last executing test programs:

16.599832464s ago: executing program 2 (id=2546):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0xfffd, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='r', 0x1}], 0x1, &(0x7f0000000240)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x2a, &(0x7f0000000980)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

16.261551432s ago: executing program 2 (id=2550):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', @random="0200ff7fffff"})
socket$kcm(0xa, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x22, 0x10000, 0x9e8, 0x2, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r3, @ANYRES8], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000540)=""/195}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x10100)
r5 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000780)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100201, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0xffffff0a, &(0x7f0000000840)=[{&(0x7f0000000880)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000d80)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0xc, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x4)
close(r9)

15.373663084s ago: executing program 2 (id=2553):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x7ffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="f40001faffffffffffffff0000000000dc8b0000ad6e911b51818462b4", 0x1d}, {&(0x7f0000000300)="085834a04da1cfadbfa29c", 0xb}], 0x2}, 0x30040000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x19, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xdf, &(0x7f0000000340)=""/223, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0xa, 0xe14, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, r0, 0x1], &(0x7f00000004c0)=[{0x3, 0x3, 0x2, 0xa}, {0x3, 0x3, 0x5, 0x2}, {0x4, 0x4, 0x7, 0x5}], 0x10, 0x6}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000009c0)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async, rerun: 32)
r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
write$cgroup_subtree(r2, &(0x7f00000011c0)=ANY=[], 0x33fe0) (async, rerun: 32)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa900, 0x0, 0x0, 0x0, 0x80000000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x1e00, 0x55, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0xf, 0xff, 0x6016ed86}, 0x10, 0x3bb2, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x3, 0x3}, {0x4, 0x3, 0xd, 0x4}], 0x10, 0xfffffffa}, 0x94) (async, rerun: 32)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0xc, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(r5, &(0x7f0000000a00)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r4, 0x0, 0x1, 0x5, &(0x7f0000000a80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000b00), <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@map=r6, r4, 0xf, 0x20, 0x0, @void, @void, @void, @value, r7}, 0x20) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000bc0), 0x0)
close(r8)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d40)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000dc0)={0x2, <r10=>0x0}, 0x8)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000e00)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000e40)={r11, r9, 0x0, r8}, 0x10) (async, rerun: 32)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000ff030002000000f003000000850001000000950000fa000000800000"], &(0x7f0000000ec0)='syzkaller\x00', 0xa962, 0xb6, &(0x7f0000000f00)=""/182, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x1, 0x1, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001000)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000001040)=[{0x1, 0x3, 0x9}, {0x4, 0x3, 0xd, 0x1}, {0x5, 0x1, 0x0, 0x4}], 0x10, 0x3ff}, 0x94) (rerun: 32)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@map=r8, r1, 0x24, 0xc, r3, @void, @value=r12, @void, @void, r7}, 0x20)

14.890504176s ago: executing program 2 (id=2555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1, 0xb, &(0x7f00000017c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xc, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000002a80)='syzkaller\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000002ac0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000002b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002bc0)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000002c40)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0xe, 0x0, &(0x7f0000001900)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x116da, 0x4, 0x98, 0x1, 0x2, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001c40)={&(0x7f0000001a80)="190a1904a071244c32a5fa5e6a3a71bebbd5a69909bf611546174f06461ff44b2faca6a0dcfed624f96121afb87b03adb20b00568e9ce728ca4fefc273a89dae8457dc1d42ca5bd9e39a5fcc9f93e7d36c7c59c05b8790f618f74fad60314948da9accd0ad3794501cba92aeb13a097d9b731ddfed10bb409bd90e63bdb62333051a5a145a774f1ab5a9efb71fda8dedbbc259", &(0x7f0000001b40)=""/86, &(0x7f0000001bc0)="8631494ecf563f0480285076d020f8491fee655c5de4e87783d92beb", &(0x7f0000001c00)="e854ffede5e08a8205e6575c73d4e99e973cd65c6ad2bd121193", 0x3ff, r0, 0x4}, 0x38)
socketpair(0x22, 0x2, 0x24, &(0x7f0000000340))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000400), 0x4)
sendmsg$unix(r6, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/112, 0x70}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001640), 0xfffffffffffffe89}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000000), &(0x7f0000000380)=r5}, 0x20)

13.875535611s ago: executing program 2 (id=2560):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002fc0)={0x7, 0xa, &(0x7f0000003080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000003100)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000600000001000013040000000000000107000000020800000030005f305f5f00"], 0x0, 0x38, 0x0, 0x1, 0xd2f5}, 0x28)
r3 = socket$kcm(0x2b, 0x6, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000280), 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001ac0)={<r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001cc0)="b49159001c5aee02d0c7a99264caa890ce72d1c110e57f72d4c19a99f2047862a851212895e1e3cc813639b69ba407935afc89fec39093d4ae63fc00e9a2baf5df0153482451dc348da53e7b3aceaefb5166faff6f9da216c4f1d05716eb95d57806be55091a9fd4c1bb028418951e730cabed25200c618a4a536a3c8c2cd1ef44dbb966f89b6b738033d257f045a55bc77dd125", 0x94}, {&(0x7f0000001d80)="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", 0x1000}], 0x2, &(0x7f0000002dc0)}, 0x891)
mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff)
write$cgroup_int(r1, &(0x7f0000000100), 0x1001)
r6 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/233, 0xe9}, {&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000001780)=""/211, 0xd3}, {&(0x7f0000001880)=""/210, 0xd2}], 0x5}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x14, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000002e80)={r7}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="02a08100020000000100f8ff0000000000000000e51c0d8b28fc9dfa2357100f819332227ef0e01c26834e3ef7359b0301ba4efcae4cd8ccdc4ea14da4b6b33b5b4921f8923c5711f039fc4d8f905b2e9fb580f584d57348f4b996e695f3ed3319182625000000008d48176a538dc378539aaa121337c41cd6608d515ab71f2f0d3a22532cacf43e734a65446bfc2b5c5b423754b2fb9d34c9d9a6142f990732c3d88fbfc1a6f2e31837bc78503289ae8e3b27efc7071b687782bd1689c55fa0256e33d5de190f83", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000002000000040000000200"/28], 0x50)

12.936565404s ago: executing program 2 (id=2567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdir(&(0x7f0000000100)='./cgroup/../file0\x00', 0xb4)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000540)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000580)=0x5, 0x12)
close(r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94)
close(0x3)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000400)=r9, 0x1c)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f00000004c0)=r10, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x0, 0xfe}]})

9.521319477s ago: executing program 1 (id=2580):
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0x18, 0x800, 0x3, &(0x7f0000000300))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000007c0)={[{0x2d, 'devices'}, {0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2d, 'perf_event'}]}, 0x2a)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7}, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r8, &(0x7f0000000840), 0x2, 0x0)
close(0x3)

8.912476132s ago: executing program 1 (id=2583):
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xf7fff2f1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240)=0x2, &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000300)}, 0x20)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0)
close(r2)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f00000007c0)={0x2, 0x6, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c3793624", 0x54}, {0x0, 0x11}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='GPL\x00'}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x5, 0x252, &(0x7f0000001680)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001800)={@map=r8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000001840)=ANY=[@ANYRES8=r5], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x4, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="180200000800000000000000000000008500000053000000850000005000529f55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000001a00)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x5, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001b80)='GPL\x00'}, 0x90)
close(0x3)

8.537472041s ago: executing program 1 (id=2586):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x6, &(0x7f00000007c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000800)='GPL\x00', 0x5, 0x43, &(0x7f0000001080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

8.213383609s ago: executing program 1 (id=2589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x2000000000000216, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000c40)={r4, 0x0, &(0x7f0000000c80)=""/153}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xc, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r8}, &(0x7f00000010c0), &(0x7f0000001100)=r5}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r8}, &(0x7f00000010c0), &(0x7f0000001100)=r5}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x10, &(0x7f0000001200)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000012c0)=r9, 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000012c0)=r9, 0x4)
sendmsg$inet(r7, &(0x7f0000001300)={0x0, 0xfffffffffffffec3, 0x0}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r10=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
socket$kcm(0x2, 0x5, 0x84) (async)
r11 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r12=>0xffffffffffffffff})
recvmsg$unix(r12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
recvmsg$unix(r12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(r13, &(0x7f0000000780)={&(0x7f00000007c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80, 0x0}, 0x40010)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r3)
setsockopt$sock_attach_bpf(r11, 0x84, 0x64, &(0x7f0000000840)=r13, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xa55}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xfffff800}, @jmp={0x5, 0x1, 0xb, 0x4, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffb, 0x8d, &(0x7f0000000540)=""/141, 0x41100, 0x8, '\x00', 0x0, 0x17, r13, 0x8, &(0x7f0000000880)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x81, 0xffff}, 0x10, 0x1a758, r2, 0x9, &(0x7f0000000900)=[0xffffffffffffffff, r1], &(0x7f0000000940)=[{0x4, 0x4, 0x8, 0x847cab6f0485f77d}, {0x0, 0x3, 0x4, 0x1}, {0x4, 0x4, 0xf, 0x5}, {0x1, 0x2, 0x1, 0x3}, {0x4, 0x5, 0x1}, {0x4, 0x3, 0x3, 0x7}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x1, 0xb, 0x1}, {0x2, 0x4, 0x2, 0x8}], 0x10, 0x5}, 0x94)
r14 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

7.184976034s ago: executing program 1 (id=2593):
r0 = syz_clone(0xc0900600, &(0x7f0000000000)="c7099552ef450ad9d511a9530cd8d05345c21bc37c1c154207420fb4426e564763fb8923e11245b59556834935c2d0227f9ee6ed108566ba2ca7498a47e95c6abe97ddaa7d88972bcb5792195f88b5b2fc8a24cc5a78", 0x56, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="367bda45bc9ff6da4fe79f35a42f7c1f1b110003a603732e049707f2d97353c53469518f8c4a6a8cad10627f02be97")
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x40, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x4000, 0x7, 0x80000000, 0x7, 0x3, 0xcf4, 0x3, 0x0, 0x10000, 0x0, 0xfd8f}, r0, 0x10, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x8, 0x1, 0x9, 0x0, 0x7, 0x201, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x6, 0x7}, 0x1000e1, 0xd, 0x3, 0x5, 0x0, 0x3ba, 0x48, 0x0, 0x80}, r0, 0xf, r1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@arena={0x21, 0x0, 0x0, 0xd, 0x400, 0xffffffffffffffff, 0x9423, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f0000000300)="2bf15ad5156cf15f7a8def6a4c2ce99f2d07fdeafbd5eb60f9616da9f35b503d4bbdcdc9a1d84e0703163fb7d2369b8150006f6e862a22417ddc4f2890d26636827c5faef070f09933eb853297e9f6c7736f3bc7d4ed100aeb6f55f42e8f1b4740c43385346bf67d75c0c3871be30d46773b2f42cdfbb16da30044fb3549e283e822edf41cf02eb22f2392db1065e23bdf6720e3e51494cffb09f81611bb13d9d1ea0b6d490d9b82c44e17756e4b241c", &(0x7f00000003c0)=""/48, 0x4}, 0x20) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000440)="b1f0d17e90a12c5063a04099844cd75c0284e7e61b1a", &(0x7f0000000480)=""/4096, &(0x7f0000001480)="fc2d6a23ca4d0aa1497824349dee16c1adb15cd26a28122aef0d36ba506c9e1e991770fc0d293a6dd862ab02959ce4fd9e9e25c564312338ca2a8e210e05d0781b04c8d9d2ca9c8d2abc33a888b14f4fb1c5faf9c450c8c9b5cfc4", &(0x7f0000001500)="76b782f94fca891287d25545806fe303f89b6ac00b52db8678b83b56264e82808e5b8b280fa06ceb7a3dc1c361ccc37dd269c9ad6257f7c1373ef310adadb29ebe0b2c07c2dda2f5d13a3754c5998e62baabf5533a203c584738bcfd6a5c36d41fbda728e8a5a9eef9dac42f8e7845b71c9cd5a518e683c82b7a1bb1c801f4f7bd907e2ad21a2ac2de93a17c4e6233617b66cff4a2c898c4c266d7ed2777d780d7abe37703e7b69c1b7384882c78bd8f6949bdaddc690254e4867f7fa291821ab538c6c9d755032afbb1bc7c9a2660fbde16c21ccf33b1d395f1e4e8a56220c73dadf86e256f0d188eaf9a0c816bcc", 0x6, r3}, 0x38) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)=r3}, 0x20) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_ext={0x1c, 0x9, &(0x7f0000001740)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xf}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f00000017c0)='GPL\x00', 0x6, 0xd1, &(0x7f0000001800)=""/209, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0xd, 0x10001, 0x93bf0735}, 0x10, 0xbc49, 0xffffffffffffffff, 0x4, &(0x7f0000001980)=[r3, r3, r3, r3, r3], &(0x7f00000019c0)=[{0x5, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x7, 0x1}, {0x2, 0x2, 0xc, 0xd}, {0x0, 0x1, 0x6, 0x8}], 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001ac0)=r5}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xe, '\x00', 0x0, r2, 0x3, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r7, &(0x7f0000001bc0)="bd2840edc546562326643157c3cc40b222e0b4f8292a5f175abb4260a75541805aeebca7ea955d2e225661e557b4d66a30438841174ba9399921ca45e7e82913bb881088da0c4538feb781c30e698332f74ae04f546701e36745b24607655846bb0dcff5447bc932c66c1603da51b1f5f2269b2eff88561fecfaf9ea82decb4070d71e7c83e4c05f46fd277f6acc5d89160cfe62d26dcaa349e9a37f83c6f25a7b0f8189a3452e686789f93097bac843a78697e0df78c76ed75d61dd8b69c19736d366874536d3a059b16b4a46693f278751f85155f87789a78f0339d597ead0ecae10"}, 0x20) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001d00)={0x5, <r8=>0x0}, 0x8)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d40)=r8, 0x4) (async)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001dc0)=@o_path={&(0x7f0000001d80)='./file0\x00', 0x0, 0x4000, r1}, 0x18) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001fc0)={&(0x7f0000001e00)="b92ce2ccb69e68049bb51c29eb02be0c699703e2668de62f1468e96375d87dd21e7178bab47a56284693f7746285cbe6f2cc3cf51dd42e9938d54a04c06681743f91fdeca138576ddac7a9d6a200c18e6cd7f6450e6a3bd4d348cb0469e9e53738c833914ad3c28108447faf526d1e7b3ca871dc7979da7ede44df902b6df11d7e14972eabd6f71ca608f8a7533b0c82584bdf6ea7569ec48c0c34457b4168992510", &(0x7f0000001ec0)=""/127, &(0x7f0000001f40)="74e2958db6ee4a4dc4", &(0x7f0000001f80)="95eb199d4f375762babf8d870ec2fee05a01ea09aa6c1a8b59ef9529d317d559253496185e9988644b412139fe39f5e77e1d55bec396", 0xd6d, r4}, 0x38) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) (async)
r12 = getpid()
r13 = socket$kcm(0x29, 0x1, 0x0) (async)
r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000002140)='./file0\x00', 0x0, 0x4000, r1}, 0x18) (async)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r7, 0x839b, '\x00', 0x0, r9, 0x5, 0x4, 0x3}, 0x50)
sendmsg$unix(r11, &(0x7f0000002380)={&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002100)=[{&(0x7f00000020c0)="744062dd60c8cabd3a5baffa1e5ec1f4e08ef97069f1bd444080441fcc5531809839df0391", 0x25}], 0x1, &(0x7f0000002240)=[@rights={{0x28, 0x1, 0x1, [r4, r1, r1, r5, r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee01}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r13, r1, r1, r14]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r9, r7]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r4, r2, r3, r10, r5, r6, r15, r6, r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r9, r3, r6]}}], 0x128, 0x4000800}, 0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff}) (async)
r18 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r18, 0x89e2, &(0x7f0000002400)={r11})
close(r17) (async)
syz_open_procfs$namespace(r12, &(0x7f0000002440)='ns/user\x00') (async)
close(r14) (async)
r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x0, r16}, 0x18) (async)
r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', 0x0, 0x8, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x15, &(0x7f0000002500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @exit, @ldst={0x0, 0x3, 0x3, 0x9, 0x9, 0x1, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000025c0)='GPL\x00', 0xf7, 0x0, &(0x7f0000002600), 0x0, 0x50, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002640)={0x2, 0x10, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002700)=[r20], &(0x7f0000002740)=[{0x5, 0x4, 0x5, 0x7}, {0x5, 0x1, 0x10, 0xa}, {0x3, 0x1, 0xa, 0x2}, {0x4, 0x2, 0x3, 0x3}, {0x2, 0x5, 0xe, 0x8}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0x9}, 0x94)

6.315258706s ago: executing program 0 (id=2600):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4801})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xd, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x6, 0x3, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000005c0)='syzkaller\x00', 0x400, 0xf2, &(0x7f0000000600)=""/242, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000700)=[{0x1, 0x4, 0x5, 0xc}, {0x3, 0x2, 0x10, 0x4}, {0x0, 0x3, 0x7, 0xb}, {0x1, 0x4, 0x10, 0x7}]}, 0x94)
r7 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x80000001, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r7], 0x20)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x200200, 0x0)
sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000940)="b2bfdd8d858ddfb6cc1b82e6676ff4d29432183e8b16fba3f69dbe4fb30d06001bbfdf7723d92522b4a1328a9dd68abbe6741af25917661686d0", 0x3a}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r2, r2, r2]}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r5, r1, r6, r7, r2, r1, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xa0, 0x14}, 0x0)
sendmsg$unix(r2, &(0x7f0000000a40)={&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000b80)="e44faec25a5cc33d9937b65117b25d29c7036059a4a0ec7d1d48eaf67e4a066e260fe176c02860793c8346b4aaf36806edf8c72de1f0e6ab9f56476d8c445e72e5eb4b195bbf078c417b61d2272b24eb6aef83c420b9b84462d39fd84572737757754cebe71349bdb955713090bca1c705f5d1e2a7a77c80f66d16b0a3330c6db028b3012a4ae8b922c0726c6ede0c32a2230b6698d5bc3cb46b878c09378394a700dcb5c9f9db377e39643178e01726048ab8ad5189279b9c06250641f6edd1af325960918a", 0xc6}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="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", 0x112}, {&(0x7f0000000e00)="6c6fd4128205767a5a94376f0cb3761055d7b0b4e25571cc61cb7b89c7d12342e31ff7ebf8ef65dcbe72f1ad1d8b7056a5824aaf1733e4bdac8836288708d208eea4", 0x42}, {&(0x7f0000000e80)="2707ec5757a6111103c55e5fc63eb9e29eecc2dd3f45f6ee607b989b1a49f3df5fd3debeeb77099ca25c9fc9a4db51994dd795d841f69b7dc589e179cbba193ae2bf139fc236b3efd8d88a05a8780f78a8800a255b1d49ffff32e270b5107a0097dcab2e02501f5481b9fe8eb1b677a546fe8f238aa8801d60a1b45eac9d813a643205e43d54d4558bbcc6c8ce235950673473275939510585a335bac63d67b9ef6fb6a1261cc3d64c2a8cce90a9fad81e03137239adc82de62a30", 0xbb}, {&(0x7f0000002980)="ab19ba358f909a741fa346defb9cc93211acbabbc8910df260360f13cfb5f6c32dd12a40684aacd2e9afd6b299020c7f70277b361986b2daf79a15539e389568f54f6d7a5249f0e6a80e7354ec63adac65543689d913827c917b00878a7f187e831bb53ec4084fb3bc4e63ad667fae6407ad34d0046f7a8d3f0e92733f4670205c48066487380b4e634ba6788a0bc3b3733bfb552b817dcf685513e33f22db65b4c4e4300d135cdfb1f1ffdbe7ab699048f93afb0e230f197723df39675018d85214ac6c04d01a777a2f50ba0145e9b79b81d482b69d72bad3b7c6ad649576526dcdf388aa22ee52122ff0eeb1344050239e617dc07fbde67b103ebee3fad00b4b065f9d1074d85153350760ffe6dc529fa51bc87f2f350275c596f4fa657ab3f477b1af1060d6da44631bcd8795ee5b0d9a995500944d4f74bbea947bb0cef14f8bf8119555072dedb7605f664783c9c1776163a419a2afddd848b6c05b37c02f6acbb1e46e4bf28844f211dc612fcd61d88d829f9083d97a8d71a59185769a5cf713118f766028aacb7fe818c19120378f2dc310106e34d66c1eae662fe4d66f9b43e7ac83288ee06b1b71420561954753b0a70e4d5853cd126c987602f55d6fa7cc19bafa9b18b519807e020b2c69719feb414445c7b6f53fb93234cc0002f27e40e72278d425aaac8f50b30d0d85ca164efead053f37521161d25e6645ba51ba7a0cabc2cfdc3afcca3d4d94b048b19204eec19a1d586eb4d6bbbfab845e8d03d820adbd84095700825cbcc888d4045bab25d76a9a27dfca0650874dd35615fd094ff627b11125c1e677630b5ac9ca6e8e0b83cf03cf5ad3e2908fe0272fe37cacf1f43e8dc15224b64352898e496de9269343f160ab299758c2c6d3255d9f8b18f5cd4b626c8851400ba79d05e7c2d72e2c97425158c2c01e1e20ae2a8670a40a7f0d00f6164349c00a1114dc492aa5241cfb2e00ba0ae1f3a5f15b84e4b1fd9175af5e0015a131c0d2172466fc0ba477d1883587da27488dc0c5732b88b27803727a50942a029bb8433df880733eeed36c699f483c7bbd8fce738e72c249af475b110ae4f12851ec497ec8f78db38bb68930bbdb47001936318d656c025c5dff09bfdc129788bf6ed800a8631fdf62868ebe1f7758c11daee6f1321af6a1f8e35547c5bcac56cfb8b885c79ef6f4777acaceb30d2d216480c9713316a6d0290c9e7f5c2056046133e1776c33c6d4fe452b212a410386e818b0a8cd3d82c01e9937f419cba50f4464df57b52f33f738e0198a1b9ad72873e5bcbc768f5472bae9c3829f6f3e10231f8465a478ecfdd108ae98afafd4ee8bff816649d50bb4f657098a462188fefcf2d0072128e5bd3e80300532377aa313d651588ebec3f41eb50748e85d32a6a731a68256936318df3c1382e9856a97204a1e7321cfef0f81d57ff0912e28a8972fd2d4d423b916f95655a86a5eb20495ea624c7326663480a47184cbd491608198383cb9cfdea2479f444f869208d741f1a3a500ab569d1f49a80792452204506e61f3ffb7e50deff6915a87fd0fbdb7a2171ecb81f0b16f84268c9e904829eba1cd5d227bc839d418cd399cb58f0bdb1df28dfccac1caac1ff2e9a53498040945d57931a142de6b4470a18e41ab6f1695ec2d2a0c44300088d7413b2cc0980eeb49c8164059c201c56c92856eca11f3b3ae658cd35b68aac3fded267002f8a4cf520af59242f5db899afbebf24a2057beb9a32d7ec871d5344d7c689fc0cce31f7eef5d76809b224b4d49994120f2c4c55154addd0308225e4a1479ffc8b4572b5b33506bfa95349ed1adf04b39099b3d202e59b8d4b7a86f06b3a98000e3c4670287b370310bac522da60ca6fbdaee415dab68418156a6ba1a94e3b195a38f852f9b2574ea44708cb3484fcfc0df941fe1f065c20195544a089c3f792661aa0120df1558357c68f9b4e268e591615f1c2e33ca24d72538ded8aa4c343d4e7ab31d9bf11ca923503bde1260fef5b6b2ef36079428423ac1c08b365e3b977b28ce1ab3cc2100bcabcb568b4f684e2419d75c7cdfbd1083cea045c9b2dc732b45d42b1a9953a75aaed6e4272e29f7eb11557820487752618e127db4c690018e8536166fd260750052efbe68163fc733b1a0dbf57eb1e93b84e5cdecb8d8514311492af5cc99dbd511d1f7f9c44dee54b4d891a5085b20f0ed3d2818ce784a36fc6b4441563f751337d87438eb242313b916bf914676644fc1b39a16033f4ca30b94c3b43fcb596192ba3d031a4d48b6edaef9516b15846b1af07c44777877570e66f4b5141fd8fbeba9f372faf17dbb4b0c4d94057c8db621d97d80b6fa4612fa9859e803a8c71fc57c2d5e3d540c7f401d581e4748b9c96df84270578302462514e236bf7a353230531b12336df84f1e3fede635bdd26f40d157f51c979239c6e6357ef8a7f6e59b9cdae27e41e84e48386227e45a1d5379a0bf8a5bc72d0030e6cfa9c28a55bea5ffb40cf6720017237164417b179076892930fa95d6d8d61efa68f235d774ea00f178535b83ea44f7c0afb7c9280285980ebe1d6ac646932306e386384b51fb7a8838130a1999a1f5b50f72bf1fb04b488555dcd8abf0063338051d07c711879b0efc3457233111685de9719143d37cbfdcceb603e301a0e149e249bc65abb809ec9d6c90b08113942f944e6ee9d7806af15d9cf2fad542224d940004368739084e808a27b2d534535844c12a84fe6dd9df111010d2f89c0570b97d93318c2a552040924018629765060548f8c00f897c38ef5b8b59cea2513e1f033e6a393b68f5b3c0daadf9f256f51affa3d0cd2fc373472616bc90620166d354438e7e6d8e57b32088517ee0f067ed63d104c4177f303513478dee28e53e2431627bd33b41dfb48063e3fbf1ae7b7747b0455b438a45ba2a30cfaf2f1922da480b7082b05c7d36ed4662b158e99b272bfe8aacdf0ef83dffa40ba71fd80b24e1d23420023b06ee6b1c9fdea2a60e2d83cef002956d69fbb50ca867435b9352b50a6d19e44db7d69204f137b57973efeba5dd5598f632046ce5dbe77d7fd970eb8de4fc0e59df2a48c1160e8f58e2deda76688648eda36484c97455e0c9170c848d84e5912716e32c5e5888e54bfec12493179ca71bd165b70ab86f71fd5abc1968d1bbfb3370abe94d09141aaf9ed3247fcc215b15e67569bb21bff38bb0dd1da76aef92abf1d2847b223bd17f59851a9cfd57ec66d1c80aa38b97a3f5d39dadde0736f56b9b43688040dd0c68d3245aee35eb140d99d4d017f61dc1d8e3fa70eea62bf7e06527386c181df8677c4abfa328c4fc501b0792b57463e13eb844e9b6544951dfc2043372a423cb903d4d9ff963aba92c6c018342f576fd9d0f01635b43db0286e5bc5739f6ed5e030a4a1cdd0cf3b2f30cd441594b855abc5cfa2736f6d9cf202f460e857f7cdc338e4b300a3e2f4594aebc02f3b11c41c75dffe6a188f02257ead7bca7fa85bd3db2889ec86100a56ef6cde60f60f86a2f2d487e893ecfa693b83ef6688ccb04a092a82a023f5126ed900d9ee4224b3767439ed75b070629a995709d1c9056134bd07207a1a6d7c972bd01e25773bf404138d7184b2928ad0ca66408230622fdaafa1b956dee90b32d5af6cfc24fe32e4b88d663c528715309c159af7e10e974b6f2e29d40bbd6ee6b278b3ef4fc7b1f5e3bd08e4d22965354043c8fe3335554482c1c16ee7b6cc88214d54cc060cd090ab56eaf1bcd9fec88e1ec64673de724791456b1a9b68766484110ed26e8260680de52558c60bc4f2f29fa1aa40aa36ef6e488f8b2e2d6e7c85d2eea1a2d9e55e858701d652a416b4b821ad8a2d253c350f4e1ced6a31d5d8b539fe4640f3ee0509068930ce1454e5c4589d2d8471572dd1e18ee5bdfd7c6d9982524d14f0a4ade117e360eff4eab0518d8ceb4f2b1a419461e1540e250f3cd0e193a1171711f2b5854ff8b8738ffdf56e9603bdf590a3f035d6b2fe8d1437e725e6fc0937720576714846629e9c424d94344d8d76992cc1eac5530e683863a7f2b15d03d047424930f8a07304e82df3dab066130cdfa79e3556d8ba50efc251c0edf1a7ad74a27e6d9fa1d2570d763c57d568c9e6c36dc2f0f5ce506e1ac855db2035b84ffbf0873844458d4ad67cb70797c0644e08d83cb9ef67e515c0d6a36bcaf8f08ece2273acd3f4dfb34b5aacc90a18f3ef92e9235f8698110d36ed74d065cce18d0f0d252583c12b2a6a44248aad8da526d41ea9bac45a0ff93395b3086e21d5da1d2cfd7464fe535aff8f51fa7aba34e2b3dd8294188753e44e25ac11acc7fd1347901192cbf9d3005a8dda4cac135962eaed2b3f71c608c2da6f6ad3cf9c0334a89388881e6aaff8f65fcbd68c6fc8c9717b2009117c3b850d75431782867240ed1d66bf5085d36102d1cab1c47a627514f45969bb131dff9c13fe120027a20710f3350fca196b4521ba3892532e53d778245437b47e8aed99e315a9440a66fccb7beb293d484575aea6ddf0c301444f8b5b1eb10c5002ec3188e57ae6e7881633fc85359ec1814a4b111a6c69fe3e45c350e4351bbbabac4b6ca801851015c4703e400e5133620fc5c4fc4b26e9ab53d4904290301f39918eee65235d1c10059ee203df039a65c4ec362554b2bedc0cc97b657d0f831bb1c7756240ac2d841a313964847a6b3b7aa9065749abd9ed295856ee2e70363bb8d90fb7d882fd073777f3f3a4703fea6da8aec7f7f1540d5a527a85076ddc681c568fd22e13a1506d675283036a017116455ef2d002c1a18c82818f58136ebad2add3b35e52db817477ca89995273969ded91729425be2d32bb11291bc2b8a67f8d18d01f9e6c55c5dcfe959c7e271d272fd77759e6d17100299d66b08c3ba08dd946999f4dd6e18b91d49c17517f54fb0a3563a5e109e467cdc231ec0e5912611c9cd2086e01abb2e831ce83d6fe12a91277b47d6a5ef6e922333f35dcb1a17cc82b901c70df29a7445bc896e5bd5a101e45f5fce3c15a18edcb9be336f8a036ab9f91e05da33daa2f3d284971ef36571c644e6c59900d27036488eb2c8b7872582de6cd169d66ec368d7c61ff9b50a60cfd8a65663823eb5621aeb80e70292df36bb72629c72e2a875ffee9f5b127579ba88a4cd84884144af9f6ab9acdf5bf3be170afa7ffe4f91ca4144b51f66f056088106f71ac4e7c619309fb6f6b3660fd4865422028f2c5c63399478662a19ccf48ef6c8f5735c740fcf7b718a9ac1a9c72ff09d069125e2d905cc7466faca35f94085e09a05bf68feb3e572a6f6ee10ef84763cd8301056b02d1fbf5799e341b553f3526c1d923d74c69730261dbac8c38210877d14bc2551d6c6c7e22274023a61c631dc52eb502630cc4e6f8a98ba8f3b0ece47bd78e0573013aa4c842eb47c60bfbee8bf8f10b136244051d8b71b3b465c38c6f547d554362ea2e8e8b3e3744690da6c1e14b7c891dac71293cef846220e771764db2cd5a00b2526445155428b079e505d3f7a5ecccfe6d1172feccfdf9267a6c62c54daf8e7106c638aec5932b2c8985293d4ffad294818dbf38151860a36c78e3b66055477a2b59c8df0fb53066962d8355404b3af723ee8f082ca167031defb4ad29c40061c889cfe1799f52f1db81e594eface86025f1424a8712f25b399b24c3b1098490cab10d5c72819c7d11fac5bc16841e94a49bf91b5cfb74cda18c87a6127cd8e7aa1f890b74039217d9f8e1756fcbcdf8a82eaff09", 0x1000}, {&(0x7f0000003980)="a49ff40c099ae7a6e444be3a3b10ca991e6d8e3a550375f1f83b7296f8829de6a0d8a3ee132c9a7493217b69df97831d022834886b094794f9bc00b5369d750d9ecd0693597451ff369cb394b258a6f14a8cb9f2b8e6", 0x56}], 0x7, 0x0, 0x0, 0x1}, 0x40095)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0)
recvmsg(r10, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001980)=""/4096, 0x22fe0}, {0x0, 0xfffffd37}], 0x2}, 0x0)

5.74377116s ago: executing program 0 (id=2603):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000002a00)='GPL\x00'}, 0x62)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000002ac0)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
socket$kcm(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000013c0)={r2, &(0x7f0000001400), &(0x7f0000001440)=""/221}, 0x20)
socket$kcm(0x10, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, <r6=>0xffffffffffffffff}, 0x4) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x9, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r0, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000080)}}, 0x10) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x6, [@enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x4a584e417a1d231, [{0x7, 0xc68}, {0x6, 0x0, 0x41404388}, {0x1, 0xc9}, {0x4, 0x1, 0x1}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x8, 0x3}, {0x9, 0x2}]}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @fwd={0x9}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x0]}}, &(0x7f0000001040)=""/183, 0xd2, 0xb7, 0x1, 0x2, 0x10000, @value=r3}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_tracing={0x1a, 0x22, &(0x7f0000001640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="000000000700000034480000f0ffffff185b000006000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018470000ffffffff0000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000200000018160000", @ANYRESOCT, @ANYRES32], &(0x7f0000000b40)='GPL\x00', 0x401, 0xca, &(0x7f0000000b80)=""/202, 0x41000, 0x1, '\x00', r8, 0x1c, r9, 0x8, &(0x7f0000001140)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x0, 0x8, 0x0, 0xa25}, 0x10, 0x1ad66, r0, 0x10000000000001db, &(0x7f00000011c0), &(0x7f0000001200)=[{0x0, 0x4, 0x10, 0x4}, {0x1, 0x2, 0x10, 0x2}], 0x10, 0x1ff}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r10 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5ab6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12) (async)
recvmsg$unix(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4)

5.552311804s ago: executing program 3 (id=2605):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
close(0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000001c00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000001c00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000001c80), 0x0)
perf_event_open(&(0x7f0000001cc0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2) (async)
close(r2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_tracing={0x1a, 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_tracing={0x1a, 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xf, 0x4, 0x4, 0x81}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0xe, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="17c7bb3c962586dc472a9efa7e6c5aec1e8f41647cb19a5ee541ac526e", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r3}, &(0x7f0000001840), &(0x7f0000001880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x3, 0x16, &(0x7f0000001a40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94)
r5 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0xffffff2d, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0xffffff2d, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x6000, &(0x7f0000001900)=[{&(0x7f0000001940)='U', 0xa00120}], 0x1}, 0x3) (async)
sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x6000, &(0x7f0000001900)=[{&(0x7f0000001940)='U', 0xa00120}], 0x1}, 0x3)

2.611761346s ago: executing program 3 (id=2606):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2000})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000200), 0x43)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xf, 0x2, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000800100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x94)
sendmsg$inet(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xffff, 0x1, 0x95, 0x40, 0xffffffffffffffff, 0x98, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xb}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000), 0x10}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r5, 0x0, 0xe, 0x0, &(0x7f0000001380)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000013c0)=ANY=[], 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r5, 0x0, 0xb0, 0x1000, &(0x7f0000001480)="db56539d9e812f839bc74b999d09794de9062a2c1cbdf42f83f4b92a9babd886c990b10d7e4965108d5c25d117b788548e6db3bac34f54dc284316c54c9b9064798c12f6847e1917b66fe8ef4f8fd6e9d8df2fcef1b8fc33d53c94cebfaf6b79eeffb5635db5825142ed230ecfb82ad3b887d6b04c332bad7c4c3ffcccae794bb50236cfda4fa061399507bf90f8c4699275773b88ff05680d87154f918cfba5b74565e661e43d9ed48e96d91ecf6a6f", &(0x7f0000001540)=""/4096, 0x7f, 0x0, 0x73, 0x0, &(0x7f0000002540)="035337b893c0d77a40f572badf266dae17cada513ab6dc4adb933d7d7c8c54373180c670be7c344074ce97843cf54d5cc60f6325e47fb715f9998312c18cb21e0967f0917318611ef870c54f8fc66fc1ceb2a7894f6fcfcfff450586118c5a6b53e72899b29bb7952c6c9d93fb5c7d7a1ddf31", &(0x7f00000025c0), 0x2, 0x0, 0xd}, 0x50)
sendmsg$kcm(r4, &(0x7f0000002600)={0x0, 0xfffffffe, &(0x7f0000002640)=[{&(0x7f0000002680)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="0d000000875a0000040000000300000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x2, r9}, 0x38)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002780)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000027c0)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002800))
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002840))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002880)=@o_path={&(0x7f00000028c0)='./cgroup/file0\x00', 0x0, 0x4010, r10}, 0x18)
perf_event_open(&(0x7f0000002900)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20009, 0x2, @perf_bp={0x0, 0x13}, 0x18001, 0x0, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)

1.525777573s ago: executing program 0 (id=2607):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c085)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$kcm(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080)

1.405733946s ago: executing program 3 (id=2608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x18, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
getpid()

1.384681106s ago: executing program 0 (id=2609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000140)={'wlan1\x00', @random="010000000700"})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000ac0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94)
close(r0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000b80)=@generic={0x0, r7}, 0x18)
close(0x3)

1.24334205s ago: executing program 3 (id=2610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000f80)={&(0x7f0000001040)=@tipc=@id, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="d5", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/49, 0x31}], 0x1, &(0x7f0000001200)=""/45, 0x2d}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000007f781850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x11, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r8, 0x0, 0xe, 0x0, &(0x7f0000000f00)="87585d85da215305627e5695c108", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1f, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x401c5820, &(0x7f00000015c0)=0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x2, 0x5, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb23b, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}]}, &(0x7f0000001280)='GPL\x00', 0x3, 0x6c, &(0x7f00000012c0)=""/108, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x30, r0, 0x8, &(0x7f0000001340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0xb, 0x9, 0x6}, 0x10, 0x0, r3, 0x2, &(0x7f00000013c0)=[r2, r5, r5], &(0x7f0000001400)=[{0x3, 0x3, 0x8, 0x8}, {0x1, 0x3, 0x0, 0xc}], 0x10, 0x2d4}, 0x94)
r10 = perf_event_open(&(0x7f0000000340)={0x6, 0x80, 0x6, 0x81, 0x30, 0x28, 0x0, 0x2, 0x4412, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000004c0), 0x1}, 0x8060, 0x1, 0x8, 0x9, 0x1, 0x2e94, 0x4, 0x0, 0x1, 0x0, 0xeb2b}, 0x0, 0x6, r4, 0x0)
sendmsg$kcm(r6, &(0x7f0000000a80)={&(0x7f00000005c0)=@llc={0x1a, 0x102, 0xff, 0x81, 0x0, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="70a7d881238004efede04bc7dd8b7fc4e5707631bb5995ed361c9131ad2fbc5f96f3ba695501713a1f1a7b8f9656929fad2d2ab756d07913b473cb43813fee90eee6d6135b8adfde137207dab2aa1b67cd479e929a93b2113cd1f50ef87aa045c4dcf4eff4406494d95d6552789406cc3f06e7cc61e4727c7dab81f22f91d1920583305c452bc3f21660869272fe6c4d7d309b3ce03de40e6d4cfe117cb3781ffdd7ec9af6a38dd68df7316ed5daaf698678331a9e88da2f3efe16fe43cd6eb0ab896f9699e27661aae225bc9fdf4caed94eed8b52285716b483fcb781bc212d5860be", 0xe3}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x300}, 0x4)
perf_event_open(0x0, 0x0, 0x9, r10, 0xa)
r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_int(r5, &(0x7f0000000f40)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000580)='cpu~\'\'\t|\t')
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.145530102s ago: executing program 0 (id=2611):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0xa517c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xfc, 0x43a1bd76, 0x9, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0xffffffffffff06c6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x64, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000000, 0x1fff7ffe}, 0x0, 0x32, 0x43a1bd76, 0xd, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000600)={'bond_slave_0\x00', 0x800})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'dvmrp1\x00', 0x1})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f008db7fe5140"], 0x0, 0x34}, 0x20)
r5 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000007c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000000800)='GPL\x00', 0x2, 0xff06, &(0x7f0000000840)=""/195}, 0x48)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a80)={r8, &(0x7f0000000ac0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.009040585s ago: executing program 3 (id=2612):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002fc0)={0x7, 0xa, &(0x7f0000003080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000003100)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000600000001000013040000000000000107000000020800000030005f305f5f00"], 0x0, 0x38, 0x0, 0x1, 0xd2f5}, 0x28)
r3 = socket$kcm(0x2b, 0x6, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000280), 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001ac0)={<r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001cc0)="b49159001c5aee02d0c7a99264caa890ce72d1c110e57f72d4c19a99f2047862a851212895e1e3cc813639b69ba407935afc89fec39093d4ae63fc00e9a2baf5df0153482451dc348da53e7b3aceaefb5166faff6f9da216c4f1d05716eb95d57806be55091a9fd4c1bb028418951e730cabed25200c618a4a536a3c8c2cd1ef44dbb966f89b6b738033d257f045a55bc77dd125", 0x94}, {&(0x7f0000001d80)="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", 0x1000}], 0x2, &(0x7f0000002dc0)}, 0x891)
mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff)
r6 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003a40)=ANY=[], 0xfe33)
recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/233, 0xe9}, {&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000001780)=""/211, 0xd3}, {&(0x7f0000001880)=""/210, 0xd2}], 0x5}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x14, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000002e80)={r7}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="02a08100020000000100f8ff0000000000000000e51c0d8b28fc9dfa2357100f819332227ef0e01c26834e3ef7359b0301ba4efcae4cd8ccdc4ea14da4b6b33b5b4921f8923c5711f039fc4d8f905b2e9fb580f584d57348f4b996e695f3ed3319182625000000008d48176a538dc378539aaa121337c41cd6608d515ab71f2f0d3a22532cacf43e734a65446bfc2b5c5b423754b2fb9d34c9d9a6142f990732c3d88fbfc1a6f2e31837bc78503289ae8e3b27efc7071b687782bd1689c55fa0256e33d5de190f83", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000002000000040000000200"/28], 0x50)

268.362913ms ago: executing program 1 (id=2613):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x5, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd51, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084)

169.569736ms ago: executing program 0 (id=2614):
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f00000009c0)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000000a00)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000002180)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x10, 0x29, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="180800000000000000000000feffffff1848000000000000000000000020000018000000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000c000000009500007000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000000000000000000000000040000000010000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000200)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x38)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000880), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000002980), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r2}, 0x38)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8000c, 0x8}, 0x410, 0x2000001, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040), 0x3b)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58b322bca12ac4a00000009b553db72faae7d706f0b3f47edcf500000000000000000003000000006100"], &(0x7f0000000700)=""/143, 0x1b, 0x8f, 0x0, 0xffff8000, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000012954622c1bb6e89dc658ed3f7f07aec1f4df7bc4fa5f4c7db77a72fe108df1ec56ac69c81c1fead45d92b60f3675c29e101868a59f51da24aa3d530309c0dee78f7ab2ca240d97e3896c60300b7d1dee081fec5aa706be9ffbe5d1b6d6f2ac4eba82826d414272b6831e27c99aded001abd6b25fb89b64dfc1284a3c262a25a5ef792e4a15cf2a08d3e276137ff3f95326cec1497c", @ANYRES32=r2, @ANYBLOB="b6f4ffff00"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="01000000050000000100"/28], 0x50)
write$cgroup_int(r9, &(0x7f0000000040)=0x3ff, 0x12)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x163882, 0x0)

0s ago: executing program 3 (id=2615):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x280)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

te type 8 has an invalid length.
[  240.413648][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.897'.
[  240.430793][ T9211] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.898'.
[  240.461329][ T9215] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.898'.
[  240.531810][ T9217] netlink: 'syz.2.903': attribute type 29 has an invalid length.
[  240.540206][ T9217] netlink: 'syz.2.903': attribute type 29 has an invalid length.
[  240.549753][ T9217] netlink: 'syz.2.903': attribute type 29 has an invalid length.
[  240.732133][ T9219] can: request_module (can-proto-4) failed.
[  240.752979][ T9224] netlink: 'syz.2.905': attribute type 29 has an invalid length.
[  240.761056][ T9224] netlink: 'syz.2.905': attribute type 29 has an invalid length.
[  241.089856][ T9233] netlink: 'syz.2.908': attribute type 10 has an invalid length.
[  241.134784][ T9233] macvlan1: entered allmulticast mode
[  241.149422][ T9233] veth1_vlan: entered allmulticast mode
[  241.190653][ T9233] team0: Port device macvlan1 added
[  241.198036][ T9235] bridge0: port 2(ipvlan1) entered blocking state
[  241.207401][ T9235] bridge0: port 2(ipvlan1) entered disabled state
[  241.216443][ T9235] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  241.586866][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.368966][ T9248] bridge_slave_1: left allmulticast mode
[  242.376573][ T9248] bridge_slave_1: left promiscuous mode
[  242.383438][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.488987][ T9248] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  245.705981][ T5773] Bluetooth: hci2: unexpected event 0x0b length: 151 > 11
[  246.252305][ T9324] __nla_validate_parse: 6 callbacks suppressed
[  246.252321][ T9324] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.932'.
[  246.333906][ T9324] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  250.968494][ T9427] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.960'.
[  252.129690][ T9449] validate_nla: 4 callbacks suppressed
[  252.129707][ T9449] netlink: 'syz.1.967': attribute type 3 has an invalid length.
[  252.162742][ T9449] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.967'.
[  252.783706][ T9458] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  252.831448][ T9458] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  255.778437][ T9509] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  255.886951][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.893331][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  255.918893][ T9509] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  255.946319][ T9519] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  256.055679][ T9507] rxe_eth0 speed is unknown, defaulting to 1000
[  256.134711][ T9527] sit0: left promiscuous mode
[  256.461753][ T9535] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.993'.
[  256.496144][ T9538] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.994'.
[  257.136409][ T9546] netlink: 'syz.3.996': attribute type 2 has an invalid length.
[  257.194994][ T9547] netlink: 'syz.3.996': attribute type 2 has an invalid length.
[  257.410012][ T9553] rxe_eth0 speed is unknown, defaulting to 1000
[  257.548762][ T9556] netlink: 'syz.1.998': attribute type 3 has an invalid length.
[  257.574113][ T9556] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.998'.
[  257.894627][ T9561] netlink: 'syz.3.999': attribute type 1 has an invalid length.
[  257.912313][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'.
[  258.074344][ T9561] netlink: 'syz.3.999': attribute type 10 has an invalid length.
[  259.164638][ T9583] netlink: 'syz.1.1003': attribute type 15 has an invalid length.
[  259.184321][ T9583] netlink: 'syz.1.1003': attribute type 7 has an invalid length.
[  259.339195][ T9577] delete_channel: no stack
[  260.799770][ T9631] netlink: 'syz.0.1018': attribute type 10 has an invalid length.
[  260.831774][ T9631] bond0: (slave geneve0): Releasing backup interface
[  260.851131][ T9630] netlink: 'syz.1.1019': attribute type 39 has an invalid length.
[  262.844790][ T9692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1038'.
[  262.872441][ T9693] netlink: 'syz.2.1038': attribute type 9 has an invalid length.
[  262.893847][ T9693] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1038'.
[  264.328515][ T9713] netlink: 'syz.1.1048': attribute type 10 has an invalid length.
[  264.345338][ T9713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'.
[  264.843843][ T9740] netlink: 'syz.3.1055': attribute type 2 has an invalid length.
[  264.860763][ T9740] netlink: 'syz.3.1055': attribute type 3 has an invalid length.
[  264.887057][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1055'.
[  265.801871][ T9767] netlink: 'syz.3.1062': attribute type 39 has an invalid length.
[  265.935514][ T9767] hsr_slave_1 (unregistering): left promiscuous mode
[  266.470084][ T9792] netlink: 'syz.2.1067': attribute type 12 has an invalid length.
[  266.503143][ T9792] netlink: 'syz.2.1067': attribute type 15 has an invalid length.
[  268.005382][ T9839] netlink: 'syz.2.1080': attribute type 9 has an invalid length.
[  268.032343][ T9839] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1080'.
[  269.414510][ T9849] sit0: entered allmulticast mode
[  269.442542][ T9851] sit0: entered promiscuous mode
[  270.278664][ T9876] netlink: 'syz.1.1092': attribute type 10 has an invalid length.
[  270.293575][ T9876] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1092'.
[  270.304371][ T9876] hsr0: entered promiscuous mode
[  270.314251][ T9876] bridge0: port 2(hsr0) entered blocking state
[  270.321834][ T9876] bridge0: port 2(hsr0) entered disabled state
[  270.350977][ T9876] hsr0: entered allmulticast mode
[  270.374479][ T9876] hsr_slave_0: entered allmulticast mode
[  270.384025][ T9876] hsr_slave_1: entered allmulticast mode
[  270.451537][ T9876] bridge0: port 2(hsr0) entered blocking state
[  270.458326][ T9876] bridge0: port 2(hsr0) entered forwarding state
[  270.957645][ T9901] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.1097'.
[  271.091134][ T9903] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1097'.
[  271.170668][ T9903] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  271.221571][ T9898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1097'.
[  271.283664][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.492687][ T9904] netlink: 'syz.0.1096': attribute type 29 has an invalid length.
[  271.538464][ T9904] netlink: 'syz.0.1096': attribute type 29 has an invalid length.
[  271.591930][ T9910] netlink: 'syz.0.1096': attribute type 29 has an invalid length.
[  271.656150][ T9908] netlink: 539 bytes leftover after parsing attributes in process `syz.3.1106'.
[  271.696214][ T9891] rxe_eth0 speed is unknown, defaulting to 1000
[  273.025222][ T9947] rxe_eth0 speed is unknown, defaulting to 1000
[  273.204394][ T9954] netlink: 'syz.1.1114': attribute type 21 has an invalid length.
[  273.761377][ T9962] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1117'.
[  274.698627][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'.
[  274.712868][ T9987] netlink: 'syz.0.1123': attribute type 12 has an invalid length.
[  274.726441][ T9987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'.
[  275.088756][ T9986] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1124'.
[  275.671696][T10007] netlink: 'syz.3.1130': attribute type 21 has an invalid length.
[  275.710361][T10007] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1130'.
[  275.839133][T10007] bridge_slave_0: left allmulticast mode
[  275.875327][T10007] bridge_slave_0: left promiscuous mode
[  275.881253][T10007] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.078560][T10007] bond0: (slave bridge0): Releasing backup interface
[  277.959701][T10029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1135'.
[  278.027340][T10029] hsr_slave_0: left promiscuous mode
[  278.043069][T10029] hsr_slave_1: left promiscuous mode
[  278.924069][T10066] netlink: 'syz.1.1148': attribute type 27 has an invalid length.
[  278.979124][T10066] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1148'.
[  279.906047][T10082] FAULT_INJECTION: forcing a failure.
[  279.906047][T10082] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.934385][T10082] CPU: 1 PID: 10082 Comm: syz.3.1155 Not tainted syzkaller #0
[  279.941907][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  279.951990][T10082] Call Trace:
[  279.955291][T10082]  <TASK>
[  279.958246][T10082]  dump_stack_lvl+0x18c/0x250
[  279.964260][T10082]  ? show_regs_print_info+0x20/0x20
[  279.969480][T10082]  ? load_image+0x420/0x420
[  279.974002][T10082]  ? __lock_acquire+0x7eb0/0x7eb0
[  279.979032][T10082]  ? snprintf+0xe9/0x140
[  279.983285][T10082]  should_fail_ex+0x394/0x4c0
[  279.987982][T10082]  _copy_to_user+0x2f/0xa0
[  279.992401][T10082]  simple_read_from_buffer+0xe7/0x150
[  279.997788][T10082]  proc_fail_nth_read+0x1e8/0x260
[  280.002822][T10082]  ? proc_fault_inject_write+0x360/0x360
[  280.008465][T10082]  ? fsnotify_perm+0x271/0x5e0
[  280.013232][T10082]  ? proc_fault_inject_write+0x360/0x360
[  280.018873][T10082]  vfs_read+0x298/0x990
[  280.023035][T10082]  ? kernel_read+0x1e0/0x1e0
[  280.027636][T10082]  ? __fget_files+0x28/0x460
[  280.032226][T10082]  ? __fget_files+0x3fc/0x460
[  280.036912][T10082]  ? __fdget_pos+0x2a3/0x330
[  280.041499][T10082]  ? ksys_read+0x74/0x260
[  280.045838][T10082]  ksys_read+0x151/0x260
[  280.050089][T10082]  ? vfs_write+0x9a0/0x9a0
[  280.054509][T10082]  ? lockdep_hardirqs_on+0x98/0x150
[  280.059712][T10082]  do_syscall_64+0x55/0xb0
[  280.064129][T10082]  ? clear_bhb_loop+0x40/0x90
[  280.068804][T10082]  ? clear_bhb_loop+0x40/0x90
[  280.073485][T10082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.079386][T10082] RIP: 0033:0x7fc19b95ed8e
[  280.083807][T10082] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  280.103414][T10082] RSP: 002b:00007fc19c7c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  280.111833][T10082] RAX: ffffffffffffffda RBX: 00007fc19c7c96c0 RCX: 00007fc19b95ed8e
[  280.119820][T10082] RDX: 000000000000000f RSI: 00007fc19c7c90a0 RDI: 0000000000000005
[  280.127787][T10082] RBP: 00007fc19c7c9090 R08: 0000000000000000 R09: 0000000000000000
[  280.135756][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.143725][T10082] R13: 00007fc19bc26038 R14: 00007fc19bc25fa0 R15: 00007ffd759cc4d8
[  280.151711][T10082]  </TASK>
[  280.535046][T10097] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1160'.
[  281.308348][T10110] netlink: 'syz.0.1164': attribute type 29 has an invalid length.
[  281.377798][T10110] netlink: 'syz.0.1164': attribute type 29 has an invalid length.
[  281.444984][T10116] netlink: 'syz.0.1164': attribute type 29 has an invalid length.
[  281.707399][T10123] netlink: 'syz.1.1167': attribute type 21 has an invalid length.
[  281.753974][T10123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1167'.
[  281.789814][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'.
[  282.697564][T10135] netlink: 'syz.2.1170': attribute type 3 has an invalid length.
[  282.763873][T10135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1170'.
[  282.807371][T10128] syzkaller0: entered promiscuous mode
[  282.812901][T10128] syzkaller0: entered allmulticast mode
[  287.753176][T10176] netlink: 'syz.1.1180': attribute type 39 has an invalid length.
[  289.278470][T10216] netlink: 'syz.1.1189': attribute type 10 has an invalid length.
[  289.293908][T10216] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1189'.
[  289.551283][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.572595][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.594376][T10229] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.615046][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.643446][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.668432][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.689821][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.708817][T10228] netlink: 'syz.0.1191': attribute type 19 has an invalid length.
[  289.799635][T10237] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1193'.
[  290.435349][T10249] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1197'.
[  291.281525][T10271] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1203'.
[  291.843076][T10291] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1210'.
[  291.939719][T10288] sit0: entered allmulticast mode
[  292.915588][T10314] validate_nla: 64 callbacks suppressed
[  292.915606][T10314] netlink: 'syz.0.1220': attribute type 9 has an invalid length.
[  293.028515][T10314] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1220'.
[  293.348995][T10328] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1218'.
[  293.390157][T10328] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  293.474713][T10328] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  293.643157][T10342] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1222'.
[  293.654773][T10341] netlink: 'syz.2.1221': attribute type 29 has an invalid length.
[  293.688681][T10341] netlink: 'syz.2.1221': attribute type 29 has an invalid length.
[  293.736318][T10341] netlink: 'syz.2.1221': attribute type 29 has an invalid length.
[  293.778374][T10348] netlink: 'syz.3.1225': attribute type 29 has an invalid length.
[  293.787803][T10348] netlink: 'syz.3.1225': attribute type 29 has an invalid length.
[  293.796105][T10348] netlink: 'syz.3.1225': attribute type 29 has an invalid length.
[  293.879276][T10348] netlink: 'syz.3.1225': attribute type 29 has an invalid length.
[  293.960567][T10348] netlink: 'syz.3.1225': attribute type 29 has an invalid length.
[  294.003944][T10352] netlink: 'syz.3.1225': attribute type 11 has an invalid length.
[  294.011812][T10352] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1225'.
[  294.109438][T10358] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1227'.
[  294.332311][T10356] rxe_eth0 speed is unknown, defaulting to 1000
[  296.143489][T10409] __nla_validate_parse: 1 callbacks suppressed
[  296.143506][T10409] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1239'.
[  296.840074][T10426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1243'.
[  296.991375][T10434] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1248'.
[  297.373133][T10451] syzkaller0: entered allmulticast mode
[  297.388314][T10451] syzkaller0: entered promiscuous mode
[  298.281561][T10474] lo: entered allmulticast mode
[  298.335062][T10478] lo: entered promiscuous mode
[  298.339921][T10478] lo: left allmulticast mode
[  299.278538][T10499] netlink: 2395 bytes leftover after parsing attributes in process `syz.3.1267'.
[  299.514803][T10504] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1269'.
[  299.705934][T10512] validate_nla: 9 callbacks suppressed
[  299.705952][T10512] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  299.759841][T10512] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  299.795347][T10516] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  299.813619][T10521] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1276'.
[  299.837692][T10512] netlink: 'syz.0.1273': attribute type 29 has an invalid length.
[  299.987612][T10525] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1277'.
[  300.012955][T10527] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1278'.
[  300.315142][T10536] netlink: 'syz.0.1280': attribute type 8 has an invalid length.
[  300.359005][T10536] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  300.590179][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1286'.
[  301.116400][T10554] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  301.163269][T10554] netlink: 'syz.2.1288': attribute type 3 has an invalid length.
[  301.200523][T10554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1288'.
[  301.605942][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1296'.
[  301.615208][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1296'.
[  301.632102][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1296'.
[  302.159219][T10602] netlink: 'syz.0.1310': attribute type 4 has an invalid length.
[  302.167407][T10602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1310'.
[  305.816972][T10633] sctp: [Deprecated]: syz.2.1309 (pid 10633) Use of int in maxseg socket option.
[  305.816972][T10633] Use struct sctp_assoc_value instead
[  305.954068][T10634] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.1309'.
[  306.014214][T10634] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1309'.
[  306.966918][T10632] rxe_eth0 speed is unknown, defaulting to 1000
[  307.217289][T10652] netlink: 'syz.1.1314': attribute type 3 has an invalid length.
[  307.264241][T10652] netlink: 'syz.1.1314': attribute type 16 has an invalid length.
[  307.279622][T10652] netlink: 'syz.1.1314': attribute type 18 has an invalid length.
[  307.301353][T10652] netlink: 'syz.1.1314': attribute type 20 has an invalid length.
[  307.337282][T10652] netlink: 'syz.1.1314': attribute type 25 has an invalid length.
[  309.225782][T10672] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1321'.
[  310.534381][T10685] sit0: left promiscuous mode
[  314.098302][T10715] netlink: 'syz.2.1332': attribute type 10 has an invalid length.
[  314.535972][T10731] netlink: 'syz.2.1338': attribute type 21 has an invalid length.
[  314.543979][T10731] netlink: 'syz.2.1338': attribute type 1 has an invalid length.
[  315.286033][T10743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1342'.
[  315.384636][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.477182][T10744] netlink: 'syz.1.1339': attribute type 19 has an invalid length.
[  315.499938][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1339'.
[  315.785484][T10745] netlink: 'syz.3.1334': attribute type 21 has an invalid length.
[  315.805300][T10745] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1334'.
[  315.817347][T10745] netlink: 'syz.3.1334': attribute type 5 has an invalid length.
[  315.827459][T10745] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1334'.
[  315.904988][T10720] rxe_eth0 speed is unknown, defaulting to 1000
[  316.314409][T10755] sit0: entered promiscuous mode
[  316.392486][T10762] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1346'.
[  317.319441][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.326079][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.328912][T10784] syzkaller1: tun_chr_ioctl cmd 2147767517
[  317.368153][T10784] syzkaller1: tun_chr_ioctl cmd 1074025673
[  317.386823][T10793] syzkaller1: tun_chr_ioctl cmd 2147767517
[  317.545186][T10797] netlink: 'syz.0.1358': attribute type 21 has an invalid length.
[  317.599500][T10801] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.639506][T10801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.693974][T10801] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.731526][T10812] syzkaller0: entered promiscuous mode
[  318.754102][T10812] syzkaller0: entered allmulticast mode
[  323.194068][T10829] netlink: 'syz.0.1371': attribute type 21 has an invalid length.
[  323.201998][T10829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1371'.
[  323.233936][T10829] netlink: 'syz.0.1371': attribute type 5 has an invalid length.
[  323.241779][T10829] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1371'.
[  323.623649][T10831] pimreg: tun_chr_ioctl cmd 1074025677
[  323.633273][T10831] pimreg: linktype set to 774
[  323.639863][T10834] pimreg: tun_chr_ioctl cmd 1074025673
[  323.653735][T10835] pimreg: tun_chr_ioctl cmd 1074025677
[  323.674683][T10835] pimreg: linktype set to 774
[  323.695628][T10821] rxe_eth0 speed is unknown, defaulting to 1000
[  323.702280][T10837] ƒ: renamed from tunl0 (while UP)
[  324.059262][T10848] netlink: 'syz.2.1373': attribute type 7 has an invalid length.
[  324.077151][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.143537][T10848] netlink: 'syz.2.1373': attribute type 7 has an invalid length.
[  324.172364][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.234109][T10847] netlink: 'syz.2.1373': attribute type 22 has an invalid length.
[  324.270724][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.352669][T10847] netlink: 'syz.2.1373': attribute type 22 has an invalid length.
[  324.371361][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.399309][T10848] netlink: 'syz.2.1373': attribute type 7 has an invalid length.
[  324.416704][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.448068][T10847] netlink: 'syz.2.1373': attribute type 22 has an invalid length.
[  324.469239][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.491619][T10848] netlink: 'syz.2.1373': attribute type 7 has an invalid length.
[  324.506953][T10848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1373'.
[  324.527780][T10847] netlink: 'syz.2.1373': attribute type 22 has an invalid length.
[  324.543496][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  325.946431][T10889] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  326.040120][T10889] batman_adv: batadv0: Removing interface: virt_wifi0
[  326.243334][T10891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  326.251173][T10891] IPv6: NLM_F_CREATE should be set when creating new route
[  326.258924][T10891] IPv6: NLM_F_CREATE should be set when creating new route
[  326.266467][T10891] IPv6: NLM_F_CREATE should be set when creating new route
[  328.426456][T10970] IPv6: Can't replace route, no match found
[  329.169706][T10987] validate_nla: 93 callbacks suppressed
[  329.169756][T10987] netlink: 'syz.2.1411': attribute type 10 has an invalid length.
[  329.191820][T10987] __nla_validate_parse: 97 callbacks suppressed
[  329.191866][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1411'.
[  329.220985][T10987] team0: entered promiscuous mode
[  329.228228][T10987] team_slave_0: entered promiscuous mode
[  329.248956][T10987] team_slave_1: entered promiscuous mode
[  329.267457][T10987] macvlan1: entered promiscuous mode
[  329.281150][T10987] team0: entered allmulticast mode
[  329.287426][T10987] team_slave_0: entered allmulticast mode
[  329.293330][T10987] team_slave_1: entered allmulticast mode
[  329.303068][T10987] bridge0: port 2(team0) entered blocking state
[  329.316051][T10987] bridge0: port 2(team0) entered disabled state
[  329.338160][T10993] netlink: 'syz.0.1414': attribute type 30 has an invalid length.
[  329.352604][T10987] bridge0: port 2(team0) entered blocking state
[  329.359644][T10987] bridge0: port 2(team0) entered forwarding state
[  329.377883][T10989] netlink: 'syz.3.1412': attribute type 10 has an invalid length.
[  329.418099][T10993] netlink: 'syz.0.1414': attribute type 10 has an invalid length.
[  329.541955][T11001] syzkaller0: entered promiscuous mode
[  329.591267][T11001] syzkaller0: entered allmulticast mode
[  330.102146][T11031] syzkaller0: entered promiscuous mode
[  330.183845][T11031] syzkaller0: entered allmulticast mode
[  330.274528][T11038] netlink: 'syz.0.1426': attribute type 21 has an invalid length.
[  330.498864][T11047] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1428'.
[  330.634754][T11054] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  330.791423][T11054] veth0_vlan: entered allmulticast mode
[  330.864442][T11054] batman_adv: batadv0: Interface deactivated: vlan1
[  330.983404][T11054] veth0_vlan: left promiscuous mode
[  331.000906][T11054] veth0_vlan: entered promiscuous mode
[  331.028455][T11054] batman_adv: batadv0: Interface activated: vlan1
[  331.048011][T11054] team0: Device veth0_vlan failed to register rx_handler
[  331.098445][T11054] batman_adv: batadv0: Interface deactivated: vlan1
[  331.177901][T11053] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1429'.
[  331.240945][T11053] team_slave_0: left promiscuous mode
[  331.287972][T11053] team_slave_0: left allmulticast mode
[  331.435864][T11053] team0: Port device team_slave_0 removed
[  331.443282][T11053] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  331.528026][T11054] syz.2.1429 (11054) used greatest stack depth: 18312 bytes left
[  332.808729][T11089] rxe_eth0 speed is unknown, defaulting to 1000
[  332.974178][T11116] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1444'.
[  333.220129][T11120] netlink: 'syz.1.1446': attribute type 19 has an invalid length.
[  335.511023][T11177] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1464'.
[  336.323922][T11196] netlink: 'syz.3.1473': attribute type 10 has an invalid length.
[  336.391372][T11196] team0: Device ipvlan1 failed to register rx_handler
[  336.472656][T11197] netlink: 'syz.3.1473': attribute type 10 has an invalid length.
[  336.704170][T11197] team0: Device ipvlan1 failed to register rx_handler
[  337.758307][T11217] rxe_eth0 speed is unknown, defaulting to 1000
[  338.112076][T11229] netlink: 'syz.3.1483': attribute type 64 has an invalid length.
[  338.152527][T11229] netlink: 'syz.3.1483': attribute type 64 has an invalid length.
[  338.608843][T11239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1485'.
[  339.136479][T11260] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1490'.
[  339.425974][T11279] netlink: 'syz.0.1497': attribute type 9 has an invalid length.
[  339.444219][T11279] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1497'.
[  339.968098][T11283] netlink: 'syz.0.1497': attribute type 9 has an invalid length.
[  339.986868][T11283] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1497'.
[  340.319889][T11300] netlink: 'syz.3.1501': attribute type 21 has an invalid length.
[  340.337811][T11300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1501'.
[  340.429323][T11302] netlink: 'syz.0.1502': attribute type 10 has an invalid length.
[  340.441684][T11302] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1502'.
[  340.470822][T11302] bond0: entered promiscuous mode
[  340.479531][T11302] bond_slave_0: entered promiscuous mode
[  340.498606][T11302] bond_slave_1: entered promiscuous mode
[  340.514780][T11302] bridge_slave_1: entered promiscuous mode
[  341.581686][T11324] netlink: 'syz.1.1510': attribute type 27 has an invalid length.
[  341.625377][T11319] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1508'.
[  342.090250][T11327] netlink: 'syz.1.1510': attribute type 21 has an invalid length.
[  342.164674][T11327] IPv6: NLM_F_CREATE should be specified when creating new route
[  342.172966][T11327] IPv6: Can't replace route, no match found
[  342.408834][T11339] syzkaller0: entered promiscuous mode
[  342.416091][T11339] syzkaller0: entered allmulticast mode
[  342.424832][T11342] netlink: 'syz.1.1515': attribute type 4 has an invalid length.
[  342.438467][T11342] netlink: 'syz.1.1515': attribute type 7 has an invalid length.
[  343.232936][T11353] netlink: 'syz.2.1518': attribute type 29 has an invalid length.
[  344.358126][T11353] netlink: 'syz.2.1518': attribute type 29 has an invalid length.
[  344.692830][T11369] netlink: 'syz.2.1523': attribute type 27 has an invalid length.
[  344.852418][T11369] netlink: 'syz.2.1523': attribute type 21 has an invalid length.
[  344.877920][T11369] IPv6: NLM_F_CREATE should be specified when creating new route
[  344.888406][T11369] IPv6: Can't replace route, no match found
[  348.254871][T11419] netlink: 'syz.3.1535': attribute type 27 has an invalid length.
[  348.417139][T11419] netlink: 'syz.3.1535': attribute type 21 has an invalid length.
[  348.428999][T11419] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.438355][T11419] IPv6: Can't replace route, no match found
[  348.675757][T11426] netlink: 'syz.1.1538': attribute type 10 has an invalid length.
[  348.690353][T11430] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1540'.
[  348.731334][T11433] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1540'.
[  348.804703][T11431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1540'.
[  349.217416][T11451] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1546'.
[  350.604304][T11511] netlink: 'syz.3.1562': attribute type 29 has an invalid length.
[  350.637724][T11511] netlink: 'syz.3.1562': attribute type 29 has an invalid length.
[  350.742058][T11514] netlink: 'syz.3.1562': attribute type 29 has an invalid length.
[  350.766171][T11514] netlink: 'syz.3.1562': attribute type 29 has an invalid length.
[  350.791946][ T5773] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  350.800284][T11511] netlink: 'syz.3.1562': attribute type 29 has an invalid length.
[  351.958592][T11544] netlink: 'syz.2.1570': attribute type 11 has an invalid length.
[  353.139268][T11579] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.1583'.
[  353.193808][T11579] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1583'.
[  353.194592][T11583] netlink: 'syz.2.1583': attribute type 3 has an invalid length.
[  353.233487][T11583] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1583'.
[  354.375719][T11601] netlink: 'syz.3.1588': attribute type 21 has an invalid length.
[  354.394306][T11601] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1588'.
[  355.765342][T11646] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1604'.
[  355.929338][T11662] netlink: 'syz.1.1608': attribute type 5 has an invalid length.
[  355.937475][T11662] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1608'.
[  356.187791][T11673] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1610'.
[  356.220801][T11676] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1612'.
[  356.248135][T11676] netlink: 'syz.0.1612': attribute type 2 has an invalid length.
[  356.665525][T11683] netlink: 'syz.1.1615': attribute type 10 has an invalid length.
[  356.719122][T11686] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1616'.
[  357.115391][T11697] netlink: 'syz.2.1620': attribute type 6 has an invalid length.
[  357.156107][T11697] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1620'.
[  357.499820][T11705] netlink: 'syz.2.1621': attribute type 21 has an invalid length.
[  357.534293][T11705] netlink: 'syz.2.1621': attribute type 6 has an invalid length.
[  357.560364][T11705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1621'.
[  357.935149][T11725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1629'.
[  357.964202][T11725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1629'.
[  358.364579][T11744] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  358.372900][T11744] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  358.701949][T11755] FAULT_INJECTION: forcing a failure.
[  358.701949][T11755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.751911][T11755] CPU: 1 PID: 11755 Comm: syz.0.1638 Not tainted syzkaller #0
[  358.759457][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  358.769575][T11755] Call Trace:
[  358.772895][T11755]  <TASK>
[  358.775858][T11755]  dump_stack_lvl+0x18c/0x250
[  358.780581][T11755]  ? show_regs_print_info+0x20/0x20
[  358.785816][T11755]  ? load_image+0x420/0x420
[  358.790345][T11755]  ? __might_fault+0xaa/0x120
[  358.795037][T11755]  ? __lock_acquire+0x7eb0/0x7eb0
[  358.800083][T11755]  should_fail_ex+0x394/0x4c0
[  358.804780][T11755]  _copy_from_user+0x2f/0xe0
[  358.809403][T11755]  get_user_ifreq+0x6b/0x180
[  358.814012][T11755]  sock_ioctl+0x6f1/0x7e0
[  358.818356][T11755]  ? sock_poll+0x3e0/0x3e0
[  358.822802][T11755]  ? bpf_lsm_file_ioctl+0x9/0x10
[  358.827742][T11755]  ? security_file_ioctl+0x80/0xa0
[  358.832870][T11755]  ? sock_poll+0x3e0/0x3e0
[  358.837325][T11755]  __se_sys_ioctl+0xfd/0x170
[  358.841930][T11755]  do_syscall_64+0x55/0xb0
[  358.846348][T11755]  ? clear_bhb_loop+0x40/0x90
[  358.851048][T11755]  ? clear_bhb_loop+0x40/0x90
[  358.855733][T11755]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  358.861641][T11755] RIP: 0033:0x7fad5e99e559
[  358.866089][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.885705][T11755] RSP: 002b:00007fad5f783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.894128][T11755] RAX: ffffffffffffffda RBX: 00007fad5ec25fa0 RCX: 00007fad5e99e559
[  358.902101][T11755] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005
[  358.910098][T11755] RBP: 00007fad5f783090 R08: 0000000000000000 R09: 0000000000000000
[  358.918076][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.926050][T11755] R13: 00007fad5ec26038 R14: 00007fad5ec25fa0 R15: 00007ffd2e395858
[  358.934069][T11755]  </TASK>
[  359.624073][T11780] netlink: 'syz.2.1646': attribute type 153 has an invalid length.
[  359.644273][T11780] __nla_validate_parse: 3 callbacks suppressed
[  359.644287][T11780] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1646'.
[  359.744616][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1645'.
[  359.792486][T11782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1645'.
[  359.900093][T11789] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1648'.
[  359.961639][T11782] netlink: 'syz.0.1645': attribute type 49 has an invalid length.
[  360.000958][T11789] netlink: del zone limit has 8 unknown bytes
[  360.090623][T11790] netlink: 'syz.0.1645': attribute type 10 has an invalid length.
[  360.282609][T11790] batadv_slave_0: entered promiscuous mode
[  360.384744][T11790] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  360.550116][T11799] FAULT_INJECTION: forcing a failure.
[  360.550116][T11799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.585795][T11799] CPU: 0 PID: 11799 Comm: syz.1.1650 Not tainted syzkaller #0
[  360.593327][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  360.603428][T11799] Call Trace:
[  360.606747][T11799]  <TASK>
[  360.609711][T11799]  dump_stack_lvl+0x18c/0x250
[  360.614419][T11799]  ? show_regs_print_info+0x20/0x20
[  360.619645][T11799]  ? load_image+0x420/0x420
[  360.624182][T11799]  ? __might_fault+0xaa/0x120
[  360.628890][T11799]  ? __lock_acquire+0x7eb0/0x7eb0
[  360.633951][T11799]  should_fail_ex+0x394/0x4c0
[  360.638673][T11799]  _copy_from_user+0x2f/0xe0
[  360.643302][T11799]  vti6_siocdevprivate+0x1fe/0xb80
[  360.648460][T11799]  ? trace_contention_end+0x39/0xe0
[  360.653695][T11799]  ? vti6_tnl_xmit+0x19c0/0x19c0
[  360.658669][T11799]  ? __mutex_lock+0x30d/0xc80
[  360.663398][T11799]  ? dev_ioctl+0x83c/0x1140
[  360.667950][T11799]  ? dev_ifsioc+0x957/0xc40
[  360.672493][T11799]  dev_ioctl+0x84c/0x1140
[  360.676861][T11799]  sock_ioctl+0x74c/0x7e0
[  360.681232][T11799]  ? sock_poll+0x3e0/0x3e0
[  360.685698][T11799]  ? bpf_lsm_file_ioctl+0x9/0x10
[  360.690667][T11799]  ? security_file_ioctl+0x80/0xa0
[  360.695816][T11799]  ? sock_poll+0x3e0/0x3e0
[  360.700258][T11799]  __se_sys_ioctl+0xfd/0x170
[  360.704859][T11799]  do_syscall_64+0x55/0xb0
[  360.709277][T11799]  ? clear_bhb_loop+0x40/0x90
[  360.713950][T11799]  ? clear_bhb_loop+0x40/0x90
[  360.718630][T11799]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.724526][T11799] RIP: 0033:0x7fabd899e559
[  360.728937][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.748544][T11799] RSP: 002b:00007fabd98b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  360.756957][T11799] RAX: ffffffffffffffda RBX: 00007fabd8c25fa0 RCX: 00007fabd899e559
[  360.764926][T11799] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005
[  360.772896][T11799] RBP: 00007fabd98b4090 R08: 0000000000000000 R09: 0000000000000000
[  360.780863][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.788830][T11799] R13: 00007fabd8c26038 R14: 00007fabd8c25fa0 R15: 00007fff3694f208
[  360.796817][T11799]  </TASK>
[  361.674107][T11841] netlink: 'syz.3.1659': attribute type 1 has an invalid length.
[  361.694326][T11841] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1659'.
[  361.984371][T11849] FAULT_INJECTION: forcing a failure.
[  361.984371][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.066706][T11849] CPU: 1 PID: 11849 Comm: syz.1.1662 Not tainted syzkaller #0
[  362.074254][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  362.084365][T11849] Call Trace:
[  362.087720][T11849]  <TASK>
[  362.090685][T11849]  dump_stack_lvl+0x18c/0x250
[  362.095417][T11849]  ? show_regs_print_info+0x20/0x20
[  362.100664][T11849]  ? load_image+0x420/0x420
[  362.105226][T11849]  ? __might_fault+0xaa/0x120
[  362.109955][T11849]  ? __lock_acquire+0x7eb0/0x7eb0
[  362.115045][T11849]  should_fail_ex+0x394/0x4c0
[  362.119797][T11849]  _copy_to_user+0x2f/0xa0
[  362.124281][T11849]  vti6_siocdevprivate+0x4da/0xb80
[  362.129478][T11849]  ? vti6_tnl_xmit+0x19c0/0x19c0
[  362.134473][T11849]  ? __mutex_lock+0x30d/0xc80
[  362.139219][T11849]  ? dev_ioctl+0x83c/0x1140
[  362.143798][T11849]  ? dev_ifsioc+0x957/0xc40
[  362.148363][T11849]  dev_ioctl+0x84c/0x1140
[  362.152749][T11849]  sock_ioctl+0x74c/0x7e0
[  362.157138][T11849]  ? sock_poll+0x3e0/0x3e0
[  362.161633][T11849]  ? bpf_lsm_file_ioctl+0x9/0x10
[  362.166649][T11849]  ? security_file_ioctl+0x80/0xa0
[  362.171818][T11849]  ? sock_poll+0x3e0/0x3e0
[  362.176290][T11849]  __se_sys_ioctl+0xfd/0x170
[  362.180931][T11849]  do_syscall_64+0x55/0xb0
[  362.185390][T11849]  ? clear_bhb_loop+0x40/0x90
[  362.190108][T11849]  ? clear_bhb_loop+0x40/0x90
[  362.194831][T11849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  362.200777][T11849] RIP: 0033:0x7fabd899e559
[  362.200953][T11858] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1665'.
[  362.205212][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.205233][T11849] RSP: 002b:00007fabd98b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  362.205255][T11849] RAX: ffffffffffffffda RBX: 00007fabd8c25fa0 RCX: 00007fabd899e559
[  362.205268][T11849] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005
[  362.205280][T11849] RBP: 00007fabd98b4090 R08: 0000000000000000 R09: 0000000000000000
[  362.205292][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.205304][T11849] R13: 00007fabd8c26038 R14: 00007fabd8c25fa0 R15: 00007fff3694f208
[  362.205351][T11849]  </TASK>
[  363.611918][T11874] netlink: 'syz.3.1671': attribute type 3 has an invalid length.
[  363.649108][T11874] netlink: 'syz.3.1671': attribute type 6 has an invalid length.
[  363.682969][T11874] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1671'.
[  364.019462][T11882] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1672'.
[  367.224141][T11879] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1670'.
[  367.242031][T11879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  367.268323][T11893] FAULT_INJECTION: forcing a failure.
[  367.268323][T11893] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.291457][T11893] CPU: 0 PID: 11893 Comm: syz.3.1674 Not tainted syzkaller #0
[  367.298975][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  367.309072][T11893] Call Trace:
[  367.312355][T11893]  <TASK>
[  367.315279][T11893]  dump_stack_lvl+0x18c/0x250
[  367.319954][T11893]  ? show_regs_print_info+0x20/0x20
[  367.325145][T11893]  ? load_image+0x420/0x420
[  367.329647][T11893]  ? __lock_acquire+0x7eb0/0x7eb0
[  367.334678][T11893]  should_fail_ex+0x394/0x4c0
[  367.339359][T11893]  _copy_to_user+0x2f/0xa0
[  367.343778][T11893]  put_user_ifreq+0x78/0xb0
[  367.348300][T11893]  sock_ioctl+0x77b/0x7e0
[  367.352629][T11893]  ? sock_poll+0x3e0/0x3e0
[  367.357057][T11893]  ? bpf_lsm_file_ioctl+0x9/0x10
[  367.362017][T11893]  ? security_file_ioctl+0x80/0xa0
[  367.367133][T11893]  ? sock_poll+0x3e0/0x3e0
[  367.371549][T11893]  __se_sys_ioctl+0xfd/0x170
[  367.376140][T11893]  do_syscall_64+0x55/0xb0
[  367.380548][T11893]  ? clear_bhb_loop+0x40/0x90
[  367.385219][T11893]  ? clear_bhb_loop+0x40/0x90
[  367.389887][T11893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.395782][T11893] RIP: 0033:0x7fc19b99e559
[  367.400208][T11893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.419814][T11893] RSP: 002b:00007fc19c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  367.428228][T11893] RAX: ffffffffffffffda RBX: 00007fc19bc25fa0 RCX: 00007fc19b99e559
[  367.436215][T11893] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005
[  367.444203][T11893] RBP: 00007fc19c7c9090 R08: 0000000000000000 R09: 0000000000000000
[  367.452177][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.460141][T11893] R13: 00007fc19bc26038 R14: 00007fc19bc25fa0 R15: 00007ffd759cc4d8
[  367.468119][T11893]  </TASK>
[  368.462673][T11924] netlink: 'syz.0.1682': attribute type 21 has an invalid length.
[  368.491824][T11931] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1685'.
[  368.509318][T11924] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1682'.
[  368.536169][T11917] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1683'.
[  368.549137][T11917] openvswitch: netlink: Message has 20476 unknown bytes.
[  369.048079][T11923] rxe_eth0 speed is unknown, defaulting to 1000
[  371.181000][ T5784] Bluetooth: Frame is too long (len 149, expected len 4)
[  371.769324][T11983] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1700'.
[  372.541692][T11995] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1704'.
[  372.552175][T11995] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  374.281698][T12000] netlink: 'syz.2.1705': attribute type 10 has an invalid length.
[  374.300245][T12000] team0: Device veth1_vlan is already a lower device of the team interface
[  374.325939][T12005] netlink: 'syz.1.1707': attribute type 10 has an invalid length.
[  374.370100][T12005] team0: Device bond0 is already an upper device of the team interface
[  374.507201][T12011] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1709'.
[  374.631445][T12015] netlink: 'syz.2.1710': attribute type 3 has an invalid length.
[  374.653637][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1710'.
[  375.456359][T12043] netlink: 'syz.2.1717': attribute type 29 has an invalid length.
[  375.507398][T12043] netlink: 'syz.2.1717': attribute type 29 has an invalid length.
[  375.586790][T12047] netlink: 'syz.2.1717': attribute type 29 has an invalid length.
[  375.605068][T12043] netlink: 'syz.2.1717': attribute type 29 has an invalid length.
[  375.628439][T12043] netlink: 'syz.2.1717': attribute type 10 has an invalid length.
[  375.642266][T12043] veth0_vlan: left promiscuous mode
[  375.671314][T12043] veth0_vlan: entered promiscuous mode
[  375.727552][T12043] batman_adv: batadv0: Interface activated: vlan1
[  375.830825][T12043] team0: Device veth0_vlan failed to register rx_handler
[  377.127066][T12043] batman_adv: batadv0: Interface deactivated: vlan1
[  377.209356][T12047] netlink: 'syz.2.1717': attribute type 29 has an invalid length.
[  377.232737][T12052] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1717'.
[  377.508890][T12061] netlink: 'syz.1.1722': attribute type 4 has an invalid length.
[  378.424374][T12095] syzkaller0: left promiscuous mode
[  378.440163][T12095] syzkaller0: left allmulticast mode
[  378.459940][T12095] netlink: 134704 bytes leftover after parsing attributes in process `syz.1.1732'.
[  378.779583][T12100] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  378.793005][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.804191][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.352649][T12118] validate_nla: 1 callbacks suppressed
[  379.352696][T12118] netlink: 'syz.0.1736': attribute type 9 has an invalid length.
[  379.369942][T12118] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1736'.
[  379.596488][T12126] netlink: 'syz.3.1737': attribute type 21 has an invalid length.
[  379.655888][T12126] netlink: 'syz.3.1737': attribute type 4 has an invalid length.
[  379.676126][T12126] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1737'.
[  380.200353][T12130] FAULT_INJECTION: forcing a failure.
[  380.200353][T12130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.223961][T12130] CPU: 1 PID: 12130 Comm: syz.1.1739 Not tainted syzkaller #0
[  380.231490][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  380.241586][T12130] Call Trace:
[  380.244886][T12130]  <TASK>
[  380.247844][T12130]  dump_stack_lvl+0x18c/0x250
[  380.252553][T12130]  ? show_regs_print_info+0x20/0x20
[  380.257786][T12130]  ? load_image+0x420/0x420
[  380.262325][T12130]  ? __might_fault+0xaa/0x120
[  380.267035][T12130]  ? __lock_acquire+0x7eb0/0x7eb0
[  380.272101][T12130]  should_fail_ex+0x394/0x4c0
[  380.276828][T12130]  _copy_from_user+0x2f/0xe0
[  380.281456][T12130]  __sys_bpf+0x23e/0x890
[  380.285737][T12130]  ? bpf_link_show_fdinfo+0x560/0x560
[  380.291159][T12130]  ? lock_chain_count+0x20/0x20
[  380.296050][T12130]  __x64_sys_bpf+0x7c/0x90
[  380.300502][T12130]  do_syscall_64+0x55/0xb0
[  380.304935][T12130]  ? clear_bhb_loop+0x40/0x90
[  380.309627][T12130]  ? clear_bhb_loop+0x40/0x90
[  380.314315][T12130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.320257][T12130] RIP: 0033:0x7fabd899e559
[  380.324677][T12130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.344287][T12130] RSP: 002b:00007fabd98b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  380.352707][T12130] RAX: ffffffffffffffda RBX: 00007fabd8c25fa0 RCX: 00007fabd899e559
[  380.360678][T12130] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000010
[  380.368651][T12130] RBP: 00007fabd98b4090 R08: 0000000000000000 R09: 0000000000000000
[  380.376625][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.384594][T12130] R13: 00007fabd8c26038 R14: 00007fabd8c25fa0 R15: 00007fff3694f208
[  380.392579][T12130]  </TASK>
[  380.626699][T12145] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1745'.
[  382.457162][T12187] FAULT_INJECTION: forcing a failure.
[  382.457162][T12187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.475976][T12187] CPU: 1 PID: 12187 Comm: syz.3.1755 Not tainted syzkaller #0
[  382.483508][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  382.493609][T12187] Call Trace:
[  382.496932][T12187]  <TASK>
[  382.499890][T12187]  dump_stack_lvl+0x18c/0x250
[  382.504620][T12187]  ? show_regs_print_info+0x20/0x20
[  382.509862][T12187]  ? load_image+0x420/0x420
[  382.514427][T12187]  ? __might_fault+0xaa/0x120
[  382.519154][T12187]  ? __lock_acquire+0x7eb0/0x7eb0
[  382.524237][T12187]  should_fail_ex+0x394/0x4c0
[  382.528984][T12187]  _copy_to_user+0x2f/0xa0
[  382.533460][T12187]  netns_bpf_prog_query+0x267/0x500
[  382.538715][T12187]  ? rht_unlock+0x1d0/0x1d0
[  382.543278][T12187]  __sys_bpf+0x7a0/0x890
[  382.547557][T12187]  ? bpf_link_show_fdinfo+0x560/0x560
[  382.552974][T12187]  ? lock_chain_count+0x20/0x20
[  382.557851][T12187]  __x64_sys_bpf+0x7c/0x90
[  382.562277][T12187]  do_syscall_64+0x55/0xb0
[  382.566696][T12187]  ? clear_bhb_loop+0x40/0x90
[  382.571392][T12187]  ? clear_bhb_loop+0x40/0x90
[  382.576076][T12187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.581993][T12187] RIP: 0033:0x7fc19b99e559
[  382.586420][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.606042][T12187] RSP: 002b:00007fc19c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  382.614472][T12187] RAX: ffffffffffffffda RBX: 00007fc19bc25fa0 RCX: 00007fc19b99e559
[  382.622483][T12187] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000010
[  382.630586][T12187] RBP: 00007fc19c7c9090 R08: 0000000000000000 R09: 0000000000000000
[  382.638568][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.646567][T12187] R13: 00007fc19bc26038 R14: 00007fc19bc25fa0 R15: 00007ffd759cc4d8
[  382.654582][T12187]  </TASK>
[  382.900677][T12193] netlink: 'syz.3.1757': attribute type 9 has an invalid length.
[  382.923601][T12193] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1757'.
[  384.870526][T12203] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1758'.
[  384.893873][T12203] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  384.926486][T12203] openvswitch: netlink: Message has 1 unknown bytes.
[  384.960619][T12208] netlink: 'syz.0.1761': attribute type 4 has an invalid length.
[  384.994233][T12200] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1759'.
[  385.167741][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'.
[  385.316757][T12216] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1764'.
[  385.348651][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'.
[  385.423284][T12214] rxe_eth0 speed is unknown, defaulting to 1000
[  385.516157][T12223] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1766'.
[  385.566206][T12225] FAULT_INJECTION: forcing a failure.
[  385.566206][T12225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.611339][T12225] CPU: 0 PID: 12225 Comm: syz.0.1765 Not tainted syzkaller #0
[  385.618883][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  385.628980][T12225] Call Trace:
[  385.632334][T12225]  <TASK>
[  385.635294][T12225]  dump_stack_lvl+0x18c/0x250
[  385.640019][T12225]  ? show_regs_print_info+0x20/0x20
[  385.645263][T12225]  ? load_image+0x420/0x420
[  385.649853][T12225]  ? __might_fault+0xaa/0x120
[  385.654573][T12225]  ? __lock_acquire+0x7eb0/0x7eb0
[  385.659651][T12225]  should_fail_ex+0x394/0x4c0
[  385.664384][T12225]  _copy_to_user+0x2f/0xa0
[  385.668847][T12225]  netns_bpf_prog_query+0x29e/0x500
[  385.674095][T12225]  ? rht_unlock+0x1d0/0x1d0
[  385.678659][T12225]  __sys_bpf+0x7a0/0x890
[  385.682943][T12225]  ? bpf_link_show_fdinfo+0x560/0x560
[  385.688383][T12225]  ? lock_chain_count+0x20/0x20
[  385.693267][T12225]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  385.699303][T12225]  __x64_sys_bpf+0x7c/0x90
[  385.703776][T12225]  do_syscall_64+0x55/0xb0
[  385.708219][T12225]  ? clear_bhb_loop+0x40/0x90
[  385.712904][T12225]  ? clear_bhb_loop+0x40/0x90
[  385.717592][T12225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  385.723530][T12225] RIP: 0033:0x7fad5e99e559
[  385.727981][T12225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.747597][T12225] RSP: 002b:00007fad5f783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  385.756023][T12225] RAX: ffffffffffffffda RBX: 00007fad5ec25fa0 RCX: 00007fad5e99e559
[  385.763998][T12225] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000010
[  385.771982][T12225] RBP: 00007fad5f783090 R08: 0000000000000000 R09: 0000000000000000
[  385.779954][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.787932][T12225] R13: 00007fad5ec26038 R14: 00007fad5ec25fa0 R15: 00007ffd2e395858
[  385.795959][T12225]  </TASK>
[  385.836318][T12220] rxe_eth0 speed is unknown, defaulting to 1000
[  385.867822][T12227] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1767'.
[  386.473049][T12248] netlink: 'syz.0.1773': attribute type 10 has an invalid length.
[  386.484568][T12248] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1773'.
[  386.835867][T12258] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1776'.
[  387.344310][T12267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1780'.
[  387.450885][T12269] netlink: 'syz.1.1780': attribute type 10 has an invalid length.
[  387.572883][T12269] team0: Device gre0 is of different type
[  387.691033][T12282] netlink: 'syz.1.1780': attribute type 10 has an invalid length.
[  387.784114][T12282] team0: Device gre0 is of different type
[  390.458540][T12315] netlink: 'syz.3.1792': attribute type 9 has an invalid length.
[  390.467024][T12315] __nla_validate_parse: 7 callbacks suppressed
[  390.467067][T12315] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1792'.
[  390.831701][T12319] netlink: 'syz.3.1792': attribute type 9 has an invalid length.
[  390.842542][T12332] nr0: tun_chr_ioctl cmd 1074025677
[  390.852553][T12332] nr0: linktype set to 780
[  390.866257][T12319] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1792'.
[  391.048575][T12337] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1798'.
[  391.883580][T12356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1807'.
[  392.023374][T12370] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1811'.
[  392.260917][T12377] netlink: 'syz.0.1812': attribute type 1 has an invalid length.
[  392.282481][T12364] netlink: 'syz.3.1810': attribute type 21 has an invalid length.
[  392.291276][T12377] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1812'.
[  392.312604][T12364] netlink: 'syz.3.1810': attribute type 6 has an invalid length.
[  392.324885][T12364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1810'.
[  393.280901][T12391] rxe_eth0 speed is unknown, defaulting to 1000
[  393.337549][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1820'.
[  395.096037][T12443] netlink: 'syz.0.1830': attribute type 3 has an invalid length.
[  395.134036][T12443] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1830'.
[  395.216780][T12443] netlink: 'syz.0.1830': attribute type 39 has an invalid length.
[  396.280530][T12451] netlink: 'syz.1.1831': attribute type 21 has an invalid length.
[  396.345911][T12438] rxe_eth0 speed is unknown, defaulting to 1000
[  396.584908][T12466] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1835'.
[  396.791000][T12478] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1837'.
[  397.049991][T12486] netlink: 'syz.1.1838': attribute type 6 has an invalid length.
[  397.083418][T12486] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1838'.
[  398.026794][T12507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  398.061553][T12507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  398.102794][T12500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  398.295321][T12505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  398.571741][T12517] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.1845'.
[  398.802723][T12525] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1846'.
[  398.978388][T12525] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  399.160152][T12527] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1846'.
[  399.634363][T12527] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  399.664012][T12527] CPU: 1 PID: 12527 Comm: syz.1.1846 Not tainted syzkaller #0
[  399.671543][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  399.681626][T12527] Call Trace:
[  399.684930][T12527]  <TASK>
[  399.687898][T12527]  dump_stack_lvl+0x18c/0x250
[  399.692610][T12527]  ? show_regs_print_info+0x20/0x20
[  399.697838][T12527]  ? load_image+0x420/0x420
[  399.702366][T12527]  sysfs_warn_dup+0x8e/0xa0
[  399.706877][T12527]  sysfs_do_create_link_sd+0xc0/0x110
[  399.712247][T12527]  device_add_class_symlinks+0x1cf/0x240
[  399.717888][T12527]  device_add+0x4f9/0xc40
[  399.722225][T12527]  wiphy_register+0x1d99/0x2ac0
[  399.727096][T12527]  ? cfg80211_event_work+0x40/0x40
[  399.732201][T12527]  ? minstrel_ht_alloc+0x88a/0x990
[  399.737323][T12527]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  399.743394][T12527]  ieee80211_register_hw+0x2f3d/0x3cb0
[  399.748898][T12527]  ? ieee80211_register_hw+0xee1/0x3cb0
[  399.754462][T12527]  ? ieee80211_tasklet_handler+0x20/0x20
[  399.760119][T12527]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  399.766023][T12527]  ? __debug_object_init+0xec/0x450
[  399.771254][T12527]  ? __asan_memset+0x22/0x40
[  399.775845][T12527]  ? __hrtimer_init+0x189/0x270
[  399.780707][T12527]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  399.786452][T12527]  ? mac80211_hwsim_free+0x220/0x220
[  399.791736][T12527]  ? rcu_is_watching+0x15/0xb0
[  399.796502][T12527]  ? kstrndup+0xbd/0x140
[  399.800785][T12527]  hwsim_new_radio_nl+0xdad/0x1a70
[  399.805906][T12527]  ? __nla_validate+0x50/0x50
[  399.810598][T12527]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  399.816941][T12527]  ? __nla_parse+0x40/0x50
[  399.821358][T12527]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  399.827702][T12527]  genl_family_rcv_msg_doit+0x21a/0x310
[  399.833263][T12527]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  399.839186][T12527]  ? bpf_lsm_capable+0x9/0x10
[  399.844034][T12527]  ? security_capable+0x89/0xb0
[  399.848895][T12527]  genl_rcv_msg+0x611/0x7a0
[  399.853430][T12527]  ? genl_bind+0x360/0x360
[  399.857934][T12527]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  399.864265][T12527]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  399.870852][T12527]  ? ref_tracker_free+0x686/0x830
[  399.875890][T12527]  netlink_rcv_skb+0x235/0x4c0
[  399.880677][T12527]  ? genl_bind+0x360/0x360
[  399.885098][T12527]  ? netlink_ack+0x1160/0x1160
[  399.889877][T12527]  ? __lock_acquire+0x7eb0/0x7eb0
[  399.894916][T12527]  ? down_read+0x1ac/0x2e0
[  399.899341][T12527]  genl_rcv+0x28/0x40
[  399.903326][T12527]  netlink_unicast+0x7b1/0x930
[  399.908100][T12527]  netlink_sendmsg+0x8d0/0xbf0
[  399.912880][T12527]  ? netlink_getsockopt+0x590/0x590
[  399.918089][T12527]  ? apparmor_socket_sendmsg+0x8e/0x330
[  399.923641][T12527]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  399.928935][T12527]  ? security_socket_sendmsg+0x80/0xa0
[  399.934399][T12527]  ? netlink_getsockopt+0x590/0x590
[  399.939611][T12527]  ____sys_sendmsg+0x61b/0x980
[  399.944393][T12527]  ? __asan_memset+0x22/0x40
[  399.948988][T12527]  ? __sys_sendmsg_sock+0x30/0x30
[  399.954039][T12527]  ? __import_iovec+0x5f2/0x850
[  399.958913][T12527]  ? import_iovec+0x73/0xa0
[  399.963424][T12527]  ___sys_sendmsg+0x2a6/0x360
[  399.968110][T12527]  ? __sys_sendmsg+0x2b0/0x2b0
[  399.972922][T12527]  __se_sys_sendmsg+0x1d0/0x2c0
[  399.977777][T12527]  ? __x64_sys_sendmsg+0x80/0x80
[  399.982733][T12527]  ? lockdep_hardirqs_on+0x98/0x150
[  399.987937][T12527]  do_syscall_64+0x55/0xb0
[  399.992348][T12527]  ? clear_bhb_loop+0x40/0x90
[  399.997020][T12527]  ? clear_bhb_loop+0x40/0x90
[  400.001693][T12527]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  400.007595][T12527] RIP: 0033:0x7fabd899e559
[  400.012024][T12527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.031632][T12527] RSP: 002b:00007fabd9851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.040072][T12527] RAX: ffffffffffffffda RBX: 00007fabd8c26270 RCX: 00007fabd899e559
[  400.048044][T12527] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  400.056010][T12527] RBP: 00007fabd8a35ad8 R08: 0000000000000000 R09: 0000000000000000
[  400.063986][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.071958][T12527] R13: 00007fabd8c26308 R14: 00007fabd8c26270 R15: 00007fff3694f208
[  400.079952][T12527]  </TASK>
[  400.649391][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  400.698524][T12548] netlink: 'syz.1.1848': attribute type 1 has an invalid length.
[  400.733117][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  400.800012][T12559] netlink: 'syz.3.1851': attribute type 10 has an invalid length.
[  401.014588][T12559] team0 (unregistering): Port device team_slave_0 removed
[  401.037518][T12559] team0 (unregistering): Port device team_slave_1 removed
[  401.065445][T12559] team0 (unregistering): Port device bond0 removed
[  401.093420][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  401.107118][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  401.182977][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  401.211642][T12551] netlink: 'syz.3.1851': attribute type 21 has an invalid length.
[  401.392646][T12576] validate_nla: 60 callbacks suppressed
[  401.392675][T12576] netlink: 'syz.2.1857': attribute type 29 has an invalid length.
[  401.410861][T12576] netlink: 'syz.2.1857': attribute type 29 has an invalid length.
[  401.422074][T12576] netlink: 'syz.2.1857': attribute type 29 has an invalid length.
[  401.431385][T12576] netlink: 'syz.2.1857': attribute type 29 has an invalid length.
[  401.440259][T12576] netlink: 'syz.2.1857': attribute type 29 has an invalid length.
[  401.621797][T12584] netlink: 'syz.2.1859': attribute type 10 has an invalid length.
[  401.763304][T12588] __nla_validate_parse: 3 callbacks suppressed
[  401.763325][T12588] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1859'.
[  402.176435][T12603] netlink: 'syz.0.1862': attribute type 10 has an invalid length.
[  402.219596][T12603] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  402.282539][T12603] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  402.597067][T12607] rxe_eth0 speed is unknown, defaulting to 1000
[  402.683522][T12612] netlink: 'syz.3.1866': attribute type 1 has an invalid length.
[  402.705238][T12612] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1866'.
[  402.940264][T12620] nr0: tun_chr_ioctl cmd 2147767520
[  403.056011][T12625] netlink: 'syz.0.1869': attribute type 1 has an invalid length.
[  403.090029][T12618] rxe_eth0 speed is unknown, defaulting to 1000
[  403.098119][T12625] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1869'.
[  403.419582][T12627] netlink: 'syz.3.1870': attribute type 9 has an invalid length.
[  404.287175][T12634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1872'.
[  405.043230][T12664] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.1880'.
[  405.130381][T12664] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1880'.
[  405.160987][T12664] C: entered allmulticast mode
[  405.889445][T12683] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1886'.
[  405.929557][T12683] netlink: get zone limit has 4 unknown bytes
[  406.571952][T12715] validate_nla: 3 callbacks suppressed
[  406.571971][T12715] netlink: 'syz.3.1895': attribute type 4 has an invalid length.
[  406.778630][T12722] netlink: 'syz.1.1899': attribute type 21 has an invalid length.
[  406.858973][T12712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.637591][T12738] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1902'.
[  409.904224][T12745] netlink: 'syz.0.1904': attribute type 30 has an invalid length.
[  409.922226][T12745] netlink: 'syz.0.1904': attribute type 10 has an invalid length.
[  411.335155][T12777] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[  411.373024][T12777] netlink: 'syz.0.1911': attribute type 3 has an invalid length.
[  411.398250][T12774] netlink: 'syz.0.1911': attribute type 10 has an invalid length.
[  411.406347][T12774] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1911'.
[  411.483984][T12777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1911'.
[  411.966255][T12803] netlink: 'syz.3.1915': attribute type 21 has an invalid length.
[  411.979752][T12803] netlink: 'syz.3.1915': attribute type 12 has an invalid length.
[  412.020300][T12803] netlink: 'syz.3.1915': attribute type 13 has an invalid length.
[  412.063090][T12803] netlink: 'syz.3.1915': attribute type 14 has an invalid length.
[  412.089345][T12803] netlink: 'syz.3.1915': attribute type 15 has an invalid length.
[  412.097747][T12803] netlink: 'syz.3.1915': attribute type 16 has an invalid length.
[  412.106118][T12803] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.1915'.
[  412.146735][T12786] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1914'.
[  412.871300][T12881] netlink: 'syz.3.1922': attribute type 10 has an invalid length.
[  412.928049][T12881] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1922'.
[  413.114616][T12881] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  414.036379][T12900] 
€Â: renamed from syzkaller0
[  414.410925][T12904] 
€Â0: renamed from pim6reg1
[  414.488981][T12907] syzkaller0: entered promiscuous mode
[  414.497351][T12907] syzkaller0: entered allmulticast mode
[  414.616344][T12897] rxe_eth0 speed is unknown, defaulting to 1000
[  417.704517][T12958] rxe_eth0 speed is unknown, defaulting to 1000
[  418.446854][T12975] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.1942'.
[  419.630845][T12993] netlink: 'syz.0.1949': attribute type 9 has an invalid length.
[  419.669009][T12993] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1949'.
[  420.443436][T13012] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1954'.
[  423.481276][T13027] netlink: 'syz.0.1957': attribute type 2 has an invalid length.
[  423.524084][T13027] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1957'.
[  423.556265][T13026] netlink: 'syz.0.1957': attribute type 2 has an invalid length.
[  423.587189][T13026] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1957'.
[  423.642221][T13039] dvmrp1: tun_chr_ioctl cmd 35108
[  425.029223][T13083] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  425.071124][T13083] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1969'.
[  425.134022][T13083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1969'.
[  425.143082][T13083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1969'.
[  425.243886][T13085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1969'.
[  426.128092][T13100] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1972'.
[  426.160749][T13093] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1972'.
[  426.200913][T13094] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1971'.
[  426.713479][T13110] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1975'.
[  427.676037][T13135] netlink: 'syz.1.1981': attribute type 25 has an invalid length.
[  427.691228][T13135] netlink: 'syz.1.1981': attribute type 10 has an invalid length.
[  427.761539][T13139] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[  429.218779][T13148] netlink: 'syz.1.1985': attribute type 5 has an invalid length.
[  429.313365][T13155] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1987'.
[  429.374483][T13151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1985'.
[  429.425714][T13151] Lè+߬ç³Õ: renamed from bridge_slave_0
[  429.671856][T13155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1987'.
[  429.696520][T13159] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  429.712869][T13159] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  430.044266][T13175] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  430.088650][T13175] netlink: 'syz.0.1994': attribute type 8 has an invalid length.
[  430.117155][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.174229][T13175] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  430.182024][T13175] netlink: 'syz.0.1994': attribute type 8 has an invalid length.
[  430.236911][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.388263][T13175] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  430.409181][T13175] netlink: 'syz.0.1994': attribute type 8 has an invalid length.
[  430.446489][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.477006][T13175] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  430.499549][T13175] netlink: 'syz.0.1994': attribute type 8 has an invalid length.
[  430.518035][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.580358][T13175] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  430.594438][T13175] netlink: 'syz.0.1994': attribute type 8 has an invalid length.
[  430.623998][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.686103][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  430.727164][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  432.026305][T13220] -: renamed from syzkaller0
[  434.762822][T13297] __nla_validate_parse: 36 callbacks suppressed
[  434.762841][T13297] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2018'.
[  436.924690][T13301] validate_nla: 74 callbacks suppressed
[  436.924706][T13301] netlink: 'syz.3.2019': attribute type 10 has an invalid length.
[  436.959212][T13310] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.2021'.
[  437.871555][T13327] netlink: 'syz.0.2022': attribute type 21 has an invalid length.
[  437.881045][T13327] netlink: 'syz.0.2022': attribute type 4 has an invalid length.
[  437.891976][T13327] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2022'.
[  440.198752][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.205167][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.517999][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'.
[  441.161274][T13373] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2041'.
[  441.180363][T13373] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  441.284368][T13378] netlink: 'syz.3.2042': attribute type 10 has an invalid length.
[  441.304137][T13378] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2042'.
[  444.137992][T13395] netlink: 'syz.0.2047': attribute type 4 has an invalid length.
[  444.145922][T13395] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2047'.
[  444.170093][T13395] wlan1: mtu less than device minimum
[  444.179727][T13395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  444.318559][T13398] bond0: (slave bridge_slave_1): Releasing backup interface
[  444.394138][T13411] netlink: 'syz.3.2052': attribute type 17 has an invalid length.
[  444.404221][T13411] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  444.451589][T13410] delete_channel: no stack
[  444.461640][T13416] netlink: 'syz.1.2053': attribute type 9 has an invalid length.
[  444.470019][T13416] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2053'.
[  444.551391][T13416] netlink: 'syz.1.2053': attribute type 3 has an invalid length.
[  444.562813][T13416] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2053'.
[  444.594098][T13421] netlink: 'syz.0.2054': attribute type 29 has an invalid length.
[  444.607772][T13421] netlink: 'syz.0.2054': attribute type 29 has an invalid length.
[  445.873185][T13461] netlink: 'syz.0.2067': attribute type 6 has an invalid length.
[  445.896391][T13459] netlink: 'syz.2.2066': attribute type 29 has an invalid length.
[  445.908563][T13461] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2067'.
[  445.922150][T13459] netlink: 'syz.2.2066': attribute type 29 has an invalid length.
[  445.947945][T13463] netlink: 'syz.2.2066': attribute type 29 has an invalid length.
[  446.841032][T13490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  446.848570][T13490] IPv6: NLM_F_CREATE should be set when creating new route
[  446.856495][T13490] IPv6: NLM_F_CREATE should be set when creating new route
[  446.863956][T13490] IPv6: NLM_F_CREATE should be set when creating new route
[  447.369639][T13516] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2079'.
[  447.531248][T13515] rxe_eth0 speed is unknown, defaulting to 1000
[  447.540597][T13522] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.2084'.
[  447.769011][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.792295][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.810428][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.824875][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.834624][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.845383][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  447.855019][T13530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2086'.
[  448.544074][T13537] delete_channel: no stack
[  448.925191][T13547] rxe_eth0 speed is unknown, defaulting to 1000
[  449.259564][T13559] validate_nla: 3 callbacks suppressed
[  449.259585][T13559] netlink: 'syz.2.2095': attribute type 10 has an invalid length.
[  449.800863][T13572] netlink: 'syz.2.2098': attribute type 30 has an invalid length.
[  449.826012][T13572] netlink: 'syz.2.2098': attribute type 10 has an invalid length.
[  449.876784][T13572] geneve1: entered promiscuous mode
[  449.882326][T13572] geneve1: entered allmulticast mode
[  449.906940][T13572] team0: Port device geneve1 added
[  449.934234][T13574] netlink: 'syz.1.2099': attribute type 10 has an invalid length.
[  449.971272][T13575] netlink: 'syz.1.2099': attribute type 10 has an invalid length.
[  451.046989][T13599] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  451.186287][T13592] netlink: 'syz.3.2103': attribute type 21 has an invalid length.
[  451.234016][T13592] __nla_validate_parse: 30 callbacks suppressed
[  451.234036][T13592] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2103'.
[  451.428599][T13609] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  451.463876][T13609] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2107'.
[  451.564524][T13616] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2109'.
[  451.714429][T13611] netlink: 'syz.2.2108': attribute type 10 has an invalid length.
[  451.753879][T13611] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2108'.
[  452.657571][T13628] netlink: 'syz.1.2110': attribute type 10 has an invalid length.
[  452.698770][T13628] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2110'.
[  452.809021][T13637] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2114'.
[  453.266343][T13653] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2117'.
[  453.505884][T13657] netlink: 'syz.0.2123': attribute type 10 has an invalid length.
[  454.017519][T13668] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2128'.
[  454.508930][T13676] validate_nla: 2 callbacks suppressed
[  454.508963][T13676] netlink: 'syz.3.2130': attribute type 21 has an invalid length.
[  454.758571][T13689] rxe_eth0 speed is unknown, defaulting to 1000
[  455.406294][T13716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2138'.
[  455.408722][T13717] netlink: 'syz.2.2139': attribute type 64 has an invalid length.
[  455.430564][ T5784] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  455.846395][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2144'.
[  456.254934][T13752] netlink: 'syz.3.2148': attribute type 4 has an invalid length.
[  456.381287][T13754] __nla_validate_parse: 1 callbacks suppressed
[  456.381300][T13754] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2149'.
[  456.408936][ T5784] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  456.723977][T13766] netlink: 'syz.0.2153': attribute type 4 has an invalid length.
[  456.767717][T13766] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2153'.
[  457.165284][T13781] netlink: 'syz.0.2160': attribute type 9 has an invalid length.
[  457.183801][T13781] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2160'.
[  457.300946][T13784] netlink: 'syz.0.2160': attribute type 9 has an invalid length.
[  457.322203][T13784] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2160'.
[  457.580162][T13786] netlink: 'syz.3.2162': attribute type 10 has an invalid length.
[  457.713899][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'.
[  458.357688][T13816] netlink: 'syz.0.2172': attribute type 10 has an invalid length.
[  458.410488][T13817] netlink: 'syz.2.2171': attribute type 10 has an invalid length.
[  458.441375][T13817] team0: Device ipvlan1 failed to register rx_handler
[  458.521903][T13819] netlink: 'syz.0.2172': attribute type 10 has an invalid length.
[  458.529991][T13819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2172'.
[  458.901599][T13828] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2175'.
[  458.944443][T13828] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  459.582287][T13853] netlink: 'syz.3.2184': attribute type 21 has an invalid length.
[  459.790707][T13862] netlink: 'syz.1.2185': attribute type 10 has an invalid length.
[  459.801316][T13862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2185'.
[  459.810798][T13862] team0: entered promiscuous mode
[  459.817709][T13862] team_slave_1: entered promiscuous mode
[  459.827107][T13862] team0: entered allmulticast mode
[  459.833026][T13862] team_slave_1: entered allmulticast mode
[  459.850552][T13862] bond0: (slave team0): Releasing backup interface
[  459.868312][T13862] bridge0: port 3(team0) entered blocking state
[  459.879474][T13862] bridge0: port 3(team0) entered disabled state
[  460.180308][T13865] syzkaller0: entered promiscuous mode
[  460.186638][T13865] syzkaller0: entered allmulticast mode
[  460.197160][T13870] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2189'.
[  460.416778][T13875] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2191'.
[  460.458320][T13875] netlink: 'syz.1.2191': attribute type 2 has an invalid length.
[  462.671248][T13887] sit0: entered promiscuous mode
[  463.252255][T13908] netlink: 'syz.2.2199': attribute type 30 has an invalid length.
[  463.299810][T13910] netlink: 'syz.2.2199': attribute type 10 has an invalid length.
[  464.241490][T13943] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2210'.
[  464.348376][T13948] netlink: 'syz.0.2212': attribute type 3 has an invalid length.
[  464.356877][T13948] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2212'.
[  465.211171][T13973] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2221'.
[  465.415779][T13973] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2221'.
[  465.658620][T13989] netlink: 'syz.3.2224': attribute type 41 has an invalid length.
[  465.702314][T13994] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2226'.
[  465.831685][T14001] netlink: 'syz.0.2227': attribute type 21 has an invalid length.
[  465.839664][T14001] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2227'.
[  467.365151][T14029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2237'.
[  467.558053][T14047] netlink: 'syz.3.2243': attribute type 21 has an invalid length.
[  467.571254][T14047] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2243'.
[  467.594099][T14048] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2242'.
[  467.603234][T14048] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2242'.
[  469.198784][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  469.209029][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  469.219785][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  469.229253][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  469.238807][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  469.248693][T14110] netlink: 'syz.0.2257': attribute type 10 has an invalid length.
[  469.256817][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  469.264541][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2257'.
[  469.278228][T14107] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2258'.
[  469.301711][T14107] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2258'.
[  469.333082][ T6272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.370352][T14108] rxe_eth0 speed is unknown, defaulting to 1000
[  469.398944][ T6272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.479700][ T6272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.675387][ T6272] bond0: (slave netdevsim0): Releasing backup interface
[  469.770468][ T6272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.830712][T14120] rxe_eth0 speed is unknown, defaulting to 1000
[  470.094443][T14131] netlink: 'syz.0.2262': attribute type 10 has an invalid length.
[  470.949635][T14108] chnl_net:caif_netlink_parms(): no params data found
[  470.980822][T14155] netlink: 'syz.0.2266': attribute type 1 has an invalid length.
[  470.990959][T14155] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2266'.
[  471.013986][T14155] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  471.326358][ T5784] Bluetooth: hci4: command tx timeout
[  471.502348][T14108] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.520716][T14108] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.535829][T14108] bridge_slave_0: entered allmulticast mode
[  471.554258][T14108] bridge_slave_0: entered promiscuous mode
[  471.612390][T14108] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.620185][T14108] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.630290][T14108] bridge_slave_1: entered allmulticast mode
[  471.640904][T14108] bridge_slave_1: entered promiscuous mode
[  471.778638][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.827006][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.914123][T14108] team0: Port device team_slave_0 added
[  471.980999][T14108] team0: Port device team_slave_1 added
[  472.413200][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.440791][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.477348][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.532508][T14199] delete_channel: no stack
[  472.560938][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.574183][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.603102][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.750728][T14108] hsr_slave_0: entered promiscuous mode
[  472.766094][T14108] hsr_slave_1: entered promiscuous mode
[  472.774543][T14108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.782168][T14108] Cannot create hsr debugfs directory
[  472.893490][T14210] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.2273'.
[  473.396233][ T5784] Bluetooth: hci4: command tx timeout
[  473.838991][T14217] netlink: 'syz.0.2276': attribute type 3 has an invalid length.
[  473.869587][T14217] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2276'.
[  474.323836][ T6272] hsr_slave_0: left promiscuous mode
[  474.339001][ T6272] hsr_slave_1: left promiscuous mode
[  474.374140][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.381683][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.436287][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.461928][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.483976][ T6272] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  474.491546][ T6272] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  474.531898][T14232] netlink: 'syz.0.2279': attribute type 4 has an invalid length.
[  474.551652][ T6272] bridge0: port 3(team0) entered disabled state
[  474.572043][T14232] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2279'.
[  474.572845][ T6272] hsr0: left allmulticast mode
[  474.608693][ T6272] bridge0: port 2(hsr0) entered disabled state
[  474.653047][ T6272] Lè+߬ç³Õ: left promiscuous mode
[  474.663433][ T6272] bridge0: port 1(Lè+߬ç³Õ) entered disabled state
[  474.804365][ T6272] veth1_macvtap: left promiscuous mode
[  474.811824][ T6272] veth0_macvtap: left promiscuous mode
[  475.281334][T14257] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2284'.
[  475.291709][T14257] netlink: 'syz.3.2284': attribute type 2 has an invalid length.
[  475.293141][T14259] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2284'.
[  475.474324][ T5784] Bluetooth: hci4: command tx timeout
[  475.853101][ T6272] team_slave_1 (unregistering): left promiscuous mode
[  475.860319][ T6272] team_slave_1 (unregistering): left allmulticast mode
[  475.872290][ T6272] team0 (unregistering): Port device team_slave_1 removed
[  475.976145][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.029298][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.080092][ T6272] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  476.351751][ T6272] bond0 (unregistering): Released all slaves
[  476.482636][T14248] netlink: 'syz.0.2283': attribute type 21 has an invalid length.
[  476.800654][T14285] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2290'.
[  476.962015][T14108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  476.984595][T14108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  477.013858][T14108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  477.032859][T14108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  477.094664][T14294] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2291'.
[  477.250851][T14108] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.298187][T14108] 8021q: adding VLAN 0 to HW filter on device team0
[  477.331632][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.338897][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.386782][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.394004][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.553873][ T5784] Bluetooth: hci4: command tx timeout
[  477.716057][T14308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2293'.
[  477.757736][T14308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  478.021253][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.142739][T14108] veth0_vlan: entered promiscuous mode
[  478.189282][T14108] veth1_vlan: entered promiscuous mode
[  478.277297][T14108] veth0_macvtap: entered promiscuous mode
[  478.303328][T14108] veth1_macvtap: entered promiscuous mode
[  478.342364][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.368312][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.395004][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.426637][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.455310][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.481366][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.513621][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.547310][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.573988][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.605236][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.617265][T14108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.644086][T14108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.652852][T14108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.687168][T14108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.811998][ T5784] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  478.922637][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.945369][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.049959][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.087350][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.833879][ T5784] Bluetooth: hci1: command 0x0406 tx timeout
[  481.112386][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  481.123575][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  481.141696][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  481.164318][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  481.174591][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  481.182045][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  481.394589][T14443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2320'.
[  481.716804][T14429] rxe_eth0 speed is unknown, defaulting to 1000
[  483.238791][ T5773] Bluetooth: hci0: command tx timeout
[  484.239703][T14489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2327'.
[  484.260362][T14489] bridge_slave_0: entered allmulticast mode
[  484.308343][T14429] chnl_net:caif_netlink_parms(): no params data found
[  484.719646][T14429] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.740363][T14429] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.756363][T14429] bridge_slave_0: entered allmulticast mode
[  484.777034][T14429] bridge_slave_0: entered promiscuous mode
[  484.897874][T14429] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.912141][T14429] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.938179][T14429] bridge_slave_1: entered allmulticast mode
[  484.955200][T14429] bridge_slave_1: entered promiscuous mode
[  485.128515][T14429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.183404][T14429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.308248][T14525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2333'.
[  485.317525][ T5773] Bluetooth: hci0: command tx timeout
[  485.382813][T14429] team0: Port device team_slave_0 added
[  485.410232][T14429] team0: Port device team_slave_1 added
[  485.489081][T14526] netlink: 'syz.2.2332': attribute type 39 has an invalid length.
[  485.609421][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.618110][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.647020][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.670936][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.678969][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.705666][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.880649][T14429] hsr_slave_0: entered promiscuous mode
[  485.901534][T14429] hsr_slave_1: entered promiscuous mode
[  485.914276][T14429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  485.922011][T14429] Cannot create hsr debugfs directory
[  486.732765][T14557] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2338'.
[  487.235201][ T6272] bond0: (slave wlan1): Releasing backup interface
[  487.261508][ T6272] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[  487.393864][ T5773] Bluetooth: hci0: command tx timeout
[  487.851888][T14585] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2343'.
[  487.898671][T14586] netlink: 'syz.2.2344': attribute type 21 has an invalid length.
[  487.911740][T14586] netlink: 'syz.2.2344': attribute type 1 has an invalid length.
[  488.206779][ T6272] veth1_macvtap: left promiscuous mode
[  488.212423][ T6272] veth0_macvtap: left promiscuous mode
[  489.484309][ T5773] Bluetooth: hci0: command tx timeout
[  490.311852][ T6272] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  490.322507][ T6272] batadv_slave_0 (unregistering): left promiscuous mode
[  490.431565][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.446747][ T6272] bond_slave_1 (unregistering): left promiscuous mode
[  490.487596][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.496643][ T6272] bond_slave_0 (unregistering): left promiscuous mode
[  490.540184][ T6272] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  490.549940][ T6272] bridge_slave_1 (unregistering): left promiscuous mode
[  490.775516][ T6272] bond0 (unregistering): Released all slaves
[  490.861811][T14610] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2345'.
[  490.872918][T14614] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2346'.
[  491.342455][T14630] netlink: 'syz.1.2350': attribute type 1 has an invalid length.
[  491.374011][T14630] netlink: 'syz.1.2350': attribute type 4 has an invalid length.
[  491.381808][T14630] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2350'.
[  491.488586][T14429] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  491.520193][T14429] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  491.530816][T14429] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  491.542435][T14429] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  491.923269][T14429] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.268760][T14429] 8021q: adding VLAN 0 to HW filter on device team0
[  492.536447][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.543698][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.617548][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.624789][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.769283][T14429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.359058][T14660] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2355'.
[  493.985601][T14640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2358'.
[  494.024714][T14640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.757659][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.921188][T14429] veth0_vlan: entered promiscuous mode
[  494.983274][T14429] veth1_vlan: entered promiscuous mode
[  495.049505][T14689] delete_channel: no stack
[  495.131176][T14429] veth0_macvtap: entered promiscuous mode
[  495.242957][T14429] veth1_macvtap: entered promiscuous mode
[  495.439299][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.484065][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.518515][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.543704][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.553575][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.601567][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.617503][T14429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.687820][T14715] wg2: entered promiscuous mode
[  495.692731][T14715] wg2: entered allmulticast mode
[  495.737567][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.762507][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.783785][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.803811][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.821223][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.832102][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.867084][T14429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.927798][T14429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.960103][T14429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.973729][T14429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.993971][T14429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.097942][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.116263][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.150590][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.161423][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.982662][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  496.992790][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  497.018996][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  497.037731][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.045802][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  497.053225][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  497.095746][ T6277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.216789][T14739] rxe_eth0 speed is unknown, defaulting to 1000
[  497.310597][ T6277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.555797][ T6277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.612557][T14745] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2367'.
[  497.854222][ T6277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.203157][ T5784] Bluetooth: hci1: command tx timeout
[  500.459502][T14748] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2375'.
[  500.781648][T14764] netlink: 'syz.0.2370': attribute type 8 has an invalid length.
[  500.792080][T14764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2370'.
[  501.096518][T14739] chnl_net:caif_netlink_parms(): no params data found
[  501.248085][ T5784] Bluetooth: hci1: command tx timeout
[  501.666163][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.672755][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.691124][T14785] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  501.749925][T14785] syzkaller0: entered promiscuous mode
[  501.755612][T14785] syzkaller0: entered allmulticast mode
[  502.062930][T14739] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.078933][T14739] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.094709][T14739] bridge_slave_0: entered allmulticast mode
[  502.103099][T14739] bridge_slave_0: entered promiscuous mode
[  502.163413][T14739] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.176997][T14739] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.208623][T14739] bridge_slave_1: entered allmulticast mode
[  502.236468][T14739] bridge_slave_1: entered promiscuous mode
[  503.324011][ T5784] Bluetooth: hci1: command tx timeout
[  504.397096][T14739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.532451][T14826] Dead loop on virtual device ip6_vti0, fix it urgently!
[  504.548917][T14739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.751044][T14739] team0: Port device team_slave_0 added
[  504.869916][T14739] team0: Port device team_slave_1 added
[  504.902989][T14833] netlink: 'syz.0.2386': attribute type 2 has an invalid length.
[  504.911205][T14833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2386'.
[  505.002716][T14833] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2386'.
[  505.050434][T14739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.084076][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.171716][T14739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.226201][T14739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.233197][T14739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.341819][T14739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.404006][ T5784] Bluetooth: hci1: command tx timeout
[  505.857450][T14739] hsr_slave_0: entered promiscuous mode
[  505.882729][T14739] hsr_slave_1: entered promiscuous mode
[  505.900568][T14739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.936426][T14739] Cannot create hsr debugfs directory
[  506.981033][ T6277] bond0: (slave wlan1): Releasing backup interface
[  507.065166][T14873] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2393'.
[  507.692010][ T6277] hsr_slave_0: left promiscuous mode
[  507.709197][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  507.723371][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.760412][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.778449][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.844834][ T6277] veth1_vlan: left promiscuous mode
[  507.850538][ T6277] veth0_vlan: left promiscuous mode
[  508.093616][ T6277] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  508.538007][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.586351][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.823792][ T6277] bond0 (unregistering): Released all slaves
[  508.865917][T14879] netlink: 'syz.1.2395': attribute type 10 has an invalid length.
[  508.875914][T14879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2395'.
[  508.896878][T14879] batman_adv: batadv0: Adding interface: virt_wifi0
[  508.903978][T14879] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.930106][T14879] batman_adv: batadv0: Interface activated: virt_wifi0
[  510.699940][T14739] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  513.691194][T14739] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  514.042498][T14739] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  514.080242][T14739] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  514.533902][T14739] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.618791][T14739] 8021q: adding VLAN 0 to HW filter on device team0
[  514.654588][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.661840][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.728656][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.735841][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.275675][T14979] batman_adv: batadv0: Removing interface: vlan1
[  515.620834][T14979] macvlan1 (unregistering): left promiscuous mode
[  515.648716][T14979] team0: Port device macvlan1 removed
[  515.673549][T14984] netlink: 'syz.1.2411': attribute type 21 has an invalid length.
[  515.686669][T14984] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2411'.
[  515.701066][T14998] netlink: 'syz.0.2413': attribute type 10 has an invalid length.
[  515.745109][T14998] veth0_vlan: entered allmulticast mode
[  515.837665][T14998] veth0_vlan: left promiscuous mode
[  515.897470][T14998] veth0_vlan: entered promiscuous mode
[  515.924340][T14998] team0: Device veth0_vlan failed to register rx_handler
[  516.135077][T14739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.241897][T15018] netlink: 'syz.0.2416': attribute type 9 has an invalid length.
[  516.261228][T15018] netlink: 463 bytes leftover after parsing attributes in process `syz.0.2416'.
[  516.261401][T14739] veth0_vlan: entered promiscuous mode
[  516.306741][T14739] veth1_vlan: entered promiscuous mode
[  516.369898][T14739] veth0_macvtap: entered promiscuous mode
[  516.387483][T14739] veth1_macvtap: entered promiscuous mode
[  516.426274][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.448934][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.474907][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.504073][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.524718][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.555043][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.575385][T14739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.614069][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.643958][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.663926][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.677334][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.687643][T14739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.698619][T14739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.718416][T14739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.739879][T14739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.752418][T14739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.779366][T14739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.791576][T14739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.982215][T15039] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2421'.
[  516.997149][ T6275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.016203][T15039] netlink: get zone limit has 4 unknown bytes
[  517.043874][ T6275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.179844][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.204772][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.127902][T15120] 
€Â: renamed from syzkaller0
[  519.141920][T15119] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2435'.
[  519.149401][T15120] 
€Â0: renamed from pim6reg1
[  519.185881][T15119] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  519.254949][T15124] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2437'.
[  520.419210][T15164] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2444'.
[  520.450893][T15164] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2444'.
[  520.512082][T15163] syzkaller0: entered promiscuous mode
[  520.523390][T15163] syzkaller0: entered allmulticast mode
[  523.846584][T15184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2449'.
[  524.042846][T15201] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2455'.
[  524.116186][T15201] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2455'.
[  524.445610][T15220] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2460'.
[  524.972676][T15242] netlink: 'syz.2.2463': attribute type 10 has an invalid length.
[  525.332983][T15251] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2465'.
[  525.358305][T15246] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2464'.
[  525.768469][T15260] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2467'.
[  526.417027][T15287] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2477'.
[  526.998050][T15301] 
: renamed from bond_slave_0 (while UP)
[  527.120833][T15301] netlink: 'syz.0.2481': attribute type 9 has an invalid length.
[  527.157169][T15301] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.2481'.
[  527.407947][T15316] netlink: 'syz.0.2486': attribute type 22 has an invalid length.
[  527.453977][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'.
[  528.434137][T15346] netlink: 'syz.2.2495': attribute type 13 has an invalid length.
[  528.445885][T15346] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  528.905709][T15349] netlink: 'syz.3.2496': attribute type 13 has an invalid length.
[  528.921880][T15350] __nla_validate_parse: 1 callbacks suppressed
[  528.921897][T15350] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2497'.
[  529.151595][T15346] netlink: 'syz.2.2495': attribute type 10 has an invalid length.
[  529.245972][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2495'.
[  529.310146][T15346] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  529.322379][T15346] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.376538][T15346] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  529.421392][T15357] netlink: 'syz.1.2498': attribute type 13 has an invalid length.
[  529.433856][T15357] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2498'.
[  529.837940][T15360] rxe_eth0 speed is unknown, defaulting to 1000
[  530.482587][T15375] syzkaller0: entered promiscuous mode
[  530.505338][T15375] syzkaller0: entered allmulticast mode
[  533.492198][T15410] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2510'.
[  535.736284][T15448] netlink: 'syz.1.2521': attribute type 2 has an invalid length.
[  535.770414][T15448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2521'.
[  536.309543][T15474] netlink: 'syz.2.2526': attribute type 3 has an invalid length.
[  536.356412][T15474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2526'.
[  536.543235][T15484] netlink: 'syz.1.2527': attribute type 21 has an invalid length.
[  536.620695][T15484] netlink: 'syz.1.2527': attribute type 6 has an invalid length.
[  537.077752][T15487] syz.2.2529 (15487) used greatest stack depth: 17960 bytes left
[  537.829006][T15521] netlink: 'syz.0.2539': attribute type 6 has an invalid length.
[  537.843756][T15521] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2539'.
[  537.904401][T15521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2539'.
[  538.634077][T15545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2546'.
[  538.678684][T15545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  539.059291][T15557] netlink: 'syz.2.2550': attribute type 2 has an invalid length.
[  539.103833][T15557] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2550'.
[  539.186679][T15563] netlink: 'syz.1.2551': attribute type 3 has an invalid length.
[  539.202333][T15563] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2551'.
[  539.761573][T15568] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2552'.
[  540.502794][T15591] delete_channel: no stack
[  540.531467][T15591] delete_channel: no stack
[  540.722215][T15597] netlink: 'syz.3.2558': attribute type 12 has an invalid length.
[  540.754225][T15597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2558'.
[  540.796674][T15593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2558'.
[  540.861871][T15599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2558'.
[  541.215482][T15603] netlink: 'syz.0.2559': attribute type 1 has an invalid length.
[  541.223500][T15603] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2559'.
[  542.104710][T15634] netlink: 'syz.1.2564': attribute type 10 has an invalid length.
[  542.230010][T15634] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.307974][T15634] bridge_slave_1: left allmulticast mode
[  542.335982][T15634] bridge_slave_1: left promiscuous mode
[  542.354145][T15634] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.420524][T15634] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  542.447953][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'.
[  542.610605][T15646] rxe_eth0 speed is unknown, defaulting to 1000
[  543.315018][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  543.327808][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  543.338205][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  543.348589][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  543.357013][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  543.377133][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  543.498467][T15384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.669094][T15384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.716824][T15660] rxe_eth0 speed is unknown, defaulting to 1000
[  543.799399][T15384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.898005][T15384] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface
[  543.937177][T15384] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.852986][T15660] chnl_net:caif_netlink_parms(): no params data found
[  545.473896][ T5784] Bluetooth: hci2: command tx timeout
[  545.611426][T15660] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.640416][T15660] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.648814][T15660] bridge_slave_0: entered allmulticast mode
[  545.662872][T15660] bridge_slave_0: entered promiscuous mode
[  545.789741][T15660] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.809230][T15660] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.823903][T15660] bridge_slave_1: entered allmulticast mode
[  545.835461][T15660] bridge_slave_1: entered promiscuous mode
[  545.876707][T15708] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2579'.
[  545.915074][T15714] syzkaller1: tun_chr_ioctl cmd 1074025677
[  545.922325][T15714] syzkaller1: linktype set to 823
[  545.942765][T15660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.970988][T15710] syzkaller0: entered promiscuous mode
[  545.982030][T15710] syzkaller0: entered allmulticast mode
[  546.005276][T15660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.084516][T15660] team0: Port device team_slave_0 added
[  546.224685][T15660] team0: Port device team_slave_1 added
[  546.372152][T15660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.384811][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.413300][T15660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.449210][T15660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.473465][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.559741][T15660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.600867][T15729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2585'.
[  546.771881][T15660] hsr_slave_0: entered promiscuous mode
[  546.801445][T15660] hsr_slave_1: entered promiscuous mode
[  547.554127][ T5784] Bluetooth: hci2: command tx timeout
[  548.080026][T15765] pim6reg0: tun_chr_ioctl cmd 1074025672
[  548.095009][T15765] pim6reg0: ignored: set checksum disabled
[  548.148143][T15776] pim6reg0: tun_chr_ioctl cmd 1074025673
[  548.162438][T15777] pim6reg0: tun_chr_ioctl cmd 1074025672
[  548.168695][T15777] pim6reg0: ignored: set checksum disabled
[  548.219429][T15781] netlink: 'syz.0.2595': attribute type 9 has an invalid length.
[  548.231538][T15781] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2595'.
[  548.256247][T15767] rxe_eth0 speed is unknown, defaulting to 1000
[  549.118880][T15803] netlink: 'syz.0.2600': attribute type 10 has an invalid length.
[  549.167347][T15803] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.196975][T15803] team0: Port device bond0 added
[  549.267124][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.281034][T15384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.304041][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.311512][T15384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.356372][T15384] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  549.373881][T15384] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  549.383316][T15384] bridge0: port 2(team0) entered disabled state
[  549.403450][T15384] bridge_slave_0: left promiscuous mode
[  549.423979][T15384] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.634929][ T5784] Bluetooth: hci2: command tx timeout
[  551.713859][ T5784] Bluetooth: hci2: command tx timeout
[  552.663262][T15384] geneve1 (unregistering): left promiscuous mode
[  552.671534][T15384] geneve1 (unregistering): left allmulticast mode
[  552.683316][T15384] team0 (unregistering): Port device geneve1 removed
[  552.944636][T15384] team_slave_1 (unregistering): left promiscuous mode
[  552.951541][T15384] team_slave_1 (unregistering): left allmulticast mode
[  552.960491][T15384] team0 (unregistering): Port device team_slave_1 removed
[  553.057287][T15384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.106528][T15384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.406829][T15384] bond0 (unregistering): Released all slaves
[  553.516699][T15835] netlink: 'syz.3.2606': attribute type 10 has an invalid length.
[  553.538923][T15835] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.557670][T15835] bridge_slave_1: left allmulticast mode
[  553.563406][T15835] bridge_slave_1: left promiscuous mode
[  553.572166][T15835] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.590533][T15835] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  553.850132][T15660] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  553.861441][T15660] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  553.898052][T15660] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  553.933904][T15660] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  554.245201][T15660] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.355308][T15660] 8021q: adding VLAN 0 to HW filter on device team0
[  554.405645][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.412854][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.489400][T15384] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.496623][T15384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.020145][T15660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.237569][T15660] veth0_vlan: entered promiscuous mode
[  555.287682][T15660] veth1_vlan: entered promiscuous mode
[  555.596989][T15881] ==================================================================
[  555.605098][T15881] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  555.612942][T15881] Write of size 56 at addr ffff88807e649290 by task syz.3.2615/15881
[  555.621011][T15881] 
[  555.623353][T15881] CPU: 1 PID: 15881 Comm: syz.3.2615 Not tainted syzkaller #0
[  555.630830][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  555.640913][T15881] Call Trace:
[  555.644204][T15881]  <TASK>
[  555.647141][T15881]  dump_stack_lvl+0x18c/0x250
[  555.651887][T15881]  ? read_lock_is_recursive+0x20/0x20
[  555.657294][T15881]  ? show_regs_print_info+0x20/0x20
[  555.662495][T15881]  ? load_image+0x420/0x420
[  555.667029][T15881]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  555.672600][T15881]  ? __virt_addr_valid+0x10c/0x380
[  555.677732][T15881]  ? __virt_addr_valid+0x10c/0x380
[  555.682871][T15881]  ? __virt_addr_valid+0x10c/0x380
[  555.688015][T15881]  print_report+0xa8/0x210
[  555.692476][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  555.697616][T15881]  kasan_report+0x117/0x150
[  555.702188][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  555.707316][T15881]  kasan_check_range+0x241/0x290
[  555.712262][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  555.717398][T15881]  __asan_memcpy+0x40/0x70
[  555.721849][T15881]  __bpf_get_stackid+0x6c7/0x900
[  555.726812][T15881]  bpf_get_stackid_pe+0x343/0x410
[  555.731848][T15881]  bpf_prog_e1579db1cbcc3ac0+0x30/0x40
[  555.737316][T15881]  bpf_overflow_handler+0x1fc/0x510
[  555.742526][T15881]  ? bpf_overflow_handler+0xde/0x510
[  555.747850][T15881]  ? tp_perf_event_destroy+0x20/0x20
[  555.753141][T15881]  ? __lock_acquire+0x1431/0x7eb0
[  555.758165][T15881]  ? verify_lock_unused+0x140/0x140
[  555.763362][T15881]  ? __perf_event_account_interrupt+0x187/0x280
[  555.769606][T15881]  __perf_event_overflow+0x461/0x660
[  555.774920][T15881]  perf_swevent_overflow+0x274/0x340
[  555.780240][T15881]  ? perf_event_switch_output+0x790/0x790
[  555.785972][T15881]  ? rcu_is_watching+0x15/0xb0
[  555.790746][T15881]  perf_swevent_event+0x45c/0x570
[  555.795774][T15881]  ? perf_tp_event+0x1550/0x1550
[  555.800715][T15881]  ___perf_sw_event+0x4ab/0x730
[  555.805571][T15881]  ? ___perf_sw_event+0x19e/0x730
[  555.810595][T15881]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  555.817012][T15881]  ? __lock_acquire+0x1431/0x7eb0
[  555.822045][T15881]  ? mark_lock+0x94/0x320
[  555.826374][T15881]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  555.832351][T15881]  ? lock_chain_count+0x20/0x20
[  555.837196][T15881]  ? mark_lock+0x94/0x320
[  555.841529][T15881]  __perf_sw_event+0x139/0x270
[  555.846296][T15881]  do_user_addr_fault+0x1242/0x12d0
[  555.851498][T15881]  ? rcu_is_watching+0x15/0xb0
[  555.856268][T15881]  exc_page_fault+0x64/0x100
[  555.860856][T15881]  asm_exc_page_fault+0x26/0x30
[  555.865799][T15881] RIP: 0010:rep_movs_alternative+0x33/0x90
[  555.871601][T15881] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[  555.891296][T15881] RSP: 0018:ffffc90003267d50 EFLAGS: 00050202
[  555.897360][T15881] RAX: 656c6c616b7a7973 RBX: 0000000000000028 RCX: 0000000000000028
[  555.905328][T15881] RDX: 0000000000000000 RSI: ffffc90003267df0 RDI: 00002000000001c0
[  555.913295][T15881] RBP: ffffc90003267ed8 R08: ffffc90003267e17 R09: 1ffff9200064cfc2
[  555.921260][T15881] R10: dffffc0000000000 R11: fffff5200064cfc3 R12: 00002000000001e8
[  555.929226][T15881] R13: 0000000000000000 R14: 00002000000001c0 R15: ffffc90003267df0
[  555.937203][T15881]  _copy_to_user+0x85/0xa0
[  555.941670][T15881]  __tun_chr_ioctl+0xaf0/0x2070
[  555.946535][T15881]  ? tun_flow_create+0x310/0x310
[  555.951478][T15881]  ? bpf_lsm_file_ioctl+0x9/0x10
[  555.956416][T15881]  ? security_file_ioctl+0x80/0xa0
[  555.961556][T15881]  ? tun_chr_poll+0x630/0x630
[  555.966230][T15881]  __se_sys_ioctl+0xfd/0x170
[  555.971008][T15881]  do_syscall_64+0x55/0xb0
[  555.975421][T15881]  ? clear_bhb_loop+0x40/0x90
[  555.980128][T15881]  ? clear_bhb_loop+0x40/0x90
[  555.984804][T15881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  555.990788][T15881] RIP: 0033:0x7f3f1639e559
[  555.995198][T15881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.014828][T15881] RSP: 002b:00007f3f1719a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  556.023242][T15881] RAX: ffffffffffffffda RBX: 00007f3f16625fa0 RCX: 00007f3f1639e559
[  556.031210][T15881] RDX: 00002000000001c0 RSI: 00000000400454ca RDI: 0000000000000006
[  556.039173][T15881] RBP: 00007f3f16435ad8 R08: 0000000000000000 R09: 0000000000000000
[  556.047137][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  556.055105][T15881] R13: 00007f3f16626038 R14: 00007f3f16625fa0 R15: 00007fffd2913468
[  556.063096][T15881]  </TASK>
[  556.066109][T15881] 
[  556.068442][T15881] Allocated by task 15881:
[  556.072843][T15881]  kasan_set_track+0x4e/0x70
[  556.077435][T15881]  __kasan_kmalloc+0x8f/0xa0
[  556.082018][T15881]  __kmalloc_node+0xb6/0x240
[  556.086643][T15881]  bpf_map_area_alloc+0x5e/0x110
[  556.091595][T15881]  prealloc_elems_and_freelist+0x86/0x1c0
[  556.097356][T15881]  stack_map_alloc+0x32b/0x4b0
[  556.102118][T15881]  map_create+0x877/0x12f0
[  556.106528][T15881]  __sys_bpf+0x651/0x890
[  556.110766][T15881]  __x64_sys_bpf+0x7c/0x90
[  556.115174][T15881]  do_syscall_64+0x55/0xb0
[  556.119584][T15881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.125479][T15881] 
[  556.127793][T15881] The buggy address belongs to the object at ffff88807e649280
[  556.127793][T15881]  which belongs to the cache kmalloc-cg-64 of size 64
[  556.142274][T15881] The buggy address is located 16 bytes inside of
[  556.142274][T15881]  allocated 40-byte region [ffff88807e649280, ffff88807e6492a8)
[  556.156239][T15881] 
[  556.158553][T15881] The buggy address belongs to the physical page:
[  556.164964][T15881] page:ffffea0001f99240 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807e649880 pfn:0x7e649
[  556.176416][T15881] memcg:ffff888030a5da01
[  556.180641][T15881] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  556.188617][T15881] page_type: 0xffffffff()
[  556.192947][T15881] raw: 00fff00000000800 ffff88801884da00 ffffea0000888f00 0000000000000005
[  556.201532][T15881] raw: ffff88807e649880 000000008020001d 00000001ffffffff ffff888030a5da01
[  556.210134][T15881] page dumped because: kasan: bad access detected
[  556.216560][T15881] page_owner tracks the page as allocated
[  556.222262][T15881] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 140064832151, free_ts 140063079493
[  556.240667][T15881]  post_alloc_hook+0x1c1/0x200
[  556.245427][T15881]  get_page_from_freelist+0x2181/0x22a0
[  556.250964][T15881]  __alloc_pages+0x1f0/0x460
[  556.255546][T15881]  alloc_slab_page+0x5d/0x180
[  556.260212][T15881]  new_slab+0x87/0x2d0
[  556.264274][T15881]  ___slab_alloc+0xc5c/0x12f0
[  556.268942][T15881]  __kmem_cache_alloc_node+0x11f/0x250
[  556.274405][T15881]  kmalloc_trace+0x2a/0xe0
[  556.278817][T15881]  alloc_fdtable+0xca/0x2c0
[  556.283323][T15881]  dup_fd+0x747/0xa20
[  556.287308][T15881]  copy_files+0xaf/0x110
[  556.291575][T15881]  copy_process+0x157d/0x3da0
[  556.296248][T15881]  kernel_clone+0x24b/0x8a0
[  556.300745][T15881]  __x64_sys_clone+0x1b7/0x230
[  556.305503][T15881]  do_syscall_64+0x55/0xb0
[  556.309915][T15881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.315809][T15881] page last free stack trace:
[  556.320468][T15881]  free_unref_page_prepare+0x7d7/0x8f0
[  556.325919][T15881]  free_unref_page+0x32/0x2e0
[  556.330585][T15881]  vfree+0x1a7/0x340
[  556.334479][T15881]  __do_replace+0x878/0x9b0
[  556.339105][T15881]  do_ip6t_set_ctl+0xb41/0xe10
[  556.343868][T15881]  nf_setsockopt+0x263/0x280
[  556.348518][T15881]  do_sock_setsockopt+0x175/0x1a0
[  556.353621][T15881]  __x64_sys_setsockopt+0x182/0x200
[  556.358820][T15881]  do_syscall_64+0x55/0xb0
[  556.363235][T15881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.369129][T15881] 
[  556.371439][T15881] Memory state around the buggy address:
[  556.377057][T15881]  ffff88807e649180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  556.385130][T15881]  ffff88807e649200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  556.393221][T15881] >ffff88807e649280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  556.401272][T15881]                                   ^
[  556.406637][T15881]  ffff88807e649300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  556.414689][T15881]  ffff88807e649380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  556.422738][T15881] ==================================================================
[  556.430983][T15881] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  556.438167][T15881] CPU: 1 PID: 15881 Comm: syz.3.2615 Not tainted syzkaller #0
[  556.445618][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  556.455666][T15881] Call Trace:
[  556.458937][T15881]  <TASK>
[  556.461860][T15881]  dump_stack_lvl+0x18c/0x250
[  556.466536][T15881]  ? show_regs_print_info+0x20/0x20
[  556.471728][T15881]  ? load_image+0x420/0x420
[  556.476235][T15881]  panic+0x2ca/0x720
[  556.480125][T15881]  ? __lock_acquire+0x7eb0/0x7eb0
[  556.485145][T15881]  ? bpf_jit_dump+0xd0/0xd0
[  556.489647][T15881]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  556.495540][T15881]  ? _raw_spin_unlock+0x40/0x40
[  556.500388][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  556.505500][T15881]  check_panic_on_warn+0x84/0xa0
[  556.510439][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  556.515551][T15881]  end_report+0x6f/0x130
[  556.519791][T15881]  kasan_report+0x128/0x150
[  556.524303][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  556.529417][T15881]  kasan_check_range+0x241/0x290
[  556.534354][T15881]  ? __bpf_get_stackid+0x6c7/0x900
[  556.539469][T15881]  __asan_memcpy+0x40/0x70
[  556.543975][T15881]  __bpf_get_stackid+0x6c7/0x900
[  556.548917][T15881]  bpf_get_stackid_pe+0x343/0x410
[  556.553942][T15881]  bpf_prog_e1579db1cbcc3ac0+0x30/0x40
[  556.559400][T15881]  bpf_overflow_handler+0x1fc/0x510
[  556.564605][T15881]  ? bpf_overflow_handler+0xde/0x510
[  556.569900][T15881]  ? tp_perf_event_destroy+0x20/0x20
[  556.575270][T15881]  ? __lock_acquire+0x1431/0x7eb0
[  556.580295][T15881]  ? verify_lock_unused+0x140/0x140
[  556.585492][T15881]  ? __perf_event_account_interrupt+0x187/0x280
[  556.591824][T15881]  __perf_event_overflow+0x461/0x660
[  556.597150][T15881]  perf_swevent_overflow+0x274/0x340
[  556.602457][T15881]  ? perf_event_switch_output+0x790/0x790
[  556.608188][T15881]  ? rcu_is_watching+0x15/0xb0
[  556.612959][T15881]  perf_swevent_event+0x45c/0x570
[  556.617984][T15881]  ? perf_tp_event+0x1550/0x1550
[  556.622927][T15881]  ___perf_sw_event+0x4ab/0x730
[  556.627780][T15881]  ? ___perf_sw_event+0x19e/0x730
[  556.632802][T15881]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  556.639213][T15881]  ? __lock_acquire+0x1431/0x7eb0
[  556.644247][T15881]  ? mark_lock+0x94/0x320
[  556.648571][T15881]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  556.654549][T15881]  ? lock_chain_count+0x20/0x20
[  556.659396][T15881]  ? mark_lock+0x94/0x320
[  556.663737][T15881]  __perf_sw_event+0x139/0x270
[  556.668502][T15881]  do_user_addr_fault+0x1242/0x12d0
[  556.673716][T15881]  ? rcu_is_watching+0x15/0xb0
[  556.678484][T15881]  exc_page_fault+0x64/0x100
[  556.683075][T15881]  asm_exc_page_fault+0x26/0x30
[  556.687920][T15881] RIP: 0010:rep_movs_alternative+0x33/0x90
[  556.693732][T15881] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[  556.713349][T15881] RSP: 0018:ffffc90003267d50 EFLAGS: 00050202
[  556.719424][T15881] RAX: 656c6c616b7a7973 RBX: 0000000000000028 RCX: 0000000000000028
[  556.727393][T15881] RDX: 0000000000000000 RSI: ffffc90003267df0 RDI: 00002000000001c0
[  556.735359][T15881] RBP: ffffc90003267ed8 R08: ffffc90003267e17 R09: 1ffff9200064cfc2
[  556.743325][T15881] R10: dffffc0000000000 R11: fffff5200064cfc3 R12: 00002000000001e8
[  556.751314][T15881] R13: 0000000000000000 R14: 00002000000001c0 R15: ffffc90003267df0
[  556.759303][T15881]  _copy_to_user+0x85/0xa0
[  556.763724][T15881]  __tun_chr_ioctl+0xaf0/0x2070
[  556.768579][T15881]  ? tun_flow_create+0x310/0x310
[  556.773524][T15881]  ? bpf_lsm_file_ioctl+0x9/0x10
[  556.778456][T15881]  ? security_file_ioctl+0x80/0xa0
[  556.783570][T15881]  ? tun_chr_poll+0x630/0x630
[  556.788247][T15881]  __se_sys_ioctl+0xfd/0x170
[  556.792843][T15881]  do_syscall_64+0x55/0xb0
[  556.797260][T15881]  ? clear_bhb_loop+0x40/0x90
[  556.801930][T15881]  ? clear_bhb_loop+0x40/0x90
[  556.806609][T15881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.812508][T15881] RIP: 0033:0x7f3f1639e559
[  556.816916][T15881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.836516][T15881] RSP: 002b:00007f3f1719a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  556.844926][T15881] RAX: ffffffffffffffda RBX: 00007f3f16625fa0 RCX: 00007f3f1639e559
[  556.852891][T15881] RDX: 00002000000001c0 RSI: 00000000400454ca RDI: 0000000000000006
[  556.860860][T15881] RBP: 00007f3f16435ad8 R08: 0000000000000000 R09: 0000000000000000
[  556.868828][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  556.876803][T15881] R13: 00007f3f16626038 R14: 00007f3f16625fa0 R15: 00007fffd2913468
[  556.884802][T15881]  </TASK>
[  556.888079][T15881] Kernel Offset: disabled
[  556.892424][T15881] Rebooting in 86400 seconds..