpf_get_stackid_pe+0x343/0x410
[  883.472693][T20168]  bpf_prog_ee9fdca00c0e1e15+0x30/0x45
[  883.478184][T20168]  bpf_overflow_handler+0x1fc/0x510
[  883.483419][T20168]  ? bpf_overflow_handler+0xde/0x510
[  883.488747][T20168]  ? tp_perf_event_destroy+0x20/0x20
[  883.494070][T20168]  ? stack_trace_save+0xaa/0x100
[  883.499047][T20168]  ? __perf_event_account_interrupt+0x187/0x280
[  883.505331][T20168]  __perf_event_overflow+0x447/0x630
[  883.510661][T20168]  perf_swevent_event+0x319/0x570
[  883.515731][T20168]  ? perf_tp_event+0x1520/0x1520
[  883.520708][T20168]  ? __x64_sys_clone+0x1b7/0x230
[  883.525683][T20168]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  883.531816][T20168]  ___perf_sw_event+0x4a7/0x730
[  883.536723][T20168]  ? ___perf_sw_event+0x199/0x730
[  883.541797][T20168]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  883.548262][T20168]  ? __lock_acquire+0x1347/0x7d40
[  883.553333][T20168]  ? __put_user_4+0x11/0x20
[  883.557894][T20168]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  883.563923][T20168]  ? lock_chain_count+0x20/0x20
[  883.568820][T20168]  ? debug_mutex_init+0x38/0x70
[  883.573713][T20168]  __perf_sw_event+0x139/0x270
[  883.578516][T20168]  do_user_addr_fault+0x123e/0x12c0
[  883.583749][T20168]  ? rcu_is_watching+0x15/0xb0
[  883.588554][T20168]  exc_page_fault+0x64/0x100
[  883.593193][T20168]  asm_exc_page_fault+0x26/0x30
[  883.598090][T20168] RIP: 0010:__put_user_4+0x11/0x20
[  883.603254][T20168] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb
[  883.622901][T20168] RSP: 0018:ffffc90003b0fa58 EFLAGS: 00050202
[  883.629004][T20168] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000200000000080
[  883.637003][T20168] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20
[  883.645013][T20168] RBP: ffffc90003b0fc50 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd
[  883.653020][T20168] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff888018fa50d0
[  883.661041][T20168] R13: ffff88806127f330 R14: 0000000000000000 R15: ffff888018fa4570
[  883.669069][T20168]  copy_process+0x1d7a/0x3dc0
[  883.673783][T20168]  ? plist_add+0x3d8/0x490
[  883.678275][T20168]  ? copy_process+0x96e/0x3dc0
[  883.683079][T20168]  ? futex_wait+0x4cc/0x5e0
[  883.687639][T20168]  ? __pidfd_prepare+0x140/0x140
[  883.692622][T20168]  kernel_clone+0x24b/0x8a0
[  883.697173][T20168]  ? create_io_thread+0x190/0x190
[  883.702241][T20168]  ? do_futex+0x2ff/0x3e0
[  883.706608][T20168]  __x64_sys_clone+0x1b7/0x230
[  883.711411][T20168]  ? __ia32_sys_vfork+0x140/0x140
[  883.716509][T20168]  ? lock_chain_count+0x20/0x20
[  883.721399][T20168]  ? lockdep_hardirqs_on+0x98/0x150
[  883.726639][T20168]  do_syscall_64+0x55/0xb0
[  883.731102][T20168]  ? clear_bhb_loop+0x40/0x90
[  883.735811][T20168]  ? clear_bhb_loop+0x40/0x90
[  883.740521][T20168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  883.746465][T20168] RIP: 0033:0x7f4b4459ce59
[  883.750915][T20168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.770560][T20168] RSP: 002b:00007f4b4543cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  883.779011][T20168] RAX: ffffffffffffffda RBX: 00007f4b44815fa0 RCX: 00007f4b4459ce59
[  883.787016][T20168] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 000000002a801400
[  883.795017][T20168] RBP: 00007f4b44632d6f R08: 0000000000000000 R09: 0000000000000000
[  883.803017][T20168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  883.811025][T20168] R13: 00007f4b44816038 R14: 00007f4b44815fa0 R15: 00007ffc7c7c3988
[  883.819047][T20168]  </TASK>
[  883.822116][T20168] 
[  883.824471][T20168] Allocated by task 20168:
[  883.829003][T20168]  kasan_set_track+0x4e/0x70
[  883.833642][T20168]  __kasan_kmalloc+0x8f/0xa0
[  883.838269][T20168]  __kmalloc_node+0xb4/0x230
[  883.842894][T20168]  bpf_map_area_alloc+0x5e/0x110
[  883.847872][T20168]  prealloc_elems_and_freelist+0x86/0x1c0
[  883.853635][T20168]  stack_map_alloc+0x33a/0x4c0
[  883.858443][T20168]  map_create+0x877/0x12f0
[  883.862895][T20168]  __sys_bpf+0x651/0x890
[  883.867169][T20168]  __x64_sys_bpf+0x7c/0x90
[  883.871623][T20168]  do_syscall_64+0x55/0xb0
[  883.876077][T20168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  883.882010][T20168] 
[  883.884352][T20168] The buggy address belongs to the object at ffff888062286f80
[  883.884352][T20168]  which belongs to the cache kmalloc-cg-64 of size 64
[  883.898601][T20168] The buggy address is located 16 bytes inside of
[  883.898601][T20168]  allocated 40-byte region [ffff888062286f80, ffff888062286fa8)
[  883.912674][T20168] 
[  883.915026][T20168] The buggy address belongs to the physical page:
[  883.921524][T20168] page:ffffea000188a180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62286
[  883.931729][T20168] memcg:ffff88801df9b201
[  883.935998][T20168] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  883.943745][T20168] page_type: 0xffffffff()
[  883.948110][T20168] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000
[  883.956730][T20168] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff88801df9b201
[  883.965337][T20168] page dumped because: kasan: bad access detected
[  883.971784][T20168] page_owner tracks the page as allocated
[  883.977519][T20168] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 10709, tgid 10709 (kworker/u4:31), ts 875511335570, free_ts 875467946272
[  883.996227][T20168]  post_alloc_hook+0x1c1/0x200
[  884.001049][T20168]  get_page_from_freelist+0x1951/0x19e0
[  884.006633][T20168]  __alloc_pages+0x1f0/0x460
[  884.011259][T20168]  alloc_slab_page+0x5d/0x160
[  884.015969][T20168]  new_slab+0x87/0x2d0
[  884.020074][T20168]  ___slab_alloc+0xc5d/0x12f0
[  884.024801][T20168]  __kmem_cache_alloc_node+0x19e/0x250
[  884.030295][T20168]  __kmalloc_node+0xa4/0x230
[  884.034922][T20168]  kvmalloc_node+0x70/0x180
[  884.039464][T20168]  __nf_hook_entries_try_shrink+0x310/0x6d0
[  884.045482][T20168]  __nf_unregister_net_hook+0x4e1/0x6e0
[  884.051081][T20168]  nf_unregister_net_hooks+0xcb/0x130
[  884.056498][T20168]  nf_ct_netns_put+0x36d/0x520
[  884.061386][T20168]  nf_conncount_destroy+0x41/0x150
[  884.066593][T20168]  ovs_ct_exit+0x9c/0x200
[  884.071045][T20168]  ovs_exit_net+0xed/0x7a0
[  884.075500][T20168] page last free stack trace:
[  884.080200][T20168]  free_unref_page_prepare+0x7b2/0x8c0
[  884.085698][T20168]  free_unref_page+0x32/0x2e0
[  884.090413][T20168]  __mmdrop+0xb4/0x3d0
[  884.094507][T20168]  exit_mm+0x24a/0x350
[  884.098623][T20168]  do_exit+0x8dd/0x2460
[  884.102832][T20168]  do_group_exit+0x21b/0x2d0
[  884.107458][T20168]  get_signal+0x12fc/0x13f0
[  884.112019][T20168]  arch_do_signal_or_restart+0xc2/0x800
[  884.117633][T20168]  exit_to_user_mode_loop+0x70/0x110
[  884.122955][T20168]  exit_to_user_mode_prepare+0xee/0x180
[  884.128544][T20168]  syscall_exit_to_user_mode+0x1a/0x50
[  884.134042][T20168]  do_syscall_64+0x61/0xb0
[  884.138484][T20168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  884.144420][T20168] 
[  884.146785][T20168] Memory state around the buggy address:
[  884.152430][T20168]  ffff888062286e80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  884.160527][T20168]  ffff888062286f00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  884.168659][T20168] >ffff888062286f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  884.176755][T20168]                                   ^
[  884.182155][T20168]  ffff888062287000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  884.190250][T20168]  ffff888062287080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  884.198359][T20168] ==================================================================
[  884.206454][T20168] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  884.213660][T20168] CPU: 0 PID: 20168 Comm: syz.1.4723 Not tainted syzkaller #0
[  884.221129][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  884.231201][T20168] Call Trace:
[  884.234505][T20168]  <TASK>
[  884.237460][T20168]  dump_stack_lvl+0x18c/0x250
[  884.242183][T20168]  ? show_regs_print_info+0x20/0x20
[  884.247410][T20168]  ? load_image+0x420/0x420
[  884.251953][T20168]  panic+0x2dc/0x730
[  884.255901][T20168]  ? __lock_acquire+0x7d40/0x7d40
[  884.260963][T20168]  ? bpf_jit_dump+0xd0/0xd0
[  884.265540][T20168]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  884.271495][T20168]  ? _raw_spin_unlock+0x40/0x40
[  884.276413][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  884.281584][T20168]  check_panic_on_warn+0x84/0xa0
[  884.286578][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  884.291744][T20168]  end_report+0x6f/0x130
[  884.296039][T20168]  kasan_report+0x128/0x150
[  884.300589][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  884.305749][T20168]  kasan_check_range+0x241/0x290
[  884.310730][T20168]  ? __bpf_get_stackid+0x6bf/0x900
[  884.315879][T20168]  __asan_memcpy+0x40/0x70
[  884.320334][T20168]  __bpf_get_stackid+0x6bf/0x900
[  884.325316][T20168]  bpf_get_stackid_pe+0x343/0x410
[  884.330381][T20168]  bpf_prog_ee9fdca00c0e1e15+0x30/0x45
[  884.335880][T20168]  bpf_overflow_handler+0x1fc/0x510
[  884.341116][T20168]  ? bpf_overflow_handler+0xde/0x510
[  884.346442][T20168]  ? tp_perf_event_destroy+0x20/0x20
[  884.351773][T20168]  ? stack_trace_save+0xaa/0x100
[  884.356743][T20168]  ? __perf_event_account_interrupt+0x187/0x280
[  884.363026][T20168]  __perf_event_overflow+0x447/0x630
[  884.368366][T20168]  perf_swevent_event+0x319/0x570
[  884.373437][T20168]  ? perf_tp_event+0x1520/0x1520
[  884.378411][T20168]  ? __x64_sys_clone+0x1b7/0x230
[  884.383387][T20168]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  884.389506][T20168]  ___perf_sw_event+0x4a7/0x730
[  884.394390][T20168]  ? ___perf_sw_event+0x199/0x730
[  884.399438][T20168]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  884.405885][T20168]  ? __lock_acquire+0x1347/0x7d40
[  884.410943][T20168]  ? __put_user_4+0x11/0x20
[  884.415490][T20168]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  884.421494][T20168]  ? lock_chain_count+0x20/0x20
[  884.426366][T20168]  ? debug_mutex_init+0x38/0x70
[  884.431242][T20168]  __perf_sw_event+0x139/0x270
[  884.436046][T20168]  do_user_addr_fault+0x123e/0x12c0
[  884.441283][T20168]  ? rcu_is_watching+0x15/0xb0
[  884.446080][T20168]  exc_page_fault+0x64/0x100
[  884.450699][T20168]  asm_exc_page_fault+0x26/0x30
[  884.455590][T20168] RIP: 0010:__put_user_4+0x11/0x20
[  884.460738][T20168] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb
[  884.480384][T20168] RSP: 0018:ffffc90003b0fa58 EFLAGS: 00050202
[  884.486489][T20168] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000200000000080
[  884.494491][T20168] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20
[  884.502495][T20168] RBP: ffffc90003b0fc50 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd
[  884.510498][T20168] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff888018fa50d0
[  884.518500][T20168] R13: ffff88806127f330 R14: 0000000000000000 R15: ffff888018fa4570
[  884.526508][T20168]  copy_process+0x1d7a/0x3dc0
[  884.531253][T20168]  ? plist_add+0x3d8/0x490
[  884.535716][T20168]  ? copy_process+0x96e/0x3dc0
[  884.540515][T20168]  ? futex_wait+0x4cc/0x5e0
[  884.545064][T20168]  ? __pidfd_prepare+0x140/0x140
[  884.550051][T20168]  kernel_clone+0x24b/0x8a0
[  884.554594][T20168]  ? create_io_thread+0x190/0x190
[  884.559677][T20168]  ? do_futex+0x2ff/0x3e0
[  884.564060][T20168]  __x64_sys_clone+0x1b7/0x230
[  884.568862][T20168]  ? __ia32_sys_vfork+0x140/0x140
[  884.573938][T20168]  ? lock_chain_count+0x20/0x20
[  884.578836][T20168]  ? lockdep_hardirqs_on+0x98/0x150
[  884.584142][T20168]  do_syscall_64+0x55/0xb0
[  884.588628][T20168]  ? clear_bhb_loop+0x40/0x90
[  884.593382][T20168]  ? clear_bhb_loop+0x40/0x90
[  884.598112][T20168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  884.604084][T20168] RIP: 0033:0x7f4b4459ce59
[  884.608540][T20168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.628175][T20168] RSP: 002b:00007f4b4543cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  884.636633][T20168] RAX: ffffffffffffffda RBX: 00007f4b44815fa0 RCX: 00007f4b4459ce59
[  884.644638][T20168] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 000000002a801400
[  884.652648][T20168] RBP: 00007f4b44632d6f R08: 0000000000000000 R09: 0000000000000000
[  884.660651][T20168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  884.668663][T20168] R13: 00007f4b44816038 R14: 00007f4b44815fa0 R15: 00007ffc7c7c3988
[  884.676704][T20168]  </TASK>
[  884.680342][T20168] Kernel Offset: disabled
[  884.684682][T20168] Rebooting in 86400 seconds..