last executing test programs:

2m39.707469954s ago: executing program 3 (id=702):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffeffffffffff000, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140)={r5}, 0xc)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x76ff}}, 0x80, 0x0}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0xe0, 0x8, 0xfe, 0x40000}, {0x5, 0x0, 0x5, 0x4}, {0x2, 0x0, 0xfc}, {0x6, 0x0, 0x0, 0xffffffc}]})
sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006003800000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x3)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)

2m38.742816817s ago: executing program 3 (id=709):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x60, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)
r1 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close(0xffffffffffffffff) (async)
socket$kcm(0x2b, 0x1, 0x0) (async)
socket$kcm(0xa, 0x2, 0x73) (async)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x60, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) (async)
socket$kcm(0x10, 0x3, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24004000) (async)

2m38.60246478s ago: executing program 3 (id=711):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000480)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = getpid()
sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}, 0x8841)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0xe, 0x0, 0x3, 0x0, 0x1, 0x21010, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x209, 0x6, 0x5, 0x7, 0x7, 0xdf3, 0x8, 0x0, 0x7, 0x0, 0x2}, r5, 0x10, 0xffffffffffffffff, 0x1)

2m38.358247686s ago: executing program 3 (id=716):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=@raw=[@exit, @jmp={0x5, 0x0, 0x5, 0x8, 0x9, 0xffffffffffffffff, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0xe0b, 0xce, &(0x7f0000000080)=""/206, 0x41100, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0xffffffff}, 0x10, 0xbac8, 0xffffffffffffffff, 0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x5, 0xc, 0x7}, {0x0, 0x3, 0x4, 0x1}, {0x1, 0x1, 0xa, 0x7}, {0x5, 0x1, 0xc, 0x1}], 0x10, 0x3}, 0x94) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=@raw=[@exit, @jmp={0x5, 0x0, 0x5, 0x8, 0x9, 0xffffffffffffffff, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0xe0b, 0xce, &(0x7f0000000080)=""/206, 0x41100, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0xffffffff}, 0x10, 0xbac8, 0xffffffffffffffff, 0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x5, 0xc, 0x7}, {0x0, 0x3, 0x4, 0x1}, {0x1, 0x1, 0xa, 0x7}, {0x5, 0x1, 0xc, 0x1}], 0x10, 0x3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6d, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0xffffffff, 0x10}, 0xc) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0xffffffff, 0x10}, 0xc)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x21, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x3}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x9, 0x6, 0x3, 0x4, 0x1}], &(0x7f0000000840)='syzkaller\x00', 0xfffffca5, 0xbf, &(0x7f0000000880)=""/191, 0x41100, 0x30, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x0, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[r4, r5, r6, r7]}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x61, '\x00', 0x0, r3, 0x1, 0x5, 0x1}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3ff, '\x00', r1, r3, 0x0, 0x1, 0x4}, 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x7, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x1, 0x4, 0x4, 0xd, 0x2, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}]}, &(0x7f0000000d80)='syzkaller\x00', 0x40, 0x89, &(0x7f0000000dc0)=""/137, 0x41100, 0x22, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r9, r2, r10, r5, r9, r9, r9, r4], &(0x7f0000000f40)}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r2}, &(0x7f0000001040), &(0x7f0000001080)=r8}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r2, <r12=>0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r8}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x1d, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xcf, 0x2, 0x9, 0x7fff, 0xffffc4e8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x7, 0x3, &(0x7f0000001240)=""/3, 0x41000, 0x2, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0x4, 0x6ad, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001300)=[r10, r10, 0x1, r2, r2, r5, 0x1], &(0x7f0000001340)=[{0x2, 0x3, 0x8, 0x5}, {0x4, 0x5, 0x10, 0x4}, {0x3, 0x4, 0x6, 0x3}, {0x2, 0x1, 0xe, 0x5}, {0x3, 0x2, 0x10, 0xc}, {0x0, 0x1, 0xb, 0x5}, {0x1, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x7, 0x6}, {0x4, 0x5, 0xa, 0x4}], 0x10, 0x3}, 0x94) (async)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x1d, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xcf, 0x2, 0x9, 0x7fff, 0xffffc4e8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x7, 0x3, &(0x7f0000001240)=""/3, 0x41000, 0x2, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0x4, 0x6ad, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001300)=[r10, r10, 0x1, r2, r2, r5, 0x1], &(0x7f0000001340)=[{0x2, 0x3, 0x8, 0x5}, {0x4, 0x5, 0x10, 0x4}, {0x3, 0x4, 0x6, 0x3}, {0x2, 0x1, 0xe, 0x5}, {0x3, 0x2, 0x10, 0xc}, {0x0, 0x1, 0xb, 0x5}, {0x1, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x7, 0x6}, {0x4, 0x5, 0xa, 0x4}], 0x10, 0x3}, 0x94)
perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x4, 0x5, 0x58, 0xf6, 0x0, 0x4eeb, 0x10, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0x5, 0x6}, 0x100002, 0x9, 0x7, 0x5, 0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r9, 0x12) (async)
r14 = perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x4, 0x5, 0x58, 0xf6, 0x0, 0x4eeb, 0x10, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0x5, 0x6}, 0x100002, 0x9, 0x7, 0x5, 0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r9, 0x12)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001540)={0x0, r14}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001540)={0x0, r14}, 0x8)
r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000026c0)=@generic={&(0x7f0000002680)='./file0\x00', 0x0, 0x10}, 0x18)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002700)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x8, '\x00', r1, r3, 0x1, 0x5, 0x4}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)={0x1b, 0x0, 0x0, 0xe, 0x0, r10, 0x401, '\x00', r1, r3, 0x3, 0x0, 0x2}, 0x50) (async)
r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)={0x1b, 0x0, 0x0, 0xe, 0x0, r10, 0x401, '\x00', r1, r3, 0x3, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_tracing={0x1a, 0x4, &(0x7f0000001580)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @alu={0x7, 0x1, 0x2, 0x2, 0x6, 0xffffffffffffff7c, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x48, '\x00', r1, 0x18, r3, 0x8, &(0x7f0000002600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002640)={0x4, 0xf, 0x7f}, 0x10, 0xd312, r15, 0x4, &(0x7f0000002800)=[r3, r9, r16, r9, r4, r17, r3], &(0x7f0000002840)=[{0x2, 0x3, 0x1, 0x9}, {0x0, 0x5, 0x5}, {0x4, 0x1, 0x4, 0xa}, {0x3, 0x5, 0x9, 0xb}], 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_tracing={0x1a, 0x4, &(0x7f0000001580)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @alu={0x7, 0x1, 0x2, 0x2, 0x6, 0xffffffffffffff7c, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x48, '\x00', r1, 0x18, r3, 0x8, &(0x7f0000002600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002640)={0x4, 0xf, 0x7f}, 0x10, 0xd312, r15, 0x4, &(0x7f0000002800)=[r3, r9, r16, r9, r4, r17, r3], &(0x7f0000002840)=[{0x2, 0x3, 0x1, 0x9}, {0x0, 0x5, 0x5}, {0x4, 0x1, 0x4, 0xa}, {0x3, 0x5, 0x9, 0xb}], 0x10, 0x9}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000029c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002980)='.#{:-)%}\xda#]\x00'}, 0x30)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e00)={r3, 0xe0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002b40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002b80)=[0x0], &(0x7f0000002bc0)=[0x0], <r18=>0x0, 0xe3, &(0x7f0000002c00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002c40), &(0x7f0000002c80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000002cc0)}}, 0x10)
r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5f3c, '\x00', 0x0, r3, 0x0, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r2, <r20=>0xffffffffffffffff}, &(0x7f0000002ec0), &(0x7f0000002f00)=r11}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003040)=@bpf_lsm={0x1d, 0x6, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5ac, 0x0, 0x0, 0x0, 0xfffffff7}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0xc, 0x1, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000002a40)='GPL\x00', 0x2, 0x5e, &(0x7f0000002a80)=""/94, 0x1f00, 0x52, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000002b00)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r18, 0x0, 0x8, &(0x7f0000002f80)=[r19, 0xffffffffffffffff, r6, r20, r4], &(0x7f0000002fc0)=[{0x4, 0x5, 0x4, 0x9}, {0x2, 0x1, 0xa}, {0x3, 0x4, 0x7, 0x3}, {0x0, 0x5, 0x2, 0xc}, {0x2, 0x3, 0x2, 0x1}, {0x3, 0x3, 0xb, 0xc}, {0x3, 0x3, 0x3}, {0x2, 0x2, 0x3, 0xa}], 0x10, 0x4}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003040)=@bpf_lsm={0x1d, 0x6, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5ac, 0x0, 0x0, 0x0, 0xfffffff7}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0xc, 0x1, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000002a40)='GPL\x00', 0x2, 0x5e, &(0x7f0000002a80)=""/94, 0x1f00, 0x52, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000002b00)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r18, 0x0, 0x8, &(0x7f0000002f80)=[r19, 0xffffffffffffffff, r6, r20, r4], &(0x7f0000002fc0)=[{0x4, 0x5, 0x4, 0x9}, {0x2, 0x1, 0xa}, {0x3, 0x4, 0x7, 0x3}, {0x0, 0x5, 0x2, 0xc}, {0x2, 0x3, 0x2, 0x1}, {0x3, 0x3, 0xb, 0xc}, {0x3, 0x3, 0x3}, {0x2, 0x2, 0x3, 0xa}], 0x10, 0x4}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003180)={r6, 0x58, &(0x7f0000003100)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003180)={r6, 0x58, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r21=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000031c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x0, '\x00', r21, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000003240)={'ip6gretap0\x00', 0x1})

2m38.170767421s ago: executing program 3 (id=717):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000918ef66b000900623a341054beeaa200080000cdc065dda8fc8e8a098b39a5704f615cb068fe7839d6db6bd580465acc10447260af6f822eee05cba1e99fd2f7acaf4dfcbc0b2b6e974a0dbd268bb6cfdeb0469f4d14ad136c7cfde18e5289532f8a3fdd4ce813cc745d278ce0c52b415376d892289448669e8a5bb59ce72ca02f8e1da1df117d6db64cc9c607679c1eece5a5565142760b8cb3ec39be5d623762ba1bc1c3be2adf526e74255ab4917e6f0139949c37070163007e681020c35bcedb2e6f775e79975a1554910d323473ce3d38bd38ecf1ee72e3731598e5d856487efd96029fe13092c50e1843e36a855bb854775d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) (async, rerun: 32)
r1 = socket$kcm(0x11, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000))

2m36.685420576s ago: executing program 3 (id=720):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local})
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000180))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m21.583414579s ago: executing program 32 (id=720):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local})
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000180))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.836649744s ago: executing program 4 (id=1459):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="004200000000190000000000001811b9caed334f9b0f4bc99a9e24b5f17b61f0f83913e00e67e91e25572e9ac7a9988534ce7a837f3be2cde96f4bf05b11ff778982543bffc35d34e8adb907d9392855d207fb15a3a27e410366237b1ed3a65ba25dae96ef16303444057cbd3d4eece9291e819a7947da70bdb3d5bac71db5169941fa52caedf63fd55ae48fea928f10c391ebcdd1d7fdafad5fe489688050af0ce5e011946360645e03605fd674693bd9789105bd9bcd047dcb114edc52014b1f0900b4", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000000000007b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.656414298s ago: executing program 4 (id=1461):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1})
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) (async)

4.375001855s ago: executing program 0 (id=1462):
socket$kcm(0xa, 0x1, 0x88)
socketpair(0x23, 0x800, 0x1, &(0x7f0000000080))

4.098974842s ago: executing program 4 (id=1464):
syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000"], 0x28}, 0xfc40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r0 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2002a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10c511, 0x9, 0x10001, 0x8, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getpid() (async)
r3 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)}, 0x40000140) (async)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) (async)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x49005a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 32)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) (async, rerun: 32)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async)
sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)

3.715008831s ago: executing program 0 (id=1466):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x12, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="58020000f8ffffff000000000000000085000000360000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x2a, &(0x7f00000002c0), 0x2, 0x0, 0xff50}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r6}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d00010002", 0x25}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x1, 0xe802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x810, 0xc8, 0x1000004, 0x4, 0x2, 0x5, 0xfffd, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x45, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2120)
write$cgroup_subtree(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.515712509s ago: executing program 0 (id=1470):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000140000711073000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

2.314759924s ago: executing program 4 (id=1471):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0x8, 0x0, 0x9, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x6, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f00000005c0)=""/83, 0x4}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.114747819s ago: executing program 0 (id=1472):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x94)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
r0 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, r0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
sendmsg$kcm(r4, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8)

2.048008441s ago: executing program 2 (id=1473):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

1.917361104s ago: executing program 1 (id=1474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202e, 0x8, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
close(r1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x18, 0x3, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11544, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)

1.838150346s ago: executing program 2 (id=1475):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f0901, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x4, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4e, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0x4, 0x10000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]})
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x6, 0x7, 0x4, 0x67}, {0xff, 0x0, 0x7, 0x1}, {0x8b, 0xf6, 0x40, 0x29e2}, {0x4, 0x10, 0x9, 0x1}, {0xffff, 0x4, 0x5, 0xa}, {0x2, 0x0, 0x1, 0x3}, {0x4, 0x38, 0x0, 0x4}, {0xa6fa, 0x9, 0x2, 0x2}]})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40305829, &(0x7f0000000040))
write$cgroup_type(r10, &(0x7f0000000100), 0x9)

1.277075989s ago: executing program 4 (id=1476):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="05", @ANYRES32=r2, @ANYRES32=r3], 0x10)
close(r2)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40a0000000000006111480000000000850000008b56000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r8, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc0189436, 0x2000141a)

1.184762322s ago: executing program 1 (id=1477):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x101, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)

1.126339803s ago: executing program 0 (id=1478):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=r0, 0x120)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000001540), 0x20)
socket$kcm(0x21, 0x2, 0x2)

1.061356515s ago: executing program 2 (id=1479):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000006110080000000000b7080000000000007b8af8ff00000000b708000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94)

974.356396ms ago: executing program 1 (id=1480):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
r4 = openat$cgroup_pressure(r2, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r5)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x4000})

756.144472ms ago: executing program 2 (id=1481):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

755.533212ms ago: executing program 0 (id=1482):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000740), 0x8, 0xed, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x209058}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback, 0x0, 0x0, 0x10003, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3424)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000fc550000080000000800000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000e3fa35fd2d06bc000"/28], 0x50)

578.382786ms ago: executing program 1 (id=1483):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

459.293609ms ago: executing program 1 (id=1484):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000007a12d16a4aef00004000000040000000060000000400000001000084010000000100000003000000000000000000000000000001050000002001000000000000000000030000000002000000feffffff000000008184486f3f7e6e3abe54f50d74d5322a18a38c0d8dc36806c8ede05f9d6a0d57ff0183bfa855c0ab5760db81b7b16fe986433ca8e9b5c6b5fc177e6d42184122536527aa051d7ea2e1c667da3f1d3ab27db9"], 0x0, 0x15}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x32f102, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004c8adbb3b0000000600100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440), 0x0, 0xffffffe8, &(0x7f0000000500), &(0x7f00000002c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200), 0x4)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)

448.605129ms ago: executing program 2 (id=1485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x30, 0x4, 0x2, 0xfffff02c}, {0x6, 0x4, 0x0, 0x2}]})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x80, 0x6, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x42028, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f00000001c0), 0x6}, 0x4081, 0x0, 0x30000, 0x0, 0x82da, 0x3ff, 0x3, 0x0, 0x6, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001000)='cpu&00\t&&')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0xad, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x830d}, 0x20, 0x2, 0xfffffffe, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/174, 0xae}, {0x0}], 0x2}, 0x10021) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})
recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/41, 0x29}, {&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f0000000840)=""/148, 0x94}], 0x5, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x10022) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

8.36923ms ago: executing program 2 (id=1486):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202e, 0x8, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
close(r1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x18, 0x3, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11544, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0x3)

5.86841ms ago: executing program 4 (id=1487):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

0s ago: executing program 1 (id=1494):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000780), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC=r0], 0x31) (async)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfde7) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$kcm(r3, &(0x7f0000002380)={&(0x7f00000006c0)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000740)="13c0cf344600a5435b7ee3010395a4936d30d39b9870f1756d8de89560a5389a468f5379707c4b8bfa40d2f67b7d36abcfc2176911f14652f4", 0x39}, {&(0x7f0000000e80)="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", 0x1000}], 0x2, &(0x7f0000001ec0)=[{0x10, 0x107, 0x3}, {0xf8, 0x29, 0x81, "15bfdef8e74920463b3f0051bf07e1dfa2e9a5c670d64c08dd4145ca78a5b6311bce260a0be28a9e3bb2fb1ed7869273865d3ba32133cdaf02a3dcf3e830f16427a4bc1157a087b9b6fe396c664021dcc221ff1da65149b08eab754036973943833ec74bb555e2839f7065d023f130d7b895f00cd9b6bc2a96a5e8f74c22dec9f439d682e59885b9537e9e127c08435d73e15d3b8e12149af51ddfe25939e4d8d7d7f71985650fd8108b943a8f5e9c236b4260c900e4842b34a4c307921909a636fd4abc5ec2ce602c309ac0762de5a69074529622912320f1172c8d639a6f4f88481f"}, {0x78, 0x10b, 0x400, "0001ea2cb391b0ed65e94435fccfe28e25ef4be04c45337ce5efa5f2e15cda96d396ec7af73a147d88dbe53e5df97f75be1151be58acb728fc0e565ef58bf3a150f67215f8d19698a3056aa288a9f90f375fec27a5b5d9675ed5bd60b04bd2fecc2498"}, {0xd8, 0x10a, 0x10001, "3d0a0d9a8e55a2309b5d34b9d2eac86d4e7d81a198640e5e98136d065cda047126e269b9d5842343b1cf9e7cae66b918ee8923a6e3bc5ee200976cbc0e021781c562ef1f46f72f218be740cf6ada68060c5b074758cc57911c39f8bba5a1bda2b5bc8b32f5942c8be6a12b839f1abb9abd0df5e88db02fb92494f7f47376b3f566c7c2744faa768b519d339dd7e3cd2d146d2f84059b4d75a1a4bccdcbdd20307d52ac0d3288b7b715ed9604c8cea40cb71b5b66d2779d3b74e5cefc517678490c0596"}, {0xc0, 0x10b, 0x5a, "71adb83662c89a15ff6acf453271d85019fa2ffff6f63ed5f588a5a49377c18d34c1eb112da91cf4a1f0efb72f4cb0c53fb6138b0291c3118e5e97157f8cde0af2a3dff3b361fe2bee38789f79844a8f7f9e6a4ca7aca34798fdd4c56924336096e4ad40a45cf6b7f0f3b4727b6f9696ab7c152ddfb83b5de69cb696a6287542395d8783ee3cec4878d21a92b60fa171a24a8f99cf930e223a14bca95d8cc892ee7a6e517c3ece4ae9b67c4613"}, {0x88, 0x119, 0x6, "49b47378139506f07ef653d9a81fb0debc8b2647ba137f301db106eb45269d8b015d4eb22f50085a3cbd53e8950cd6326d3ce34a915a0c5be8adb2ed19a523303a6c9ca11669bdc8a35eef9d79e87e9b76804c302512b020891cc03600558baa26e68b0def52d5a2fab419fb192ca987efc2"}, {0x100, 0x112, 0x58ba1247, "507086df94a911a88b5b134cff06f9cbd78f16397d53dd865d7fb0b431b20b0db654eb47cffd6f103e31cf95dc619f7d39e03c023e67f2cd2d70ce4499674912cf1f4fc871d22bba699577a1ae09a82552b9bc1bf1b4a8393880436b221144de1de3d506d364a1d80ec01fcb313234a16cba4d82c206379039b8d1e42726006212fcb855f8f47934052b2287582a88c955494be03421981e71435842f9ee16dfff4872671625ede837290c0e329ef2f41c1d96466ed5f1c5fcf179df1b8aa103be53de0ece3174c7f5a5bba7d5a65652ea5e0093958ae070bd0926b211c993f527c71e80cdfcf67d4e9d8aefba06"}], 0x4a0}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000080000000000000100850000005600000095000000000000004150671065e5b0f200e1865c96da57cecbdc3135db5f57d162051d26c65e8a81b9a6ddc5ac31da3fa3fa9d84b4775fcb5c5a59ecec750000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async)
r6 = gettid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000001d00000002000200000000000000f8be83f1fa1fa803a43fccbab3b05100"/43], 0x50) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x1}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000180300000000c4000000060000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcb1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0xc}], 0x10, 0xfffffff9}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f0000011c1a000000000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x4000) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)

kernel console output (not intermixed with test programs):

1068][ T6956]  ? show_regs_print_info+0x20/0x20
[  135.886281][ T6956]  ? load_image+0x420/0x420
[  135.890796][ T6956]  ? __might_fault+0xaa/0x120
[  135.895486][ T6956]  ? __lock_acquire+0x7d80/0x7d80
[  135.900527][ T6956]  should_fail_ex+0x394/0x4c0
[  135.905224][ T6956]  _copy_to_user+0x2f/0xa0
[  135.909652][ T6956]  btf_new_fd+0x5c0/0x9e0
[  135.914007][ T6956]  ? bpf_btf_show_fdinfo+0x80/0x80
[  135.919146][ T6956]  ? capable+0x88/0xe0
[  135.923231][ T6956]  __sys_bpf+0x670/0x890
[  135.927488][ T6956]  ? bpf_link_show_fdinfo+0x390/0x390
[  135.932883][ T6956]  ? lock_chain_count+0x20/0x20
[  135.937749][ T6956]  __x64_sys_bpf+0x7c/0x90
[  135.942174][ T6956]  do_syscall_64+0x55/0xb0
[  135.946594][ T6956]  ? clear_bhb_loop+0x40/0x90
[  135.951279][ T6956]  ? clear_bhb_loop+0x40/0x90
[  135.955965][ T6956]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.961865][ T6956] RIP: 0033:0x7fb5c719e159
[  135.966286][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.985901][ T6956] RSP: 002b:00007fb5c80f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.994324][ T6956] RAX: ffffffffffffffda RBX: 00007fb5c7425fa0 RCX: 00007fb5c719e159
[  136.002304][ T6956] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012
[  136.010282][ T6956] RBP: 00007fb5c80f8090 R08: 0000000000000000 R09: 0000000000000000
[  136.018260][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.026236][ T6956] R13: 00007fb5c7426038 R14: 00007fb5c7425fa0 R15: 00007ffefa479018
[  136.034229][ T6956]  </TASK>
[  136.382882][ T5784] Bluetooth: hci0: command tx timeout
[  139.870070][ T6995] FAULT_INJECTION: forcing a failure.
[  139.870070][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.921535][ T6995] CPU: 1 PID: 6995 Comm: syz.3.471 Not tainted syzkaller #0
[  139.926890][ T6997] FAULT_INJECTION: forcing a failure.
[  139.926890][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.928859][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  139.928871][ T6995] Call Trace:
[  139.928878][ T6995]  <TASK>
[  139.928886][ T6995]  dump_stack_lvl+0x18c/0x250
[  139.962821][ T6995]  ? show_regs_print_info+0x20/0x20
[  139.968041][ T6995]  ? load_image+0x420/0x420
[  139.972566][ T6995]  ? __lock_acquire+0x7d80/0x7d80
[  139.977621][ T6995]  ? snprintf+0xe9/0x140
[  139.981893][ T6995]  should_fail_ex+0x394/0x4c0
[  139.986606][ T6995]  _copy_to_user+0x2f/0xa0
[  139.991042][ T6995]  simple_read_from_buffer+0xe7/0x150
[  139.996434][ T6995]  proc_fail_nth_read+0x1e8/0x260
[  140.001481][ T6995]  ? proc_fault_inject_write+0x360/0x360
[  140.007135][ T6995]  ? fsnotify_perm+0x271/0x5e0
[  140.011911][ T6995]  ? proc_fault_inject_write+0x360/0x360
[  140.017568][ T6995]  vfs_read+0x298/0x990
[  140.021745][ T6995]  ? kernel_read+0x1e0/0x1e0
[  140.026354][ T6995]  ? __fget_files+0x28/0x460
[  140.030971][ T6995]  ? __fget_files+0x3fc/0x460
[  140.035680][ T6995]  ? __fdget_pos+0x2a3/0x330
[  140.040291][ T6995]  ? ksys_read+0x74/0x260
[  140.044640][ T6995]  ksys_read+0x151/0x260
[  140.048911][ T6995]  ? vfs_write+0x9a0/0x9a0
[  140.053349][ T6995]  ? lockdep_hardirqs_on+0x98/0x150
[  140.058570][ T6995]  do_syscall_64+0x55/0xb0
[  140.063005][ T6995]  ? clear_bhb_loop+0x40/0x90
[  140.067697][ T6995]  ? clear_bhb_loop+0x40/0x90
[  140.072393][ T6995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.078304][ T6995] RIP: 0033:0x7fad51d5e98e
[  140.082736][ T6995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.102360][ T6995] RSP: 002b:00007fad52c89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.110796][ T6995] RAX: ffffffffffffffda RBX: 00007fad52c8a6c0 RCX: 00007fad51d5e98e
[  140.118783][ T6995] RDX: 000000000000000f RSI: 00007fad52c8a0a0 RDI: 0000000000000005
[  140.126764][ T6995] RBP: 00007fad52c8a090 R08: 0000000000000000 R09: 0000000000000000
[  140.134743][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.142727][ T6995] R13: 00007fad52026038 R14: 00007fad52025fa0 R15: 00007ffe190b0b88
[  140.150721][ T6995]  </TASK>
[  140.153903][ T6997] CPU: 0 PID: 6997 Comm: syz.2.472 Not tainted syzkaller #0
[  140.161214][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.171281][ T6997] Call Trace:
[  140.174572][ T6997]  <TASK>
[  140.177519][ T6997]  dump_stack_lvl+0x18c/0x250
[  140.182226][ T6997]  ? show_regs_print_info+0x20/0x20
[  140.187435][ T6997]  ? load_image+0x420/0x420
[  140.191940][ T6997]  ? __lock_acquire+0x7d80/0x7d80
[  140.194853][ T6992] delete_channel: no stack
[  140.196963][ T6997]  ? snprintf+0xe9/0x140
[  140.196987][ T6997]  should_fail_ex+0x394/0x4c0
[  140.210431][ T6997]  _copy_to_user+0x2f/0xa0
[  140.214867][ T6997]  simple_read_from_buffer+0xe7/0x150
[  140.220258][ T6997]  proc_fail_nth_read+0x1e8/0x260
[  140.225307][ T6997]  ? proc_fault_inject_write+0x360/0x360
[  140.230970][ T6997]  ? fsnotify_perm+0x271/0x5e0
[  140.235753][ T6997]  ? proc_fault_inject_write+0x360/0x360
[  140.241400][ T6997]  vfs_read+0x298/0x990
[  140.245567][ T6997]  ? kernel_read+0x1e0/0x1e0
[  140.250179][ T6997]  ? __fget_files+0x28/0x460
[  140.254789][ T6997]  ? __fget_files+0x3fc/0x460
[  140.259487][ T6997]  ? __fdget_pos+0x2a3/0x330
[  140.264084][ T6997]  ? ksys_read+0x74/0x260
[  140.268426][ T6997]  ksys_read+0x151/0x260
[  140.272682][ T6997]  ? vfs_write+0x9a0/0x9a0
[  140.277111][ T6997]  ? lockdep_hardirqs_on+0x98/0x150
[  140.282319][ T6997]  do_syscall_64+0x55/0xb0
[  140.286748][ T6997]  ? clear_bhb_loop+0x40/0x90
[  140.291428][ T6997]  ? clear_bhb_loop+0x40/0x90
[  140.296111][ T6997]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.302013][ T6997] RIP: 0033:0x7f2713f5e98e
[  140.306434][ T6997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.326396][ T6997] RSP: 002b:00007f2714e0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.334820][ T6997] RAX: ffffffffffffffda RBX: 00007f2714e106c0 RCX: 00007f2713f5e98e
[  140.342803][ T6997] RDX: 000000000000000f RSI: 00007f2714e100a0 RDI: 0000000000000003
[  140.350777][ T6997] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  140.358751][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.366725][ T6997] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  140.374716][ T6997]  </TASK>
[  140.505651][ T7001] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.474'.
[  140.791500][ T7005] netlink: 'syz.3.475': attribute type 10 has an invalid length.
[  140.831489][ T7005] veth0_vlan: left promiscuous mode
[  140.863315][ T7005] veth0_vlan: entered promiscuous mode
[  140.898740][ T7005] team0: Device veth0_vlan failed to register rx_handler
[  141.064639][ T7017] netlink: 14 bytes leftover after parsing attributes in process `syz.0.479'.
[  141.090132][ T7017] hsr_slave_0: left promiscuous mode
[  141.099312][ T7017] hsr_slave_1: left promiscuous mode
[  141.226870][ T7023] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.480'.
[  141.327083][ T7031] raw_sendmsg: syz.3.482 forgot to set AF_INET. Fix it!
[  141.572775][ T7044] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.488'.
[  141.588164][ T7045] netlink: 'syz.3.486': attribute type 10 has an invalid length.
[  141.677058][ T7045] team0: Port device geneve1 added
[  141.690045][ T7044] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.488'.
[  142.182788][ T7055] netlink: 'syz.1.490': attribute type 10 has an invalid length.
[  142.225887][ T7055] veth0_vlan: left promiscuous mode
[  142.253931][ T7055] veth0_vlan: entered promiscuous mode
[  142.305695][ T7055] team0: Device veth0_vlan failed to register rx_handler
[  142.412661][ T7059] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.491'.
[  142.574439][ T7059] syz.0.491 uses obsolete (PF_INET,SOCK_PACKET)
[  142.732520][ T7059] cgroup: fork rejected by pids controller in /syz0
[  142.751702][ T7068] netlink: 'syz.1.494': attribute type 10 has an invalid length.
[  142.762032][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'.
[  143.152160][ T7077] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  143.159313][ T7077] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  143.352637][ T7086] FAULT_INJECTION: forcing a failure.
[  143.352637][ T7086] name failslab, interval 1, probability 0, space 0, times 0
[  143.366679][ T7086] CPU: 1 PID: 7086 Comm: syz.1.499 Not tainted syzkaller #0
[  143.374000][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.384078][ T7086] Call Trace:
[  143.387368][ T7086]  <TASK>
[  143.390323][ T7086]  dump_stack_lvl+0x18c/0x250
[  143.395027][ T7086]  ? show_regs_print_info+0x20/0x20
[  143.400252][ T7086]  ? load_image+0x420/0x420
[  143.404780][ T7086]  ? __might_sleep+0xe0/0xe0
[  143.409391][ T7086]  ? __lock_acquire+0x7d80/0x7d80
[  143.414438][ T7086]  should_fail_ex+0x394/0x4c0
[  143.419145][ T7086]  should_failslab+0x9/0x20
[  143.423675][ T7086]  slab_pre_alloc_hook+0x59/0x300
[  143.428737][ T7086]  kmem_cache_alloc_lru+0x4d/0x2b0
[  143.433869][ T7086]  ? __d_alloc+0x31/0x710
[  143.438218][ T7086]  __d_alloc+0x31/0x710
[  143.442392][ T7086]  d_alloc_pseudo+0x1d/0x70
[  143.446913][ T7086]  alloc_file_pseudo+0xe4/0x210
[  143.451781][ T7086]  ? fput+0x1a0/0x1a0
[  143.455781][ T7086]  ? _raw_spin_unlock+0x28/0x40
[  143.460645][ T7086]  ? alloc_fd+0x590/0x640
[  143.465001][ T7086]  anon_inode_getfd+0xca/0x1c0
[  143.469787][ T7086]  btf_new_fd+0x848/0x9e0
[  143.474146][ T7086]  ? bpf_btf_show_fdinfo+0x80/0x80
[  143.479283][ T7086]  ? capable+0x88/0xe0
[  143.483382][ T7086]  __sys_bpf+0x670/0x890
[  143.487648][ T7086]  ? bpf_link_show_fdinfo+0x390/0x390
[  143.493060][ T7086]  ? lock_chain_count+0x20/0x20
[  143.497945][ T7086]  __x64_sys_bpf+0x7c/0x90
[  143.502380][ T7086]  do_syscall_64+0x55/0xb0
[  143.506820][ T7086]  ? clear_bhb_loop+0x40/0x90
[  143.511511][ T7086]  ? clear_bhb_loop+0x40/0x90
[  143.516215][ T7086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.522125][ T7086] RIP: 0033:0x7efeac59e159
[  143.526560][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.546181][ T7086] RSP: 002b:00007efeaa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  143.554614][ T7086] RAX: ffffffffffffffda RBX: 00007efeac825fa0 RCX: 00007efeac59e159
[  143.562601][ T7086] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012
[  143.570590][ T7086] RBP: 00007efeaa7f6090 R08: 0000000000000000 R09: 0000000000000000
[  143.578575][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.586553][ T7086] R13: 00007efeac826038 R14: 00007efeac825fa0 R15: 00007fff2e3d2dd8
[  143.594548][ T7086]  </TASK>
[  143.971749][ T7098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.503'.
[  143.997211][ T7099] netlink: 'syz.1.502': attribute type 10 has an invalid length.
[  144.013177][ T7099] veth0_vlan: left promiscuous mode
[  144.020061][ T7099] veth0_vlan: entered promiscuous mode
[  144.034917][ T7099] team0: Device veth0_vlan failed to register rx_handler
[  144.175620][ T7104] netlink: 'syz.2.505': attribute type 10 has an invalid length.
[  144.210021][ T7104] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.505'.
[  144.242044][ T7104] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  144.999649][ T7127] netlink: 'syz.2.512': attribute type 1 has an invalid length.
[  145.007877][ T7127] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.512'.
[  145.391769][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.403955][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.411624][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.419856][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.429154][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  145.437622][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.266102][ T7135] chnl_net:caif_netlink_parms(): no params data found
[  146.423945][ T7159] delete_channel: no stack
[  146.442733][ T7158] netlink: 68 bytes leftover after parsing attributes in process `syz.3.522'.
[  146.620996][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.646738][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.662584][ T7135] bridge_slave_0: entered allmulticast mode
[  146.680926][ T7135] bridge_slave_0: entered promiscuous mode
[  146.732941][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.740095][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.751251][ T7135] bridge_slave_1: entered allmulticast mode
[  146.796911][ T7135] bridge_slave_1: entered promiscuous mode
[  146.904216][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.935768][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.022407][ T7135] team0: Port device team_slave_0 added
[  147.043513][ T7135] team0: Port device team_slave_1 added
[  147.217484][ T7180] netlink: 'syz.2.530': attribute type 16 has an invalid length.
[  147.251400][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.259500][ T7180] netlink: 'syz.2.530': attribute type 25 has an invalid length.
[  147.275165][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.301754][ T7180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.530'.
[  147.332274][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.359863][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.377045][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.428764][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.508402][ T5784] Bluetooth: hci0: command tx timeout
[  147.691627][ T7185] syzkaller0: entered promiscuous mode
[  147.700806][ T7185] syzkaller0: entered allmulticast mode
[  147.826008][ T7135] hsr_slave_0: entered promiscuous mode
[  147.842861][ T7135] hsr_slave_1: entered promiscuous mode
[  147.849578][ T7189] netlink: 14 bytes leftover after parsing attributes in process `syz.2.532'.
[  148.152876][ T7199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.160336][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  148.167924][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  148.175415][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  148.216904][ T7198] netlink: 'syz.1.534': attribute type 9 has an invalid length.
[  148.241972][ T7198] netlink: 652 bytes leftover after parsing attributes in process `syz.1.534'.
[  149.584999][ T5784] Bluetooth: hci0: command tx timeout
[  149.811050][ T7205] netlink: 'syz.2.535': attribute type 11 has an invalid length.
[  150.132743][ T7135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.223492][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[  150.234377][ T7213] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  150.242349][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[  150.254405][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[  150.254808][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.539'.
[  150.274624][ T7213] netlink: 'syz.1.538': attribute type 3 has an invalid length.
[  150.288615][ T7213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.538'.
[  150.363411][ T7213] netlink: 668 bytes leftover after parsing attributes in process `syz.1.538'.
[  150.366014][ T7135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.383253][ T7213] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  150.406826][ T7213] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.431101][ T7218] netlink: 'syz.1.538': attribute type 10 has an invalid length.
[  150.505985][ T7135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.537065][ T7221] syz.3.540: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  150.561133][ T7221] CPU: 1 PID: 7221 Comm: syz.3.540 Not tainted syzkaller #0
[  150.568462][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.578546][ T7221] Call Trace:
[  150.581830][ T7221]  <TASK>
[  150.584757][ T7221]  dump_stack_lvl+0x18c/0x250
[  150.589442][ T7221]  ? show_regs_print_info+0x20/0x20
[  150.594639][ T7221]  ? load_image+0x420/0x420
[  150.599145][ T7221]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.605559][ T7221]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  150.612066][ T7221]  warn_alloc+0x246/0x340
[  150.616406][ T7221]  ? stack_trace_save+0xaa/0x100
[  150.621364][ T7221]  ? zone_watermark_ok_safe+0x230/0x230
[  150.626928][ T7221]  ? kasan_set_track+0x5f/0x70
[  150.631692][ T7221]  ? kasan_set_track+0x4e/0x70
[  150.636462][ T7221]  ? __kasan_kmalloc+0x8f/0xa0
[  150.641224][ T7221]  ? xsk_init_queue+0xad/0x100
[  150.645984][ T7221]  ? xsk_setsockopt+0x4c9/0x750
[  150.650828][ T7221]  ? do_sock_setsockopt+0x175/0x1a0
[  150.656026][ T7221]  ? __x64_sys_setsockopt+0x182/0x200
[  150.661400][ T7221]  __vmalloc_node_range+0x129/0x1320
[  150.666712][ T7221]  ? free_vm_area+0x50/0x50
[  150.671228][ T7221]  vmalloc_user+0x74/0x80
[  150.675562][ T7221]  ? xskq_create+0xbf/0x170
[  150.680063][ T7221]  xskq_create+0xbf/0x170
[  150.684393][ T7221]  xsk_init_queue+0xad/0x100
[  150.688984][ T7221]  xsk_setsockopt+0x4c9/0x750
[  150.693658][ T7221]  ? xsk_poll+0x670/0x670
[  150.697986][ T7221]  ? __fget_files+0x28/0x460
[  150.702576][ T7221]  ? aa_sock_opt_perm+0x74/0x100
[  150.707520][ T7221]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  150.713069][ T7221]  ? security_socket_setsockopt+0x7e/0xa0
[  150.718783][ T7221]  ? xsk_poll+0x670/0x670
[  150.723146][ T7221]  do_sock_setsockopt+0x175/0x1a0
[  150.728188][ T7221]  ? __fdget+0x180/0x210
[  150.732449][ T7221]  __x64_sys_setsockopt+0x182/0x200
[  150.737653][ T7221]  do_syscall_64+0x55/0xb0
[  150.742069][ T7221]  ? clear_bhb_loop+0x40/0x90
[  150.746756][ T7221]  ? clear_bhb_loop+0x40/0x90
[  150.751458][ T7221]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.757353][ T7221] RIP: 0033:0x7fad51d9e159
[  150.761767][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.781376][ T7221] RSP: 002b:00007fad52c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  150.789795][ T7221] RAX: ffffffffffffffda RBX: 00007fad52026090 RCX: 00007fad51d9e159
[  150.797762][ T7221] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000006d
[  150.805730][ T7221] RBP: 00007fad51e35024 R08: 0000000000000004 R09: 0000000000000000
[  150.813699][ T7221] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  150.821670][ T7221] R13: 00007fad52026128 R14: 00007fad52026090 R15: 00007ffe190b0b88
[  150.829654][ T7221]  </TASK>
[  150.864450][ T7221] Mem-Info:
[  150.915266][ T7221] active_anon:5411 inactive_anon:0 isolated_anon:0
[  150.915266][ T7221]  active_file:14851 inactive_file:39981 isolated_file:0
[  150.915266][ T7221]  unevictable:768 dirty:103 writeback:0
[  150.915266][ T7221]  slab_reclaimable:10177 slab_unreclaimable:92282
[  150.915266][ T7221]  mapped:24200 shmem:1361 pagetables:497
[  150.915266][ T7221]  sec_pagetables:0 bounce:0
[  150.915266][ T7221]  kernel_misc_reclaimable:0
[  150.915266][ T7221]  free:1346506 free_pcp:9659 free_cma:0
[  150.975811][ T7221] Node 0 active_anon:21732kB inactive_anon:0kB active_file:59404kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96868kB dirty:408kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10636kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no
[  151.010859][ T7221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  151.046777][ T7135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.048236][ T7221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  151.108086][ T7221] lowmem_reserve[]: 0 2521 2522 2522 2522
[  151.115538][ T7221] Node 0 DMA32 free:1478828kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21696kB inactive_anon:0kB active_file:59404kB inactive_file:158896kB unevictable:1536kB writepending:404kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:15792kB local_pcp:7628kB free_cma:0kB
[  151.146881][ T7221] lowmem_reserve[]: 0 0 0 0 0
[  151.151688][ T7221] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  151.179786][ T7221] lowmem_reserve[]: 0 0 0 0 0
[  151.184668][ T7221] Node 1 Normal free:3890524kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23456kB local_pcp:12320kB free_cma:0kB
[  151.214391][ T7221] lowmem_reserve[]: 0 0 0 0 0
[  151.224379][ T7221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  151.251299][ T7221] Node 0 DMA32: 769*4kB (UME) 693*8kB (ME) 588*16kB (UME) 1326*32kB (UME) 1324*64kB (UM) 387*128kB (UME) 128*256kB (UM) 88*512kB (UME) 44*1024kB (UM) 21*2048kB (UME) 273*4096kB (UM) = 1478828kB
[  151.271006][ T7221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  151.288578][ T7221] Node 1 Normal: 217*4kB (UME) 59*8kB (UME) 44*16kB (UME) 55*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890524kB
[  151.312588][ T7221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.331318][ T7221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.346055][ T7221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.356569][ T7135] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  151.363245][ T7221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.363270][ T7221] 56193 total pagecache pages
[  151.363283][ T7221] 0 pages in swap cache
[  151.363294][ T7221] Free swap  = 124996kB
[  151.363306][ T7221] Total swap = 124996kB
[  151.363319][ T7221] 2097051 pages RAM
[  151.363330][ T7221] 0 pages HighMem/MovableOnly
[  151.403946][ T7135] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  151.418726][ T7221] 416960 pages reserved
[  151.423267][ T7221] 0 pages cma reserved
[  151.451800][ T7135] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  151.555810][ T7135] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  151.662071][ T5784] Bluetooth: hci0: command tx timeout
[  151.778843][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.851265][ T7135] 8021q: adding VLAN 0 to HW filter on device team0
[  151.896692][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.903891][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.983717][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.990918][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.071624][ T7237] netlink: 'syz.1.544': attribute type 11 has an invalid length.
[  152.108633][   T11] tipc: Subscription rejected, illegal request
[  152.691792][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.807370][ T7135] veth0_vlan: entered promiscuous mode
[  152.847061][ T7135] veth1_vlan: entered promiscuous mode
[  152.919079][ T7135] veth0_macvtap: entered promiscuous mode
[  152.930572][ T7135] veth1_macvtap: entered promiscuous mode
[  152.971784][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.984420][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.005553][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.030338][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.058649][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.070348][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.080532][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.094275][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.106543][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.118177][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.130556][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.148211][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.159447][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.193320][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.208702][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.219761][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.230446][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.244855][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.372767][ T7135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.381522][ T7135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.412704][ T7135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.421438][ T7135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.456535][ T7279] netlink: 'syz.3.557': attribute type 10 has an invalid length.
[  153.752175][ T5784] Bluetooth: hci0: command tx timeout
[  153.940042][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.971452][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.076139][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.090222][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.097044][ T7294] netlink: 'syz.2.562': attribute type 4 has an invalid length.
[  154.171995][ T7294] __nla_validate_parse: 3 callbacks suppressed
[  154.172010][ T7294] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.562'.
[  154.196885][ T7299] netlink: 'syz.2.562': attribute type 4 has an invalid length.
[  154.214251][ T7299] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.562'.
[  154.314222][ T7295] syzkaller0: entered promiscuous mode
[  154.319752][ T7295] syzkaller0: entered allmulticast mode
[  154.473167][ T7308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.509'.
[  154.533915][ T7309] netlink: 196 bytes leftover after parsing attributes in process `syz.0.509'.
[  154.797293][ T7297] netlink: 'syz.3.561': attribute type 11 has an invalid length.
[  157.903355][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.578'.
[  158.262698][ T7365] FAULT_INJECTION: forcing a failure.
[  158.262698][ T7365] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.291022][ T7365] CPU: 0 PID: 7365 Comm: syz.3.582 Not tainted syzkaller #0
[  158.298349][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  158.308417][ T7365] Call Trace:
[  158.311693][ T7365]  <TASK>
[  158.314618][ T7365]  dump_stack_lvl+0x18c/0x250
[  158.319295][ T7365]  ? show_regs_print_info+0x20/0x20
[  158.324489][ T7365]  ? load_image+0x420/0x420
[  158.328988][ T7365]  ? __might_fault+0xaa/0x120
[  158.333667][ T7365]  ? __lock_acquire+0x7d80/0x7d80
[  158.338698][ T7365]  should_fail_ex+0x394/0x4c0
[  158.343388][ T7365]  _copy_from_user+0x2f/0xe0
[  158.347975][ T7365]  __sys_bpf+0x23e/0x890
[  158.352221][ T7365]  ? bpf_link_show_fdinfo+0x390/0x390
[  158.357597][ T7365]  ? lock_chain_count+0x20/0x20
[  158.362448][ T7365]  __x64_sys_bpf+0x7c/0x90
[  158.366856][ T7365]  do_syscall_64+0x55/0xb0
[  158.371267][ T7365]  ? clear_bhb_loop+0x40/0x90
[  158.375949][ T7365]  ? clear_bhb_loop+0x40/0x90
[  158.380628][ T7365]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.386517][ T7365] RIP: 0033:0x7fad51d9e159
[  158.390928][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.410525][ T7365] RSP: 002b:00007fad52c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  158.418939][ T7365] RAX: ffffffffffffffda RBX: 00007fad52025fa0 RCX: 00007fad51d9e159
[  158.426906][ T7365] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  158.434871][ T7365] RBP: 00007fad52c8a090 R08: 0000000000000000 R09: 0000000000000000
[  158.442834][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.450795][ T7365] R13: 00007fad52026038 R14: 00007fad52025fa0 R15: 00007ffe190b0b88
[  158.458769][ T7365]  </TASK>
[  158.465532][ T7369] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.583'.
[  158.606811][ T7369] syzkaller0: entered promiscuous mode
[  158.634155][ T7369] syzkaller0: entered allmulticast mode
[  161.200658][ T7381] netlink: 'syz.2.587': attribute type 6 has an invalid length.
[  161.210360][ T7381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.587'.
[  161.252178][ T7382] netlink: 'syz.2.587': attribute type 6 has an invalid length.
[  161.275119][ T7382] netlink: 164 bytes leftover after parsing attributes in process `syz.2.587'.
[  161.290644][ T7383] dvmrp1: tun_chr_ioctl cmd 1074025675
[  161.298378][ T7383] dvmrp1: persist disabled
[  161.323651][ T7379] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.587'.
[  161.337829][ T7379] netlink: 'syz.2.587': attribute type 2 has an invalid length.
[  161.722083][ T7407] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.590'.
[  161.878583][ T7422] FAULT_INJECTION: forcing a failure.
[  161.878583][ T7422] name failslab, interval 1, probability 0, space 0, times 0
[  161.904508][ T7422] CPU: 1 PID: 7422 Comm: syz.3.594 Not tainted syzkaller #0
[  161.911829][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.921889][ T7422] Call Trace:
[  161.925170][ T7422]  <TASK>
[  161.928098][ T7422]  dump_stack_lvl+0x18c/0x250
[  161.932782][ T7422]  ? show_regs_print_info+0x20/0x20
[  161.937981][ T7422]  ? load_image+0x420/0x420
[  161.942480][ T7422]  ? __lock_acquire+0x7d80/0x7d80
[  161.947502][ T7422]  ? verify_lock_unused+0x140/0x140
[  161.952706][ T7422]  should_fail_ex+0x394/0x4c0
[  161.957388][ T7422]  should_failslab+0x9/0x20
[  161.961891][ T7422]  slab_pre_alloc_hook+0x59/0x300
[  161.966921][ T7422]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  161.972463][ T7422]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  161.978002][ T7422]  __kmem_cache_alloc_node+0x53/0x250
[  161.983379][ T7422]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  161.988921][ T7422]  __kmalloc+0xa7/0x240
[  161.993081][ T7422]  bpf_prog_test_run_skb+0x242/0x18f0
[  161.998449][ T7422]  ? __fget_files+0x28/0x460
[  162.003040][ T7422]  ? __fget_files+0x3fc/0x460
[  162.007725][ T7422]  ? cpu_online+0x60/0x60
[  162.012050][ T7422]  bpf_prog_test_run+0x31f/0x390
[  162.016986][ T7422]  __sys_bpf+0x49d/0x890
[  162.021230][ T7422]  ? bpf_link_show_fdinfo+0x390/0x390
[  162.026639][ T7422]  ? lock_chain_count+0x20/0x20
[  162.031502][ T7422]  __x64_sys_bpf+0x7c/0x90
[  162.035915][ T7422]  do_syscall_64+0x55/0xb0
[  162.040328][ T7422]  ? clear_bhb_loop+0x40/0x90
[  162.045000][ T7422]  ? clear_bhb_loop+0x40/0x90
[  162.049679][ T7422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.055567][ T7422] RIP: 0033:0x7fad51d9e159
[  162.059977][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.079576][ T7422] RSP: 002b:00007fad52c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  162.087985][ T7422] RAX: ffffffffffffffda RBX: 00007fad52025fa0 RCX: 00007fad51d9e159
[  162.095950][ T7422] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  162.103914][ T7422] RBP: 00007fad52c8a090 R08: 0000000000000000 R09: 0000000000000000
[  162.111880][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.119846][ T7422] R13: 00007fad52026038 R14: 00007fad52025fa0 R15: 00007ffe190b0b88
[  162.127836][ T7422]  </TASK>
[  165.115120][ T7432] sit0: entered allmulticast mode
[  165.479851][ T7453] syzkaller0: entered promiscuous mode
[  165.571576][ T7453] syzkaller0: entered allmulticast mode
[  165.649071][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.702716][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.763479][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.770925][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.755170][ T7480] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.607'.
[  167.910630][ T7474] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.605'.
[  167.919926][ T7478] netlink: 144 bytes leftover after parsing attributes in process `syz.0.607'.
[  168.151481][ T7485] netlink: 'syz.3.608': attribute type 10 has an invalid length.
[  168.172969][ T7485] veth0_vlan: left promiscuous mode
[  168.211181][ T7485] veth0_vlan: entered promiscuous mode
[  168.247967][ T7485] team0: Device veth0_vlan failed to register rx_handler
[  168.470668][ T7501] FAULT_INJECTION: forcing a failure.
[  168.470668][ T7501] name failslab, interval 1, probability 0, space 0, times 0
[  168.490852][ T7501] CPU: 1 PID: 7501 Comm: syz.2.613 Not tainted syzkaller #0
[  168.498177][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.508248][ T7501] Call Trace:
[  168.511541][ T7501]  <TASK>
[  168.514489][ T7501]  dump_stack_lvl+0x18c/0x250
[  168.519190][ T7501]  ? show_regs_print_info+0x20/0x20
[  168.524409][ T7501]  ? load_image+0x420/0x420
[  168.528933][ T7501]  ? __lock_acquire+0x7d80/0x7d80
[  168.533984][ T7501]  should_fail_ex+0x394/0x4c0
[  168.538692][ T7501]  should_failslab+0x9/0x20
[  168.543218][ T7501]  slab_pre_alloc_hook+0x59/0x300
[  168.548268][ T7501]  ? security_sk_alloc+0x4b/0x130
[  168.553308][ T7501]  ? security_sk_alloc+0x4b/0x130
[  168.558353][ T7501]  __kmem_cache_alloc_node+0x53/0x250
[  168.563760][ T7501]  ? security_sk_alloc+0x4b/0x130
[  168.568806][ T7501]  __kmalloc+0xa7/0x240
[  168.572984][ T7501]  ? sk_prot_alloc+0xe7/0x210
[  168.577689][ T7501]  security_sk_alloc+0x4b/0x130
[  168.582566][ T7501]  sk_prot_alloc+0x101/0x210
[  168.587185][ T7501]  ? sk_alloc+0x24/0x350
[  168.591452][ T7501]  sk_alloc+0x3a/0x350
[  168.595540][ T7501]  ? bpf_ctx_init+0x154/0x190
[  168.600255][ T7501]  bpf_prog_test_run_skb+0x371/0x18f0
[  168.605658][ T7501]  ? __fget_files+0x28/0x460
[  168.610270][ T7501]  ? __fget_files+0x3fc/0x460
[  168.614982][ T7501]  ? cpu_online+0x60/0x60
[  168.619330][ T7501]  bpf_prog_test_run+0x31f/0x390
[  168.624293][ T7501]  __sys_bpf+0x49d/0x890
[  168.628556][ T7501]  ? bpf_link_show_fdinfo+0x390/0x390
[  168.633967][ T7501]  ? lock_chain_count+0x20/0x20
[  168.638846][ T7501]  __x64_sys_bpf+0x7c/0x90
[  168.643281][ T7501]  do_syscall_64+0x55/0xb0
[  168.647712][ T7501]  ? clear_bhb_loop+0x40/0x90
[  168.652410][ T7501]  ? clear_bhb_loop+0x40/0x90
[  168.657103][ T7501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.663009][ T7501] RIP: 0033:0x7f2713f9e159
[  168.667438][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.687056][ T7501] RSP: 002b:00007f2714e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  168.695487][ T7501] RAX: ffffffffffffffda RBX: 00007f2714225fa0 RCX: 00007f2713f9e159
[  168.703478][ T7501] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  168.711465][ T7501] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  168.719450][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.727435][ T7501] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  168.735441][ T7501]  </TASK>
[  169.526169][ T7519] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.617'.
[  170.102639][ T7536] FAULT_INJECTION: forcing a failure.
[  170.102639][ T7536] name failslab, interval 1, probability 0, space 0, times 0
[  170.131847][ T7536] CPU: 0 PID: 7536 Comm: syz.2.623 Not tainted syzkaller #0
[  170.139181][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.149248][ T7536] Call Trace:
[  170.152538][ T7536]  <TASK>
[  170.155477][ T7536]  dump_stack_lvl+0x18c/0x250
[  170.160173][ T7536]  ? show_regs_print_info+0x20/0x20
[  170.165373][ T7536]  ? load_image+0x420/0x420
[  170.169869][ T7536]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  170.175864][ T7536]  ? __asan_memset+0x22/0x40
[  170.180458][ T7536]  should_fail_ex+0x394/0x4c0
[  170.185143][ T7536]  should_failslab+0x9/0x20
[  170.189647][ T7536]  slab_pre_alloc_hook+0x59/0x300
[  170.194674][ T7536]  ? __debug_object_init+0xec/0x450
[  170.199877][ T7536]  kmem_cache_alloc+0x5a/0x2c0
[  170.204640][ T7536]  ? slab_build_skb+0x28/0x3e0
[  170.209402][ T7536]  slab_build_skb+0x28/0x3e0
[  170.213992][ T7536]  bpf_prog_test_run_skb+0x38f/0x18f0
[  170.219368][ T7536]  ? __fget_files+0x28/0x460
[  170.223963][ T7536]  ? __fget_files+0x3fc/0x460
[  170.228650][ T7536]  ? cpu_online+0x60/0x60
[  170.233004][ T7536]  bpf_prog_test_run+0x31f/0x390
[  170.237945][ T7536]  __sys_bpf+0x49d/0x890
[  170.242186][ T7536]  ? bpf_link_show_fdinfo+0x390/0x390
[  170.247565][ T7536]  ? lock_chain_count+0x20/0x20
[  170.252422][ T7536]  __x64_sys_bpf+0x7c/0x90
[  170.256838][ T7536]  do_syscall_64+0x55/0xb0
[  170.261250][ T7536]  ? clear_bhb_loop+0x40/0x90
[  170.265922][ T7536]  ? clear_bhb_loop+0x40/0x90
[  170.270596][ T7536]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.276511][ T7536] RIP: 0033:0x7f2713f9e159
[  170.280924][ T7536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.300525][ T7536] RSP: 002b:00007f2714e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  170.308934][ T7536] RAX: ffffffffffffffda RBX: 00007f2714225fa0 RCX: 00007f2713f9e159
[  170.316900][ T7536] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  170.324868][ T7536] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  170.332835][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.340800][ T7536] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  170.348780][ T7536]  </TASK>
[  170.441570][ T7539] netlink: 'syz.3.624': attribute type 39 has an invalid length.
[  170.557696][ T7545] netlink: 'syz.3.624': attribute type 12 has an invalid length.
[  170.566168][ T7545] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.624'.
[  170.783260][ T7550] netlink: 'syz.2.625': attribute type 10 has an invalid length.
[  170.811280][ T7550] veth0_vlan: left promiscuous mode
[  170.827133][ T7550] veth0_vlan: entered promiscuous mode
[  170.839301][ T7550] team0: Device veth0_vlan failed to register rx_handler
[  170.911442][ T7558] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  170.919892][ T7558] netlink: 'syz.0.630': attribute type 3 has an invalid length.
[  170.928260][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.630'.
[  171.379351][ T7569] FAULT_INJECTION: forcing a failure.
[  171.379351][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.412209][ T7569] CPU: 0 PID: 7569 Comm: syz.2.633 Not tainted syzkaller #0
[  171.419540][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.429618][ T7569] Call Trace:
[  171.432915][ T7569]  <TASK>
[  171.435861][ T7569]  dump_stack_lvl+0x18c/0x250
[  171.440570][ T7569]  ? show_regs_print_info+0x20/0x20
[  171.445791][ T7569]  ? load_image+0x420/0x420
[  171.450318][ T7569]  ? __might_fault+0xaa/0x120
[  171.455014][ T7569]  ? __lock_acquire+0x7d80/0x7d80
[  171.460071][ T7569]  should_fail_ex+0x394/0x4c0
[  171.464779][ T7569]  _copy_to_user+0x2f/0xa0
[  171.469218][ T7569]  bpf_test_finish+0x19f/0x650
[  171.474013][ T7569]  ? bpf_test_run+0x174/0x870
[  171.478724][ T7569]  ? convert_skb_to___skb+0x420/0x420
[  171.484138][ T7569]  bpf_prog_test_run_skb+0x1135/0x18f0
[  171.489642][ T7569]  ? cpu_online+0x60/0x60
[  171.493995][ T7569]  bpf_prog_test_run+0x31f/0x390
[  171.498955][ T7569]  __sys_bpf+0x49d/0x890
[  171.503222][ T7569]  ? bpf_link_show_fdinfo+0x390/0x390
[  171.508635][ T7569]  ? lock_chain_count+0x20/0x20
[  171.513517][ T7569]  __x64_sys_bpf+0x7c/0x90
[  171.517952][ T7569]  do_syscall_64+0x55/0xb0
[  171.522391][ T7569]  ? clear_bhb_loop+0x40/0x90
[  171.527088][ T7569]  ? clear_bhb_loop+0x40/0x90
[  171.531789][ T7569]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.537703][ T7569] RIP: 0033:0x7f2713f9e159
[  171.542136][ T7569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.561761][ T7569] RSP: 002b:00007f2714e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  171.570198][ T7569] RAX: ffffffffffffffda RBX: 00007f2714225fa0 RCX: 00007f2713f9e159
[  171.578187][ T7569] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  171.586175][ T7569] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  171.594165][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.602157][ T7569] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  171.610251][ T7569]  </TASK>
[  172.075514][ T7577] C: renamed from team_slave_0 (while UP)
[  172.591376][ T7577] netlink: 148 bytes leftover after parsing attributes in process `syz.1.635'.
[  172.921865][ T7592] netlink: 'syz.0.640': attribute type 10 has an invalid length.
[  172.945141][ T7593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.641'.
[  172.958262][ T7592] veth0_vlan: entered allmulticast mode
[  173.126934][ T7604] FAULT_INJECTION: forcing a failure.
[  173.126934][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.134669][ T7592] veth0_vlan: left promiscuous mode
[  173.141565][ T7604] CPU: 1 PID: 7604 Comm: syz.2.644 Not tainted syzkaller #0
[  173.152897][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.162965][ T7604] Call Trace:
[  173.165837][ T7592] veth0_vlan: entered promiscuous mode
[  173.166241][ T7604]  <TASK>
[  173.166251][ T7604]  dump_stack_lvl+0x18c/0x250
[  173.166283][ T7604]  ? show_regs_print_info+0x20/0x20
[  173.166305][ T7604]  ? load_image+0x420/0x420
[  173.166328][ T7604]  ? __might_fault+0xaa/0x120
[  173.166351][ T7604]  ? __lock_acquire+0x7d80/0x7d80
[  173.166378][ T7604]  should_fail_ex+0x394/0x4c0
[  173.166409][ T7604]  _copy_to_user+0x2f/0xa0
[  173.181559][ T7592] team0: Device veth0_vlan failed to register rx_handler
[  173.184651][ T7604]  bpf_test_finish+0x25a/0x650
[  173.184685][ T7604]  ? bpf_test_run+0x174/0x870
[  173.184710][ T7604]  ? convert_skb_to___skb+0x420/0x420
[  173.184749][ T7604]  bpf_prog_test_run_skb+0x1135/0x18f0
[  173.184797][ T7604]  ? cpu_online+0x60/0x60
[  173.184820][ T7604]  bpf_prog_test_run+0x31f/0x390
[  173.184846][ T7604]  __sys_bpf+0x49d/0x890
[  173.184869][ T7604]  ? bpf_link_show_fdinfo+0x390/0x390
[  173.254084][ T7604]  ? lock_chain_count+0x20/0x20
[  173.258942][ T7604]  __x64_sys_bpf+0x7c/0x90
[  173.263347][ T7604]  do_syscall_64+0x55/0xb0
[  173.267749][ T7604]  ? clear_bhb_loop+0x40/0x90
[  173.272414][ T7604]  ? clear_bhb_loop+0x40/0x90
[  173.277080][ T7604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.282959][ T7604] RIP: 0033:0x7f2713f9e159
[  173.287361][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.306955][ T7604] RSP: 002b:00007f2714e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.315357][ T7604] RAX: ffffffffffffffda RBX: 00007f2714225fa0 RCX: 00007f2713f9e159
[  173.323321][ T7604] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  173.331283][ T7604] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  173.339242][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.347209][ T7604] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  173.355179][ T7604]  </TASK>
[  173.657673][ T7607] IPv6: Can't replace route, no match found
[  174.036532][ T7633] FAULT_INJECTION: forcing a failure.
[  174.036532][ T7633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.050027][ T7633] CPU: 0 PID: 7633 Comm: syz.0.654 Not tainted syzkaller #0
[  174.057336][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.067405][ T7633] Call Trace:
[  174.070712][ T7633]  <TASK>
[  174.073661][ T7633]  dump_stack_lvl+0x18c/0x250
[  174.078363][ T7633]  ? show_regs_print_info+0x20/0x20
[  174.083579][ T7633]  ? load_image+0x420/0x420
[  174.088105][ T7633]  ? __might_fault+0xaa/0x120
[  174.092799][ T7633]  ? __lock_acquire+0x7d80/0x7d80
[  174.097848][ T7633]  should_fail_ex+0x394/0x4c0
[  174.102551][ T7633]  _copy_to_user+0x2f/0xa0
[  174.106986][ T7633]  bpf_test_finish+0x4e7/0x650
[  174.111779][ T7633]  ? bpf_test_run+0x174/0x870
[  174.116481][ T7633]  ? convert_skb_to___skb+0x420/0x420
[  174.121886][ T7633]  bpf_prog_test_run_skb+0x1135/0x18f0
[  174.127389][ T7633]  ? cpu_online+0x60/0x60
[  174.131740][ T7633]  bpf_prog_test_run+0x31f/0x390
[  174.136700][ T7633]  __sys_bpf+0x49d/0x890
[  174.140967][ T7633]  ? bpf_link_show_fdinfo+0x390/0x390
[  174.146374][ T7633]  ? lock_chain_count+0x20/0x20
[  174.151250][ T7633]  __x64_sys_bpf+0x7c/0x90
[  174.155666][ T7633]  do_syscall_64+0x55/0xb0
[  174.160080][ T7633]  ? clear_bhb_loop+0x40/0x90
[  174.164758][ T7633]  ? clear_bhb_loop+0x40/0x90
[  174.169459][ T7633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.175361][ T7633] RIP: 0033:0x7f39df79e159
[  174.179764][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.199361][ T7633] RSP: 002b:00007f39e06de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  174.207776][ T7633] RAX: ffffffffffffffda RBX: 00007f39dfa25fa0 RCX: 00007f39df79e159
[  174.215755][ T7633] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  174.223727][ T7633] RBP: 00007f39e06de090 R08: 0000000000000000 R09: 0000000000000000
[  174.231704][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.239663][ T7633] R13: 00007f39dfa26038 R14: 00007f39dfa25fa0 R15: 00007fffdaf8c408
[  174.247658][ T7633]  </TASK>
[  174.418989][ T7635] netlink: 'syz.0.655': attribute type 10 has an invalid length.
[  174.429129][ T7635] veth0_vlan: left promiscuous mode
[  174.438344][ T7635] veth0_vlan: entered promiscuous mode
[  174.456270][ T7635] team0: Device veth0_vlan failed to register rx_handler
[  174.944353][ T7661] FAULT_INJECTION: forcing a failure.
[  174.944353][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.961238][ T7661] CPU: 1 PID: 7661 Comm: syz.2.664 Not tainted syzkaller #0
[  174.968554][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.978619][ T7661] Call Trace:
[  174.981913][ T7661]  <TASK>
[  174.984858][ T7661]  dump_stack_lvl+0x18c/0x250
[  174.989573][ T7661]  ? show_regs_print_info+0x20/0x20
[  174.994793][ T7661]  ? load_image+0x420/0x420
[  174.999316][ T7661]  ? __lock_acquire+0x7d80/0x7d80
[  175.004359][ T7661]  ? snprintf+0xe9/0x140
[  175.008618][ T7661]  should_fail_ex+0x394/0x4c0
[  175.013329][ T7661]  _copy_to_user+0x2f/0xa0
[  175.017763][ T7661]  simple_read_from_buffer+0xe7/0x150
[  175.023154][ T7661]  proc_fail_nth_read+0x1e8/0x260
[  175.028203][ T7661]  ? proc_fault_inject_write+0x360/0x360
[  175.033862][ T7661]  ? fsnotify_perm+0x271/0x5e0
[  175.038648][ T7661]  ? proc_fault_inject_write+0x360/0x360
[  175.044304][ T7661]  vfs_read+0x298/0x990
[  175.048483][ T7661]  ? kernel_read+0x1e0/0x1e0
[  175.053097][ T7661]  ? __fget_files+0x28/0x460
[  175.057709][ T7661]  ? __fget_files+0x3fc/0x460
[  175.062426][ T7661]  ? __fdget_pos+0x2a3/0x330
[  175.067037][ T7661]  ? ksys_read+0x74/0x260
[  175.071389][ T7661]  ksys_read+0x151/0x260
[  175.075657][ T7661]  ? vfs_write+0x9a0/0x9a0
[  175.080096][ T7661]  ? lockdep_hardirqs_on+0x98/0x150
[  175.085319][ T7661]  do_syscall_64+0x55/0xb0
[  175.089754][ T7661]  ? clear_bhb_loop+0x40/0x90
[  175.094452][ T7661]  ? clear_bhb_loop+0x40/0x90
[  175.099149][ T7661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.105057][ T7661] RIP: 0033:0x7f2713f5e98e
[  175.109487][ T7661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  175.129109][ T7661] RSP: 002b:00007f2714e0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.137555][ T7661] RAX: ffffffffffffffda RBX: 00007f2714e106c0 RCX: 00007f2713f5e98e
[  175.145542][ T7661] RDX: 000000000000000f RSI: 00007f2714e100a0 RDI: 0000000000000006
[  175.153535][ T7661] RBP: 00007f2714e10090 R08: 0000000000000000 R09: 0000000000000000
[  175.161525][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  175.169521][ T7661] R13: 00007f2714226038 R14: 00007f2714225fa0 R15: 00007fff1aed6068
[  175.177541][ T7661]  </TASK>
[  175.991482][ T7672] netlink: 'syz.3.668': attribute type 10 has an invalid length.
[  176.007789][ T7672] veth0_vlan: left promiscuous mode
[  176.017786][ T7672] veth0_vlan: entered promiscuous mode
[  176.048415][ T7672] team0: Device veth0_vlan failed to register rx_handler
[  176.111320][ T7678] netlink: 'syz.1.671': attribute type 4 has an invalid length.
[  176.300058][ T7693] netlink: 'syz.3.675': attribute type 5 has an invalid length.
[  176.822847][ T7703] netlink: 140 bytes leftover after parsing attributes in process `syz.0.678'.
[  176.872030][ T7703] netlink: 10 bytes leftover after parsing attributes in process `syz.0.678'.
[  176.947154][ T7703] bond0: (slave bond_slave_0): Releasing backup interface
[  177.034464][ T7703] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  177.089146][ T7707] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.679'.
[  177.706816][ T7719] netlink: 'syz.3.683': attribute type 10 has an invalid length.
[  177.753043][ T7719] veth0_vlan: left promiscuous mode
[  177.760855][ T7719] veth0_vlan: entered promiscuous mode
[  177.829842][ T7719] team0: Device veth0_vlan failed to register rx_handler
[  177.907104][ T7727] netlink: 'syz.0.685': attribute type 2 has an invalid length.
[  177.922870][ T7727] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.685'.
[  178.155303][ T7733] C: renamed from team_slave_0 (while UP)
[  178.216139][ T7733] netlink: 148 bytes leftover after parsing attributes in process `syz.2.684'.
[  178.589511][ T7760] netlink: 'syz.0.691': attribute type 10 has an invalid length.
[  178.630354][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.691'.
[  178.739217][ T7760] batman_adv: batadv0: Adding interface: virt_wifi0
[  178.748700][ T7760] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.778649][ T7760] batman_adv: batadv0: Interface activated: virt_wifi0
[  178.872916][ T7775] netlink: 'syz.2.694': attribute type 3 has an invalid length.
[  178.880618][ T7775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.694'.
[  179.010486][ T7777] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.695'.
[  179.087298][ T7785] netlink: 'syz.3.697': attribute type 10 has an invalid length.
[  179.132125][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.697'.
[  179.164775][ T7785] netlink: 'syz.3.697': attribute type 10 has an invalid length.
[  179.199220][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.697'.
[  179.241867][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.697'.
[  179.733843][ T7805] C: renamed from team_slave_0 (while UP)
[  179.795327][ T7805] netlink: 148 bytes leftover after parsing attributes in process `syz.3.702'.
[  179.959241][ T7813] validate_nla: 1 callbacks suppressed
[  179.959257][ T7813] netlink: 'syz.0.704': attribute type 13 has an invalid length.
[  180.002008][ T7813] netlink: 'syz.0.704': attribute type 58 has an invalid length.
[  180.015180][ T7813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.704'.
[  180.071486][ T7819] netlink: 'syz.2.706': attribute type 10 has an invalid length.
[  180.140928][ T7819] team0: Device hsr_slave_0 failed to register rx_handler
[  183.074780][ T7873] C: renamed from team_slave_0 (while UP)
[  183.124309][ T7873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.718'.
[  183.307324][ T7874] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1 (while UP)
[  184.933073][ T7925] netlink: 'syz.2.734': attribute type 1 has an invalid length.
[  184.945587][ T7925] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.734'.
[  185.117080][ T7931] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.736'.
[  185.568679][ T7948] netlink: 'syz.1.743': attribute type 10 has an invalid length.
[  185.599107][ T7948] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.743'.
[  185.634981][ T7948] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  185.706801][ T7950] netlink: 76 bytes leftover after parsing attributes in process `syz.2.742'.
[  186.153571][ T7965] netlink: 'syz.1.746': attribute type 19 has an invalid length.
[  186.161587][ T7965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.746'.
[  188.528459][ T7977] netlink: 62903 bytes leftover after parsing attributes in process `syz.0.749'.
[  188.874307][ T7985] netlink: 'syz.0.751': attribute type 19 has an invalid length.
[  189.053789][ T7987] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.752'.
[  189.099978][ T7987] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  189.119380][ T7987] netlink: 21820 bytes leftover after parsing attributes in process `syz.1.752'.
[  190.261856][ T8014] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  190.298855][ T8014] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.759'.
[  190.834710][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  191.652629][ T8053] netlink: 'syz.1.770': attribute type 7 has an invalid length.
[  192.133826][ T8066] pim6reg1: entered promiscuous mode
[  192.139183][ T8066] pim6reg1: entered allmulticast mode
[  192.861546][ T8078] syzkaller0: entered promiscuous mode
[  192.871601][ T8078] syzkaller0: entered allmulticast mode
[  193.874400][ T8102] netlink: 830 bytes leftover after parsing attributes in process `syz.1.782'.
[  193.975233][ T8109] netlink: 'syz.0.781': attribute type 10 has an invalid length.
[  194.318771][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.326567][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  195.065420][ T8127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.096778][ T8125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.787'.
[  195.948661][ T8142] netlink: 'syz.2.793': attribute type 6 has an invalid length.
[  195.956938][ T8142] netlink: 168 bytes leftover after parsing attributes in process `syz.2.793'.
[  196.150404][ T8145] netlink: 'syz.2.794': attribute type 3 has an invalid length.
[  196.162224][ T8145] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.794'.
[  196.377865][ T8149] netlink: 'syz.2.795': attribute type 10 has an invalid length.
[  196.386058][ T5774] Bluetooth: hci2: command 0x0406 tx timeout
[  196.392724][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  196.392767][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  196.399254][ T8149] veth0_vlan: left promiscuous mode
[  196.427197][ T8149] veth0_vlan: entered promiscuous mode
[  196.457269][ T8149] team0: Device veth0_vlan failed to register rx_handler
[  196.642922][ T8157] netlink: 'syz.1.797': attribute type 10 has an invalid length.
[  196.656928][ T8157] team0: Port device virt_wifi0 added
[  196.915319][ T8166] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.800'.
[  196.930821][ T8166] netlink: 'syz.0.800': attribute type 6 has an invalid length.
[  197.120018][ T8171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.149466][ T8172] netlink: 'syz.1.802': attribute type 3 has an invalid length.
[  197.167302][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.802'.
[  198.108765][ T8192] netlink: 'syz.1.808': attribute type 10 has an invalid length.
[  198.151484][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.208357][ T8192] bridge_slave_1: left allmulticast mode
[  198.214507][ T8192] bridge_slave_1: left promiscuous mode
[  198.242191][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.287624][ T8192] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  198.342680][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  198.354535][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  198.364313][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  198.381608][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  198.391272][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  198.399105][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.783785][ T8193] chnl_net:caif_netlink_parms(): no params data found
[  199.132581][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.139782][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.172413][ T8193] bridge_slave_0: entered allmulticast mode
[  199.190311][ T8193] bridge_slave_0: entered promiscuous mode
[  199.223345][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.230549][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.247382][ T8193] bridge_slave_1: entered allmulticast mode
[  199.263435][ T8193] bridge_slave_1: entered promiscuous mode
[  199.500139][ T8225] netlink: 'syz.2.812': attribute type 10 has an invalid length.
[  199.557231][ T8225] veth0_vlan: left promiscuous mode
[  199.663223][ T8225] veth0_vlan: entered promiscuous mode
[  199.671363][ T8225] team0: Device veth0_vlan failed to register rx_handler
[  199.821695][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.865455][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.137517][ T8232] netlink: 'syz.0.815': attribute type 27 has an invalid length.
[  200.172497][ T8233] netlink: 'syz.0.815': attribute type 27 has an invalid length.
[  200.243447][ T8193] team0: Port device team_slave_0 added
[  200.266617][ T8235] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.816'.
[  200.310728][ T8193] team0: Port device team_slave_1 added
[  200.367414][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.383358][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.462962][ T5778] Bluetooth: hci4: command tx timeout
[  200.477153][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.524788][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.571192][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.651946][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.712015][ T8238] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.818'.
[  200.894380][ T8238] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.818'.
[  200.933820][ T8238] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.818'.
[  200.971416][ T8250] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.817'.
[  201.557198][ T8193] hsr_slave_0: entered promiscuous mode
[  201.640885][ T8193] hsr_slave_1: entered promiscuous mode
[  201.651550][ T8193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.669816][ T8193] Cannot create hsr debugfs directory
[  201.684421][ T8238] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.818'.
[  201.702917][ T8250] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.817'.
[  202.032308][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'.
[  202.064923][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.323977][ T8257] bridge_slave_0 (unregistering): left allmulticast mode
[  202.341318][ T8257] bridge_slave_0 (unregistering): left promiscuous mode
[  202.352510][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.450363][ T8262] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.821'.
[  202.542146][ T5778] Bluetooth: hci4: command tx timeout
[  202.705163][ T8193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.726057][ T8193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  202.748299][ T8193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  202.784039][ T8193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.822112][ T8275] netlink: 'syz.1.824': attribute type 10 has an invalid length.
[  202.830343][ T8274] sctp: [Deprecated]: syz.0.825 (pid 8274) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.830343][ T8274] Use struct sctp_sack_info instead
[  202.853829][ T8275] veth0_vlan: left promiscuous mode
[  202.860955][ T8275] veth0_vlan: entered promiscuous mode
[  202.903741][ T8275] team0: Device veth0_vlan failed to register rx_handler
[  203.222371][ T8281] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.826'.
[  203.321395][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.374068][ T8193] 8021q: adding VLAN 0 to HW filter on device team0
[  203.397837][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.405052][ T7408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.493847][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.501039][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.095694][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.627360][ T5778] Bluetooth: hci4: command tx timeout
[  204.861043][ T8193] veth0_vlan: entered promiscuous mode
[  204.895378][ T8193] veth1_vlan: entered promiscuous mode
[  205.015473][ T8193] veth0_macvtap: entered promiscuous mode
[  205.045486][ T8193] veth1_macvtap: entered promiscuous mode
[  205.089374][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.111350][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.131244][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.156363][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.166725][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.178055][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.195018][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.218396][ T8331] netlink: 'syz.1.836': attribute type 10 has an invalid length.
[  205.232548][ T8331] veth0_vlan: left promiscuous mode
[  205.243570][ T8331] veth0_vlan: entered promiscuous mode
[  205.263585][ T8331] team0: Device veth0_vlan failed to register rx_handler
[  205.411425][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.423700][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.470053][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.496613][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.524905][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.557443][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.582944][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.612429][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.624194][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.689496][ T8193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.706364][ T8193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.725387][ T8193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.748135][ T8193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.340987][ T8344] netlink: 'syz.0.839': attribute type 10 has an invalid length.
[  206.352771][ T8344] __nla_validate_parse: 1 callbacks suppressed
[  206.352825][ T8344] netlink: 2 bytes leftover after parsing attributes in process `syz.0.839'.
[  206.392919][ T8344] hsr0: entered promiscuous mode
[  206.424297][ T8344] bridge0: port 1(hsr0) entered blocking state
[  206.431846][ T8344] bridge0: port 1(hsr0) entered disabled state
[  206.461080][ T8344] hsr0: entered allmulticast mode
[  206.502218][ T8344] hsr_slave_0: entered allmulticast mode
[  206.512578][ T8344] hsr_slave_1: entered allmulticast mode
[  206.626621][ T8344] bridge0: port 1(hsr0) entered blocking state
[  206.635192][ T8344] bridge0: port 1(hsr0) entered forwarding state
[  206.706718][ T5778] Bluetooth: hci4: command tx timeout
[  206.724394][ T7411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.762092][ T7411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.895526][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.904390][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.553916][ T8373] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.845'.
[  207.592249][ T8373] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  208.631236][ T8383] netlink: 'syz.0.847': attribute type 10 has an invalid length.
[  209.417320][ T8403] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.852'.
[  209.571105][ T8406] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.853'.
[  209.876502][ T7416] tipc: Left network mode
[  210.032034][ T8410] netlink: 'syz.4.855': attribute type 21 has an invalid length.
[  210.069230][ T8410] netlink: 'syz.4.855': attribute type 1 has an invalid length.
[  210.099362][ T8410] netlink: 100 bytes leftover after parsing attributes in process `syz.4.855'.
[  210.154881][ T8416] netlink: 'syz.0.856': attribute type 10 has an invalid length.
[  210.226118][ T8416] batman_adv: batadv0: Adding interface: netdevsim0
[  210.261999][ T8416] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.317060][ T8416] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  210.707624][ T8430] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.860'.
[  210.981774][ T8419] netlink: 'syz.2.854': attribute type 21 has an invalid length.
[  211.044815][ T8419] netlink: 128 bytes leftover after parsing attributes in process `syz.2.854'.
[  211.286839][ T8431] netlink: 'syz.4.859': attribute type 10 has an invalid length.
[  211.449204][ T8431] veth0_vlan: entered allmulticast mode
[  211.560044][ T8431] veth0_vlan: left promiscuous mode
[  211.596531][ T8431] veth0_vlan: entered promiscuous mode
[  211.671509][ T8431] team0: Device veth0_vlan failed to register rx_handler
[  215.336675][ T8489] netlink: 'syz.1.874': attribute type 3 has an invalid length.
[  215.345651][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.874'.
[  215.354721][ T8484] netlink: 'syz.0.873': attribute type 10 has an invalid length.
[  215.730727][ T8494] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  216.749667][ T8500] syzkaller0: entered promiscuous mode
[  216.774145][ T8500] syzkaller0: entered allmulticast mode
[  216.791629][ T8511] netlink: 180 bytes leftover after parsing attributes in process `syz.4.881'.
[  224.128650][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.888'.
[  224.183620][ T8546] netlink: 'syz.4.886': attribute type 10 has an invalid length.
[  224.209008][ T8546] veth0_vlan: left promiscuous mode
[  224.228400][ T8546] veth0_vlan: entered promiscuous mode
[  224.261688][ T8546] team0: Device veth0_vlan failed to register rx_handler
[  225.345976][ T8560] netlink: 'syz.0.890': attribute type 4 has an invalid length.
[  225.368105][ T8560] netlink: 152 bytes leftover after parsing attributes in process `syz.0.890'.
[  225.418289][ T8560] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  225.452371][ T8561] netlink: 'syz.0.890': attribute type 23 has an invalid length.
[  225.732903][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.745173][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.775253][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.790647][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.000059][ T7416] bridge_slave_1: left allmulticast mode
[  226.016840][ T7416] bridge_slave_1: left promiscuous mode
[  226.036151][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.660794][ T7416] bridge_slave_0: left allmulticast mode
[  228.680345][ T7416] bridge_slave_0: left promiscuous mode
[  228.689678][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.721052][ T7416] veth1_macvtap: left promiscuous mode
[  228.729879][ T7416] veth0_macvtap: left promiscuous mode
[  228.740829][ T7416] veth1_vlan: left promiscuous mode
[  229.361435][ T7416] team0 (unregistering): Port device team_slave_1 removed
[  229.410405][ T7416] team0 (unregistering): Port device team_slave_0 removed
[  229.458426][ T7416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.498797][ T7416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.779875][ T7416] bond0 (unregistering): Released all slaves
[  229.874479][ T8573] netlink: 'syz.0.896': attribute type 33 has an invalid length.
[  229.882401][ T8573] netlink: 160 bytes leftover after parsing attributes in process `syz.0.896'.
[  230.256985][ T8615] netlink: 'syz.0.901': attribute type 10 has an invalid length.
[  230.507898][ T8628] netlink: 192 bytes leftover after parsing attributes in process `syz.4.907'.
[  230.781562][ T8637] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.910'.
[  230.894391][ T8642] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.911'.
[  231.205920][ T8659] netlink: 51471 bytes leftover after parsing attributes in process `syz.0.914'.
[  231.774005][ T8667] netlink: 192 bytes leftover after parsing attributes in process `syz.0.917'.
[  232.233882][ T8683] netlink: 'syz.1.922': attribute type 10 has an invalid length.
[  232.281787][ T8683] veth0_vlan: left promiscuous mode
[  232.310995][ T8683] veth0_vlan: entered promiscuous mode
[  232.342800][ T8683] team0: Device veth0_vlan failed to register rx_handler
[  232.372354][ T5778] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[  232.420816][ T8688] netlink: 'syz.0.925': attribute type 5 has an invalid length.
[  232.432817][ T8688] netlink: 176 bytes leftover after parsing attributes in process `syz.0.925'.
[  232.598786][ T8697] netlink: 'syz.4.927': attribute type 29 has an invalid length.
[  232.607243][ T8697] netlink: 'syz.4.927': attribute type 29 has an invalid length.
[  232.620927][ T8697] netlink: 'syz.4.927': attribute type 29 has an invalid length.
[  232.642321][ T8697] netlink: 'syz.4.927': attribute type 29 has an invalid length.
[  232.815898][ T8702] netlink: 192 bytes leftover after parsing attributes in process `syz.4.929'.
[  233.068337][ T8708] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.932'.
[  233.088457][ T8709] netlink: 144 bytes leftover after parsing attributes in process `syz.0.931'.
[  233.120881][ T8709] tun0: tun_chr_ioctl cmd 1074812117
[  233.134730][ T8711] netlink: 'syz.4.933': attribute type 9 has an invalid length.
[  233.836281][ T8734] netlink: 'syz.4.943': attribute type 39 has an invalid length.
[  237.661737][ T8762] __nla_validate_parse: 3 callbacks suppressed
[  237.661754][ T8762] netlink: 192 bytes leftover after parsing attributes in process `syz.0.949'.
[  237.729408][ T8760] netlink: 14 bytes leftover after parsing attributes in process `syz.1.948'.
[  237.743703][ T8764] netlink: 'syz.4.950': attribute type 29 has an invalid length.
[  237.764943][ T8760] hsr_slave_0: left promiscuous mode
[  237.771592][ T8760] hsr_slave_1: left promiscuous mode
[  237.960850][ T8764] netlink: 'syz.4.950': attribute type 29 has an invalid length.
[  237.990031][ T8769] netlink: 'syz.4.950': attribute type 29 has an invalid length.
[  238.406836][ T8791] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.955'.
[  238.959092][ T8807] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.959'.
[  239.207997][ T8822] netlink: 192 bytes leftover after parsing attributes in process `syz.0.962'.
[  242.483788][ T8831] netlink: 'syz.4.964': attribute type 3 has an invalid length.
[  242.491492][ T8831] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.964'.
[  242.879978][ T5778] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  243.268779][ T8856] netlink: 'syz.4.970': attribute type 10 has an invalid length.
[  243.570864][ T8856] team0 (unregistering): Port device team_slave_0 removed
[  244.218937][ T8856] team0 (unregistering): Port device team_slave_1 removed
[  244.277622][ T8859] netlink: 'syz.4.970': attribute type 10 has an invalid length.
[  244.298473][ T8867] netlink: 'syz.1.973': attribute type 21 has an invalid length.
[  244.386299][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.975'.
[  244.668144][ T8890] batadv0: entered promiscuous mode
[  244.874582][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.882230][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.890506][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.898566][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.942066][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  245.405345][ T8909] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  245.763624][ T8916] netlink: 'syz.2.984': attribute type 1 has an invalid length.
[  245.818861][ T8916] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.984'.
[  246.377558][ T8925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.988'.
[  247.820104][ T8949] netlink: 128 bytes leftover after parsing attributes in process `syz.4.994'.
[  247.873215][ T8949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.351055][ T8981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1001'.
[  249.564576][ T8983] netlink: 'syz.1.1002': attribute type 10 has an invalid length.
[  250.973788][ T8983] veth1_vlan: entered allmulticast mode
[  250.993444][ T8983] team0: Device veth1_vlan failed to register rx_handler
[  251.598285][ T9011] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  251.662711][ T9011] team0: Port device netdevsim0 added
[  251.706988][ T9015] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  251.766422][ T9011] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  251.803276][ T9011] team0: Port device netdevsim0 removed
[  251.824845][ T9011] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  251.851044][ T9025] delete_channel: no stack
[  251.859226][ T9025] delete_channel: no stack
[  251.906749][ T9025] veth1_macvtap: left promiscuous mode
[  252.002210][ T9027] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1013'.
[  252.060532][ T9025] veth1_macvtap: entered promiscuous mode
[  252.079968][ T9025] macsec0: entered promiscuous mode
[  252.096709][ T9025] macsec0: entered allmulticast mode
[  252.142265][ T9025] veth1_macvtap: entered allmulticast mode
[  252.425671][ T9042] netlink: 'syz.1.1018': attribute type 10 has an invalid length.
[  253.189535][ T9060] netlink: 'syz.2.1026': attribute type 16 has an invalid length.
[  253.200707][ T9060] netlink: 'syz.2.1026': attribute type 3 has an invalid length.
[  253.217529][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1026'.
[  253.230225][ T9060] netlink: 'syz.2.1026': attribute type 21 has an invalid length.
[  253.248834][ T9060] netlink: 'syz.2.1026': attribute type 6 has an invalid length.
[  253.259183][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1026'.
[  253.329243][ T9061] delete_channel: no stack
[  253.728002][ T9072] syzkaller0: entered promiscuous mode
[  253.764431][ T9072] syzkaller0: entered allmulticast mode
[  254.020481][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1033'.
[  254.056172][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1033'.
[  254.181561][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1033'.
[  255.748737][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.755693][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.503847][ T9131] netlink: 'syz.0.1047': attribute type 10 has an invalid length.
[  256.618009][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.736865][ T9131] bridge_slave_1: left allmulticast mode
[  256.761808][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.854465][ T9131] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  257.145932][ T9140] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1049'.
[  257.246811][ T9155] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1052'.
[  258.732300][ T9173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  258.739614][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  258.746959][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  258.754218][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  259.218191][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1057'.
[  259.306868][ T9173] netlink: 'syz.0.1056': attribute type 9 has an invalid length.
[  259.366690][ T9173] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1056'.
[  259.882094][ T9184] netlink: 'syz.0.1056': attribute type 9 has an invalid length.
[  259.908591][ T9184] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1056'.
[  260.174711][ T9201] netlink: 'syz.4.1062': attribute type 21 has an invalid length.
[  260.189581][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'.
[  260.206601][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'.
[  260.264461][ T9207] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1065'.
[  260.308298][ T9207] team0: Port device C removed
[  260.317536][ T9207] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  260.339981][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'.
[  260.698420][ T9222] pim6reg0: tun_chr_ioctl cmd 1074025673
[  260.726413][ T9222] pim6reg0: tun_chr_ioctl cmd 1074812118
[  260.978542][ T9223] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1068'.
[  261.023627][ T9234] netlink: 'syz.1.1072': attribute type 64 has an invalid length.
[  261.403340][ T9239] batadv0: entered promiscuous mode
[  262.530191][ T9257] netlink: 'syz.2.1078': attribute type 10 has an invalid length.
[  262.553737][ T9257] __nla_validate_parse: 1 callbacks suppressed
[  262.553824][ T9257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1078'.
[  262.640325][ T9257] hsr0: entered promiscuous mode
[  262.652727][ T9257] bridge0: port 3(hsr0) entered blocking state
[  262.662685][ T9257] bridge0: port 3(hsr0) entered disabled state
[  262.670586][ T9257] hsr0: entered allmulticast mode
[  262.677414][ T9257] hsr_slave_0: entered allmulticast mode
[  262.701399][ T9257] hsr_slave_1: entered allmulticast mode
[  262.750487][ T9257] bridge0: port 3(hsr0) entered blocking state
[  262.760310][ T9257] bridge0: port 3(hsr0) entered forwarding state
[  262.816171][ T9266] netlink: 'syz.0.1080': attribute type 41 has an invalid length.
[  262.862568][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1080'.
[  262.972751][ T9271] netlink: 'syz.4.1081': attribute type 10 has an invalid length.
[  263.932990][ T9296] netlink: 'syz.4.1087': attribute type 153 has an invalid length.
[  263.941129][ T9296] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1087'.
[  264.080824][ T9304] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1090'.
[  264.300251][ T9308] netlink: 'syz.4.1092': attribute type 153 has an invalid length.
[  264.388462][ T9308] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1092'.
[  267.687027][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'.
[  268.064619][ T5778] Bluetooth: hci0: command 0x0406 tx timeout
[  268.481265][ T9335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.724001][ T9345] netlink: 'syz.0.1103': attribute type 10 has an invalid length.
[  268.817912][ T9345] team0: Device veth1_macvtap failed to register rx_handler
[  268.959824][ T9343] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1102'.
[  268.993079][ T9341] bridge0: port 2(batadv0) entered blocking state
[  269.011783][ T9341] bridge0: port 2(batadv0) entered disabled state
[  269.029236][ T9341] batadv0: entered allmulticast mode
[  269.216048][ T1303] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  269.225743][ T1303] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  269.371343][ T9356] netlink: 'syz.4.1106': attribute type 1 has an invalid length.
[  269.396785][ T9356] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1106'.
[  269.790391][ T9377] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1112'.
[  269.805073][ T9377] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1112'.
[  270.094815][ T9387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1114'.
[  270.561106][ T9406] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1121'.
[  270.605643][ T9406] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1121'.
[  270.612042][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1122'.
[  270.676959][ T9406] bond0: (slave bond_slave_0): Releasing backup interface
[  270.817019][ T9406] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  270.891710][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1122'.
[  272.015898][ T9418] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  272.077346][ T9418] syzkaller0: entered promiscuous mode
[  272.084213][ T9418] syzkaller0: entered allmulticast mode
[  274.515590][ T9444] netlink: 'syz.4.1131': attribute type 12 has an invalid length.
[  274.532571][ T9444] __nla_validate_parse: 2 callbacks suppressed
[  274.532585][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1131'.
[  274.588143][ T9448] netlink: 'syz.4.1131': attribute type 12 has an invalid length.
[  274.656914][ T9448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1131'.
[  275.047730][ T9461] veth1_macvtap: left promiscuous mode
[  275.079754][ T9461] veth1_macvtap: entered promiscuous mode
[  275.100316][ T9461] macsec0: entered promiscuous mode
[  275.111488][ T9461] macsec0: entered allmulticast mode
[  275.123875][ T9461] veth1_macvtap: entered allmulticast mode
[  275.148668][ T9460] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  275.169904][ T9460] veth0_vlan: left promiscuous mode
[  275.179152][ T9460] veth0_vlan: entered promiscuous mode
[  275.187186][ T9460] team0: Device veth0_vlan failed to register rx_handler
[  275.245538][ T9463] veth1_macvtap: left allmulticast mode
[  275.278616][ T9463] veth1_macvtap: left promiscuous mode
[  275.299000][ T9463] macsec0: left promiscuous mode
[  275.310856][ T9463] macsec0: left allmulticast mode
[  275.358086][ T9464] veth1_macvtap: entered promiscuous mode
[  275.364885][ T9464] macsec0: entered promiscuous mode
[  275.393380][ T9464] macsec0: entered allmulticast mode
[  275.433557][ T9464] veth1_macvtap: entered allmulticast mode
[  276.019262][ T9489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1142'.
[  276.626272][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 7
[  277.409417][ T9518] netlink: 'syz.4.1147': attribute type 10 has an invalid length.
[  277.639773][ T9525] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  277.647846][ T9525] netlink: 'syz.0.1150': attribute type 4 has an invalid length.
[  277.655742][ T9525] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1150'.
[  277.667691][ T9525] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  277.675760][ T9525] netlink: 'syz.0.1150': attribute type 4 has an invalid length.
[  277.683628][ T9525] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1150'.
[  277.862954][ T9529] netlink: 'syz.0.1152': attribute type 4 has an invalid length.
[  278.038536][ T9531] netlink: 'syz.4.1153': attribute type 2 has an invalid length.
[  278.061805][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1153'.
[  280.099004][ T9574] validate_nla: 1 callbacks suppressed
[  280.099024][ T9574] netlink: 'syz.1.1167': attribute type 2 has an invalid length.
[  280.118251][ T9574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1167'.
[  280.923351][ T9598] netlink: 'syz.0.1170': attribute type 21 has an invalid length.
[  280.931231][ T9598] netlink: 'syz.0.1170': attribute type 20 has an invalid length.
[  281.152257][ T9605] netlink: 'syz.1.1171': attribute type 21 has an invalid length.
[  281.185201][ T9605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1171'.
[  281.221548][ T9605] netlink: 'syz.1.1171': attribute type 4 has an invalid length.
[  281.243995][ T9618] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1171'.
[  281.264196][ T9605] netlink: 'syz.1.1171': attribute type 3 has an invalid length.
[  281.275427][ T9618] netlink: get zone limit has 4 unknown bytes
[  281.288769][ T9605] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1171'.
[  281.328639][ T9602] netlink: 'syz.1.1171': attribute type 10 has an invalid length.
[  281.346334][ T9602] team0: Port device dummy0 added
[  281.526586][ T9623] netlink: 'syz.1.1176': attribute type 2 has an invalid length.
[  281.540120][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1176'.
[  281.606406][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1175'.
[  281.618674][ T9626] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1177'.
[  281.693167][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  281.811535][ T9636] syzkaller0: mtu greater than device maximum
[  281.886229][ T9639] syzkaller0: entered promiscuous mode
[  281.901142][ T9639] syzkaller0: entered allmulticast mode
[  282.646700][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1187'.
[  286.829613][ T9669] netlink: 'syz.2.1189': attribute type 2 has an invalid length.
[  286.837501][ T9669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1189'.
[  286.847974][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  287.128215][ T9680] syzkaller0: mtu greater than device maximum
[  287.365980][ T9687] netlink: 'syz.2.1197': attribute type 10 has an invalid length.
[  287.392184][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'.
[  287.410533][ T9687] ipvlan1: entered promiscuous mode
[  287.457713][ T9687] ipvlan1: entered allmulticast mode
[  287.500475][ T9687] bridge0: port 4(ipvlan1) entered blocking state
[  287.508830][ T9687] bridge0: port 4(ipvlan1) entered disabled state
[  287.580713][ T9687] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  287.599900][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1198'.
[  287.643838][ T9692] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1198'.
[  287.685825][ T9692] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1198'.
[  287.710154][ T9701] syz.1.1201: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  287.749458][ T9701] CPU: 0 PID: 9701 Comm: syz.1.1201 Not tainted syzkaller #0
[  287.756881][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.766954][ T9701] Call Trace:
[  287.770250][ T9701]  <TASK>
[  287.773197][ T9701]  dump_stack_lvl+0x18c/0x250
[  287.777921][ T9701]  ? show_regs_print_info+0x20/0x20
[  287.783143][ T9701]  ? load_image+0x420/0x420
[  287.787675][ T9701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  287.794107][ T9701]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  287.800613][ T9701]  warn_alloc+0x246/0x340
[  287.804941][ T9701]  ? stack_trace_save+0xaa/0x100
[  287.809877][ T9701]  ? zone_watermark_ok_safe+0x230/0x230
[  287.815424][ T9701]  ? kasan_set_track+0x5f/0x70
[  287.820185][ T9701]  ? kasan_set_track+0x4e/0x70
[  287.824941][ T9701]  ? __kasan_kmalloc+0x8f/0xa0
[  287.829696][ T9701]  ? xsk_init_queue+0xad/0x100
[  287.834452][ T9701]  ? xsk_setsockopt+0x4c9/0x750
[  287.839296][ T9701]  ? do_sock_setsockopt+0x175/0x1a0
[  287.844492][ T9701]  ? __x64_sys_setsockopt+0x182/0x200
[  287.849862][ T9701]  __vmalloc_node_range+0x129/0x1320
[  287.855174][ T9701]  ? free_vm_area+0x50/0x50
[  287.859684][ T9701]  vmalloc_user+0x74/0x80
[  287.864102][ T9701]  ? xskq_create+0xbf/0x170
[  287.868600][ T9701]  xskq_create+0xbf/0x170
[  287.872925][ T9701]  xsk_init_queue+0xad/0x100
[  287.877514][ T9701]  xsk_setsockopt+0x4c9/0x750
[  287.882200][ T9701]  ? xsk_poll+0x670/0x670
[  287.886530][ T9701]  ? __fget_files+0x28/0x460
[  287.891116][ T9701]  ? aa_sock_opt_perm+0x74/0x100
[  287.896049][ T9701]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  287.901589][ T9701]  ? security_socket_setsockopt+0x7e/0xa0
[  287.907308][ T9701]  ? xsk_poll+0x670/0x670
[  287.911633][ T9701]  do_sock_setsockopt+0x175/0x1a0
[  287.916656][ T9701]  ? __fdget+0x180/0x210
[  287.920898][ T9701]  __x64_sys_setsockopt+0x182/0x200
[  287.926096][ T9701]  do_syscall_64+0x55/0xb0
[  287.930504][ T9701]  ? clear_bhb_loop+0x40/0x90
[  287.935264][ T9701]  ? clear_bhb_loop+0x40/0x90
[  287.939938][ T9701]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.945828][ T9701] RIP: 0033:0x7efeac59e159
[  287.950236][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.969834][ T9701] RSP: 002b:00007efeaa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  287.978244][ T9701] RAX: ffffffffffffffda RBX: 00007efeac825fa0 RCX: 00007efeac59e159
[  287.986211][ T9701] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  287.994175][ T9701] RBP: 00007efeac635024 R08: 0000000000000004 R09: 0000000000000000
[  288.002138][ T9701] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  288.010100][ T9701] R13: 00007efeac826038 R14: 00007efeac825fa0 R15: 00007fff2e3d2dd8
[  288.018078][ T9701]  </TASK>
[  288.068539][ T9701] Mem-Info:
[  288.072028][ T9701] active_anon:5866 inactive_anon:0 isolated_anon:0
[  288.072028][ T9701]  active_file:16854 inactive_file:40034 isolated_file:0
[  288.072028][ T9701]  unevictable:768 dirty:144 writeback:0
[  288.072028][ T9701]  slab_reclaimable:10601 slab_unreclaimable:96059
[  288.072028][ T9701]  mapped:29418 shmem:1361 pagetables:535
[  288.072028][ T9701]  sec_pagetables:0 bounce:0
[  288.072028][ T9701]  kernel_misc_reclaimable:0
[  288.072028][ T9701]  free:1327024 free_pcp:11103 free_cma:0
[  288.185319][ T9701] Node 0 active_anon:23564kB inactive_anon:0kB active_file:67416kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117672kB dirty:576kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no
[  288.238567][ T9701] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  288.245290][ T9709] netlink: 'syz.0.1203': attribute type 2 has an invalid length.
[  288.291038][ T9709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1203'.
[  288.292032][ T9701] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  288.370603][ T9701] lowmem_reserve[]: 0 2521 2522 2522 2522
[  288.379433][ T9701] Node 0 DMA32 free:1400416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23528kB inactive_anon:0kB active_file:67416kB inactive_file:159108kB unevictable:1536kB writepending:576kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:23500kB local_pcp:3248kB free_cma:0kB
[  288.434708][ T9701] lowmem_reserve[]: 0 0 0 0 0
[  288.440119][ T9701] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  288.490754][ T9701] lowmem_reserve[]: 0 0 0 0 0
[  288.509648][ T9701] Node 1 Normal free:3892576kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:9856kB free_cma:0kB
[  288.566398][ T9701] lowmem_reserve[]: 0 0 0 0 0
[  288.571716][ T9701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  288.608382][ T9701] Node 0 DMA32: 438*4kB (UME) 911*8kB (UME) 753*16kB (UME) 548*32kB (UME) 712*64kB (UME) 509*128kB (UME) 142*256kB (UME) 101*512kB (UM) 62*1024kB (UME) 31*2048kB (UME) 253*4096kB (UM) = 1400672kB
[  288.678945][ T9721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1206'.
[  288.704384][ T9701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  288.735798][ T9713] netlink: 'syz.4.1205': attribute type 10 has an invalid length.
[  288.815053][ T9701] Node 1 Normal: 218*4kB (UME) 59*8kB (UME) 44*16kB (UME) 91*32kB (UME) 28*64kB (UE) 8*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3892576kB
[  288.928759][ T9701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  288.965496][ T9701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  288.996435][ T9701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  289.033724][ T9701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  289.044868][ T9701] 58249 total pagecache pages
[  289.049578][ T9701] 0 pages in swap cache
[  289.054797][ T9701] Free swap  = 124488kB
[  289.058977][ T9701] Total swap = 124996kB
[  289.063951][ T9701] 2097051 pages RAM
[  289.072132][ T9701] 0 pages HighMem/MovableOnly
[  289.079220][ T9701] 416960 pages reserved
[  289.097606][ T9701] 0 pages cma reserved
[  289.380983][ T9739] netlink: 'syz.1.1211': attribute type 10 has an invalid length.
[  289.402415][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1211'.
[  289.437051][ T9739] ipvlan1: entered promiscuous mode
[  289.449749][ T9739] ipvlan1: entered allmulticast mode
[  289.475922][ T9739] bridge0: port 3(ipvlan1) entered blocking state
[  289.499512][ T9739] bridge0: port 3(ipvlan1) entered disabled state
[  289.555511][ T9739] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  289.715189][ T9750] netlink: 'syz.0.1214': attribute type 2 has an invalid length.
[  289.727361][ T9749] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1214'.
[  289.954336][ T9754] netlink: 'syz.1.1215': attribute type 2 has an invalid length.
[  289.970480][ T9757] netlink: 'syz.2.1217': attribute type 41 has an invalid length.
[  290.819100][ T9781] netlink: 'syz.0.1224': attribute type 10 has an invalid length.
[  291.340450][ T9799] netlink: 'syz.4.1229': attribute type 2 has an invalid length.
[  292.643439][ T9820] __nla_validate_parse: 4 callbacks suppressed
[  292.643457][ T9820] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1236'.
[  293.660048][ T9839] netlink: 'syz.1.1239': attribute type 2 has an invalid length.
[  293.668236][ T9839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1239'.
[  293.989221][ T9850] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1244'.
[  294.276559][ T9853] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  294.838216][ T9864] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1248'.
[  294.896193][ T9865] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1248'.
[  294.955642][ T9866] delete_channel: no stack
[  295.412310][ T9876] netlink: 'syz.0.1252': attribute type 2 has an invalid length.
[  295.429512][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1252'.
[  300.699798][ T9898] netlink: 'syz.2.1259': attribute type 3 has an invalid length.
[  300.757433][ T9897] netlink: 'syz.2.1259': attribute type 3 has an invalid length.
[  301.115237][ T9898] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1259'.
[  301.144832][ T9901] netlink: 'syz.4.1261': attribute type 2 has an invalid length.
[  301.149964][ T9897] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1259'.
[  301.183857][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1261'.
[  301.797961][ T9928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.796866][ T9939] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1269'.
[  304.590490][ T9953] netlink: 'syz.1.1272': attribute type 2 has an invalid length.
[  304.615765][ T9953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1272'.
[  306.049854][ T9975] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1278'.
[  306.895348][ T9991] netlink: 'syz.2.1284': attribute type 2 has an invalid length.
[  306.913470][ T9991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1284'.
[  307.207428][ T9993] netlink: 539 bytes leftover after parsing attributes in process `syz.4.1286'.
[  307.238265][ T9993] netlink: 'syz.4.1286': attribute type 27 has an invalid length.
[  308.964496][T10021] netlink: 'syz.2.1295': attribute type 2 has an invalid length.
[  308.976421][ T5786] Bluetooth: hci4: ISO packet for unknown connection handle 7
[  308.982259][T10021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1295'.
[  310.173751][T10057] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1302'.
[  310.246055][T10057] bridge0: port 2(batadv0) entered blocking state
[  310.252732][T10057] bridge0: port 2(batadv0) entered forwarding state
[  310.254981][T10062] netlink: 'syz.2.1304': attribute type 29 has an invalid length.
[  310.283299][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.303876][T10062] netlink: 'syz.2.1304': attribute type 29 has an invalid length.
[  310.349933][T10062] netlink: 'syz.2.1304': attribute type 29 has an invalid length.
[  310.442362][T10067] netlink: 'syz.0.1305': attribute type 29 has an invalid length.
[  310.492339][T10067] netlink: 'syz.0.1305': attribute type 29 has an invalid length.
[  310.769711][T10067] syzkaller0: entered promiscuous mode
[  310.797865][T10067] syzkaller0: entered allmulticast mode
[  312.428636][T10084] netlink: 'syz.2.1308': attribute type 2 has an invalid length.
[  312.439072][T10084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1308'.
[  312.449459][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1309'.
[  312.743973][T10100] syzkaller0: entered promiscuous mode
[  312.749700][T10100] syzkaller0: entered allmulticast mode
[  314.076268][T10122] netlink: 'syz.0.1321': attribute type 10 has an invalid length.
[  314.149122][T10120] netlink: 'syz.2.1320': attribute type 2 has an invalid length.
[  314.176182][T10120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1320'.
[  314.630047][T10134] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1324'.
[  314.734225][T10134] netlink: 'syz.2.1324': attribute type 1 has an invalid length.
[  314.742330][T10134] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1324'.
[  314.926963][T10139] netlink: 'syz.1.1326': attribute type 21 has an invalid length.
[  314.938389][T10139] IPv6: NLM_F_CREATE should be specified when creating new route
[  314.969164][T10139] IPv6: Can't replace route, no match found
[  315.016441][T10142] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1327'.
[  315.054765][T10142] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1327'.
[  315.078657][T10139] netlink: 'syz.1.1326': attribute type 10 has an invalid length.
[  315.148719][T10142] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1327'.
[  315.177413][T10142] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1327'.
[  315.382838][T10139] team0: Device wg1 is of different type
[  315.544445][T10155] netlink: 'syz.0.1332': attribute type 2 has an invalid length.
[  315.557534][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1332'.
[  315.712856][T10166] netlink: 'syz.2.1333': attribute type 3 has an invalid length.
[  316.272523][T10174] syzkaller0: entered promiscuous mode
[  316.280690][T10174] syzkaller0: entered allmulticast mode
[  317.199022][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.214912][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  318.227793][T10193] bridge0: port 2(batadv0) entered disabled state
[  318.553969][T10205] delete_channel: no stack
[  318.576879][T10206] __nla_validate_parse: 1 callbacks suppressed
[  318.576896][T10206] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1342'.
[  318.593736][T10205] delete_channel: no stack
[  318.620055][T10207] netlink: 'syz.4.1344': attribute type 25 has an invalid length.
[  318.645623][T10207] netlink: 'syz.4.1344': attribute type 9 has an invalid length.
[  318.661978][T10207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1344'.
[  318.676247][T10204] syzkaller0: mtu greater than device maximum
[  319.279414][T10222] netlink: 'syz.2.1348': attribute type 10 has an invalid length.
[  319.438935][T10222] team0: Port device wlan1 added
[  320.262075][T10248] syzkaller0: mtu greater than device maximum
[  320.596767][T10257] netlink: 'syz.4.1357': attribute type 21 has an invalid length.
[  320.630415][T10257] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1357'.
[  320.900671][T10263] netlink: 'syz.1.1360': attribute type 21 has an invalid length.
[  320.967093][T10263] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1360'.
[  321.008762][T10263] netlink: 'syz.1.1360': attribute type 4 has an invalid length.
[  321.031333][T10263] netlink: 'syz.1.1360': attribute type 3 has an invalid length.
[  321.056925][T10263] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1360'.
[  321.076726][T10264] netlink: 'syz.1.1360': attribute type 21 has an invalid length.
[  321.088180][T10264] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1360'.
[  321.699974][T10287] syzkaller0: mtu greater than device maximum
[  321.845661][T10292] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1368'.
[  321.891616][T10291] netlink: 'syz.0.1365': attribute type 19 has an invalid length.
[  321.908029][T10292] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  321.962166][T10291] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1365'.
[  322.268864][T10302] netlink: 'syz.1.1371': attribute type 3 has an invalid length.
[  322.296997][T10302] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1371'.
[  323.497870][T10325] syzkaller0: mtu greater than device maximum
[  324.038258][T10333] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1379'.
[  324.095520][T10333] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  324.166279][T10339] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1379'.
[  324.236241][T10339] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  324.383526][ T5778] Bluetooth: hci4: command 0x0406 tx timeout
[  324.729879][T10352] delete_channel: no stack
[  324.741605][T10352] delete_channel: no stack
[  325.061958][T10359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1389'.
[  325.425238][T10374] syzkaller0: mtu greater than device maximum
[  325.591302][T10382] validate_nla: 1 callbacks suppressed
[  325.591335][T10382] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.675525][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.718866][T10387] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.737133][T10387] team0: Port device bond0 added
[  325.760210][T10386] netlink: 5423 bytes leftover after parsing attributes in process `syz.2.1394'.
[  325.771579][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.829671][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.839252][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.859034][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.879590][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.898419][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.914921][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.924975][T10387] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  325.982170][T10381] delete_channel: no stack
[  326.029038][T10392] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.1395'.
[  326.056682][T10392] openvswitch: netlink: IP tunnel dst address not specified
[  326.659059][T10406] syzkaller0: mtu greater than device maximum
[  327.460388][T10419] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.491547][T10419] bridge_slave_1: left allmulticast mode
[  327.500486][T10419] bridge_slave_1: left promiscuous mode
[  327.539356][T10419] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.645854][T10419] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  330.477941][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'.
[  330.508007][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1426'.
[  330.565448][T10486] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1426'.
[  332.108075][T10520] validate_nla: 27 callbacks suppressed
[  332.108091][T10520] netlink: 'syz.1.1439': attribute type 21 has an invalid length.
[  332.137856][T10521] netlink: 'syz.1.1439': attribute type 4 has an invalid length.
[  332.634324][T10537] netlink: 'syz.4.1444': attribute type 21 has an invalid length.
[  332.656324][T10537] IPv6: NLM_F_CREATE should be specified when creating new route
[  332.671659][T10537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.679348][T10537] IPv6: NLM_F_CREATE should be set when creating new route
[  332.687449][T10537] IPv6: NLM_F_CREATE should be set when creating new route
[  332.697116][T10537] IPv6: NLM_F_CREATE should be set when creating new route
[  332.795849][T10550] netlink: 'syz.1.1448': attribute type 8 has an invalid length.
[  332.835256][T10550] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1448'.
[  332.850881][T10537] syzkaller0: entered promiscuous mode
[  332.857409][T10537] syzkaller0: entered allmulticast mode
[  333.179594][T10558] netlink: 'syz.1.1450': attribute type 10 has an invalid length.
[  333.215494][T10558] team0: Device veth1_vlan failed to register rx_handler
[  334.430356][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1460'.
[  334.482125][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1460'.
[  334.487425][T10596] netlink: 'syz.4.1461': attribute type 29 has an invalid length.
[  334.504896][T10591] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1458'.
[  334.534279][T10596] netlink: 'syz.4.1461': attribute type 29 has an invalid length.
[  334.555702][T10590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1460'.
[  334.585479][T10592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1460'.
[  334.599660][T10596] netlink: 'syz.4.1461': attribute type 29 has an invalid length.
[  334.665726][T10598] netlink: 'syz.4.1461': attribute type 29 has an invalid length.
[  334.752242][T10598] netlink: 'syz.4.1461': attribute type 29 has an invalid length.
[  335.277213][T10612] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1464'.
[  335.545821][T10633] FAULT_INJECTION: forcing a failure.
[  335.545821][T10633] name failslab, interval 1, probability 0, space 0, times 0
[  335.643631][T10633] CPU: 0 PID: 10633 Comm: syz.1.1467 Not tainted syzkaller #0
[  335.651175][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  335.661292][T10633] Call Trace:
[  335.664621][T10633]  <TASK>
[  335.667595][T10633]  dump_stack_lvl+0x18c/0x250
[  335.672341][T10633]  ? show_regs_print_info+0x20/0x20
[  335.677604][T10633]  ? load_image+0x420/0x420
[  335.682172][T10633]  ? __might_sleep+0xe0/0xe0
[  335.686801][T10633]  ? __lock_acquire+0x7d80/0x7d80
[  335.691851][T10633]  ? perf_trace_lock+0xfc/0x3b0
[  335.696737][T10633]  should_fail_ex+0x394/0x4c0
[  335.701454][T10633]  should_failslab+0x9/0x20
[  335.705989][T10633]  slab_pre_alloc_hook+0x59/0x300
[  335.711044][T10633]  ? __get_vm_area_node+0x125/0x370
[  335.716276][T10633]  __kmem_cache_alloc_node+0x53/0x250
[  335.721682][T10633]  ? __get_vm_area_node+0x125/0x370
[  335.726908][T10633]  kmalloc_node_trace+0x26/0xe0
[  335.731795][T10633]  __get_vm_area_node+0x125/0x370
[  335.736859][T10633]  __vmalloc_node_range+0x36f/0x1320
[  335.742170][T10633]  ? netlink_sendmsg+0x602/0xbf0
[  335.747131][T10633]  ? netlink_insert+0x1094/0x1390
[  335.752201][T10633]  ? netlink_insert+0x2ba/0x1390
[  335.757175][T10633]  ? free_vm_area+0x50/0x50
[  335.761716][T10633]  ? netlink_sendmsg+0x602/0xbf0
[  335.766669][T10633]  vmalloc+0x79/0x90
[  335.770569][T10633]  ? netlink_sendmsg+0x602/0xbf0
[  335.775502][T10633]  netlink_sendmsg+0x602/0xbf0
[  335.780276][T10633]  ? netlink_getsockopt+0x590/0x590
[  335.785475][T10633]  ? apparmor_socket_sendmsg+0x8e/0x330
[  335.791021][T10633]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  335.796307][T10633]  ? security_socket_sendmsg+0x80/0xa0
[  335.801780][T10633]  sock_write_iter+0x2dc/0x420
[  335.806561][T10633]  ? sock_read_iter+0x3f0/0x3f0
[  335.811421][T10633]  ? common_file_perm+0x198/0x1f0
[  335.816453][T10633]  vfs_write+0x474/0x9a0
[  335.820706][T10633]  ? file_end_write+0x250/0x250
[  335.825564][T10633]  ? __fget_files+0x3fc/0x460
[  335.830252][T10633]  ? __fdget_pos+0x1d8/0x330
[  335.834854][T10633]  ? ksys_write+0x74/0x260
[  335.839282][T10633]  ksys_write+0x151/0x260
[  335.843631][T10633]  ? __ia32_sys_read+0x90/0x90
[  335.848407][T10633]  ? lockdep_hardirqs_on+0x98/0x150
[  335.853613][T10633]  do_syscall_64+0x55/0xb0
[  335.858029][T10633]  ? clear_bhb_loop+0x40/0x90
[  335.862704][T10633]  ? clear_bhb_loop+0x40/0x90
[  335.867380][T10633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  335.873275][T10633] RIP: 0033:0x7efeac59e159
[  335.877687][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.897296][T10633] RSP: 002b:00007efeaa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  335.905710][T10633] RAX: ffffffffffffffda RBX: 00007efeac825fa0 RCX: 00007efeac59e159
[  335.913681][T10633] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005
[  335.921650][T10633] RBP: 00007efeaa7f6090 R08: 0000000000000000 R09: 0000000000000000
[  335.929618][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.937586][T10633] R13: 00007efeac826038 R14: 00007efeac825fa0 R15: 00007fff2e3d2dd8
[  335.945573][T10633]  </TASK>
[  335.961737][T10633] syz.1.1467: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  335.983829][T10633] CPU: 1 PID: 10633 Comm: syz.1.1467 Not tainted syzkaller #0
[  335.991328][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  336.001402][T10633] Call Trace:
[  336.004699][T10633]  <TASK>
[  336.007654][T10633]  dump_stack_lvl+0x18c/0x250
[  336.012362][T10633]  ? show_regs_print_info+0x20/0x20
[  336.017586][T10633]  ? load_image+0x420/0x420
[  336.022118][T10633]  ? __rcu_read_unlock+0x7c/0xd0
[  336.027076][T10633]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  336.033520][T10633]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  336.040048][T10633]  warn_alloc+0x246/0x340
[  336.044400][T10633]  ? zone_watermark_ok_safe+0x230/0x230
[  336.049951][T10633]  ? __get_vm_area_node+0x356/0x370
[  336.055158][T10633]  __vmalloc_node_range+0x394/0x1320
[  336.060443][T10633]  ? netlink_insert+0x1094/0x1390
[  336.065477][T10633]  ? netlink_insert+0x2ba/0x1390
[  336.070419][T10633]  ? free_vm_area+0x50/0x50
[  336.074928][T10633]  ? netlink_sendmsg+0x602/0xbf0
[  336.079859][T10633]  vmalloc+0x79/0x90
[  336.083761][T10633]  ? netlink_sendmsg+0x602/0xbf0
[  336.088694][T10633]  netlink_sendmsg+0x602/0xbf0
[  336.093467][T10633]  ? netlink_getsockopt+0x590/0x590
[  336.098666][T10633]  ? apparmor_socket_sendmsg+0x8e/0x330
[  336.104211][T10633]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  336.109497][T10633]  ? security_socket_sendmsg+0x80/0xa0
[  336.114956][T10633]  sock_write_iter+0x2dc/0x420
[  336.119722][T10633]  ? sock_read_iter+0x3f0/0x3f0
[  336.124592][T10633]  ? common_file_perm+0x198/0x1f0
[  336.129618][T10633]  vfs_write+0x474/0x9a0
[  336.133867][T10633]  ? file_end_write+0x250/0x250
[  336.138720][T10633]  ? __fget_files+0x3fc/0x460
[  336.143409][T10633]  ? __fdget_pos+0x1d8/0x330
[  336.147999][T10633]  ? ksys_write+0x74/0x260
[  336.152420][T10633]  ksys_write+0x151/0x260
[  336.156757][T10633]  ? __ia32_sys_read+0x90/0x90
[  336.161526][T10633]  ? lockdep_hardirqs_on+0x98/0x150
[  336.166730][T10633]  do_syscall_64+0x55/0xb0
[  336.171147][T10633]  ? clear_bhb_loop+0x40/0x90
[  336.175819][T10633]  ? clear_bhb_loop+0x40/0x90
[  336.180495][T10633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  336.186387][T10633] RIP: 0033:0x7efeac59e159
[  336.190799][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.210403][T10633] RSP: 002b:00007efeaa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  336.218817][T10633] RAX: ffffffffffffffda RBX: 00007efeac825fa0 RCX: 00007efeac59e159
[  336.226784][T10633] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005
[  336.234755][T10633] RBP: 00007efeaa7f6090 R08: 0000000000000000 R09: 0000000000000000
[  336.242724][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.250699][T10633] R13: 00007efeac826038 R14: 00007efeac825fa0 R15: 00007fff2e3d2dd8
[  336.258687][T10633]  </TASK>
[  336.332055][T10633] Mem-Info:
[  336.337749][T10633] active_anon:5904 inactive_anon:0 isolated_anon:0
[  336.337749][T10633]  active_file:16854 inactive_file:40052 isolated_file:0
[  336.337749][T10633]  unevictable:768 dirty:114 writeback:0
[  336.337749][T10633]  slab_reclaimable:10640 slab_unreclaimable:96827
[  336.337749][T10633]  mapped:29402 shmem:1361 pagetables:558
[  336.337749][T10633]  sec_pagetables:0 bounce:0
[  336.337749][T10633]  kernel_misc_reclaimable:0
[  336.337749][T10633]  free:1324060 free_pcp:12625 free_cma:0
[  336.418872][T10633] Node 0 active_anon:23616kB inactive_anon:0kB active_file:67416kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117608kB dirty:456kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no
[  336.452496][T10633] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  336.537278][T10633] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.573569][T10633] lowmem_reserve[]: 0 2521 2522 2522 2522
[  336.579507][T10633] Node 0 DMA32 free:1387792kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23380kB inactive_anon:0kB active_file:67416kB inactive_file:159180kB unevictable:1536kB writepending:456kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:31004kB local_pcp:18904kB free_cma:0kB
[  336.633419][T10633] lowmem_reserve[]: 0 0 0 0 0
[  336.638216][T10633] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  336.709607][T10633] lowmem_reserve[]: 0 0 0 0 0
[  336.729886][T10633] Node 1 Normal free:3893088kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:9600kB free_cma:0kB
[  336.785196][T10633] lowmem_reserve[]: 0 0 0 0 0
[  336.790010][T10633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  336.807009][T10633] Node 0 DMA32: 2*4kB (UM) 25*8kB (M) 634*16kB (UME) 677*32kB (UME) 650*64kB (UME) 509*128kB (UME) 141*256kB (UME) 99*512kB (UME) 61*1024kB (UME) 23*2048kB (UME) 257*4096kB (UM) = 1387792kB
[  336.826570][T10633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  336.844870][T10633] Node 1 Normal: 218*4kB (UME) 59*8kB (UME) 44*16kB (UME) 97*32kB (UME) 31*64kB (UE) 9*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3893088kB
[  336.863623][T10633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  336.880719][T10633] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.891449][T10633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  336.928684][T10633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.942161][T10633] 58269 total pagecache pages
[  336.946870][T10633] 0 pages in swap cache
[  336.951120][T10633] Free swap  = 124488kB
[  336.967421][T10633] Total swap = 124996kB
[  336.984443][T10633] 2097051 pages RAM
[  336.988299][T10633] 0 pages HighMem/MovableOnly
[  337.024089][T10633] 416960 pages reserved
[  337.028516][T10633] 0 pages cma reserved
[  337.333642][T10652] netlink: 'syz.1.1474': attribute type 21 has an invalid length.
[  337.366590][T10652] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.379912][T10652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  337.382060][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 11
[  337.387424][T10652] IPv6: NLM_F_CREATE should be set when creating new route
[  337.404652][T10652] IPv6: NLM_F_CREATE should be set when creating new route
[  337.413022][T10652] IPv6: NLM_F_CREATE should be set when creating new route
[  337.473063][T10656] syzkaller0: entered promiscuous mode
[  337.478884][T10656] syzkaller0: entered allmulticast mode
[  337.897074][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1477'.
[  338.344673][T10670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1481'.
[  338.607028][T10672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1482'.
[  338.638545][T10672] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  338.955858][   T29] INFO: task syz.3.720:7857 blocked for more than 144 seconds.
[  338.964537][   T29]       Not tainted syzkaller #0
[  338.969684][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.979391][   T29] task:syz.3.720       state:D stack:22312 pid:7857  ppid:5771   flags:0x00004006
[  338.989129][   T29] Call Trace:
[  339.001312][   T29]  <TASK>
[  339.009583][   T29]  __schedule+0x15ae/0x4660
[  339.027496][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  339.035262][   T29]  ? asan.module_dtor+0x20/0x20
[  339.047374][   T29]  ? trace_contention_end+0x39/0xe0
[  339.062144][   T29]  ? perf_event_ctx_lock_nested+0x490/0x490
[  339.076194][   T29]  ? task_work_cancel+0xa5/0x220
[  339.094462][   T29]  ? task_work_cancel_func+0x210/0x210
[  339.106207][   T29]  schedule+0xbd/0x170
[  339.116157][   T29]  ? _free_event+0x10d/0xfb0
[  339.125522][   T29]  _free_event+0x176/0xfb0
[  339.135807][   T29]  perf_event_release_kernel+0x7c8/0x850
[  339.148499][   T29]  ? __might_sleep+0xe0/0xe0
[  339.157837][   T29]  ? calc_timer_values+0x400/0x400
[  339.171245][   T29]  ? perf_mmap+0x15e0/0x15e0
[  339.180715][   T29]  perf_release+0x3b/0x40
[  339.193788][   T29]  __fput+0x221/0x940
[  339.208197][   T29]  task_work_run+0x1d4/0x260
[  339.225199][   T29]  ? task_work_cancel+0x220/0x220
[  339.233109][T10691] netlink: 'syz.2.1486': attribute type 21 has an invalid length.
[  339.236517][   T29]  get_signal+0x11da/0x1390
[  339.241080][T10691] IPv6: NLM_F_CREATE should be specified when creating new route
[  339.247597][   T29]  ? trace_call_bpf+0xc3/0x6c0
[  339.265092][T10691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.266290][   T29]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[  339.272581][T10691] IPv6: NLM_F_CREATE should be set when creating new route
[  339.278959][   T29]  arch_do_signal_or_restart+0xc2/0x7b0
[  339.286418][T10691] IPv6: NLM_F_CREATE should be set when creating new route
[  339.296721][   T29]  ? get_sigframe_size+0x20/0x20
[  339.299380][T10691] IPv6: NLM_F_CREATE should be set when creating new route
[  339.304687][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  339.304728][   T29]  exit_to_user_mode_loop+0x70/0x110
[  339.304760][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  339.304792][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  339.304823][   T29]  do_syscall_64+0x61/0xb0
[  339.304849][   T29]  ? clear_bhb_loop+0x40/0x90
[  339.304876][   T29]  ? clear_bhb_loop+0x40/0x90
[  339.304905][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.304931][   T29] RIP: 0033:0x7fad51d9e159
[  339.304955][   T29] RSP: 002b:00007fad52c89fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  339.304988][   T29] RAX: fffffffffffffffc RBX: 00007fad52025fa0 RCX: 00007fad51d9e159
[  339.305009][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000
[  339.305027][   T29] RBP: 00007fad51e35024 R08: 0000000000000000 R09: 0000000000000000
[  339.305046][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  339.305064][   T29] R13: 00007fad52026038 R14: 00007fad52025fa0 R15: 00007ffe190b0b88
[  339.305104][   T29]  </TASK>
[  339.305615][   T29] 
[  339.305615][   T29] Showing all locks held in the system:
[  339.305639][   T29] 3 locks held by kworker/1:1/28:
[  339.305659][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  339.305751][   T29]  #1: ffffc90000a4fd00 (set_printk_work
[  339.332379][T10696] syzkaller0: entered promiscuous mode
[  339.369675][   T29] ){+.+.}-{0:0}
[  339.426317][T10696] syzkaller0: entered allmulticast mode
[  339.449339][   T29] , at: process_scheduled_works+0x975/0x1600
[  339.471613][   T29]  #2: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: trace_set_clr_event+0xc2/0x130
[  339.481965][   T29] 1 lock held by khungtaskd/29:
[  339.487181][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  339.497477][   T29] 3 locks held by kworker/u4:6/1303:
[  339.502837][   T29]  #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  339.514902][   T29]  #1: ffffc90004edfd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  339.526874][   T29]  #2: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  339.537318][   T29] 2 locks held by getty/5528:
[  339.543197][   T29]  #0: ffff888031c9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  339.553302][   T29]  #1: ffffc900015b72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  339.563650][   T29] 1 lock held by syz.0.1482/10671:
[  339.568758][   T29]  #0: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  339.580090][   T29] 2 locks held by syz.1.1494/10687:
[  339.586859][   T29]  #0: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  339.596648][   T29]  #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  339.608163][   T29] 2 locks held by syz.2.1486/10691:
[  339.613526][   T29]  #0: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[  339.622673][   T29]  #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  339.633885][   T29] 1 lock held by syz.2.1486/10696:
[  339.638996][   T29]  #0: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  339.648524][   T29] 
[  339.659659][   T29] =============================================
[  339.659659][   T29] 
[  339.671126][   T29] NMI backtrace for cpu 0
[  339.675479][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  339.682687][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  339.692753][   T29] Call Trace:
[  339.696051][   T29]  <TASK>
[  339.698993][   T29]  dump_stack_lvl+0x18c/0x250
[  339.703697][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[  339.708824][   T29]  ? show_regs_print_info+0x20/0x20
[  339.714013][   T29]  ? load_image+0x420/0x420
[  339.718513][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  339.723447][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  339.729601][   T29]  ? load_image+0x420/0x420
[  339.734090][   T29]  ? wq_watchdog_touch+0xef/0x170
[  339.739104][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  339.745169][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  339.751145][   T29]  watchdog+0xf59/0xfa0
[  339.755292][   T29]  ? watchdog+0x1e1/0xfa0
[  339.759613][   T29]  kthread+0x2fa/0x390
[  339.763669][   T29]  ? hungtask_pm_notify+0x50/0x50
[  339.768685][   T29]  ? kthread_blkcg+0xd0/0xd0
[  339.773261][   T29]  ret_from_fork+0x48/0x80
[  339.777673][   T29]  ? kthread_blkcg+0xd0/0xd0
[  339.782268][   T29]  ret_from_fork_asm+0x11/0x20
[  339.787021][   T29]  </TASK>
[  339.790690][   T29] Sending NMI from CPU 0 to CPUs 1:
[  339.796133][    C1] NMI backtrace for cpu 1
[  339.796143][    C1] CPU: 1 PID: 1303 Comm: kworker/u4:6 Not tainted syzkaller #0
[  339.796158][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  339.796166][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  339.796186][    C1] RIP: 0010:trace_call_bpf+0x233/0x6c0
[  339.796203][    C1] Code: e8 52 19 f6 ff 85 db 0f 84 54 03 00 00 e8 95 15 f6 ff eb 05 e8 8e 15 f6 ff 4d 85 f6 0f 84 7a 04 00 00 c6 84 24 88 00 00 00 00 <e8> 08 d6 cb ff 65 48 8b 1d 00 4b 72 7e 48 81 c3 28 18 00 00 48 89
[  339.796216][    C1] RSP: 0018:ffffc90004edf760 EFLAGS: 00000086
[  339.796227][    C1] RAX: ffffffff81916cdb RBX: 0000000000000001 RCX: ffff8880247a5a00
[  339.796244][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  339.796252][    C1] RBP: ffffc90004edf858 R08: ffffc90004edf7ef R09: 0000000000000000
[  339.796262][    C1] R10: ffffc90004edf7e0 R11: fffff520009dbefe R12: ffffffff8d185950
[  339.796272][    C1] R13: 1ffff920009dbef8 R14: ffff88807ebf9500 R15: ffffc90004edf7e0
[  339.796283][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  339.796296][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.796306][    C1] CR2: 00007efeac7ef2f8 CR3: 000000007c5fe000 CR4: 00000000003506e0
[  339.796319][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  339.796328][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  339.796337][    C1] Call Trace:
[  339.796342][    C1]  <TASK>
[  339.796347][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  339.796364][    C1]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[  339.796384][    C1]  perf_trace_run_bpf_submit+0x7a/0x1c0
[  339.796405][    C1]  perf_trace_preemptirq_template+0x269/0x330
[  339.796426][    C1]  ? ___slab_alloc+0x1c0/0x12f0
[  339.796440][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  339.796461][    C1]  ? lock_chain_count+0x20/0x20
[  339.796476][    C1]  ? mark_lock+0x94/0x320
[  339.796492][    C1]  ? ___slab_alloc+0x1c0/0x12f0
[  339.796505][    C1]  ? ___slab_alloc+0x1c0/0x12f0
[  339.796519][    C1]  trace_irq_disable+0xbb/0xe0
[  339.796538][    C1]  ? ___slab_alloc+0x422/0x12f0
[  339.796550][    C1]  ___slab_alloc+0x1c0/0x12f0
[  339.796566][    C1]  ? __alloc_skb+0x103/0x2c0
[  339.796584][    C1]  kmem_cache_alloc_node+0x12e/0x310
[  339.796604][    C1]  ? __alloc_skb+0x103/0x2c0
[  339.796620][    C1]  __alloc_skb+0x103/0x2c0
[  339.796637][    C1]  nsim_dev_trap_report_work+0x253/0xa90
[  339.796659][    C1]  ? process_scheduled_works+0x975/0x1600
[  339.796679][    C1]  process_scheduled_works+0xa60/0x1600
[  339.796711][    C1]  ? worker_attach_to_pool+0x370/0x370
[  339.796744][    C1]  ? assign_work+0x3cc/0x5d0
[  339.796763][    C1]  worker_thread+0xa5e/0xfe0
[  339.796794][    C1]  kthread+0x2fa/0x390
[  339.796807][    C1]  ? pr_cont_work+0x550/0x550
[  339.796824][    C1]  ? kthread_blkcg+0xd0/0xd0
[  339.796838][    C1]  ret_from_fork+0x48/0x80
[  339.796854][    C1]  ? kthread_blkcg+0xd0/0xd0
[  339.796869][    C1]  ret_from_fork_asm+0x11/0x20
[  339.796893][    C1]  </TASK>
[  339.798899][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  340.098068][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  340.105256][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  340.115301][   T29] Call Trace:
[  340.118572][   T29]  <TASK>
[  340.121498][   T29]  dump_stack_lvl+0x18c/0x250
[  340.126177][   T29]  ? show_regs_print_info+0x20/0x20
[  340.131370][   T29]  ? load_image+0x420/0x420
[  340.135874][   T29]  panic+0x2ca/0x720
[  340.139771][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  340.144270][   T29]  ? nmi_backtrace_stall_check+0x41e/0x430
[  340.150070][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  340.155441][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  340.161592][   T29]  watchdog+0xf98/0xfa0
[  340.165743][   T29]  ? watchdog+0x1e1/0xfa0
[  340.170069][   T29]  kthread+0x2fa/0x390
[  340.174130][   T29]  ? hungtask_pm_notify+0x50/0x50
[  340.179148][   T29]  ? kthread_blkcg+0xd0/0xd0
[  340.183727][   T29]  ret_from_fork+0x48/0x80
[  340.188141][   T29]  ? kthread_blkcg+0xd0/0xd0
[  340.192723][   T29]  ret_from_fork_asm+0x11/0x20
[  340.197488][   T29]  </TASK>
[  340.200746][   T29] Kernel Offset: disabled
[  340.205055][   T29] Rebooting in 86400 seconds..