last executing test programs:

2.991794315s ago: executing program 0 (id=5671):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4)
close(r0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r3, 0x40047459, 0xf0ff1f00000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})

2.724773498s ago: executing program 0 (id=5674):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100130001000000000000000000090000000100000000004caee524e13844d95227b53b0e71d292c4f369dd912ffec479c3a8cac98b9104346e2b622dce70cf46a1305846cc53763fb32918c153d55f23c4e97cc1a6a5c176cdad04acfccd8f35bced4b4ca88698fdcec24942639303a50f791ed577eff83e97d7d3d23d8a44e1debe6f6df90ea1097caeaf40"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
r5 = socket$kcm(0x29, 0x2, 0x0)
close(r5)
r6 = socket$kcm(0x2b, 0x1, 0x0)
close(r6)
socket$kcm(0x2, 0x3, 0x84)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r6)
sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xfffffffffffffd7f, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x99}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x800, 0xe, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0xe37, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0fd795b53200593512310afb5e74283303277aedb1f887df4ee5d9e4ece2aae4bc413b780a759cb1d547e1cc18cf8f9b2e3194fdf5a3d7213763105f24aa0cd7126a824329076feed5b56b0079f1035140e103f7d16e4d5925b51893f74cfef0bd9900fb1711479eeedc3632b5f2e1e782c36fb1fbdcbdc5d45adf0c34359179708b50de98", @ANYRESDEC=r7, @ANYRESDEC=0x0, @ANYRES8=r1], 0x48)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000780)="32b31ab7f45464442a8a6c97ebbec31be692e445afff0e495dffd7cba6a9d8e9c2f3792b059c23f4222e9f25b494518cb435420b44311a9606a2f96f232a8bc75b8d25cd7eb9f7cec8194d51332e3971c0cab6f7f1c2ac5af5eb4db6c52484", 0x5f}, {&(0x7f0000000580)="cd2352f578c0466dea5339c0052c13a9d6fc03d5e30c5d650d16ce23364dfe9d16a11743d6be1f4c34cfda42ff6b", 0x2e}], 0x2, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xec29}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x68}, 0x8000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10)
r12 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffb, 0x2, @perf_bp={&(0x7f00000008c0), 0x2}, 0x110020, 0x8, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000000c0)='$\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
socket$kcm(0x10, 0x2, 0x0)

2.295470299s ago: executing program 2 (id=5681):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe50a10a000600014002020c600e41b0000900ac00bc0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4092000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)

2.256192871s ago: executing program 2 (id=5682):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10d, 0x3, 0x0, 0x0)

1.968104225s ago: executing program 2 (id=5684):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xf29}, 0x8d40, 0x1, 0x7, 0x3, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)

1.718427186s ago: executing program 0 (id=5686):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Wc\x00\x00'], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="7a7fa22c2aff88df53ef2a2d86dd", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Wc\x00\x00'], 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="7a7fa22c2aff88df53ef2a2d86dd", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)

1.524387726s ago: executing program 3 (id=5687):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x4, r0, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000700000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.434832251s ago: executing program 2 (id=5688):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884)

1.402383042s ago: executing program 3 (id=5689):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x4e}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x3f000000}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r5, 0x0, 0x0}, 0x10)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
close(0xffffffffffffffff)
socketpair(0x1e, 0x3, 0xa, 0x0)

1.381510063s ago: executing program 1 (id=5690):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
write$cgroup_pid(r2, 0x0, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

1.269108179s ago: executing program 0 (id=5691):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000c40a0000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x8}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x5}]}) (async)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="3900000007000000000057f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x31}], 0x1}, 0x4000180) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e7d13249899fa6596300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) (async, rerun: 64)
socketpair(0x25, 0x5, 0x5, &(0x7f0000001600)) (rerun: 64)

1.260694689s ago: executing program 2 (id=5692):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xb, 0x6, 0xe, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffb, 0x2, @perf_config_ext={0x4, 0x2}, 0x110020, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3)
socket$kcm(0x10, 0x2, 0x0)

1.207652322s ago: executing program 1 (id=5693):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0xffffffff}, {0x0, 0x80000, 0x0, 0x2}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94)
socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000))
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1.004324341s ago: executing program 3 (id=5694):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1d, 0x5, 0x98a, &(0x7f0000000380))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x110)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)

891.686667ms ago: executing program 1 (id=5695):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xaffffffffffffffc, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2050000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

807.709861ms ago: executing program 0 (id=5696):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xf29}, 0x8d40, 0x1, 0x7, 0x3, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)

468.216338ms ago: executing program 3 (id=5697):
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="42b2c0aca637", 0x6}], 0x1, &(0x7f0000000180)=ANY=[], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000085000000230000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800034003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$kcm(r1, 0x0, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021", 0x2b}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x23c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x20000004)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x40, 0xa, 0x41, 0x5, 0x0, 0x100, 0xe9767ccf9dd926b3, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x5, 0x4, 0x4, 0x3, 0xfffff5cd, 0x1, 0x0, 0x2, 0x0, 0xe}, r6, 0x5, r4, 0x7)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @loopback}, 0x80, 0x0}, 0x20000001)

467.845938ms ago: executing program 1 (id=5698):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, 0x0, 0x4000040)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0}, 0x4, 0x10004, 0x9e4, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c", 0xf}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@llu, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x90ff}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

206.72604ms ago: executing program 2 (id=5699):
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xf}, 0x8000, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x10a5, 0xa, &(0x7f0000002d40)="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", &(0x7f00000007c0)=""/10, 0x11, 0x0, 0x33, 0x1f7, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x5}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

204.85607ms ago: executing program 1 (id=5700):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

165.543002ms ago: executing program 0 (id=5701):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41)
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xa}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xd3, &(0x7f0000000340)=""/211, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x10, 0x100000, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000280)=[{0x4, 0x3, 0x5, 0x4}], 0x10, 0x10}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x11, 0x1, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r9, 0x1}, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@cgroup=r0, r4, 0x2d, 0x8, 0x0, @void, @value=r9, @void, @void, r5}, 0x20)

80.368036ms ago: executing program 3 (id=5702):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe00000000000000000ffffffffffff", 0x28}], 0x1}, 0x20040000)

20.314819ms ago: executing program 1 (id=5703):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x21, 0x4, 0x2}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/87, 0x49, 0x57, 0x1, 0xc8bb}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x12, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f00000009c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000a00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x7, 0x4, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0, r0], 0x0, 0x10, 0x10001}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f0000000840)}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x2, 0x5}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x40, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x39, '\x00', r9, r1, 0x5, 0x4, 0x3}, 0x50)

0s ago: executing program 3 (id=5704):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa, 0x7fffffff}, 0x10c101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB    \x00'}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0xc0189436, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000200000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28)
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000100000550901000000000095002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r10, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r11})

kernel console output (not intermixed with test programs):

ng attributes in process `syz.1.3194'.
[  753.452963][T15958] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3195'.
[  753.480508][T15958] netlink: 'syz.0.3195': attribute type 2 has an invalid length.
[  753.692974][T15963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3197'.
[  753.774607][T15963] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.983040][T15963] bridge_slave_0 (unregistering): left allmulticast mode
[  754.009785][T15963] bridge_slave_0 (unregistering): left promiscuous mode
[  754.029533][T15963] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.188044][T15968] netlink: 'syz.1.3200': attribute type 39 has an invalid length.
[  754.474887][T15979] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3203'.
[  758.480148][T16037] syzkaller0: entered promiscuous mode
[  758.511164][T16037] syzkaller0: entered allmulticast mode
[  758.717744][T16048] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3224'.
[  758.749097][T16048] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  758.771198][T16048] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  758.823992][T16063] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3228'.
[  758.845194][T16063] netlink: 'syz.1.3228': attribute type 2 has an invalid length.
[  760.850168][T16061] syzkaller0: entered promiscuous mode
[  760.861101][T16061] syzkaller0: entered allmulticast mode
[  763.884329][T16125] netlink: 'syz.3.3242': attribute type 39 has an invalid length.
[  764.168888][T16132] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3246'.
[  768.089073][T16168] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3261'.
[  768.930135][T16206] À: port 1(vlan0) entered blocking state
[  768.937276][T16206] À: port 1(vlan0) entered disabled state
[  768.943722][T16206] vlan0: entered allmulticast mode
[  768.949186][T16206] veth0_vlan: entered allmulticast mode
[  768.957212][T16206] vlan0: entered promiscuous mode
[  768.985442][T16208] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3277'.
[  769.264316][T16216] netlink: 'syz.3.3280': attribute type 7 has an invalid length.
[  769.312466][T16215] netlink: 'syz.3.3280': attribute type 7 has an invalid length.
[  770.075185][T12907] Bluetooth: hci2: command 0x0406 tx timeout
[  770.209483][T16230] netlink: 'syz.1.3285': attribute type 11 has an invalid length.
[  770.460317][T16245] netlink: 'syz.3.3291': attribute type 46 has an invalid length.
[  770.574334][T16243] syzkaller0: entered promiscuous mode
[  770.579982][T16243] syzkaller0: entered allmulticast mode
[  771.206552][T16270] netlink: 'syz.3.3298': attribute type 27 has an invalid length.
[  771.225558][T16270] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3298'.
[  773.746474][T16272] netlink: 'syz.3.3298': attribute type 10 has an invalid length.
[  773.754701][T16272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3298'.
[  773.764559][T16272] caif0: entered promiscuous mode
[  773.769748][T16272] caif0: entered allmulticast mode
[  773.777362][T16272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  774.168727][T16302] netlink: 'syz.1.3312': attribute type 10 has an invalid length.
[  774.183841][T16304] netlink: 'syz.0.3313': attribute type 2 has an invalid length.
[  774.192981][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  774.385904][T16310] netlink: 'syz.1.3317': attribute type 1 has an invalid length.
[  774.873258][T16328] netlink: 'syz.1.3323': attribute type 6 has an invalid length.
[  774.936375][T16323] netlink: 'syz.0.3321': attribute type 10 has an invalid length.
[  775.049598][T16337] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3326'.
[  775.220535][T12907] Bluetooth: hci4: ISO packet for unknown connection handle 5
[  775.430550][T16358] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3335'.
[  775.683979][T16372] pim6reg1: entered promiscuous mode
[  775.689536][T16372] pim6reg1: entered allmulticast mode
[  775.718711][T16372] netlink: 'syz.2.3339': attribute type 3 has an invalid length.
[  775.727754][T16372] netlink: 'syz.2.3339': attribute type 6 has an invalid length.
[  775.737340][T16372] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3339'.
[  776.833880][T16421] ref_ctr_offset mismatch. inode: 0x564 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  777.868181][T16433] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3363'.
[  778.029036][T16437] netlink: 'syz.2.3365': attribute type 11 has an invalid length.
[  779.420144][T16475] delete_channel: no stack
[  779.627723][T16488] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3383'.
[  779.685588][T16488] netlink: 'syz.0.3383': attribute type 2 has an invalid length.
[  780.019682][T16504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3387'.
[  782.881347][T16512] netlink: 'syz.3.3390': attribute type 10 has an invalid length.
[  783.082834][T16512] team0: Port device syz_tun added
[  783.088955][T16513] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3389'.
[  783.418562][T16526] syzkaller0: entered promiscuous mode
[  783.425271][T16526] syzkaller0: entered allmulticast mode
[  784.423389][T16548] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3402'.
[  786.308016][T16543] netlink: 'syz.2.3401': attribute type 6 has an invalid length.
[  786.467901][T16555] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3406'.
[  786.514501][T16555] openvswitch: netlink: Key type 4112 is out of range max 32
[  786.963469][T16575] ref_ctr_offset mismatch. inode: 0x5ac offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  787.074410][T16579] netlink: 'syz.2.3416': attribute type 11 has an invalid length.
[  787.904132][T16624] netlink: 'syz.0.3430': attribute type 10 has an invalid length.
[  787.923326][T16628] delete_channel: no stack
[  787.949870][T16631] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3433'.
[  787.961022][T16631] netlink: 'syz.3.3433': attribute type 2 has an invalid length.
[  788.359895][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  789.589620][T16671] netlink: 'syz.2.3446': attribute type 10 has an invalid length.
[  790.261428][T16673] syzkaller0: entered promiscuous mode
[  790.276515][T16673] syzkaller0: entered allmulticast mode
[  790.298660][T16676] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3448'.
[  793.413336][T16704] netlink: 'syz.1.3459': attribute type 10 has an invalid length.
[  793.555955][T16707] netlink: 'syz.2.3460': attribute type 10 has an invalid length.
[  793.580811][T16707] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.3460'.
[  794.078228][T16729] syzkaller0: entered promiscuous mode
[  794.087608][T16729] syzkaller0: entered allmulticast mode
[  794.444126][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'.
[  795.079054][T16741] FAULT_INJECTION: forcing a failure.
[  795.079054][T16741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.094977][T16741] CPU: 0 PID: 16741 Comm: syz.0.3471 Not tainted syzkaller #0
[  795.102493][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  795.112569][T16741] Call Trace:
[  795.115841][T16741]  <TASK>
[  795.118767][T16741]  dump_stack_lvl+0x18c/0x250
[  795.123450][T16741]  ? show_regs_print_info+0x20/0x20
[  795.128645][T16741]  ? load_image+0x400/0x400
[  795.133148][T16741]  ? __lock_acquire+0x7d40/0x7d40
[  795.138164][T16741]  ? snprintf+0xe9/0x140
[  795.142417][T16741]  should_fail_ex+0x39d/0x4d0
[  795.147113][T16741]  _copy_to_user+0x2f/0xa0
[  795.151535][T16741]  simple_read_from_buffer+0xe7/0x150
[  795.156925][T16741]  proc_fail_nth_read+0x1e8/0x260
[  795.162034][T16741]  ? proc_fault_inject_write+0x360/0x360
[  795.167681][T16741]  ? fsnotify_perm+0x271/0x5e0
[  795.172454][T16741]  ? proc_fault_inject_write+0x360/0x360
[  795.178091][T16741]  vfs_read+0x28b/0x970
[  795.182253][T16741]  ? kernel_read+0x1e0/0x1e0
[  795.186841][T16741]  ? __fget_files+0x28/0x4b0
[  795.191427][T16741]  ? __fget_files+0x28/0x4b0
[  795.196118][T16741]  ? __fget_files+0x43d/0x4b0
[  795.200814][T16741]  ? __fdget_pos+0x2a3/0x330
[  795.205462][T16741]  ? ksys_read+0x75/0x260
[  795.209792][T16741]  ksys_read+0x150/0x260
[  795.214036][T16741]  ? vfs_write+0x990/0x990
[  795.218454][T16741]  ? lockdep_hardirqs_on+0x98/0x150
[  795.223653][T16741]  do_syscall_64+0x55/0xa0
[  795.228111][T16741]  ? clear_bhb_loop+0x40/0x90
[  795.232885][T16741]  ? clear_bhb_loop+0x40/0x90
[  795.237575][T16741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  795.243471][T16741] RIP: 0033:0x7fcc18b5cfce
[  795.247891][T16741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  795.267781][T16741] RSP: 002b:00007fcc19b12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  795.276896][T16741] RAX: ffffffffffffffda RBX: 00007fcc19b136c0 RCX: 00007fcc18b5cfce
[  795.284953][T16741] RDX: 000000000000000f RSI: 00007fcc19b130a0 RDI: 0000000000000004
[  795.292926][T16741] RBP: 00007fcc19b13090 R08: 0000000000000000 R09: 0000000000000000
[  795.300892][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.308856][T16741] R13: 00007fcc18e16038 R14: 00007fcc18e15fa0 R15: 00007ffd8029ec58
[  795.316845][T16741]  </TASK>
[  798.958354][T16767] ref_ctr_offset mismatch. inode: 0x610 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  801.132263][T16783] syz.1.3486[16783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  801.132396][T16783] syz.1.3486[16783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  801.169045][T16785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3487'.
[  801.455798][T16805] lo: entered allmulticast mode
[  801.489011][T16804] lo: entered promiscuous mode
[  801.500188][T16804] lo: left allmulticast mode
[  801.785647][T16810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3496'.
[  801.873927][T16817] syzkaller0: entered promiscuous mode
[  801.879441][T16817] syzkaller0: entered allmulticast mode
[  805.291632][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'.
[  805.717977][T16871] netlink: 'syz.0.3514': attribute type 2 has an invalid length.
[  805.739080][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'.
[  806.653666][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3517'.
[  807.096821][T16895] syzkaller0: entered promiscuous mode
[  807.106271][T16895] syzkaller0: entered allmulticast mode
[  808.975360][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  808.994637][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  809.679737][T16949] ref_ctr_offset mismatch. inode: 0x685 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  809.880160][T16951] netlink: 'syz.3.3540': attribute type 11 has an invalid length.
[  809.933783][T16965] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3545'.
[  809.958357][T16965] netlink: 'syz.2.3545': attribute type 2 has an invalid length.
[  810.135901][T16969] netlink: 'syz.1.3547': attribute type 7 has an invalid length.
[  810.156944][T16969] netlink: 'syz.1.3547': attribute type 1 has an invalid length.
[  810.165321][T16969] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3547'.
[  810.542978][T16987] syzkaller0: entered promiscuous mode
[  810.554749][T16987] syzkaller0: entered allmulticast mode
[  813.045389][T17009] netlink: 'syz.1.3559': attribute type 10 has an invalid length.
[  813.224726][T17011] team0: Port device syz_tun removed
[  814.400650][T17036] netlink: 'syz.3.3568': attribute type 2 has an invalid length.
[  814.408465][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'.
[  814.661928][T17048] Dead loop on virtual device ip6_vti0, fix it urgently!
[  814.861623][T17053] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3574'.
[  815.118404][T17055] netlink: 'syz.1.3575': attribute type 10 has an invalid length.
[  815.137133][T17055] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.3575'.
[  815.335647][T17075] netlink: 'syz.1.3582': attribute type 6 has an invalid length.
[  816.768447][T17100] delete_channel: no stack
[  816.781117][T17103] syz.3.3594[17103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  816.781238][T17103] syz.3.3594[17103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  816.854021][T17105] netlink: 'syz.0.3595': attribute type 21 has an invalid length.
[  816.890487][T17105] netlink: 'syz.0.3595': attribute type 6 has an invalid length.
[  816.902071][T17105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3595'.
[  817.004843][T17108] netlink: 'syz.0.3595': attribute type 29 has an invalid length.
[  817.024730][T17108] netlink: 'syz.0.3595': attribute type 29 has an invalid length.
[  817.053234][T17108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3595'.
[  817.072726][T17108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3595'.
[  817.106568][T17108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3595'.
[  817.126614][T17108] netlink: 'syz.0.3595': attribute type 29 has an invalid length.
[  817.146014][T17108] netlink: 'syz.0.3595': attribute type 29 has an invalid length.
[  819.933965][T17119] ref_ctr_offset mismatch. inode: 0x4f3 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  820.021170][T17123] validate_nla: 1 callbacks suppressed
[  820.021186][T17123] netlink: 'syz.3.3600': attribute type 15 has an invalid length.
[  820.047374][T17123] netlink: 'syz.3.3600': attribute type 5 has an invalid length.
[  820.061088][T17123] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3600'.
[  820.189884][T17126] netlink: 'syz.0.3601': attribute type 11 has an invalid length.
[  820.193829][T17131] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3604'.
[  820.213328][T17131] netlink: 'syz.2.3604': attribute type 2 has an invalid length.
[  820.848098][T17158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3610'.
[  821.107061][T17170] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3615'.
[  821.499343][T17183] C: renamed from team_slave_0 (while UP)
[  821.533125][T17183] netlink: 'syz.2.3620': attribute type 3 has an invalid length.
[  821.550554][T17183] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  821.710806][T17193] netlink: 'syz.2.3623': attribute type 6 has an invalid length.
[  821.728987][T17193] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3623'.
[  821.765553][T17193] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3623'.
[  821.775121][T17193] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  821.786862][T17193] netlink: 'syz.2.3623': attribute type 27 has an invalid length.
[  821.798474][T17193] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3623'.
[  821.854362][T17193] netlink: 'syz.2.3623': attribute type 9 has an invalid length.
[  821.863446][T17193] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3623'.
[  821.966864][T17193] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3623'.
[  821.982979][T17193] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  822.453761][T17232] netlink: 'syz.1.3635': attribute type 6 has an invalid length.
[  823.635470][T17261] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3648'.
[  823.669084][T17261] openvswitch: netlink: Duplicate key (type 0).
[  823.812201][T17264] syz.0.3649[17264] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  823.812348][T17264] syz.0.3649[17264] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  825.101340][T17304] __nla_validate_parse: 2 callbacks suppressed
[  825.101357][T17304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3667'.
[  825.832916][T17304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3667'.
[  825.850892][T17306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3667'.
[  825.872353][T17308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3667'.
[  827.523575][T17315] delete_channel: no stack
[  828.050656][T17335] ref_ctr_offset mismatch. inode: 0x557 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  828.106952][T17337] netlink: 'syz.3.3674': attribute type 10 has an invalid length.
[  828.236878][T17344] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3677'.
[  828.246599][T17344] netlink: 'syz.2.3677': attribute type 2 has an invalid length.
[  828.418484][T17351] netlink: 'syz.3.3678': attribute type 11 has an invalid length.
[  828.764667][T17372] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3687'.
[  828.778478][T17372] netlink: 'syz.2.3687': attribute type 6 has an invalid length.
[  828.886971][T17368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3686'.
[  829.270056][T17386] Dead loop on virtual device ip6_vti0, fix it urgently!
[  830.347003][T17375] syzkaller0: entered promiscuous mode
[  830.354805][T17375] syzkaller0: entered allmulticast mode
[  832.335336][T17410] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3699'.
[  832.700875][T17457] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3714'.
[  834.767045][T17512] delete_channel: no stack
[  835.659154][T17528] ref_ctr_offset mismatch. inode: 0x709 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  836.639702][T17542] netlink: 'syz.0.3745': attribute type 6 has an invalid length.
[  836.654678][T17542] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3745'.
[  836.669034][T17543] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3744'.
[  836.693533][T17542] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3745'.
[  836.704985][T17543] netlink: 'syz.3.3744': attribute type 2 has an invalid length.
[  836.713672][T17542] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  836.739990][T17542] netlink: 'syz.0.3745': attribute type 27 has an invalid length.
[  836.764713][T17542] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3745'.
[  836.812317][T17542] netlink: 'syz.0.3745': attribute type 9 has an invalid length.
[  836.824602][T17542] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3745'.
[  836.928648][T17544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3745'.
[  836.950657][T17544] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  837.172017][T17548] netlink: 'syz.3.3747': attribute type 11 has an invalid length.
[  837.659434][T17567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3754'.
[  837.857582][T17574] netlink: 'syz.0.3756': attribute type 2 has an invalid length.
[  837.885218][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'.
[  838.134242][T17577] Dead loop on virtual device ip6_vti0, fix it urgently!
[  838.603922][T17581] netlink: 'syz.2.3759': attribute type 21 has an invalid length.
[  838.613048][T17581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3759'.
[  838.623729][T17581] netlink: 'syz.2.3759': attribute type 4 has an invalid length.
[  838.639301][T17583] netlink: 'syz.3.3758': attribute type 6 has an invalid length.
[  838.669056][T17583] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3758'.
[  838.675508][T17586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3758'.
[  838.702007][T17586] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  838.812277][T17583] netlink: 'syz.3.3758': attribute type 27 has an invalid length.
[  838.820252][T17583] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3758'.
[  838.849738][T17592] wg2: entered promiscuous mode
[  838.855309][T17592] wg2: entered allmulticast mode
[  838.893781][T17583] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3758'.
[  838.974411][T17594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3764'.
[  838.998135][T17586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3758'.
[  839.040721][T17586] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  839.612012][T17601] IPv6: Can't replace route, no match found
[  840.533089][T17616] syzkaller0: entered promiscuous mode
[  840.541815][T17616] syzkaller0: entered allmulticast mode
[  840.602927][T17642] syz.1.3782[17642] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  840.603050][T17642] syz.1.3782[17642] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  842.833130][T17646] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3784'.
[  843.299845][T17684] team_slave_1: mtu less than device minimum
[  844.103406][T17697] syzkaller0: entered promiscuous mode
[  844.130890][T17697] syzkaller0: entered allmulticast mode
[  846.672002][T17724] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3812'.
[  846.720553][T17723] ref_ctr_offset mismatch. inode: 0x821 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  846.806594][T17719] delete_channel: no stack
[  847.062810][T17740] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3817'.
[  847.083964][T17740] validate_nla: 3 callbacks suppressed
[  847.083978][T17740] netlink: 'syz.2.3817': attribute type 2 has an invalid length.
[  847.142860][T17744] netlink: 'syz.1.3819': attribute type 2 has an invalid length.
[  847.180465][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'.
[  847.282355][T17752] Dead loop on virtual device ip6_vti0, fix it urgently!
[  847.329221][T17751] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3821'.
[  847.386701][T17756] netlink: 'syz.1.3824': attribute type 10 has an invalid length.
[  847.529150][T17760] syzkaller0: entered promiscuous mode
[  847.535020][T17760] syzkaller0: entered allmulticast mode
[  849.777228][T17800] netlink: 'syz.2.3837': attribute type 10 has an invalid length.
[  854.701659][T17924] ref_ctr_offset mismatch. inode: 0x69e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  855.712668][T17943] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3880'.
[  855.751406][T17943] netlink: 'syz.0.3880': attribute type 2 has an invalid length.
[  855.866608][T17945] Dead loop on virtual device ip6_vti0, fix it urgently!
[  855.953793][T17949] netlink: 'syz.0.3883': attribute type 10 has an invalid length.
[  856.208124][T17952] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3884'.
[  858.251092][T17985] syzkaller0: entered promiscuous mode
[  858.256718][T17985] syzkaller0: entered allmulticast mode
[  862.316242][T18064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3905'.
[  862.329176][T18067] aaaaaaaaaaaaaaa: entered promiscuous mode
[  863.682406][T18132] ref_ctr_offset mismatch. inode: 0x6da offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  863.955996][T18135] delete_channel: no stack
[  864.086726][T18145] netlink: 'syz.1.3932': attribute type 153 has an invalid length.
[  864.100477][T18145] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3932'.
[  864.192700][T18152] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3933'.
[  864.212092][T18152] netlink: 'syz.2.3933': attribute type 2 has an invalid length.
[  864.396751][T18158] Dead loop on virtual device ip6_vti0, fix it urgently!
[  864.634241][T18165] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3939'.
[  866.584509][T18195] netlink: 'syz.1.3952': attribute type 2 has an invalid length.
[  866.620201][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'.
[  866.817179][T18197] mac80211_hwsim hwsim19 wlan0: left promiscuous mode
[  866.833158][T18197] mac80211_hwsim hwsim19 wlan0: left allmulticast mode
[  867.079224][T18210] netlink: 'syz.3.3955': attribute type 10 has an invalid length.
[  867.187785][T18215] syzkaller0: entered promiscuous mode
[  867.193743][T18215] syzkaller0: entered allmulticast mode
[  870.345980][T18240] netlink: 'syz.1.3965': attribute type 11 has an invalid length.
[  870.464095][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  870.480912][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  870.558726][T18255] netlink: 'syz.0.3968': attribute type 51 has an invalid length.
[  871.382288][T18280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3977'.
[  873.054278][T18326] netlink: 'syz.2.3993': attribute type 10 has an invalid length.
[  873.064753][T18327] ref_ctr_offset mismatch. inode: 0x903 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  873.088729][T18326] team0: Port device geneve1 added
[  873.581206][T18339] netlink: 'syz.1.3998': attribute type 6 has an invalid length.
[  873.742365][T18340] delete_channel: no stack
[  873.998265][T18356] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4004'.
[  874.009574][T18356] netlink: 'syz.3.4004': attribute type 2 has an invalid length.
[  874.544304][T18370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4009'.
[  875.314144][T18401] netlink: 'syz.1.4020': attribute type 2 has an invalid length.
[  875.344537][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4020'.
[  875.999835][T18418] netlink: 'syz.2.4025': attribute type 10 has an invalid length.
[  876.367734][T18422] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4027'.
[  876.388753][T18422] tc_dump_action: action bad kind
[  877.215971][T18431] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4031'.
[  877.370282][T18438] netlink: 'syz.1.4034': attribute type 11 has an invalid length.
[  878.792001][T18476] ref_ctr_offset mismatch. inode: 0x859 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  879.170635][T18481] netlink: 'syz.2.4050': attribute type 6 has an invalid length.
[  879.982713][T18507] delete_channel: no stack
[  880.653507][T18522] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4066'.
[  880.685753][T18522] netlink: 'syz.0.4066': attribute type 2 has an invalid length.
[  880.735202][T18521] netlink: 'syz.3.4065': attribute type 25 has an invalid length.
[  880.770387][T18521] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.4065'.
[  881.433916][T18546] netlink: 'syz.2.4071': attribute type 27 has an invalid length.
[  881.467387][T18546] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.4071'.
[  881.750667][T18555] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4076'.
[  882.173144][T18570] netlink: 'syz.0.4081': attribute type 10 has an invalid length.
[  882.260522][T18569] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4080'.
[  882.431052][T18577] netlink: 'syz.0.4084': attribute type 3 has an invalid length.
[  882.443702][T18577] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4084'.
[  882.867123][T18580] syzkaller0: entered promiscuous mode
[  882.921778][T18580] syzkaller0: entered allmulticast mode
[  882.993836][T18592] netlink: 'syz.0.4089': attribute type 25 has an invalid length.
[  883.006419][T18592] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.4089'.
[  883.940546][T18613] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4095'.
[  883.949975][T18613] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.4095'.
[  885.315755][T18618] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  885.327628][T18622] netlink: 'syz.2.4098': attribute type 21 has an invalid length.
[  885.341956][T18622] netlink: 'syz.2.4098': attribute type 19 has an invalid length.
[  885.353433][T18622] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.4098'.
[  885.712881][T18636] netlink: 'syz.2.4103': attribute type 25 has an invalid length.
[  885.742048][T18636] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.4103'.
[  886.657791][T18669] netlink: 'syz.1.4113': attribute type 11 has an invalid length.
[  887.359213][T18707] netlink: 'syz.0.4127': attribute type 6 has an invalid length.
[  888.146103][T18721] delete_channel: no stack
[  888.240390][T18728] netlink: 'syz.1.4137': attribute type 3 has an invalid length.
[  888.249825][T18728] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4137'.
[  888.386494][T18730] tap1: tun_chr_ioctl cmd 1074025675
[  888.436206][T18730] tap1: persist enabled
[  888.474342][T18730] tap2: tun_chr_ioctl cmd 1074025677
[  888.496809][T18730] tap2: linktype set to 778
[  888.531983][T12907] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  888.532831][T18738] netlink: 'syz.2.4139': attribute type 21 has an invalid length.
[  888.578682][T18738] netlink: 'syz.2.4139': attribute type 3 has an invalid length.
[  888.599824][T18738] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4139'.
[  888.633471][T18732] tap1: tun_chr_ioctl cmd 1074025675
[  888.641376][T18732] tap1: persist enabled
[  888.714834][T18738] netlink: 'syz.2.4139': attribute type 8 has an invalid length.
[  888.898773][T18740] syzkaller0: entered promiscuous mode
[  888.908261][T18740] syzkaller0: entered allmulticast mode
[  889.756495][T18761] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4147'.
[  891.038091][T18761] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.4147'.
[  891.267806][T18777] netlink: 'syz.0.4149': attribute type 8 has an invalid length.
[  891.290522][T18777] netlink: 'syz.0.4149': attribute type 6 has an invalid length.
[  891.298301][T18777] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.4149'.
[  892.086411][T18801] netlink: 'syz.3.4161': attribute type 39 has an invalid length.
[  892.396792][T18811] netlink: 'syz.2.4164': attribute type 11 has an invalid length.
[  893.127564][T18837] netlink: 'syz.2.4171': attribute type 8 has an invalid length.
[  893.161564][T18837] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4171'.
[  893.185729][T18836] syzkaller0: entered promiscuous mode
[  893.194304][T18836] syzkaller0: entered allmulticast mode
[  895.400570][T18846] netlink: 'syz.2.4176': attribute type 6 has an invalid length.
[  895.434909][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[  895.772073][T18878] netlink: 'syz.1.4186': attribute type 10 has an invalid length.
[  895.826556][T18880] ref_ctr_offset mismatch. inode: 0x922 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  895.855058][T18878] team0 (unregistering): Port device team_slave_0 removed
[  895.911665][T18878] team0 (unregistering): Port device team_slave_1 removed
[  895.936990][T18878] team0 (unregistering): Port device syz_tun removed
[  896.052029][T18891] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4191'.
[  896.071853][T18891] netlink: 'syz.3.4191': attribute type 2 has an invalid length.
[  896.242141][T18893] delete_channel: no stack
[  896.290448][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'.
[  896.299724][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'.
[  896.323261][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'.
[  896.354903][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'.
[  896.484476][T18908] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.4197'.
[  898.094452][T18951] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4215'.
[  898.244870][T18954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4216'.
[  898.324719][T18957] syzkaller0: entered promiscuous mode
[  898.330552][T18957] syzkaller0: entered allmulticast mode
[  898.598019][T18966] netlink: 'syz.3.4220': attribute type 8 has an invalid length.
[  898.620409][T18966] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4220'.
[  900.981448][T18990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4226'.
[  901.001244][T18990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4226'.
[  901.026003][T18984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4226'.
[  901.087152][T18992] netlink: 'syz.2.4230': attribute type 10 has an invalid length.
[  901.177583][T18984] netlink: 190064 bytes leftover after parsing attributes in process `syz.1.4226'.
[  901.380518][T19002] netlink: 'syz.0.4232': attribute type 10 has an invalid length.
[  901.770937][T19008] netlink: 'syz.1.4236': attribute type 8 has an invalid length.
[  901.820878][T19008] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4236'.
[  902.238709][T19033] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4245'.
[  902.419593][T19046] ref_ctr_offset mismatch. inode: 0x947 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  902.498481][T19044] netlink: 'syz.0.4250': attribute type 8 has an invalid length.
[  902.511699][T19044] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4250'.
[  902.630115][T19050] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4252'.
[  902.661650][T19050] netlink: 'syz.2.4252': attribute type 2 has an invalid length.
[  902.670712][T19052] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4253'.
[  902.681498][T19052] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  902.690040][T19052] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  902.854323][T19057] netlink: 'syz.3.4254': attribute type 10 has an invalid length.
[  902.966613][T19057] team0 (unregistering): Port device team_slave_0 removed
[  903.010593][T19057] team0 (unregistering): Port device team_slave_1 removed
[  903.054809][T19057] team0 (unregistering): Port device macvlan0 removed
[  903.117963][T19057] team0 (unregistering): Port device syz_tun removed
[  903.282565][T19075] netlink: 'syz.1.4259': attribute type 1 has an invalid length.
[  903.291778][T19075] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4259'.
[  903.310964][T19060] delete_channel: no stack
[  903.551697][T19081] Dead loop on virtual device ip6_vti0, fix it urgently!
[  903.659125][T19084] ip6gretap0: refused to change device tx_queue_len
[  904.045594][T19100] netlink: 'syz.1.4269': attribute type 10 has an invalid length.
[  905.461936][T19132] netlink: 'syz.0.4282': attribute type 10 has an invalid length.
[  905.817904][T19140] sit0: entered allmulticast mode
[  905.850483][T19141] sit0: entered promiscuous mode
[  906.218105][T19150] __nla_validate_parse: 2 callbacks suppressed
[  906.218236][T19150] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4290'.
[  906.276225][T19156] netlink: 'syz.3.4292': attribute type 10 has an invalid length.
[  906.306366][T19156] bridge0: port 2(
€Â) entered disabled state
[  906.313844][T19156] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.688496][T19179] syzkaller0: entered promiscuous mode
[  907.711352][T19179] syzkaller0: entered allmulticast mode
[  907.748103][T19181] netlink: 'syz.1.4302': attribute type 10 has an invalid length.
[  908.174760][T19196] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4308'.
[  910.086269][T19204] netlink: 'syz.1.4311': attribute type 11 has an invalid length.
[  910.224027][T19213] netlink: 'syz.3.4313': attribute type 21 has an invalid length.
[  910.235874][T19213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4313'.
[  911.396706][T19239] delete_channel: no stack
[  911.519190][T19246] netlink: 'syz.0.4325': attribute type 4 has an invalid length.
[  911.548985][T19246] netlink: 'syz.0.4325': attribute type 3 has an invalid length.
[  911.570134][T19246] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.4325'.
[  911.764670][T19251] syzkaller0: entered promiscuous mode
[  911.770237][T19251] syzkaller0: entered allmulticast mode
[  914.725767][T19292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4341'.
[  914.822751][T19297] netlink: 'syz.1.4342': attribute type 6 has an invalid length.
[  914.968239][T19303] syzkaller0: entered promiscuous mode
[  914.975185][T19303] syzkaller0: entered allmulticast mode
[  915.002509][T19306] sock: sock_timestamping_bind_phc: sock not bind to device
[  915.011619][T19307] sock: sock_timestamping_bind_phc: sock not bind to device
[  915.749590][T19312] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4349'.
[  916.829544][T19309] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4348'.
[  917.030375][T19320] FAULT_INJECTION: forcing a failure.
[  917.030375][T19320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  917.045117][T19320] CPU: 0 PID: 19320 Comm: syz.2.4352 Not tainted syzkaller #0
[  917.052644][T19320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  917.062751][T19320] Call Trace:
[  917.066068][T19320]  <TASK>
[  917.069022][T19320]  dump_stack_lvl+0x18c/0x250
[  917.073730][T19320]  ? show_regs_print_info+0x20/0x20
[  917.078947][T19320]  ? load_image+0x400/0x400
[  917.083484][T19320]  ? __might_fault+0xaa/0x120
[  917.088179][T19320]  ? __lock_acquire+0x7d40/0x7d40
[  917.093244][T19320]  should_fail_ex+0x39d/0x4d0
[  917.098037][T19320]  _copy_from_user+0x2f/0xe0
[  917.102645][T19320]  ___sys_sendmsg+0x1c7/0x360
[  917.107331][T19320]  ? get_pid_task+0x20/0x1e0
[  917.112035][T19320]  ? __sys_sendmsg+0x2a0/0x2a0
[  917.116873][T19320]  ? __lock_acquire+0x7d40/0x7d40
[  917.122418][T19320]  __se_sys_sendmsg+0x1c2/0x2b0
[  917.127285][T19320]  ? __x64_sys_sendmsg+0x80/0x80
[  917.132271][T19320]  ? lockdep_hardirqs_on+0x98/0x150
[  917.137488][T19320]  do_syscall_64+0x55/0xa0
[  917.142012][T19320]  ? clear_bhb_loop+0x40/0x90
[  917.146699][T19320]  ? clear_bhb_loop+0x40/0x90
[  917.151390][T19320]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  917.157288][T19320] RIP: 0033:0x7ffa9579c799
[  917.161806][T19320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  917.181425][T19320] RSP: 002b:00007ffa939f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  917.189874][T19320] RAX: ffffffffffffffda RBX: 00007ffa95a15fa0 RCX: 00007ffa9579c799
[  917.197851][T19320] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000007
[  917.205834][T19320] RBP: 00007ffa939f6090 R08: 0000000000000000 R09: 0000000000000000
[  917.213814][T19320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.221791][T19320] R13: 00007ffa95a16038 R14: 00007ffa95a15fa0 R15: 00007ffed509dfa8
[  917.229804][T19320]  </TASK>
[  917.852519][T19339] netlink: 'syz.1.4357': attribute type 2 has an invalid length.
[  917.891550][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'.
[  918.026830][T19349] netlink: 'syz.1.4361': attribute type 10 has an invalid length.
[  918.125551][T19347] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4362'.
[  918.193139][T19347] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.4362'.
[  918.220162][T19347] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4362'.
[  918.242970][T19354] netlink: 'syz.0.4364': attribute type 10 has an invalid length.
[  918.268802][T19356] netlink: 'syz.1.4365': attribute type 10 has an invalid length.
[  919.271760][T19385] syzkaller0: entered promiscuous mode
[  919.277280][T19385] syzkaller0: entered allmulticast mode
[  921.700002][T19387] netlink: 'syz.3.4377': attribute type 10 has an invalid length.
[  921.757147][T19405] netlink: 'syz.0.4382': attribute type 10 has an invalid length.
[  922.055443][T19409] delete_channel: no stack
[  922.472854][T19432] Dead loop on virtual device ip6_vti0, fix it urgently!
[  922.861554][T19452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4400'.
[  922.914222][T19450] netlink: 'syz.1.4395': attribute type 21 has an invalid length.
[  922.930438][T19450] IPv6: NLM_F_CREATE should be specified when creating new route
[  923.000474][T19455] netlink: 'syz.3.4402': attribute type 6 has an invalid length.
[  923.057213][T19453] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4395'.
[  923.133160][T19460] netlink: 'syz.0.4401': attribute type 29 has an invalid length.
[  923.285766][T19460] netlink: 'syz.0.4401': attribute type 29 has an invalid length.
[  923.313418][T19469] netlink: 'syz.0.4401': attribute type 29 has an invalid length.
[  923.406804][T19471] netlink: 'syz.3.4407': attribute type 3 has an invalid length.
[  923.423628][T19471] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4407'.
[  923.450601][T19469] netlink: 'syz.0.4401': attribute type 2 has an invalid length.
[  923.458383][T19469] netlink: 'syz.0.4401': attribute type 1 has an invalid length.
[  923.484804][T19469] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4401'.
[  924.835773][T19503] netlink: 'syz.3.4418': attribute type 9 has an invalid length.
[  924.843665][T19503] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4418'.
[  925.026130][T19503] netlink: 'syz.3.4418': attribute type 9 has an invalid length.
[  925.047529][T19503] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4418'.
[  925.088023][T19502] delete_channel: no stack
[  925.397992][T19511] FAULT_INJECTION: forcing a failure.
[  925.397992][T19511] name failslab, interval 1, probability 0, space 0, times 0
[  925.435195][T19511] CPU: 0 PID: 19511 Comm: syz.0.4420 Not tainted syzkaller #0
[  925.442709][T19511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  925.452789][T19511] Call Trace:
[  925.456089][T19511]  <TASK>
[  925.459031][T19511]  dump_stack_lvl+0x18c/0x250
[  925.463754][T19511]  ? show_regs_print_info+0x20/0x20
[  925.468997][T19511]  ? load_image+0x400/0x400
[  925.473537][T19511]  ? __might_sleep+0xe0/0xe0
[  925.478144][T19511]  ? __lock_acquire+0x7d40/0x7d40
[  925.483186][T19511]  ? __lock_acquire+0x1273/0x7d40
[  925.488235][T19511]  should_fail_ex+0x39d/0x4d0
[  925.492943][T19511]  should_failslab+0x9/0x20
[  925.497553][T19511]  slab_pre_alloc_hook+0x59/0x310
[  925.502598][T19511]  kmem_cache_alloc_node+0x60/0x320
[  925.507808][T19511]  ? __alloc_skb+0x103/0x2c0
[  925.512418][T19511]  __alloc_skb+0x103/0x2c0
[  925.516865][T19511]  alloc_skb_with_frags+0xca/0x7b0
[  925.521995][T19511]  ? verify_lock_unused+0x140/0x140
[  925.527226][T19511]  ? aa_label_sk_perm+0x463/0x5c0
[  925.532275][T19511]  sock_alloc_send_pskb+0x883/0x9a0
[  925.537506][T19511]  ? sock_kzfree_s+0x50/0x50
[  925.542116][T19511]  ? __might_sleep+0xe0/0xe0
[  925.546720][T19511]  ? mark_lock+0x94/0x320
[  925.551066][T19511]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[  925.557158][T19511]  ? security_socket_getpeersec_dgram+0x83/0xa0
[  925.563423][T19511]  unix_stream_sendmsg+0x48b/0xbf0
[  925.568563][T19511]  ? unix_show_fdinfo+0x270/0x270
[  925.573613][T19511]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  925.580054][T19511]  ? aa_sock_msg_perm+0x94/0x150
[  925.585015][T19511]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  925.590313][T19511]  ? security_socket_sendmsg+0x80/0xa0
[  925.595780][T19511]  ? unix_show_fdinfo+0x270/0x270
[  925.600824][T19511]  ____sys_sendmsg+0x5ba/0x960
[  925.605605][T19511]  ? __asan_memset+0x22/0x40
[  925.610225][T19511]  ? __sys_sendmsg_sock+0x30/0x30
[  925.615271][T19511]  ? __import_iovec+0x5f2/0x850
[  925.620148][T19511]  ? import_iovec+0x73/0xa0
[  925.624676][T19511]  ___sys_sendmsg+0x2a6/0x360
[  925.629375][T19511]  ? __sys_sendmsg+0x2a0/0x2a0
[  925.634269][T19511]  ? __lock_acquire+0x7d40/0x7d40
[  925.639346][T19511]  __se_sys_sendmsg+0x1c2/0x2b0
[  925.644219][T19511]  ? __x64_sys_sendmsg+0x80/0x80
[  925.649272][T19511]  ? lockdep_hardirqs_on+0x98/0x150
[  925.654496][T19511]  do_syscall_64+0x55/0xa0
[  925.658928][T19511]  ? clear_bhb_loop+0x40/0x90
[  925.663618][T19511]  ? clear_bhb_loop+0x40/0x90
[  925.668317][T19511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  925.674225][T19511] RIP: 0033:0x7fcc18b9c799
[  925.678652][T19511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  925.698277][T19511] RSP: 002b:00007fcc19b13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  925.706714][T19511] RAX: ffffffffffffffda RBX: 00007fcc18e15fa0 RCX: 00007fcc18b9c799
[  925.714698][T19511] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000007
[  925.722772][T19511] RBP: 00007fcc19b13090 R08: 0000000000000000 R09: 0000000000000000
[  925.730755][T19511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  925.738744][T19511] R13: 00007fcc18e16038 R14: 00007fcc18e15fa0 R15: 00007ffd8029ec58
[  925.746743][T19511]  </TASK>
[  926.184258][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'.
[  928.643783][T19607] validate_nla: 5 callbacks suppressed
[  928.643801][T19607] netlink: 'syz.3.4456': attribute type 10 has an invalid length.
[  929.519176][T19623] netlink: 'syz.0.4462': attribute type 11 has an invalid length.
[  929.581251][T19629] netlink: 'syz.1.4461': attribute type 51 has an invalid length.
[  929.964103][T19643] netlink: 'syz.0.4468': attribute type 10 has an invalid length.
[  930.132116][T19649] netlink: 'syz.2.4472': attribute type 10 has an invalid length.
[  930.141726][T19649] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.4472'.
[  930.155202][T19649] openvswitch: netlink: Flow key attr not present in new flow.
[  930.339508][T19652] syzkaller0: entered promiscuous mode
[  930.347663][T19652] syzkaller0: entered allmulticast mode
[  931.848123][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  931.855806][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  932.341624][T19661] delete_channel: no stack
[  932.670576][T19680] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4484'.
[  932.716299][T19683] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4485'.
[  932.800471][T19683] netlink: 'syz.2.4485': attribute type 2 has an invalid length.
[  932.984605][T19690] netlink: 'syz.2.4487': attribute type 6 has an invalid length.
[  933.757798][T19700] netlink: 'syz.2.4489': attribute type 10 has an invalid length.
[  933.834341][T19700] team0 (unregistering): Port device C removed
[  933.879100][T19700] team0 (unregistering): Port device team_slave_1 removed
[  933.905336][T19700] team0 (unregistering): Port device geneve1 removed
[  935.144842][T19745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4505'.
[  936.255289][T19759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  936.497481][T19764] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4511'.
[  939.734629][T19796] netlink: 'syz.1.4522': attribute type 10 has an invalid length.
[  940.002433][T19812] Dead loop on virtual device ip6_vti0, fix it urgently!
[  940.355755][T19819] syzkaller0: entered promiscuous mode
[  940.365653][T19819] syzkaller0: entered allmulticast mode
[  941.648463][T19827] delete_channel: no stack
[  942.770633][T19837] netlink: 'syz.2.4535': attribute type 10 has an invalid length.
[  942.882033][T19844] netlink: 'syz.1.4537': attribute type 1 has an invalid length.
[  942.889901][T19844] netlink: 'syz.1.4537': attribute type 4 has an invalid length.
[  942.938755][T19844] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4537'.
[  942.965838][T19850] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4540'.
[  942.975553][T19847] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4539'.
[  942.988487][T19850] netlink: 'syz.3.4540': attribute type 2 has an invalid length.
[  943.342525][T19861] syzkaller0: entered promiscuous mode
[  943.348221][T19861] syzkaller0: entered allmulticast mode
[  946.554008][T19940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4573'.
[  946.707087][T19894] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.4558'.
[  946.717418][T19899] netlink: 'syz.1.4558': attribute type 10 has an invalid length.
[  946.730492][T19934] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4572'.
[  946.744606][T19937] geneve0: entered promiscuous mode
[  946.769939][T19937] geneve0: entered allmulticast mode
[  946.777290][T19939] bridge0: port 2(
€Â) entered blocking state
[  946.783616][T19939] bridge0: port 2(
€Â) entered forwarding state
[  946.790192][T19939] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.797357][T19939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.821471][T19939] bridge0: entered promiscuous mode
[  946.826745][T19939] bridge0: entered allmulticast mode
[  947.066314][T19956] Dead loop on virtual device ip6_vti0, fix it urgently!
[  947.082178][T19950] netlink: 703 bytes leftover after parsing attributes in process `syz.3.4578'.
[  947.092019][T19948] netlink: 'syz.0.4577': attribute type 4 has an invalid length.
[  947.099996][T19948] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4577'.
[  947.253613][T19964] ref_ctr_offset mismatch. inode: 0xbc1 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  947.387240][T19968] syzkaller0: entered promiscuous mode
[  947.392942][T19968] syzkaller0: entered allmulticast mode
[  947.462012][T19975] syzkaller0: entered promiscuous mode
[  947.467647][T19975] syzkaller0: entered allmulticast mode
[  948.391211][T19981] delete_channel: no stack
[  949.721944][T19983] pim6reg0: tun_chr_ioctl cmd 1074025672
[  949.727624][T19983] pim6reg0: ignored: set checksum disabled
[  949.784022][T19984] netlink: 'syz.0.4589': attribute type 10 has an invalid length.
[  949.794930][T19984] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4589'.
[  951.542075][T19993] netlink: 'syz.3.4591': attribute type 6 has an invalid length.
[  951.549985][T19995] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4592'.
[  951.713850][T20001] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4595'.
[  951.751373][T20001] netlink: 'syz.2.4595': attribute type 2 has an invalid length.
[  952.065466][T20021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'.
[  952.114774][T20021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'.
[  952.250612][T20021] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0
[  952.314980][T20024] netlink: 'syz.0.4601': attribute type 9 has an invalid length.
[  952.340684][T20024] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4601'.
[  952.425719][T20030] netlink: 'syz.3.4602': attribute type 10 has an invalid length.
[  952.678053][T20044] netlink: 'syz.3.4608': attribute type 2 has an invalid length.
[  952.703046][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'.
[  953.097181][T20060] netlink: 'syz.1.4611': attribute type 2 has an invalid length.
[  953.151547][T20060] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4611'.
[  953.874688][T20071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4615'.
[  953.952668][T20071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4615'.
[  953.963153][T20075] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0
[  954.021733][T20071] netlink: 'syz.3.4615': attribute type 9 has an invalid length.
[  954.089108][T20079] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  954.100117][T20079] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  954.196021][T20081] netlink: 'syz.2.4617': attribute type 2 has an invalid length.
[  954.223005][T20081] netlink: 'syz.2.4617': attribute type 8 has an invalid length.
[  954.473315][T20086] syzkaller0: entered promiscuous mode
[  954.478996][T20086] syzkaller0: entered allmulticast mode
[  954.665437][T20093] netlink: 'syz.0.4622': attribute type 3 has an invalid length.
[  955.364884][T20097] netlink: 'syz.0.4622': attribute type 21 has an invalid length.
[  955.390847][T20097] __nla_validate_parse: 5 callbacks suppressed
[  955.390863][T20097] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4622'.
[  955.933229][T20117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'.
[  955.949936][T20117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'.
[  955.995890][T20117] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0
[  956.059612][T20117] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4630'.
[  956.524460][T20123] ref_ctr_offset mismatch. inode: 0xc09 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  956.904258][T20134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4636'.
[  956.920534][T20134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4636'.
[  956.940808][T20132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4636'.
[  958.362428][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'.
[  960.342363][T20200] validate_nla: 2 callbacks suppressed
[  960.342375][T20200] netlink: 'syz.0.4654': attribute type 6 has an invalid length.
[  960.439901][T20203] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4655'.
[  960.671854][T20211] delete_channel: no stack
[  961.855035][T20249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  961.866848][T20249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  961.875309][T20249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  961.885402][T20249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  961.905595][T20249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  961.915625][T20249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  962.006755][T20139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.072759][T20251] netlink: 'syz.1.4673': attribute type 10 has an invalid length.
[  962.146148][T20139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.272649][T20139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.301638][T20257] netlink: 'syz.1.4676': attribute type 2 has an invalid length.
[  962.320028][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4676'.
[  962.501906][T20139] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.300627][T20246] chnl_net:caif_netlink_parms(): no params data found
[  963.992423][T12907] Bluetooth: hci1: command tx timeout
[  964.208614][T20304] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4685'.
[  964.253748][T20246] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.273515][T20246] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.304269][T20246] bridge_slave_0: entered allmulticast mode
[  964.321717][T20246] bridge_slave_0: entered promiscuous mode
[  964.341769][T20246] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.356850][T20246] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.377361][T20246] bridge_slave_1: entered allmulticast mode
[  964.391762][T20246] bridge_slave_1: entered promiscuous mode
[  964.601998][T20246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  964.662277][T20246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  964.764799][T20246] team0: Port device team_slave_0 added
[  964.799607][T20246] team0: Port device team_slave_1 added
[  965.089508][T20246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.112519][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  965.178180][T20246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.223444][T20246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.250422][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  965.291395][T20246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  965.597746][T20246] hsr_slave_0: entered promiscuous mode
[  965.680840][T20246] hsr_slave_1: entered promiscuous mode
[  965.724548][T20246] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  965.750794][T20246] Cannot create hsr debugfs directory
[  965.825889][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4695'.
[  966.070769][T12907] Bluetooth: hci1: command tx timeout
[  966.190797][T20345] netlink: 'syz.1.4698': attribute type 10 has an invalid length.
[  966.532370][T20353] netlink: 'syz.2.4699': attribute type 11 has an invalid length.
[  966.639542][T20139] vlan0: left allmulticast mode
[  966.659160][T20139] veth0_vlan: left allmulticast mode
[  966.668673][T20139] vlan0: left promiscuous mode
[  966.688189][T20139] À: port 1(vlan0) entered disabled state
[  966.733010][T20139] hsr_slave_0: left promiscuous mode
[  966.770513][T20139] hsr_slave_1: left promiscuous mode
[  966.801858][T20139] hsr0: left allmulticast mode
[  966.807444][T20139] bridge0: port 3(hsr0) entered disabled state
[  966.872138][T20139] bridge_slave_1: left allmulticast mode
[  966.877832][T20139] bridge_slave_1: left promiscuous mode
[  966.902547][T20139] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.931864][T20139] bridge_slave_0: left allmulticast mode
[  966.937821][T20139] bridge_slave_0: left promiscuous mode
[  966.944622][T20139] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.039158][T20139] veth1_macvtap: left promiscuous mode
[  967.045411][T20139] veth0_macvtap: left promiscuous mode
[  967.053546][T20139] veth1_vlan: left promiscuous mode
[  967.059212][T20139] veth0_vlan: left promiscuous mode
[  968.150465][T12907] Bluetooth: hci1: command tx timeout
[  970.228117][T20392] netlink: 'syz.3.4707': attribute type 2 has an invalid length.
[  970.236160][T12907] Bluetooth: hci1: command tx timeout
[  970.250552][T20392] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4707'.
[  970.532511][T20401] sit0: left promiscuous mode
[  970.553984][T20401] sit0: left allmulticast mode
[  970.898010][T20246] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  970.921318][T20246] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  970.941952][T20246] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  970.978689][T20246] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  971.203958][T20246] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.240152][T20246] 8021q: adding VLAN 0 to HW filter on device team0
[  971.273504][T20145] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.280682][T20145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.327919][T20145] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.335149][T20145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.910853][T20446] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4719'.
[  971.958550][T20451] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4723'.
[  971.980678][T20451] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.4723'.
[  974.389990][T20246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  974.528570][T20246] veth0_vlan: entered promiscuous mode
[  974.547607][T20246] veth1_vlan: entered promiscuous mode
[  974.790548][T20246] veth0_macvtap: entered promiscuous mode
[  974.873810][T20246] veth1_macvtap: entered promiscuous mode
[  974.953687][T20246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  974.987164][T20246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  975.030706][T20246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  975.096488][T20246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  975.135361][T20246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  975.162883][T20246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  975.223165][T20246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  975.282501][T20246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  975.320852][T20246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  975.329803][T20246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.485302][T20145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.522136][T20145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  975.549385][T20139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.559508][T20139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  975.792940][T20499] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4738'.
[  976.042209][T20507] netlink: 'syz.1.4730': attribute type 10 has an invalid length.
[  976.802367][T20249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  976.813444][T20249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  976.830712][T20249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  976.842110][T20249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  976.867453][T20249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  976.876451][T20249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  976.957844][T20534] netlink: 'syz.1.4744': attribute type 1 has an invalid length.
[  976.966765][T20534] netlink: 'syz.1.4744': attribute type 3 has an invalid length.
[  976.975177][T20534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4744'.
[  976.995399][T20534] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4744'.
[  977.212677][T20544] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4747'.
[  977.234404][T20529] chnl_net:caif_netlink_parms(): no params data found
[  977.463030][T20529] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.492452][T20529] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.499674][T20529] bridge_slave_0: entered allmulticast mode
[  977.507514][T20529] bridge_slave_0: entered promiscuous mode
[  977.537681][T20529] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.548081][T20529] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.568238][T20529] bridge_slave_1: entered allmulticast mode
[  977.591622][T20529] bridge_slave_1: entered promiscuous mode
[  977.665670][T20529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.684077][T20529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.734195][T20529] team0: Port device team_slave_0 added
[  977.744558][T20529] team0: Port device team_slave_1 added
[  978.462000][T20529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.469120][T20529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.530465][T20529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.553319][T20529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.570581][T20529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.623029][T20529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.667172][T20585] netlink: 'syz.2.4762': attribute type 27 has an invalid length.
[  978.676132][T20585] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4762'.
[  978.690858][T20585] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check.
[  978.768771][T20585] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.4762'.
[  978.787656][T20529] hsr_slave_0: entered promiscuous mode
[  978.794555][T20529] hsr_slave_1: entered promiscuous mode
[  978.800994][T20529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  978.821045][T20529] Cannot create hsr debugfs directory
[  978.950682][T12907] Bluetooth: hci3: command tx timeout
[  979.031094][T20592] ref_ctr_offset mismatch. inode: 0xb84 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  979.200687][T20593] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4764'.
[  979.413751][T20605] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4770'.
[  981.030483][T12907] Bluetooth: hci3: command tx timeout
[  981.845578][T20529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.885481][T20605] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4770'.
[  981.963982][T20529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.093213][T20529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.031217][T20529] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.115260][T12907] Bluetooth: hci3: command tx timeout
[  983.443742][T20529] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  983.455478][T20529] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  983.465979][T20529] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  983.484037][T20529] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  985.190475][T12907] Bluetooth: hci3: command tx timeout
[  986.123511][T20634] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4779'.
[  986.133293][T20646] netlink: 'syz.1.4783': attribute type 6 has an invalid length.
[  986.270641][T20529] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.308105][T20529] 8021q: adding VLAN 0 to HW filter on device team0
[  986.342094][T20139] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.349290][T20139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  986.408339][T20652] syzkaller0: entered promiscuous mode
[  986.417202][T20652] syzkaller0: entered allmulticast mode
[  986.439221][T20138] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.446424][T20138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  988.393767][T20670] syzkaller0: entered promiscuous mode
[  988.399249][T20670] syzkaller0: entered allmulticast mode
[  989.133578][T20681] netlink: 'syz.1.4793': attribute type 16 has an invalid length.
[  989.143453][T20681] netlink: 'syz.1.4793': attribute type 3 has an invalid length.
[  989.151782][T20681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4793'.
[  990.777078][T20529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  990.817250][T20705] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4800'.
[  990.859569][T20705] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4800'.
[  990.922902][T20701] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4800'.
[  990.979239][T20529] veth0_vlan: entered promiscuous mode
[  991.002654][T20529] veth1_vlan: entered promiscuous mode
[  991.013908][T20710] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4803'.
[  991.038948][T20710] netlink: 'syz.1.4803': attribute type 2 has an invalid length.
[  991.067464][T20529] veth0_macvtap: entered promiscuous mode
[  991.101879][T20529] veth1_macvtap: entered promiscuous mode
[  991.141366][T20529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.170427][T20529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.182062][T20529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.196575][T20529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.208470][T20529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  991.297902][T20529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  991.323532][T20529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.337371][T20529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  991.348342][T20529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.432808][T20529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  991.460647][T20529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  991.470626][T20529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  991.479453][T20529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  991.497493][T20529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  991.601543][T20139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.625587][T20139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  991.690826][T20139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.698698][T20139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  991.749511][T20728] ref_ctr_offset mismatch. inode: 0x7d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  992.509701][T20746] syzkaller0: entered promiscuous mode
[  992.550642][T20746] syzkaller0: entered allmulticast mode
[  992.649310][T20249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  992.659027][T20249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  992.695919][T20249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  992.719858][T20249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  992.729723][T20249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  992.739499][T20249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  993.279351][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  993.306191][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  994.870651][T12907] Bluetooth: hci0: command tx timeout
[  994.880848][T20763] netlink: 'syz.3.4822': attribute type 11 has an invalid length.
[  994.927506][T20145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.014439][T20145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.112469][T20145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.137420][T20770] netlink: 'syz.0.4824': attribute type 29 has an invalid length.
[  995.164310][T20770] netlink: 'syz.0.4824': attribute type 29 has an invalid length.
[  995.181693][T20772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4825'.
[  995.287562][T20145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.585957][T20790] netlink: 'syz.2.4831': attribute type 6 has an invalid length.
[  995.609597][T20754] chnl_net:caif_netlink_parms(): no params data found
[  996.008754][T20754] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.016102][T20754] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.023848][T20754] bridge_slave_0: entered allmulticast mode
[  996.033958][T20754] bridge_slave_0: entered promiscuous mode
[  996.355271][T20754] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.368641][T20754] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.395153][T20754] bridge_slave_1: entered allmulticast mode
[  996.414285][T20754] bridge_slave_1: entered promiscuous mode
[  996.520129][T20754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.679992][T20754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.745892][T20830] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  996.761759][T20830] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  996.775223][T20827] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4838'.
[  996.923340][T20754] team0: Port device team_slave_0 added
[  996.964594][T12907] Bluetooth: hci0: command tx timeout
[  997.041163][T20836] netlink: 'syz.3.4839': attribute type 10 has an invalid length.
[  997.079594][T20836] 8021q: adding VLAN 0 to HW filter on device team0
[  997.135956][T20836] bond0: (slave team0): Enslaving as an active interface with an up link
[  997.158351][T20754] team0: Port device team_slave_1 added
[  997.217192][T20840] netlink: 'syz.2.4840': attribute type 21 has an invalid length.
[  997.240405][T20840] IPv6: NLM_F_CREATE should be specified when creating new route
[  997.445879][T20754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  997.453158][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  997.520327][T20754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  997.624874][T20754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  997.651364][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  997.740359][T20754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  997.849749][T20866] netlink: 'syz.3.4848': attribute type 29 has an invalid length.
[  997.897051][T20866] netlink: 'syz.3.4848': attribute type 29 has an invalid length.
[  997.982527][T20870] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4849'.
[  998.010465][T20870] netlink: 'syz.0.4849': attribute type 2 has an invalid length.
[  998.055709][T20754] hsr_slave_0: entered promiscuous mode
[  998.111620][T20754] hsr_slave_1: entered promiscuous mode
[  998.124352][T20754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  998.142574][T20754] Cannot create hsr debugfs directory
[  999.041747][T12907] Bluetooth: hci0: command tx timeout
[  999.302615][T20908] ref_ctr_offset mismatch. inode: 0x67 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  999.314261][T20902] netlink: 'syz.0.4856': attribute type 10 has an invalid length.
[  999.642628][T20902] team0 (unregistering): Port device team_slave_0 removed
[  999.678279][T20902] team0 (unregistering): Port device team_slave_1 removed
[ 1000.408688][T20919] netlink: 'syz.0.4866': attribute type 10 has an invalid length.
[ 1000.543566][T20920] netlink: 'syz.2.4859': attribute type 29 has an invalid length.
[ 1000.648017][T20145] vlan0: left allmulticast mode
[ 1000.675730][T20145] veth0_vlan: left allmulticast mode
[ 1000.691245][T20145] vlan0: left promiscuous mode
[ 1000.696441][T20145] À: port 1(vlan0) entered disabled state
[ 1000.727371][T20145] hsr_slave_0: left promiscuous mode
[ 1000.746810][T20145] hsr_slave_1: left promiscuous mode
[ 1000.764395][T20145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1000.773416][T20145] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1000.786801][T20145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1000.798736][T20145] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1000.815839][T20145] hsr0: left allmulticast mode
[ 1000.824588][T20145] bridge0: port 3(hsr0) entered disabled state
[ 1000.840344][T20145] bridge_slave_1: left allmulticast mode
[ 1000.846295][T20145] bridge_slave_1: left promiscuous mode
[ 1000.854455][T20145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.864897][T20145] bridge_slave_0: left allmulticast mode
[ 1000.871006][T20145] bridge_slave_0: left promiscuous mode
[ 1000.877927][T20145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.923487][T20145] veth1_macvtap: left promiscuous mode
[ 1000.934806][T20145] veth0_macvtap: left promiscuous mode
[ 1000.951519][T20145] veth1_vlan: left promiscuous mode
[ 1000.956977][T20145] veth0_vlan: left promiscuous mode
[ 1001.110736][T12907] Bluetooth: hci0: command tx timeout
[ 1002.194813][T20920] netlink: 'syz.2.4859': attribute type 29 has an invalid length.
[ 1002.532479][T20754] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1002.548476][T20754] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1002.582759][T20754] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1002.640162][T20754] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1002.727840][T20941] netlink: 'syz.0.4869': attribute type 29 has an invalid length.
[ 1002.799595][T20941] netlink: 'syz.0.4869': attribute type 29 has an invalid length.
[ 1002.825289][T20945] netlink: 'syz.0.4869': attribute type 29 has an invalid length.
[ 1003.044679][T20754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1003.113672][T20754] 8021q: adding VLAN 0 to HW filter on device team0
[ 1003.161662][T20139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1003.168805][T20139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1003.263172][T20145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1003.270402][T20145] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1003.556602][T20956] syzkaller0: entered promiscuous mode
[ 1003.580751][T20956] syzkaller0: entered allmulticast mode
[ 1003.701574][T20754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1006.133018][T20980] netlink: 'syz.3.4877': attribute type 10 has an invalid length.
[ 1006.286452][T20980] bond0: (slave team0): Releasing backup interface
[ 1006.356933][T20980] team0 (unregistering): Port device team_slave_0 removed
[ 1006.383728][T20980] team0 (unregistering): Port device team_slave_1 removed
[ 1006.460223][T20754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1006.576700][T20754] veth0_vlan: entered promiscuous mode
[ 1006.634790][T20754] veth1_vlan: entered promiscuous mode
[ 1006.723990][T20754] veth0_macvtap: entered promiscuous mode
[ 1006.735557][T20754] veth1_macvtap: entered promiscuous mode
[ 1006.797232][T20754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.839316][T20754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.861860][T20754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.881112][T20754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.894964][T20754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1006.907568][T20754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1006.960403][T20754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.980416][T20754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1007.004786][T20754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.037445][T20754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1007.080093][T21016] netlink: 'syz.3.4885': attribute type 11 has an invalid length.
[ 1007.105189][T20754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.140824][T20754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.156325][T20754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.190331][T20754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.446461][T20139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.482340][T20139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.570879][T20139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.604769][T20139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.675801][T21035] syzkaller0: entered promiscuous mode
[ 1007.704858][T21035] syzkaller0: entered allmulticast mode
[ 1008.644569][T20249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1008.672935][T20249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1008.684632][T20249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1008.704553][T20249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1008.737665][T20249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1008.752780][T20249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1009.382509][T21054] delete_channel: no stack
[ 1010.312544][T21053] netlink: 'syz.1.4814': attribute type 27 has an invalid length.
[ 1010.320774][T21053] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4814'.
[ 1010.330994][T21053] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1010.424492][T20145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.553073][T20145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.567640][T21065] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4893'.
[ 1010.694051][T20145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.730096][T21072] netlink: 'syz.3.4898': attribute type 6 has an invalid length.
[ 1010.772810][T20145] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.790626][T12907] Bluetooth: hci4: command tx timeout
[ 1011.085118][T21057] chnl_net:caif_netlink_parms(): no params data found
[ 1011.576295][T21096] netlink: 'syz.3.4905': attribute type 10 has an invalid length.
[ 1011.766125][T21057] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.791373][T21057] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.798643][T21057] bridge_slave_0: entered allmulticast mode
[ 1011.814715][T21057] bridge_slave_0: entered promiscuous mode
[ 1011.833296][T21057] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.863205][T21057] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.898000][T21057] bridge_slave_1: entered allmulticast mode
[ 1011.906188][T21057] bridge_slave_1: entered promiscuous mode
[ 1012.188645][T21057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1012.520483][T21057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1012.706731][T21057] team0: Port device team_slave_0 added
[ 1012.799522][T21057] team0: Port device team_slave_1 added
[ 1012.871009][T12907] Bluetooth: hci4: command tx timeout
[ 1012.946490][T21134] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4915'.
[ 1012.951431][T21057] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.960434][T21134] netlink: 'syz.3.4915': attribute type 2 has an invalid length.
[ 1012.990441][T21057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1013.038273][T21057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.116925][T21057] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.138000][T21057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1013.189922][T21057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1013.576537][T21057] hsr_slave_0: entered promiscuous mode
[ 1013.599066][T21057] hsr_slave_1: entered promiscuous mode
[ 1013.660812][T21057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1013.690636][T21057] Cannot create hsr debugfs directory
[ 1014.798641][T20145] hsr_slave_0: left promiscuous mode
[ 1014.805360][T20145] hsr_slave_1: left promiscuous mode
[ 1014.817101][T20145] 
€Â: left allmulticast mode
[ 1014.823352][T20145] 
€Â: left promiscuous mode
[ 1014.828129][T20145] bridge0: port 2(
€Â) entered disabled state
[ 1014.893923][T20145] veth1_macvtap: left promiscuous mode
[ 1014.899518][T20145] veth0_macvtap: left promiscuous mode
[ 1014.950900][T12907] Bluetooth: hci4: command tx timeout
[ 1016.154086][T21186] syzkaller0: entered promiscuous mode
[ 1016.159689][T21186] syzkaller0: entered allmulticast mode
[ 1017.003118][T21232] netlink: 'syz.3.4932': attribute type 4 has an invalid length.
[ 1017.012193][T21232] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4932'.
[ 1017.030462][T12907] Bluetooth: hci4: command tx timeout
[ 1019.418079][T21247] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1019.707992][T21248] syzkaller0: entered promiscuous mode
[ 1019.713668][T21248] syzkaller0: entered allmulticast mode
[ 1021.665474][T21266] netlink: 'syz.3.4945': attribute type 10 has an invalid length.
[ 1021.795160][T21057] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1021.834031][T21057] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1021.871389][T21057] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1021.899317][T21057] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1021.989318][T21274] netlink: 'syz.0.4953': attribute type 10 has an invalid length.
[ 1022.169645][T21057] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1022.276350][T21057] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.338872][T20144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.346079][T20144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.451902][T20144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.459074][T20144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1022.920125][T21292] netlink: 'syz.1.4950': attribute type 11 has an invalid length.
[ 1023.173730][T21309] syz.3.4952[21309] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1023.173850][T21309] syz.3.4952[21309] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1023.264455][T21057] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.369188][T21313] netlink: 'syz.1.4954': attribute type 6 has an invalid length.
[ 1023.448686][T21057] veth0_vlan: entered promiscuous mode
[ 1023.578656][T21057] veth1_vlan: entered promiscuous mode
[ 1023.658315][T21321] netlink: 'syz.1.4957': attribute type 10 has an invalid length.
[ 1023.869630][T21321] team0 (unregistering): Port device team_slave_0 removed
[ 1023.944684][T21321] team0 (unregistering): Port device team_slave_1 removed
[ 1024.096451][T21057] veth0_macvtap: entered promiscuous mode
[ 1024.126567][T21057] veth1_macvtap: entered promiscuous mode
[ 1024.179329][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.210453][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.224889][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.244521][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.256413][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.271740][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.285564][T21057] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1024.298789][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.310024][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.320660][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.340644][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.360727][T21057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.371354][T21057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.392906][T21057] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1024.419606][T21057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.439073][T21057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.449024][T21057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.460067][T21057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.606847][T12410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1024.640351][T12410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1024.689512][T12410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1024.715280][T12410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1024.959289][T21354] netlink: 'syz.0.4968': attribute type 10 has an invalid length.
[ 1025.279278][T21369] netlink: 'syz.1.4963': attribute type 2 has an invalid length.
[ 1025.313647][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'.
[ 1025.401027][T21375] dvmrp1: tun_chr_ioctl cmd 1074812118
[ 1025.789233][T21398] pim6reg1: tun_chr_ioctl cmd 1074025677
[ 1025.800607][T21398] pim6reg1: linktype set to 774
[ 1025.870087][T21387] delete_channel: no stack
[ 1026.268286][T21411] netlink: 'syz.1.4976': attribute type 10 has an invalid length.
[ 1026.308408][T21414] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1026.695970][T21431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4982'.
[ 1026.735053][T21431] netlink: 'syz.0.4982': attribute type 39 has an invalid length.
[ 1027.616649][T21470] netlink: 'syz.0.4990': attribute type 10 has an invalid length.
[ 1029.431017][T21506] netlink: 'syz.3.5002': attribute type 10 has an invalid length.
[ 1029.576606][T21512] netlink: 'syz.1.5004': attribute type 10 has an invalid length.
[ 1029.622209][T21512] veth1_macvtap: left promiscuous mode
[ 1029.869987][T21523] syzkaller0: entered promiscuous mode
[ 1029.875670][T21523] syzkaller0: entered allmulticast mode
[ 1029.978496][T21524] netlink: 'syz.3.5007': attribute type 10 has an invalid length.
[ 1032.349352][T21545] netlink: 'syz.0.5016': attribute type 10 has an invalid length.
[ 1032.399916][T21550] syz.3.5018[21550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1032.400034][T21550] syz.3.5018[21550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1032.513474][T21552] netlink: 'syz.2.5019': attribute type 6 has an invalid length.
[ 1032.856468][T21574] netlink: 'syz.0.5029': attribute type 2 has an invalid length.
[ 1032.873530][T21574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'.
[ 1032.885903][T21575] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5028'.
[ 1033.030543][T21579] netlink: 'syz.1.5030': attribute type 10 has an invalid length.
[ 1033.597843][T21606] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5043'.
[ 1033.630434][T21606] netlink: 'syz.2.5043': attribute type 2 has an invalid length.
[ 1033.706841][T21609] netlink: 'syz.0.5045': attribute type 2 has an invalid length.
[ 1033.717474][T21609] netlink: 'syz.0.5045': attribute type 8 has an invalid length.
[ 1033.728361][T21609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5045'.
[ 1034.186221][T21625] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5051'.
[ 1034.337300][T21629] ref_ctr_offset mismatch. inode: 0x1ba offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1034.523165][T21638] validate_nla: 2 callbacks suppressed
[ 1034.523181][T21638] netlink: 'syz.3.5055': attribute type 10 has an invalid length.
[ 1034.556886][T21638] veth1_macvtap: left promiscuous mode
[ 1034.933767][T21654] netlink: 'syz.0.5062': attribute type 10 has an invalid length.
[ 1035.056986][T21658] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1035.439365][T21671] netlink: 'syz.0.5069': attribute type 10 has an invalid length.
[ 1035.468479][T21671] veth1_macvtap: left promiscuous mode
[ 1035.959768][T21681] netlink: 'syz.2.5075': attribute type 10 has an invalid length.
[ 1036.089023][T21681] team0 (unregistering): Port device team_slave_0 removed
[ 1036.145355][T21681] team0 (unregistering): Port device team_slave_1 removed
[ 1036.220234][T21690] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5078'.
[ 1036.957122][T21690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1036.984267][T21690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1037.005624][T21690] bond0 (unregistering): Released all slaves
[ 1037.190610][T20249] Bluetooth: hci0: command 0x206a tx timeout
[ 1037.197472][T12907] Bluetooth: hci0: Opcode 0x206a failed: -110
[ 1038.824262][T21739] netlink: 'syz.0.5095': attribute type 10 has an invalid length.
[ 1039.015928][T21746] syzkaller0: entered promiscuous mode
[ 1039.021745][T21746] syzkaller0: entered allmulticast mode
[ 1039.037130][T21747] tap0: tun_chr_ioctl cmd 1074025684
[ 1041.102459][T21760] syz.0.5102[21760] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1041.102536][T21760] syz.0.5102[21760] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1041.201435][T21762] netlink: 'syz.2.5104': attribute type 10 has an invalid length.
[ 1042.510053][T21786] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5114'.
[ 1042.545761][T21786] netlink: 'syz.2.5114': attribute type 2 has an invalid length.
[ 1042.647038][T21787] syzkaller0: entered promiscuous mode
[ 1042.653185][T21787] syzkaller0: entered allmulticast mode
[ 1042.678061][T21783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5112'.
[ 1042.994775][T21783] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5112'.
[ 1043.486031][T21809] ref_ctr_offset mismatch. inode: 0xcc offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1046.647033][T21839] syzkaller0: entered promiscuous mode
[ 1046.655059][T21839] syzkaller0: entered allmulticast mode
[ 1049.030656][T21866] netlink: 'syz.2.5143': attribute type 6 has an invalid length.
[ 1049.163723][T21872] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5145'.
[ 1049.182022][T21879] netlink: 'syz.2.5146': attribute type 2 has an invalid length.
[ 1049.202516][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1049.269475][T21881] netlink: 'syz.3.5148': attribute type 10 has an invalid length.
[ 1049.862933][T21889] netlink: 'syz.0.5152': attribute type 39 has an invalid length.
[ 1050.207151][T21901] netlink: 'syz.1.5156': attribute type 11 has an invalid length.
[ 1050.560212][T21914] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5161'.
[ 1050.587472][T21914] netlink: 'syz.0.5161': attribute type 2 has an invalid length.
[ 1050.644121][T21916] ref_ctr_offset mismatch. inode: 0x127 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1051.023874][T21930] delete_channel: no stack
[ 1052.354182][T21970] syzkaller0: entered promiscuous mode
[ 1052.365524][T21970] syzkaller0: entered allmulticast mode
[ 1052.733310][T21981] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1054.728999][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.735447][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.508686][T21992] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5188'.
[ 1057.563919][T21992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1057.583609][T21992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1057.603152][T21992] bond0 (unregistering): Released all slaves
[ 1057.639863][T22019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5198'.
[ 1057.783717][T22023] netlink: 'syz.3.5201': attribute type 10 has an invalid length.
[ 1058.303961][T22036] netlink: 'syz.3.5203': attribute type 10 has an invalid length.
[ 1059.771289][T22061] netlink: 'syz.2.5212': attribute type 10 has an invalid length.
[ 1059.842652][T22059] netlink: 'syz.1.5211': attribute type 11 has an invalid length.
[ 1060.944254][T22085] syzkaller0: entered promiscuous mode
[ 1060.949768][T22085] syzkaller0: entered allmulticast mode
[ 1061.039766][T22092] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1065.041290][T22140] netlink: 'syz.2.5239': attribute type 2 has an invalid length.
[ 1065.059336][T22140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5239'.
[ 1065.493223][T22155] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5243'.
[ 1066.915075][T22170] netlink: 'syz.2.5246': attribute type 10 has an invalid length.
[ 1067.219370][T22185] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5254'.
[ 1067.240633][T22185] netlink: 'syz.0.5254': attribute type 2 has an invalid length.
[ 1069.134464][T22231] netlink: 'syz.2.5272': attribute type 1 has an invalid length.
[ 1069.146253][T22231] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5272'.
[ 1069.282503][T22223] delete_channel: no stack
[ 1069.854838][T22245] netlink: 'syz.0.5278': attribute type 11 has an invalid length.
[ 1070.341608][T22264] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1070.541811][T22268] netlink: 'syz.3.5285': attribute type 5 has an invalid length.
[ 1070.625344][T22268] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.5285'.
[ 1071.930650][T22297] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5293'.
[ 1072.128395][T22301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5294'.
[ 1075.810086][T22333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5303'.
[ 1075.864989][T22333] netlink: 'syz.3.5303': attribute type 10 has an invalid length.
[ 1075.880435][T22333] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5303'.
[ 1075.905677][T22333] hsr0: entered promiscuous mode
[ 1075.925460][T22333] bridge0: port 3(hsr0) entered blocking state
[ 1075.941928][T22333] bridge0: port 3(hsr0) entered disabled state
[ 1075.957936][T22333] hsr0: entered allmulticast mode
[ 1075.974289][T22333] hsr_slave_0: entered allmulticast mode
[ 1075.991788][T22333] hsr_slave_1: entered allmulticast mode
[ 1076.036262][T22333] bridge0: port 3(hsr0) entered blocking state
[ 1076.042822][T22333] bridge0: port 3(hsr0) entered forwarding state
[ 1076.319114][T22335] syzkaller0: entered promiscuous mode
[ 1076.335083][T22335] syzkaller0: entered allmulticast mode
[ 1078.065946][T22347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5306'.
[ 1079.747897][T22345] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5308'.
[ 1079.758469][T22347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5306'.
[ 1079.921159][T22359] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5311'.
[ 1079.956487][T22359] netlink: 'syz.3.5311': attribute type 2 has an invalid length.
[ 1080.743549][T22370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5314'.
[ 1080.868750][T22376] syzkaller0: entered promiscuous mode
[ 1080.880388][T22376] syzkaller0: entered allmulticast mode
[ 1081.024703][T22378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5315'.
[ 1081.177853][T22378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1081.223260][T22378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1081.270176][T22378] bond0 (unregistering): Released all slaves
[ 1081.704776][T22392] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1081.785798][T22395] ref_ctr_offset mismatch. inode: 0x322 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1083.535837][T22396] netpci0: tun_chr_ioctl cmd 2147767517
[ 1083.582707][T22407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5326'.
[ 1083.663110][T22408] netlink: 'syz.0.5326': attribute type 10 has an invalid length.
[ 1083.680519][T22408] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5326'.
[ 1083.700476][T22408] hsr0: entered promiscuous mode
[ 1083.705784][T22408] bridge0: port 3(hsr0) entered blocking state
[ 1083.730815][T22408] bridge0: port 3(hsr0) entered disabled state
[ 1083.744709][T22408] hsr0: entered allmulticast mode
[ 1083.749873][T22408] hsr_slave_0: entered allmulticast mode
[ 1083.766978][T22408] hsr_slave_1: entered allmulticast mode
[ 1083.779330][T22408] bridge0: port 3(hsr0) entered blocking state
[ 1083.785675][T22408] bridge0: port 3(hsr0) entered forwarding state
[ 1083.932380][T22419] netlink: 'syz.0.5331': attribute type 6 has an invalid length.
[ 1084.049695][T22422] netlink: 'syz.3.5332': attribute type 1 has an invalid length.
[ 1084.070986][T22422] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.5332'.
[ 1084.211686][T22428] netlink: 'syz.3.5335': attribute type 10 has an invalid length.
[ 1084.254175][T22430] netlink: 'syz.0.5336': attribute type 2 has an invalid length.
[ 1084.265370][T22430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'.
[ 1084.443418][T22441] netlink: 'syz.3.5340': attribute type 9 has an invalid length.
[ 1084.462209][T22441] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5340'.
[ 1084.523553][T22444] netlink: 'syz.3.5340': attribute type 9 has an invalid length.
[ 1084.538340][T22444] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5340'.
[ 1084.660342][T22441] netlink: 'syz.3.5340': attribute type 9 has an invalid length.
[ 1084.676101][T22453] netlink: 'syz.0.5344': attribute type 10 has an invalid length.
[ 1084.680355][T22441] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5340'.
[ 1084.868441][T22461] netlink: 'syz.0.5346': attribute type 21 has an invalid length.
[ 1084.892740][T22461] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5346'.
[ 1084.913606][T22461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5346'.
[ 1086.275363][T22502] syzkaller0: entered promiscuous mode
[ 1086.281184][T22502] syzkaller0: entered allmulticast mode
[ 1086.288423][T22503] __nla_validate_parse: 1 callbacks suppressed
[ 1086.288437][T22503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5364'.
[ 1087.515849][T20249] Bluetooth: hci1: command 0x0406 tx timeout
[ 1088.814926][T22511] validate_nla: 3 callbacks suppressed
[ 1088.814938][T22511] netlink: 'syz.0.5367': attribute type 11 has an invalid length.
[ 1088.924722][T22527] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5372'.
[ 1088.940601][T22527] netlink: 'syz.0.5372': attribute type 2 has an invalid length.
[ 1089.003621][T22532] netlink: 'syz.1.5374': attribute type 10 has an invalid length.
[ 1089.667370][T22551] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1089.780852][T20140] tipc: Subscription rejected, illegal request
[ 1090.000375][T22555] ref_ctr_offset mismatch. inode: 0x373 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1091.135608][T22575] netlink: 'syz.2.5388': attribute type 10 has an invalid length.
[ 1091.465085][T22580] syzkaller0: entered promiscuous mode
[ 1091.494504][T22580] syzkaller0: entered allmulticast mode
[ 1091.534968][T22590] netlink: 'syz.0.5393': attribute type 6 has an invalid length.
[ 1092.363866][T22607] netlink: 'syz.2.5400': attribute type 1 has an invalid length.
[ 1092.383935][T22607] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.5400'.
[ 1094.538145][T22639] netlink: 'syz.2.5409': attribute type 3 has an invalid length.
[ 1094.546649][T22639] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5409'.
[ 1095.525660][T22615] netlink: 'syz.3.5402': attribute type 10 has an invalid length.
[ 1095.547985][T22638] veth1_vlan: entered allmulticast mode
[ 1095.640116][T22643] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5412'.
[ 1095.828023][T22653] netlink: 'syz.3.5417': attribute type 21 has an invalid length.
[ 1096.068045][T22655] delete_channel: no stack
[ 1096.199155][T22657] syzkaller0: entered promiscuous mode
[ 1096.251785][T22657] syzkaller0: entered allmulticast mode
[ 1096.270464][T22665] netlink: 'syz.3.5417': attribute type 10 has an invalid length.
[ 1096.294574][T22665] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.309469][T22665] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.321960][T22665] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.336427][T22665] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.510121][T22671] netlink: 'syz.2.5422': attribute type 11 has an invalid length.
[ 1098.591875][T22686] netlink: 'syz.3.5424': attribute type 10 has an invalid length.
[ 1098.656808][T22682] syzkaller0: entered promiscuous mode
[ 1098.662511][T22682] syzkaller0: entered allmulticast mode
[ 1098.768527][T22695] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5429'.
[ 1098.781784][T22695] netlink: 'syz.1.5429': attribute type 2 has an invalid length.
[ 1098.950147][T22702] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1101.086192][T22714] netlink: 'syz.0.5436': attribute type 10 has an invalid length.
[ 1101.111030][T22710] netlink: 'syz.1.5434': attribute type 28 has an invalid length.
[ 1101.625344][T22731] FAULT_INJECTION: forcing a failure.
[ 1101.625344][T22731] name failslab, interval 1, probability 0, space 0, times 0
[ 1101.639790][T22731] CPU: 1 PID: 22731 Comm: syz.1.5443 Not tainted syzkaller #0
[ 1101.647315][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1101.657500][T22731] Call Trace:
[ 1101.660904][T22731]  <TASK>
[ 1101.663878][T22731]  dump_stack_lvl+0x18c/0x250
[ 1101.668624][T22731]  ? show_regs_print_info+0x20/0x20
[ 1101.673881][T22731]  ? load_image+0x400/0x400
[ 1101.678460][T22731]  ? __might_sleep+0xe0/0xe0
[ 1101.683102][T22731]  ? __lock_acquire+0x7d40/0x7d40
[ 1101.688190][T22731]  should_fail_ex+0x39d/0x4d0
[ 1101.693021][T22731]  should_failslab+0x9/0x20
[ 1101.697567][T22731]  slab_pre_alloc_hook+0x59/0x310
[ 1101.702727][T22731]  ? tomoyo_encode+0x28b/0x540
[ 1101.707531][T22731]  ? tomoyo_encode+0x28b/0x540
[ 1101.712333][T22731]  __kmem_cache_alloc_node+0x53/0x250
[ 1101.717762][T22731]  ? tomoyo_encode+0x28b/0x540
[ 1101.722558][T22731]  __kmalloc+0xa4/0x230
[ 1101.726766][T22731]  tomoyo_encode+0x28b/0x540
[ 1101.731416][T22731]  tomoyo_realpath_from_path+0x592/0x5d0
[ 1101.737124][T22731]  tomoyo_path_number_perm+0x248/0x620
[ 1101.742632][T22731]  ? tomoyo_path_number_perm+0x217/0x620
[ 1101.748318][T22731]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1101.753819][T22731]  ? ksys_write+0x1c4/0x260
[ 1101.758507][T22731]  ? __fget_files+0x28/0x4b0
[ 1101.763258][T22731]  ? __fget_files+0x28/0x4b0
[ 1101.767918][T22731]  security_file_ioctl+0x70/0xa0
[ 1101.772999][T22731]  __se_sys_ioctl+0x48/0x170
[ 1101.777732][T22731]  do_syscall_64+0x55/0xa0
[ 1101.782205][T22731]  ? clear_bhb_loop+0x40/0x90
[ 1101.786894][T22731]  ? clear_bhb_loop+0x40/0x90
[ 1101.791604][T22731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1101.797512][T22731] RIP: 0033:0x7f90ec59c799
[ 1101.801952][T22731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1101.821743][T22731] RSP: 002b:00007f90ed521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1101.830169][T22731] RAX: ffffffffffffffda RBX: 00007f90ec815fa0 RCX: 00007f90ec59c799
[ 1101.838170][T22731] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000003
[ 1101.846159][T22731] RBP: 00007f90ed521090 R08: 0000000000000000 R09: 0000000000000000
[ 1101.854135][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1101.862117][T22731] R13: 00007f90ec816038 R14: 00007f90ec815fa0 R15: 00007ffc9e724f38
[ 1101.870129][T22731]  </TASK>
[ 1101.911159][T22731] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1102.880858][T12907] Bluetooth: hci3: command 0x0406 tx timeout
[ 1104.378819][T22795] syzkaller0: entered promiscuous mode
[ 1104.394163][T22795] syzkaller0: entered allmulticast mode
[ 1104.404310][T22793] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5462'.
[ 1104.798826][T22812] syz.0.5471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 1104.826778][T22812] CPU: 0 PID: 22812 Comm: syz.0.5471 Not tainted syzkaller #0
[ 1104.834440][T22812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1104.844971][T22812] Call Trace:
[ 1104.848270][T22812]  <TASK>
[ 1104.851242][T22812]  dump_stack_lvl+0x18c/0x250
[ 1104.856102][T22812]  ? show_regs_print_info+0x20/0x20
[ 1104.861339][T22812]  ? load_image+0x400/0x400
[ 1104.865881][T22812]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1104.872514][T22812]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1104.879043][T22812]  warn_alloc+0x246/0x340
[ 1104.883404][T22812]  ? stack_trace_save+0xaa/0x100
[ 1104.888370][T22812]  ? zone_watermark_ok_safe+0x230/0x230
[ 1104.893985][T22812]  ? kasan_set_track+0x5f/0x70
[ 1104.898773][T22812]  ? kasan_set_track+0x4e/0x70
[ 1104.903556][T22812]  ? __kasan_kmalloc+0x8f/0xa0
[ 1104.908331][T22812]  ? xsk_init_queue+0xad/0x100
[ 1104.913090][T22812]  ? xsk_setsockopt+0x4e5/0x760
[ 1104.917930][T22812]  ? do_sock_setsockopt+0x175/0x1a0
[ 1104.923116][T22812]  ? __x64_sys_setsockopt+0x182/0x200
[ 1104.928475][T22812]  __vmalloc_node_range+0x126/0x1330
[ 1104.933768][T22812]  ? free_vm_area+0x50/0x50
[ 1104.938262][T22812]  vmalloc_user+0x74/0x80
[ 1104.942580][T22812]  ? xskq_create+0xbf/0x170
[ 1104.947073][T22812]  xskq_create+0xbf/0x170
[ 1104.951413][T22812]  xsk_init_queue+0xad/0x100
[ 1104.956029][T22812]  xsk_setsockopt+0x4e5/0x760
[ 1104.960714][T22812]  ? xsk_poll+0x680/0x680
[ 1104.965041][T22812]  ? __fget_files+0x28/0x4b0
[ 1104.969622][T22812]  ? __fget_files+0x28/0x4b0
[ 1104.974205][T22812]  ? aa_sock_opt_perm+0x74/0x100
[ 1104.979132][T22812]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1104.984672][T22812]  ? security_socket_setsockopt+0x7e/0xa0
[ 1104.990396][T22812]  ? xsk_poll+0x680/0x680
[ 1104.994732][T22812]  do_sock_setsockopt+0x175/0x1a0
[ 1104.999739][T22812]  ? __fdget+0x180/0x210
[ 1105.003974][T22812]  __x64_sys_setsockopt+0x182/0x200
[ 1105.009165][T22812]  do_syscall_64+0x55/0xa0
[ 1105.013576][T22812]  ? clear_bhb_loop+0x40/0x90
[ 1105.018244][T22812]  ? clear_bhb_loop+0x40/0x90
[ 1105.022911][T22812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1105.028788][T22812] RIP: 0033:0x7f62e8b9c799
[ 1105.033202][T22812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1105.052993][T22812] RSP: 002b:00007f62e9a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1105.061415][T22812] RAX: ffffffffffffffda RBX: 00007f62e8e15fa0 RCX: 00007f62e8b9c799
[ 1105.069379][T22812] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[ 1105.077369][T22812] RBP: 00007f62e8c32c99 R08: 0000000000000004 R09: 0000000000000000
[ 1105.085332][T22812] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1105.093392][T22812] R13: 00007f62e8e16038 R14: 00007f62e8e15fa0 R15: 00007ffeab245a28
[ 1105.101363][T22812]  </TASK>
[ 1105.107737][T22812] Mem-Info:
[ 1105.111098][T22812] active_anon:7546 inactive_anon:0 isolated_anon:0
[ 1105.111098][T22812]  active_file:18915 inactive_file:40339 isolated_file:0
[ 1105.111098][T22812]  unevictable:768 dirty:114 writeback:0
[ 1105.111098][T22812]  slab_reclaimable:10710 slab_unreclaimable:97264
[ 1105.111098][T22812]  mapped:24897 shmem:1361 pagetables:534
[ 1105.111098][T22812]  sec_pagetables:0 bounce:0
[ 1105.111098][T22812]  kernel_misc_reclaimable:0
[ 1105.111098][T22812]  free:1339068 free_pcp:7736 free_cma:0
[ 1105.169583][T22812] Node 0 active_anon:30184kB inactive_anon:0kB active_file:75660kB inactive_file:161156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99588kB dirty:456kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no
[ 1105.207384][T22812] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1105.252432][T22812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1105.307764][T22812] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1105.313684][T22812] Node 0 DMA32 free:1441372kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30076kB inactive_anon:0kB active_file:75660kB inactive_file:160332kB unevictable:1536kB writepending:460kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:17788kB local_pcp:15824kB free_cma:0kB
[ 1105.355939][T22812] lowmem_reserve[]: 0 0 0 0 0
[ 1105.360980][T22812] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1105.388376][T22812] lowmem_reserve[]: 0 0 0 0 0
[ 1105.393315][T22812] Node 1 Normal free:3899540kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13316kB local_pcp:8580kB free_cma:0kB
[ 1105.427745][T22812] lowmem_reserve[]: 0 0 0 0 0
[ 1105.440948][T22812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1105.465536][T22812] Node 0 DMA32: 2381*4kB (UM) 1611*8kB (UME) 541*16kB (UME) 942*32kB (UME) 705*64kB (UME) 562*128kB (UME) 176*256kB (UME) 55*512kB (UM) 24*1024kB (UME) 13*2048kB (UME) 278*4096kB (UM) = 1441372kB
[ 1105.477431][T22816] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5472'.
[ 1105.489803][T22812] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1105.504770][T22816] netlink: 'syz.2.5472': attribute type 2 has an invalid length.
[ 1105.510714][T22812] Node 1 Normal: 201*4kB (UME) 42*8kB (UME) 42*16kB (UME) 218*32kB (UME) 73*64kB (UME) 18*128kB (UME) 5*256kB (UME) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (M) = 3899540kB
[ 1105.543123][T22812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1105.552943][T22812] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1105.565366][T22812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1105.577412][T22812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1105.587186][T22812] 60615 total pagecache pages
[ 1105.592128][T22812] 0 pages in swap cache
[ 1105.596430][T22812] Free swap  = 124996kB
[ 1105.605109][T22812] Total swap = 124996kB
[ 1105.609402][T22812] 2097051 pages RAM
[ 1105.613430][T22812] 0 pages HighMem/MovableOnly
[ 1105.618205][T22812] 416924 pages reserved
[ 1105.626999][T22812] 0 pages cma reserved
[ 1107.401584][T22829] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1107.808591][T22843] netlink: 'syz.3.5483': attribute type 6 has an invalid length.
[ 1108.392721][T22850] syzkaller0: entered promiscuous mode
[ 1108.398257][T22850] syzkaller0: entered allmulticast mode
[ 1108.461946][T22851] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5487'.
[ 1111.703092][T22885] netlink: 'syz.2.5499': attribute type 10 has an invalid length.
[ 1112.294380][T22906] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5507'.
[ 1113.582441][T22939] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5518'.
[ 1114.216753][T22949] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5522'.
[ 1114.226309][T22949] netlink: 'syz.3.5522': attribute type 2 has an invalid length.
[ 1114.362706][T22954] netlink: 'syz.0.5524': attribute type 10 has an invalid length.
[ 1114.409524][T22954] bridge0: port 3(hsr0) entered disabled state
[ 1114.417446][T22954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1114.429261][T22954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1114.494706][T22954] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1114.519435][T22954] bridge0: port 3(hsr0) entered blocking state
[ 1114.526530][T22954] bridge0: port 3(hsr0) entered forwarding state
[ 1114.535118][T22954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.543247][T22954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1114.552219][T22954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.560501][T22954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1114.590947][T22954] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1114.638363][T22955] delete_channel: no stack
[ 1114.826091][T22967] netlink: 'syz.2.5529': attribute type 11 has an invalid length.
[ 1114.925856][T22975] syzkaller0: entered promiscuous mode
[ 1114.946580][T22975] syzkaller0: entered allmulticast mode
[ 1116.157674][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.164047][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.387694][T23010] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.5545'.
[ 1117.399356][T23010] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.5545'.
[ 1118.256386][T12907] Bluetooth: hci0: command 0x206a tx timeout
[ 1118.623476][T22997] netlink: 'syz.0.5540': attribute type 2 has an invalid length.
[ 1118.631552][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5540'.
[ 1118.641874][T23002] netlink: 'syz.2.5542': attribute type 6 has an invalid length.
[ 1120.196024][T23045] netlink: 'syz.0.5559': attribute type 2 has an invalid length.
[ 1120.207247][T23045] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5559'.
[ 1120.236357][T23045] netlink: 'syz.0.5559': attribute type 2 has an invalid length.
[ 1120.255947][T23045] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5559'.
[ 1120.434659][T23052] netlink: 'syz.3.5561': attribute type 10 has an invalid length.
[ 1120.480112][T23056] syzkaller0: entered promiscuous mode
[ 1120.485959][T23056] syzkaller0: entered allmulticast mode
[ 1120.702773][T23060] netlink: 121120 bytes leftover after parsing attributes in process `syz.0.5565'.
[ 1121.855858][T23072] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5569'.
[ 1124.978638][T23070] netlink: 'syz.0.5568': attribute type 10 has an invalid length.
[ 1124.994128][T23072] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1125.746592][T23117] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1125.959563][T23128] netlink: 'syz.1.5586': attribute type 2 has an invalid length.
[ 1125.989360][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5586'.
[ 1125.999840][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5587'.
[ 1126.033311][T23132] netlink: 'syz.2.5588': attribute type 6 has an invalid length.
[ 1126.092345][T23137] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.5587'.
[ 1126.112924][T23137] openvswitch: netlink: IP tunnel dst address not specified
[ 1126.124030][T23135] syzkaller0: entered promiscuous mode
[ 1126.134275][T23135] syzkaller0: entered allmulticast mode
[ 1126.291744][T23142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5590'.
[ 1128.763769][T23142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5590'.
[ 1128.773024][T23142] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5590'.
[ 1128.843779][T23158] syzkaller0: entered promiscuous mode
[ 1128.849386][T23158] syzkaller0: entered allmulticast mode
[ 1133.112242][T23198] delete_channel: no stack
[ 1133.187630][T23213] netlink: 'syz.2.5613': attribute type 10 has an invalid length.
[ 1133.189576][T23212] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5615'.
[ 1133.236435][T23212] netlink: 'syz.3.5615': attribute type 2 has an invalid length.
[ 1133.910353][T12907] Bluetooth: hci4: command 0x0406 tx timeout
[ 1134.479299][T23236] delete_channel: no stack
[ 1135.289194][T23252] syzkaller0: entered promiscuous mode
[ 1135.298251][T23252] syzkaller0: entered allmulticast mode
[ 1135.327038][T23254] netlink: 'syz.3.5627': attribute type 10 has an invalid length.
[ 1135.379496][T23257] netlink: 'syz.0.5628': attribute type 21 has an invalid length.
[ 1135.389447][T23257] netlink: 'syz.0.5628': attribute type 19 has an invalid length.
[ 1135.399867][T23257] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.5628'.
[ 1135.409900][T23250] netlink: 'syz.1.5624': attribute type 11 has an invalid length.
[ 1135.781369][T23267] netlink: 'syz.0.5631': attribute type 4 has an invalid length.
[ 1135.793000][T23267] netlink: 'syz.0.5631': attribute type 3 has an invalid length.
[ 1135.801410][T23267] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.5631'.
[ 1137.690713][T23282] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1137.806582][T23289] netlink: 'syz.0.5643': attribute type 21 has an invalid length.
[ 1137.830500][T23289] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1137.849405][T23289] IPv6: Can't replace route, no match found
[ 1137.875195][T23293] netlink: 'syz.3.5639': attribute type 2 has an invalid length.
[ 1137.893300][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5639'.
[ 1138.085053][T23297] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5640'.
[ 1138.616166][T23307] validate_nla: 1 callbacks suppressed
[ 1138.616182][T23307] netlink: 'syz.3.5642': attribute type 10 has an invalid length.
[ 1139.310742][T23325] syzkaller0: entered promiscuous mode
[ 1139.316397][T23325] syzkaller0: entered allmulticast mode
[ 1143.019601][T23346] netlink: 'syz.3.5655': attribute type 10 has an invalid length.
[ 1143.291275][T23358] netlink: 'syz.3.5661': attribute type 3 has an invalid length.
[ 1143.336643][T23358] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5661'.
[ 1143.584326][T23370] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5665'.
[ 1143.611713][T23370] netlink: 'syz.1.5665': attribute type 2 has an invalid length.
[ 1143.871891][T23378] netlink: 'syz.1.5670': attribute type 10 has an invalid length.
[ 1143.879819][T23383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5672'.
[ 1144.171637][T23400] netlink: 'syz.3.5677': attribute type 1 has an invalid length.
[ 1144.182535][T23400] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5677'.
[ 1144.408059][T23410] netlink: 'syz.2.5681': attribute type 6 has an invalid length.
[ 1144.585664][T23412] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1144.677923][T23414] netlink: 'syz.1.5683': attribute type 11 has an invalid length.
[ 1144.851949][T23417] netlink: 'syz.2.5684': attribute type 10 has an invalid length.
[ 1145.386701][T23431] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1145.701974][T23441] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5693'.
[ 1146.268581][T23450] netlink: 'syz.0.5696': attribute type 10 has an invalid length.
[ 1146.379578][T23452] netlink: 'syz.3.5697': attribute type 21 has an invalid length.
[ 1146.408136][T23452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5697'.
[ 1146.422443][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5697'.
[ 1146.446739][T23452] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5697'.
[ 1146.905202][    C0] 
[ 1146.905209][    C0] ================================
[ 1146.905213][    C0] WARNING: inconsistent lock state
[ 1146.905232][    C0] syzkaller #0 Not tainted
[ 1146.905241][    C0] --------------------------------
[ 1146.905245][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1146.905254][    C0] syz.1.5703/23470 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1146.905271][    C0] ffff888021fa4b20 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[ 1146.905314][    C0] {INITIAL USE} state was registered at:
[ 1146.905320][    C0]   lock_acquire+0x19e/0x420
[ 1146.905337][    C0]   _raw_spin_lock+0x2e/0x40
[ 1146.905355][    C0]   htab_lock_bucket+0x17d/0x300
[ 1146.905370][    C0]   htab_lru_map_delete_elem+0x1a4/0x650
[ 1146.905384][    C0]   bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 1146.905399][    C0]   bpf_overflow_handler+0x1fc/0x510
[ 1146.905419][    C0]   __perf_event_overflow+0x447/0x630
[ 1146.905434][    C0]   perf_swevent_event+0x324/0x630
[ 1146.905450][    C0]   perf_bp_event+0x2a7/0x380
[ 1146.905467][    C0]   hw_breakpoint_exceptions_notify+0x3b8/0x670
[ 1146.905483][    C0]   notifier_call_chain+0x197/0x380
[ 1146.905500][    C0]   atomic_notifier_call_chain+0xda/0x180
[ 1146.905517][    C0]   notify_die+0x145/0x1a0
[ 1146.905532][    C0]   notify_debug+0x2e/0x50
[ 1146.905544][    C0]   noist_exc_debug+0x77/0x120
[ 1146.905557][    C0]   asm_exc_debug+0x33/0x40
[ 1146.905578][    C0] irq event stamp: 936
[ 1146.905584][    C0] hardirqs last  enabled at (935): [<ffffffff8a851ae5>] syscall_enter_from_user_mode+0x25/0x80
[ 1146.905607][    C0] hardirqs last disabled at (936): [<ffffffff8a84e263>] exc_debug+0x73/0x140
[ 1146.905622][    C0] softirqs last  enabled at (592): [<ffffffff81965816>] bpf_prog_load+0x1266/0x1670
[ 1146.905642][    C0] softirqs last disabled at (590): [<ffffffff819461bd>] bpf_ksym_add+0x2d/0x340
[ 1146.905663][    C0] 
[ 1146.905663][    C0] other info that might help us debug this:
[ 1146.905667][    C0]  Possible unsafe locking scenario:
[ 1146.905667][    C0] 
[ 1146.905671][    C0]        CPU0
[ 1146.905674][    C0]        ----
[ 1146.905676][    C0]   lock(&htab->lockdep_key);
[ 1146.905687][    C0]   <Interrupt>
[ 1146.905690][    C0]     lock(&htab->lockdep_key);
[ 1146.905700][    C0] 
[ 1146.905700][    C0]  *** DEADLOCK ***
[ 1146.905700][    C0] 
[ 1146.905703][    C0] no locks held by syz.1.5703/23470.
[ 1146.905710][    C0] 
[ 1146.905710][    C0] stack backtrace:
[ 1146.905715][    C0] CPU: 0 PID: 23470 Comm: syz.1.5703 Not tainted syzkaller #0
[ 1146.905731][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1146.905740][    C0] Call Trace:
[ 1146.905746][    C0]  <#DB>
[ 1146.905751][    C0]  dump_stack_lvl+0x18c/0x250
[ 1146.905775][    C0]  ? show_regs_print_info+0x20/0x20
[ 1146.905800][    C0]  ? print_usage_bug+0x475/0x690
[ 1146.905818][    C0]  ? verify_lock_unused+0x18/0x140
[ 1146.905836][    C0]  lock_acquire+0x2c2/0x420
[ 1146.905855][    C0]  ? htab_lock_bucket+0x17d/0x300
[ 1146.905872][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1146.905896][    C0]  _raw_spin_lock+0x2e/0x40
[ 1146.905912][    C0]  ? htab_lock_bucket+0x17d/0x300
[ 1146.905928][    C0]  htab_lock_bucket+0x17d/0x300
[ 1146.905946][    C0]  ? htab_lru_map_delete_node+0x760/0x760
[ 1146.905966][    C0]  ? verify_lock_unused+0x18/0x140
[ 1146.905983][    C0]  ? jhash+0x34e/0x740
[ 1146.906001][    C0]  htab_lru_map_delete_elem+0x1a4/0x650
[ 1146.906020][    C0]  ? htab_lru_map_update_elem+0x990/0x990
[ 1146.906037][    C0]  ? perf_callchain+0x220/0x220
[ 1146.906053][    C0]  ? bpf_ringbuf_discard+0x122/0x170
[ 1146.906077][    C0]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 1146.906094][    C0]  bpf_overflow_handler+0x1fc/0x510
[ 1146.906117][    C0]  ? bpf_overflow_handler+0xde/0x510
[ 1146.906137][    C0]  ? tp_perf_event_destroy+0x20/0x20
[ 1146.906161][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1146.906197][    C0]  __perf_event_overflow+0x447/0x630
[ 1146.906217][    C0]  perf_swevent_event+0x324/0x630
[ 1146.906237][    C0]  ? perf_tp_event+0x1450/0x1450
[ 1146.906259][    C0]  perf_bp_event+0x2a7/0x380
[ 1146.906278][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[ 1146.906309][    C0]  ? lock_acquire+0x2c2/0x420
[ 1146.906328][    C0]  hw_breakpoint_exceptions_notify+0x3b8/0x670
[ 1146.906350][    C0]  notifier_call_chain+0x197/0x380
[ 1146.906370][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[ 1146.906389][    C0]  atomic_notifier_call_chain+0xda/0x180
[ 1146.906409][    C0]  notify_die+0x145/0x1a0
[ 1146.906429][    C0]  ? srcu_init_notifier_head+0x90/0x90
[ 1146.906451][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1146.906471][    C0]  notify_debug+0x2e/0x50
[ 1146.906486][    C0]  exc_debug+0xde/0x140
[ 1146.906502][    C0]  asm_exc_debug+0x1e/0x40
[ 1146.906518][    C0] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1146.906542][    C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 1146.906556][    C0] RSP: 0018:ffffc9000f14fd50 EFLAGS: 00050202
[ 1146.906576][    C0] RAX: ffffffff8429a501 RBX: 0000000000000050 RCX: 000000000000004f
[ 1146.906587][    C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc9000f14fdc1
[ 1146.906598][    C0] RBP: ffffc9000f14fee8 R08: ffffc9000f14fe0f R09: 1ffff92001e29fc1
[ 1146.906609][    C0] R10: dffffc0000000000 R11: fffff52001e29fc2 R12: 0000200000000350
[ 1146.906621][    C0] R13: 0000000000000050 R14: ffffc9000f14fdc0 R15: 0000200000000300
[ 1146.906635][    C0]  ? rcuref_put_slowpath+0xe1/0x150
[ 1146.906659][    C0]  </#DB>
[ 1146.906663][    C0]  <TASK>
[ 1146.906668][    C0]  _copy_from_user+0x8b/0xe0
[ 1146.906687][    C0]  __sys_bpf+0x23e/0x890
[ 1146.906703][    C0]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1146.906727][    C0]  ? lock_chain_count+0x20/0x20
[ 1146.906747][    C0]  __x64_sys_bpf+0x7c/0x90
[ 1146.906763][    C0]  do_syscall_64+0x55/0xa0
[ 1146.906782][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1146.906800][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1146.906818][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1146.906834][    C0] RIP: 0033:0x7f90ec59c799
[ 1146.906847][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1146.906860][    C0] RSP: 002b:00007f90ed500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1146.906876][    C0] RAX: ffffffffffffffda RBX: 00007f90ec816090 RCX: 00007f90ec59c799
[ 1146.906888][    C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000
[ 1146.906899][    C0] RBP: 00007f90ec632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1146.906909][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1146.906919][    C0] R13: 00007f90ec816128 R14: 00007f90ec816090 R15: 00007ffc9e724f38
[ 1146.906937][    C0]  </TASK>