last executing test programs:

3.228979738s ago: executing program 0 (id=3265):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0xc}], 0x10, 0xfffffff6}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f0000011c1a000000000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x4000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10)
recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1}, 0x40002260)
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0xd}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3.065904062s ago: executing program 0 (id=3267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x64, 0x1, 0x0, 0x9}]})
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x23, 0x5, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x29, 0x37, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x37}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

2.838035737s ago: executing program 0 (id=3272):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28)
socketpair(0x18, 0x0, 0x1, &(0x7f0000001780))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b40)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x6, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2, 0x3, 0x1, 0x2, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3c2f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x4f, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000002a40)={0x0, 0x24}, 0x8, 0x10, &(0x7f0000002a80)={0x0, 0x5, 0x43cc, 0xb}, 0x10, 0x247ce, r0, 0x1, &(0x7f0000002ac0)=[r0, r4], &(0x7f0000002b00)=[{0x2, 0x3, 0x4, 0xb}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r7 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x3ff800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804)

2.598062212s ago: executing program 0 (id=3273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x2}, {0x6, 0x4, 0x6}]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000f00)="14000000140081026681f782db44cf440aa1fd", 0x13}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004800)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7ce", 0x66}], 0x1, 0x0, 0x0, 0x1000000}, 0x44)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={0xffffffffffffffff, r7}, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x13, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x1, 0x1, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0x4, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffd}, 0x94)

1.929021527s ago: executing program 3 (id=3275):
socket$kcm(0x29, 0x2, 0x0) (async)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0})

1.928212907s ago: executing program 1 (id=3276):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query, @map_val, @generic={0x0, 0x2, 0x3, 0x1, 0x12}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x3, 0xfffffffd, 0x10}, 0x10, 0x2e92, r3, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0xc}, {0x3, 0x1, 0x9, 0xa}], 0x10, 0x8594}, 0x94)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x2c004804)
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x5}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1900000004000000040000000200", @ANYBLOB="efa196a860df77de9c4f4978612cd38a9d51d302d264321a4555bf912b18502e116b2123587f936a0708f9dcf0c5c13e9df9423c1b389e0c3a5f59fad70310815310a8438100a68a68fdd05a911386028bafdd506e13d8e1c2458188d3e429132b223ae29219b183ed7792eb695d80f1508303", @ANYRES64], 0x50)

1.830896559s ago: executing program 0 (id=3277):
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x4}, 0x8082}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (rerun: 64)
ioctl$TUNSETOFFLOAD(r2, 0x80086601, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='memory.swap.current\x00') (async)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x0)

1.830320739s ago: executing program 3 (id=3278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x372efe22}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r7 = openat$cgroup_ro(r4, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0xb1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x1b, &(0x7f0000000700)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000800)='syzkaller\x00', 0x80000001, 0x5c, &(0x7f0000000840)=""/92, 0x41100, 0x28, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r9], &(0x7f0000000e80)=[{0x3, 0x4, 0xf, 0x814f7c4302787ff4}]}, 0x94)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r11, &(0x7f00000000c0), 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}, @var={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x54}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|')
sendmsg$kcm(r3, 0x0, 0x0)

1.589223345s ago: executing program 1 (id=3280):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020207025d0000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.181932734s ago: executing program 0 (id=3281):
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xd6, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000180)='GPL\x00', 0x7, 0x4, &(0x7f00000001c0)=""/4, 0x41000, 0x40, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, r4, r2, 0x1, r2, r2, r2, r2], &(0x7f0000000880)=[{0x3, 0x1, 0x9, 0x9}, {0x2, 0x1, 0x5, 0x7}, {0x2, 0x0, 0xe}, {0x0, 0x3, 0x2}, {0x0, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xe, 0x3}], 0x10, 0x800000}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r5, &(0x7f00000009c0)="4eda40942a80415f7634e2350a19369706a1abd8786f76", &(0x7f0000000a00)=""/71, 0x4}, 0x20)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0xfff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffff8c7d3a30, 0x1}, 0x1040c0, 0x572, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001})
r7 = getpid()
perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f0000000b80), 0xd}, 0x2840, 0xb55d, 0xf, 0x7, 0x9b, 0x3, 0x9, 0x0, 0x8, 0x0, 0x5}, r7, 0x10, r0, 0x2)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xd6, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)='%pK    \x00'}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000180)='GPL\x00', 0x7, 0x4, &(0x7f00000001c0)=""/4, 0x41000, 0x40, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, r4, r2, 0x1, r2, r2, r2, r2], &(0x7f0000000880)=[{0x3, 0x1, 0x9, 0x9}, {0x2, 0x1, 0x5, 0x7}, {0x2, 0x0, 0xe}, {0x0, 0x3, 0x2}, {0x0, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xe, 0x3}], 0x10, 0x800000}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r5, &(0x7f00000009c0)="4eda40942a80415f7634e2350a19369706a1abd8786f76", &(0x7f0000000a00)=""/71, 0x4}, 0x20) (async)
close(r2) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$LINK_DETACH(0x22, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0xfff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffff8c7d3a30, 0x1}, 0x1040c0, 0x572, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001}) (async)
getpid() (async)
perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f0000000b80), 0xd}, 0x2840, 0xb55d, 0xf, 0x7, 0x9b, 0x3, 0x9, 0x0, 0x8, 0x0, 0x5}, r7, 0x10, r0, 0x2) (async)

1.180647604s ago: executing program 3 (id=3282):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x6f, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x361}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2102)
write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000020060007538e486dd630ace2211057300fe80000000120000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182)

1.131951764s ago: executing program 1 (id=3283):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000ca6e18ac000018440000030000000000000000000000850000000000000000b7020000010000008500000084000000b7000000000000009500"/132], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94)

1.078629186s ago: executing program 1 (id=3284):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="363cd0173ce482ee822902fbeaf3cfef1f4c8526bd56edbfef0e085c27446ca8a79532fc54c1814b0584076bff83883455ba414fca624e75738f78168f2197bf9e8f21986af93494b54972705edbf7f4823d24abf131a0b805a81dbb9e956e1abb5883b0b7bd6311b5a78a2b4559069c50572ded443aa43b65298071456eb39682158680a067e59908ab5c9c93c175b7c6afd8f1f077add001be79623cfcc7e386631ec95393a8dfcca4c5754615c5524c5dafe825d96fea5cc56ea85b7a3306cfb2d142f07c241af12c0abb4290f7b5"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = syz_clone(0x40100000, &(0x7f0000000940)="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", 0x1000, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)="2845b0003593386c13442f9665994be2c7aafd3281fa27376e85dcc6ac4e1da08fc60851a0ecfff9270eed21ac31d3ef5217219931d9eb3ee2fea3048a9ed65a9567d616d22b08196f8c27e0c35c885deb6977")
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x3, 0xb8, 0x0, 0x6, 0x100, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x5}, 0x8280, 0x5541, 0x10001, 0x5, 0xb2, 0x5, 0x4, 0x0, 0x5, 0x0, 0x1}, r5, 0x2, r4, 0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100008, 0x7, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0xfe33) (async)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) (async)
close(r1)

938.751999ms ago: executing program 1 (id=3285):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={0x0, 0x5, 0xc}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
r5 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x39, &(0x7f0000000400)=""/57, 0x41000, 0x23, '\x00', 0x0, @fallback=0x27, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x7, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0xfffffffa}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
write$cgroup_freezer_state(r2, &(0x7f0000000000)='FREEZING\x00', 0x9)

872.731461ms ago: executing program 2 (id=3286):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x6f, &(0x7f0000000480), 0x0, 0xfffffefb, 0x0, 0x0, 0x0, 0xd4, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x361}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000002503000028feffff6203f0fff8ffffff61a4f0ff000000001d030200000000007f000000000000005504000017ffffff6604000017ffffffbe400000000000007b0300fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bff030000000000000ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c70f922231cf567a16cb2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'blkio'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2b, 'pids'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2d, 'pids'}, {0x2b, 'rlimit'}]}, 0x3c)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x1)
r9 = socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000020060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)

418.318231ms ago: executing program 2 (id=3287):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000004"], 0x48)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0xb9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0xa, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x58}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

375.635252ms ago: executing program 2 (id=3288):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query, @map_val, @generic={0x0, 0x2, 0x3, 0x1, 0x12}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x3, 0xfffffffd, 0x10}, 0x10, 0x2e92, r3, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0xc}, {0x3, 0x1, 0x9, 0xa}], 0x10, 0x8594}, 0x94)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x2c004804)
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x5}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1900000004000000040000000200", @ANYBLOB="efa196a860df77de9c4f4978612cd38a9d51d302d264321a4555bf912b18502e116b2123587f936a0708f9dcf0c5c13e9df9423c1b389e0c3a5f59fad70310815310a8438100a68a68fdd05a911386028bafdd506e13d8e1c2458188d3e429132b223ae29219b183ed7792eb695d80f1508303", @ANYRES64], 0x50)

243.380004ms ago: executing program 3 (id=3289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x4, 0x0, 0x6, 0x86e46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0xc, 0x806}, 0xc0, 0x1, 0x0, 0x3, 0x9, 0xffff0000, 0xe, 0x0, 0xfffffffd, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c6c, 0x400c78, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x37}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, 0x0, &(0x7f0000000200)='%pS    \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

242.351264ms ago: executing program 2 (id=3290):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) (async)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x8000, 0x1, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x2, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xfffffffffffff24b) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000410ca9ff3d8121890000ebff", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="040000000100"/28], 0x50) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) (async)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async)
r8 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r8, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000000000000000000010000008100000000000000b0000000000000000000000007000000831304"], 0xc8}, 0x24000000) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x63, 0x0, 0x20, 0x3, 0x0, 0xe, 0x34002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x7}, 0x0, 0xfffffffffffffff9, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1)

114.842527ms ago: executing program 2 (id=3291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x372efe22}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r7 = openat$cgroup_ro(r4, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0xb1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x1b, &(0x7f0000000700)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000800)='syzkaller\x00', 0x80000001, 0x5c, &(0x7f0000000840)=""/92, 0x41100, 0x28, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r9], &(0x7f0000000e80)=[{0x3, 0x4, 0xf, 0x814f7c4302787ff4}]}, 0x94)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r11, &(0x7f00000000c0), 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}, @var={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x54}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|')
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

114.378107ms ago: executing program 3 (id=3292):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020207025f8000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

61.467548ms ago: executing program 3 (id=3293):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x18001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1)
unlink(&(0x7f0000000140)='./cgroup\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040400000200000000000000", @ANYRES16=r3, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg(r4, &(0x7f0000003c40)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8906, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4040081)
socketpair(0x10, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc164, 0x9, 0x0, 0x0, 0x3cb35a63, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080))

53.279518ms ago: executing program 1 (id=3294):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xf}, 0x10880, 0x0, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, r0, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001072b20000000000552af0e4917ad523540000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
close(r1)

0s ago: executing program 2 (id=3295):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x6f, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x361}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2102)
write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000020060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) (fail_nth: 21)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182)

kernel console output (not intermixed with test programs):

ulticast mode
[  374.244373][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.264135][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.275222][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.291511][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.299975][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  374.300811][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.318087][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.431680][ T5085] Bluetooth: hci0: command tx timeout
[  374.444198][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.543954][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.680019][ T5085] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  374.713399][T13347] syzkaller0: entered promiscuous mode
[  374.726464][T13347] syzkaller0: entered allmulticast mode
[  374.753890][   T42] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.308963][T13338] chnl_net:caif_netlink_parms(): no params data found
[  376.352043][ T5085] Bluetooth: hci4: command tx timeout
[  376.508655][T13338] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.529083][ T5085] Bluetooth: hci0: command tx timeout
[  376.530058][T13338] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.548420][T13338] bridge_slave_0: entered allmulticast mode
[  376.557452][T13338] bridge_slave_0: entered promiscuous mode
[  376.635766][T13362] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2342'.
[  376.658435][T13362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.698930][T13338] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.707221][T13338] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.718762][T13338] bridge_slave_1: entered allmulticast mode
[  376.727554][T13338] bridge_slave_1: entered promiscuous mode
[  376.754419][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  376.917990][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.026935][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.137805][T13377] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2350'.
[  377.175411][T13338] team0: Port device team_slave_0 added
[  377.185209][T13338] team0: Port device team_slave_1 added
[  377.218422][T13381] netlink: 'syz.0.2350': attribute type 39 has an invalid length.
[  377.269388][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.282189][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.311856][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.424816][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.444646][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.477886][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.526992][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.540071][T13392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.556624][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.568832][T13392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.708727][T13338] hsr_slave_0: entered promiscuous mode
[  377.729400][T13338] hsr_slave_1: entered promiscuous mode
[  377.736342][T13338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  377.746248][T13338] Cannot create hsr debugfs directory
[  378.391500][   T42] veth0_to_team: left allmulticast mode
[  378.406015][   T42] veth0_to_team: left promiscuous mode
[  378.432149][ T5085] Bluetooth: hci4: command tx timeout
[  378.433315][   T42] Ÿë
: port 1(veth0_to_team) entered disabled state
[  378.628432][   T42] hsr_slave_0: left promiscuous mode
[  378.635194][   T42] hsr_slave_1: left promiscuous mode
[  378.709178][   T42] veth1_macvtap: left promiscuous mode
[  378.721196][   T42] veth0_macvtap: left promiscuous mode
[  378.726801][   T42] ªªªªªª: left promiscuous mode
[  378.742139][   T42] veth0_vlan: left promiscuous mode
[  378.846345][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.852853][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  380.073893][T13424] netlink: 'syz.3.2351': attribute type 21 has an invalid length.
[  380.084180][T13424] netlink: 'syz.3.2351': attribute type 6 has an invalid length.
[  380.092033][T13424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2351'.
[  380.109651][T13430] netlink: 'syz.3.2351': attribute type 16 has an invalid length.
[  380.118217][T13430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2351'.
[  380.130557][T13430] veth1_macvtap: entered allmulticast mode
[  380.427082][T13338] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  380.469357][T13440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2353'.
[  380.516057][ T5085] Bluetooth: hci4: command tx timeout
[  380.596575][T13338] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  380.623436][T13338] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  380.652432][T13338] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  380.676578][T13453] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2354'.
[  380.687046][T13448] netlink: 'syz.1.2354': attribute type 39 has an invalid length.
[  380.915941][T13338] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.966764][T13338] 8021q: adding VLAN 0 to HW filter on device team0
[  380.985508][T13467] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2355'.
[  380.999030][T13467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.039423][T11507] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.046658][T11507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.075600][T11507] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.082861][T11507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.186631][T13338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.474573][T13486] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2361'.
[  381.603726][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.679589][T13338] veth0_vlan: entered promiscuous mode
[  381.695968][T13494] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2362'.
[  381.699797][T13338] veth1_vlan: entered promiscuous mode
[  381.758972][T13338] veth0_macvtap: entered promiscuous mode
[  381.793585][T13338] veth1_macvtap: entered promiscuous mode
[  381.848840][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.867585][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.879877][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.902493][T13497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2363'.
[  381.928160][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.969383][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.003229][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.019323][T13504] netlink: 'syz.1.2364': attribute type 4 has an invalid length.
[  382.081334][T13504] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2364'.
[  382.109245][T13338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.141221][T13338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.171457][T13338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.190138][T13338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.209237][T13502] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2365'.
[  382.228239][T13505] netlink: 'syz.3.2365': attribute type 39 has an invalid length.
[  382.523738][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.547696][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.584958][T13526] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2369'.
[  382.602248][T13527] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  382.602848][ T5085] Bluetooth: hci4: command tx timeout
[  382.634642][T13527] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  382.663536][T13531] netlink: 'syz.0.2368': attribute type 29 has an invalid length.
[  382.687372][T11505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.695861][T11505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.737993][T13531] netlink: 'syz.0.2368': attribute type 21 has an invalid length.
[  382.803874][T13523] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2368'.
[  383.404258][T13556] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2371'.
[  383.453522][T13556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.487408][T13560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'.
[  383.654403][T13570] can: request_module (can-proto-0) failed.
[  383.688015][T13573] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2377'.
[  383.706982][T13573] netlink: 'syz.0.2377': attribute type 39 has an invalid length.
[  383.757846][T13576] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2379'.
[  383.799768][T13576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.824548][T13576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.844166][T13576] bond0 (unregistering): Released all slaves
[  384.170602][T13590] netlink: 'syz.3.2386': attribute type 1 has an invalid length.
[  384.178641][T13590] netlink: 'syz.3.2386': attribute type 1 has an invalid length.
[  384.433515][T13599] can: request_module (can-proto-0) failed.
[  384.497535][T13602] netlink: 'syz.1.2390': attribute type 39 has an invalid length.
[  384.675768][T13608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.700592][T13608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.723500][T13608] bond0 (unregistering): Released all slaves
[  384.744909][T13610] 
€Â0: renamed from batadv_slave_1 (while UP)
[  385.752823][T13624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  385.930911][T13629] can: request_module (can-proto-0) failed.
[  385.994623][T13632] netlink: 'syz.1.2401': attribute type 39 has an invalid length.
[  386.876325][T13654] __nla_validate_parse: 8 callbacks suppressed
[  386.876363][T13654] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2411'.
[  387.067598][T13666] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2415'.
[  387.388530][T13685] validate_nla: 3 callbacks suppressed
[  387.388546][T13685] netlink: 'syz.1.2421': attribute type 10 has an invalid length.
[  387.407575][T13685] syz_tun: entered promiscuous mode
[  387.960629][T13697] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2424'.
[  388.000872][T13697] netlink: 'syz.1.2424': attribute type 39 has an invalid length.
[  388.682357][T13700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2425'.
[  388.719685][T13700] netlink: 'syz.0.2425': attribute type 10 has an invalid length.
[  388.742159][T13700] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2425'.
[  389.138619][T13705] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2427'.
[  389.387445][T13715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2430'.
[  389.417016][T13715] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2430'.
[  389.438953][T13715] bridge: RTM_NEWNEIGH with invalid state 0x5
[  389.617977][T13721] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2433'.
[  389.807675][T13724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2434'.
[  390.322956][T13729] netlink: 'syz.0.2435': attribute type 39 has an invalid length.
[  391.176316][T13760] netlink: 'syz.1.2446': attribute type 39 has an invalid length.
[  391.420816][T13770] netlink: 'syz.0.2450': attribute type 12 has an invalid length.
[  391.640156][T13780] netlink: 'syz.3.2454': attribute type 39 has an invalid length.
[  392.553179][T13793] __nla_validate_parse: 7 callbacks suppressed
[  392.553201][T13793] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2458'.
[  392.595511][T13795] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2459'.
[  392.633221][T13795] netlink: 'syz.3.2459': attribute type 39 has an invalid length.
[  395.487331][T13797] netlink: 'syz.2.2460': attribute type 27 has an invalid length.
[  395.511383][T13797] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2460'.
[  395.679578][T13803] netlink: 'syz.0.2463': attribute type 33 has an invalid length.
[  395.698424][T13803] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2463'.
[  395.894541][T13820] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2467'.
[  395.915906][T13820] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2467'.
[  396.309607][T13831] netlink: 'syz.1.2469': attribute type 21 has an invalid length.
[  396.327546][T13831] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2469'.
[  396.793829][T13839] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2472'.
[  396.863268][T13839] netlink: 'syz.3.2472': attribute type 39 has an invalid length.
[  397.219217][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  397.234943][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'.
[  397.281490][T13860] netlink: 'syz.2.2477': attribute type 3 has an invalid length.
[  397.289288][T13860] netlink: 'syz.2.2477': attribute type 1 has an invalid length.
[  397.517457][T13868] netlink: 'syz.1.2479': attribute type 10 has an invalid length.
[  397.559917][T13868] team0: Device hsr_slave_0 failed to register rx_handler
[  397.822999][T13879] __nla_validate_parse: 4 callbacks suppressed
[  397.823037][T13879] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2484'.
[  397.872606][T13879] netlink: 'syz.2.2484': attribute type 39 has an invalid length.
[  398.295740][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  398.305105][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  398.314227][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  398.324657][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  398.333363][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  398.341131][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  400.125503][T13894] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2488'.
[  400.431482][ T5085] Bluetooth: hci2: command tx timeout
[  400.469237][T11509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.525238][T13889] chnl_net:caif_netlink_parms(): no params data found
[  400.565006][T11509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.670911][T11509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.817433][T11509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.844338][T13889] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.855715][T13889] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.863246][T13889] bridge_slave_0: entered allmulticast mode
[  400.870832][T13889] bridge_slave_0: entered promiscuous mode
[  400.900373][T13889] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.930095][T13889] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.952796][T13889] bridge_slave_1: entered allmulticast mode
[  400.972640][T13889] bridge_slave_1: entered promiscuous mode
[  401.179517][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.335767][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.390155][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'.
[  401.641815][T13889] team0: Port device team_slave_0 added
[  401.669185][T13889] team0: Port device team_slave_1 added
[  401.675387][ T5085] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  401.919597][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.939788][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.988302][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.046930][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.061128][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.119629][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.261382][T13951] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2501'.
[  402.281241][T13956] netlink: 'syz.3.2501': attribute type 39 has an invalid length.
[  402.528988][ T5085] Bluetooth: hci2: command tx timeout
[  402.598088][T13889] hsr_slave_0: entered promiscuous mode
[  402.616168][T13889] hsr_slave_1: entered promiscuous mode
[  402.622751][T13889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.630356][T13889] Cannot create hsr debugfs directory
[  402.677908][T13973] netlink: 'syz.3.2506': attribute type 17 has an invalid length.
[  402.710968][T13971] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2507'.
[  402.895822][T13974] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2507'.
[  403.773677][T13996] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2513'.
[  403.953630][T13996] netlink: 'syz.2.2513': attribute type 39 has an invalid length.
[  404.596487][ T5085] Bluetooth: hci2: command tx timeout
[  404.704357][T13889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  404.727545][T13889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  404.749426][T13889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  404.778396][T13889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  404.926211][T13889] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.039543][T13889] 8021q: adding VLAN 0 to HW filter on device team0
[  405.125511][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.132749][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.156142][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.163494][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.197964][T11509] hsr_slave_0: left promiscuous mode
[  405.208079][T11509] hsr_slave_1: left promiscuous mode
[  405.229174][T11509] hsr0: left allmulticast mode
[  405.248973][T11509] bridge0: port 3(hsr0) entered disabled state
[  405.272080][T11509] bridge_slave_1: left allmulticast mode
[  405.297817][T11509] bridge_slave_1: left promiscuous mode
[  405.334016][T11509] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.394243][T11509] bridge_slave_0: left promiscuous mode
[  405.400398][T11509] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.525117][T13889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  406.672436][ T5085] Bluetooth: hci2: command tx timeout
[  406.695431][T14064] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2521'.
[  406.747596][T14070] netlink: 'syz.3.2521': attribute type 39 has an invalid length.
[  406.988046][T13889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.248291][T13889] veth0_vlan: entered promiscuous mode
[  407.318354][T13889] veth1_vlan: entered promiscuous mode
[  407.528668][T13889] veth0_macvtap: entered promiscuous mode
[  407.587933][T13889] veth1_macvtap: entered promiscuous mode
[  407.709819][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.751168][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.761635][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.772516][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.792789][T13889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.815116][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  407.831424][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.851357][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.871366][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.892859][T13889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.927677][T13889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.946768][T13889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.971095][T13889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.001333][T13889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.156351][T14112] netlink: 'syz.1.2531': attribute type 39 has an invalid length.
[  408.224130][T11505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.253989][T11505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.375241][T11505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.396631][T11505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.617140][T14135] netlink: 'syz.0.2487': attribute type 9 has an invalid length.
[  408.644563][T14135] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2487'.
[  408.974402][T14154] netlink: 'syz.1.2541': attribute type 39 has an invalid length.
[  409.498697][T14175] netlink: 'syz.1.2545': attribute type 29 has an invalid length.
[  409.566750][T14175] netlink: 'syz.1.2545': attribute type 3 has an invalid length.
[  409.656313][T14175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2545'.
[  409.921675][T14184] sit0: entered allmulticast mode
[  410.010954][T14188] netlink: 'syz.3.2550': attribute type 9 has an invalid length.
[  410.104504][T14193] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2552'.
[  410.226761][T14197] netlink: 'syz.2.2553': attribute type 39 has an invalid length.
[  411.051446][T14228] ªªªªªª: renamed from veth1_vlan (while UP)
[  411.461369][T14257] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2569'.
[  411.487490][T14257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  411.682621][T14262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2570'.
[  411.938443][T14266] netlink: 'syz.2.2572': attribute type 9 has an invalid length.
[  411.946537][T14266] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2572'.
[  411.989390][T14266] netlink: 'syz.2.2572': attribute type 9 has an invalid length.
[  411.997235][T14266] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2572'.
[  412.190181][T14271] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2574'.
[  412.483205][T14282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2579'.
[  412.497587][T14275] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2575'.
[  412.525507][T14275] netlink: 'syz.2.2575': attribute type 39 has an invalid length.
[  413.062494][T14303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.620764][T14310] netlink: 'syz.3.2586': attribute type 5 has an invalid length.
[  416.114465][T14322] __nla_validate_parse: 3 callbacks suppressed
[  416.114482][T14322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2591'.
[  416.148022][T14324] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2593'.
[  416.298019][T14328] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2592'.
[  416.371461][T14328] netlink: 'syz.1.2592': attribute type 39 has an invalid length.
[  416.544326][T14343] vcan0: entered allmulticast mode
[  416.594368][T14343] netlink: 'syz.2.2600': attribute type 10 has an invalid length.
[  416.604701][T14343] veth0_macvtap: left promiscuous mode
[  416.693586][T14341] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2599'.
[  416.714353][T14341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  416.740042][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2603'.
[  416.814090][T14355] sctp: [Deprecated]: syz.2.2604 (pid 14355) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.814090][T14355] Use struct sctp_sack_info instead
[  416.879354][T14358] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2605'.
[  417.109005][T14371] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2611'.
[  417.144279][T14371] netlink: 'syz.2.2611': attribute type 39 has an invalid length.
[  417.249074][T14377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2613'.
[  417.561290][T14390] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2617'.
[  417.580054][T14375] netlink: 'syz.0.2612': attribute type 1 has an invalid length.
[  417.593033][T14375] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2612'.
[  417.984899][T14406] netlink: 'syz.0.2622': attribute type 39 has an invalid length.
[  419.430191][T14435] syzkaller0: entered promiscuous mode
[  419.497822][T14435] syzkaller0: entered allmulticast mode
[  419.744099][T14441] netlink: 'syz.0.2635': attribute type 39 has an invalid length.
[  420.130976][T14450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.166883][T14450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.189024][T14450] bond0 (unregistering): Released all slaves
[  420.559293][T14464] syzkaller0: entered promiscuous mode
[  420.566063][T14464] syzkaller0: entered allmulticast mode
[  422.806553][T14478] __nla_validate_parse: 9 callbacks suppressed
[  422.806569][T14478] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2646'.
[  422.823188][T14479] netlink: 'syz.3.2646': attribute type 39 has an invalid length.
[  422.841205][T14494] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2651'.
[  422.987141][T14502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2653'.
[  425.157044][T14529] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2662'.
[  425.166405][T14530] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2661'.
[  425.193171][T14531] netlink: 'syz.0.2661': attribute type 39 has an invalid length.
[  425.269527][T14536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2664'.
[  425.596028][T14555] netlink: 'syz.2.2670': attribute type 10 has an invalid length.
[  425.775175][T14555] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.782940][T14555] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.896125][T14565] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2673'.
[  425.967439][T14567] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2674'.
[  425.985895][T14567] netlink: 'syz.2.2674': attribute type 39 has an invalid length.
[  426.072594][T14569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2675'.
[  426.197403][T14573] netlink: 'syz.2.2676': attribute type 29 has an invalid length.
[  426.211686][T14573] netlink: 'syz.2.2676': attribute type 29 has an invalid length.
[  426.240231][T14573] netlink: 'syz.2.2676': attribute type 27 has an invalid length.
[  426.865412][T14591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2682'.
[  426.935886][T14592] netlink: 'syz.3.2683': attribute type 39 has an invalid length.
[  430.840029][T14619] __nla_validate_parse: 3 callbacks suppressed
[  430.840043][T14619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2693'.
[  430.935490][T14626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2694'.
[  431.314743][T14650] netlink: 'syz.0.2702': attribute type 10 has an invalid length.
[  431.350519][T14650] batman_adv: batadv0: Adding interface: netdevsim0
[  431.365787][T14650] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.398751][T14650] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  431.413579][T14651] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2701'.
[  431.428611][T14654] netlink: 'syz.1.2701': attribute type 39 has an invalid length.
[  431.670219][T14664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2705'.
[  431.746219][T14666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2706'.
[  432.434064][T14697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2716'.
[  432.494350][T14698] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2715'.
[  432.586875][T14705] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2718'.
[  432.606079][T14707] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2720'.
[  432.638236][T14707] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2720'.
[  433.183529][T14730] netlink: 'syz.2.2722': attribute type 39 has an invalid length.
[  433.939505][T14752] netlink: 'syz.0.2730': attribute type 4 has an invalid length.
[  433.976451][T14752] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  434.547371][T14765] netlink: 'syz.1.2735': attribute type 9 has an invalid length.
[  435.027863][T14781] netlink: 'syz.1.2741': attribute type 39 has an invalid length.
[  435.542470][T14810] netlink: 'syz.0.2752': attribute type 10 has an invalid length.
[  435.561740][T14810] caif0: entered promiscuous mode
[  435.570617][T14810] caif0: entered allmulticast mode
[  435.580063][T14810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.675894][T14815] netlink: 'syz.0.2754': attribute type 7 has an invalid length.
[  435.732519][T14818] netlink: 'syz.0.2755': attribute type 39 has an invalid length.
[  435.946731][T14825] FAULT_INJECTION: forcing a failure.
[  435.946731][T14825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.960039][T14825] CPU: 1 PID: 14825 Comm: syz.0.2758 Not tainted syzkaller #0
[  435.967510][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  435.977766][T14825] Call Trace:
[  435.981051][T14825]  <TASK>
[  435.984000][T14825]  dump_stack_lvl+0x18c/0x250
[  435.988929][T14825]  ? show_regs_print_info+0x20/0x20
[  435.994129][T14825]  ? load_image+0x420/0x420
[  435.998665][T14825]  ? __might_fault+0xaa/0x120
[  436.003439][T14825]  ? __lock_acquire+0x7d80/0x7d80
[  436.008481][T14825]  should_fail_ex+0x394/0x4c0
[  436.013212][T14825]  _copy_from_user+0x2f/0xe0
[  436.017829][T14825]  ___sys_recvmsg+0x174/0x590
[  436.022612][T14825]  ? __sys_recvmsg+0x2a0/0x2a0
[  436.027372][T14825]  ? ksys_write+0x1d2/0x260
[  436.031910][T14825]  ? __fget_files+0x3fc/0x460
[  436.036613][T14825]  __x64_sys_recvmsg+0x21e/0x2f0
[  436.041546][T14825]  ? ___sys_recvmsg+0x590/0x590
[  436.046404][T14825]  ? lockdep_hardirqs_on+0x98/0x150
[  436.051607][T14825]  do_syscall_64+0x55/0xb0
[  436.056049][T14825]  ? clear_bhb_loop+0x40/0x90
[  436.060850][T14825]  ? clear_bhb_loop+0x40/0x90
[  436.065533][T14825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  436.071483][T14825] RIP: 0033:0x7fceaa59de59
[  436.075895][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.095493][T14825] RSP: 002b:00007fcea87f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  436.103918][T14825] RAX: ffffffffffffffda RBX: 00007fceaa825fa0 RCX: 00007fceaa59de59
[  436.111914][T14825] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  436.119925][T14825] RBP: 00007fcea87f6090 R08: 0000000000000000 R09: 0000000000000000
[  436.127917][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.135883][T14825] R13: 00007fceaa826038 R14: 00007fceaa825fa0 R15: 00007ffd80ad7fc8
[  436.144013][T14825]  </TASK>
[  436.208075][T14827] __nla_validate_parse: 14 callbacks suppressed
[  436.208091][T14827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2759'.
[  436.391664][T14835] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2762'.
[  436.529995][T14839] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2765'.
[  436.543748][T14839] netlink: 'syz.1.2765': attribute type 39 has an invalid length.
[  436.846871][T14849] FAULT_INJECTION: forcing a failure.
[  436.846871][T14849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.876532][T14849] CPU: 0 PID: 14849 Comm: syz.2.2768 Not tainted syzkaller #0
[  436.884060][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.891562][T14850] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2769'.
[  436.894117][T14849] Call Trace:
[  436.894129][T14849]  <TASK>
[  436.894137][T14849]  dump_stack_lvl+0x18c/0x250
[  436.914107][T14849]  ? show_regs_print_info+0x20/0x20
[  436.919330][T14849]  ? load_image+0x420/0x420
[  436.923866][T14849]  ? __might_fault+0xaa/0x120
[  436.928572][T14849]  ? __lock_acquire+0x7d80/0x7d80
[  436.933643][T14849]  should_fail_ex+0x394/0x4c0
[  436.938354][T14849]  _copy_to_iter+0x1ce/0x1110
[  436.943065][T14849]  ? __virt_addr_valid+0x10c/0x380
[  436.948392][T14849]  ? __lock_acquire+0x7d80/0x7d80
[  436.953456][T14849]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  436.959486][T14849]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  436.965507][T14849]  ? iov_iter_init+0x1e0/0x1e0
[  436.970320][T14849]  ? __virt_addr_valid+0x10c/0x380
[  436.975464][T14849]  ? __virt_addr_valid+0x10c/0x380
[  436.980617][T14849]  ? __virt_addr_valid+0x10c/0x380
[  436.985771][T14849]  ? __check_object_size+0x4fc/0xa40
[  436.991087][T14849]  __skb_datagram_iter+0xdb/0x780
[  436.996183][T14849]  ? skb_copy_datagram_iter+0x200/0x200
[  437.001765][T14849]  skb_copy_datagram_iter+0xb1/0x200
[  437.007090][T14849]  netlink_recvmsg+0x2d4/0xe60
[  437.012038][T14849]  ? netlink_sendmsg+0xbf0/0xbf0
[  437.017014][T14849]  ? aa_af_perm+0x330/0x330
[  437.021592][T14849]  ? __lock_acquire+0x1262/0x7d80
[  437.026657][T14849]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  437.032001][T14849]  ? security_socket_recvmsg+0x89/0xb0
[  437.037521][T14849]  ? netlink_sendmsg+0xbf0/0xbf0
[  437.042492][T14849]  ____sys_recvmsg+0x2bd/0x5d0
[  437.047295][T14849]  ? __sys_recvmsg_sock+0x50/0x50
[  437.052356][T14849]  ? import_iovec+0x73/0xa0
[  437.056892][T14849]  ___sys_recvmsg+0x214/0x590
[  437.061690][T14849]  ? __sys_recvmsg+0x2a0/0x2a0
[  437.066485][T14849]  ? ksys_write+0x1d2/0x260
[  437.071115][T14849]  ? __fget_files+0x3fc/0x460
[  437.075844][T14849]  __x64_sys_recvmsg+0x21e/0x2f0
[  437.080814][T14849]  ? ___sys_recvmsg+0x590/0x590
[  437.085701][T14849]  ? lockdep_hardirqs_on+0x98/0x150
[  437.090934][T14849]  do_syscall_64+0x55/0xb0
[  437.095375][T14849]  ? clear_bhb_loop+0x40/0x90
[  437.100071][T14849]  ? clear_bhb_loop+0x40/0x90
[  437.104783][T14849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.110705][T14849] RIP: 0033:0x7f0a6e59de59
[  437.115140][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.134865][T14849] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  437.143328][T14849] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  437.151332][T14849] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  437.159333][T14849] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  437.167331][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.175336][T14849] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  437.183365][T14849]  </TASK>
[  437.544794][T14867] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2775'.
[  437.799609][T14876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2779'.
[  437.919835][T14880] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2781'.
[  437.936173][T14880] netlink: 'syz.2.2781': attribute type 39 has an invalid length.
[  438.042957][T14883] FAULT_INJECTION: forcing a failure.
[  438.042957][T14883] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  438.057069][T14883] CPU: 1 PID: 14883 Comm: syz.2.2782 Not tainted syzkaller #0
[  438.064561][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  438.074638][T14883] Call Trace:
[  438.077933][T14883]  <TASK>
[  438.080877][T14883]  dump_stack_lvl+0x18c/0x250
[  438.085602][T14883]  ? show_regs_print_info+0x20/0x20
[  438.090841][T14883]  ? load_image+0x420/0x420
[  438.095399][T14883]  ? __lock_acquire+0x7d80/0x7d80
[  438.100457][T14883]  ? mark_lock+0x94/0x320
[  438.104820][T14883]  should_fail_ex+0x394/0x4c0
[  438.109531][T14883]  prepare_alloc_pages+0x1e1/0x5b0
[  438.114680][T14883]  __alloc_pages+0x134/0x460
[  438.119302][T14883]  ? zone_statistics+0x170/0x170
[  438.124271][T14883]  ? do_wp_page+0x733/0x34d0
[  438.128885][T14883]  ? do_wp_page+0xf17/0x34d0
[  438.133504][T14883]  ? __lock_acquire+0x7d80/0x7d80
[  438.138559][T14883]  __folio_alloc+0x10/0x20
[  438.142998][T14883]  vma_alloc_folio+0x474/0x8f0
[  438.147793][T14883]  do_wp_page+0x118d/0x34d0
[  438.152340][T14883]  ? folio_put+0xd0/0xd0
[  438.156605][T14883]  ? do_raw_spin_lock+0x11f/0x2b0
[  438.161652][T14883]  ? __rwlock_init+0x150/0x150
[  438.166468][T14883]  handle_mm_fault+0x1306/0x4a50
[  438.171410][T14883]  ? handle_mm_fault+0xe6/0x4a50
[  438.176356][T14883]  ? numa_migrate_prep+0x350/0x350
[  438.181483][T14883]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  438.186765][T14883]  do_user_addr_fault+0x736/0x12d0
[  438.191886][T14883]  exc_page_fault+0x64/0x100
[  438.196487][T14883]  asm_exc_page_fault+0x26/0x30
[  438.201340][T14883] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  438.207143][T14883] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  438.226750][T14883] RSP: 0018:ffffc9000fd87658 EFLAGS: 00050202
[  438.232816][T14883] RAX: ffffffff842ec401 RBX: 1ffff92001fb0fc7 RCX: 000000000000069c
[  438.240821][T14883] RDX: 0000000000000000 RSI: ffff8880770127c0 RDI: 0000200000001000
[  438.248788][T14883] RBP: ffffc9000fd877c0 R08: ffff888077012e5b R09: 1ffff1100ee025cb
[  438.256753][T14883] R10: dffffc0000000000 R11: ffffed100ee025cc R12: ffff888077012000
[  438.264722][T14883] R13: 0000000000000e5c R14: 0000000000000e5c R15: ffffc9000fd87e48
[  438.272711][T14883]  ? _copy_to_iter+0x1b1/0x1110
[  438.277571][T14883]  _copy_to_iter+0x24f/0x1110
[  438.282245][T14883]  ? __virt_addr_valid+0x10c/0x380
[  438.287360][T14883]  ? __lock_acquire+0x7d80/0x7d80
[  438.292382][T14883]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  438.298284][T14883]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  438.304199][T14883]  ? iov_iter_init+0x1e0/0x1e0
[  438.309048][T14883]  ? __virt_addr_valid+0x10c/0x380
[  438.314169][T14883]  ? __virt_addr_valid+0x10c/0x380
[  438.319279][T14883]  ? __virt_addr_valid+0x10c/0x380
[  438.324390][T14883]  ? __check_object_size+0x4fc/0xa40
[  438.329699][T14883]  __skb_datagram_iter+0xdb/0x780
[  438.334725][T14883]  ? skb_copy_datagram_iter+0x200/0x200
[  438.340272][T14883]  skb_copy_datagram_iter+0xb1/0x200
[  438.345569][T14883]  netlink_recvmsg+0x2d4/0xe60
[  438.350339][T14883]  ? netlink_sendmsg+0xbf0/0xbf0
[  438.355370][T14883]  ? aa_af_perm+0x330/0x330
[  438.359873][T14883]  ? __lock_acquire+0x1262/0x7d80
[  438.364920][T14883]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  438.370210][T14883]  ? security_socket_recvmsg+0x89/0xb0
[  438.375675][T14883]  ? netlink_sendmsg+0xbf0/0xbf0
[  438.380619][T14883]  ____sys_recvmsg+0x2bd/0x5d0
[  438.385389][T14883]  ? __sys_recvmsg_sock+0x50/0x50
[  438.390421][T14883]  ? import_iovec+0x73/0xa0
[  438.394945][T14883]  ___sys_recvmsg+0x214/0x590
[  438.399622][T14883]  ? __sys_recvmsg+0x2a0/0x2a0
[  438.404388][T14883]  ? ksys_write+0x1d2/0x260
[  438.408908][T14883]  ? __fget_files+0x3fc/0x460
[  438.413594][T14883]  __x64_sys_recvmsg+0x21e/0x2f0
[  438.418527][T14883]  ? ___sys_recvmsg+0x590/0x590
[  438.423381][T14883]  ? lockdep_hardirqs_on+0x98/0x150
[  438.428579][T14883]  do_syscall_64+0x55/0xb0
[  438.432994][T14883]  ? clear_bhb_loop+0x40/0x90
[  438.437673][T14883]  ? clear_bhb_loop+0x40/0x90
[  438.442345][T14883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  438.448241][T14883] RIP: 0033:0x7f0a6e59de59
[  438.452650][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.472261][T14883] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  438.480674][T14883] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  438.488652][T14883] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  438.496618][T14883] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  438.504586][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.512553][T14883] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  438.520533][T14883]  </TASK>
[  438.664158][T14885] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2783'.
[  438.687038][T14885] openvswitch: netlink: Message has 8442 unknown bytes.
[  438.932237][T14894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2786'.
[  439.167941][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2788'.
[  439.210540][T14905] mac80211_hwsim hwsim40 ..ãc¤±: renamed from wlan1 (while UP)
[  439.439308][T14910] netlink: 'syz.1.2791': attribute type 39 has an invalid length.
[  440.008087][T14936] netlink: 'syz.1.2801': attribute type 1 has an invalid length.
[  440.117111][T14942] netlink: 'syz.1.2803': attribute type 39 has an invalid length.
[  440.275767][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.283663][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  440.716052][T14965] netlink: 'syz.2.2812': attribute type 39 has an invalid length.
[  440.852510][T14975] FAULT_INJECTION: forcing a failure.
[  440.852510][T14975] name failslab, interval 1, probability 0, space 0, times 0
[  440.866082][T14975] CPU: 0 PID: 14975 Comm: syz.2.2817 Not tainted syzkaller #0
[  440.873568][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.883627][T14975] Call Trace:
[  440.886906][T14975]  <TASK>
[  440.889838][T14975]  dump_stack_lvl+0x18c/0x250
[  440.894528][T14975]  ? show_regs_print_info+0x20/0x20
[  440.899725][T14975]  ? load_image+0x420/0x420
[  440.904233][T14975]  ? perf_trace_lock_acquire+0x105/0x400
[  440.909876][T14975]  should_fail_ex+0x394/0x4c0
[  440.914568][T14975]  should_failslab+0x9/0x20
[  440.919083][T14975]  slab_pre_alloc_hook+0x59/0x300
[  440.924124][T14975]  kmem_cache_alloc+0x5a/0x2c0
[  440.928887][T14975]  ? skb_clone+0x1eb/0x370
[  440.933314][T14975]  skb_clone+0x1eb/0x370
[  440.937553][T14975]  __netlink_deliver_tap+0x411/0x7f0
[  440.942884][T14975]  ? netlink_deliver_tap+0x2e/0x1b0
[  440.948082][T14975]  netlink_deliver_tap+0x19c/0x1b0
[  440.953196][T14975]  netlink_dump+0x95b/0xec0
[  440.957710][T14975]  ? netlink_lookup+0x200/0x200
[  440.962575][T14975]  ? slab_free_freelist_hook+0x130/0x1a0
[  440.968218][T14975]  ? netlink_recvmsg+0x5e7/0xe60
[  440.973157][T14975]  ? kmem_cache_free+0xf8/0x290
[  440.978012][T14975]  netlink_recvmsg+0x693/0xe60
[  440.982787][T14975]  ? netlink_sendmsg+0xbf0/0xbf0
[  440.987737][T14975]  ? aa_af_perm+0x330/0x330
[  440.992246][T14975]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  440.997528][T14975]  ? security_socket_recvmsg+0x89/0xb0
[  441.002988][T14975]  ? netlink_sendmsg+0xbf0/0xbf0
[  441.007927][T14975]  ____sys_recvmsg+0x2bd/0x5d0
[  441.012702][T14975]  ? __sys_recvmsg_sock+0x50/0x50
[  441.017741][T14975]  ? import_iovec+0x73/0xa0
[  441.022247][T14975]  ___sys_recvmsg+0x214/0x590
[  441.026922][T14975]  ? __sys_recvmsg+0x2a0/0x2a0
[  441.031685][T14975]  ? ksys_write+0x1d2/0x260
[  441.036198][T14975]  ? __fget_files+0x3fc/0x460
[  441.040886][T14975]  __x64_sys_recvmsg+0x21e/0x2f0
[  441.045826][T14975]  ? ___sys_recvmsg+0x590/0x590
[  441.050684][T14975]  ? lockdep_hardirqs_on+0x98/0x150
[  441.055881][T14975]  do_syscall_64+0x55/0xb0
[  441.060297][T14975]  ? clear_bhb_loop+0x40/0x90
[  441.064970][T14975]  ? clear_bhb_loop+0x40/0x90
[  441.069643][T14975]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.075555][T14975] RIP: 0033:0x7f0a6e59de59
[  441.080059][T14975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.099664][T14975] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  441.108076][T14975] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  441.116044][T14975] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  441.124012][T14975] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  441.131990][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.139954][T14975] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  441.147939][T14975]  </TASK>
[  441.395642][T14986] __nla_validate_parse: 9 callbacks suppressed
[  441.395659][T14986] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2820'.
[  441.478129][T14988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2821'.
[  441.654134][T14998] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2825'.
[  441.774958][T15009] FAULT_INJECTION: forcing a failure.
[  441.774958][T15009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.790571][T15009] CPU: 1 PID: 15009 Comm: syz.0.2828 Not tainted syzkaller #0
[  441.798086][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  441.804165][T15006] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2826'.
[  441.808144][T15009] Call Trace:
[  441.808185][T15009]  <TASK>
[  441.808194][T15009]  dump_stack_lvl+0x18c/0x250
[  441.808229][T15009]  ? show_regs_print_info+0x20/0x20
[  441.808254][T15009]  ? load_image+0x420/0x420
[  441.838088][T15009]  ? __lock_acquire+0x7d80/0x7d80
[  441.843150][T15009]  ? snprintf+0xe9/0x140
[  441.847415][T15009]  should_fail_ex+0x394/0x4c0
[  441.852094][T15009]  _copy_to_user+0x2f/0xa0
[  441.856597][T15009]  simple_read_from_buffer+0xe7/0x150
[  441.862002][T15009]  proc_fail_nth_read+0x1e8/0x260
[  441.867094][T15009]  ? proc_fault_inject_write+0x360/0x360
[  441.872779][T15009]  ? fsnotify_perm+0x271/0x5e0
[  441.877566][T15009]  ? proc_fault_inject_write+0x360/0x360
[  441.883202][T15009]  vfs_read+0x298/0x990
[  441.887367][T15009]  ? kernel_read+0x1e0/0x1e0
[  441.891961][T15009]  ? __fget_files+0x28/0x460
[  441.896551][T15009]  ? __fget_files+0x3fc/0x460
[  441.901235][T15009]  ? __fdget_pos+0x2a3/0x330
[  441.905822][T15009]  ? ksys_read+0x74/0x260
[  441.910154][T15009]  ksys_read+0x151/0x260
[  441.914396][T15009]  ? vfs_write+0x9a0/0x9a0
[  441.918818][T15009]  ? lockdep_hardirqs_on+0x98/0x150
[  441.924020][T15009]  do_syscall_64+0x55/0xb0
[  441.928465][T15009]  ? clear_bhb_loop+0x40/0x90
[  441.933135][T15009]  ? clear_bhb_loop+0x40/0x90
[  441.937810][T15009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.943733][T15009] RIP: 0033:0x7fceaa55e68e
[  441.948150][T15009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  441.967883][T15009] RSP: 002b:00007fcea87f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  441.976308][T15009] RAX: ffffffffffffffda RBX: 00007fcea87f66c0 RCX: 00007fceaa55e68e
[  441.984295][T15009] RDX: 000000000000000f RSI: 00007fcea87f60a0 RDI: 0000000000000004
[  441.992265][T15009] RBP: 00007fcea87f6090 R08: 0000000000000000 R09: 0000000000000000
[  442.000233][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.008201][T15009] R13: 00007fceaa826038 R14: 00007fceaa825fa0 R15: 00007ffd80ad7fc8
[  442.016182][T15009]  </TASK>
[  442.050950][T15010] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  442.097066][T15010] syzkaller0: entered promiscuous mode
[  442.109958][T15010] syzkaller0: entered allmulticast mode
[  442.123680][T15006] netlink: 'syz.1.2826': attribute type 39 has an invalid length.
[  442.132543][T15014] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2829'.
[  443.894551][T15017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2830'.
[  444.738405][T15044] netlink: 'syz.3.2840': attribute type 39 has an invalid length.
[  445.128206][T15052] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2841'.
[  446.161992][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2844'.
[  446.265861][T15056] team0: Port device team_slave_0 removed
[  446.523004][T15075] netlink: 'syz.1.2850': attribute type 10 has an invalid length.
[  446.528017][T15080] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2851'.
[  446.544927][T15075] team0: Device ipvlan1 failed to register rx_handler
[  446.552200][T15080] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  446.595030][T15076] netlink: 'syz.1.2850': attribute type 10 has an invalid length.
[  446.609285][T15076] team0: Device ipvlan1 failed to register rx_handler
[  446.822095][T15087] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2853'.
[  446.828197][T15086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2854'.
[  446.837569][T15087] openvswitch: netlink: Key type 4112 is out of range max 32
[  446.926245][T15089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2855'.
[  447.051621][T15094] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2857'.
[  447.084394][T15094] netlink: 'syz.3.2857': attribute type 39 has an invalid length.
[  447.535469][T15117] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2865'.
[  447.567170][T15119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2866'.
[  447.730469][T15125] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2869'.
[  447.765988][T15125] netlink: 'syz.1.2869': attribute type 39 has an invalid length.
[  447.788040][T15129] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2871'.
[  448.397455][T15141] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2875'.
[  448.730882][T15158] netlink: 'syz.0.2882': attribute type 39 has an invalid length.
[  448.971935][T15171] netlink: 'syz.1.2885': attribute type 10 has an invalid length.
[  449.014294][T15170] netlink: 'syz.1.2885': attribute type 10 has an invalid length.
[  449.025964][T15171] openvswitch: netlink: Flow key attr not present in new flow.
[  449.043608][T15170] openvswitch: netlink: Flow key attr not present in new flow.
[  449.064183][T15169] syzkaller0: entered allmulticast mode
[  449.126635][T15169] netlink: 'syz.0.2886': attribute type 25 has an invalid length.
[  449.141344][T15169] netlink: 'syz.0.2886': attribute type 6 has an invalid length.
[  449.544258][T15196] netlink: 'syz.2.2894': attribute type 39 has an invalid length.
[  449.715739][T15198] syzkaller0: entered promiscuous mode
[  449.721701][T15198] syzkaller0: entered allmulticast mode
[  451.558397][T15213] __nla_validate_parse: 8 callbacks suppressed
[  451.558413][T15213] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2900'.
[  451.578520][T15216] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2901'.
[  451.778593][T15226] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2906'.
[  451.788358][T15224] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2905'.
[  451.808096][T15228] netlink: 'syz.2.2907': attribute type 17 has an invalid length.
[  451.819829][T15228] netlink: 'syz.2.2907': attribute type 16 has an invalid length.
[  451.830658][T15228] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2907'.
[  451.927997][T15224] netlink: 'syz.0.2905': attribute type 39 has an invalid length.
[  452.304637][T15237] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2911'.
[  452.552255][T15244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2912'.
[  452.954613][T15260] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2918'.
[  452.986209][T15260] netlink: 'syz.1.2918': attribute type 39 has an invalid length.
[  453.048896][T15262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.056415][T15262] IPv6: NLM_F_CREATE should be set when creating new route
[  453.064092][T15262] IPv6: NLM_F_CREATE should be set when creating new route
[  453.071629][T15262] IPv6: NLM_F_CREATE should be set when creating new route
[  453.103541][T15265] netlink: 'syz.3.2919': attribute type 9 has an invalid length.
[  453.149806][T15265] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2919'.
[  453.268767][T15262] netlink: 'syz.3.2919': attribute type 9 has an invalid length.
[  453.298550][T15262] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2919'.
[  453.729625][T15291] netlink: 'syz.1.2929': attribute type 39 has an invalid length.
[  454.266316][T15320] netlink: 'syz.0.2939': attribute type 39 has an invalid length.
[  454.503607][T15329] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  454.516124][T15329] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  454.527745][T15329] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  454.543820][T15329] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  455.544587][T15346] netlink: 'syz.0.2949': attribute type 39 has an invalid length.
[  456.675579][T15381] __nla_validate_parse: 13 callbacks suppressed
[  456.675599][T15381] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2963'.
[  456.883065][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2966'.
[  456.993161][T15390] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2967'.
[  457.079715][T15394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2969'.
[  457.111829][T15394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2969'.
[  457.277755][T15404] FAULT_INJECTION: forcing a failure.
[  457.277755][T15404] name failslab, interval 1, probability 0, space 0, times 0
[  457.294957][T15404] CPU: 0 PID: 15404 Comm: syz.2.2972 Not tainted syzkaller #0
[  457.302485][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  457.312575][T15404] Call Trace:
[  457.315875][T15404]  <TASK>
[  457.318830][T15404]  dump_stack_lvl+0x18c/0x250
[  457.323556][T15404]  ? show_regs_print_info+0x20/0x20
[  457.328783][T15404]  ? load_image+0x420/0x420
[  457.333305][T15404]  ? __might_sleep+0xe0/0xe0
[  457.337954][T15404]  ? __lock_acquire+0x7d80/0x7d80
[  457.343022][T15404]  should_fail_ex+0x394/0x4c0
[  457.347730][T15404]  should_failslab+0x9/0x20
[  457.352265][T15404]  slab_pre_alloc_hook+0x59/0x300
[  457.357337][T15404]  kmem_cache_alloc_node+0x5e/0x310
[  457.362578][T15404]  ? __alloc_skb+0x103/0x2c0
[  457.367206][T15404]  __alloc_skb+0x103/0x2c0
[  457.371658][T15404]  alloc_skb_with_frags+0xcd/0x7a0
[  457.376805][T15404]  ? perf_trace_preemptirq_template+0x269/0x330
[  457.383126][T15404]  sock_alloc_send_pskb+0x883/0x9a0
[  457.388364][T15404]  ? lock_chain_count+0x20/0x20
[  457.393246][T15404]  ? sock_kzfree_s+0x50/0x50
[  457.397855][T15404]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  457.404040][T15404]  ? tun_get_user+0x5e4/0x3d70
[  457.408871][T15404]  tun_get_user+0xa2e/0x3d70
[  457.413476][T15404]  ? aa_file_perm+0x3e3/0xee0
[  457.418157][T15404]  ? rcu_read_unlock+0xa0/0xa0
[  457.422931][T15404]  ? tun_get+0x1c/0x2e0
[  457.427085][T15404]  ? __lock_acquire+0x7d80/0x7d80
[  457.432118][T15404]  ? tun_get+0x1c/0x2e0
[  457.436277][T15404]  tun_chr_write_iter+0x119/0x200
[  457.441303][T15404]  vfs_write+0x474/0x9a0
[  457.445558][T15404]  ? file_end_write+0x250/0x250
[  457.450414][T15404]  ? __fget_files+0x3fc/0x460
[  457.455106][T15404]  ? __fdget_pos+0x1d8/0x330
[  457.459700][T15404]  ? ksys_write+0x74/0x260
[  457.464121][T15404]  ksys_write+0x151/0x260
[  457.468454][T15404]  ? __ia32_sys_read+0x90/0x90
[  457.473234][T15404]  ? lockdep_hardirqs_on+0x98/0x150
[  457.478434][T15404]  do_syscall_64+0x55/0xb0
[  457.482853][T15404]  ? clear_bhb_loop+0x40/0x90
[  457.487531][T15404]  ? clear_bhb_loop+0x40/0x90
[  457.492207][T15404]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  457.498101][T15404] RIP: 0033:0x7f0a6e59de59
[  457.502518][T15404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.522132][T15404] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  457.530549][T15404] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  457.538522][T15404] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  457.546501][T15404] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  457.554479][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.562459][T15404] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  457.570453][T15404]  </TASK>
[  457.593004][T15413] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2974'.
[  457.711158][T15416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2975'.
[  457.884112][T15423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2978'.
[  458.308181][T15436] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2983'.
[  458.340295][T15440] validate_nla: 3 callbacks suppressed
[  458.340311][T15440] netlink: 'syz.2.2983': attribute type 39 has an invalid length.
[  458.659349][T15449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2986'.
[  458.896168][T15465] netlink: 'syz.3.2992': attribute type 11 has an invalid length.
[  460.176861][T15479] netlink: 'syz.2.2998': attribute type 39 has an invalid length.
[  460.339472][T15491] netlink: 'syz.2.3002': attribute type 2 has an invalid length.
[  460.351343][T15491] netlink: 'syz.2.3002': attribute type 1 has an invalid length.
[  460.371297][T15491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.906553][T15489] syzkaller0: entered promiscuous mode
[  460.912755][T15489] syzkaller0: entered allmulticast mode
[  460.929157][T15500] syzkaller0: entered promiscuous mode
[  460.937802][T15500] syzkaller0: entered allmulticast mode
[  462.806828][T15510] __nla_validate_parse: 6 callbacks suppressed
[  462.806845][T15510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3006'.
[  462.907540][T15515] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3008'.
[  463.031988][T15522] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3011'.
[  463.054140][T15522] netlink: 'syz.2.3011': attribute type 39 has an invalid length.
[  463.804599][T15536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3016'.
[  464.028975][T15543] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3019'.
[  464.126091][T15545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3020'.
[  464.248412][T15549] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3022'.
[  464.278927][T15549] netlink: 'syz.1.3022': attribute type 39 has an invalid length.
[  464.507289][T15559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3025'.
[  464.803719][T15567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3030'.
[  467.974599][ T5784] Bluetooth: hci3: command 0x0406 tx timeout
[  468.000478][T15582] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3033'.
[  468.012197][T15583] netlink: 'syz.0.3033': attribute type 39 has an invalid length.
[  468.156185][T15603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3040'.
[  468.181465][T15604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3039'.
[  468.265902][T15608] FAULT_INJECTION: forcing a failure.
[  468.265902][T15608] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  468.280550][T15608] CPU: 1 PID: 15608 Comm: syz.0.3042 Not tainted syzkaller #0
[  468.288043][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  468.298098][T15608] Call Trace:
[  468.301375][T15608]  <TASK>
[  468.304310][T15608]  dump_stack_lvl+0x18c/0x250
[  468.308997][T15608]  ? show_regs_print_info+0x20/0x20
[  468.314201][T15608]  ? load_image+0x420/0x420
[  468.318708][T15608]  ? __lock_acquire+0x7d80/0x7d80
[  468.323732][T15608]  should_fail_ex+0x394/0x4c0
[  468.328415][T15608]  prepare_alloc_pages+0x1e1/0x5b0
[  468.333529][T15608]  __alloc_pages+0x134/0x460
[  468.338117][T15608]  ? zone_statistics+0x170/0x170
[  468.343051][T15608]  ? __build_skb_around+0x245/0x3c0
[  468.348252][T15608]  ? alloc_pages+0x4e1/0x740
[  468.352840][T15608]  alloc_skb_with_frags+0x23e/0x7a0
[  468.358051][T15608]  sock_alloc_send_pskb+0x883/0x9a0
[  468.363251][T15608]  ? lock_chain_count+0x20/0x20
[  468.368105][T15608]  ? sock_kzfree_s+0x50/0x50
[  468.372693][T15608]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  468.378862][T15608]  tun_get_user+0xa2e/0x3d70
[  468.383460][T15608]  ? aa_file_perm+0x3e3/0xee0
[  468.388139][T15608]  ? rcu_read_unlock+0xa0/0xa0
[  468.393010][T15608]  ? tun_get+0x1c/0x2e0
[  468.397164][T15608]  ? __lock_acquire+0x7d80/0x7d80
[  468.402190][T15608]  ? tun_get+0x1c/0x2e0
[  468.406344][T15608]  tun_chr_write_iter+0x119/0x200
[  468.411372][T15608]  vfs_write+0x474/0x9a0
[  468.415621][T15608]  ? file_end_write+0x250/0x250
[  468.420477][T15608]  ? __fget_files+0x3fc/0x460
[  468.425160][T15608]  ? __fdget_pos+0x1d8/0x330
[  468.429746][T15608]  ? ksys_write+0x74/0x260
[  468.434165][T15608]  ksys_write+0x151/0x260
[  468.438496][T15608]  ? __ia32_sys_read+0x90/0x90
[  468.443259][T15608]  ? lockdep_hardirqs_on+0x98/0x150
[  468.448455][T15608]  do_syscall_64+0x55/0xb0
[  468.452870][T15608]  ? clear_bhb_loop+0x40/0x90
[  468.457538][T15608]  ? clear_bhb_loop+0x40/0x90
[  468.462209][T15608]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.468101][T15608] RIP: 0033:0x7fceaa59de59
[  468.472686][T15608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.492286][T15608] RSP: 002b:00007fcea87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  468.500697][T15608] RAX: ffffffffffffffda RBX: 00007fceaa825fa0 RCX: 00007fceaa59de59
[  468.509535][T15608] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  468.517501][T15608] RBP: 00007fcea87f6090 R08: 0000000000000000 R09: 0000000000000000
[  468.525474][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.533438][T15608] R13: 00007fceaa826038 R14: 00007fceaa825fa0 R15: 00007ffd80ad7fc8
[  468.541420][T15608]  </TASK>
[  469.149782][T15620] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3046'.
[  469.172739][T15620] netlink: 'syz.0.3046': attribute type 39 has an invalid length.
[  469.315474][T15627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3049'.
[  469.517373][T15635] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3052'.
[  469.637448][T15639] FAULT_INJECTION: forcing a failure.
[  469.637448][T15639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.654977][T15639] CPU: 0 PID: 15639 Comm: syz.1.3054 Not tainted syzkaller #0
[  469.662463][T15639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  469.672528][T15639] Call Trace:
[  469.675815][T15639]  <TASK>
[  469.678750][T15639]  dump_stack_lvl+0x18c/0x250
[  469.683440][T15639]  ? show_regs_print_info+0x20/0x20
[  469.688654][T15639]  ? load_image+0x420/0x420
[  469.693205][T15639]  ? __might_fault+0xaa/0x120
[  469.697899][T15639]  ? __lock_acquire+0x7d80/0x7d80
[  469.702966][T15639]  should_fail_ex+0x394/0x4c0
[  469.707674][T15639]  _copy_from_iter+0x1cd/0x1290
[  469.712547][T15639]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  469.717948][T15639]  ? copyout_mc+0x70/0x70
[  469.722291][T15639]  ? __virt_addr_valid+0x10c/0x380
[  469.727422][T15639]  ? __virt_addr_valid+0x10c/0x380
[  469.732549][T15639]  ? __virt_addr_valid+0x10c/0x380
[  469.737686][T15639]  ? __check_object_size+0x4fc/0xa40
[  469.743043][T15639]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  469.748858][T15639]  ? skb_put+0x112/0x210
[  469.753109][T15639]  tun_get_user+0xc84/0x3d70
[  469.757731][T15639]  ? perf_trace_run_bpf_submit+0x10/0x1c0
[  469.763463][T15639]  ? rcu_read_unlock+0xa0/0xa0
[  469.768239][T15639]  ? tun_get+0x1c/0x2e0
[  469.772402][T15639]  ? __lock_acquire+0x7d80/0x7d80
[  469.777442][T15639]  ? tun_get+0x1c/0x2e0
[  469.781596][T15639]  tun_chr_write_iter+0x119/0x200
[  469.786638][T15639]  vfs_write+0x474/0x9a0
[  469.790891][T15639]  ? file_end_write+0x250/0x250
[  469.795747][T15639]  ? __fget_files+0x3fc/0x460
[  469.800428][T15639]  ? __fdget_pos+0x1d8/0x330
[  469.805016][T15639]  ? ksys_write+0x74/0x260
[  469.809434][T15639]  ksys_write+0x151/0x260
[  469.813777][T15639]  ? __ia32_sys_read+0x90/0x90
[  469.818572][T15639]  ? lockdep_hardirqs_on+0x98/0x150
[  469.823804][T15639]  do_syscall_64+0x55/0xb0
[  469.828239][T15639]  ? clear_bhb_loop+0x40/0x90
[  469.833013][T15639]  ? clear_bhb_loop+0x40/0x90
[  469.837723][T15639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  469.843992][T15639] RIP: 0033:0x7f338539de59
[  469.848401][T15639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.868016][T15639] RSP: 002b:00007f3386287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  469.876452][T15639] RAX: ffffffffffffffda RBX: 00007f3385625fa0 RCX: 00007f338539de59
[  469.884449][T15639] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  469.892449][T15639] RBP: 00007f3386287090 R08: 0000000000000000 R09: 0000000000000000
[  469.900448][T15639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.908480][T15639] R13: 00007f3385626038 R14: 00007f3385625fa0 R15: 00007ffec3d28f48
[  469.916497][T15639]  </TASK>
[  470.128245][T15646] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3056'.
[  470.217568][T15648] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3057'.
[  470.238506][T15648] netlink: 'syz.3.3057': attribute type 39 has an invalid length.
[  470.277092][T15650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3058'.
[  470.650264][T15661] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3062'.
[  471.037819][T15678] syzkaller0: entered promiscuous mode
[  471.043778][T15678] syzkaller0: entered allmulticast mode
[  471.084434][T15680] netlink: 'syz.3.3069': attribute type 39 has an invalid length.
[  471.369182][T15689] FAULT_INJECTION: forcing a failure.
[  471.369182][T15689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.388397][T15689] CPU: 1 PID: 15689 Comm: syz.3.3072 Not tainted syzkaller #0
[  471.395902][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  471.405986][T15689] Call Trace:
[  471.409267][T15689]  <TASK>
[  471.412202][T15689]  dump_stack_lvl+0x18c/0x250
[  471.416893][T15689]  ? show_regs_print_info+0x20/0x20
[  471.422103][T15689]  ? load_image+0x420/0x420
[  471.426628][T15689]  ? __might_fault+0xaa/0x120
[  471.431314][T15689]  ? __lock_acquire+0x7d80/0x7d80
[  471.436335][T15689]  ? __might_fault+0xaa/0x120
[  471.441011][T15689]  should_fail_ex+0x394/0x4c0
[  471.446000][T15689]  _copy_from_iter+0x1cd/0x1290
[  471.450873][T15689]  ? __might_fault+0xaa/0x120
[  471.455569][T15689]  ? copyout_mc+0x70/0x70
[  471.459906][T15689]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  471.466065][T15689]  ? copyout_mc+0x70/0x70
[  471.470416][T15689]  ? __virt_addr_valid+0x10c/0x380
[  471.475550][T15689]  ? page_copy_sane+0x16a/0x270
[  471.480417][T15689]  copy_page_from_iter+0x7b/0x100
[  471.485451][T15689]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  471.491270][T15689]  tun_get_user+0xc84/0x3d70
[  471.495872][T15689]  ? aa_file_perm+0x3e3/0xee0
[  471.500549][T15689]  ? rcu_read_unlock+0xa0/0xa0
[  471.505319][T15689]  ? tun_get+0x1c/0x2e0
[  471.509473][T15689]  ? __lock_acquire+0x7d80/0x7d80
[  471.514508][T15689]  ? tun_get+0x1c/0x2e0
[  471.518688][T15689]  tun_chr_write_iter+0x119/0x200
[  471.523746][T15689]  vfs_write+0x474/0x9a0
[  471.528088][T15689]  ? file_end_write+0x250/0x250
[  471.532942][T15689]  ? __fget_files+0x3fc/0x460
[  471.537624][T15689]  ? __fdget_pos+0x1d8/0x330
[  471.542244][T15689]  ? ksys_write+0x74/0x260
[  471.546664][T15689]  ksys_write+0x151/0x260
[  471.551013][T15689]  ? __ia32_sys_read+0x90/0x90
[  471.555782][T15689]  ? lockdep_hardirqs_on+0x98/0x150
[  471.560982][T15689]  do_syscall_64+0x55/0xb0
[  471.565400][T15689]  ? clear_bhb_loop+0x40/0x90
[  471.570075][T15689]  ? clear_bhb_loop+0x40/0x90
[  471.574779][T15689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  471.580687][T15689] RIP: 0033:0x7f097799de59
[  471.585101][T15689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.604885][T15689] RSP: 002b:00007f0978902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  471.613299][T15689] RAX: ffffffffffffffda RBX: 00007f0977c25fa0 RCX: 00007f097799de59
[  471.621287][T15689] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  471.629260][T15689] RBP: 00007f0978902090 R08: 0000000000000000 R09: 0000000000000000
[  471.637225][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.645196][T15689] R13: 00007f0977c26038 R14: 00007f0977c25fa0 R15: 00007ffeb31b6748
[  471.653185][T15689]  </TASK>
[  473.300972][T15692] __nla_validate_parse: 7 callbacks suppressed
[  473.300983][T15692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3074'.
[  473.317348][T15699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3076'.
[  473.438722][T15706] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3080'.
[  473.465656][T15706] netlink: 'syz.1.3080': attribute type 39 has an invalid length.
[  473.773529][T15730] FAULT_INJECTION: forcing a failure.
[  473.773529][T15730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.787609][T15730] CPU: 0 PID: 15730 Comm: syz.2.3086 Not tainted syzkaller #0
[  473.795101][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  473.805156][T15730] Call Trace:
[  473.808432][T15730]  <TASK>
[  473.811356][T15730]  dump_stack_lvl+0x18c/0x250
[  473.816068][T15730]  ? show_regs_print_info+0x20/0x20
[  473.821265][T15730]  ? load_image+0x420/0x420
[  473.825892][T15730]  ? __might_fault+0xaa/0x120
[  473.830618][T15730]  ? __lock_acquire+0x7d80/0x7d80
[  473.835665][T15730]  ? __might_fault+0xaa/0x120
[  473.840362][T15730]  should_fail_ex+0x394/0x4c0
[  473.845049][T15730]  _copy_from_iter+0x1cd/0x1290
[  473.849908][T15730]  ? __might_fault+0xaa/0x120
[  473.854597][T15730]  ? copyout_mc+0x70/0x70
[  473.858950][T15730]  ? copyout_mc+0x70/0x70
[  473.863291][T15730]  ? __virt_addr_valid+0x10c/0x380
[  473.868418][T15730]  ? page_copy_sane+0x16a/0x270
[  473.873273][T15730]  copy_page_from_iter+0x7b/0x100
[  473.878330][T15730]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  473.884147][T15730]  tun_get_user+0xc84/0x3d70
[  473.888752][T15730]  ? aa_file_perm+0x3e3/0xee0
[  473.893434][T15730]  ? rcu_read_unlock+0xa0/0xa0
[  473.898206][T15730]  ? tun_get+0x1c/0x2e0
[  473.902397][T15730]  ? __lock_acquire+0x7d80/0x7d80
[  473.907429][T15730]  ? tun_get+0x1c/0x2e0
[  473.911586][T15730]  tun_chr_write_iter+0x119/0x200
[  473.916612][T15730]  vfs_write+0x474/0x9a0
[  473.920884][T15730]  ? file_end_write+0x250/0x250
[  473.925757][T15730]  ? __fget_files+0x3fc/0x460
[  473.930461][T15730]  ? __fdget_pos+0x1d8/0x330
[  473.935062][T15730]  ? ksys_write+0x74/0x260
[  473.939489][T15730]  ksys_write+0x151/0x260
[  473.943828][T15730]  ? __ia32_sys_read+0x90/0x90
[  473.948598][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  473.953815][T15730]  do_syscall_64+0x55/0xb0
[  473.958241][T15730]  ? clear_bhb_loop+0x40/0x90
[  473.962911][T15730]  ? clear_bhb_loop+0x40/0x90
[  473.967583][T15730]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  473.973499][T15730] RIP: 0033:0x7f0a6e59de59
[  473.977924][T15730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.997546][T15730] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  474.005976][T15730] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  474.013951][T15730] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  474.021922][T15730] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  474.029886][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.037858][T15730] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  474.045845][T15730]  </TASK>
[  474.197845][T15735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3087'.
[  474.267127][T15737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3088'.
[  474.771668][T15750] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3093'.
[  474.880773][T15750] netlink: 'syz.2.3093': attribute type 39 has an invalid length.
[  474.958914][T15760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3096'.
[  475.061371][T15764] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3098'.
[  475.278817][T15775] FAULT_INJECTION: forcing a failure.
[  475.278817][T15775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.311719][T15775] CPU: 1 PID: 15775 Comm: syz.2.3102 Not tainted syzkaller #0
[  475.319338][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  475.329412][T15775] Call Trace:
[  475.332698][T15775]  <TASK>
[  475.335631][T15775]  dump_stack_lvl+0x18c/0x250
[  475.340318][T15775]  ? show_regs_print_info+0x20/0x20
[  475.345523][T15775]  ? load_image+0x420/0x420
[  475.350030][T15775]  ? __might_fault+0xaa/0x120
[  475.354881][T15775]  ? __lock_acquire+0x7d80/0x7d80
[  475.359907][T15775]  should_fail_ex+0x394/0x4c0
[  475.364595][T15775]  _copy_from_iter+0x1cd/0x1290
[  475.369471][T15775]  ? __might_fault+0xaa/0x120
[  475.374155][T15775]  ? copyout_mc+0x70/0x70
[  475.378490][T15775]  ? copyout_mc+0x70/0x70
[  475.382818][T15775]  ? __virt_addr_valid+0x10c/0x380
[  475.387933][T15775]  ? page_copy_sane+0x16a/0x270
[  475.392785][T15775]  copy_page_from_iter+0x7b/0x100
[  475.397814][T15775]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  475.403635][T15775]  tun_get_user+0xc84/0x3d70
[  475.408283][T15775]  ? perf_trace_preemptirq_template+0xac/0x330
[  475.414450][T15775]  ? rcu_read_unlock+0xa0/0xa0
[  475.419226][T15775]  ? tun_get+0x1c/0x2e0
[  475.423436][T15775]  ? __lock_acquire+0x7d80/0x7d80
[  475.428462][T15775]  ? lockdep_hardirqs_on+0x98/0x150
[  475.433836][T15775]  ? tun_get+0x1c/0x2e0
[  475.437995][T15775]  tun_chr_write_iter+0x119/0x200
[  475.443027][T15775]  vfs_write+0x474/0x9a0
[  475.447278][T15775]  ? file_end_write+0x250/0x250
[  475.452133][T15775]  ? __fget_files+0x3fc/0x460
[  475.456822][T15775]  ? __fdget_pos+0x1d8/0x330
[  475.461426][T15775]  ? ksys_write+0x74/0x260
[  475.465849][T15775]  ksys_write+0x151/0x260
[  475.470184][T15775]  ? __ia32_sys_read+0x90/0x90
[  475.474956][T15775]  ? lockdep_hardirqs_on+0x98/0x150
[  475.480163][T15775]  do_syscall_64+0x55/0xb0
[  475.484595][T15775]  ? clear_bhb_loop+0x40/0x90
[  475.489273][T15775]  ? clear_bhb_loop+0x40/0x90
[  475.493953][T15775]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.499855][T15775] RIP: 0033:0x7f0a6e59de59
[  475.504272][T15775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.523887][T15775] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  475.532302][T15775] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  475.540271][T15775] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  475.548238][T15775] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  475.556207][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.564173][T15775] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  475.572629][T15775]  </TASK>
[  476.302579][T15789] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3107'.
[  476.366577][T15793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3109'.
[  476.519881][T15795] netlink: 'syz.1.3110': attribute type 39 has an invalid length.
[  476.819044][T15804] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  476.843985][T15804] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  476.938960][T15808] FAULT_INJECTION: forcing a failure.
[  476.938960][T15808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.996050][T15808] CPU: 0 PID: 15808 Comm: syz.0.3115 Not tainted syzkaller #0
[  477.003591][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.013675][T15808] Call Trace:
[  477.016974][T15808]  <TASK>
[  477.020275][T15808]  dump_stack_lvl+0x18c/0x250
[  477.024995][T15808]  ? show_regs_print_info+0x20/0x20
[  477.030223][T15808]  ? load_image+0x420/0x420
[  477.034751][T15808]  ? __might_fault+0xaa/0x120
[  477.039449][T15808]  ? __lock_acquire+0x7d80/0x7d80
[  477.044502][T15808]  should_fail_ex+0x394/0x4c0
[  477.049209][T15808]  _copy_from_iter+0x1cd/0x1290
[  477.054097][T15808]  ? __might_fault+0xaa/0x120
[  477.058799][T15808]  ? copyout_mc+0x70/0x70
[  477.063148][T15808]  ? copyout_mc+0x70/0x70
[  477.067495][T15808]  ? __virt_addr_valid+0x10c/0x380
[  477.072635][T15808]  ? page_copy_sane+0x16a/0x270
[  477.077514][T15808]  copy_page_from_iter+0x7b/0x100
[  477.082571][T15808]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  477.088405][T15808]  tun_get_user+0xc84/0x3d70
[  477.093010][T15808]  ? aa_file_perm+0x3e3/0xee0
[  477.097702][T15808]  ? rcu_read_unlock+0xa0/0xa0
[  477.102483][T15808]  ? tun_get+0x1c/0x2e0
[  477.106643][T15808]  ? __lock_acquire+0x7d80/0x7d80
[  477.111683][T15808]  ? tun_get+0x1c/0x2e0
[  477.115848][T15808]  tun_chr_write_iter+0x119/0x200
[  477.120871][T15808]  vfs_write+0x474/0x9a0
[  477.125120][T15808]  ? file_end_write+0x250/0x250
[  477.129979][T15808]  ? __fget_files+0x3fc/0x460
[  477.134664][T15808]  ? __fdget_pos+0x1d8/0x330
[  477.139254][T15808]  ? ksys_write+0x74/0x260
[  477.143676][T15808]  ksys_write+0x151/0x260
[  477.148011][T15808]  ? __ia32_sys_read+0x90/0x90
[  477.152776][T15808]  ? lockdep_hardirqs_on+0x98/0x150
[  477.157977][T15808]  do_syscall_64+0x55/0xb0
[  477.162396][T15808]  ? clear_bhb_loop+0x40/0x90
[  477.167074][T15808]  ? clear_bhb_loop+0x40/0x90
[  477.171745][T15808]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  477.177642][T15808] RIP: 0033:0x7fceaa59de59
[  477.182057][T15808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.201671][T15808] RSP: 002b:00007fcea87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  477.210089][T15808] RAX: ffffffffffffffda RBX: 00007fceaa825fa0 RCX: 00007fceaa59de59
[  477.218073][T15808] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  477.226040][T15808] RBP: 00007fcea87f6090 R08: 0000000000000000 R09: 0000000000000000
[  477.234109][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  477.242079][T15808] R13: 00007fceaa826038 R14: 00007fceaa825fa0 R15: 00007ffd80ad7fc8
[  477.250063][T15808]  </TASK>
[  480.144564][T15829] __nla_validate_parse: 4 callbacks suppressed
[  480.144599][T15829] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3123'.
[  480.177847][T15829] netlink: 'syz.0.3123': attribute type 39 has an invalid length.
[  480.317479][T15836] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3124'.
[  480.522490][T15848] FAULT_INJECTION: forcing a failure.
[  480.522490][T15848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.540513][T15848] CPU: 0 PID: 15848 Comm: syz.2.3128 Not tainted syzkaller #0
[  480.548117][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  480.558188][T15848] Call Trace:
[  480.561460][T15848]  <TASK>
[  480.564380][T15848]  dump_stack_lvl+0x18c/0x250
[  480.569072][T15848]  ? show_regs_print_info+0x20/0x20
[  480.574272][T15848]  ? load_image+0x420/0x420
[  480.578793][T15848]  ? __might_fault+0xaa/0x120
[  480.583464][T15848]  ? __lock_acquire+0x7d80/0x7d80
[  480.588483][T15848]  should_fail_ex+0x394/0x4c0
[  480.593164][T15848]  _copy_from_iter+0x1cd/0x1290
[  480.598016][T15848]  ? __might_fault+0xaa/0x120
[  480.602711][T15848]  ? copyout_mc+0x70/0x70
[  480.607066][T15848]  ? copyout_mc+0x70/0x70
[  480.611418][T15848]  ? __virt_addr_valid+0x10c/0x380
[  480.616542][T15848]  ? page_copy_sane+0x16a/0x270
[  480.621406][T15848]  copy_page_from_iter+0x7b/0x100
[  480.626438][T15848]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  480.632298][T15848]  tun_get_user+0xc84/0x3d70
[  480.636916][T15848]  ? rcu_read_unlock+0xa0/0xa0
[  480.641712][T15848]  ? tun_get+0x1c/0x2e0
[  480.645869][T15848]  ? __lock_acquire+0x7d80/0x7d80
[  480.650899][T15848]  ? tun_get+0x1c/0x2e0
[  480.655068][T15848]  tun_chr_write_iter+0x119/0x200
[  480.660092][T15848]  vfs_write+0x474/0x9a0
[  480.664342][T15848]  ? file_end_write+0x250/0x250
[  480.669196][T15848]  ? __fget_files+0x3fc/0x460
[  480.673881][T15848]  ? __fdget_pos+0x1d8/0x330
[  480.678467][T15848]  ? ksys_write+0x74/0x260
[  480.682886][T15848]  ksys_write+0x151/0x260
[  480.687217][T15848]  ? __ia32_sys_read+0x90/0x90
[  480.692077][T15848]  ? lockdep_hardirqs_on+0x98/0x150
[  480.697279][T15848]  do_syscall_64+0x55/0xb0
[  480.701701][T15848]  ? clear_bhb_loop+0x40/0x90
[  480.706388][T15848]  ? clear_bhb_loop+0x40/0x90
[  480.711065][T15848]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.716969][T15848] RIP: 0033:0x7f0a6e59de59
[  480.721395][T15848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.741005][T15848] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  480.749455][T15848] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  480.757430][T15848] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  480.765406][T15848] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  480.773382][T15848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  480.781441][T15848] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  480.789425][T15848]  </TASK>
[  481.320550][T15857] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3131'.
[  481.331078][T15857] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.3131'.
[  482.388323][T15852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3129'.
[  482.519104][T15866] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3134'.
[  482.546467][T15868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3135'.
[  482.568282][T15866] netlink: 'syz.0.3134': attribute type 39 has an invalid length.
[  483.282928][T15890] FAULT_INJECTION: forcing a failure.
[  483.282928][T15890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.300082][T15890] CPU: 0 PID: 15890 Comm: syz.2.3142 Not tainted syzkaller #0
[  483.307606][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  483.317684][T15890] Call Trace:
[  483.320979][T15890]  <TASK>
[  483.323925][T15890]  dump_stack_lvl+0x18c/0x250
[  483.328634][T15890]  ? show_regs_print_info+0x20/0x20
[  483.333857][T15890]  ? load_image+0x420/0x420
[  483.338387][T15890]  ? __might_fault+0xaa/0x120
[  483.343089][T15890]  ? __lock_acquire+0x7d80/0x7d80
[  483.348139][T15890]  should_fail_ex+0x394/0x4c0
[  483.352847][T15890]  _copy_from_iter+0x1cd/0x1290
[  483.357721][T15890]  ? rep_movs_alternative+0x4a/0x90
[  483.362947][T15890]  ? copyout_mc+0x70/0x70
[  483.367303][T15890]  ? copyout_mc+0x70/0x70
[  483.371654][T15890]  ? __virt_addr_valid+0x10c/0x380
[  483.376792][T15890]  ? page_copy_sane+0x16a/0x270
[  483.381671][T15890]  copy_page_from_iter+0x7b/0x100
[  483.386717][T15890]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  483.392557][T15890]  tun_get_user+0xc84/0x3d70
[  483.397187][T15890]  ? rcu_read_unlock+0xa0/0xa0
[  483.401985][T15890]  ? tun_get+0x1c/0x2e0
[  483.406161][T15890]  ? __lock_acquire+0x7d80/0x7d80
[  483.411212][T15890]  ? tun_get+0x1c/0x2e0
[  483.415396][T15890]  tun_chr_write_iter+0x119/0x200
[  483.420451][T15890]  vfs_write+0x474/0x9a0
[  483.424727][T15890]  ? file_end_write+0x250/0x250
[  483.429604][T15890]  ? __fget_files+0x3fc/0x460
[  483.434313][T15890]  ? __fdget_pos+0x1d8/0x330
[  483.438924][T15890]  ? ksys_write+0x74/0x260
[  483.443368][T15890]  ksys_write+0x151/0x260
[  483.447729][T15890]  ? __ia32_sys_read+0x90/0x90
[  483.452519][T15890]  ? lockdep_hardirqs_on+0x98/0x150
[  483.457742][T15890]  do_syscall_64+0x55/0xb0
[  483.462180][T15890]  ? clear_bhb_loop+0x40/0x90
[  483.466872][T15890]  ? clear_bhb_loop+0x40/0x90
[  483.471570][T15890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  483.477493][T15890] RIP: 0033:0x7f0a6e59de59
[  483.481924][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.501557][T15890] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  483.509998][T15890] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  483.518024][T15890] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  483.526021][T15890] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  483.534009][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  483.542002][T15890] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  483.550013][T15890]  </TASK>
[  483.823586][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3144'.
[  483.910005][T15902] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3146'.
[  483.988541][T15905] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3147'.
[  484.018443][T15905] netlink: 'syz.1.3147': attribute type 39 has an invalid length.
[  484.227250][T15914] netlink: 'syz.3.3151': attribute type 10 has an invalid length.
[  484.818249][T15925] openvswitch: netlink: Key type 29 is not supported
[  485.368143][T15914] syz.3.3151 (15914) used greatest stack depth: 18600 bytes left
[  485.419762][T15932] __nla_validate_parse: 1 callbacks suppressed
[  485.419779][T15932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3155'.
[  485.568659][T15939] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3158'.
[  485.587278][T15942] FAULT_INJECTION: forcing a failure.
[  485.587278][T15942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.610388][T15941] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3159'.
[  485.621619][T15942] CPU: 0 PID: 15942 Comm: syz.2.3160 Not tainted syzkaller #0
[  485.629225][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  485.639329][T15942] Call Trace:
[  485.642630][T15942]  <TASK>
[  485.645573][T15942]  dump_stack_lvl+0x18c/0x250
[  485.650294][T15942]  ? show_regs_print_info+0x20/0x20
[  485.655522][T15942]  ? load_image+0x420/0x420
[  485.660048][T15942]  ? __might_fault+0xaa/0x120
[  485.662331][T15944] netlink: 'syz.3.3161': attribute type 3 has an invalid length.
[  485.664716][T15942]  ? __lock_acquire+0x7d80/0x7d80
[  485.664746][T15942]  should_fail_ex+0x394/0x4c0
[  485.672669][T15944] netlink: 'syz.3.3161': attribute type 4 has an invalid length.
[  485.677456][T15942]  _copy_from_iter+0x1cd/0x1290
[  485.694691][T15942]  ? __might_fault+0xaa/0x120
[  485.699372][T15942]  ? copyout_mc+0x70/0x70
[  485.703696][T15942]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  485.709852][T15942]  ? copyout_mc+0x70/0x70
[  485.714182][T15942]  ? page_copy_sane+0x16a/0x270
[  485.719029][T15942]  copy_page_from_iter+0x7b/0x100
[  485.724053][T15942]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  485.729867][T15942]  tun_get_user+0xc84/0x3d70
[  485.734469][T15942]  ? aa_file_perm+0x3e3/0xee0
[  485.739230][T15942]  ? rcu_read_unlock+0xa0/0xa0
[  485.743996][T15942]  ? tun_get+0x1c/0x2e0
[  485.748147][T15942]  ? __lock_acquire+0x7d80/0x7d80
[  485.753169][T15942]  ? tun_get+0x1c/0x2e0
[  485.757320][T15942]  tun_chr_write_iter+0x119/0x200
[  485.762347][T15942]  vfs_write+0x474/0x9a0
[  485.766605][T15942]  ? file_end_write+0x250/0x250
[  485.771457][T15942]  ? __fget_files+0x3fc/0x460
[  485.776139][T15942]  ? __fdget_pos+0x1d8/0x330
[  485.780724][T15942]  ? ksys_write+0x74/0x260
[  485.785145][T15942]  ksys_write+0x151/0x260
[  485.789480][T15942]  ? __ia32_sys_read+0x90/0x90
[  485.794249][T15942]  ? syscall_enter_from_user_mode+0x2e/0x80
[  485.800144][T15942]  do_syscall_64+0x55/0xb0
[  485.804560][T15942]  ? clear_bhb_loop+0x40/0x90
[  485.809236][T15942]  ? clear_bhb_loop+0x40/0x90
[  485.813910][T15942]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  485.819896][T15942] RIP: 0033:0x7f0a6e59de59
[  485.824329][T15942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.843950][T15942] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  485.852370][T15942] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  485.860340][T15942] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  485.868306][T15942] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  485.876269][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  485.884264][T15942] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  485.892253][T15942]  </TASK>
[  485.905256][T15944] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.3161'.
[  486.015234][T15951] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3163'.
[  486.037008][T15951] netlink: 'syz.1.3163': attribute type 39 has an invalid length.
[  486.474691][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3167'.
[  487.090682][T15973] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3171'.
[  487.300961][T15988] netlink: 'syz.3.3175': attribute type 39 has an invalid length.
[  487.338205][T15990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3176'.
[  487.458120][T15994] FAULT_INJECTION: forcing a failure.
[  487.458120][T15994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.478599][T15994] CPU: 0 PID: 15994 Comm: syz.2.3178 Not tainted syzkaller #0
[  487.486125][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  487.496211][T15994] Call Trace:
[  487.499512][T15994]  <TASK>
[  487.502459][T15994]  dump_stack_lvl+0x18c/0x250
[  487.507178][T15994]  ? show_regs_print_info+0x20/0x20
[  487.512411][T15994]  ? load_image+0x420/0x420
[  487.516945][T15994]  ? __might_fault+0xaa/0x120
[  487.521639][T15994]  ? __lock_acquire+0x7d80/0x7d80
[  487.526683][T15994]  should_fail_ex+0x394/0x4c0
[  487.531374][T15994]  _copy_from_iter+0x1cd/0x1290
[  487.536227][T15994]  ? __might_fault+0xaa/0x120
[  487.540914][T15994]  ? copyout_mc+0x70/0x70
[  487.545248][T15994]  ? copyout_mc+0x70/0x70
[  487.549632][T15994]  ? __virt_addr_valid+0x10c/0x380
[  487.554753][T15994]  ? page_copy_sane+0x16a/0x270
[  487.559607][T15994]  copy_page_from_iter+0x7b/0x100
[  487.564638][T15994]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  487.570467][T15994]  tun_get_user+0xc84/0x3d70
[  487.575067][T15994]  ? aa_file_perm+0x3e3/0xee0
[  487.579756][T15994]  ? rcu_read_unlock+0xa0/0xa0
[  487.584536][T15994]  ? tun_get+0x1c/0x2e0
[  487.588700][T15994]  ? __lock_acquire+0x7d80/0x7d80
[  487.593742][T15994]  ? tun_get+0x1c/0x2e0
[  487.597903][T15994]  tun_chr_write_iter+0x119/0x200
[  487.602932][T15994]  vfs_write+0x474/0x9a0
[  487.607184][T15994]  ? file_end_write+0x250/0x250
[  487.612041][T15994]  ? __fget_files+0x3fc/0x460
[  487.616726][T15994]  ? __fdget_pos+0x1d8/0x330
[  487.621323][T15994]  ? ksys_write+0x74/0x260
[  487.625740][T15994]  ksys_write+0x151/0x260
[  487.630075][T15994]  ? __ia32_sys_read+0x90/0x90
[  487.634848][T15994]  ? lockdep_hardirqs_on+0x98/0x150
[  487.640058][T15994]  do_syscall_64+0x55/0xb0
[  487.644478][T15994]  ? clear_bhb_loop+0x40/0x90
[  487.649154][T15994]  ? clear_bhb_loop+0x40/0x90
[  487.653826][T15994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  487.659726][T15994] RIP: 0033:0x7f0a6e59de59
[  487.664143][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.683765][T15994] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  487.692187][T15994] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  487.700157][T15994] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  487.708125][T15994] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  487.716092][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  487.724059][T15994] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  487.732045][T15994]  </TASK>
[  487.802222][T16002] netlink: 'syz.1.3177': attribute type 21 has an invalid length.
[  487.813534][T16002] netlink: 'syz.1.3177': attribute type 20 has an invalid length.
[  488.358308][T16008] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3182'.
[  488.553828][T16017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3186'.
[  488.957018][T16030] netlink: 'syz.1.3189': attribute type 39 has an invalid length.
[  489.084013][T16032] FAULT_INJECTION: forcing a failure.
[  489.084013][T16032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.099341][T16032] CPU: 0 PID: 16032 Comm: syz.2.3191 Not tainted syzkaller #0
[  489.106836][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  489.116906][T16032] Call Trace:
[  489.120181][T16032]  <TASK>
[  489.123109][T16032]  dump_stack_lvl+0x18c/0x250
[  489.127794][T16032]  ? show_regs_print_info+0x20/0x20
[  489.132994][T16032]  ? load_image+0x420/0x420
[  489.137494][T16032]  ? __might_fault+0xaa/0x120
[  489.142167][T16032]  ? __lock_acquire+0x7d80/0x7d80
[  489.147195][T16032]  should_fail_ex+0x394/0x4c0
[  489.151884][T16032]  _copy_from_iter+0x1cd/0x1290
[  489.156739][T16032]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  489.162902][T16032]  ? copyout_mc+0x70/0x70
[  489.167232][T16032]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  489.173396][T16032]  ? page_copy_sane+0x16a/0x270
[  489.178255][T16032]  copy_page_from_iter+0x7b/0x100
[  489.183287][T16032]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  489.189107][T16032]  tun_get_user+0xc84/0x3d70
[  489.193712][T16032]  ? aa_file_perm+0x3e3/0xee0
[  489.198426][T16032]  ? rcu_read_unlock+0xa0/0xa0
[  489.203196][T16032]  ? trace_call_bpf+0xc3/0x6c0
[  489.207971][T16032]  ? tun_get+0x1c/0x2e0
[  489.212124][T16032]  ? __lock_acquire+0x7d80/0x7d80
[  489.217169][T16032]  ? tun_get+0x1c/0x2e0
[  489.221326][T16032]  tun_chr_write_iter+0x119/0x200
[  489.226348][T16032]  vfs_write+0x474/0x9a0
[  489.230591][T16032]  ? file_end_write+0x250/0x250
[  489.235444][T16032]  ? __fget_files+0x3fc/0x460
[  489.240125][T16032]  ? __fdget_pos+0x1d8/0x330
[  489.244746][T16032]  ? ksys_write+0x74/0x260
[  489.249172][T16032]  ksys_write+0x151/0x260
[  489.253503][T16032]  ? __ia32_sys_read+0x90/0x90
[  489.258268][T16032]  ? syscall_enter_from_user_mode+0x2e/0x80
[  489.264181][T16032]  do_syscall_64+0x55/0xb0
[  489.268598][T16032]  ? clear_bhb_loop+0x40/0x90
[  489.273269][T16032]  ? clear_bhb_loop+0x40/0x90
[  489.277945][T16032]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  489.283845][T16032] RIP: 0033:0x7f0a6e59de59
[  489.288257][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.307872][T16032] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  489.316286][T16032] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  489.324275][T16032] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  489.332253][T16032] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  489.340246][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  489.348215][T16032] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  489.356207][T16032]  </TASK>
[  489.949588][T16050] À: port 1(vlan0) entered blocking state
[  489.956332][T16050] À: port 1(vlan0) entered disabled state
[  489.962793][T16050] vlan0: entered allmulticast mode
[  489.968238][T16050] veth0_vlan: entered allmulticast mode
[  489.975804][T16050] vlan0: entered promiscuous mode
[  490.011511][T16053] netlink: 'syz.2.3199': attribute type 64 has an invalid length.
[  490.354214][T16060] netlink: 'syz.3.3201': attribute type 39 has an invalid length.
[  490.497203][T16065] __nla_validate_parse: 3 callbacks suppressed
[  490.497223][T16065] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3203'.
[  490.637413][T16067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3204'.
[  490.643413][T16069] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.3205'.
[  490.916164][T16082] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3208'.
[  490.919610][T16083] FAULT_INJECTION: forcing a failure.
[  490.919610][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.948830][T16083] CPU: 0 PID: 16083 Comm: syz.2.3209 Not tainted syzkaller #0
[  490.956317][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  490.966361][T16083] Call Trace:
[  490.969634][T16083]  <TASK>
[  490.972552][T16083]  dump_stack_lvl+0x18c/0x250
[  490.977226][T16083]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  490.983375][T16083]  ? show_regs_print_info+0x20/0x20
[  490.988578][T16083]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  490.994742][T16083]  should_fail_ex+0x394/0x4c0
[  490.999415][T16083]  _copy_from_iter+0x1cd/0x1290
[  491.004258][T16083]  ? __might_fault+0xaa/0x120
[  491.008929][T16083]  ? copyout_mc+0x70/0x70
[  491.013252][T16083]  ? copyout_mc+0x70/0x70
[  491.017568][T16083]  ? __virt_addr_valid+0x10c/0x380
[  491.022688][T16083]  ? page_copy_sane+0x16a/0x270
[  491.027545][T16083]  copy_page_from_iter+0x7b/0x100
[  491.032568][T16083]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  491.038394][T16083]  tun_get_user+0xc84/0x3d70
[  491.042980][T16083]  ? aa_file_perm+0x3e3/0xee0
[  491.047655][T16083]  ? rcu_read_unlock+0xa0/0xa0
[  491.052435][T16083]  ? tun_get+0x1c/0x2e0
[  491.056603][T16083]  ? __lock_acquire+0x7d80/0x7d80
[  491.061636][T16083]  ? tun_get+0x1c/0x2e0
[  491.065801][T16083]  tun_chr_write_iter+0x119/0x200
[  491.070822][T16083]  vfs_write+0x474/0x9a0
[  491.075068][T16083]  ? file_end_write+0x250/0x250
[  491.079923][T16083]  ? __fget_files+0x3fc/0x460
[  491.084605][T16083]  ? __fdget_pos+0x1d8/0x330
[  491.089188][T16083]  ? ksys_write+0x74/0x260
[  491.093604][T16083]  ksys_write+0x151/0x260
[  491.097931][T16083]  ? __ia32_sys_read+0x90/0x90
[  491.102698][T16083]  ? syscall_enter_from_user_mode+0x2e/0x80
[  491.108596][T16083]  do_syscall_64+0x55/0xb0
[  491.113012][T16083]  ? clear_bhb_loop+0x40/0x90
[  491.117681][T16083]  ? clear_bhb_loop+0x40/0x90
[  491.122350][T16083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  491.128241][T16083] RIP: 0033:0x7f0a6e59de59
[  491.132661][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.152294][T16083] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  491.160738][T16083] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  491.168707][T16083] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  491.176675][T16083] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  491.184655][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  491.192621][T16083] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  491.200604][T16083]  </TASK>
[  491.356669][T16091] netlink: 'syz.3.3212': attribute type 39 has an invalid length.
[  491.466063][T16095] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3213'.
[  491.556928][T16097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3214'.
[  491.916918][T16118] netlink: 'syz.0.3221': attribute type 39 has an invalid length.
[  492.558341][T16126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3223'.
[  492.591359][T16128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3224'.
[  492.630675][T16130] FAULT_INJECTION: forcing a failure.
[  492.630675][T16130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.671597][T16130] CPU: 0 PID: 16130 Comm: syz.1.3225 Not tainted syzkaller #0
[  492.679129][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  492.689205][T16130] Call Trace:
[  492.692506][T16130]  <TASK>
[  492.695451][T16130]  dump_stack_lvl+0x18c/0x250
[  492.700166][T16130]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  492.706353][T16130]  ? show_regs_print_info+0x20/0x20
[  492.711588][T16130]  ? load_image+0x420/0x420
[  492.716134][T16130]  should_fail_ex+0x394/0x4c0
[  492.720843][T16130]  _copy_from_iter+0x1cd/0x1290
[  492.725716][T16130]  ? __might_fault+0xaa/0x120
[  492.730392][T16130]  ? copyout_mc+0x70/0x70
[  492.734733][T16130]  ? copyout_mc+0x70/0x70
[  492.739099][T16130]  ? page_copy_sane+0x16a/0x270
[  492.743985][T16130]  copy_page_from_iter+0x7b/0x100
[  492.749039][T16130]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  492.754885][T16130]  tun_get_user+0xc84/0x3d70
[  492.759507][T16130]  ? aa_file_perm+0x3e3/0xee0
[  492.764231][T16130]  ? rcu_read_unlock+0xa0/0xa0
[  492.769022][T16130]  ? tun_get+0x1c/0x2e0
[  492.773173][T16130]  ? __lock_acquire+0x7d80/0x7d80
[  492.778193][T16130]  ? tun_get+0x1c/0x2e0
[  492.782362][T16130]  tun_chr_write_iter+0x119/0x200
[  492.787402][T16130]  vfs_write+0x474/0x9a0
[  492.791646][T16130]  ? file_end_write+0x250/0x250
[  492.796499][T16130]  ? __fget_files+0x3fc/0x460
[  492.801174][T16130]  ? __fdget_pos+0x1d8/0x330
[  492.805768][T16130]  ? ksys_write+0x74/0x260
[  492.810180][T16130]  ksys_write+0x151/0x260
[  492.814522][T16130]  ? __ia32_sys_read+0x90/0x90
[  492.819306][T16130]  do_syscall_64+0x55/0xb0
[  492.823892][T16130]  ? clear_bhb_loop+0x40/0x90
[  492.828652][T16130]  ? clear_bhb_loop+0x40/0x90
[  492.833339][T16130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  492.839258][T16130] RIP: 0033:0x7f338539de59
[  492.843666][T16130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.863290][T16130] RSP: 002b:00007f3386287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  492.871706][T16130] RAX: ffffffffffffffda RBX: 00007f3385625fa0 RCX: 00007f338539de59
[  492.879675][T16130] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  492.887670][T16130] RBP: 00007f3386287090 R08: 0000000000000000 R09: 0000000000000000
[  492.895659][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  492.903627][T16130] R13: 00007f3385626038 R14: 00007f3385625fa0 R15: 00007ffec3d28f48
[  492.911604][T16130]  </TASK>
[  493.055206][T16144] netlink: 'syz.2.3231': attribute type 39 has an invalid length.
[  493.357378][T16151] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3234'.
[  493.368027][T16151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  493.463753][T16154] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3235'.
[  493.554674][ T5085] Bluetooth: hci0: command 0x0406 tx timeout
[  493.835474][T16166] C: renamed from team_slave_0
[  493.862376][T16166] netlink: 'syz.1.3240': attribute type 4 has an invalid length.
[  493.870717][T16166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  494.079780][T16173] netlink: 'syz.3.3242': attribute type 39 has an invalid length.
[  494.103155][T16176] FAULT_INJECTION: forcing a failure.
[  494.103155][T16176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.120156][T16176] CPU: 0 PID: 16176 Comm: syz.1.3243 Not tainted syzkaller #0
[  494.127677][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  494.137780][T16176] Call Trace:
[  494.141116][T16176]  <TASK>
[  494.144049][T16176]  dump_stack_lvl+0x18c/0x250
[  494.148733][T16176]  ? show_regs_print_info+0x20/0x20
[  494.153946][T16176]  ? load_image+0x420/0x420
[  494.158461][T16176]  ? __might_fault+0xaa/0x120
[  494.163154][T16176]  ? __lock_acquire+0x7d80/0x7d80
[  494.168232][T16176]  should_fail_ex+0x394/0x4c0
[  494.172932][T16176]  _copy_from_iter+0x1cd/0x1290
[  494.177801][T16176]  ? __might_fault+0xaa/0x120
[  494.182494][T16176]  ? copyout_mc+0x70/0x70
[  494.186831][T16176]  ? copyout_mc+0x70/0x70
[  494.191178][T16176]  ? __virt_addr_valid+0x10c/0x380
[  494.196327][T16176]  ? page_copy_sane+0x16a/0x270
[  494.201222][T16176]  copy_page_from_iter+0x7b/0x100
[  494.206292][T16176]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  494.212142][T16176]  tun_get_user+0xc84/0x3d70
[  494.216758][T16176]  ? trace_event_raw_event_lock+0x150/0x240
[  494.222660][T16176]  ? perf_trace_preemptirq_template+0x269/0x330
[  494.228909][T16176]  ? rcu_read_unlock+0xa0/0xa0
[  494.233706][T16176]  ? tun_get+0x1c/0x2e0
[  494.237865][T16176]  ? __lock_acquire+0x7d80/0x7d80
[  494.242884][T16176]  ? lockdep_hardirqs_on+0x98/0x150
[  494.248084][T16176]  ? tun_get+0x1c/0x2e0
[  494.252242][T16176]  tun_chr_write_iter+0x119/0x200
[  494.257395][T16176]  vfs_write+0x474/0x9a0
[  494.261654][T16176]  ? file_end_write+0x250/0x250
[  494.266512][T16176]  ? __fget_files+0x3fc/0x460
[  494.271207][T16176]  ? __fdget_pos+0x1d8/0x330
[  494.275811][T16176]  ? ksys_write+0x74/0x260
[  494.280234][T16176]  ksys_write+0x151/0x260
[  494.284568][T16176]  ? __ia32_sys_read+0x90/0x90
[  494.289341][T16176]  ? lockdep_hardirqs_on+0x98/0x150
[  494.294544][T16176]  do_syscall_64+0x55/0xb0
[  494.298959][T16176]  ? clear_bhb_loop+0x40/0x90
[  494.303632][T16176]  ? clear_bhb_loop+0x40/0x90
[  494.308304][T16176]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  494.314204][T16176] RIP: 0033:0x7f338539de59
[  494.318650][T16176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.338469][T16176] RSP: 002b:00007f3386287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  494.346883][T16176] RAX: ffffffffffffffda RBX: 00007f3385625fa0 RCX: 00007f338539de59
[  494.354887][T16176] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  494.362947][T16176] RBP: 00007f3386287090 R08: 0000000000000000 R09: 0000000000000000
[  494.370914][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  494.378887][T16176] R13: 00007f3385626038 R14: 00007f3385625fa0 R15: 00007ffec3d28f48
[  494.386879][T16176]  </TASK>
[  495.524667][T16205] __nla_validate_parse: 5 callbacks suppressed
[  495.524684][T16205] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3252'.
[  495.552971][T16205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  495.824105][T16210] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3254'.
[  495.856314][T16210] netlink: 'syz.3.3254': attribute type 39 has an invalid length.
[  495.862336][T16208] netlink: 'syz.0.3253': attribute type 29 has an invalid length.
[  495.876843][T16208] netlink: 'syz.0.3253': attribute type 29 has an invalid length.
[  495.902632][T16211] netlink: 'syz.0.3253': attribute type 29 has an invalid length.
[  495.926704][T16208] netlink: 'syz.0.3253': attribute type 3 has an invalid length.
[  495.935554][T16208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3253'.
[  495.978587][T16213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3255'.
[  496.167644][T16224] FAULT_INJECTION: forcing a failure.
[  496.167644][T16224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.196459][T16224] CPU: 0 PID: 16224 Comm: syz.1.3260 Not tainted syzkaller #0
[  496.203986][T16224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  496.214068][T16224] Call Trace:
[  496.217369][T16224]  <TASK>
[  496.220321][T16224]  dump_stack_lvl+0x18c/0x250
[  496.225033][T16224]  ? show_regs_print_info+0x20/0x20
[  496.230260][T16224]  ? load_image+0x420/0x420
[  496.234769][T16224]  ? __might_fault+0xaa/0x120
[  496.239448][T16224]  ? __lock_acquire+0x7d80/0x7d80
[  496.244473][T16224]  should_fail_ex+0x394/0x4c0
[  496.249161][T16224]  _copy_from_iter+0x1cd/0x1290
[  496.254010][T16224]  ? __might_fault+0xaa/0x120
[  496.258700][T16224]  ? copyout_mc+0x70/0x70
[  496.263048][T16224]  ? copyout_mc+0x70/0x70
[  496.267431][T16224]  ? __virt_addr_valid+0x10c/0x380
[  496.272556][T16224]  ? page_copy_sane+0x4e/0x270
[  496.277339][T16224]  copy_page_from_iter+0x7b/0x100
[  496.282399][T16224]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  496.288222][T16224]  tun_get_user+0xc84/0x3d70
[  496.292820][T16224]  ? aa_file_perm+0x3e3/0xee0
[  496.297495][T16224]  ? rcu_read_unlock+0xa0/0xa0
[  496.302265][T16224]  ? lockdep_hardirqs_on+0x98/0x150
[  496.307485][T16224]  ? tun_get+0x1c/0x2e0
[  496.311635][T16224]  ? __lock_acquire+0x7d80/0x7d80
[  496.316670][T16224]  ? tun_get+0x1c/0x2e0
[  496.320824][T16224]  tun_chr_write_iter+0x119/0x200
[  496.325845][T16224]  vfs_write+0x474/0x9a0
[  496.330100][T16224]  ? file_end_write+0x250/0x250
[  496.334950][T16224]  ? __fget_files+0x3fc/0x460
[  496.339631][T16224]  ? __fdget_pos+0x1d8/0x330
[  496.344230][T16224]  ? ksys_write+0x74/0x260
[  496.348645][T16224]  ksys_write+0x151/0x260
[  496.352973][T16224]  ? __ia32_sys_read+0x90/0x90
[  496.357737][T16224]  ? lockdep_hardirqs_on+0x98/0x150
[  496.362936][T16224]  do_syscall_64+0x55/0xb0
[  496.367460][T16224]  ? clear_bhb_loop+0x40/0x90
[  496.372140][T16224]  ? clear_bhb_loop+0x40/0x90
[  496.376829][T16224]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  496.382731][T16224] RIP: 0033:0x7f338539de59
[  496.387146][T16224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.406768][T16224] RSP: 002b:00007f3386287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  496.415198][T16224] RAX: ffffffffffffffda RBX: 00007f3385625fa0 RCX: 00007f338539de59
[  496.423166][T16224] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  496.431136][T16224] RBP: 00007f3386287090 R08: 0000000000000000 R09: 0000000000000000
[  496.439103][T16224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  496.447068][T16224] R13: 00007f3385626038 R14: 00007f3385625fa0 R15: 00007ffec3d28f48
[  496.455048][T16224]  </TASK>
[  496.738895][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3264'.
[  496.813158][T16241] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.3265'.
[  496.824233][T16241] netlink: 8442 bytes leftover after parsing attributes in process `syz.0.3265'.
[  496.847688][T16242] netlink: 'syz.3.3266': attribute type 39 has an invalid length.
[  497.176239][T16254] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3269'.
[  497.207320][T16254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  497.262732][T16259] netlink: 'syz.0.3272': attribute type 2 has an invalid length.
[  497.302073][T16259] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3272'.
[  498.125338][T16277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3274'.
[  498.173233][T16278] netlink: 'syz.1.3276': attribute type 39 has an invalid length.
[  498.281944][T16287] FAULT_INJECTION: forcing a failure.
[  498.281944][T16287] name failslab, interval 1, probability 0, space 0, times 0
[  498.295143][T16287] CPU: 1 PID: 16287 Comm: syz.2.3279 Not tainted syzkaller #0
[  498.302631][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  498.312713][T16287] Call Trace:
[  498.316016][T16287]  <TASK>
[  498.318962][T16287]  dump_stack_lvl+0x18c/0x250
[  498.323675][T16287]  ? show_regs_print_info+0x20/0x20
[  498.328905][T16287]  ? load_image+0x420/0x420
[  498.333452][T16287]  should_fail_ex+0x394/0x4c0
[  498.338172][T16287]  should_failslab+0x9/0x20
[  498.342702][T16287]  slab_pre_alloc_hook+0x59/0x300
[  498.347802][T16287]  kmem_cache_alloc+0x5a/0x2c0
[  498.352595][T16287]  ? __nf_conntrack_alloc+0x93/0x370
[  498.357997][T16287]  __nf_conntrack_alloc+0x93/0x370
[  498.363143][T16287]  init_conntrack+0x166/0xf40
[  498.367853][T16287]  ? early_drop+0x7f0/0x7f0
[  498.372382][T16287]  ? nf_conntrack_find_get+0x670/0x670
[  498.377932][T16287]  ? __siphash_unaligned+0x25c/0x3d0
[  498.383225][T16287]  nf_conntrack_in+0xc29/0x1630
[  498.388091][T16287]  ? nf_ct_pernet+0x270/0x270
[  498.392805][T16287]  ? ip6t_do_table+0x1cb/0x1570
[  498.397754][T16287]  ? ip6t_alloc_initial_table+0x640/0x640
[  498.403473][T16287]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  498.409630][T16287]  ? ipv6_defrag+0x2d6/0x3a0
[  498.414285][T16287]  ? ipv4_conntrack_local+0x200/0x200
[  498.419660][T16287]  nf_hook_slow+0xbd/0x200
[  498.424086][T16287]  NF_HOOK+0x21d/0x3b0
[  498.428273][T16287]  ? sock_wfree+0x24f/0x600
[  498.432774][T16287]  ? ip6_rcv_core+0x1082/0x1700
[  498.437620][T16287]  ? net_zcopy_put_abort+0x90/0x90
[  498.442730][T16287]  ? NF_HOOK+0x9f/0x3b0
[  498.446883][T16287]  ? ip6_rcv_core+0x1700/0x1700
[  498.451737][T16287]  ? net_zcopy_put_abort+0x90/0x90
[  498.456854][T16287]  ? ip6_rcv_finish_core+0x420/0x420
[  498.462151][T16287]  __netif_receive_skb+0xcc/0x290
[  498.467239][T16287]  ? netif_receive_skb+0x106/0x720
[  498.472438][T16287]  netif_receive_skb+0x1bc/0x720
[  498.477379][T16287]  ? __bpf_trace_tasklet+0x160/0x160
[  498.482660][T16287]  ? enqueue_to_backlog+0xe90/0xe90
[  498.487858][T16287]  ? perf_trace_preemptirq_template+0xac/0x330
[  498.494014][T16287]  ? tun_rx_batched+0x186/0x790
[  498.498865][T16287]  tun_rx_batched+0x1df/0x790
[  498.503547][T16287]  ? pskb_may_pull+0xf0/0xf0
[  498.508175][T16287]  ? __local_bh_enable_ip+0x13a/0x1c0
[  498.513556][T16287]  ? lockdep_hardirqs_on+0x98/0x150
[  498.518760][T16287]  ? read_lock_is_recursive+0x20/0x20
[  498.524126][T16287]  ? __local_bh_enable_ip+0x13a/0x1c0
[  498.529492][T16287]  ? _local_bh_enable+0xa0/0xa0
[  498.534339][T16287]  ? skb_copy_datagram_from_iter+0x63c/0x6f0
[  498.540334][T16287]  tun_get_user+0x2886/0x3d70
[  498.545023][T16287]  ? tun_get_user+0x24b1/0x3d70
[  498.549875][T16287]  ? rcu_read_unlock+0xa0/0xa0
[  498.554633][T16287]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  498.560613][T16287]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  498.567820][T16287]  ? lock_chain_count+0x20/0x20
[  498.572675][T16287]  ? sync_thread_master+0xf40/0x10d0
[  498.577961][T16287]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  498.584125][T16287]  ? tun_chr_write_iter+0xf7/0x200
[  498.589236][T16287]  tun_chr_write_iter+0x119/0x200
[  498.594260][T16287]  vfs_write+0x474/0x9a0
[  498.598505][T16287]  ? file_end_write+0x250/0x250
[  498.603372][T16287]  ? __fget_files+0x3fc/0x460
[  498.608052][T16287]  ? __fdget_pos+0x1d8/0x330
[  498.612641][T16287]  ? ksys_write+0x74/0x260
[  498.617065][T16287]  ksys_write+0x151/0x260
[  498.621398][T16287]  ? __ia32_sys_read+0x90/0x90
[  498.626161][T16287]  ? lockdep_hardirqs_on+0x98/0x150
[  498.631371][T16287]  do_syscall_64+0x55/0xb0
[  498.635803][T16287]  ? clear_bhb_loop+0x40/0x90
[  498.640491][T16287]  ? clear_bhb_loop+0x40/0x90
[  498.645171][T16287]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  498.651069][T16287] RIP: 0033:0x7f0a6e59de59
[  498.655481][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.675087][T16287] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  498.683499][T16287] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  498.691467][T16287] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  498.699434][T16287] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  498.707400][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  498.715451][T16287] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  498.723451][T16287]  </TASK>
[  498.741266][ T5784] Bluetooth: hci4: command 0x0406 tx timeout
[  499.097732][T16308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.638486][T16316] netlink: 'syz.2.3288': attribute type 39 has an invalid length.
[  500.028701][T16334] FAULT_INJECTION: forcing a failure.
[  500.028701][T16334] name failslab, interval 1, probability 0, space 0, times 0
[  500.041563][T16334] CPU: 1 PID: 16334 Comm: syz.2.3295 Not tainted syzkaller #0
[  500.049055][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  500.059136][T16334] Call Trace:
[  500.062438][T16334]  <TASK>
[  500.065390][T16334]  dump_stack_lvl+0x18c/0x250
[  500.070099][T16334]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  500.076288][T16334]  ? show_regs_print_info+0x20/0x20
[  500.081516][T16334]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  500.087718][T16334]  should_fail_ex+0x394/0x4c0
[  500.092425][T16334]  should_failslab+0x9/0x20
[  500.096941][T16334]  slab_pre_alloc_hook+0x59/0x300
[  500.101976][T16334]  ? lockdep_init_map_type+0x9c/0x8e0
[  500.107360][T16334]  ? nf_ct_ext_add+0x1ad/0x440
[  500.112129][T16334]  ? nf_ct_ext_add+0x1ad/0x440
[  500.116896][T16334]  __kmem_cache_alloc_node+0x53/0x250
[  500.122279][T16334]  ? nf_ct_ext_add+0x1ad/0x440
[  500.127038][T16334]  __kmalloc_node_track_caller+0xa4/0x230
[  500.132765][T16334]  ? rcu_is_watching+0x15/0xb0
[  500.137537][T16334]  krealloc+0x86/0x120
[  500.141609][T16334]  nf_ct_ext_add+0x1ad/0x440
[  500.146204][T16334]  init_conntrack+0x5e9/0xf40
[  500.150881][T16334]  ? early_drop+0x7f0/0x7f0
[  500.155385][T16334]  ? nf_conntrack_find_get+0x670/0x670
[  500.160845][T16334]  ? __siphash_unaligned+0x25c/0x3d0
[  500.166141][T16334]  nf_conntrack_in+0xc29/0x1630
[  500.171007][T16334]  ? nf_ct_pernet+0x270/0x270
[  500.175686][T16334]  ? ip6t_do_table+0x1cb/0x1570
[  500.180538][T16334]  ? ip6t_alloc_initial_table+0x640/0x640
[  500.186271][T16334]  ? ipv6_defrag+0x2d6/0x3a0
[  500.190867][T16334]  ? ipv4_conntrack_local+0x200/0x200
[  500.196237][T16334]  nf_hook_slow+0xbd/0x200
[  500.200658][T16334]  NF_HOOK+0x21d/0x3b0
[  500.204731][T16334]  ? sock_wfree+0x24f/0x600
[  500.209229][T16334]  ? ip6_rcv_core+0x1082/0x1700
[  500.214079][T16334]  ? net_zcopy_put_abort+0x90/0x90
[  500.219189][T16334]  ? NF_HOOK+0x9f/0x3b0
[  500.223344][T16334]  ? ip6_rcv_core+0x1700/0x1700
[  500.228195][T16334]  ? net_zcopy_put_abort+0x90/0x90
[  500.233313][T16334]  ? ip6_rcv_finish_core+0x420/0x420
[  500.238594][T16334]  __netif_receive_skb+0xcc/0x290
[  500.243620][T16334]  ? netif_receive_skb+0x106/0x720
[  500.248734][T16334]  netif_receive_skb+0x1bc/0x720
[  500.253676][T16334]  ? __bpf_trace_tasklet+0x160/0x160
[  500.258961][T16334]  ? enqueue_to_backlog+0xe90/0xe90
[  500.264162][T16334]  ? perf_trace_preemptirq_template+0xac/0x330
[  500.270323][T16334]  ? tun_rx_batched+0x186/0x790
[  500.275175][T16334]  tun_rx_batched+0x1df/0x790
[  500.279855][T16334]  ? pskb_may_pull+0xf0/0xf0
[  500.284439][T16334]  ? __local_bh_enable_ip+0x13a/0x1c0
[  500.289808][T16334]  ? lockdep_hardirqs_on+0x98/0x150
[  500.295005][T16334]  ? read_lock_is_recursive+0x20/0x20
[  500.300374][T16334]  ? __local_bh_enable_ip+0x13a/0x1c0
[  500.305749][T16334]  ? _local_bh_enable+0xa0/0xa0
[  500.310604][T16334]  tun_get_user+0x2886/0x3d70
[  500.315287][T16334]  ? tun_get_user+0x24b1/0x3d70
[  500.320140][T16334]  ? aa_file_perm+0x3e3/0xee0
[  500.324816][T16334]  ? rcu_read_unlock+0xa0/0xa0
[  500.329582][T16334]  ? tun_get+0x1c/0x2e0
[  500.333746][T16334]  ? __lock_acquire+0x7d80/0x7d80
[  500.338774][T16334]  ? tun_get+0x1c/0x2e0
[  500.342933][T16334]  tun_chr_write_iter+0x119/0x200
[  500.347956][T16334]  vfs_write+0x474/0x9a0
[  500.352214][T16334]  ? file_end_write+0x250/0x250
[  500.357072][T16334]  ? __fget_files+0x3fc/0x460
[  500.361762][T16334]  ? __fdget_pos+0x1d8/0x330
[  500.366351][T16334]  ? ksys_write+0x74/0x260
[  500.370768][T16334]  ksys_write+0x151/0x260
[  500.375101][T16334]  ? __ia32_sys_read+0x90/0x90
[  500.379877][T16334]  do_syscall_64+0x55/0xb0
[  500.384292][T16334]  ? clear_bhb_loop+0x40/0x90
[  500.388968][T16334]  ? clear_bhb_loop+0x40/0x90
[  500.393645][T16334]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  500.399540][T16334] RIP: 0033:0x7f0a6e59de59
[  500.403951][T16334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.423634][T16334] RSP: 002b:00007f0a6f4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  500.432045][T16334] RAX: ffffffffffffffda RBX: 00007f0a6e825fa0 RCX: 00007f0a6e59de59
[  500.440015][T16334] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[  500.447988][T16334] RBP: 00007f0a6f4d0090 R08: 0000000000000000 R09: 0000000000000000
[  500.455958][T16334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  500.463927][T16334] R13: 00007f0a6e826038 R14: 00007f0a6e825fa0 R15: 00007fffcda430a8
[  500.471912][T16334]  </TASK>
[  500.614328][T16335] ==================================================================
[  500.622446][T16335] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  500.630286][T16335] Write of size 72 at addr ffff88805ec81f90 by task syz.1.3294/16335
[  500.638416][T16335] 
[  500.640752][T16335] CPU: 1 PID: 16335 Comm: syz.1.3294 Not tainted syzkaller #0
[  500.648232][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  500.658307][T16335] Call Trace:
[  500.661615][T16335]  <TASK>
[  500.664564][T16335]  dump_stack_lvl+0x18c/0x250
[  500.669285][T16335]  ? read_lock_is_recursive+0x20/0x20
[  500.674782][T16335]  ? show_regs_print_info+0x20/0x20
[  500.680017][T16335]  ? load_image+0x420/0x420
[  500.684552][T16335]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  500.690043][T16335]  ? __virt_addr_valid+0x10c/0x380
[  500.695185][T16335]  ? __virt_addr_valid+0x10c/0x380
[  500.700333][T16335]  ? __virt_addr_valid+0x10c/0x380
[  500.705476][T16335]  print_report+0xa8/0x210
[  500.709926][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  500.715063][T16335]  kasan_report+0x117/0x150
[  500.719575][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  500.724692][T16335]  kasan_check_range+0x241/0x290
[  500.729638][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  500.734749][T16335]  __asan_memcpy+0x40/0x70
[  500.739163][T16335]  __bpf_get_stackid+0x6c7/0x900
[  500.744101][T16335]  bpf_get_stackid_pe+0x343/0x410
[  500.749150][T16335]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  500.754604][T16335]  bpf_overflow_handler+0x1fc/0x510
[  500.759802][T16335]  ? bpf_overflow_handler+0xde/0x510
[  500.765092][T16335]  ? tp_perf_event_destroy+0x20/0x20
[  500.770377][T16335]  ? perf_trace_preemptirq_template+0xac/0x330
[  500.776545][T16335]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  500.783745][T16335]  ? __perf_event_account_interrupt+0x187/0x280
[  500.789988][T16335]  __perf_event_overflow+0x461/0x660
[  500.795309][T16335]  perf_swevent_event+0x319/0x570
[  500.800351][T16335]  ? perf_tp_event+0x1550/0x1550
[  500.805301][T16335]  ___perf_sw_event+0x4ab/0x730
[  500.810157][T16335]  ? ___perf_sw_event+0x19e/0x730
[  500.815181][T16335]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  500.821593][T16335]  ? __lock_acquire+0x1336/0x7d80
[  500.826709][T16335]  ? rep_movs_alternative+0x4a/0x90
[  500.831909][T16335]  ? verify_lock_unused+0x140/0x140
[  500.837102][T16335]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  500.843079][T16335]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  500.849054][T16335]  ? lock_chain_count+0x20/0x20
[  500.853895][T16335]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  500.859789][T16335]  __perf_sw_event+0x139/0x270
[  500.864554][T16335]  do_user_addr_fault+0x1242/0x12d0
[  500.869763][T16335]  ? rcu_is_watching+0x15/0xb0
[  500.874530][T16335]  exc_page_fault+0x64/0x100
[  500.879119][T16335]  asm_exc_page_fault+0x26/0x30
[  500.883969][T16335] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  500.889769][T16335] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  500.909373][T16335] RSP: 0018:ffffc9000c14fbd0 EFLAGS: 00050206
[  500.915439][T16335] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000002e5
[  500.923426][T16335] RDX: 0000000000000001 RSI: 0000200000666000 RDI: ffff888074612288
[  500.931390][T16335] RBP: ffffc9000c14fd20 R08: 0000000000000004 R09: 0000000000000005
[  500.939353][T16335] R10: dffffc0000000000 R11: ffffed100e8c24ad R12: 00002000006662e5
[  500.947352][T16335] R13: 1ffff92001829fbd R14: ffff888074612000 R15: 0000200000665d78
[  500.955323][T16335]  ? _copy_from_user+0x51/0xe0
[  500.960095][T16335]  _copy_from_user+0x8b/0xe0
[  500.964680][T16335]  generic_map_update_batch+0x58c/0x800
[  500.970227][T16335]  ? rcu_read_unlock+0xa0/0xa0
[  500.974998][T16335]  ? __fdget+0x180/0x210
[  500.979242][T16335]  ? rcu_read_unlock+0xa0/0xa0
[  500.984000][T16335]  bpf_map_do_batch+0x3f2/0x600
[  500.988847][T16335]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  500.995178][T16335]  __sys_bpf+0x381/0x890
[  500.999420][T16335]  ? bpf_link_show_fdinfo+0x390/0x390
[  501.004800][T16335]  ? lock_chain_count+0x20/0x20
[  501.009650][T16335]  __x64_sys_bpf+0x7c/0x90
[  501.014062][T16335]  do_syscall_64+0x55/0xb0
[  501.018474][T16335]  ? clear_bhb_loop+0x40/0x90
[  501.023157][T16335]  ? clear_bhb_loop+0x40/0x90
[  501.027824][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.033714][T16335] RIP: 0033:0x7f338539de59
[  501.038123][T16335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.057741][T16335] RSP: 002b:00007f3386266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  501.066161][T16335] RAX: ffffffffffffffda RBX: 00007f3385626090 RCX: 00007f338539de59
[  501.074135][T16335] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  501.082103][T16335] RBP: 00007f3385433e6f R08: 0000000000000000 R09: 0000000000000000
[  501.090069][T16335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.098036][T16335] R13: 00007f3385626128 R14: 00007f3385626090 R15: 00007ffec3d28f48
[  501.106009][T16335]  </TASK>
[  501.109020][T16335] 
[  501.111332][T16335] Allocated by task 16336:
[  501.115746][T16335]  kasan_set_track+0x4e/0x70
[  501.120332][T16335]  __kasan_kmalloc+0x8f/0xa0
[  501.124912][T16335]  __kmalloc_node+0xb6/0x240
[  501.129497][T16335]  bpf_map_area_alloc+0x5e/0x110
[  501.134446][T16335]  prealloc_elems_and_freelist+0x86/0x1c0
[  501.140159][T16335]  stack_map_alloc+0x32b/0x4b0
[  501.144915][T16335]  map_create+0x877/0x12f0
[  501.149328][T16335]  __sys_bpf+0x651/0x890
[  501.153558][T16335]  __x64_sys_bpf+0x7c/0x90
[  501.157963][T16335]  do_syscall_64+0x55/0xb0
[  501.162386][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.168276][T16335] 
[  501.170586][T16335] Last potentially related work creation:
[  501.176288][T16335]  kasan_save_stack+0x3e/0x60
[  501.180956][T16335]  __kasan_record_aux_stack+0xaf/0xc0
[  501.186326][T16335]  call_rcu+0x153/0x900
[  501.190493][T16335]  __nf_register_net_hook+0x787/0x910
[  501.195879][T16335]  nf_register_net_hook+0xb2/0x190
[  501.201003][T16335]  nf_register_net_hooks+0x44/0x1b0
[  501.206203][T16335]  ipt_register_table+0x51a/0x7b0
[  501.211293][T16335]  iptable_mangle_table_init+0x41/0x60
[  501.216752][T16335]  xt_find_table_lock+0x304/0x3e0
[  501.221855][T16335]  xt_request_find_table_lock+0x26/0x100
[  501.227483][T16335]  do_ipt_get_ctl+0x71a/0x1210
[  501.232250][T16335]  nf_getsockopt+0x262/0x280
[  501.236848][T16335]  ip_getsockopt+0x19f/0x230
[  501.241464][T16335]  do_sock_getsockopt+0x379/0x450
[  501.246545][T16335]  __x64_sys_getsockopt+0x1d6/0x280
[  501.251740][T16335]  do_syscall_64+0x55/0xb0
[  501.256156][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.262051][T16335] 
[  501.264366][T16335] The buggy address belongs to the object at ffff88805ec81f80
[  501.264366][T16335]  which belongs to the cache kmalloc-cg-64 of size 64
[  501.278502][T16335] The buggy address is located 16 bytes inside of
[  501.278502][T16335]  allocated 40-byte region [ffff88805ec81f80, ffff88805ec81fa8)
[  501.292469][T16335] 
[  501.294785][T16335] The buggy address belongs to the physical page:
[  501.301193][T16335] page:ffffea00017b2040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ec81
[  501.311338][T16335] memcg:ffff8880773f5401
[  501.315563][T16335] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  501.323534][T16335] page_type: 0xffffffff()
[  501.327868][T16335] raw: 00fff00000000800 ffff888017c4da00 ffffea000095f600 0000000000000005
[  501.336445][T16335] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880773f5401
[  501.345017][T16335] page dumped because: kasan: bad access detected
[  501.351434][T16335] page_owner tracks the page as allocated
[  501.357136][T16335] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 11485, tgid 11483 (syz.3.1814), ts 308978971735, free_ts 308972821676
[  501.375555][T16335]  post_alloc_hook+0x1c1/0x200
[  501.380333][T16335]  get_page_from_freelist+0x2181/0x22a0
[  501.385900][T16335]  __alloc_pages+0x1f0/0x460
[  501.390498][T16335]  alloc_slab_page+0x5d/0x180
[  501.395168][T16335]  new_slab+0x87/0x2d0
[  501.399244][T16335]  ___slab_alloc+0xc5c/0x12f0
[  501.404188][T16335]  __kmem_cache_alloc_node+0x11f/0x250
[  501.409661][T16335]  __kmalloc_node+0xa6/0x240
[  501.414247][T16335]  bpf_map_area_alloc+0x5e/0x110
[  501.419181][T16335]  dev_map_create_hash+0x21/0x1b0
[  501.424218][T16335]  dev_map_alloc+0x277/0x4c0
[  501.428799][T16335]  map_create+0x877/0x12f0
[  501.433206][T16335]  __sys_bpf+0x651/0x890
[  501.437439][T16335]  __x64_sys_bpf+0x7c/0x90
[  501.441846][T16335]  do_syscall_64+0x55/0xb0
[  501.446279][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.452196][T16335] page last free stack trace:
[  501.456871][T16335]  free_unref_page_prepare+0x7d7/0x8f0
[  501.462341][T16335]  free_unref_page+0x32/0x2e0
[  501.467019][T16335]  vfree+0x1a7/0x340
[  501.470911][T16335]  bpf_check+0x6449/0xec30
[  501.475322][T16335]  bpf_prog_load+0x10fa/0x1610
[  501.480085][T16335]  __sys_bpf+0x5ba/0x890
[  501.484328][T16335]  __x64_sys_bpf+0x7c/0x90
[  501.488737][T16335]  do_syscall_64+0x55/0xb0
[  501.493151][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.499045][T16335] 
[  501.501357][T16335] Memory state around the buggy address:
[  501.506976][T16335]  ffff88805ec81e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  501.515034][T16335]  ffff88805ec81f00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  501.523087][T16335] >ffff88805ec81f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  501.531136][T16335]                                   ^
[  501.536498][T16335]  ffff88805ec82000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  501.544547][T16335]  ffff88805ec82080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  501.552614][T16335] ==================================================================
[  501.560681][T16335] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  501.567885][T16335] CPU: 1 PID: 16335 Comm: syz.1.3294 Not tainted syzkaller #0
[  501.575349][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  501.585403][T16335] Call Trace:
[  501.588677][T16335]  <TASK>
[  501.591604][T16335]  dump_stack_lvl+0x18c/0x250
[  501.596288][T16335]  ? show_regs_print_info+0x20/0x20
[  501.601486][T16335]  ? load_image+0x420/0x420
[  501.605997][T16335]  panic+0x2ca/0x720
[  501.609886][T16335]  ? __lock_acquire+0x7d80/0x7d80
[  501.614909][T16335]  ? bpf_jit_dump+0xd0/0xd0
[  501.619408][T16335]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  501.625299][T16335]  ? _raw_spin_unlock+0x40/0x40
[  501.630171][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  501.635294][T16335]  check_panic_on_warn+0x84/0xa0
[  501.640237][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  501.645368][T16335]  end_report+0x6f/0x130
[  501.649635][T16335]  kasan_report+0x128/0x150
[  501.654163][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  501.659292][T16335]  kasan_check_range+0x241/0x290
[  501.664237][T16335]  ? __bpf_get_stackid+0x6c7/0x900
[  501.669358][T16335]  __asan_memcpy+0x40/0x70
[  501.673867][T16335]  __bpf_get_stackid+0x6c7/0x900
[  501.678806][T16335]  bpf_get_stackid_pe+0x343/0x410
[  501.683833][T16335]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  501.689291][T16335]  bpf_overflow_handler+0x1fc/0x510
[  501.694511][T16335]  ? bpf_overflow_handler+0xde/0x510
[  501.699824][T16335]  ? tp_perf_event_destroy+0x20/0x20
[  501.705133][T16335]  ? perf_trace_preemptirq_template+0xac/0x330
[  501.711310][T16335]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  501.718531][T16335]  ? __perf_event_account_interrupt+0x187/0x280
[  501.724788][T16335]  __perf_event_overflow+0x461/0x660
[  501.730078][T16335]  perf_swevent_event+0x319/0x570
[  501.735115][T16335]  ? perf_tp_event+0x1550/0x1550
[  501.740066][T16335]  ___perf_sw_event+0x4ab/0x730
[  501.744915][T16335]  ? ___perf_sw_event+0x19e/0x730
[  501.749936][T16335]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  501.756350][T16335]  ? __lock_acquire+0x1336/0x7d80
[  501.761372][T16335]  ? rep_movs_alternative+0x4a/0x90
[  501.766570][T16335]  ? verify_lock_unused+0x140/0x140
[  501.771765][T16335]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  501.777765][T16335]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  501.783749][T16335]  ? lock_chain_count+0x20/0x20
[  501.788601][T16335]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  501.794519][T16335]  __perf_sw_event+0x139/0x270
[  501.799289][T16335]  do_user_addr_fault+0x1242/0x12d0
[  501.804518][T16335]  ? rcu_is_watching+0x15/0xb0
[  501.809286][T16335]  exc_page_fault+0x64/0x100
[  501.813873][T16335]  asm_exc_page_fault+0x26/0x30
[  501.818725][T16335] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  501.824553][T16335] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  501.844172][T16335] RSP: 0018:ffffc9000c14fbd0 EFLAGS: 00050206
[  501.850241][T16335] RAX: ffffffff84312701 RBX: 000000000000056d RCX: 00000000000002e5
[  501.858210][T16335] RDX: 0000000000000001 RSI: 0000200000666000 RDI: ffff888074612288
[  501.866176][T16335] RBP: ffffc9000c14fd20 R08: 0000000000000004 R09: 0000000000000005
[  501.874143][T16335] R10: dffffc0000000000 R11: ffffed100e8c24ad R12: 00002000006662e5
[  501.882119][T16335] R13: 1ffff92001829fbd R14: ffff888074612000 R15: 0000200000665d78
[  501.890097][T16335]  ? _copy_from_user+0x51/0xe0
[  501.894868][T16335]  _copy_from_user+0x8b/0xe0
[  501.899453][T16335]  generic_map_update_batch+0x58c/0x800
[  501.904998][T16335]  ? rcu_read_unlock+0xa0/0xa0
[  501.909754][T16335]  ? __fdget+0x180/0x210
[  501.913994][T16335]  ? rcu_read_unlock+0xa0/0xa0
[  501.918751][T16335]  bpf_map_do_batch+0x3f2/0x600
[  501.923598][T16335]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  501.929927][T16335]  __sys_bpf+0x381/0x890
[  501.934168][T16335]  ? bpf_link_show_fdinfo+0x390/0x390
[  501.939552][T16335]  ? lock_chain_count+0x20/0x20
[  501.944398][T16335]  __x64_sys_bpf+0x7c/0x90
[  501.948805][T16335]  do_syscall_64+0x55/0xb0
[  501.953224][T16335]  ? clear_bhb_loop+0x40/0x90
[  501.957896][T16335]  ? clear_bhb_loop+0x40/0x90
[  501.962653][T16335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.968547][T16335] RIP: 0033:0x7f338539de59
[  501.972958][T16335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.992570][T16335] RSP: 002b:00007f3386266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  502.000987][T16335] RAX: ffffffffffffffda RBX: 00007f3385626090 RCX: 00007f338539de59
[  502.008952][T16335] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  502.016917][T16335] RBP: 00007f3385433e6f R08: 0000000000000000 R09: 0000000000000000
[  502.024883][T16335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.032850][T16335] R13: 00007f3385626128 R14: 00007f3385626090 R15: 00007ffec3d28f48
[  502.040827][T16335]  </TASK>
[  502.044095][T16335] Kernel Offset: disabled
[  502.048410][T16335] Rebooting in 86400 seconds..