last executing test programs:

2m29.165825754s ago: executing program 2 (id=8380):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688812f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m25.78006488s ago: executing program 2 (id=8387):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x3b, 0x20029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x50b, 0x2}, 0x10410, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500002e143dd985000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22)

2m25.570305047s ago: executing program 2 (id=8389):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000200)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xd366, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x5, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x80000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))

2m24.678703405s ago: executing program 2 (id=8394):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={0xffffffffffffffff, 0x5}, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000017c0)={@map=r0, 0xffffffffffffffff, 0x25, 0x0, 0x0, @void, @value=r2}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d9d, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x5, 0x5, 0x1082, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x5}, 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, 0x0, 0x40)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x101, 0xff, 0x4, 0x28, 0x1, 0x8f1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x4}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={<r9=>0xffffffffffffffff})
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0xe7f8, 0x8}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], <r12=>0x0, 0xc6, &(0x7f0000000e40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x10, 0x4, &(0x7f0000001200)=ANY=[@ANYRES16=<r14=>0x0, @ANYBLOB="fa4b98cf60f1157619b12ca9c3ff8358351196a5aaeebf3c34e106dc7588871274039c47dee7a2816e18d2f3e1ea87235a12875517a56a359409dd04d6eb9a8ab74e8bb13994592eb1470a2ad5acd6bc5f5d74fa71eb3d48d4ff555961b33febd0c73bab4f8f205d196a811872f7341eacfd7173908042624352c93002f38f713f1554d79391469ab3fb490a7ab83cde179936a30b082510b1513a053e898c63266c4f19", @ANYRES16=r12, @ANYRESHEX=r9, @ANYBLOB="cc909782b0aeb788f2a28ae28d9f19f02b4e0fa3c01975628c3a82c94bdf5a65076c9e4fd7c05fb9524a04894827131b49beaf2775fe9bd25ce3c2b2a0a1dafa0acda836b93cd1ba90a85f45db03a45e4e93d426b9f3120b52d42f190a77f90dbebff7ec84973dfb9dba0dc8e539b1dad5adec7a0a2ecc6d4ad4497980d06b7eb717f6f9c0d0e0a0218843668398733d5a"], &(0x7f00000011c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r11, @sk_msg}, 0x94)
close(r13)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r15, <r16=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r13}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x10}, 0xc)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYRES32=r10, @ANYRES16, @ANYRES8=r4, @ANYRESOCT=r14, @ANYRES32=r4, @ANYRES64=r7, @ANYRESDEC, @ANYRESOCT=r16, @ANYRES16], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0)

2m24.20640595s ago: executing program 2 (id=8397):
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f00000024c0)=""/4096, 0x1000}, 0x100)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x5, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9332}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x6}, {0x10020002, 0x0, 0x0, 0x2}]}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000221000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

2m21.264592023s ago: executing program 2 (id=8399):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (fail_nth: 9)

2m5.805294922s ago: executing program 32 (id=8399):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (fail_nth: 9)

8.304746977s ago: executing program 3 (id=8876):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

5.226330544s ago: executing program 4 (id=8878):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/56, 0x38}], 0x1}, 0x1)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x3, &(0x7f0000003ac0), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/4096, 0xff2}, {&(0x7f0000000240)=""/175, 0xa6}, {&(0x7f0000000000)=""/49, 0x26}, {&(0x7f0000000f40)=""/126, 0x7e}], 0x4}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="7a0a00ff000000007110720000000000950000000000000088f9e30d178879fd4f2f151a2d6628722f63f9d486ded440b93b5aad80746eba387634bc6e1f0cc45c5abe9f45e183af930c53408e33b80cc5fd91c67514388983f28032f7d6d8ffdf971282a5dbf7b0792629ffdeb7f8ee6bc59acc6181e90354649f786f6fb67348ed6df2100cde67f0377f5358b7f21a3f00"/156], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socket$kcm(0x2, 0x5, 0x0)

5.210343715s ago: executing program 1 (id=8879):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfc, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

5.199319286s ago: executing program 0 (id=8880):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e0e0000000095000007000076fc92335d8858aaf9309f191ea1804d428b1200c9874fffb72658e6310f42be7a02d3b052"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200001e8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

5.174096267s ago: executing program 3 (id=8881):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e0e0000000095000007000076fc92335d8858aaf9309f191ea1804d428b1200c9874fffb72658e6310f42be7a02d3b052"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200001e8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

4.971565642s ago: executing program 1 (id=8882):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x9, 0x8, 0x87d89c17e725ae18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x44001)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff000000f8bea200000000000007020000f8ffffffb703000008000020b704000002000000850000001d0000008500000005000000950400000000000080c0a1f9efcc841daabb6d0e3da907822e6e599d54aec5580594b29c633a6f93440bd797213ee2af145d176bd81081af5bf7"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), <r8=>0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r8, 0x4)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4018, r3}, 0x18)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

4.507595537s ago: executing program 0 (id=8883):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="880800"/20, @ANYRES32=0x0, @ANYBLOB="040000000300000003000000090000000000000000"], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.469971418s ago: executing program 3 (id=8884):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x13, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x2, @perf_bp={0x0}, 0x1a08, 0x100000000000002, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfe, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10d50d, 0x0, 0xfffffc45, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x10}, 0x2004fc10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x27, 0x0, 0x0, 0x7}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000100000002000013020000000600000000000000030000000c00008040000000000006000061613061615f0014fdae7d2d05c0f407"], &(0x7f0000001f40)=""/4069, 0x44, 0xfe5, 0x8}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x2400000000, 0x1ff}, 0x7603, 0x5, 0xfe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3c8}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2})
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0xc0, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000180)={'veth0_to_team\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB="182b0000", @ANYRES32=r4, @ANYBLOB="0000000001040000185900000e00000000000000000000009500000000000000180100002020702500000000002020207b1af80301000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000184a0000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000004d4b18001000000085000000420000002505800004000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x77, &(0x7f0000000500)=""/132, 0x40f00, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x10000002}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0xffff, 0x7fffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[r4, r4, 0xffffffffffffffff, r4, r4, r4, r4, r4], &(0x7f0000000900)=[{0x0, 0x3, 0xffffffff, 0x3}, {0x1, 0x3, 0xb, 0x7}, {0x1, 0x4, 0x7}, {0x5, 0x4, 0x1, 0xa}, {0x3, 0x3, 0x9, 0x3}, {0x4, 0x5, 0x2, 0x6}, {0x0, 0x5, 0x10, 0x6}, {0x1, 0x1, 0x8, 0x7}, {0x0, 0x4, 0xb, 0x4}], 0x10, 0x8}, 0x94)

4.318173393s ago: executing program 4 (id=8885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x8, 0xe, 0x4, 0x10008, r0, 0x3, '\x00', 0x0, r2, 0x1, 0x4, 0x3, 0x0, @void, @value, @value=r3}, 0x50)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vxcan1\x00', 0x6000})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300", 0x18}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r6)

4.316271803s ago: executing program 1 (id=8893):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x9, 0x8, 0x87d89c17e725ae18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x44001)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff000000f8bea200000000000007020000f8ffffffb703000008000020b704000002000000850000001d0000008500000005000000950400000000000080c0a1f9efcc841daabb6d0e3da907822e6e599d54aec5580594b29c633a6f93440bd797213ee2af145d176bd81081af5bf7"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r8, 0x4)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4018, r3}, 0x18)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

4.128167919s ago: executing program 0 (id=8886):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x8, 0xe, 0x4, 0x10008, r0, 0x3, '\x00', 0x0, r2, 0x1, 0x4, 0x3, 0x0, @void, @value, @value=r3}, 0x50)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vxcan1\x00', 0x6000})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300", 0x18}], 0x1}, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r6)

4.042350732s ago: executing program 4 (id=8887):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000), 0x8)
ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000180)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

3.887298007s ago: executing program 1 (id=8888):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688812f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.865320058s ago: executing program 0 (id=8889):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}]}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

3.809252579s ago: executing program 4 (id=8890):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

3.807747819s ago: executing program 3 (id=8891):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603", 0x21}, {&(0x7f0000000040)="5b4fd437ed3abc2ed797192c2ceedfe45c8893349e7e7b71d98571fdd3531a8fcb36a6a8de9d00d2d042c4afe3face6db7ced9e63b3a809178f5ddd2ec6bef20fd800272461e498653580c8f3acb1c9ba36bef7ec7eda5857da000bb0e36b914177f07003a673ec9b580ba056c8d2f356192a14f6d736505f6051380a2281607f602906aad3cae5275986a759bc323cf8df8ff8dcc872ba38b2f6e692a3363f20935e6b6623752b54c12dabeae5904b8c0b306abd8cd99679179860b5a2702", 0xbf}], 0x2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x106)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043920002000ef02"], 0x33fe0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

726.446347ms ago: executing program 0 (id=8892):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e0e0000000095000007000076fc92335d8858aaf9309f191ea1804d428b1200c9874fffb72658e6310f42be7a02d3b052"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200001e8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

714.823657ms ago: executing program 1 (id=8894):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/56, 0x38}], 0x1}, 0x1)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x3, &(0x7f0000003ac0), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/4096, 0xff2}, {&(0x7f0000000240)=""/175, 0xa6}, {&(0x7f0000000000)=""/49, 0x26}, {&(0x7f0000000f40)=""/126, 0x7e}], 0x4}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="7a0a00ff000000007110720000000000950000000000000088f9e30d178879fd4f2f151a2d6628722f63f9d486ded440b93b5aad80746eba387634bc6e1f0cc45c5abe9f45e183af930c53408e33b80cc5fd91c67514388983f28032f7d6d8ffdf971282a5dbf7b0792629ffdeb7f8ee6bc59acc6181e90354649f786f6fb67348ed6df2100cde67f0377f5358b7f21a3f00"/156], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socket$kcm(0x2, 0x5, 0x0)

709.975347ms ago: executing program 4 (id=8895):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="880800"/20, @ANYRES32=0x0, @ANYBLOB="040000000300000003000000090000000000000000"], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

598.309501ms ago: executing program 3 (id=8896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x8, 0xe, 0x4, 0x10008, r0, 0x3, '\x00', 0x0, r2, 0x1, 0x4, 0x3, 0x0, @void, @value, @value=r3}, 0x50)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vxcan1\x00', 0x6000})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300", 0x18}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r6)

297.20207ms ago: executing program 3 (id=8897):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x9, 0x8, 0x87d89c17e725ae18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x44001)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff000000f8bea200000000000007020000f8ffffffb703000008000020b704000002000000850000001d0000008500000005000000950400000000000080c0a1f9efcc841daabb6d0e3da907822e6e599d54aec5580594b29c633a6f93440bd797213ee2af145d176bd81081af5bf7"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r8, 0x4)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4018, r3}, 0x18)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

257.034392ms ago: executing program 4 (id=8898):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e0e0000000095000007000076fc92335d8858aaf9309f191ea1804d428b1200c9874fffb72658e6310f42be7a02d3b052"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200001e8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

551.86µs ago: executing program 1 (id=8899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x8, 0xe, 0x4, 0x10008, r0, 0x3, '\x00', 0x0, r2, 0x1, 0x4, 0x3, 0x0, @void, @value, @value=r3}, 0x50)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vxcan1\x00', 0x6000})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300", 0x18}], 0x1}, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r6)

0s ago: executing program 0 (id=8900):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x9, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x9, 0xc, 0xe}, {0x3, 0xa3e2, 0x4}]}]}, {0x0, [0x71, 0x30, 0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f00000010c0)=""/250, 0x47, 0xfa, 0x1, 0x6}, 0x1f)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x40000000d638, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x1, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

64] Bluetooth: hci3: command tx timeout
[ 1533.610974][T30509] netlink: 'syz.0.8452': attribute type 9 has an invalid length.
[ 1533.619573][T30509] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8452'.
[ 1533.804827][T30516] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8453'.
[ 1534.452761][T30481] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1534.957796][T30481] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1535.656399][T26564] Bluetooth: hci3: command tx timeout
[ 1536.637474][T30481] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1536.659650][T30481] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1536.798745][T30530] tap0: tun_chr_ioctl cmd 1074025677
[ 1536.806058][T30530] tap0: linktype set to 780
[ 1536.861110][T30481] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1536.902057][T30481] 8021q: adding VLAN 0 to HW filter on device team0
[ 1536.920824][T27211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1536.928091][T27211] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.973974][T27211] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.981354][T27211] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1537.099008][T30535] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8459'.
[ 1537.119489][T30535] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1537.329954][T30481] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1537.738064][T26564] Bluetooth: hci3: command tx timeout
[ 1537.837949][T30481] veth0_vlan: entered promiscuous mode
[ 1537.852850][T30549] netlink: 'syz.3.8460': attribute type 10 has an invalid length.
[ 1537.889645][T30481] veth1_vlan: entered promiscuous mode
[ 1537.960362][T30481] veth0_macvtap: entered promiscuous mode
[ 1537.985318][T30481] veth1_macvtap: entered promiscuous mode
[ 1538.035929][T30481] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1538.067617][T30481] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1538.093748][T30481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1538.107279][T30481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1538.119172][T30481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1538.129755][T30481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1538.629314][T12109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1540.190518][T27211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1540.215440][T27211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1540.293684][T30555] netlink: 'syz.1.8461': attribute type 9 has an invalid length.
[ 1540.294494][T30561] FAULT_INJECTION: forcing a failure.
[ 1540.294494][T30561] name failslab, interval 1, probability 0, space 0, times 0
[ 1540.314592][T30559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8462'.
[ 1540.337331][T30561] CPU: 0 PID: 30561 Comm: syz.3.8463 Not tainted syzkaller #0
[ 1540.337612][T30555] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8461'.
[ 1540.345602][T30561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1540.366464][T30561] Call Trace:
[ 1540.366842][T27240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1540.369755][T30561]  <TASK>
[ 1540.369773][T30561]  dump_stack_lvl+0x18c/0x250
[ 1540.369812][T30561]  ? show_regs_print_info+0x20/0x20
[ 1540.369838][T30561]  ? load_image+0x420/0x420
[ 1540.369876][T30561]  ? __might_sleep+0xe0/0xe0
[ 1540.369901][T30561]  ? __lock_acquire+0x7d40/0x7d40
[ 1540.369945][T30561]  should_fail_ex+0x39d/0x4d0
[ 1540.369992][T30561]  should_failslab+0x9/0x20
[ 1540.370018][T30561]  slab_pre_alloc_hook+0x59/0x310
[ 1540.370046][T30561]  ? __lock_acquire+0x7d40/0x7d40
[ 1540.370083][T30561]  kmem_cache_alloc_node+0x60/0x320
[ 1540.370110][T30561]  ? __alloc_skb+0x103/0x2c0
[ 1540.370150][T30561]  __alloc_skb+0x103/0x2c0
[ 1540.370189][T30561]  netlink_sendmsg+0x66a/0xbf0
[ 1540.370214][T30561]  ? perf_trace_lock+0x304/0x3b0
[ 1540.370266][T30561]  ? netlink_getsockopt+0x590/0x590
[ 1540.370300][T30561]  ? aa_sock_msg_perm+0x94/0x150
[ 1540.370334][T30561]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1540.370358][T30561]  ? security_socket_sendmsg+0x80/0xa0
[ 1540.370379][T30561]  ? netlink_getsockopt+0x590/0x590
[ 1540.370412][T30561]  ____sys_sendmsg+0x5ba/0x960
[ 1540.370461][T30561]  ? __asan_memset+0x22/0x40
[ 1540.370486][T30561]  ? __sys_sendmsg_sock+0x30/0x30
[ 1540.370505][T30561]  ? __import_iovec+0x5f2/0x850
[ 1540.370564][T30561]  ? import_iovec+0x73/0xa0
[ 1540.370600][T30561]  ___sys_sendmsg+0x2a6/0x360
[ 1540.370646][T30561]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1540.403334][T27240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1540.407711][T30561]  ? __lock_acquire+0x7d40/0x7d40
[ 1540.407818][T30561]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1540.407858][T30561]  ? __x64_sys_sendmsg+0x80/0x80
[ 1540.439258][T30561]  ? lockdep_hardirqs_on+0x98/0x150
[ 1540.439314][T30561]  do_syscall_64+0x55/0xb0
[ 1540.439337][T30561]  ? clear_bhb_loop+0x40/0x90
[ 1540.439355][T30561]  ? clear_bhb_loop+0x40/0x90
[ 1540.439381][T30561]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1540.439408][T30561] RIP: 0033:0x7f063db9ce59
[ 1540.439433][T30561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1540.439451][T30561] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1540.439478][T30561] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1540.612377][T30561] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1540.621985][T30561] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1540.631049][T30561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1540.639960][T30561] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1540.649374][T30561]  </TASK>
[ 1541.044688][T30567] netlink: 'syz.4.8444': attribute type 10 has an invalid length.
[ 1541.158596][T30567] 8021q: adding VLAN 0 to HW filter on device team0
[ 1541.197347][T30567] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1541.228342][T30570] netlink: 'syz.4.8444': attribute type 10 has an invalid length.
[ 1541.248748][T30570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8444'.
[ 1541.277967][T30570] team0: entered promiscuous mode
[ 1541.284166][T30570] team_slave_0: entered promiscuous mode
[ 1541.300812][T30570] team_slave_1: entered promiscuous mode
[ 1541.307211][T30570] team0: entered allmulticast mode
[ 1541.314399][T30570] team_slave_0: entered allmulticast mode
[ 1541.324571][T30570] team_slave_1: entered allmulticast mode
[ 1544.253651][T30570] bond0: (slave team0): Releasing backup interface
[ 1544.341500][T30570] bridge0: port 3(team0) entered blocking state
[ 1544.349753][T30570] bridge0: port 3(team0) entered disabled state
[ 1544.597584][T30579] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8468'.
[ 1544.625432][T30579] team_slave_0: left promiscuous mode
[ 1544.637930][T30579] team_slave_0: left allmulticast mode
[ 1546.222160][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.230920][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1547.592820][T30579] team0: Port device team_slave_0 removed
[ 1547.614129][T30579] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1547.641516][T30583] netlink: 'syz.3.8471': attribute type 10 has an invalid length.
[ 1547.663515][T30583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8471'.
[ 1547.701025][T30583] hsr0: entered promiscuous mode
[ 1547.715137][T30583] bridge0: port 3(hsr0) entered blocking state
[ 1547.724614][T30583] bridge0: port 3(hsr0) entered disabled state
[ 1547.732261][T30583] hsr0: entered allmulticast mode
[ 1547.757497][T30583] hsr_slave_0: entered allmulticast mode
[ 1547.769771][T30583] hsr_slave_1: entered allmulticast mode
[ 1547.787538][T30583] bridge0: port 3(hsr0) entered blocking state
[ 1547.794073][T30583] bridge0: port 3(hsr0) entered forwarding state
[ 1547.815134][T30582] netlink: 'syz.0.8470': attribute type 10 has an invalid length.
[ 1547.997926][T30597] netlink: 'syz.4.8474': attribute type 9 has an invalid length.
[ 1548.020543][T30599] netlink: 'syz.3.8476': attribute type 10 has an invalid length.
[ 1548.038273][T30597] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8474'.
[ 1548.053638][T30601] FAULT_INJECTION: forcing a failure.
[ 1548.053638][T30601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1548.076352][T30601] CPU: 1 PID: 30601 Comm: syz.1.8477 Not tainted syzkaller #0
[ 1548.084423][T30601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1548.095035][T30601] Call Trace:
[ 1548.098439][T30601]  <TASK>
[ 1548.101622][T30601]  dump_stack_lvl+0x18c/0x250
[ 1548.106441][T30601]  ? show_regs_print_info+0x20/0x20
[ 1548.111680][T30601]  ? load_image+0x420/0x420
[ 1548.116226][T30601]  ? __might_fault+0xaa/0x120
[ 1548.120966][T30601]  ? __lock_acquire+0x7d40/0x7d40
[ 1548.126158][T30601]  should_fail_ex+0x39d/0x4d0
[ 1548.130874][T30601]  _copy_from_user+0x2f/0xe0
[ 1548.135481][T30601]  ___sys_sendmsg+0x1c7/0x360
[ 1548.140200][T30601]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1548.145189][T30601]  ? __lock_acquire+0x7d40/0x7d40
[ 1548.150453][T30601]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1548.155483][T30601]  ? __x64_sys_sendmsg+0x80/0x80
[ 1548.161246][T30601]  ? lockdep_hardirqs_on+0x98/0x150
[ 1548.166713][T30601]  do_syscall_64+0x55/0xb0
[ 1548.171136][T30601]  ? clear_bhb_loop+0x40/0x90
[ 1548.177034][T30601]  ? clear_bhb_loop+0x40/0x90
[ 1548.181905][T30601]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1548.187927][T30601] RIP: 0033:0x7f9bb4d9ce59
[ 1548.192571][T30601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1548.214679][T30601] RSP: 002b:00007f9bb2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1548.223470][T30601] RAX: ffffffffffffffda RBX: 00007f9bb5015fa0 RCX: 00007f9bb4d9ce59
[ 1548.232181][T30601] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003
[ 1548.241227][T30601] RBP: 00007f9bb2ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1548.249891][T30601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1548.258486][T30601] R13: 00007f9bb5016038 R14: 00007f9bb5015fa0 R15: 00007fffa05a3a78
[ 1548.266733][T30601]  </TASK>
[ 1548.289299][T30599] bridge0: port 2(team0) entered disabled state
[ 1548.324475][T30599] team0: left allmulticast mode
[ 1548.339031][T30599] team_slave_1: left allmulticast mode
[ 1548.350446][T30599] geneve1: left allmulticast mode
[ 1548.370260][T30599] team0: left promiscuous mode
[ 1548.384451][T30599] team_slave_1: left promiscuous mode
[ 1548.398742][T30599] geneve1: left promiscuous mode
[ 1548.408310][T30599] bridge0: port 2(team0) entered disabled state
[ 1548.470836][T30599] 8021q: adding VLAN 0 to HW filter on device team0
[ 1548.503450][T30599] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1548.525485][T30603] netlink: 'syz.3.8476': attribute type 10 has an invalid length.
[ 1548.547708][T30603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8476'.
[ 1548.561109][T30603] team0: entered promiscuous mode
[ 1548.571232][T30603] team_slave_1: entered promiscuous mode
[ 1548.577752][T30603] geneve1: entered promiscuous mode
[ 1548.587918][T30603] team0: entered allmulticast mode
[ 1548.595325][T30603] team_slave_1: entered allmulticast mode
[ 1548.606473][T30603] geneve1: entered allmulticast mode
[ 1548.613730][T30603] bond0: (slave team0): Releasing backup interface
[ 1548.628094][T30603] bridge0: port 2(team0) entered blocking state
[ 1548.634656][T30603] bridge0: port 2(team0) entered disabled state
[ 1548.946099][T30615] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8482'.
[ 1549.377656][T30625] netlink: 'syz.3.8483': attribute type 10 has an invalid length.
[ 1550.264795][T30642] netlink: 'syz.3.8491': attribute type 10 has an invalid length.
[ 1550.296621][T30642] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8491'.
[ 1550.574905][T30647] netlink: 'syz.4.8492': attribute type 9 has an invalid length.
[ 1550.583408][T30647] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8492'.
[ 1552.876585][T30656] netlink: 'syz.3.8495': attribute type 10 has an invalid length.
[ 1552.898226][T30656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8495'.
[ 1552.912859][T30656] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1552.930754][T30652] netlink: 'syz.0.8493': attribute type 10 has an invalid length.
[ 1552.942989][T30652] team0: left promiscuous mode
[ 1552.949982][T30652] team_slave_1: left promiscuous mode
[ 1552.992004][T30652] geneve1: left promiscuous mode
[ 1553.010124][T30652] team0: left allmulticast mode
[ 1553.028963][T30652] team_slave_1: left allmulticast mode
[ 1553.035288][T30652] geneve1: left allmulticast mode
[ 1553.310442][T30652] 8021q: adding VLAN 0 to HW filter on device team0
[ 1553.398772][T30669] FAULT_INJECTION: forcing a failure.
[ 1553.398772][T30669] name failslab, interval 1, probability 0, space 0, times 0
[ 1553.427201][T30669] CPU: 1 PID: 30669 Comm: syz.3.8498 Not tainted syzkaller #0
[ 1553.434771][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1553.436517][T30652] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1553.445115][T30669] Call Trace:
[ 1553.445171][T30669]  <TASK>
[ 1553.445187][T30669]  dump_stack_lvl+0x18c/0x250
[ 1553.445225][T30669]  ? trace_event_raw_event_lock+0x250/0x250
[ 1553.445268][T30669]  ? show_regs_print_info+0x20/0x20
[ 1553.445298][T30669]  ? load_image+0x420/0x420
[ 1553.445369][T30669]  should_fail_ex+0x39d/0x4d0
[ 1553.445418][T30669]  should_failslab+0x9/0x20
[ 1553.489870][T30669]  slab_pre_alloc_hook+0x59/0x310
[ 1553.494934][T30669]  kmem_cache_alloc+0x5a/0x2d0
[ 1553.499723][T30669]  ? __nf_conntrack_alloc+0x99/0x380
[ 1553.505355][T30669]  __nf_conntrack_alloc+0x99/0x380
[ 1553.510682][T30669]  init_conntrack+0x177/0xf10
[ 1553.515392][T30669]  ? early_drop+0x7f0/0x7f0
[ 1553.516394][T30661] netlink: 'syz.0.8493': attribute type 10 has an invalid length.
[ 1553.520017][T30669]  ? nf_conntrack_find_get+0x650/0x650
[ 1553.520055][T30669]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1553.520083][T30669]  ? __siphash_unaligned+0x22e/0x3a0
[ 1553.520151][T30669]  nf_conntrack_in+0xc06/0x15c0
[ 1553.528202][T30661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8493'.
[ 1553.533466][T30669]  ? nf_ct_pernet+0x270/0x270
[ 1553.541242][T30661] team0: entered promiscuous mode
[ 1553.544182][T30669]  ? ipt_do_table+0x2c1/0x15e0
[ 1553.549912][T30661] team_slave_1: entered promiscuous mode
[ 1553.558138][T30669]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[ 1553.558175][T30669]  ? ip_select_ttl+0xb1/0x330
[ 1553.558204][T30669]  ? ipv4_conntrack_local+0x123/0x200
[ 1553.558236][T30669]  ? ipv4_conntrack_in+0x20/0x20
[ 1553.564491][T30661] geneve1: entered promiscuous mode
[ 1553.568158][T30669]  nf_hook_slow+0xbd/0x200
[ 1553.568305][T30669]  ? nf_hook+0x390/0x390
[ 1553.568334][T30669]  nf_hook+0x228/0x390
[ 1553.568371][T30669]  ? nf_hook+0xa2/0x390
[ 1553.568397][T30669]  ? __ip_local_out+0x5f0/0x5f0
[ 1553.568433][T30669]  ? nf_hook+0x390/0x390
[ 1553.568479][T30669]  ? ip_fast_csum+0x1ee/0x2b0
[ 1553.568515][T30669]  __ip_local_out+0x4db/0x5f0
[ 1553.568538][T30669]  ? nf_hook+0x390/0x390
[ 1553.568574][T30669]  ip_send_skb+0x4c/0x1d0
[ 1553.568609][T30669]  raw_sendmsg+0x163e/0x1c00
[ 1553.568679][T30669]  ? compat_raw_ioctl+0x70/0x70
[ 1553.576132][T30661] team0: entered allmulticast mode
[ 1553.579160][T30669]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1553.579218][T30669]  ? sock_rps_record_flow+0x19/0x3f0
[ 1553.579252][T30669]  ? inet_sendmsg+0x7c/0x2f0
[ 1553.579276][T30669]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1553.579300][T30669]  ? security_socket_sendmsg+0x80/0xa0
[ 1553.579322][T30669]  ? inet_send_prepare+0x260/0x260
[ 1553.579359][T30669]  ____sys_sendmsg+0x5ba/0x960
[ 1553.579388][T30669]  ? __lock_acquire+0x7d40/0x7d40
[ 1553.579430][T30669]  ? __asan_memset+0x22/0x40
[ 1553.579459][T30669]  ? __sys_sendmsg_sock+0x30/0x30
[ 1553.579481][T30669]  ? __import_iovec+0x3fa/0x850
[ 1553.579531][T30669]  ? import_iovec+0x73/0xa0
[ 1553.579570][T30669]  ___sys_sendmsg+0x2a6/0x360
[ 1553.579616][T30669]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1553.579712][T30669]  ? __lock_acquire+0x7d40/0x7d40
[ 1553.579819][T30669]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1553.579854][T30669]  ? __x64_sys_sendmsg+0x80/0x80
[ 1553.585709][T30661] team_slave_1: entered allmulticast mode
[ 1553.590047][T30669]  ? lockdep_hardirqs_on+0x98/0x150
[ 1553.590099][T30669]  do_syscall_64+0x55/0xb0
[ 1553.600117][T30661] geneve1: entered allmulticast mode
[ 1553.600883][T30669]  ? clear_bhb_loop+0x40/0x90
[ 1553.600912][T30669]  ? clear_bhb_loop+0x40/0x90
[ 1553.600939][T30669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1553.794106][T30669] RIP: 0033:0x7f063db9ce59
[ 1553.798553][T30669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1553.818530][T30669] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1553.827394][T30669] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1553.835635][T30669] RDX: 2000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1553.844044][T30669] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1553.852188][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1553.860352][T30669] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1553.868357][T30669]  </TASK>
[ 1553.881491][T30661] bond0: (slave team0): Releasing backup interface
[ 1553.911392][T30661] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1553.937264][T30664] netlink: 'syz.1.8497': attribute type 10 has an invalid length.
[ 1553.946302][T30667] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8496'.
[ 1553.955412][T30667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1553.963601][T30667] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1553.981053][T30667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1553.990617][T30667] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1557.059958][T30676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8499'.
[ 1557.102350][T30676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1557.664302][T30682] netlink: 'syz.3.8502': attribute type 10 has an invalid length.
[ 1557.754051][T30682] team0: Device ipvlan1 failed to register rx_handler
[ 1557.872964][T30696] netlink: 'syz.0.8508': attribute type 10 has an invalid length.
[ 1557.926547][T30701] netlink: 'syz.4.8509': attribute type 10 has an invalid length.
[ 1557.935507][T30701] team0: left allmulticast mode
[ 1557.943803][T30701] team_slave_1: left allmulticast mode
[ 1557.950687][T30701] team0: left promiscuous mode
[ 1557.955889][T30701] team_slave_1: left promiscuous mode
[ 1557.963805][T30701] bridge0: port 3(team0) entered disabled state
[ 1557.998341][T30701] 8021q: adding VLAN 0 to HW filter on device team0
[ 1558.041557][T30701] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1558.067152][T30704] netlink: 'syz.4.8509': attribute type 10 has an invalid length.
[ 1558.075073][T30704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8509'.
[ 1558.087828][T30704] team0: entered promiscuous mode
[ 1558.092967][T30704] team_slave_1: entered promiscuous mode
[ 1558.099606][T30704] team0: entered allmulticast mode
[ 1558.105220][T30704] team_slave_1: entered allmulticast mode
[ 1558.112783][T30704] bond0: (slave team0): Releasing backup interface
[ 1558.129447][T30704] bridge0: port 3(team0) entered blocking state
[ 1558.137462][T30704] bridge0: port 3(team0) entered disabled state
[ 1558.163603][T30709] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8512'.
[ 1559.066063][T30724] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8517'.
[ 1559.190441][T30729] netlink: 'syz.1.8519': attribute type 10 has an invalid length.
[ 1559.349690][T30734] netlink: 'syz.0.8520': attribute type 2 has an invalid length.
[ 1559.645130][T30738] netlink: 'syz.1.8522': attribute type 10 has an invalid length.
[ 1559.696959][T30738] team0: left promiscuous mode
[ 1559.707473][T30738] team_slave_1: left promiscuous mode
[ 1559.724747][T30738] geneve1: left promiscuous mode
[ 1559.734155][T30738] team0: left allmulticast mode
[ 1559.740157][T30738] team_slave_1: left allmulticast mode
[ 1559.747515][T30738] geneve1: left allmulticast mode
[ 1559.821070][T30744] netlink: 'syz.0.8524': attribute type 29 has an invalid length.
[ 1559.845056][T30738] 8021q: adding VLAN 0 to HW filter on device team0
[ 1559.890914][T30738] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1559.907420][T30741] netlink: 'syz.1.8522': attribute type 10 has an invalid length.
[ 1559.915595][T30741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8522'.
[ 1559.926797][T30741] team0: entered promiscuous mode
[ 1559.932331][T30741] team_slave_1: entered promiscuous mode
[ 1559.954669][T30741] geneve1: entered promiscuous mode
[ 1559.966756][T30741] team0: entered allmulticast mode
[ 1559.972567][T30741] team_slave_1: entered allmulticast mode
[ 1559.980550][T30741] geneve1: entered allmulticast mode
[ 1559.990466][T30741] bond0: (slave team0): Releasing backup interface
[ 1560.025956][T30741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1560.057094][T30751] FAULT_INJECTION: forcing a failure.
[ 1560.057094][T30751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1560.073547][T30751] CPU: 1 PID: 30751 Comm: syz.4.8525 Not tainted syzkaller #0
[ 1560.074626][T30744] netlink: 'syz.0.8524': attribute type 29 has an invalid length.
[ 1560.081273][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1560.081294][T30751] Call Trace:
[ 1560.081305][T30751]  <TASK>
[ 1560.081315][T30751]  dump_stack_lvl+0x18c/0x250
[ 1560.081350][T30751]  ? show_regs_print_info+0x20/0x20
[ 1560.081373][T30751]  ? load_image+0x420/0x420
[ 1560.081394][T30751]  ? __might_fault+0xaa/0x120
[ 1560.081415][T30751]  ? __lock_acquire+0x7d40/0x7d40
[ 1560.081441][T30751]  should_fail_ex+0x39d/0x4d0
[ 1560.081473][T30751]  _copy_from_iter+0x1d9/0x12e0
[ 1560.081498][T30751]  ? __virt_addr_valid+0x18c/0x540
[ 1560.081521][T30751]  ? __lock_acquire+0x7d40/0x7d40
[ 1560.081545][T30751]  ? __alloc_skb+0x161/0x2c0
[ 1560.155837][T30751]  ? copyout_mc+0x70/0x70
[ 1560.160222][T30751]  ? __virt_addr_valid+0x18c/0x540
[ 1560.166113][T30751]  ? __virt_addr_valid+0x18c/0x540
[ 1560.171547][T30751]  ? __virt_addr_valid+0x469/0x540
[ 1560.177328][T30751]  ? __check_object_size+0x506/0xa20
[ 1560.182851][T30751]  netlink_sendmsg+0x76b/0xbf0
[ 1560.188725][T30751]  ? lockdep_hardirqs_on+0x98/0x150
[ 1560.194876][T30751]  ? netlink_getsockopt+0x590/0x590
[ 1560.200356][T30751]  ? netlink_getsockopt+0x590/0x590
[ 1560.206401][T30751]  ____sys_sendmsg+0x5ba/0x960
[ 1560.211692][T30751]  ? __asan_memset+0x22/0x40
[ 1560.221898][T30751]  ? __sys_sendmsg_sock+0x30/0x30
[ 1560.228205][T30751]  ? __import_iovec+0x5f2/0x850
[ 1560.234216][T30751]  ? import_iovec+0x73/0xa0
[ 1560.238953][T30751]  ___sys_sendmsg+0x2a6/0x360
[ 1560.244082][T30751]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1560.248942][T30751]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1560.254018][T30751]  ? __x64_sys_sendmsg+0x80/0x80
[ 1560.258982][T30751]  ? lockdep_hardirqs_on+0x98/0x150
[ 1560.264245][T30751]  do_syscall_64+0x55/0xb0
[ 1560.269278][T30751]  ? clear_bhb_loop+0x40/0x90
[ 1560.274277][T30751]  ? clear_bhb_loop+0x40/0x90
[ 1560.279192][T30751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1560.285390][T30751] RIP: 0033:0x7fca2d59ce59
[ 1560.290093][T30751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1560.310504][T30751] RSP: 002b:00007fca2b7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1560.318958][T30751] RAX: ffffffffffffffda RBX: 00007fca2d816180 RCX: 00007fca2d59ce59
[ 1560.327131][T30751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1560.335936][T30751] RBP: 00007fca2b7b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1560.344647][T30751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1560.353552][T30751] R13: 00007fca2d816218 R14: 00007fca2d816180 R15: 00007ffcb43cdf88
[ 1560.362119][T30751]  </TASK>
[ 1560.383422][T30747] netlink: 'syz.0.8524': attribute type 29 has an invalid length.
[ 1560.514103][T30756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8526'.
[ 1560.827886][T30760] netlink: 'syz.3.8528': attribute type 10 has an invalid length.
[ 1560.846448][T30760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8528'.
[ 1560.858401][T30760] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1561.129274][T30764] FAULT_INJECTION: forcing a failure.
[ 1561.129274][T30764] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.166977][T30764] CPU: 0 PID: 30764 Comm: syz.3.8531 Not tainted syzkaller #0
[ 1561.174633][T30764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1561.184742][T30764] Call Trace:
[ 1561.188089][T30764]  <TASK>
[ 1561.191089][T30764]  dump_stack_lvl+0x18c/0x250
[ 1561.195872][T30764]  ? show_regs_print_info+0x20/0x20
[ 1561.201573][T30764]  ? load_image+0x420/0x420
[ 1561.207146][T30764]  ? verify_lock_unused+0x140/0x140
[ 1561.212527][T30764]  should_fail_ex+0x39d/0x4d0
[ 1561.217302][T30764]  should_failslab+0x9/0x20
[ 1561.222158][T30764]  slab_pre_alloc_hook+0x59/0x310
[ 1561.227269][T30764]  kmem_cache_alloc+0x5a/0x2d0
[ 1561.232104][T30764]  ? skb_clone+0x1eb/0x370
[ 1561.236696][T30764]  skb_clone+0x1eb/0x370
[ 1561.241024][T30764]  __netlink_deliver_tap+0x41c/0x830
[ 1561.246607][T30764]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1561.252247][T30764]  netlink_deliver_tap+0x19c/0x1b0
[ 1561.257609][T30764]  netlink_sendskb+0x68/0x130
[ 1561.262344][T30764]  nlmsg_notify+0x12e/0x1a0
[ 1561.266908][T30764]  __inet_insert_ifa+0x9a8/0xbd0
[ 1561.271998][T30764]  ? inet_rcu_free_ifa+0xc0/0xc0
[ 1561.277000][T30764]  inet_rtm_newaddr+0xc1d/0x1ae0
[ 1561.282174][T30764]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[ 1561.288304][T30764]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1561.293464][T30764]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1561.298618][T30764]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[ 1561.304488][T30764]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1561.309840][T30764]  ? rtnetlink_bind+0x80/0x80
[ 1561.314570][T30764]  ? trace_call_bpf+0xc3/0x6c0
[ 1561.319664][T30764]  ? trace_call_bpf+0xc3/0x6c0
[ 1561.324569][T30764]  ? __lock_acquire+0x7d40/0x7d40
[ 1561.329931][T30764]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1561.335365][T30764]  ? trace_call_bpf+0xc3/0x6c0
[ 1561.340179][T30764]  ? trace_call_bpf+0xc3/0x6c0
[ 1561.345086][T30764]  ? trace_call_bpf+0x5e9/0x6c0
[ 1561.349989][T30764]  ? __dev_queue_xmit+0x265/0x3660
[ 1561.355596][T30764]  ? trace_call_bpf+0xc3/0x6c0
[ 1561.360668][T30764]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 1561.365921][T30764]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 1561.372136][T30764]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1561.378078][T30764]  ? perf_trace_lock+0x304/0x3b0
[ 1561.383693][T30764]  netlink_rcv_skb+0x241/0x4d0
[ 1561.388514][T30764]  ? rtnetlink_bind+0x80/0x80
[ 1561.393332][T30764]  ? netlink_ack+0x1180/0x1180
[ 1561.398152][T30764]  ? __lock_acquire+0x7d40/0x7d40
[ 1561.403323][T30764]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1561.408658][T30764]  netlink_unicast+0x751/0x8d0
[ 1561.414766][T30764]  netlink_sendmsg+0x8d0/0xbf0
[ 1561.419684][T30764]  ? perf_trace_lock+0x304/0x3b0
[ 1561.424776][T30764]  ? netlink_getsockopt+0x590/0x590
[ 1561.430202][T30764]  ? aa_sock_msg_perm+0x94/0x150
[ 1561.435382][T30764]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1561.441597][T30764]  ? security_socket_sendmsg+0x80/0xa0
[ 1561.447108][T30764]  ? netlink_getsockopt+0x590/0x590
[ 1561.452442][T30764]  ____sys_sendmsg+0x5ba/0x960
[ 1561.457270][T30764]  ? __asan_memset+0x22/0x40
[ 1561.462168][T30764]  ? __sys_sendmsg_sock+0x30/0x30
[ 1561.467232][T30764]  ? __import_iovec+0x5f2/0x850
[ 1561.472143][T30764]  ? import_iovec+0x73/0xa0
[ 1561.476700][T30764]  ___sys_sendmsg+0x2a6/0x360
[ 1561.481453][T30764]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1561.486288][T30764]  ? __lock_acquire+0x7d40/0x7d40
[ 1561.491478][T30764]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1561.496396][T30764]  ? __x64_sys_sendmsg+0x80/0x80
[ 1561.501504][T30764]  ? lockdep_hardirqs_on+0x98/0x150
[ 1561.506861][T30764]  do_syscall_64+0x55/0xb0
[ 1561.511322][T30764]  ? clear_bhb_loop+0x40/0x90
[ 1561.516038][T30764]  ? clear_bhb_loop+0x40/0x90
[ 1561.520935][T30764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1561.526988][T30764] RIP: 0033:0x7f063db9ce59
[ 1561.531441][T30764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1561.551962][T30764] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1561.560612][T30764] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1561.568896][T30764] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1561.577085][T30764] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1561.585139][T30764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1561.593147][T30764] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1561.601968][T30764]  </TASK>
[ 1561.895953][T30778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8534'.
[ 1561.953880][T30778] bridge0: port 3(team0) entered blocking state
[ 1561.966222][T30778] bridge0: port 3(team0) entered forwarding state
[ 1562.005515][T30778] 8021q: adding VLAN 0 to HW filter on device team0
[ 1562.233911][T30787] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8536'.
[ 1562.578470][T30795] team0: left allmulticast mode
[ 1562.589030][T30795] team_slave_1: left allmulticast mode
[ 1562.597608][T30795] geneve1: left allmulticast mode
[ 1562.604723][T30795] team0: left promiscuous mode
[ 1562.611490][T30795] team_slave_1: left promiscuous mode
[ 1562.620426][T30795] geneve1: left promiscuous mode
[ 1562.629476][T30795] bridge0: port 2(team0) entered disabled state
[ 1562.654488][T30795] 8021q: adding VLAN 0 to HW filter on device team0
[ 1562.674369][T30795] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1562.687257][T30797] team0: left promiscuous mode
[ 1562.716341][T30797] team_slave_1: left promiscuous mode
[ 1562.722659][T30797] geneve1: left promiscuous mode
[ 1562.732879][T30797] team0: left allmulticast mode
[ 1562.742980][T30797] team_slave_1: left allmulticast mode
[ 1562.748899][T30797] geneve1: left allmulticast mode
[ 1562.756696][T30797] 8021q: adding VLAN 0 to HW filter on device team0
[ 1562.767482][T30797] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1562.776622][T30798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8538'.
[ 1562.786517][T30798] team0: entered promiscuous mode
[ 1562.801943][T30798] team_slave_1: entered promiscuous mode
[ 1562.810195][T30798] geneve1: entered promiscuous mode
[ 1562.816239][T30798] team0: entered allmulticast mode
[ 1562.822659][T30798] team_slave_1: entered allmulticast mode
[ 1562.830298][T30798] geneve1: entered allmulticast mode
[ 1562.839093][T30798] bond0: (slave team0): Releasing backup interface
[ 1562.852299][T30798] bridge0: port 2(team0) entered blocking state
[ 1562.862740][T30798] bridge0: port 2(team0) entered disabled state
[ 1562.878676][T30800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8539'.
[ 1562.893249][T30800] team0: entered promiscuous mode
[ 1562.906427][T30800] team_slave_1: entered promiscuous mode
[ 1562.912640][T30800] geneve1: entered promiscuous mode
[ 1562.929613][T30800] team0: entered allmulticast mode
[ 1562.949014][T30800] team_slave_1: entered allmulticast mode
[ 1562.966383][T30800] geneve1: entered allmulticast mode
[ 1562.987209][T30800] bond0: (slave team0): Releasing backup interface
[ 1563.019388][T30800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1563.125236][T30804] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8541'.
[ 1563.664388][T30813] validate_nla: 8 callbacks suppressed
[ 1563.664439][T30813] netlink: 'syz.3.8544': attribute type 10 has an invalid length.
[ 1563.822993][T30827] netlink: 'syz.3.8550': attribute type 29 has an invalid length.
[ 1563.830047][T30824] netlink: 'syz.1.8549': attribute type 9 has an invalid length.
[ 1563.840802][T30824] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8549'.
[ 1563.851979][T30827] netlink: 'syz.3.8550': attribute type 29 has an invalid length.
[ 1564.015714][T30827] netlink: 'syz.3.8550': attribute type 29 has an invalid length.
[ 1564.033138][T30829] netlink: 'syz.3.8550': attribute type 29 has an invalid length.
[ 1564.047527][T30827] netlink: 'syz.3.8550': attribute type 29 has an invalid length.
[ 1564.141372][T30831] netlink: 'syz.4.8551': attribute type 10 has an invalid length.
[ 1564.182999][T30831] bridge0: port 3(team0) entered disabled state
[ 1564.205325][T30831] team0: left allmulticast mode
[ 1564.213480][T30831] team_slave_1: left allmulticast mode
[ 1564.221795][T30831] team0: left promiscuous mode
[ 1564.228650][T30831] team_slave_1: left promiscuous mode
[ 1564.237382][T30831] bridge0: port 3(team0) entered disabled state
[ 1564.289439][T30831] 8021q: adding VLAN 0 to HW filter on device team0
[ 1564.319742][T30831] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1564.346548][T30832] netlink: 'syz.4.8551': attribute type 10 has an invalid length.
[ 1564.364761][T30832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8551'.
[ 1564.375882][T30832] team0: entered promiscuous mode
[ 1564.381580][T30832] team_slave_1: entered promiscuous mode
[ 1564.391054][T30832] team0: entered allmulticast mode
[ 1564.397548][T30832] team_slave_1: entered allmulticast mode
[ 1564.440921][T30832] bond0: (slave team0): Releasing backup interface
[ 1564.455506][T30832] bridge0: port 3(team0) entered blocking state
[ 1564.466523][T30832] bridge0: port 3(team0) entered disabled state
[ 1564.717073][T30849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8556'.
[ 1564.891674][T30853] netlink: 'syz.1.8559': attribute type 10 has an invalid length.
[ 1565.564769][T30872] team0: left allmulticast mode
[ 1565.575292][T30872] team_slave_1: left allmulticast mode
[ 1565.585763][T30872] geneve1: left allmulticast mode
[ 1565.594001][T30872] team0: left promiscuous mode
[ 1565.602070][T30872] team_slave_1: left promiscuous mode
[ 1565.612308][T30872] geneve1: left promiscuous mode
[ 1565.622059][T30872] bridge0: port 2(team0) entered disabled state
[ 1565.769525][T30872] 8021q: adding VLAN 0 to HW filter on device team0
[ 1565.799984][T30872] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1565.809941][T30875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8564'.
[ 1565.826740][T30875] team0: entered promiscuous mode
[ 1565.836384][T30875] team_slave_1: entered promiscuous mode
[ 1565.852090][T30875] geneve1: entered promiscuous mode
[ 1565.870300][T30875] team0: entered allmulticast mode
[ 1565.875502][T30875] team_slave_1: entered allmulticast mode
[ 1565.910510][T30875] geneve1: entered allmulticast mode
[ 1565.929094][T30875] bond0: (slave team0): Releasing backup interface
[ 1565.957232][T30875] bridge0: port 2(team0) entered blocking state
[ 1565.964091][T30875] bridge0: port 2(team0) entered disabled state
[ 1566.124716][T30886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.181937][T30886] bridge_slave_1: left allmulticast mode
[ 1566.189811][T30886] bridge_slave_1: left promiscuous mode
[ 1566.200225][T30886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.280809][T30897] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8572'.
[ 1566.313784][T30886] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1566.429853][T30901] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8573'.
[ 1566.629733][T30907] FAULT_INJECTION: forcing a failure.
[ 1566.629733][T30907] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1566.655130][T30907] CPU: 0 PID: 30907 Comm: syz.0.8576 Not tainted syzkaller #0
[ 1566.662841][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1566.673618][T30907] Call Trace:
[ 1566.677511][T30907]  <TASK>
[ 1566.680922][T30907]  dump_stack_lvl+0x18c/0x250
[ 1566.685890][T30907]  ? show_regs_print_info+0x20/0x20
[ 1566.691670][T30907]  ? load_image+0x420/0x420
[ 1566.696693][T30907]  ? __might_fault+0xaa/0x120
[ 1566.701589][T30907]  ? __lock_acquire+0x7d40/0x7d40
[ 1566.706672][T30907]  ? perf_trace_lock+0xfc/0x3b0
[ 1566.711842][T30907]  should_fail_ex+0x39d/0x4d0
[ 1566.717025][T30907]  _copy_from_user+0x2f/0xe0
[ 1566.722243][T30907]  ___sys_sendmsg+0x1c7/0x360
[ 1566.726936][T30907]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1566.731748][T30907]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1566.736716][T30907]  ? __x64_sys_sendmsg+0x80/0x80
[ 1566.742201][T30907]  ? lockdep_hardirqs_on+0x98/0x150
[ 1566.747444][T30907]  do_syscall_64+0x55/0xb0
[ 1566.751984][T30907]  ? clear_bhb_loop+0x40/0x90
[ 1566.756671][T30907]  ? clear_bhb_loop+0x40/0x90
[ 1566.761439][T30907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1566.767427][T30907] RIP: 0033:0x7f909699ce59
[ 1566.771936][T30907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1566.791670][T30907] RSP: 002b:00007f90978b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1566.800275][T30907] RAX: ffffffffffffffda RBX: 00007f9096c15fa0 RCX: 00007f909699ce59
[ 1566.808279][T30907] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[ 1566.816351][T30907] RBP: 00007f90978b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1566.824448][T30907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1566.832602][T30907] R13: 00007f9096c16038 R14: 00007f9096c15fa0 R15: 00007fff1a3f9928
[ 1566.840715][T30907]  </TASK>
[ 1566.882851][T30908] FAULT_INJECTION: forcing a failure.
[ 1566.882851][T30908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1566.897299][T30908] CPU: 0 PID: 30908 Comm: syz.3.8575 Not tainted syzkaller #0
[ 1566.905240][T30908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1566.915307][T30908] Call Trace:
[ 1566.918614][T30908]  <TASK>
[ 1566.921641][T30908]  dump_stack_lvl+0x18c/0x250
[ 1566.926331][T30908]  ? show_regs_print_info+0x20/0x20
[ 1566.931663][T30908]  ? load_image+0x420/0x420
[ 1566.936288][T30908]  ? __might_fault+0xaa/0x120
[ 1566.941068][T30908]  ? __lock_acquire+0x7d40/0x7d40
[ 1566.946134][T30908]  should_fail_ex+0x39d/0x4d0
[ 1566.950857][T30908]  _copy_to_user+0x2f/0xa0
[ 1566.955533][T30908]  bpf_test_finish+0x4e7/0x650
[ 1566.960585][T30908]  ? dst_hold+0x70/0x70
[ 1566.964783][T30908]  ? convert_skb_to___skb+0x420/0x420
[ 1566.970470][T30908]  ? slab_build_skb+0x25f/0x3f0
[ 1566.975641][T30908]  bpf_prog_test_run_skb+0x1122/0x18c0
[ 1566.981171][T30908]  ? cpu_online+0x60/0x60
[ 1566.985525][T30908]  bpf_prog_test_run+0x321/0x390
[ 1566.990471][T30908]  __sys_bpf+0x49d/0x890
[ 1566.994739][T30908]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1567.000622][T30908]  ? lock_chain_count+0x20/0x20
[ 1567.005611][T30908]  __x64_sys_bpf+0x7c/0x90
[ 1567.010194][T30908]  do_syscall_64+0x55/0xb0
[ 1567.014720][T30908]  ? clear_bhb_loop+0x40/0x90
[ 1567.019592][T30908]  ? clear_bhb_loop+0x40/0x90
[ 1567.024730][T30908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1567.030786][T30908] RIP: 0033:0x7f063db9ce59
[ 1567.035741][T30908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1567.056273][T30908] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1567.065043][T30908] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1567.073758][T30908] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[ 1567.082014][T30908] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1567.090161][T30908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1567.098275][T30908] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1567.106576][T30908]  </TASK>
[ 1567.267687][T30912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8578'.
[ 1567.308198][T30912] bridge0: port 3(team0) entered blocking state
[ 1567.316232][T30912] bridge0: port 3(team0) entered forwarding state
[ 1567.347639][T30912] 8021q: adding VLAN 0 to HW filter on device team0
[ 1567.364716][T30910] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8577'.
[ 1567.472123][T30915] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8580'.
[ 1568.473860][T30928] team0: Device ipvlan1 failed to register rx_handler
[ 1568.805805][T30945] bridge0: port 3(team0) entered disabled state
[ 1568.880139][T30945] team0: left allmulticast mode
[ 1568.901228][T30945] team_slave_1: left allmulticast mode
[ 1568.932511][T30945] team0: left promiscuous mode
[ 1568.997116][T30945] team_slave_1: left promiscuous mode
[ 1569.017126][T30945] bridge0: port 3(team0) entered disabled state
[ 1569.231215][T30945] 8021q: adding VLAN 0 to HW filter on device team0
[ 1569.282332][T30945] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1569.292403][T30948] validate_nla: 10 callbacks suppressed
[ 1569.292419][T30948] netlink: 'syz.4.8588': attribute type 10 has an invalid length.
[ 1569.310983][T30948] __nla_validate_parse: 2 callbacks suppressed
[ 1569.311000][T30948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8588'.
[ 1569.326710][T30948] team0: entered promiscuous mode
[ 1569.331841][T30948] team_slave_1: entered promiscuous mode
[ 1569.337937][T30948] team0: entered allmulticast mode
[ 1569.343093][T30948] team_slave_1: entered allmulticast mode
[ 1569.351517][T30948] bond0: (slave team0): Releasing backup interface
[ 1569.364004][T30948] bridge0: port 2(team0) entered blocking state
[ 1569.370806][T30948] bridge0: port 2(team0) entered disabled state
[ 1569.391384][T30950] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8587'.
[ 1569.409775][T30957] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8590'.
[ 1569.561145][T30962] netlink: 'syz.0.8591': attribute type 10 has an invalid length.
[ 1569.600666][T30962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8591'.
[ 1569.621560][T30962] 8021q: adding VLAN 0 to HW filter on device team0
[ 1569.633211][T30962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1569.668632][T30959] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8593'.
[ 1569.854772][T30964] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8593'.
[ 1569.872394][T30972] netlink: 'syz.0.8597': attribute type 10 has an invalid length.
[ 1569.923718][T30969] netlink: 'syz.4.8596': attribute type 9 has an invalid length.
[ 1569.934871][T30969] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8596'.
[ 1569.962925][T27211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1570.311696][T30978] FAULT_INJECTION: forcing a failure.
[ 1570.311696][T30978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1570.329452][T30978] CPU: 0 PID: 30978 Comm: syz.3.8598 Not tainted syzkaller #0
[ 1570.337370][T30978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1570.348693][T30978] Call Trace:
[ 1570.352033][T30978]  <TASK>
[ 1570.355006][T30978]  dump_stack_lvl+0x18c/0x250
[ 1570.359789][T30978]  ? show_regs_print_info+0x20/0x20
[ 1570.365055][T30978]  ? load_image+0x420/0x420
[ 1570.369637][T30978]  ? __lock_acquire+0x7d40/0x7d40
[ 1570.375170][T30978]  ? aa_sk_perm+0x970/0x970
[ 1570.379753][T30978]  should_fail_ex+0x39d/0x4d0
[ 1570.384466][T30978]  _copy_from_user+0x2f/0xe0
[ 1570.389076][T30978]  copy_from_sockptr+0x69/0x80
[ 1570.393874][T30978]  packet_setsockopt+0xbff/0x1500
[ 1570.399242][T30978]  ? packet_ioctl+0x340/0x340
[ 1570.404236][T30978]  ? aa_sk_perm+0x83c/0x970
[ 1570.409087][T30978]  ? __fget_files+0x28/0x4b0
[ 1570.414013][T30978]  ? aa_af_perm+0x330/0x330
[ 1570.418549][T30978]  ? __fget_files+0x28/0x4b0
[ 1570.423342][T30978]  ? __fget_files+0x28/0x4b0
[ 1570.428032][T30978]  ? aa_sock_opt_perm+0x74/0x100
[ 1570.433077][T30978]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1570.438927][T30978]  ? security_socket_setsockopt+0x7e/0xa0
[ 1570.444672][T30978]  ? packet_ioctl+0x340/0x340
[ 1570.449457][T30978]  do_sock_setsockopt+0x175/0x1a0
[ 1570.454530][T30978]  ? __fdget+0x180/0x210
[ 1570.458888][T30978]  __x64_sys_setsockopt+0x182/0x200
[ 1570.464277][T30978]  do_syscall_64+0x55/0xb0
[ 1570.468817][T30978]  ? clear_bhb_loop+0x40/0x90
[ 1570.474141][T30978]  ? clear_bhb_loop+0x40/0x90
[ 1570.479946][T30978]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1570.488068][T30978] RIP: 0033:0x7f063db9ce59
[ 1570.494991][T30978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1570.515322][T30978] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1570.524567][T30978] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1570.533928][T30978] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005
[ 1570.542336][T30978] RBP: 00007f063e99a090 R08: 0000000000000004 R09: 0000000000000000
[ 1570.550534][T30978] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[ 1570.559162][T30978] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1570.567615][T30978]  </TASK>
[ 1570.754831][T30988] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8601'.
[ 1570.807667][T30990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8602'.
[ 1571.059764][T30980] netlink: 'syz.1.8599': attribute type 10 has an invalid length.
[ 1571.118259][T30980] team0: Device ipvlan1 failed to register rx_handler
[ 1571.513977][T30995] netlink: 'syz.3.8603': attribute type 10 has an invalid length.
[ 1571.540127][T30995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8603'.
[ 1571.580370][T30995] bridge0: port 2(team0) entered blocking state
[ 1571.587572][T30995] bridge0: port 2(team0) entered forwarding state
[ 1571.608504][T30995] 8021q: adding VLAN 0 to HW filter on device team0
[ 1571.707042][T30993] netlink: 'syz.3.8603': attribute type 10 has an invalid length.
[ 1571.771703][T30993] bridge0: port 2(team0) entered disabled state
[ 1571.807656][T30993] team0: left allmulticast mode
[ 1571.814080][T30993] team_slave_1: left allmulticast mode
[ 1571.846376][T30993] geneve1: left allmulticast mode
[ 1571.852547][T30993] team0: left promiscuous mode
[ 1571.869112][T30993] team_slave_1: left promiscuous mode
[ 1571.876011][T30993] geneve1: left promiscuous mode
[ 1571.898775][T30993] bridge0: port 2(team0) entered disabled state
[ 1571.964222][T30993] 8021q: adding VLAN 0 to HW filter on device team0
[ 1571.990882][T30993] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1572.031420][T31003] netlink: 'syz.1.8605': attribute type 10 has an invalid length.
[ 1572.049009][T31003] 8021q: adding VLAN 0 to HW filter on device team0
[ 1572.087393][T31003] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1572.168727][T31005] netlink: 'syz.3.8607': attribute type 10 has an invalid length.
[ 1572.231535][T31005] netlink: 'syz.3.8607': attribute type 10 has an invalid length.
[ 1572.252590][T31005] team0: entered promiscuous mode
[ 1572.258681][T31005] team_slave_1: entered promiscuous mode
[ 1572.265852][T31005] geneve1: entered promiscuous mode
[ 1572.273916][T31005] team0: entered allmulticast mode
[ 1572.287486][T31005] team_slave_1: entered allmulticast mode
[ 1572.293814][T31005] geneve1: entered allmulticast mode
[ 1572.325084][T31005] 8021q: adding VLAN 0 to HW filter on device team0
[ 1572.348621][T31005] bond0: (slave team0): Releasing backup interface
[ 1572.380615][T31005] bridge0: port 2(team0) entered blocking state
[ 1572.397703][T31005] bridge0: port 2(team0) entered disabled state
[ 1573.762521][T31032] team0: Device ipvlan1 failed to register rx_handler
[ 1574.201771][T31048] team0: left allmulticast mode
[ 1574.230821][T31048] team_slave_1: left allmulticast mode
[ 1574.243097][T31048] geneve1: left allmulticast mode
[ 1574.259514][T31048] team0: left promiscuous mode
[ 1574.299643][T31048] team_slave_1: left promiscuous mode
[ 1574.318868][T31048] geneve1: left promiscuous mode
[ 1574.348997][T31048] bridge0: port 2(team0) entered disabled state
[ 1574.505515][T31048] 8021q: adding VLAN 0 to HW filter on device team0
[ 1574.630380][T31048] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1574.696045][T31052] validate_nla: 6 callbacks suppressed
[ 1574.696066][T31052] netlink: 'syz.3.8618': attribute type 10 has an invalid length.
[ 1574.726931][T31052] __nla_validate_parse: 7 callbacks suppressed
[ 1574.726951][T31052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8618'.
[ 1574.763826][T31052] team0: entered promiscuous mode
[ 1574.769153][T31052] team_slave_1: entered promiscuous mode
[ 1574.776382][T31052] geneve1: entered promiscuous mode
[ 1574.783095][T31052] team0: entered allmulticast mode
[ 1574.788586][T31052] team_slave_1: entered allmulticast mode
[ 1574.799702][T31052] geneve1: entered allmulticast mode
[ 1574.827106][T31052] bond0: (slave team0): Releasing backup interface
[ 1574.855954][T31052] bridge0: port 2(team0) entered blocking state
[ 1574.866581][T31052] bridge0: port 2(team0) entered disabled state
[ 1574.882530][T31058] netlink: 'syz.4.8621': attribute type 10 has an invalid length.
[ 1575.010458][T31062] netlink: 'syz.1.8623': attribute type 10 has an invalid length.
[ 1575.028696][T31062] team0: left promiscuous mode
[ 1575.034303][T31062] team_slave_1: left promiscuous mode
[ 1575.043459][T31062] geneve1: left promiscuous mode
[ 1575.054000][T31062] team0: left allmulticast mode
[ 1575.059677][T31062] team_slave_1: left allmulticast mode
[ 1575.065824][T31062] geneve1: left allmulticast mode
[ 1575.321323][T31062] 8021q: adding VLAN 0 to HW filter on device team0
[ 1575.418782][T31062] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1575.452176][T31067] netlink: 'syz.1.8623': attribute type 10 has an invalid length.
[ 1575.473695][T31067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8623'.
[ 1575.492547][T31067] team0: entered promiscuous mode
[ 1575.522758][T31067] team_slave_1: entered promiscuous mode
[ 1575.544747][T31067] geneve1: entered promiscuous mode
[ 1575.562606][T31067] team0: entered allmulticast mode
[ 1575.579320][T31067] team_slave_1: entered allmulticast mode
[ 1575.588271][T31067] geneve1: entered allmulticast mode
[ 1575.605384][T31067] bond0: (slave team0): Releasing backup interface
[ 1575.634679][T31067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1575.655240][T31075] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8627'.
[ 1575.938054][T31081] netlink: 'syz.4.8631': attribute type 9 has an invalid length.
[ 1575.968190][T31081] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8631'.
[ 1576.012607][T31087] netlink: 'syz.0.8633': attribute type 10 has an invalid length.
[ 1576.031746][T31087] team0: left promiscuous mode
[ 1576.038906][T31087] team_slave_1: left promiscuous mode
[ 1576.045249][T31087] geneve1: left promiscuous mode
[ 1576.051793][T31087] team0: left allmulticast mode
[ 1576.057447][T31087] team_slave_1: left allmulticast mode
[ 1576.064388][T31087] geneve1: left allmulticast mode
[ 1576.118823][T31087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1576.145218][T31087] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1576.189935][T31089] netlink: 'syz.0.8633': attribute type 10 has an invalid length.
[ 1576.203605][T31089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8633'.
[ 1576.215680][T31089] team0: entered promiscuous mode
[ 1576.222599][T31089] team_slave_1: entered promiscuous mode
[ 1576.229044][T31089] geneve1: entered promiscuous mode
[ 1576.234883][T31089] team0: entered allmulticast mode
[ 1576.240811][T31089] team_slave_1: entered allmulticast mode
[ 1576.248534][T31089] geneve1: entered allmulticast mode
[ 1576.255648][T31089] bond0: (slave team0): Releasing backup interface
[ 1576.272432][T31089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1576.304838][T31092] netlink: 'syz.3.8634': attribute type 10 has an invalid length.
[ 1576.323093][T31092] team0: left allmulticast mode
[ 1576.328287][T31092] team_slave_1: left allmulticast mode
[ 1576.334174][T31092] geneve1: left allmulticast mode
[ 1576.340661][T31092] team0: left promiscuous mode
[ 1576.345983][T31092] team_slave_1: left promiscuous mode
[ 1576.352227][T31092] geneve1: left promiscuous mode
[ 1576.358858][T31092] bridge0: port 2(team0) entered disabled state
[ 1576.374428][T31092] 8021q: adding VLAN 0 to HW filter on device team0
[ 1576.388894][T31092] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1576.398105][T31093] netlink: 'syz.3.8634': attribute type 10 has an invalid length.
[ 1576.411099][T31093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8634'.
[ 1576.424964][T31093] team0: entered promiscuous mode
[ 1576.430696][T31093] team_slave_1: entered promiscuous mode
[ 1576.436955][T31093] geneve1: entered promiscuous mode
[ 1576.442691][T31093] team0: entered allmulticast mode
[ 1576.448385][T31093] team_slave_1: entered allmulticast mode
[ 1576.458660][T31093] geneve1: entered allmulticast mode
[ 1576.468948][T31093] bond0: (slave team0): Releasing backup interface
[ 1576.488020][T31093] bridge0: port 2(team0) entered blocking state
[ 1576.494568][T31093] bridge0: port 2(team0) entered disabled state
[ 1576.513201][T31097] netlink: 'syz.4.8636': attribute type 10 has an invalid length.
[ 1577.339914][T31109] team0: left promiscuous mode
[ 1577.347625][T31109] team_slave_1: left promiscuous mode
[ 1577.358619][T31109] geneve1: left promiscuous mode
[ 1577.364776][T31109] team0: left allmulticast mode
[ 1577.371696][T31109] team_slave_1: left allmulticast mode
[ 1577.378414][T31109] geneve1: left allmulticast mode
[ 1577.388680][T31109] 8021q: adding VLAN 0 to HW filter on device team0
[ 1577.412826][T31109] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1577.441102][T31112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8638'.
[ 1577.500351][T31112] team0: entered promiscuous mode
[ 1577.505700][T31112] team_slave_1: entered promiscuous mode
[ 1577.556759][T31112] geneve1: entered promiscuous mode
[ 1577.566112][T31112] team0: entered allmulticast mode
[ 1577.583407][T31112] team_slave_1: entered allmulticast mode
[ 1577.610266][T31112] geneve1: entered allmulticast mode
[ 1580.334648][T31112] bond0: (slave team0): Releasing backup interface
[ 1580.462298][T31112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1580.500198][T31119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8641'.
[ 1580.715091][T31126] validate_nla: 2 callbacks suppressed
[ 1580.715114][T31126] netlink: 'syz.0.8644': attribute type 9 has an invalid length.
[ 1580.757806][T31126] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8644'.
[ 1580.783721][T31131] netlink: 'syz.1.8646': attribute type 10 has an invalid length.
[ 1580.793444][T31131] team0: left promiscuous mode
[ 1580.805099][T31131] team_slave_1: left promiscuous mode
[ 1580.823916][T31131] geneve1: left promiscuous mode
[ 1580.838987][T31131] team0: left allmulticast mode
[ 1580.847965][T31131] team_slave_1: left allmulticast mode
[ 1580.854154][T31131] geneve1: left allmulticast mode
[ 1580.867743][T31131] 8021q: adding VLAN 0 to HW filter on device team0
[ 1580.891442][T31131] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1580.912960][T31135] netlink: 'syz.3.8645': attribute type 10 has an invalid length.
[ 1580.938312][T31135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8645'.
[ 1580.954286][T31135] bridge0: port 2(team0) entered blocking state
[ 1580.961162][T31135] bridge0: port 2(team0) entered forwarding state
[ 1580.970209][T31135] 8021q: adding VLAN 0 to HW filter on device team0
[ 1580.978286][T31133] netlink: 'syz.3.8645': attribute type 10 has an invalid length.
[ 1580.996954][T31133] bridge0: port 2(team0) entered disabled state
[ 1581.010590][T31133] team0: left allmulticast mode
[ 1581.016664][T31133] team_slave_1: left allmulticast mode
[ 1581.023540][T31133] geneve1: left allmulticast mode
[ 1581.030378][T31133] team0: left promiscuous mode
[ 1581.035559][T31133] team_slave_1: left promiscuous mode
[ 1581.041879][T31133] geneve1: left promiscuous mode
[ 1581.047762][T31133] bridge0: port 2(team0) entered disabled state
[ 1581.062321][T31133] 8021q: adding VLAN 0 to HW filter on device team0
[ 1581.071456][T31133] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1581.080473][T31134] netlink: 'syz.1.8646': attribute type 10 has an invalid length.
[ 1581.089634][T31134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8646'.
[ 1581.101724][T31134] team0: entered promiscuous mode
[ 1581.107405][T31134] team_slave_1: entered promiscuous mode
[ 1581.115035][T31134] geneve1: entered promiscuous mode
[ 1581.120816][T31134] team0: entered allmulticast mode
[ 1581.129998][T31134] team_slave_1: entered allmulticast mode
[ 1581.136336][T31134] geneve1: entered allmulticast mode
[ 1581.142954][T31134] bond0: (slave team0): Releasing backup interface
[ 1581.155772][T31134] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1581.352375][T31137] netlink: 'syz.1.8647': attribute type 10 has an invalid length.
[ 1581.417863][T31142] netlink: 'syz.4.8656': attribute type 10 has an invalid length.
[ 1581.448783][T31142] team0: left allmulticast mode
[ 1581.454531][T31142] team_slave_1: left allmulticast mode
[ 1581.485340][T31142] team0: left promiscuous mode
[ 1581.494603][T31142] team_slave_1: left promiscuous mode
[ 1581.519037][T31142] bridge0: port 2(team0) entered disabled state
[ 1581.567062][T31142] 8021q: adding VLAN 0 to HW filter on device team0
[ 1581.643383][T31142] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1581.678422][T31144] netlink: 'syz.4.8656': attribute type 10 has an invalid length.
[ 1581.695307][T31147] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8649'.
[ 1581.715817][T31144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8656'.
[ 1581.732208][T31144] team0: entered promiscuous mode
[ 1581.742192][T31144] team_slave_1: entered promiscuous mode
[ 1581.749746][T31144] team0: entered allmulticast mode
[ 1581.757478][T31144] team_slave_1: entered allmulticast mode
[ 1581.768332][T31144] bond0: (slave team0): Releasing backup interface
[ 1581.780022][T31144] bridge0: port 2(team0) entered blocking state
[ 1581.806370][T31144] bridge0: port 2(team0) entered disabled state
[ 1582.133113][T31159] netlink: 'syz.4.8652': attribute type 10 has an invalid length.
[ 1582.142029][T31159] team0: left allmulticast mode
[ 1582.149631][T31159] team_slave_1: left allmulticast mode
[ 1582.155786][T31159] team0: left promiscuous mode
[ 1582.162693][T31159] team_slave_1: left promiscuous mode
[ 1582.171229][T31159] bridge0: port 2(team0) entered disabled state
[ 1582.211000][T31159] 8021q: adding VLAN 0 to HW filter on device team0
[ 1582.370441][T31159] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1582.393566][T31162] netlink: 'syz.4.8652': attribute type 10 has an invalid length.
[ 1582.404955][T31162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8652'.
[ 1582.415416][T31162] team0: entered promiscuous mode
[ 1582.424773][T31162] team_slave_1: entered promiscuous mode
[ 1582.432721][T31162] team0: entered allmulticast mode
[ 1582.456307][T31162] team_slave_1: entered allmulticast mode
[ 1582.469247][T31162] bond0: (slave team0): Releasing backup interface
[ 1582.513937][T31162] bridge0: port 2(team0) entered blocking state
[ 1582.531444][T31162] bridge0: port 2(team0) entered disabled state
[ 1582.557858][T31167] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8653'.
[ 1583.049303][T31171] team0: left allmulticast mode
[ 1583.057238][T31171] team_slave_1: left allmulticast mode
[ 1583.071672][T31171] team0: left promiscuous mode
[ 1583.082465][T31171] team_slave_1: left promiscuous mode
[ 1583.100913][T31171] bridge0: port 2(team0) entered disabled state
[ 1585.395061][T31171] 8021q: adding VLAN 0 to HW filter on device team0
[ 1585.414239][T31171] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1585.426789][T31175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8657'.
[ 1585.455342][T31175] team0: entered promiscuous mode
[ 1585.464002][T31175] team_slave_1: entered promiscuous mode
[ 1585.473611][T31175] team0: entered allmulticast mode
[ 1585.481030][T31175] team_slave_1: entered allmulticast mode
[ 1585.493576][T31175] bond0: (slave team0): Releasing backup interface
[ 1585.512078][T31175] bridge0: port 2(team0) entered blocking state
[ 1585.519623][T31175] bridge0: port 2(team0) entered disabled state
[ 1585.567291][T31180] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8658'.
[ 1585.785047][T31187] validate_nla: 3 callbacks suppressed
[ 1585.785074][T31187] netlink: 'syz.0.8659': attribute type 10 has an invalid length.
[ 1586.053187][T31199] netlink: 'syz.1.8666': attribute type 10 has an invalid length.
[ 1586.062347][T31199] team0: left promiscuous mode
[ 1586.068565][T31199] team_slave_1: left promiscuous mode
[ 1586.084915][T31199] geneve1: left promiscuous mode
[ 1586.113931][T31199] team0: left allmulticast mode
[ 1586.121878][T31199] team_slave_1: left allmulticast mode
[ 1586.139105][T31197] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8662'.
[ 1586.144129][T31199] geneve1: left allmulticast mode
[ 1586.205334][T31199] 8021q: adding VLAN 0 to HW filter on device team0
[ 1586.286246][T31199] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1586.304086][T31200] netlink: 'syz.1.8666': attribute type 10 has an invalid length.
[ 1586.315304][T31200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8666'.
[ 1586.326035][T31200] team0: entered promiscuous mode
[ 1586.332909][T31200] team_slave_1: entered promiscuous mode
[ 1586.341113][T31200] geneve1: entered promiscuous mode
[ 1586.349354][T31200] team0: entered allmulticast mode
[ 1586.354636][T31200] team_slave_1: entered allmulticast mode
[ 1586.366389][T31200] geneve1: entered allmulticast mode
[ 1586.396935][T31200] bond0: (slave team0): Releasing backup interface
[ 1586.412998][T31200] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1586.434051][T31201] netlink: 'syz.0.8664': attribute type 10 has an invalid length.
[ 1586.449885][T31201] team0: left promiscuous mode
[ 1586.457479][T31201] team_slave_1: left promiscuous mode
[ 1586.464628][T31201] geneve1: left promiscuous mode
[ 1586.471798][T31201] team0: left allmulticast mode
[ 1586.478188][T31201] team_slave_1: left allmulticast mode
[ 1586.488901][T31201] geneve1: left allmulticast mode
[ 1586.513444][T31201] 8021q: adding VLAN 0 to HW filter on device team0
[ 1586.528168][T31201] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1586.551794][T31202] netlink: 'syz.0.8664': attribute type 10 has an invalid length.
[ 1586.564976][T31202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8664'.
[ 1586.580155][T31202] team0: entered promiscuous mode
[ 1586.590542][T31202] team_slave_1: entered promiscuous mode
[ 1586.599550][T31202] geneve1: entered promiscuous mode
[ 1586.610339][T31202] team0: entered allmulticast mode
[ 1586.617294][T31202] team_slave_1: entered allmulticast mode
[ 1586.632543][T31202] geneve1: entered allmulticast mode
[ 1586.659348][T31202] bond0: (slave team0): Releasing backup interface
[ 1586.681291][T31202] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1586.708016][T31208] netlink: 'syz.3.8668': attribute type 13 has an invalid length.
[ 1586.736501][T31208] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.8668'.
[ 1586.768775][T31205] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8667'.
[ 1586.985764][T31208] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8668'.
[ 1586.997692][T31208] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[ 1587.540908][T31223] netlink: 'syz.1.8671': attribute type 9 has an invalid length.
[ 1587.550476][T31223] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8671'.
[ 1588.015503][T31238] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1589.141429][T31251] netlink: 'syz.1.8679': attribute type 10 has an invalid length.
[ 1589.165728][T31251] team0: left promiscuous mode
[ 1589.171659][T31251] team_slave_1: left promiscuous mode
[ 1589.190200][T31251] geneve1: left promiscuous mode
[ 1589.197453][T31251] team0: left allmulticast mode
[ 1589.204959][T31251] team_slave_1: left allmulticast mode
[ 1589.218048][T31251] geneve1: left allmulticast mode
[ 1589.242462][T31251] 8021q: adding VLAN 0 to HW filter on device team0
[ 1589.267166][T31251] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1589.279662][T31255] netlink: 'syz.1.8679': attribute type 10 has an invalid length.
[ 1589.302074][T31255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8679'.
[ 1589.313030][T31255] team0: entered promiscuous mode
[ 1589.319419][T31255] team_slave_1: entered promiscuous mode
[ 1589.325690][T31255] geneve1: entered promiscuous mode
[ 1589.332527][T31255] team0: entered allmulticast mode
[ 1589.339360][T31255] team_slave_1: entered allmulticast mode
[ 1589.345501][T31255] geneve1: entered allmulticast mode
[ 1589.359001][T31255] bond0: (slave team0): Releasing backup interface
[ 1589.403328][T31255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1589.470215][T31261] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8682'.
[ 1589.498734][T31264] FAULT_INJECTION: forcing a failure.
[ 1589.498734][T31264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1589.514826][T31264] CPU: 1 PID: 31264 Comm: syz.3.8683 Not tainted syzkaller #0
[ 1589.524465][T31264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1589.534961][T31264] Call Trace:
[ 1589.538692][T31264]  <TASK>
[ 1589.542230][T31264]  dump_stack_lvl+0x18c/0x250
[ 1589.546988][T31264]  ? show_regs_print_info+0x20/0x20
[ 1589.552828][T31264]  ? load_image+0x420/0x420
[ 1589.557440][T31264]  ? __lock_acquire+0x7d40/0x7d40
[ 1589.562894][T31264]  ? snprintf+0xe9/0x140
[ 1589.567461][T31264]  should_fail_ex+0x39d/0x4d0
[ 1589.572872][T31264]  _copy_to_user+0x2f/0xa0
[ 1589.577986][T31264]  simple_read_from_buffer+0xe7/0x150
[ 1589.584349][T31264]  proc_fail_nth_read+0x1e8/0x260
[ 1589.589671][T31264]  ? proc_fault_inject_write+0x360/0x360
[ 1589.596676][T31264]  ? fsnotify_perm+0x271/0x5e0
[ 1589.603431][T31264]  ? proc_fault_inject_write+0x360/0x360
[ 1589.609783][T31264]  vfs_read+0x28b/0x970
[ 1589.614327][T31264]  ? kernel_read+0x1e0/0x1e0
[ 1589.618992][T31264]  ? __fget_files+0x28/0x4b0
[ 1589.624363][T31264]  ? __fget_files+0x28/0x4b0
[ 1589.629131][T31264]  ? __fget_files+0x43d/0x4b0
[ 1589.633998][T31264]  ? __fdget_pos+0x2a3/0x330
[ 1589.638976][T31264]  ? ksys_read+0x75/0x260
[ 1589.643826][T31264]  ksys_read+0x150/0x260
[ 1589.648181][T31264]  ? vfs_write+0x990/0x990
[ 1589.652686][T31264]  ? lockdep_hardirqs_on+0x98/0x150
[ 1589.659475][T31264]  do_syscall_64+0x55/0xb0
[ 1589.664423][T31264]  ? clear_bhb_loop+0x40/0x90
[ 1589.669425][T31264]  ? clear_bhb_loop+0x40/0x90
[ 1589.674369][T31264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1589.680791][T31264] RIP: 0033:0x7f063db5d68e
[ 1589.687093][T31264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1589.708039][T31264] RSP: 002b:00007f063e999fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1589.716798][T31264] RAX: ffffffffffffffda RBX: 00007f063e99a6c0 RCX: 00007f063db5d68e
[ 1589.725719][T31264] RDX: 000000000000000f RSI: 00007f063e99a0a0 RDI: 0000000000000005
[ 1589.734142][T31264] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1589.742746][T31264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1589.751484][T31264] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1589.761452][T31264]  </TASK>
[ 1590.149067][T31270] netlink: 'syz.3.8685': attribute type 9 has an invalid length.
[ 1590.883066][T31280] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1591.017402][T31270] syz.3.8685 (31270) used greatest stack depth: 18472 bytes left
[ 1591.353750][T31288] netlink: 'syz.1.8693': attribute type 10 has an invalid length.
[ 1591.394361][T31288] team0: left promiscuous mode
[ 1591.404654][T31288] team_slave_1: left promiscuous mode
[ 1591.418127][T31288] geneve1: left promiscuous mode
[ 1591.431165][T31288] team0: left allmulticast mode
[ 1591.441374][T31288] team_slave_1: left allmulticast mode
[ 1591.451864][T31288] geneve1: left allmulticast mode
[ 1591.508612][T31288] 8021q: adding VLAN 0 to HW filter on device team0
[ 1591.521997][T31288] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1591.532135][T31297] netlink: 'syz.1.8693': attribute type 10 has an invalid length.
[ 1591.540119][T31297] __nla_validate_parse: 1 callbacks suppressed
[ 1591.540134][T31297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8693'.
[ 1591.556393][T31297] team0: entered promiscuous mode
[ 1591.562894][T31297] team_slave_1: entered promiscuous mode
[ 1591.569461][T31297] geneve1: entered promiscuous mode
[ 1591.572321][T31296] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.8694'.
[ 1591.574989][T31297] team0: entered allmulticast mode
[ 1591.590533][T31297] team_slave_1: entered allmulticast mode
[ 1591.605859][T31297] geneve1: entered allmulticast mode
[ 1591.613040][T31297] bond0: (slave team0): Releasing backup interface
[ 1591.628791][T31297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1591.645469][T31298] netlink: 'syz.3.8695': attribute type 10 has an invalid length.
[ 1591.666489][T31299] netlink: 'syz.3.8695': attribute type 10 has an invalid length.
[ 1591.678952][T31299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8695'.
[ 1591.692692][T31299] team0: entered promiscuous mode
[ 1591.699267][T31299] team_slave_1: entered promiscuous mode
[ 1591.708349][T31299] geneve1: entered promiscuous mode
[ 1591.714530][T31299] team0: entered allmulticast mode
[ 1591.721599][T31299] team_slave_1: entered allmulticast mode
[ 1591.729326][T31299] geneve1: entered allmulticast mode
[ 1591.738589][T31299] 8021q: adding VLAN 0 to HW filter on device team0
[ 1591.748141][T31299] bond0: (slave team0): Releasing backup interface
[ 1591.764340][T31299] bridge0: port 2(team0) entered blocking state
[ 1591.771309][T31299] bridge0: port 2(team0) entered disabled state
[ 1591.816874][T31300] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8694'.
[ 1591.836834][T31302] netlink: 'syz.0.8696': attribute type 10 has an invalid length.
[ 1592.088502][T31311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8698'.
[ 1592.579218][T31314] netlink: 'syz.4.8700': attribute type 9 has an invalid length.
[ 1592.642794][T31314] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8700'.
[ 1594.718893][T31335] netlink: 'syz.1.8707': attribute type 10 has an invalid length.
[ 1594.759264][T31329] netlink: 'syz.3.8706': attribute type 10 has an invalid length.
[ 1594.794222][T31329] team0: left allmulticast mode
[ 1594.811030][T31329] team_slave_1: left allmulticast mode
[ 1594.822984][T31329] geneve1: left allmulticast mode
[ 1594.829276][T31329] team0: left promiscuous mode
[ 1594.836077][T31329] team_slave_1: left promiscuous mode
[ 1594.852430][T31329] geneve1: left promiscuous mode
[ 1594.861772][T31329] bridge0: port 2(team0) entered disabled state
[ 1594.897506][T31329] 8021q: adding VLAN 0 to HW filter on device team0
[ 1594.911501][T31329] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1594.926028][T31337] netlink: 'syz.3.8706': attribute type 10 has an invalid length.
[ 1594.941852][T31337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8706'.
[ 1594.969395][T31337] team0: entered promiscuous mode
[ 1594.976488][T31337] team_slave_1: entered promiscuous mode
[ 1594.984764][T31337] geneve1: entered promiscuous mode
[ 1595.006471][T31337] team0: entered allmulticast mode
[ 1595.012462][T31337] team_slave_1: entered allmulticast mode
[ 1595.037217][T31337] geneve1: entered allmulticast mode
[ 1595.050985][T31337] bond0: (slave team0): Releasing backup interface
[ 1595.075310][T31337] bridge0: port 2(team0) entered blocking state
[ 1595.083393][T31337] bridge0: port 2(team0) entered disabled state
[ 1595.102306][T31342] netlink: 'syz.0.8708': attribute type 10 has an invalid length.
[ 1595.116609][T31342] team0: left promiscuous mode
[ 1595.121878][T31342] team_slave_1: left promiscuous mode
[ 1595.135631][T31342] geneve1: left promiscuous mode
[ 1595.142590][T31342] team0: left allmulticast mode
[ 1595.150714][T31342] team_slave_1: left allmulticast mode
[ 1595.168845][T31342] geneve1: left allmulticast mode
[ 1595.179538][T31342] 8021q: adding VLAN 0 to HW filter on device team0
[ 1595.189515][T31342] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1595.210560][T31341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8708'.
[ 1595.267764][T31341] team0: entered promiscuous mode
[ 1595.286467][T31341] team_slave_1: entered promiscuous mode
[ 1595.295180][T31341] geneve1: entered promiscuous mode
[ 1595.313853][T31341] team0: entered allmulticast mode
[ 1595.320641][T31341] team_slave_1: entered allmulticast mode
[ 1595.322811][T31348] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8710'.
[ 1595.327929][T31341] geneve1: entered allmulticast mode
[ 1595.361614][T31341] bond0: (slave team0): Releasing backup interface
[ 1595.406118][T31341] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1595.424330][T31347] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8711'.
[ 1595.631993][T31355] FAULT_INJECTION: forcing a failure.
[ 1595.631993][T31355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1595.645484][T31355] CPU: 0 PID: 31355 Comm: syz.3.8714 Not tainted syzkaller #0
[ 1595.653956][T31355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1595.664138][T31355] Call Trace:
[ 1595.667450][T31355]  <TASK>
[ 1595.670592][T31355]  dump_stack_lvl+0x18c/0x250
[ 1595.675325][T31355]  ? show_regs_print_info+0x20/0x20
[ 1595.680669][T31355]  ? load_image+0x420/0x420
[ 1595.685435][T31355]  ? __might_fault+0xaa/0x120
[ 1595.690603][T31355]  ? __lock_acquire+0x7d40/0x7d40
[ 1595.695804][T31355]  should_fail_ex+0x39d/0x4d0
[ 1595.700915][T31355]  _copy_from_user+0x2f/0xe0
[ 1595.705565][T31355]  ___sys_sendmsg+0x1c7/0x360
[ 1595.710911][T31355]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1595.715773][T31355]  ? __lock_acquire+0x7d40/0x7d40
[ 1595.721061][T31355]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1595.726050][T31355]  ? __x64_sys_sendmsg+0x80/0x80
[ 1595.731836][T31355]  ? lockdep_hardirqs_on+0x98/0x150
[ 1595.737265][T31355]  do_syscall_64+0x55/0xb0
[ 1595.741740][T31355]  ? clear_bhb_loop+0x40/0x90
[ 1595.746716][T31355]  ? clear_bhb_loop+0x40/0x90
[ 1595.751769][T31355]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1595.757733][T31355] RIP: 0033:0x7f063db9ce59
[ 1595.762167][T31355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1595.783917][T31355] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1595.794030][T31355] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1595.803083][T31355] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1595.811211][T31355] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1595.819302][T31355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1595.827307][T31355] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1595.835541][T31355]  </TASK>
[ 1595.988550][T31360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1596.129560][T31362] team0: left allmulticast mode
[ 1596.174898][T31362] team_slave_1: left allmulticast mode
[ 1596.208711][T31362] geneve1: left allmulticast mode
[ 1596.215147][T31362] team0: left promiscuous mode
[ 1596.228637][T31362] team_slave_1: left promiscuous mode
[ 1596.245459][T31362] geneve1: left promiscuous mode
[ 1596.303485][T31362] bridge0: port 2(team0) entered disabled state
[ 1596.446106][T31362] 8021q: adding VLAN 0 to HW filter on device team0
[ 1596.465041][T31362] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1596.476928][T31363] validate_nla: 5 callbacks suppressed
[ 1596.476946][T31363] netlink: 'syz.3.8716': attribute type 10 has an invalid length.
[ 1596.493478][T31363] team0: entered promiscuous mode
[ 1596.499137][T31363] team_slave_1: entered promiscuous mode
[ 1596.505263][T31363] geneve1: entered promiscuous mode
[ 1596.511688][T31363] team0: entered allmulticast mode
[ 1596.519133][T31363] team_slave_1: entered allmulticast mode
[ 1596.525642][T31363] geneve1: entered allmulticast mode
[ 1596.538414][T31363] bond0: (slave team0): Releasing backup interface
[ 1596.555058][T31363] bridge0: port 2(team0) entered blocking state
[ 1596.565580][T31363] bridge0: port 2(team0) entered disabled state
[ 1596.680822][T31367] netlink: 'syz.4.8718': attribute type 10 has an invalid length.
[ 1596.798059][T31373] __nla_validate_parse: 4 callbacks suppressed
[ 1596.798079][T31373] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.8719'.
[ 1596.954049][T31377] netlink: 'syz.1.8721': attribute type 10 has an invalid length.
[ 1596.964624][T31377] team0: left promiscuous mode
[ 1596.970175][T31377] team_slave_1: left promiscuous mode
[ 1596.976118][T31377] geneve1: left promiscuous mode
[ 1596.983071][T31377] team0: left allmulticast mode
[ 1596.990296][T31377] team_slave_1: left allmulticast mode
[ 1596.997743][T31377] geneve1: left allmulticast mode
[ 1597.008571][T31377] 8021q: adding VLAN 0 to HW filter on device team0
[ 1597.020085][T31377] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1597.030863][T31378] netlink: 'syz.1.8721': attribute type 10 has an invalid length.
[ 1597.046364][T31378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8721'.
[ 1597.056031][T31378] team0: entered promiscuous mode
[ 1597.062337][T31378] team_slave_1: entered promiscuous mode
[ 1597.068959][T31378] geneve1: entered promiscuous mode
[ 1597.075663][T31378] team0: entered allmulticast mode
[ 1597.081039][T31378] team_slave_1: entered allmulticast mode
[ 1597.086994][T31378] geneve1: entered allmulticast mode
[ 1597.093956][T31378] bond0: (slave team0): Releasing backup interface
[ 1597.107860][T31378] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1597.215653][T31384] netlink: 'syz.0.8730': attribute type 10 has an invalid length.
[ 1597.291496][T31381] netlink: 'syz.4.8723': attribute type 9 has an invalid length.
[ 1597.310978][T31388] netlink: 'syz.1.8722': attribute type 10 has an invalid length.
[ 1597.325256][T31381] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8723'.
[ 1597.357762][T31388] team0: left promiscuous mode
[ 1597.363654][T31388] team_slave_1: left promiscuous mode
[ 1597.371140][T31388] geneve1: left promiscuous mode
[ 1597.378128][T31388] team0: left allmulticast mode
[ 1597.383401][T31388] team_slave_1: left allmulticast mode
[ 1597.390881][T31388] geneve1: left allmulticast mode
[ 1597.421229][T31388] 8021q: adding VLAN 0 to HW filter on device team0
[ 1597.454298][T31388] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1597.465973][T31390] netlink: 'syz.1.8722': attribute type 10 has an invalid length.
[ 1597.496369][T31390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8722'.
[ 1597.508454][T31390] team0: entered promiscuous mode
[ 1597.514065][T31390] team_slave_1: entered promiscuous mode
[ 1597.534432][T31390] geneve1: entered promiscuous mode
[ 1597.546711][T31390] team0: entered allmulticast mode
[ 1597.552394][T31390] team_slave_1: entered allmulticast mode
[ 1597.559383][T31390] geneve1: entered allmulticast mode
[ 1597.566822][T31390] bond0: (slave team0): Releasing backup interface
[ 1597.581983][T31390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1597.604025][T31382] netlink: 'syz.3.8724': attribute type 10 has an invalid length.
[ 1597.626575][T31382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8724'.
[ 1597.640970][T31382] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1597.880217][T31397] netlink: 'syz.1.8726': attribute type 9 has an invalid length.
[ 1597.912926][T31397] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8726'.
[ 1598.002034][T31404] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8727'.
[ 1598.844274][T31418] FAULT_INJECTION: forcing a failure.
[ 1598.844274][T31418] name failslab, interval 1, probability 0, space 0, times 0
[ 1598.860499][T31418] CPU: 0 PID: 31418 Comm: syz.1.8740 Not tainted syzkaller #0
[ 1598.868340][T31418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1598.878564][T31418] Call Trace:
[ 1598.881893][T31418]  <TASK>
[ 1598.886378][T31418]  dump_stack_lvl+0x18c/0x250
[ 1598.891323][T31418]  ? verify_lock_unused+0x140/0x140
[ 1598.896783][T31418]  ? show_regs_print_info+0x20/0x20
[ 1598.902400][T31418]  ? load_image+0x420/0x420
[ 1598.906947][T31418]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1598.913673][T31418]  should_fail_ex+0x39d/0x4d0
[ 1598.918395][T31418]  should_failslab+0x9/0x20
[ 1598.922941][T31418]  slab_pre_alloc_hook+0x59/0x310
[ 1598.928183][T31418]  ? nfc_genl_rcv_nl_event+0xa8/0x2a0
[ 1598.934061][T31418]  __kmem_cache_alloc_node+0x53/0x250
[ 1598.939476][T31418]  ? nfc_genl_rcv_nl_event+0xa8/0x2a0
[ 1598.944898][T31418]  kmalloc_trace+0x2a/0xe0
[ 1598.949362][T31418]  nfc_genl_rcv_nl_event+0xa8/0x2a0
[ 1598.954752][T31418]  notifier_call_chain+0x197/0x380
[ 1598.959929][T31418]  blocking_notifier_call_chain+0x6a/0x90
[ 1598.965703][T31418]  netlink_release+0x1279/0x1ad0
[ 1598.970690][T31418]  ? netlink_release+0x107/0x1ad0
[ 1598.975744][T31418]  ? netlink_sock_destruct+0x190/0x190
[ 1598.981331][T31418]  ? down_write+0x16e/0x200
[ 1598.985869][T31418]  ? down_read_killable+0x340/0x340
[ 1598.991125][T31418]  sock_close+0xbd/0x230
[ 1598.995408][T31418]  ? sock_mmap+0xa0/0xa0
[ 1598.999784][T31418]  __fput+0x234/0x970
[ 1599.003820][T31418]  __se_sys_close+0x15f/0x220
[ 1599.008537][T31418]  do_syscall_64+0x55/0xb0
[ 1599.013157][T31418]  ? clear_bhb_loop+0x40/0x90
[ 1599.017967][T31418]  ? clear_bhb_loop+0x40/0x90
[ 1599.022790][T31418]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1599.028742][T31418] RIP: 0033:0x7f9bb4d9ce59
[ 1599.033199][T31418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1599.052935][T31418] RSP: 002b:00007f9bb2ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1599.061598][T31418] RAX: ffffffffffffffda RBX: 00007f9bb5015fa0 RCX: 00007f9bb4d9ce59
[ 1599.069772][T31418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1599.077802][T31418] RBP: 00007f9bb2ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1599.085829][T31418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1599.093831][T31418] R13: 00007f9bb5016038 R14: 00007f9bb5015fa0 R15: 00007fffa05a3a78
[ 1599.101920][T31418]  </TASK>
[ 1599.159725][T31416] team0: left promiscuous mode
[ 1599.164949][T31416] team_slave_1: left promiscuous mode
[ 1599.173376][T31416] geneve1: left promiscuous mode
[ 1599.180534][T31416] team0: left allmulticast mode
[ 1599.185758][T31416] team_slave_1: left allmulticast mode
[ 1599.191987][T31416] geneve1: left allmulticast mode
[ 1599.203309][T31416] 8021q: adding VLAN 0 to HW filter on device team0
[ 1599.221826][T31416] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1599.232972][T31423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8732'.
[ 1599.242979][T31423] team0: entered promiscuous mode
[ 1599.249040][T31423] team_slave_1: entered promiscuous mode
[ 1599.256415][T31423] geneve1: entered promiscuous mode
[ 1599.265547][T31423] team0: entered allmulticast mode
[ 1599.278865][T31420] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8741'.
[ 1599.289887][T31423] team_slave_1: entered allmulticast mode
[ 1599.295685][T31423] geneve1: entered allmulticast mode
[ 1599.303097][T31423] bond0: (slave team0): Releasing backup interface
[ 1599.317293][T31423] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1599.359480][T31426] team0: left allmulticast mode
[ 1599.365155][T31426] team_slave_1: left allmulticast mode
[ 1599.376797][T31426] team0: left promiscuous mode
[ 1599.382154][T31426] team_slave_1: left promiscuous mode
[ 1599.401180][T31426] bridge0: port 2(team0) entered disabled state
[ 1599.458818][T31426] 8021q: adding VLAN 0 to HW filter on device team0
[ 1599.481645][T31426] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1599.587501][T31428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8733'.
[ 1599.596724][T31428] team0: entered promiscuous mode
[ 1599.601819][T31428] team_slave_1: entered promiscuous mode
[ 1599.608503][T31428] team0: entered allmulticast mode
[ 1599.613857][T31428] team_slave_1: entered allmulticast mode
[ 1599.622956][T31428] bond0: (slave team0): Releasing backup interface
[ 1599.639943][T31428] bridge0: port 2(team0) entered blocking state
[ 1599.646512][T31428] bridge0: port 2(team0) entered disabled state
[ 1600.139180][T31432] team0: Device ipvlan1 failed to register rx_handler
[ 1600.218078][T31442] FAULT_INJECTION: forcing a failure.
[ 1600.218078][T31442] name failslab, interval 1, probability 0, space 0, times 0
[ 1600.234969][T31442] CPU: 1 PID: 31442 Comm: syz.4.8737 Not tainted syzkaller #0
[ 1600.245516][T31442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1600.258885][T31442] Call Trace:
[ 1600.262371][T31442]  <TASK>
[ 1600.265594][T31442]  dump_stack_lvl+0x18c/0x250
[ 1600.270683][T31442]  ? show_regs_print_info+0x20/0x20
[ 1600.276925][T31442]  ? load_image+0x420/0x420
[ 1600.281559][T31442]  ? __might_sleep+0xe0/0xe0
[ 1600.286291][T31442]  ? __lock_acquire+0x7d40/0x7d40
[ 1600.291460][T31442]  should_fail_ex+0x39d/0x4d0
[ 1600.296533][T31442]  should_failslab+0x9/0x20
[ 1600.302488][T31442]  slab_pre_alloc_hook+0x59/0x310
[ 1600.307554][T31442]  ? __request_module+0x2ed/0x600
[ 1600.313001][T31442]  ? __request_module+0x2ed/0x600
[ 1600.318117][T31442]  __kmem_cache_alloc_node+0x53/0x250
[ 1600.323595][T31442]  ? __request_module+0x2ed/0x600
[ 1600.328834][T31442]  __kmalloc_node_track_caller+0xa2/0x230
[ 1600.334595][T31442]  kstrdup+0x3b/0x80
[ 1600.338698][T31442]  __request_module+0x2ed/0x600
[ 1600.343673][T31442]  ? module_enforce_rwx_sections+0x150/0x150
[ 1600.349699][T31442]  ? bpf_lsm_capable+0x9/0x10
[ 1600.354407][T31442]  ? security_capable+0x89/0xb0
[ 1600.359403][T31442]  ? dev_load+0x21/0x1f0
[ 1600.363690][T31442]  dev_load+0x18b/0x1f0
[ 1600.368136][T31442]  devinet_ioctl+0x133/0x1c40
[ 1600.372850][T31442]  ? __might_fault+0xc6/0x120
[ 1600.377656][T31442]  ? inet_ifa_byprefix+0x2a0/0x2a0
[ 1600.382808][T31442]  ? _copy_from_user+0xa5/0xe0
[ 1600.387614][T31442]  ? get_user_ifreq+0x12b/0x180
[ 1600.392496][T31442]  inet_ioctl+0x392/0x560
[ 1600.396894][T31442]  ? tomoyo_path_number_perm+0x217/0x620
[ 1600.402956][T31442]  ? inet_shutdown+0x370/0x370
[ 1600.407784][T31442]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1600.413716][T31442]  ? tomoyo_path_number_perm+0x500/0x620
[ 1600.419553][T31442]  ? __kmem_cache_free+0xba/0x1e0
[ 1600.424617][T31442]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1600.430628][T31442]  ? packet_ioctl+0x1cf/0x340
[ 1600.435755][T31442]  sock_do_ioctl+0xfc/0x310
[ 1600.440540][T31442]  ? sock_show_fdinfo+0xb0/0xb0
[ 1600.445466][T31442]  sock_ioctl+0x5ba/0x7e0
[ 1600.449853][T31442]  ? sock_poll+0x3e0/0x3e0
[ 1600.454526][T31442]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1600.461955][T31442]  ? security_file_ioctl+0x80/0xa0
[ 1600.467109][T31442]  ? sock_poll+0x3e0/0x3e0
[ 1600.472191][T31442]  __se_sys_ioctl+0xfd/0x170
[ 1600.477921][T31442]  do_syscall_64+0x55/0xb0
[ 1600.483541][T31442]  ? clear_bhb_loop+0x40/0x90
[ 1600.488459][T31442]  ? clear_bhb_loop+0x40/0x90
[ 1600.493269][T31442]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1600.499213][T31442] RIP: 0033:0x7fca2d59ce59
[ 1600.503870][T31442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1600.524641][T31442] RSP: 002b:00007fca2b7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1600.533935][T31442] RAX: ffffffffffffffda RBX: 00007fca2d816090 RCX: 00007fca2d59ce59
[ 1600.542202][T31442] RDX: 0000200000000400 RSI: 0000000000008917 RDI: 0000000000000004
[ 1600.550214][T31442] RBP: 00007fca2b7d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1600.558829][T31442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1600.566831][T31442] R13: 00007fca2d816128 R14: 00007fca2d816090 R15: 00007ffcb43cdf88
[ 1600.574885][T31442]  </TASK>
[ 1601.194575][ T2931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1603.147123][T31458] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8744'.
[ 1603.157369][T31458] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8744'.
[ 1603.170408][T31458] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8744'.
[ 1603.194853][T31459] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8742'.
[ 1603.501271][T31463] validate_nla: 8 callbacks suppressed
[ 1603.501336][T31463] netlink: 'syz.3.8746': attribute type 10 has an invalid length.
[ 1603.601038][T31466] netlink: 'syz.1.8747': attribute type 10 has an invalid length.
[ 1603.611386][T31466] team0: left promiscuous mode
[ 1603.633010][T31466] team_slave_1: left promiscuous mode
[ 1603.644488][T31466] geneve1: left promiscuous mode
[ 1603.691870][T31466] team0: left allmulticast mode
[ 1603.699840][T31466] team_slave_1: left allmulticast mode
[ 1603.708514][T31466] geneve1: left allmulticast mode
[ 1603.782188][T31466] 8021q: adding VLAN 0 to HW filter on device team0
[ 1603.892631][T31466] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1603.903165][T31468] netlink: 'syz.1.8747': attribute type 10 has an invalid length.
[ 1603.912455][T31468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8747'.
[ 1603.921591][T31468] team0: entered promiscuous mode
[ 1603.926842][T31468] team_slave_1: entered promiscuous mode
[ 1603.933232][T31468] geneve1: entered promiscuous mode
[ 1603.939058][T31468] team0: entered allmulticast mode
[ 1603.944421][T31468] team_slave_1: entered allmulticast mode
[ 1603.950641][T31468] geneve1: entered allmulticast mode
[ 1603.962779][T31468] bond0: (slave team0): Releasing backup interface
[ 1603.977050][T31475] netlink: 'syz.0.8748': attribute type 9 has an invalid length.
[ 1603.977964][T31468] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1603.995253][T31475] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8748'.
[ 1604.014138][T31476] netlink: 'syz.3.8749': attribute type 10 has an invalid length.
[ 1604.029815][T31476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8749'.
[ 1604.042060][T31476] bridge0: port 2(team0) entered blocking state
[ 1604.049097][T31476] bridge0: port 2(team0) entered forwarding state
[ 1604.056968][T31476] 8021q: adding VLAN 0 to HW filter on device team0
[ 1604.076666][T31474] netlink: 'syz.3.8749': attribute type 10 has an invalid length.
[ 1604.090760][T31474] bridge0: port 2(team0) entered disabled state
[ 1604.101224][T31474] team0: left allmulticast mode
[ 1604.106631][T31474] team_slave_1: left allmulticast mode
[ 1604.112278][T31474] geneve1: left allmulticast mode
[ 1604.117879][T31474] team0: left promiscuous mode
[ 1604.122866][T31474] team_slave_1: left promiscuous mode
[ 1604.128996][T31474] geneve1: left promiscuous mode
[ 1604.135018][T31474] bridge0: port 2(team0) entered disabled state
[ 1604.144801][T31474] 8021q: adding VLAN 0 to HW filter on device team0
[ 1604.154935][T31474] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1604.381883][T31486] netlink: 'syz.0.8750': attribute type 10 has an invalid length.
[ 1604.394569][T31486] team0: left promiscuous mode
[ 1604.409105][T31486] team_slave_1: left promiscuous mode
[ 1604.416996][T31486] geneve1: left promiscuous mode
[ 1604.423940][T31486] team0: left allmulticast mode
[ 1604.431207][T31486] team_slave_1: left allmulticast mode
[ 1604.441682][T31486] geneve1: left allmulticast mode
[ 1604.465610][T31486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1604.487399][T31486] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1604.501437][T31489] netlink: 'syz.0.8750': attribute type 10 has an invalid length.
[ 1604.527028][T31489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8750'.
[ 1604.544550][T31483] netlink: 'syz.1.8758': attribute type 9 has an invalid length.
[ 1604.547761][T31489] team0: entered promiscuous mode
[ 1604.558446][T31489] team_slave_1: entered promiscuous mode
[ 1604.565876][T31489] geneve1: entered promiscuous mode
[ 1604.571985][T31489] team0: entered allmulticast mode
[ 1604.578142][T31489] team_slave_1: entered allmulticast mode
[ 1604.584356][T31489] geneve1: entered allmulticast mode
[ 1604.586368][T31483] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8758'.
[ 1607.331738][T31489] bond0: (slave team0): Releasing backup interface
[ 1607.404932][T31489] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1607.424747][T31484] netlink: 'syz.4.8751': attribute type 10 has an invalid length.
[ 1607.675032][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.681767][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.097555][T31514] team0: left promiscuous mode
[ 1608.102648][T31514] team_slave_1: left promiscuous mode
[ 1608.118709][T31514] geneve1: left promiscuous mode
[ 1608.130773][T31514] team0: left allmulticast mode
[ 1608.141510][T31514] team_slave_1: left allmulticast mode
[ 1608.161323][T31514] geneve1: left allmulticast mode
[ 1608.174250][T31514] 8021q: adding VLAN 0 to HW filter on device team0
[ 1608.189751][T31514] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1608.200133][T31518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8760'.
[ 1608.212290][T31518] team0: entered promiscuous mode
[ 1608.218094][T31518] team_slave_1: entered promiscuous mode
[ 1608.224661][T31518] geneve1: entered promiscuous mode
[ 1608.240523][T31518] team0: entered allmulticast mode
[ 1608.259844][T31518] team_slave_1: entered allmulticast mode
[ 1608.276862][T31518] geneve1: entered allmulticast mode
[ 1610.184014][T31518] bond0: (slave team0): Releasing backup interface
[ 1610.285428][T31518] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1610.560332][T31524] validate_nla: 3 callbacks suppressed
[ 1610.560369][T31524] netlink: 'syz.1.8762': attribute type 10 has an invalid length.
[ 1610.575955][T31524] team0: left promiscuous mode
[ 1610.582092][T31524] team_slave_1: left promiscuous mode
[ 1610.594577][T31524] geneve1: left promiscuous mode
[ 1610.604049][T31524] team0: left allmulticast mode
[ 1610.621111][T31530] netlink: 'syz.4.8765': attribute type 9 has an invalid length.
[ 1610.629361][T31524] team_slave_1: left allmulticast mode
[ 1610.635326][T31524] geneve1: left allmulticast mode
[ 1610.670562][T31524] 8021q: adding VLAN 0 to HW filter on device team0
[ 1610.678062][T31530] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8765'.
[ 1610.714976][T31524] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1610.765915][T31531] netlink: 'syz.1.8762': attribute type 10 has an invalid length.
[ 1610.783267][T31531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8762'.
[ 1610.799846][T31531] team0: entered promiscuous mode
[ 1610.805648][T31531] team_slave_1: entered promiscuous mode
[ 1610.812694][T31531] geneve1: entered promiscuous mode
[ 1610.820951][T31531] team0: entered allmulticast mode
[ 1610.827775][T31531] team_slave_1: entered allmulticast mode
[ 1610.834430][T31531] geneve1: entered allmulticast mode
[ 1613.548953][T31531] bond0: (slave team0): Releasing backup interface
[ 1613.648469][T31531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1613.970773][T31546] FAULT_INJECTION: forcing a failure.
[ 1613.970773][T31546] name failslab, interval 1, probability 0, space 0, times 0
[ 1614.019925][T31546] CPU: 1 PID: 31546 Comm: syz.3.8769 Not tainted syzkaller #0
[ 1614.027578][T31546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1614.037729][T31546] Call Trace:
[ 1614.041140][T31546]  <TASK>
[ 1614.044135][T31546]  dump_stack_lvl+0x18c/0x250
[ 1614.048975][T31546]  ? show_regs_print_info+0x20/0x20
[ 1614.054242][T31546]  ? load_image+0x420/0x420
[ 1614.058854][T31546]  ? __might_sleep+0xe0/0xe0
[ 1614.063530][T31546]  ? __lock_acquire+0x7d40/0x7d40
[ 1614.068648][T31546]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1614.074725][T31546]  should_fail_ex+0x39d/0x4d0
[ 1614.079753][T31546]  should_failslab+0x9/0x20
[ 1614.084405][T31546]  slab_pre_alloc_hook+0x59/0x310
[ 1614.089592][T31546]  ? lockdep_hardirqs_on+0x98/0x150
[ 1614.094866][T31546]  ? sk_prot_alloc+0xe7/0x210
[ 1614.099625][T31546]  ? sk_prot_alloc+0xe7/0x210
[ 1614.104365][T31546]  __kmem_cache_alloc_node+0x53/0x250
[ 1614.109815][T31546]  ? sk_prot_alloc+0xe7/0x210
[ 1614.114685][T31546]  __kmalloc+0xa4/0x230
[ 1614.119139][T31546]  sk_prot_alloc+0xe7/0x210
[ 1614.124075][T31546]  ? sk_alloc+0x24/0x360
[ 1614.128383][T31546]  sk_alloc+0x3a/0x360
[ 1614.132576][T31546]  ? bpf_ctx_init+0x163/0x1a0
[ 1614.137377][T31546]  ? bpf_prog_test_run_skb+0x279/0x18c0
[ 1614.143380][T31546]  bpf_prog_test_run_skb+0x3d1/0x18c0
[ 1614.148813][T31546]  ? lockdep_hardirqs_on+0x98/0x150
[ 1614.154096][T31546]  ? cpu_online+0x60/0x60
[ 1614.158470][T31546]  bpf_prog_test_run+0x321/0x390
[ 1614.163490][T31546]  __sys_bpf+0x49d/0x890
[ 1614.167812][T31546]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1614.173276][T31546]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1614.179536][T31546]  __x64_sys_bpf+0x7c/0x90
[ 1614.184391][T31546]  do_syscall_64+0x55/0xb0
[ 1614.188924][T31546]  ? clear_bhb_loop+0x40/0x90
[ 1614.193844][T31546]  ? clear_bhb_loop+0x40/0x90
[ 1614.198700][T31546]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1614.204735][T31546] RIP: 0033:0x7f063db9ce59
[ 1614.209496][T31546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1614.229715][T31546] RSP: 002b:00007f063e99a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1614.238880][T31546] RAX: ffffffffffffffda RBX: 00007f063de15fa0 RCX: 00007f063db9ce59
[ 1614.247228][T31546] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1614.255221][T31546] RBP: 00007f063e99a090 R08: 0000000000000000 R09: 0000000000000000
[ 1614.263474][T31546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1614.271735][T31546] R13: 00007f063de16038 R14: 00007f063de15fa0 R15: 00007ffc8daa2c68
[ 1614.279894][T31546]  </TASK>
[ 1614.524545][T31555] netlink: 'syz.4.8771': attribute type 10 has an invalid length.
[ 1614.548232][T31558] netlink: 'syz.3.8772': attribute type 10 has an invalid length.
[ 1614.635120][T31561] netlink: 'syz.3.8772': attribute type 10 has an invalid length.
[ 1614.656517][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8772'.
[ 1614.677058][T31561] team0: entered promiscuous mode
[ 1614.682172][T31561] team_slave_1: entered promiscuous mode
[ 1614.706529][T31561] geneve1: entered promiscuous mode
[ 1614.713491][T31561] team0: entered allmulticast mode
[ 1614.726262][T31561] team_slave_1: entered allmulticast mode
[ 1614.732267][T31561] geneve1: entered allmulticast mode
[ 1614.749486][T31561] 8021q: adding VLAN 0 to HW filter on device team0
[ 1617.632713][T31561] bond0: (slave team0): Releasing backup interface
[ 1617.739202][T31561] bridge0: port 2(team0) entered blocking state
[ 1617.772275][T31561] bridge0: port 2(team0) entered disabled state
[ 1618.453219][T31573] netlink: 'syz.1.8778': attribute type 9 has an invalid length.
[ 1618.497421][T31573] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8778'.
[ 1621.310869][T31586] netlink: 'syz.1.8782': attribute type 1 has an invalid length.
[ 1621.321286][T31586] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8782'.
[ 1621.505890][T31593] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8784'.
[ 1621.517390][T31593] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1621.536012][T31596] netlink: 'syz.1.8785': attribute type 29 has an invalid length.
[ 1621.569543][T31596] netlink: 'syz.1.8785': attribute type 29 has an invalid length.
[ 1621.596865][T31600] netlink: 'syz.1.8785': attribute type 29 has an invalid length.
[ 1621.655894][T31596] netlink: 'syz.1.8785': attribute type 29 has an invalid length.
[ 1621.962754][T31602] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8787'.
[ 1625.072251][T31615] netlink: 'syz.0.8790': attribute type 9 has an invalid length.
[ 1625.093746][T31615] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8790'.
[ 1628.108627][T31625] netlink: 'syz.1.8794': attribute type 12 has an invalid length.
[ 1628.126300][T31625] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8794'.
[ 1628.328889][T31630] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8796'.
[ 1628.546535][T31637] netlink: 'syz.0.8799': attribute type 29 has an invalid length.
[ 1631.442642][T31637] netlink: 'syz.0.8799': attribute type 29 has an invalid length.
[ 1631.453718][T31639] netlink: 'syz.0.8799': attribute type 29 has an invalid length.
[ 1631.465088][T31640] netlink: 'syz.0.8799': attribute type 29 has an invalid length.
[ 1631.550155][T31644] netlink: 'syz.1.8800': attribute type 10 has an invalid length.
[ 1631.558694][T31644] team0: left promiscuous mode
[ 1631.563847][T31644] team_slave_1: left promiscuous mode
[ 1631.571397][T31644] geneve1: left promiscuous mode
[ 1631.586378][T31644] team0: left allmulticast mode
[ 1631.591525][T31644] team_slave_1: left allmulticast mode
[ 1631.598089][T31644] geneve1: left allmulticast mode
[ 1631.615167][T31644] 8021q: adding VLAN 0 to HW filter on device team0
[ 1631.629922][T31644] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1631.658123][T31648] netlink: 'syz.1.8800': attribute type 10 has an invalid length.
[ 1631.668091][T31648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8800'.
[ 1631.693046][T31648] team0: entered promiscuous mode
[ 1631.699752][T31648] team_slave_1: entered promiscuous mode
[ 1631.705905][T31648] geneve1: entered promiscuous mode
[ 1631.715636][T31648] team0: entered allmulticast mode
[ 1631.721495][T31648] team_slave_1: entered allmulticast mode
[ 1631.731624][T31648] geneve1: entered allmulticast mode
[ 1631.740534][T31652] netlink: 'syz.3.8801': attribute type 9 has an invalid length.
[ 1631.751238][T31652] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8801'.
[ 1631.762558][T31648] bond0: (slave team0): Releasing backup interface
[ 1631.793122][T31648] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1632.277767][T31665] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8806'.
[ 1632.413373][T31670] netlink: 'syz.4.8810': attribute type 10 has an invalid length.
[ 1632.438850][T31670] team0: left allmulticast mode
[ 1632.447490][T31670] team_slave_1: left allmulticast mode
[ 1632.487028][T31670] team0: left promiscuous mode
[ 1632.532436][T31670] team_slave_1: left promiscuous mode
[ 1632.562792][T31668] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8808'.
[ 1632.590822][T31670] bridge0: port 2(team0) entered disabled state
[ 1632.664362][T31670] 8021q: adding VLAN 0 to HW filter on device team0
[ 1632.694360][T31670] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1632.716901][T31673] netlink: 'syz.4.8810': attribute type 10 has an invalid length.
[ 1632.733750][T31673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8810'.
[ 1632.747919][T31673] team0: entered promiscuous mode
[ 1632.753071][T31673] team_slave_1: entered promiscuous mode
[ 1632.759768][T31673] team0: entered allmulticast mode
[ 1632.765475][T31673] team_slave_1: entered allmulticast mode
[ 1632.782023][T31673] bond0: (slave team0): Releasing backup interface
[ 1632.810451][T31673] bridge0: port 2(team0) entered blocking state
[ 1632.818187][T31673] bridge0: port 2(team0) entered disabled state
[ 1632.834514][T31676] netlink: 'syz.3.8809': attribute type 10 has an invalid length.
[ 1632.836070][T27205] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1632.886852][T31676] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8809'.
[ 1632.896320][T31678] ip6gre0: mtu less than device minimum
[ 1633.079496][T31684] netlink: 'syz.4.8814': attribute type 9 has an invalid length.
[ 1633.097231][T31684] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8814'.
[ 1633.287935][T31692] team0: left promiscuous mode
[ 1633.306343][T31692] team_slave_1: left promiscuous mode
[ 1633.312071][T31692] geneve1: left promiscuous mode
[ 1633.318283][T31692] team0: left allmulticast mode
[ 1633.323303][T31692] team_slave_1: left allmulticast mode
[ 1633.329613][T31692] geneve1: left allmulticast mode
[ 1633.338022][T31692] 8021q: adding VLAN 0 to HW filter on device team0
[ 1633.352199][T31692] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1633.958946][T31691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8816'.
[ 1634.046096][T31691] team0: entered promiscuous mode
[ 1634.202258][T31691] team_slave_1: entered promiscuous mode
[ 1634.209485][T31691] geneve1: entered promiscuous mode
[ 1634.220262][T31691] team0: entered allmulticast mode
[ 1634.225924][T31691] team_slave_1: entered allmulticast mode
[ 1634.233367][T31691] geneve1: entered allmulticast mode
[ 1634.307372][T31691] bond0: (slave team0): Releasing backup interface
[ 1634.340887][T31691] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1634.543139][T31701] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8819'.
[ 1634.897797][T31712] team0: left promiscuous mode
[ 1634.926789][T31712] team_slave_1: left promiscuous mode
[ 1634.933895][T31712] geneve1: left promiscuous mode
[ 1634.975694][T31712] team0: left allmulticast mode
[ 1635.007234][T31713] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8822'.
[ 1635.026424][T31712] team_slave_1: left allmulticast mode
[ 1635.040476][T31712] geneve1: left allmulticast mode
[ 1635.068733][T31712] 8021q: adding VLAN 0 to HW filter on device team0
[ 1635.111931][T31712] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1635.139538][T31714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8823'.
[ 1635.148920][T31714] team0: entered promiscuous mode
[ 1635.154125][T31714] team_slave_1: entered promiscuous mode
[ 1635.160354][T31714] geneve1: entered promiscuous mode
[ 1635.166598][T31714] team0: entered allmulticast mode
[ 1635.171794][T31714] team_slave_1: entered allmulticast mode
[ 1635.187118][T31714] geneve1: entered allmulticast mode
[ 1635.195656][T31714] bond0: (slave team0): Releasing backup interface
[ 1635.213255][T31714] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1635.433015][T31720] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8826'.
[ 1635.588317][T31726] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8828'.
[ 1635.604387][T31726] hsr0: entered promiscuous mode
[ 1635.612793][T31726] bridge0: port 3(hsr0) entered blocking state
[ 1635.620142][T31726] bridge0: port 3(hsr0) entered disabled state
[ 1635.629145][T31726] hsr0: entered allmulticast mode
[ 1635.634268][T31726] hsr_slave_0: entered allmulticast mode
[ 1635.641127][T31726] hsr_slave_1: entered allmulticast mode
[ 1635.650573][T31726] bridge0: port 3(hsr0) entered blocking state
[ 1635.657056][T31726] bridge0: port 3(hsr0) entered forwarding state
[ 1635.665029][T31727] ip6gre0: mtu less than device minimum
[ 1635.805583][T31729] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8837'.
[ 1635.975502][T31735] team0: left allmulticast mode
[ 1635.991667][T31735] team_slave_1: left allmulticast mode
[ 1636.004865][T31735] team0: left promiscuous mode
[ 1636.014926][T31735] team_slave_1: left promiscuous mode
[ 1636.025814][T31735] bridge0: port 2(team0) entered disabled state
[ 1636.078243][T31735] 8021q: adding VLAN 0 to HW filter on device team0
[ 1636.099490][T31735] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1636.141488][T31738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8830'.
[ 1636.156488][T31738] team0: entered promiscuous mode
[ 1636.164165][T31738] team_slave_1: entered promiscuous mode
[ 1636.176898][T31738] team0: entered allmulticast mode
[ 1636.182122][T31738] team_slave_1: entered allmulticast mode
[ 1636.206050][T31738] bond0: (slave team0): Releasing backup interface
[ 1636.231113][T31738] bridge0: port 2(team0) entered blocking state
[ 1636.270449][T31738] bridge0: port 2(team0) entered disabled state
[ 1636.401765][T31741] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8832'.
[ 1636.890280][T31763] validate_nla: 9 callbacks suppressed
[ 1636.890316][T31763] netlink: 'syz.0.8839': attribute type 10 has an invalid length.
[ 1636.906731][T31763] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8839'.
[ 1636.918880][T31763] hsr0: entered promiscuous mode
[ 1636.935373][T31763] ip6gre0: mtu less than device minimum
[ 1637.105429][T31770] netlink: 'syz.3.8843': attribute type 9 has an invalid length.
[ 1637.562822][T31779] syzkaller0: entered promiscuous mode
[ 1637.578111][T31779] syzkaller0: entered allmulticast mode
[ 1640.898840][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1640.919790][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1640.941753][T31798] netlink: 'syz.1.8852': attribute type 10 has an invalid length.
[ 1640.952119][T31798] __nla_validate_parse: 1 callbacks suppressed
[ 1640.952180][T31798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8852'.
[ 1640.970735][T31798] hsr0: entered promiscuous mode
[ 1640.982484][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1640.991788][T31798] ip6gre0: mtu less than device minimum
[ 1640.998303][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1641.008269][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1641.022442][T31800] netlink: 'syz.4.8853': attribute type 29 has an invalid length.
[ 1641.169223][T31810] FAULT_INJECTION: forcing a failure.
[ 1641.169223][T31810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1641.176526][T31806] netlink: 'syz.1.8855': attribute type 9 has an invalid length.
[ 1641.185123][T31810] CPU: 0 PID: 31810 Comm: syz.4.8856 Not tainted syzkaller #0
[ 1641.200301][T31810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1641.210756][T31810] Call Trace:
[ 1641.214066][T31810]  <TASK>
[ 1641.217084][T31810]  dump_stack_lvl+0x18c/0x250
[ 1641.221862][T31810]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1641.228024][T31810]  ? show_regs_print_info+0x20/0x20
[ 1641.233449][T31810]  ? load_image+0x420/0x420
[ 1641.238068][T31810]  should_fail_ex+0x39d/0x4d0
[ 1641.242949][T31810]  _copy_from_user+0x2f/0xe0
[ 1641.247929][T31810]  ___sys_sendmsg+0x1c7/0x360
[ 1641.252613][T31810]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1641.257496][T31810]  ? trace_call_bpf+0xc3/0x6c0
[ 1641.262291][T31810]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[ 1641.268697][T31810]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1641.273559][T31810]  ? __x64_sys_sendmsg+0x80/0x80
[ 1641.278521][T31810]  ? lockdep_hardirqs_on+0x98/0x150
[ 1641.283895][T31810]  do_syscall_64+0x55/0xb0
[ 1641.288357][T31810]  ? clear_bhb_loop+0x40/0x90
[ 1641.293049][T31810]  ? clear_bhb_loop+0x40/0x90
[ 1641.297752][T31810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1641.303761][T31810] RIP: 0033:0x7fca2d59ce59
[ 1641.308415][T31810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1641.328914][T31810] RSP: 002b:00007fca2b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1641.337608][T31810] RAX: ffffffffffffffda RBX: 00007fca2d815fa0 RCX: 00007fca2d59ce59
[ 1641.346135][T31810] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000008
[ 1641.354198][T31810] RBP: 00007fca2b7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1641.362642][T31810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1641.371270][T31810] R13: 00007fca2d816038 R14: 00007fca2d815fa0 R15: 00007ffcb43cdf88
[ 1641.379443][T31810]  </TASK>
[ 1641.386317][T31806] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8855'.
[ 1641.993837][T31819] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8859'.
[ 1645.494836][T31845] netlink: 'syz.1.8869': attribute type 10 has an invalid length.
[ 1645.503682][T31840] netlink: 'syz.3.8867': attribute type 9 has an invalid length.
[ 1645.521117][T31840] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8867'.
[ 1645.545751][T31845] macvlan0: entered promiscuous mode
[ 1645.554793][T31845] macvlan0: entered allmulticast mode
[ 1645.573405][T31845] veth1_vlan: entered allmulticast mode
[ 1645.598010][T31845] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1645.993150][T31856] FAULT_INJECTION: forcing a failure.
[ 1645.993150][T31856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1646.072695][T31856] CPU: 0 PID: 31856 Comm: syz.0.8873 Not tainted syzkaller #0
[ 1646.080262][T31856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1646.090442][T31856] Call Trace:
[ 1646.093790][T31856]  <TASK>
[ 1646.096742][T31856]  dump_stack_lvl+0x18c/0x250
[ 1646.101552][T31856]  ? show_regs_print_info+0x20/0x20
[ 1646.106788][T31856]  ? load_image+0x420/0x420
[ 1646.111677][T31856]  ? __lock_acquire+0x7d40/0x7d40
[ 1646.116760][T31856]  ? snprintf+0xe9/0x140
[ 1646.121060][T31856]  should_fail_ex+0x39d/0x4d0
[ 1646.125774][T31856]  _copy_to_user+0x2f/0xa0
[ 1646.130198][T31856]  simple_read_from_buffer+0xe7/0x150
[ 1646.135600][T31856]  proc_fail_nth_read+0x1e8/0x260
[ 1646.140632][T31856]  ? proc_fault_inject_write+0x360/0x360
[ 1646.146282][T31856]  ? fsnotify_perm+0x271/0x5e0
[ 1646.151069][T31856]  ? proc_fault_inject_write+0x360/0x360
[ 1646.156801][T31856]  vfs_read+0x28b/0x970
[ 1646.161183][T31856]  ? kernel_read+0x1e0/0x1e0
[ 1646.165838][T31856]  ? __fget_files+0x28/0x4b0
[ 1646.170507][T31856]  ? __fget_files+0x28/0x4b0
[ 1646.175235][T31856]  ? __fget_files+0x43d/0x4b0
[ 1646.179959][T31856]  ? __fdget_pos+0x2a3/0x330
[ 1646.184579][T31856]  ? ksys_read+0x75/0x260
[ 1646.189105][T31856]  ksys_read+0x150/0x260
[ 1646.193356][T31856]  ? vfs_write+0x990/0x990
[ 1646.197814][T31856]  ? lockdep_hardirqs_on+0x98/0x150
[ 1646.203308][T31856]  do_syscall_64+0x55/0xb0
[ 1646.207735][T31856]  ? clear_bhb_loop+0x40/0x90
[ 1646.212586][T31856]  ? clear_bhb_loop+0x40/0x90
[ 1646.217484][T31856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1646.223475][T31856] RIP: 0033:0x7f909695d68e
[ 1646.227905][T31856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1646.247576][T31856] RSP: 002b:00007f90978b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1646.256006][T31856] RAX: ffffffffffffffda RBX: 00007f90978b16c0 RCX: 00007f909695d68e
[ 1646.263993][T31856] RDX: 000000000000000f RSI: 00007f90978b10a0 RDI: 0000000000000004
[ 1646.272099][T31856] RBP: 00007f90978b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1646.280401][T31856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1646.288502][T31856] R13: 00007f9096c16038 R14: 00007f9096c15fa0 R15: 00007fff1a3f9928
[ 1646.297047][T31856]  </TASK>
[ 1646.478292][T31867] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8877'.
[ 1649.509547][T31875] netlink: 'syz.4.8878': attribute type 29 has an invalid length.
[ 1649.519963][T31879] netlink: 'syz.0.8880': attribute type 10 has an invalid length.
[ 1649.536746][T31879] team0: left promiscuous mode
[ 1649.541926][T31879] team_slave_1: left promiscuous mode
[ 1649.548926][T31879] geneve1: left promiscuous mode
[ 1649.555126][T31879] team0: left allmulticast mode
[ 1649.560918][T31879] team_slave_1: left allmulticast mode
[ 1649.566782][T31879] geneve1: left allmulticast mode
[ 1649.575258][T31879] 8021q: adding VLAN 0 to HW filter on device team0
[ 1649.586464][T31879] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1649.595379][T31875] netlink: 'syz.4.8878': attribute type 29 has an invalid length.
[ 1649.603891][T31878] netlink: 'syz.1.8879': attribute type 12 has an invalid length.
[ 1649.612614][T31878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8879'.
[ 1649.623536][T31883] netlink: 'syz.0.8880': attribute type 10 has an invalid length.
[ 1649.634390][T31883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8880'.
[ 1649.645887][T31883] team0: entered promiscuous mode
[ 1649.651710][T31883] team_slave_1: entered promiscuous mode
[ 1649.657824][T31883] geneve1: entered promiscuous mode
[ 1649.664400][T31883] team0: entered allmulticast mode
[ 1649.669737][T31883] team_slave_1: entered allmulticast mode
[ 1649.675841][T31883] geneve1: entered allmulticast mode
[ 1649.684621][T31883] bond0: (slave team0): Releasing backup interface
[ 1649.840384][T31883] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1649.857104][T31882] netlink: 'syz.4.8878': attribute type 29 has an invalid length.
[ 1649.868726][T31884] netlink: 'syz.3.8881': attribute type 10 has an invalid length.
[ 1649.877956][T31884] team0: left allmulticast mode
[ 1649.883427][T31884] team_slave_1: left allmulticast mode
[ 1649.889568][T31884] geneve1: left allmulticast mode
[ 1649.894968][T31884] team0: left promiscuous mode
[ 1649.902548][T31884] team_slave_1: left promiscuous mode
[ 1649.908902][T31884] geneve1: left promiscuous mode
[ 1649.914956][T31884] bridge0: port 2(team0) entered disabled state
[ 1649.929917][T31884] 8021q: adding VLAN 0 to HW filter on device team0
[ 1649.942135][T31884] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1649.953740][T31881] netlink: 'syz.3.8881': attribute type 10 has an invalid length.
[ 1649.976829][T31881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8881'.
[ 1649.993109][T31881] team0: entered promiscuous mode
[ 1649.999669][T31881] team_slave_1: entered promiscuous mode
[ 1650.007497][T31881] geneve1: entered promiscuous mode
[ 1650.014062][T31881] team0: entered allmulticast mode
[ 1650.019701][T31881] team_slave_1: entered allmulticast mode
[ 1650.025944][T31881] geneve1: entered allmulticast mode
[ 1650.043132][T31881] bond0: (slave team0): Releasing backup interface
[ 1650.079088][T31881] bridge0: port 2(team0) entered blocking state
[ 1650.087930][T31881] bridge0: port 2(team0) entered disabled state
[ 1650.309650][T31892] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8884'.
[ 1650.742058][T31904] validate_nla: 2 callbacks suppressed
[ 1650.742091][T31904] netlink: 'syz.4.8887': attribute type 3 has an invalid length.
[ 1650.766365][T31904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8887'.
[ 1653.967561][T31919] netlink: 'syz.0.8892': attribute type 10 has an invalid length.
[ 1653.975835][T31919] team0: left promiscuous mode
[ 1653.991736][T31921] netlink: 'syz.1.8894': attribute type 29 has an invalid length.
[ 1654.016555][T31919] team_slave_1: left promiscuous mode
[ 1654.027093][T31919] geneve1: left promiscuous mode
[ 1654.034655][T31919] team0: left allmulticast mode
[ 1654.045289][T31919] team_slave_1: left allmulticast mode
[ 1654.051569][T31919] geneve1: left allmulticast mode
[ 1654.069185][T31919] 8021q: adding VLAN 0 to HW filter on device team0
[ 1654.086826][T31919] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1654.097634][T31921] netlink: 'syz.1.8894': attribute type 29 has an invalid length.
[ 1654.112756][T31927] netlink: 'syz.0.8892': attribute type 10 has an invalid length.
[ 1654.140253][T31927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8892'.
[ 1654.196514][T31927] team0: entered promiscuous mode
[ 1654.243823][T31927] team_slave_1: entered promiscuous mode
[ 1654.278422][T31927] geneve1: entered promiscuous mode
[ 1654.284184][T31927] team0: entered allmulticast mode
[ 1654.306284][T31927] team_slave_1: entered allmulticast mode
[ 1654.312442][T31927] geneve1: entered allmulticast mode
[ 1654.336289][T31927] bond0: (slave team0): Releasing backup interface
[ 1654.350500][T31927] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1654.376529][T31926] netlink: 'syz.1.8894': attribute type 29 has an invalid length.
[ 1654.397240][T31928] netlink: 'syz.1.8894': attribute type 29 has an invalid length.
[ 1654.455938][T31935] netlink: 'syz.4.8898': attribute type 10 has an invalid length.
[ 1654.467719][T31935] team0: left allmulticast mode
[ 1654.472781][T31935] team_slave_1: left allmulticast mode
[ 1654.487357][T31935] team0: left promiscuous mode
[ 1654.493348][T31935] team_slave_1: left promiscuous mode
[ 1654.518745][T31935] bridge0: port 2(team0) entered disabled state
[ 1654.569919][T31935] 8021q: adding VLAN 0 to HW filter on device team0
[ 1654.604242][T31935] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1654.636854][T31936] netlink: 'syz.4.8898': attribute type 10 has an invalid length.
[ 1654.656731][T31936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8898'.
[ 1654.669608][T31936] team0: entered promiscuous mode
[ 1654.674738][T31936] team_slave_1: entered promiscuous mode
[ 1654.685783][T31936] team0: entered allmulticast mode
[ 1654.692167][T31936] team_slave_1: entered allmulticast mode
[ 1654.707659][T31936] bond0: (slave team0): Releasing backup interface
[ 1654.717049][T30356] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3
[ 1654.732941][T30356] ref_tracker: syz_tun@ffff88805fe245b8 has 1/2 users at
[ 1654.732941][T30356]      dst_init+0xd9/0x480
[ 1654.732941][T30356]      dst_alloc+0x12e/0x170
[ 1654.732941][T30356]      ip_route_output_key_hash_rcu+0x14f6/0x2370
[ 1654.732941][T30356]      ip_route_output_key_hash+0x1f3/0x330
[ 1654.732941][T30356]      ip_route_output_flow+0x2a/0x150
[ 1654.732941][T30356]      geneve_link_config+0x1a6/0x670
[ 1654.732941][T30356]      geneve_newlink+0x151/0x1c0
[ 1654.732941][T30356]      rtnl_newlink+0x1542/0x20a0
[ 1654.732941][T30356]      rtnetlink_rcv_msg+0x869/0xfa0
[ 1654.732941][T30356]      netlink_rcv_skb+0x241/0x4d0
[ 1654.732941][T30356]      netlink_unicast+0x751/0x8d0
[ 1654.732941][T30356]      netlink_sendmsg+0x8d0/0xbf0
[ 1654.732941][T30356]      __sys_sendto+0x4a9/0x6b0
[ 1654.732941][T30356]      __x64_sys_sendto+0xde/0xf0
[ 1654.732941][T30356]      do_syscall_64+0x55/0xb0
[ 1654.732941][T30356]      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1654.732941][T30356] 
[ 1654.826174][T30356] ref_tracker: syz_tun@ffff88805fe245b8 has 1/2 users at
[ 1654.826174][T30356]      fib_check_nh+0xd23/0x1a70
[ 1654.826174][T30356]      fib_create_info+0x142c/0x2460
[ 1654.826174][T30356]      fib_table_insert+0xc6/0x1b20
[ 1654.826174][T30356]      fib_magic+0x2e5/0x3c0
[ 1654.826174][T30356]      fib_add_ifaddr+0x38d/0x5e0
[ 1654.826174][T30356]      fib_netdev_event+0x389/0x490
[ 1654.826174][T30356]      notifier_call_chain+0x197/0x380
[ 1654.826174][T30356]      __dev_notify_flags+0x1aa/0x310
[ 1654.826174][T30356]      dev_change_flags+0xe8/0x1a0
[ 1654.826174][T30356]      do_setlink+0xc58/0x4130
[ 1654.826174][T30356]      rtnl_newlink+0x17da/0x20a0
[ 1654.826174][T30356]      rtnetlink_rcv_msg+0x869/0xfa0
[ 1654.826174][T30356]      netlink_rcv_skb+0x241/0x4d0
[ 1654.826174][T30356]      netlink_unicast+0x751/0x8d0
[ 1654.826174][T30356]      netlink_sendmsg+0x8d0/0xbf0
[ 1654.826174][T30356]      __sys_sendto+0x4a9/0x6b0
[ 1654.826174][T30356] 
[ 1654.923649][T31936] bridge0: port 2(team0) entered blocking state
[ 1654.930450][T31936] bridge0: port 2(team0) entered disabled state
[ 1655.816409][T31915] Bluetooth: hci3: command 0x0406 tx timeout
[ 1663.965255][T27240] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)