last executing test programs:

11.598074139s ago: executing program 3 (id=3384):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x1, 0xffffffff, 0x4}, {0x2000, 0x2, 0x1000a, 0xc}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu\t\t')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
socket$kcm(0xa, 0x5, 0x0)
r7 = getpid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x3, 0x4, 0x7, 0x0, 0x1, 0x810c0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x104420, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x10}, r7, 0xf, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd1, &(0x7f0000000340)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x180000, 0x1ffffc}, 0x10}, 0x94)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x8000000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x522f424660cf3408)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4e)

2.741714944s ago: executing program 3 (id=3399):
r0 = socket$kcm(0x11, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f40)={r1, 0x58, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f80)='rdma.current\x00', 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], <r7=>0x0, 0x44, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002040)={0xffffffffffffffff, 0x5, 0x8}, 0xc) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x7, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) (async)
close(r11) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1f, 0x9, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x0, 0x4}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], &(0x7f0000000140)='syzkaller\x00', 0x80000, 0x1000, &(0x7f0000000ec0)=""/4096, 0x100, 0x1, '\x00', r3, @fallback, r4, 0x8, &(0x7f0000001fc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002000)={0x3, 0x5, 0xaf76, 0x4000}, 0x10, r7, r8, 0x0, &(0x7f0000002080)=[r0, r9, r2, r2]}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x5f, 0x61, 0x30, 0x0, 0x2e, 0x174a7a54c61d09b1]}}, 0x0, 0x2d, 0x0, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.600757718s ago: executing program 2 (id=3400):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r5 = socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010105}}}], 0x20}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
close(r5) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r10, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4094, 0xffe}, {&(0x7f0000000440)=""/224, 0xe0}], 0x2}, 0x0) (async, rerun: 64)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async, rerun: 64)
r11 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x538f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

2.565793269s ago: executing program 0 (id=3401):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xfffe, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000480), &(0x7f00000001c0)}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010070000000000000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@generic={0x4, 0x8, 0x4, 0xff, 0x8}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f80)={&(0x7f0000000d00), 0x0, 0x0, 0x0, 0x3, r8}, 0x38)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000)
socket$kcm(0x2, 0x5, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48)

2.50237086s ago: executing program 3 (id=3402):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b03"], 0x0, 0x5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x9a982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unlink(&(0x7f00000001c0)='./file0\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

2.374785453s ago: executing program 2 (id=3403):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xe, &(0x7f0000000180)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @generic={0x3, 0x6, 0xf, 0x6, 0x3}, @alu={0x7, 0x1, 0x8, 0x1, 0x8, 0x20, 0xfffffffffffffff0}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000200)='syzkaller\x00', 0x4354, 0x7c, &(0x7f00000002c0)=""/124, 0x41100, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x307, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xc}, {0x4, 0x3, 0x9, 0x7}, {0x4, 0x1, 0x4, 0xd78db92cd14be6ce}, {0x0, 0x1, 0xd, 0x9}, {0x0, 0x1, 0xe, 0x4}, {0x1, 0x5, 0x9, 0x4}], 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000900)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/168, 0xa8}], 0x1, &(0x7f0000000840)=""/186, 0xba}, 0x40000042)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000340), 0x0}, 0x20)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x10001, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x1, &(0x7f0000000240)=@raw=[@generic={0xf3, 0x2, 0x9, 0x562, 0xcc5}], &(0x7f0000000940)='syzkaller\x00', 0xe40, 0xf1, &(0x7f0000000980)=""/241, 0x41000, 0x77, '\x00', r10, @flow_dissector, r3, 0x8, &(0x7f0000000e80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x9, &(0x7f0000000ec0)=[r5, r8, r1, r8], &(0x7f0000000f00)=[{0x1, 0x2, 0xf, 0x2}, {0x3, 0x3, 0x4, 0xc}, {0x5, 0x1, 0xf, 0x5}, {0x1, 0x5, 0x6, 0x7}, {0x2, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x3, 0x6}, {0x2, 0x2, 0xd, 0x4}, {0x1, 0x1, 0x5, 0x6}, {0x3, 0x4, 0x6, 0x6}]}, 0x94)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

2.157304779s ago: executing program 0 (id=3404):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224", 0x12}], 0x1}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
close(r1) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0xa7e, r2}, 0x38) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000080000000fbe6365aa84d4ecc7f7dbc85de94b49f23"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYBLOB="3ee901"], 0x9a) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0x10003, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRES64=r8, @ANYRES8, @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) (async)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r9, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0xb6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x27, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
r12 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)="bf25f2721e84069aa779d7754ef7d8bd9103faa786a63d149ce8ca19a861", 0x1e}, {&(0x7f0000000940)="3857302293d621da268cd307c4e959bc5dd51836b0f572943dd125c0baa66d9a9e954ad0aa68455f856a82ddf1e07f0e787f78b36e819aee2a480fb3bdd92f0a7fcf12a7045a7d062ab9ff86741995a394f005d9dee17e62f9f5cdad8937178897995201a7276534c83f662ae4b1565e60505ce6dfaab57a4f9e094f368f87f1979c603407829a1f7f4a33b07dec73fa92d6a2ff175d70ba18f732ad2f43deee2c17684f88fbd94482f48e0f63ea338a3e9ef84b6d70521646218bae5b0707e402cbd8ee859a6b6feb9d740966c2363ad443896f718c33f507bbb3d4", 0xdc}, {0x0}], 0x3}, 0x20004000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18220000c4d296b3c1339bcb975175b4fd1de5ad471fbacfc672171c7fbaa7fc4d5d93a3ec93cf974c6aea98d94d3c1f2077ff0047bc128553b5ae7662ceca61a74ef9cda5b67a54db7f5baabbcf38c0bca81be9e371c999a16c4530612409eca349687ca80dc3b5aff02568914e8eb558c6b685c1fe2263cdc961", @ANYRES32=r10, @ANYBLOB="00000000040000009500000000000000850000009f000000"], &(0x7f0000000b40)='GPL\x00', 0x4, 0xc, &(0x7f0000000b80)=""/12, 0x41100, 0x10, '\x00', r11, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x4, 0x7, 0x7fffffff, 0x3}, 0x10, 0x9454, r9, 0x3, &(0x7f0000000c00)=[r12], &(0x7f0000000c40)=[{0x1, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x9, 0x9}], 0x10, 0x1000}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex=r11, 0xffffffffffffffff, 0x11, 0x11, r3, @void, @value=r6, @void, @void, r8}, 0x20) (async, rerun: 32)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)

1.936595733s ago: executing program 0 (id=3405):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000400000e0ff16e3f67800"/28], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]})
ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001cc0)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r5, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10)

1.761761798s ago: executing program 0 (id=3407):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000005000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
close(r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94)
close(0x3)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x30]}}, 0x0, 0x2f}, 0x28)
close(r6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x999a, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000980)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffe3f}, 0x0)
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@fallback=r1, r8, 0x10, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r10}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x1c)

1.616052861s ago: executing program 1 (id=3408):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xc}, 0x8008, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x1, 0x6, 0x0, 0x0, 0x9, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80f, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x20, 0x2, 0x43f3, 0x0, 0xaffb, 0x72, 0xb, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2)
perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x9, 0x0, 0x2f, 0xff, 0x0, 0x4, 0x100100, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x5}, 0x400, 0xff, 0xab50, 0x3, 0x6, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x9}, r2, 0xe, r3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

1.572781532s ago: executing program 0 (id=3409):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000740), 0x8, 0x74, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007910a2000000000007000000000000009100000000000000", @ANYRES64=<r6=>r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94)
close(r0)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r6, @ANYRESHEX=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r13 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r13, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r12, 0x4000, r11}, 0x18)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.544531783s ago: executing program 3 (id=3410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x100905, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.302531749s ago: executing program 2 (id=3411):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000003100)=""/4069, 0xfe5}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000480)=""/171, 0xab}], 0x8}, 0x40012100)

1.091874824s ago: executing program 1 (id=3412):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000100100081046881f782db44b904021d080b0100150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100110040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee14835e99ded0e0941821d0c4399f2cff69af051f1240fd67d73b87b6bda92333288caf41418f874e662c25b0718c8c1e73c7fc92e360ffeb6d75479d921162024271d8bba711eae8157d09933b95f3dec3712444b904ee8d919f10e52901d17d6c3e84", 0x133}, {&(0x7f0000000140)="698ad53cfaa9a76bd557458530a6ac1b212b661556cd8bf72566e5d73e3d7a4de03097ac02f75140c6d6640ac487db89584ab25d96799c804a913072d6d02af9", 0x40}, {&(0x7f0000000200)="14b818a54d1c44e0059b3f8d1397c97bc090d48c02a620f21312402145bb4ed4beea5d1d1779ac4c8574b7dfcafb452a641cd95350087f7137fd92e58009973b7411e1a7f836381cb0190ab285a7e24f61996711ac79c49e06b9a34f2573932449294071e0caeb7c1628650790900b7469206017b0d28df53562b55073ee4799098544", 0x83}], 0x3}, 0x0)

1.004060286s ago: executing program 3 (id=3413):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100))
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x44, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1961}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa17}}]}, &(0x7f0000000300)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000340), 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x27bef7f9, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x2, 0x4, 0x9}, {0x0, 0x3, 0xe, 0xb}, {0x5, 0x4, 0x9, 0xc}, {0x3, 0x5, 0xd, 0xa}, {0x0, 0x2, 0x3, 0x5}, {0x800003, 0x3, 0xd, 0x9}, {0x3, 0x5, 0x8, 0x8}], 0x10, 0x6}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x36}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x91, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x6d5e, r2, 0x5, &(0x7f0000000740)=[r1, r1, r1, r1], &(0x7f0000000780)=[{0x3, 0x3, 0xd}, {0x4, 0x1, 0x8, 0x7}, {0x4, 0x2, 0x3, 0x9}, {0x2, 0x1, 0xa, 0x7}, {0x2, 0x2, 0xe, 0xa}], 0x10, 0x2}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000008c0)=r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000200850000000f00000018010000646c6c2400000000ad000000000000009239dc7977ebe14211d7366d1ad59a3bb90000bfa0ffffffffffe007010000f8ffffffc50200a6e5000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
sendmsg$sock(r5, &(0x7f00000007c0)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f", 0x51}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0xe63}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0xbb1c16db53e55fd9, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000060000000000000000000000741d9a5a168a74681a7e0e4204d5eb124933cfb7b94e6be5ae4c84323fad6244e62f7327564fe12599f4099549197df08013a714c08032a457d3293941f9160e9038ae2b2a4755ca9e5effd295549a55477f8829edddfaaf4e9736c924243c12073c3234c5aeb9c88ba513240196ed525c1ceeed3aef92c1bca6e5607831611bf16aa8a6f2a249962b0d172e0a", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="0014443d4d90097aa3dd0a3c774af845c801b6bcbf492dfc0000b03597e851163c02000000000000050000"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b00354028", 0x19}], 0x1}, 0xe000)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

904.639219ms ago: executing program 2 (id=3414):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) (async)
sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8010)
r1 = socket$kcm(0xa, 0x1, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x209058, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x35dc00000000}, 0x52e0, 0x10000, 0x0, 0x4, 0x8, 0xfffffff8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async)
r4 = socket$kcm(0xa, 0x1, 0x106) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4e, 0x0, 0x4000) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) (async)
close(0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

898.943769ms ago: executing program 1 (id=3415):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1e, &(0x7f0000000240)=[{&(0x7f00000000c0)="e03f1d0005000000000000008c6f94f90424fc60040200f300053582c137153e37000c0980fc0b100003000000002d27c5e6e1ef5315f1e0ebe72a3131e19c910976d5204d745eb6eaa44a82d1977cbc21a583fc79817af1d9828e3b5c3b9897b6c41e9789cd4825e65e36f4f0482e6658d2514ad0fa16416a0f30f806a37aa66ccee21309c5079c2107ad4da890d9fb", 0x90}, {&(0x7f0000000180)="41138fcc91c55cd0d05e2dfd1f1aa86b7a221b4fd9499022df453b209c5e9172124c5ff9dff33003b8363f8e5953cd715580afe3b500da1c64fa9a2cd92fa75c0ff5d58d23e40520c17c32c0a30aa7b3d62d163412ce9f53cb4c2cff76d323e5f2c7c17624c4ef21836fe7d612ef652f01a3b6cb9426e58fade188ef4d2a92a0053bf08a5fd837b9f283c320fea0ac1fee9ff96892db98b3419a8cf5f4037cad4ee78b"}], 0x1}, 0x2404c014)

704.552544ms ago: executing program 1 (id=3416):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000feffffff4800"/56], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)

577.176257ms ago: executing program 2 (id=3417):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x1b, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000004000000000000000a00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001864000007000000000000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008f7370ff01000000bf91000000000000b7020000010067da52971b0b1917c5f947dc00008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x4, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3002, @ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r0}, 0x94)
r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0xfffe)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xd, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x1, 0x106)
mkdir(0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x6419599304258992)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r9, 0x1}, 0xc)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

256.986035ms ago: executing program 1 (id=3418):
r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0xf, 0x6, 0x0, 0x2, 0x0, 0x248, 0x400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x2, 0x8}, 0x10, 0x3, 0x94dd, 0x4, 0x5, 0xae, 0x2, 0x0, 0xfffffffd, 0x0, 0xf}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x16, 0xf, 0x9, 0x0, 0x0, 0xb600c, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb0, 0x2, @perf_config_ext={0x7fffffff, 0x3}, 0x80, 0x4, 0x1, 0x7, 0x8, 0x3, 0x8, 0x0, 0x7f, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x100000003, r0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\x8f\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0xf, 0x6, 0x0, 0x2, 0x0, 0x248, 0x400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x2, 0x8}, 0x10, 0x3, 0x94dd, 0x4, 0x5, 0xae, 0x2, 0x0, 0xfffffffd, 0x0, 0xf}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) (async)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x16, 0xf, 0x9, 0x0, 0x0, 0xb600c, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb0, 0x2, @perf_config_ext={0x7fffffff, 0x3}, 0x80, 0x4, 0x1, 0x7, 0x8, 0x3, 0x8, 0x0, 0x7f, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x100000003, r0, 0x4) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\x8f\x00') (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)

205.110915ms ago: executing program 1 (id=3419):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000000f6c8e7db8264e8b0000", @ANYBLOB="ac141441ac1414bb0000000010000000"], 0x30}, 0x4840)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x5}, 0x100000, 0x10000, 0x5, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x2b, &(0x7f0000000a80)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x25}, 0x94)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x24969, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b7e, 0x2, @perf_config_ext={0x200000007, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0xd06, 0xfffe, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0x4000000000000f, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3c, &(0x7f0000000040), 0xcf)
recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r1, r3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff030768445ea7a91a8cb888a8", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7", @ANYRES32=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x430, 0x32, 0x43e1bd74, 0x3, 0x9, 0x800006, 0x2, 0x0, 0x8001, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800"/15, @ANYRES16=r1], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0)

78.353499ms ago: executing program 3 (id=3420):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd7a, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010", 0x5}], 0x1}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/110, 0x6e, 0x0, &(0x7f0000000180)=""/147, 0x93}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x890c}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
gettid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x4}, 0x21, 0x0, 0x0, 0x4, 0x9, 0x7f7fffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$kcm(0xa, 0x2, 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')
sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

62.594799ms ago: executing program 0 (id=3421):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x1, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f00000002c0)="832debe16dcb86c87d5aefe65d02cfd5abf09af52aa52b8cabb58fc01abb15f60d5a22c41db1026e79ce59a5435ee6dbbda06da24d6ba4b1c74be48cbecfac18a86c6beeaa9d76f459afacefd359e19a883a72f60ace4e37e2a42a3bb1370dba262a81516897d1c6d6b3535adf8dda2565eb11f4790cd2919d6c3e6f81debad0fcbe88b526c21f32fa437bf41e509dd290c7a0770786a6a11677efa2b21d2e84e1126303bec5af3365c0761d846d3573e20682f18e3d99691b1c6c6e9c3d37752907e3e7534f", 0xc6}], 0x3}, 0x8080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180d000000000000000000000000000085000010ae00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94)

0s ago: executing program 2 (id=3422):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)

kernel console output (not intermixed with test programs):

2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.898682][T12354] RSP: 002b:00007fb3ece56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  412.907123][T12354] RAX: ffffffffffffffda RBX: 00007fb3ec225fa0 RCX: 00007fb3ebf9e0d9
[  412.915123][T12354] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  412.923118][T12354] RBP: 00007fb3ece56090 R08: 0000000000000000 R09: 0000000000000000
[  412.931113][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  412.939098][T12354] R13: 00007fb3ec226038 R14: 00007fb3ec225fa0 R15: 00007ffc183daaa8
[  412.947110][T12354]  </TASK>
[  413.498190][T12368] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  413.567424][T12373] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1968'.
[  413.577519][T12373] smc: net device  applied user defined pnetid CONFIG
[  416.060617][T12364] delete_channel: no stack
[  416.504569][ T5785] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7
[  416.822873][T12405] netlink: 'syz.2.1978': attribute type 1 has an invalid length.
[  416.880484][T12405] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1978'.
[  417.985517][T12428] netlink: 'syz.3.1986': attribute type 3 has an invalid length.
[  418.028053][T12428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1986'.
[  418.066404][T12432] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1986'.
[  418.149513][T12434] delete_channel: no stack
[  418.457441][T12452] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1994'.
[  418.614424][T12450] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1993'.
[  418.633793][T12450] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  418.692745][T12450] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  419.514705][T12476] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1997'.
[  419.615999][T12478] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.1998'.
[  421.090570][T12503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2005'.
[  421.342216][T12503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.438063][T12503] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  421.482706][T12503] bond0 (unregistering): Released all slaves
[  422.252779][T12524] netlink: 105940 bytes leftover after parsing attributes in process `syz.2.2010'.
[  422.310991][T12522] netlink: 'syz.3.2009': attribute type 10 has an invalid length.
[  422.454355][T12540] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.2013'.
[  422.607020][T12542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2014'.
[  422.625493][T12542] hsr_slave_0: left promiscuous mode
[  422.675344][T12542] hsr_slave_1: left promiscuous mode
[  422.913926][T12548] netlink: 'syz.3.2016': attribute type 21 has an invalid length.
[  422.999217][T12548] netlink: 'syz.3.2016': attribute type 6 has an invalid length.
[  423.401261][   T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  424.010714][T12587] netlink: 'syz.1.2026': attribute type 12 has an invalid length.
[  424.060122][T12587] netlink: 'syz.1.2026': attribute type 11 has an invalid length.
[  424.087511][T12587] __nla_validate_parse: 1 callbacks suppressed
[  424.087551][T12587] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.2026'.
[  424.347196][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.368522][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.380463][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.391187][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.403917][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.412325][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.468114][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.481665][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.500778][T12607] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2033'.
[  424.503211][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.530032][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.539576][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'.
[  424.550151][T12602] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  424.558365][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  424.568253][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'.
[  428.093229][T12700] validate_nla: 29 callbacks suppressed
[  428.093247][T12700] netlink: 'syz.0.2061': attribute type 19 has an invalid length.
[  428.421712][T12709] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  428.446809][T12708] delete_channel: no stack
[  429.182085][T12735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.237332][T12735] netlink: 'syz.2.2073': attribute type 9 has an invalid length.
[  429.343606][T12735] __nla_validate_parse: 29 callbacks suppressed
[  429.343627][T12735] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2073'.
[  429.393384][T12740] netlink: 'syz.3.2075': attribute type 16 has an invalid length.
[  429.428233][T12740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2075'.
[  429.474157][T12738] netlink: 'syz.2.2073': attribute type 9 has an invalid length.
[  429.505790][T12738] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2073'.
[  429.660518][T12749] netlink: 'syz.0.2078': attribute type 1 has an invalid length.
[  429.674440][T12749] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2078'.
[  429.827797][T12749] syzkaller0: entered promiscuous mode
[  429.836684][T12749] syzkaller0: entered allmulticast mode
[  432.727198][T12772] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  432.852489][T12771] delete_channel: no stack
[  433.075519][T12781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2089'.
[  433.092722][T12789] netlink: 'syz.3.2090': attribute type 9 has an invalid length.
[  433.104732][T12789] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2090'.
[  433.232135][T12786] netlink: 'syz.2.2091': attribute type 10 has an invalid length.
[  433.787629][T12809] netlink: 'syz.2.2097': attribute type 6 has an invalid length.
[  433.862925][T12809] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2097'.
[  434.871001][T12864] netlink: 'syz.1.2114': attribute type 3 has an invalid length.
[  434.888092][T12864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2114'.
[  435.064144][T12876] netlink: 'syz.3.2117': attribute type 21 has an invalid length.
[  435.088270][T12876] netlink: 'syz.3.2117': attribute type 1 has an invalid length.
[  435.096025][T12876] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.2117'.
[  435.106965][T12875] netlink: 'syz.3.2117': attribute type 21 has an invalid length.
[  435.123899][T12874] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2116'.
[  435.145371][T12875] netlink: 'syz.3.2117': attribute type 1 has an invalid length.
[  435.156735][T12875] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.2117'.
[  435.309489][T12885] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2120'.
[  435.520957][T12891] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2122'.
[  435.533553][T12891] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2122'.
[  435.688917][T12896] netlink: 'syz.3.2124': attribute type 21 has an invalid length.
[  435.714905][T12896] netlink: 'syz.3.2124': attribute type 1 has an invalid length.
[  435.725689][T12896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2124'.
[  435.735892][T12902] netlink: 'syz.0.2125': attribute type 21 has an invalid length.
[  435.742501][T12901] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2126'.
[  435.768860][T12901] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2126'.
[  438.314814][   T59] tipc: Subscription rejected, illegal request
[  439.687499][T13008] 
€Â0: renamed from batadv_slave_1 (while UP)
[  440.215053][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.221585][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  440.804184][T13033] delete_channel: no stack
[  440.878474][T13042] validate_nla: 6 callbacks suppressed
[  440.878519][T13042] netlink: 'syz.2.2170': attribute type 10 has an invalid length.
[  441.273188][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.801659][T13065] netlink: 'syz.1.2178': attribute type 2 has an invalid length.
[  441.835679][T13065] __nla_validate_parse: 6 callbacks suppressed
[  441.835697][T13065] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.2178'.
[  441.870808][T13051] delete_channel: no stack
[  442.268291][T13085] netlink: 'syz.0.2184': attribute type 9 has an invalid length.
[  442.276087][T13085] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2184'.
[  444.596952][T13098] netlink: zone id is out of range
[  444.619699][T13098] netlink: set zone limit has 8 unknown bytes
[  444.776405][T13102] syzkaller0: entered promiscuous mode
[  444.949105][T13109] netlink: 'syz.0.2191': attribute type 4 has an invalid length.
[  444.957451][T13109] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2191'.
[  445.586912][T13115] delete_channel: no stack
[  447.025852][T13120] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2195'.
[  447.036031][T13121] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2195'.
[  447.046095][T13124] tun0: tun_chr_ioctl cmd 1074025675
[  447.055466][T13124] tun0: persist enabled
[  447.060775][T13125] tun0: tun_chr_ioctl cmd 1074025675
[  447.066097][T13125] tun0: persist disabled
[  447.357650][T13148] netlink: 'syz.3.2199': attribute type 9 has an invalid length.
[  447.384416][T13148] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2199'.
[  447.618262][T13154] delete_channel: no stack
[  447.770957][T13166] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.2206'.
[  447.916585][T13171] netlink: 'syz.0.2208': attribute type 10 has an invalid length.
[  447.928120][T13171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2208'.
[  447.938190][T13171] team0: entered promiscuous mode
[  447.943276][T13171] team_slave_0: entered promiscuous mode
[  447.955713][T13171] team_slave_1: entered promiscuous mode
[  447.962576][T13171] bond0: entered promiscuous mode
[  447.972674][T13171] bond_slave_1: entered promiscuous mode
[  447.979968][T13171] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  447.993464][T13171] geneve1: entered promiscuous mode
[  448.000269][T13171] hsr_slave_0: entered promiscuous mode
[  448.006162][T13171] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  448.033053][T13171] team0: entered allmulticast mode
[  448.041825][T13171] team_slave_0: entered allmulticast mode
[  448.047668][T13171] team_slave_1: entered allmulticast mode
[  448.057498][T13171] bond0: entered allmulticast mode
[  448.066656][T13171] bond_slave_1: entered allmulticast mode
[  448.075301][T13171] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  448.103215][T13171] geneve1: entered allmulticast mode
[  448.108702][T13171] hsr_slave_0: entered allmulticast mode
[  448.114795][T13171] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  448.135769][T13171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  448.166037][T13170] netlink: 'syz.0.2208': attribute type 10 has an invalid length.
[  448.181341][T13170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2208'.
[  448.202439][T13170] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  448.513229][T13188] delete_channel: no stack
[  449.638660][T13223] delete_channel: no stack
[  450.289063][T13229] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2229'.
[  450.312382][T13229] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2229'.
[  450.350630][T13230] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2229'.
[  450.374432][T13240] netlink: 'syz.0.2232': attribute type 39 has an invalid length.
[  450.606380][T13229] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2229'.
[  450.622109][T13244] netlink: 'syz.3.2233': attribute type 2 has an invalid length.
[  450.635886][T13244] netlink: 'syz.3.2233': attribute type 8 has an invalid length.
[  451.065387][T13261] netlink: 'syz.1.2239': attribute type 10 has an invalid length.
[  451.216544][ T5785] Bluetooth: hci0: unexpected event 0x06 length: 151 > 3
[  451.321430][T13272] netlink: 'syz.0.2244': attribute type 10 has an invalid length.
[  451.351130][T13272] batman_adv: batadv0: Adding interface: virt_wifi0
[  451.367532][T13272] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.396604][T13272] batman_adv: batadv0: Interface activated: virt_wifi0
[  451.460258][T13262] delete_channel: no stack
[  452.917655][T13324] netlink: 'syz.2.2257': attribute type 1 has an invalid length.
[  452.926136][T13324] __nla_validate_parse: 3 callbacks suppressed
[  452.926149][T13324] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2257'.
[  453.383406][T13333] syzkaller0: entered promiscuous mode
[  453.402260][T13333] syzkaller0: entered allmulticast mode
[  453.442164][T13339] netlink: 'syz.0.2262': attribute type 9 has an invalid length.
[  453.465671][T13339] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2262'.
[  455.228719][T13350] sit0: left promiscuous mode
[  455.248844][T13351] sit0: entered promiscuous mode
[  455.379908][T13354] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2266'.
[  455.424763][T13356] netlink: 'syz.0.2266': attribute type 4 has an invalid length.
[  455.454305][T13356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2266'.
[  455.481878][T13356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  455.984350][T13387] netlink: 'syz.3.2274': attribute type 10 has an invalid length.
[  456.013457][T13386] C: renamed from team_slave_0
[  456.073291][T13386] netlink: 'syz.0.2275': attribute type 1 has an invalid length.
[  456.119237][T13386] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  456.416885][T13397] netlink: 'syz.0.2279': attribute type 10 has an invalid length.
[  456.714243][T13397] C: left promiscuous mode
[  456.738754][T13397] C: left allmulticast mode
[  456.826198][T13397] team0 (unregistering): Port device C removed
[  456.862851][T13397] team_slave_1: left promiscuous mode
[  456.880905][T13397] team_slave_1: left allmulticast mode
[  459.901352][T13397] team0 (unregistering): Port device team_slave_1 removed
[  459.912588][T13397] bond0: left promiscuous mode
[  459.917413][T13397] bond_slave_1: left promiscuous mode
[  459.923538][T13397] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  459.931045][T13397] bond0: left allmulticast mode
[  459.935964][T13397] bond_slave_1: left allmulticast mode
[  459.941566][T13397] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  460.072200][T13397] team0 (unregistering): Port device bond0 removed
[  460.088504][T13397] geneve1: left promiscuous mode
[  460.093713][T13397] geneve1: left allmulticast mode
[  460.141292][T13397] team0 (unregistering): Port device geneve1 removed
[  460.174192][T13397] hsr_slave_0: left promiscuous mode
[  460.180094][T13397] hsr_slave_0: left allmulticast mode
[  460.225274][T13397] team0 (unregistering): Port device hsr_slave_0 removed
[  460.238118][T13397] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  460.245158][T13397] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  460.266780][T13397] team0 (unregistering): Port device wlan1 removed
[  460.317901][T13419] netlink: 'syz.1.2283': attribute type 39 has an invalid length.
[  460.428107][T13419] bond0: (slave syz_tun): Releasing backup interface
[  460.621034][T13433] netlink: 'syz.2.2288': attribute type 1 has an invalid length.
[  460.796376][T13440] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2292'.
[  460.821216][T13440] netlink: 'syz.3.2292': attribute type 29 has an invalid length.
[  460.833118][T13440] netlink: 'syz.3.2292': attribute type 29 has an invalid length.
[  460.877165][T13439] delete_channel: no stack
[  460.881801][T13444] netlink: 'syz.0.2293': attribute type 3 has an invalid length.
[  461.831536][T13459] netlink: 'syz.2.2297': attribute type 27 has an invalid length.
[  461.869876][T13459] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2297'.
[  462.103170][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  462.112482][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  462.123414][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0
[  462.131045][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  462.141134][ T5785] Workqueue: hci3 hci_rx_work
[  462.145956][ T5785] Call Trace:
[  462.149257][ T5785]  <TASK>
[  462.152207][ T5785]  dump_stack_lvl+0x18c/0x250
[  462.156933][ T5785]  ? show_regs_print_info+0x20/0x20
[  462.162155][ T5785]  ? load_image+0x420/0x420
[  462.166702][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  462.171883][ T5785]  ? __lock_acquire+0x7d80/0x7d80
[  462.176942][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  462.181653][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  462.186905][ T5785]  kobject_add_internal+0x617/0xc90
[  462.192144][ T5785]  kobject_add+0x164/0x240
[  462.196599][ T5785]  ? kobject_init+0x1d0/0x1d0
[  462.201315][ T5785]  ? get_device_parent+0x366/0x390
[  462.206483][ T5785]  device_add+0x3fa/0xc40
[  462.210849][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  462.215893][ T5785]  le_conn_complete_evt+0xe9f/0x1480
[  462.221257][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  462.227531][ T5785]  ? bt_info+0x180/0x180
[  462.231807][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  462.237475][ T5785]  ? mutex_unlock+0x10/0x10
[  462.242006][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  462.246723][ T5785]  hci_le_conn_complete_evt+0x187/0x440
[  462.252342][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  462.258453][ T5785]  hci_event_packet+0x7b4/0x1280
[  462.263423][ T5785]  ? __lock_acquire+0x7d80/0x7d80
[  462.268480][ T5785]  ? lock_chain_count+0x20/0x20
[  462.273383][ T5785]  ? bis_list+0x290/0x290
[  462.277757][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  462.283021][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  462.288244][ T5785]  hci_rx_work+0x43a/0xd60
[  462.292697][ T5785]  ? process_scheduled_works+0x975/0x1600
[  462.298471][ T5785]  process_scheduled_works+0xa60/0x1600
[  462.304075][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  462.309623][ T5785]  ? assign_work+0x3cc/0x5d0
[  462.314263][ T5785]  worker_thread+0xa5e/0xfe0
[  462.318927][ T5785]  kthread+0x2fa/0x390
[  462.323018][ T5785]  ? pr_cont_work+0x550/0x550
[  462.327724][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  462.332349][ T5785]  ret_from_fork+0x48/0x80
[  462.336821][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  462.341481][ T5785]  ret_from_fork_asm+0x11/0x20
[  462.346326][ T5785]  </TASK>
[  462.349927][ T5785] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  462.372558][ T5785] Bluetooth: hci3: failed to register connection device
[  462.441946][T13469] netlink: 'syz.0.2300': attribute type 29 has an invalid length.
[  462.497811][T13469] netlink: 'syz.0.2300': attribute type 29 has an invalid length.
[  462.866416][T13481] delete_channel: no stack
[  463.478764][T13504] netlink: 'syz.1.2311': attribute type 6 has an invalid length.
[  463.489138][T13504] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2311'.
[  464.086436][T13529] netlink: 'syz.1.2319': attribute type 9 has an invalid length.
[  464.094603][T13529] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2319'.
[  464.254417][T13529] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2319'.
[  464.442686][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  464.552762][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  464.561808][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  464.569624][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  464.591093][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  464.601577][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  464.611303][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  464.741495][T13523] delete_channel: no stack
[  465.296757][ T2972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.330346][T13545] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2322'.
[  465.340255][T13547] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2322'.
[  465.365232][T13551] validate_nla: 1 callbacks suppressed
[  465.365248][T13551] netlink: 'syz.3.2324': attribute type 10 has an invalid length.
[  465.383756][T13551] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2324'.
[  465.406899][T13531] chnl_net:caif_netlink_parms(): no params data found
[  465.452250][ T2972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.622338][ T2972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.653130][T13558] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2326'.
[  465.724354][ T2972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.782831][T13531] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.800762][T13531] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.808578][T13531] bridge_slave_0: entered allmulticast mode
[  465.816519][T13531] bridge_slave_0: entered promiscuous mode
[  465.830575][T13566] netlink: 'syz.3.2327': attribute type 2 has an invalid length.
[  465.842942][T13566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2327'.
[  465.852815][T13531] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.865510][T13531] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.888004][T13531] bridge_slave_1: entered allmulticast mode
[  465.895820][T13531] bridge_slave_1: entered promiscuous mode
[  465.941881][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.959742][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.044355][T13531] team0: Port device team_slave_0 added
[  466.070736][T13531] team0: Port device team_slave_1 added
[  466.192311][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.207778][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.257253][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.312064][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.328184][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.374179][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.438798][T13568] delete_channel: no stack
[  466.493985][T13531] hsr_slave_0: entered promiscuous mode
[  466.543539][T13531] hsr_slave_1: entered promiscuous mode
[  466.594190][T13531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  466.627990][T13531] Cannot create hsr debugfs directory
[  466.663183][T13580] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2332'.
[  466.680892][ T5792] Bluetooth: hci4: command tx timeout
[  466.851466][T13580] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2332'.
[  466.994827][ T2972] smc: removing net device  with user defined pnetid CONFIG
[  467.678667][T13610] delete_channel: no stack
[  467.779957][T13617] netlink: 'syz.3.2341': attribute type 33 has an invalid length.
[  467.818430][T13617] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2341'.
[  468.718635][T13634] netlink: 'syz.1.2345': attribute type 10 has an invalid length.
[  468.738330][T13634] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  468.758130][ T5792] Bluetooth: hci4: command tx timeout
[  468.792946][T13634] bond0: (slave netdevsim0): Releasing backup interface
[  468.819593][T13634] bridge0: port 1(netdevsim0) entered blocking state
[  468.832677][T13634] bridge0: port 1(netdevsim0) entered disabled state
[  468.861858][T13634] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  469.334028][T13531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  469.413929][T13531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  469.488616][T13531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  469.612649][T13531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  469.839660][ T2972] hsr0: left allmulticast mode
[  469.844695][ T2972] hsr_slave_0: left allmulticast mode
[  469.873159][ T2972] hsr_slave_1: left allmulticast mode
[  469.888771][ T2972] hsr0: left promiscuous mode
[  469.912610][ T2972] nr0: port 1(hsr0) entered disabled state
[  470.610764][ T2972] hsr_slave_0: left promiscuous mode
[  470.629684][ T2972] hsr_slave_1: left promiscuous mode
[  470.636222][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.652923][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.686067][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.708306][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.747061][ T2972] bridge0: port 3(team0) entered disabled state
[  470.780535][ T2972] bridge_slave_1: left allmulticast mode
[  470.786254][ T2972] bridge_slave_1: left promiscuous mode
[  470.808185][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.837996][ T5792] Bluetooth: hci4: command tx timeout
[  470.848171][ T2972] bridge_slave_0: left allmulticast mode
[  470.853882][ T2972] bridge_slave_0: left promiscuous mode
[  470.885623][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.161504][T13684] netlink: 'syz.3.2354': attribute type 2 has an invalid length.
[  471.254043][T13684] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2354'.
[  472.918059][ T5792] Bluetooth: hci4: command tx timeout
[  473.902442][ T2972] veth1_macvtap: left promiscuous mode
[  473.910849][ T2972] veth0_macvtap: left promiscuous mode
[  474.517295][ T2972] team_slave_1 (unregistering): left promiscuous mode
[  474.524537][ T2972] team_slave_1 (unregistering): left allmulticast mode
[  474.536054][ T2972] team0 (unregistering): Port device team_slave_1 removed
[  474.581492][ T2972] team_slave_0 (unregistering): left promiscuous mode
[  474.591483][ T2972] team_slave_0 (unregistering): left allmulticast mode
[  474.600777][ T2972] team0 (unregistering): Port device team_slave_0 removed
[  475.247604][T13531] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.282225][T13531] 8021q: adding VLAN 0 to HW filter on device team0
[  475.324284][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.331548][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.354652][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.361936][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.734148][T13713] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2363'.
[  476.170525][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.300032][T13531] veth0_vlan: entered promiscuous mode
[  476.342280][T13531] veth1_vlan: entered promiscuous mode
[  476.439789][T13531] veth0_macvtap: entered promiscuous mode
[  476.465579][T13531] veth1_macvtap: entered promiscuous mode
[  476.524538][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.555771][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.578841][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.608153][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.633053][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.658158][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.690383][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.714941][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.748332][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.767759][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  476.778421][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.788738][T13531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.799751][T13531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.816255][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.852733][T13531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.865698][T13531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.875082][T13531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.885446][T13531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.895541][T13734] delete_channel: no stack
[  477.315982][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.353861][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.456442][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.485907][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.842409][T13775] netlink: 'syz.2.2318': attribute type 3 has an invalid length.
[  477.871230][T13775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2318'.
[  477.873989][T13772] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2372'.
[  477.907339][T13772] netlink: zone id is out of range
[  478.463883][T13786] netlink: 'syz.1.2373': attribute type 9 has an invalid length.
[  478.513916][T13786] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2373'.
[  479.819373][T13797] delete_channel: no stack
[  481.200486][T13802] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  481.519723][T13792] delete_channel: no stack
[  482.225277][T13829] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2381'.
[  482.707555][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  482.720464][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  482.730419][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  482.754225][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  482.777218][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  482.790565][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  482.975182][T13851] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2384'.
[  483.015278][ T4503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.229557][T13859] netlink: 'syz.1.2386': attribute type 4 has an invalid length.
[  483.258794][T13859] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2386'.
[  483.351724][ T4503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.543604][ T4503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.619050][T13863] delete_channel: no stack
[  483.634617][T13872] netlink: 'syz.2.2389': attribute type 4 has an invalid length.
[  483.728279][ T4503] bond0: (slave netdevsim0): Releasing backup interface
[  483.750302][ T4503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.923311][T13881] netlink: 'syz.3.2392': attribute type 8 has an invalid length.
[  484.074035][T13881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2392'.
[  484.192294][T13843] chnl_net:caif_netlink_parms(): no params data found
[  484.331715][ T4503] tipc: Left network mode
[  484.848670][ T5792] Bluetooth: hci1: command tx timeout
[  485.308812][T13843] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.337270][T13843] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.355415][T13843] bridge_slave_0: entered allmulticast mode
[  485.396068][T13843] bridge_slave_0: entered promiscuous mode
[  485.484450][T13843] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.511310][T13843] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.539680][T13843] bridge_slave_1: entered allmulticast mode
[  485.547041][T13843] bridge_slave_1: entered promiscuous mode
[  485.760913][T13917] netlink: 'syz.1.2400': attribute type 10 has an invalid length.
[  485.903299][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.943143][T13926] netlink: 'syz.3.2401': attribute type 21 has an invalid length.
[  485.977917][T13926] netlink: 'syz.3.2401': attribute type 1 has an invalid length.
[  486.028449][T13926] delete_channel: no stack
[  486.033788][T13926] delete_channel: no stack
[  486.062755][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.442462][T13843] team0: Port device team_slave_0 added
[  486.481375][T13843] team0: Port device team_slave_1 added
[  486.546801][T13940] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2404'.
[  486.758182][T13943] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  486.806605][T13943] syzkaller0: entered promiscuous mode
[  486.849089][T13943] syzkaller0: entered allmulticast mode
[  486.880611][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.907953][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.945443][ T5792] Bluetooth: hci1: command tx timeout
[  486.983809][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.043481][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.067962][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.100404][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.007855][ T5792] Bluetooth: hci1: command tx timeout
[  489.048578][T13977] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2410'.
[  490.594163][T13950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  490.601525][T13950] IPv6: NLM_F_CREATE should be set when creating new route
[  490.608874][T13950] IPv6: NLM_F_CREATE should be set when creating new route
[  490.616116][T13950] IPv6: NLM_F_CREATE should be set when creating new route
[  490.654428][T13977] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2410'.
[  490.799519][T13982] team0: Port device team_slave_0 removed
[  490.891538][T13982] netlink: 'syz.1.2411': attribute type 1 has an invalid length.
[  490.924723][T13843] hsr_slave_0: entered promiscuous mode
[  490.932473][T13843] hsr_slave_1: entered promiscuous mode
[  490.964594][T13982] netlink: 'syz.1.2411': attribute type 2 has an invalid length.
[  490.984701][T13982] netlink: 'syz.1.2411': attribute type 8 has an invalid length.
[  491.002507][T13982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2411'.
[  491.015855][T13984] netlink: 'syz.3.2413': attribute type 10 has an invalid length.
[  491.078398][ T5792] Bluetooth: hci1: command tx timeout
[  491.578462][T14006] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2416'.
[  491.603346][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.632270][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.651156][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.668000][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.689855][ T4503] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  491.697063][ T4503] batman_adv: batadv0: Removing interface: virt_wifi0
[  491.828411][ T4503] veth1_macvtap: left promiscuous mode
[  491.835716][ T4503] veth0_macvtap: left promiscuous mode
[  492.032813][T14018] netlink: 'syz.1.2418': attribute type 29 has an invalid length.
[  492.569677][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.814198][ T4503] bond0 (unregistering): Released all slaves
[  492.875608][T14006] netlink: 'syz.2.2416': attribute type 21 has an invalid length.
[  492.887618][T14018] netlink: 'syz.1.2418': attribute type 29 has an invalid length.
[  492.945190][T14023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.954779][T14023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.989033][T14023] batman_adv: batadv0: Interface deactivated: 
€Â0
[  493.023244][T14023] batman_adv: batadv0: Removing interface: 
€Â0
[  493.052611][T14023] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  493.061812][T14023] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  494.715341][T13843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  494.755920][T13843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  494.784234][T13843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  494.827900][T13843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  495.393824][T14078] netlink: 'syz.3.2433': attribute type 10 has an invalid length.
[  495.450285][T13843] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.692785][T13843] 8021q: adding VLAN 0 to HW filter on device team0
[  495.731508][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.738776][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.786053][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.793277][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.451975][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.617735][T13843] veth0_vlan: entered promiscuous mode
[  496.650722][T13843] veth1_vlan: entered promiscuous mode
[  496.695750][T14119] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2440'.
[  496.747109][T13843] veth0_macvtap: entered promiscuous mode
[  496.769147][T13843] veth1_macvtap: entered promiscuous mode
[  496.791781][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.802648][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.816299][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.831218][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.845593][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.882291][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.902577][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.912944][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.925166][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.946793][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.012115][T13843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.035494][T13843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.057058][T13843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.074006][T13843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.239130][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.247028][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.335138][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.363051][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.683075][T14142] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  501.648631][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.655003][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  501.708804][T14191] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2452'.
[  501.899391][T14188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  501.963014][T14191] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2452'.
[  502.003406][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  502.017926][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  502.040960][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  502.058747][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  502.066536][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  502.074118][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  502.309250][T14199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2453'.
[  502.376262][T14199] bond0: (slave bond_slave_0): Releasing backup interface
[  502.486093][T14199] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  502.643899][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.810928][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.144979][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.353536][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.619126][T14194] chnl_net:caif_netlink_parms(): no params data found
[  503.830914][T14194] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.838396][T14194] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.845680][T14194] bridge_slave_0: entered allmulticast mode
[  503.854675][T14194] bridge_slave_0: entered promiscuous mode
[  503.865856][T14194] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.883716][T14194] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.894066][T14194] bridge_slave_1: entered allmulticast mode
[  503.915464][T14194] bridge_slave_1: entered promiscuous mode
[  504.010617][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  504.060459][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.117788][ T5792] Bluetooth: hci2: command tx timeout
[  504.138162][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  504.160916][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.309131][T14260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  504.358347][T14259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'.
[  504.409353][T14255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  504.472883][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  504.629187][T14194] team0: Port device team_slave_0 added
[  504.675690][T14194] team0: Port device team_slave_1 added
[  504.819333][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.898451][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.005393][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.052230][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.069081][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.167902][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.203951][T14276] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2466'.
[  505.744065][T14276] netlink: 'syz.2.2466': attribute type 10 has an invalid length.
[  505.795109][T14276] team0: Device ipvlan1 failed to register rx_handler
[  506.213001][ T5792] Bluetooth: hci2: command tx timeout
[  506.455049][T14194] hsr_slave_0: entered promiscuous mode
[  506.502327][T14194] hsr_slave_1: entered promiscuous mode
[  506.528667][T14194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  506.546661][T14194] Cannot create hsr debugfs directory
[  507.511403][T14297] netlink: 'syz.2.2470': attribute type 10 has an invalid length.
[  507.673261][T14297] team0: Device wg1 is of different type
[  508.285298][ T5792] Bluetooth: hci2: command tx timeout
[  510.357997][ T5792] Bluetooth: hci2: command tx timeout
[  511.346412][T14194] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  511.439132][T14194] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  511.498655][T14194] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  511.588680][T14194] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.237055][ T2972] hsr_slave_0: left promiscuous mode
[  512.263420][ T2972] hsr_slave_1: left promiscuous mode
[  512.340917][ T2972] veth1_macvtap: left promiscuous mode
[  512.375123][ T2972] veth0_macvtap: left promiscuous mode
[  514.315659][ T2972] team_slave_1 (unregistering): left promiscuous mode
[  514.324943][ T2972] team_slave_1 (unregistering): left allmulticast mode
[  514.336146][ T2972] team0 (unregistering): Port device team_slave_1 removed
[  514.407959][ T2972] team_slave_0 (unregistering): left promiscuous mode
[  514.414817][ T2972] team_slave_0 (unregistering): left allmulticast mode
[  514.425337][ T2972] team0 (unregistering): Port device team_slave_0 removed
[  514.471184][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.485673][ T2972] bond_slave_1 (unregistering): left promiscuous mode
[  514.587745][ T2972] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  514.610262][ T2972] bridge_slave_1 (unregistering): left promiscuous mode
[  514.904906][ T2972] bond0 (unregistering): Released all slaves
[  514.971621][T14428] netlink: 'syz.1.2494': attribute type 21 has an invalid length.
[  514.988901][T14428] netlink: 'syz.1.2494': attribute type 6 has an invalid length.
[  514.996681][T14428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2494'.
[  516.201000][T14441] netlink: 'syz.1.2494': attribute type 10 has an invalid length.
[  516.330152][T14194] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.361901][T14194] 8021q: adding VLAN 0 to HW filter on device team0
[  516.431889][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.439175][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.500784][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.508068][ T5898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.331286][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.435706][T14194] veth0_vlan: entered promiscuous mode
[  517.493200][T14194] veth1_vlan: entered promiscuous mode
[  517.589477][T14194] veth0_macvtap: entered promiscuous mode
[  517.624249][T14194] veth1_macvtap: entered promiscuous mode
[  517.679402][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.708324][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.743721][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.757835][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.787813][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.817831][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.838714][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  517.876972][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.907771][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.927775][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.961495][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.981660][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.005543][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.029749][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.046713][T14490] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2505'.
[  518.095804][T14487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.134308][T14194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.157976][T14194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.177129][T14194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.197410][T14194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.435273][T14498] netlink: 'syz.1.2507': attribute type 10 has an invalid length.
[  518.465827][T14498] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2507'.
[  518.512976][T14501] netlink: 'syz.2.2508': attribute type 39 has an invalid length.
[  518.694071][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.767872][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.859444][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.887464][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.282235][T14510] delete_channel: no stack
[  519.359799][T14515] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2512'.
[  519.477430][ T5792] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  520.669671][T14539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.701070][T14539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.716931][T14539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.739970][T14539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.750221][T14539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  520.758676][T14539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  521.362877][T14551] delete_channel: no stack
[  521.385266][T14560] netlink: 'syz.0.2523': attribute type 3 has an invalid length.
[  521.403541][T14560] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2523'.
[  521.455289][T14538] chnl_net:caif_netlink_parms(): no params data found
[  521.950647][T14538] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.959394][T14538] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.971474][T14538] bridge_slave_0: entered allmulticast mode
[  521.984859][T14538] bridge_slave_0: entered promiscuous mode
[  522.156754][T14538] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.164384][T14538] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.174693][T14538] bridge_slave_1: entered allmulticast mode
[  522.183203][T14538] bridge_slave_1: entered promiscuous mode
[  522.242026][T14538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.263542][T14538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.426119][T14538] team0: Port device team_slave_0 added
[  522.475525][T14538] team0: Port device team_slave_1 added
[  522.591087][T14538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.610884][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.668451][T14538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.718407][T14538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.725455][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.837738][T14538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.848972][ T5792] Bluetooth: hci0: command tx timeout
[  522.980922][T14538] hsr_slave_0: entered promiscuous mode
[  523.654360][T14538] hsr_slave_1: entered promiscuous mode
[  523.661428][T14538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.683052][T14538] Cannot create hsr debugfs directory
[  523.690601][T14598] delete_channel: no stack
[  523.787598][ T5898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.320642][ T5898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.554863][ T5898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.763712][ T5898] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  524.793384][ T5898] bridge0: port 1(netdevsim0) entered disabled state
[  524.829687][ T5898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.875688][T14622] netlink: 'syz.2.2536': attribute type 19 has an invalid length.
[  524.916144][T14622] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.2536'.
[  524.926634][ T5792] Bluetooth: hci0: command tx timeout
[  525.093713][T14626] netlink: 16445 bytes leftover after parsing attributes in process `syz.3.2539'.
[  525.124102][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'.
[  525.345659][ T5898] tipc: Left network mode
[  526.124389][T14629] delete_channel: no stack
[  526.620699][T14655] delete_channel: no stack
[  526.628064][T14655] delete_channel: no stack
[  526.744518][T14657] netlink: 'syz.0.2545': attribute type 3 has an invalid length.
[  526.782898][T14657] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  526.820961][T14657] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.2545'.
[  526.830963][T14538] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  526.864302][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'.
[  527.000117][ T5792] Bluetooth: hci0: command tx timeout
[  527.259472][T14538] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  527.408948][T14538] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  527.453274][T14538] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  527.855452][T14682] netlink: 'syz.0.2549': attribute type 29 has an invalid length.
[  527.951228][T14682] netlink: 'syz.0.2549': attribute type 29 has an invalid length.
[  528.025142][T14680] delete_channel: no stack
[  528.380840][T14538] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.409498][T14697] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2552'.
[  528.495396][T14699] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2552'.
[  528.590281][T14703] netlink: 'syz.0.2549': attribute type 29 has an invalid length.
[  528.815901][T14705] syzkaller0: entered promiscuous mode
[  528.823359][T14705] syzkaller0: entered allmulticast mode
[  528.859955][T14684] netlink: 'syz.0.2549': attribute type 29 has an invalid length.
[  528.956497][T14703] netlink: 'syz.0.2549': attribute type 29 has an invalid length.
[  529.078593][ T5792] Bluetooth: hci0: command tx timeout
[  530.779109][T14736] delete_channel: no stack
[  531.166045][T14722] netlink: 'syz.3.2555': attribute type 10 has an invalid length.
[  531.195633][T14722] team0: Device ipvlan1 failed to register rx_handler
[  531.244937][T14538] 8021q: adding VLAN 0 to HW filter on device team0
[  531.303624][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.310900][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.461930][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.469229][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.487088][T14747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  531.494525][T14747] IPv6: NLM_F_CREATE should be set when creating new route
[  531.501841][T14747] IPv6: NLM_F_CREATE should be set when creating new route
[  531.509149][T14747] IPv6: NLM_F_CREATE should be set when creating new route
[  531.827238][T14754] netlink: 'syz.3.2564': attribute type 29 has an invalid length.
[  531.895738][T14755] netlink: 'syz.2.2565': attribute type 9 has an invalid length.
[  531.923942][T14755] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2565'.
[  531.991024][T14753] netlink: 'syz.2.2565': attribute type 19 has an invalid length.
[  532.005788][T14753] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2565'.
[  532.028955][T14754] netlink: 'syz.3.2564': attribute type 29 has an invalid length.
[  532.448723][ T5898] bond0: (slave wlan1): Releasing backup interface
[  532.586096][T14765] netlink: 'syz.3.2564': attribute type 29 has an invalid length.
[  532.637529][T14754] netlink: 'syz.3.2564': attribute type 29 has an invalid length.
[  532.695253][T14769] netlink: 'syz.3.2564': attribute type 29 has an invalid length.
[  533.114567][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.147788][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.156028][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.177936][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.261382][ T5898] veth1_macvtap: left promiscuous mode
[  533.267094][ T5898] veth0_macvtap: left promiscuous mode
[  533.283680][ T5898] veth1_vlan: left promiscuous mode
[  533.290321][ T5898] veth0_vlan: left promiscuous mode
[  534.051549][ T5898] team0 (unregistering): Port device team_slave_1 removed
[  534.145471][ T5898] bond0 (unregistering): (slave 
cÙ): Releasing backup interface
[  534.199100][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.252030][ T5898] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  534.439672][ T5898] bond0 (unregistering): Released all slaves
[  534.548490][T14778] netlink: 'syz.2.2569': attribute type 10 has an invalid length.
[  534.557001][T14778] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  534.577149][T14778] bridge0: port 3(netdevsim0) entered blocking state
[  534.590517][T14778] bridge0: port 3(netdevsim0) entered disabled state
[  534.599884][T14778] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  534.631863][T14538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.879432][T14538] veth0_vlan: entered promiscuous mode
[  534.910263][T14538] veth1_vlan: entered promiscuous mode
[  534.995073][T14538] veth0_macvtap: entered promiscuous mode
[  535.050370][T14538] veth1_macvtap: entered promiscuous mode
[  535.125801][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.162263][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.201729][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.235844][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.251972][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.262631][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.279254][T14538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.304933][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.315603][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.328249][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.349602][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.360821][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.371439][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.383414][T14538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.404532][T14538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.415577][T14538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.430371][T14538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.450142][T14538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.598600][T14804] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2580'.
[  535.638657][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.646617][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.711445][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.724782][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.043162][T14822] netlink: 'syz.3.2585': attribute type 21 has an invalid length.
[  537.056370][T14822] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2585'.
[  538.239176][T14841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.661493][T14862] netlink: 'syz.2.2597': attribute type 1 has an invalid length.
[  538.702512][T14862] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2597'.
[  538.755185][T14862] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2597'.
[  538.956774][T14872] tap0: tun_chr_ioctl cmd 1074025677
[  538.969663][T14872] tap0: linktype set to 774
[  540.351540][T14894] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2604'.
[  540.380904][T14894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  540.408334][T14895] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2604'.
[  540.427431][T14895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  540.497299][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  540.544901][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  540.567506][T14897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  540.584098][T14901] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2607'.
[  540.636867][T14898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'.
[  540.963680][T14913] netlink: 'syz.2.2610': attribute type 3 has an invalid length.
[  541.010171][T14916] netlink: 'syz.1.2611': attribute type 9 has an invalid length.
[  541.139524][T14916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  543.161455][T14926] __nla_validate_parse: 3 callbacks suppressed
[  543.161502][T14926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2614'.
[  544.036341][T14929] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2615'.
[  544.049205][T14929] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2615'.
[  544.448663][T14934] delete_channel: no stack
[  544.627011][T14946] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.2622'.
[  545.207846][T14955] netlink: 'syz.3.2626': attribute type 2 has an invalid length.
[  545.248596][T14955] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2626'.
[  545.683008][T14974] sock: sock_timestamping_bind_phc: sock not bind to device
[  545.779524][T14970] delete_channel: no stack
[  546.159843][T14985] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  546.176848][T14985] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  546.206182][T14985] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  547.460605][T15016] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  547.487857][T15016] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2644'.
[  547.539106][T15016] cgroup: fork rejected by pids controller in /syz0
[  547.591789][T15018] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  547.682922][T15051] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  547.705209][T15017] delete_channel: no stack
[  547.969446][T15132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2646'.
[  548.000250][T15132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2646'.
[  548.086174][T15126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2646'.
[  548.112655][T15129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2646'.
[  548.476897][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.636950][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.753738][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.883865][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.940276][T15145] netlink: 'syz.2.2654': attribute type 25 has an invalid length.
[  548.957963][T15145] netlink: 'syz.2.2654': attribute type 9 has an invalid length.
[  548.965752][T15145] __nla_validate_parse: 1 callbacks suppressed
[  548.965765][T15145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'.
[  549.016089][T15150] netlink: 'syz.2.2654': attribute type 17 has an invalid length.
[  549.038706][T15150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2654'.
[  549.058690][T15150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  549.228656][T15153] netlink: set zone limit has 8 unknown bytes
[  549.409357][T15157] syzkaller0: entered promiscuous mode
[  549.431443][T15157] syzkaller0: entered allmulticast mode
[  549.670421][T14539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  549.684997][T14539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  549.701881][T14539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  549.720001][T14539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  549.732987][T14539] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  549.740539][T14539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  550.915232][T15207] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  550.958009][T15207] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  550.980758][T15207] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  551.066237][T15165] chnl_net:caif_netlink_parms(): no params data found
[  551.616528][   T49] hsr_slave_0: left promiscuous mode
[  551.669040][   T49] hsr_slave_1: left promiscuous mode
[  551.699757][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.709224][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.718767][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.734039][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.743244][   T49] bridge_slave_1: left allmulticast mode
[  551.755605][   T49] bridge_slave_1: left promiscuous mode
[  551.761933][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.778737][   T49] bridge_slave_0: left allmulticast mode
[  551.784753][   T49] bridge_slave_0: left promiscuous mode
[  551.792679][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.801781][T14539] Bluetooth: hci1: command tx timeout
[  551.843338][   T49] veth1_macvtap: left promiscuous mode
[  551.849104][   T49] veth0_macvtap: left promiscuous mode
[  551.854918][   T49] veth1_vlan: left promiscuous mode
[  551.862378][   T49] veth0_vlan: left promiscuous mode
[  552.653754][   T49] team0 (unregistering): Port device team_slave_1 removed
[  552.702963][   T49] team0 (unregistering): Port device team_slave_0 removed
[  552.744500][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.788941][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.107066][   T49] bond0 (unregistering): Released all slaves
[  553.244421][T15220] syzkaller0: entered promiscuous mode
[  553.254444][T15220] syzkaller0: entered allmulticast mode
[  553.393055][T15251] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  553.492656][T15250] delete_channel: no stack
[  553.610807][T15256] netlink: 'syz.2.2673': attribute type 33 has an invalid length.
[  553.620530][T15256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2673'.
[  553.892668][T14539] Bluetooth: hci1: command tx timeout
[  555.106913][T15165] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.114833][T15165] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.122615][T15165] bridge_slave_0: entered allmulticast mode
[  555.130738][T15165] bridge_slave_0: entered promiscuous mode
[  555.139762][T15165] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.146996][T15165] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.155594][T15165] bridge_slave_1: entered allmulticast mode
[  555.165839][T15165] bridge_slave_1: entered promiscuous mode
[  555.201261][T15252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  555.208824][T15252] IPv6: NLM_F_CREATE should be set when creating new route
[  555.216721][T15252] IPv6: NLM_F_CREATE should be set when creating new route
[  555.224255][T15252] IPv6: NLM_F_CREATE should be set when creating new route
[  555.328943][T15165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.373202][T15165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.466529][T15261] netlink: 'syz.2.2675': attribute type 10 has an invalid length.
[  555.648867][T15165] team0: Port device team_slave_0 added
[  555.657525][T15165] team0: Port device team_slave_1 added
[  555.730872][T15165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.748456][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.808041][T15165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.892657][T15165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.923701][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.951178][T15269] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.2676'.
[  555.961718][T14539] Bluetooth: hci1: command tx timeout
[  555.979775][T15165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.646362][T15165] hsr_slave_0: entered promiscuous mode
[  556.659754][T15165] hsr_slave_1: entered promiscuous mode
[  557.559062][T15295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  557.577784][T15295] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  557.594178][T15295] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  558.014006][T15304] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  558.048092][T14539] Bluetooth: hci1: command tx timeout
[  558.106470][T15299] delete_channel: no stack
[  558.478326][T15316] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2683'.
[  558.546459][T15165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  558.604973][T15165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  558.680785][T15165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  558.719703][T15165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  559.115848][T15165] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.239436][T15165] 8021q: adding VLAN 0 to HW filter on device team0
[  559.319178][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.326328][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.375187][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.382401][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.745907][T15346] netlink: 'syz.1.2688': attribute type 10 has an invalid length.
[  559.783754][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2688'.
[  559.807958][T15346] bond0: entered promiscuous mode
[  559.813100][T15346] bond_slave_0: entered promiscuous mode
[  559.821872][T15346] bond_slave_1: entered promiscuous mode
[  559.828905][T15346] bridge0: port 3(bond0) entered blocking state
[  559.845633][T15346] bridge0: port 3(bond0) entered disabled state
[  559.865110][T15346] bond0: entered allmulticast mode
[  559.880599][T15346] bond_slave_0: entered allmulticast mode
[  559.898820][T15346] bond_slave_1: entered allmulticast mode
[  559.909723][T15346] bridge0: port 3(bond0) entered blocking state
[  559.916154][T15346] bridge0: port 3(bond0) entered forwarding state
[  560.239758][T15165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.348220][T15362] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  560.392039][T15165] veth0_vlan: entered promiscuous mode
[  560.419214][T15165] veth1_vlan: entered promiscuous mode
[  560.567190][T15165] veth0_macvtap: entered promiscuous mode
[  560.596616][T15358] delete_channel: no stack
[  560.619279][T15165] veth1_macvtap: entered promiscuous mode
[  560.671111][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.687064][T15366] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2692'.
[  560.724404][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.751860][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.777715][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.800645][T15165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.843037][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.881937][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.902542][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.944358][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.970771][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.985634][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.008630][T15165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.026896][T15165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.036866][T15165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.051840][T15165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.065504][T15165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.130367][T15374] netlink: 'syz.2.2694': attribute type 21 has an invalid length.
[  561.172430][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2694'.
[  561.367353][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.414556][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.553839][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.571280][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.083119][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.089561][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.666441][T15438] netlink: 'syz.1.2705': attribute type 11 has an invalid length.
[  563.764574][T15444] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2706'.
[  563.923556][T15451] netlink: 'syz.1.2707': attribute type 29 has an invalid length.
[  563.957915][T15451] netlink: 'syz.1.2707': attribute type 29 has an invalid length.
[  563.979901][T15451] netlink: 'syz.1.2707': attribute type 29 has an invalid length.
[  564.026368][T15451] netlink: 'syz.1.2707': attribute type 29 has an invalid length.
[  564.057226][T15451] netlink: 'syz.1.2707': attribute type 29 has an invalid length.
[  564.084237][T15452] delete_channel: no stack
[  564.943798][T15498] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2718'.
[  564.998730][T15498] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2718'.
[  565.067535][T15486] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2718'.
[  565.102971][T15493] delete_channel: no stack
[  565.138061][T15499] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2718'.
[  565.459364][T15511] netlink: 'syz.0.2722': attribute type 21 has an invalid length.
[  565.488305][T15511] IPv6: NLM_F_CREATE should be specified when creating new route
[  565.514248][T15511] IPv6: Can't replace route, no match found
[  565.661860][T15511] netlink: 'syz.0.2722': attribute type 10 has an invalid length.
[  565.774764][T15511] team0: Device wg1 is of different type
[  565.968885][T15527] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2725'.
[  566.664666][T15547] delete_channel: no stack
[  567.699645][T15576] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2735'.
[  567.877787][T15569] delete_channel: no stack
[  568.315966][T15590] delete_channel: no stack
[  568.416532][T15608] netlink: 'syz.1.2744': attribute type 3 has an invalid length.
[  568.431925][T15608] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  568.443501][T15608] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.2744'.
[  568.478198][T15614] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2745'.
[  568.968045][T15633] syzkaller0: entered promiscuous mode
[  568.978044][T15633] syzkaller0: entered allmulticast mode
[  569.169130][T15642] delete_channel: no stack
[  569.630764][T15663] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2760'.
[  569.969096][T15677] sock: sock_timestamping_bind_phc: sock not bind to device
[  569.985562][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2763'.
[  570.098883][T15677] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.401973][T15687] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2768'.
[  570.491350][T15677] bridge_slave_0 (unregistering): left allmulticast mode
[  570.501024][T15677] bridge_slave_0 (unregistering): left promiscuous mode
[  570.518572][T15677] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.554144][T15688] netlink: 'syz.3.2766': attribute type 10 has an invalid length.
[  573.893193][T15710] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2772'.
[  573.944302][T15714] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  573.994227][T15714] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2773'.
[  574.434609][T15734] sit0: entered allmulticast mode
[  574.470547][T15735] sit0: entered promiscuous mode
[  574.545778][T15737] netlink: 'syz.3.2779': attribute type 21 has an invalid length.
[  575.593886][T15748] netlink: 'syz.3.2784': attribute type 3 has an invalid length.
[  575.601900][T15748] netlink: 'syz.3.2784': attribute type 1 has an invalid length.
[  575.618236][T15748] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2784'.
[  575.659418][T15746] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode
[  575.666860][T15746] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  575.729589][T15751] netlink: 'syz.1.2785': attribute type 13 has an invalid length.
[  575.755161][T15751] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2785'.
[  575.815244][T15751] erspan0: refused to change device tx_queue_len
[  575.851540][T15751] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  576.154614][T15764] netlink: 'syz.1.2790': attribute type 49 has an invalid length.
[  576.549452][T15782] netlink: 'syz.2.2792': attribute type 27 has an invalid length.
[  577.250593][T15807] netlink: 'syz.3.2805': attribute type 8 has an invalid length.
[  577.273000][T15806] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2804'.
[  577.282288][T15807] netlink: 'syz.3.2805': attribute type 1 has an invalid length.
[  577.303464][T15807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2805'.
[  577.321681][T14539] Bluetooth: hci1: ISO packet for unknown connection handle 5
[  577.340945][T15810] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2806'.
[  577.459867][T15817] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2807'.
[  577.550858][T15814] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2805'.
[  578.140468][T15828] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2810'.
[  578.167993][T15828] erspan0: refused to change device tx_queue_len
[  578.188157][T15828] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  578.642131][T15843] validate_nla: 4 callbacks suppressed
[  578.642152][T15843] netlink: 'syz.2.2815': attribute type 10 has an invalid length.
[  578.826315][T15843] team0: Device hsr_slave_0 failed to register rx_handler
[  579.906885][T15871] netlink: 'syz.2.2822': attribute type 13 has an invalid length.
[  579.930137][T15871] __nla_validate_parse: 1 callbacks suppressed
[  579.930156][T15871] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2822'.
[  580.046054][T15871] erspan0: refused to change device tx_queue_len
[  580.086742][T15871] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  580.901592][T15904] syzkaller0: entered promiscuous mode
[  580.932552][T15904] syzkaller0: entered allmulticast mode
[  581.577698][T15918] netlink: 'syz.2.2835': attribute type 4 has an invalid length.
[  581.585526][T15918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2835'.
[  584.477068][T15931] netlink: 'syz.3.2839': attribute type 10 has an invalid length.
[  584.485255][T15931] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2839'.
[  584.776448][T15933] delete_channel: no stack
[  585.587493][T15964] netlink: 'syz.3.2850': attribute type 3 has an invalid length.
[  585.969888][T15967] delete_channel: no stack
[  586.635002][T15993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.199173][T16011] netlink: 'syz.3.2867': attribute type 25 has an invalid length.
[  587.232200][T16011] netlink: 'syz.3.2867': attribute type 29 has an invalid length.
[  587.290552][T16008] delete_channel: no stack
[  587.502874][T16026] netlink: 'syz.0.2870': attribute type 9 has an invalid length.
[  587.525485][T16026] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2870'.
[  587.659207][T16033] netlink: 'syz.3.2873': attribute type 2 has an invalid length.
[  587.675513][T16033] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2873'.
[  587.704628][T16035] netlink: 'syz.1.2874': attribute type 10 has an invalid length.
[  587.923962][T16042] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2875'.
[  588.194338][T16054] delete_channel: no stack
[  588.423103][T16067] netlink: 'syz.0.2884': attribute type 21 has an invalid length.
[  588.432133][T16067] netlink: 2450 bytes leftover after parsing attributes in process `syz.0.2884'.
[  589.332063][T16084] -1: renamed from syzkaller0
[  589.575396][T16098] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  589.594297][T16097] netlink: 'syz.2.2890': attribute type 1 has an invalid length.
[  589.624082][T16097] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2890'.
[  589.654067][T16098] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2889'.
[  589.973023][T16101] delete_channel: no stack
[  590.785975][ T5792] Bluetooth: hci4: command 0x0406 tx timeout
[  593.544019][T16109] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2893'.
[  593.776641][T16122] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2897'.
[  594.243615][T16138] delete_channel: no stack
[  594.385737][T16143] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2904'.
[  594.402734][T16143] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  594.421676][T16143] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  594.600931][T16151] netlink: 'syz.2.2906': attribute type 2 has an invalid length.
[  594.617812][T16151] netlink: 'syz.2.2906': attribute type 1 has an invalid length.
[  594.649306][T16151] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2906'.
[  594.738212][T16159] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  594.760914][T16159] netlink: 105 bytes leftover after parsing attributes in process `syz.0.2909'.
[  594.775610][T16159] netlink: 105 bytes leftover after parsing attributes in process `syz.0.2909'.
[  595.293396][T16175] netlink: 'syz.0.2914': attribute type 29 has an invalid length.
[  595.317309][T16175] netlink: 'syz.0.2914': attribute type 29 has an invalid length.
[  595.354144][T16176] netlink: 'syz.0.2914': attribute type 29 has an invalid length.
[  595.418993][T16175] netlink: 'syz.0.2914': attribute type 29 has an invalid length.
[  595.452768][T16175] netlink: 'syz.0.2914': attribute type 29 has an invalid length.
[  596.174767][T16177] delete_channel: no stack
[  596.210667][T16184] netlink: 'syz.1.2916': attribute type 10 has an invalid length.
[  596.222372][T16184] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2916'.
[  596.284039][T16193] netlink: 'syz.1.2916': attribute type 29 has an invalid length.
[  596.485093][T16193] netlink: 'syz.1.2916': attribute type 29 has an invalid length.
[  596.507548][T16199] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2921'.
[  596.518309][T16199] hsr0: entered promiscuous mode
[  596.528979][T16199] bridge0: port 1(hsr0) entered blocking state
[  596.555618][T16199] bridge0: port 1(hsr0) entered disabled state
[  596.578230][T16199] hsr0: entered allmulticast mode
[  596.583334][T16199] hsr_slave_0: entered allmulticast mode
[  596.617731][T16199] hsr_slave_1: entered allmulticast mode
[  596.635137][T16199] bridge0: port 1(hsr0) entered blocking state
[  596.641543][T16199] bridge0: port 1(hsr0) entered forwarding state
[  596.684082][T16204] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2922'.
[  596.936673][T16213] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2925'.
[  596.969442][T16213] dummy0: entered promiscuous mode
[  596.977816][T16213] dummy0: entered allmulticast mode
[  596.996469][T16213] bridge0: port 3(dummy0) entered blocking state
[  597.006695][T16213] bridge0: port 3(dummy0) entered disabled state
[  597.041551][T16213] bridge0: port 3(dummy0) entered blocking state
[  597.048759][T16213] bridge0: port 3(dummy0) entered forwarding state
[  597.394324][T16218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.585626][T16249] __nla_validate_parse: 3 callbacks suppressed
[  598.585791][T16249] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2933'.
[  598.615862][T16249] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  598.649676][T16249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  599.913117][T16285] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2942'.
[  600.439728][T16300] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2945'.
[  600.472540][T16293] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2946'.
[  600.726887][T16308] validate_nla: 3 callbacks suppressed
[  600.726907][T16308] netlink: 'syz.1.2950': attribute type 1 has an invalid length.
[  600.747984][T16308] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2950'.
[  601.216173][T16327] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2957'.
[  601.481280][T16338] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2958'.
[  601.804922][T16352] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2963'.
[  602.665586][T16358] delete_channel: no stack
[  602.958145][T16369] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2971'.
[  603.048584][T16371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2969'.
[  603.173955][T16371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  603.233035][T16371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  603.279418][T16371] bond0 (unregistering): Released all slaves
[  603.314830][T16369] netlink: 'syz.1.2971': attribute type 2 has an invalid length.
[  603.674540][T16388] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2975'.
[  603.711683][T16388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  603.837995][T16390] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2975'.
[  603.847099][T16390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  603.957264][T16390] delete_channel: no stack
[  604.410633][T16400] delete_channel: no stack
[  604.663423][T16412] netlink: 'syz.3.2982': attribute type 10 has an invalid length.
[  604.875820][T16412] team0: Port device wlan1 added
[  605.024627][T16420] netlink: 751 bytes leftover after parsing attributes in process `syz.2.2985'.
[  605.108715][T16426] netlink: 'syz.1.2986': attribute type 6 has an invalid length.
[  605.117059][T16426] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2986'.
[  605.394042][T16434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  605.588748][T16444] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2992'.
[  605.614252][T16444] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2992'.
[  605.654249][T16443] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2992'.
[  605.678237][T16443] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2992'.
[  605.750348][T16441] delete_channel: no stack
[  605.946944][T16456] netlink: 'syz.1.2996': attribute type 10 has an invalid length.
[  606.234539][T16456] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode
[  606.283698][T16456] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode
[  606.384450][T16456] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  606.603704][T16461] netlink: 'syz.3.2998': attribute type 10 has an invalid length.
[  606.638197][T16461] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2998'.
[  606.897847][T16477] netlink: 'syz.0.3000': attribute type 2 has an invalid length.
[  606.907709][T16477] netlink: 'syz.0.3000': attribute type 8 has an invalid length.
[  606.933958][T16477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3000'.
[  607.007264][T16479] ¥: port 1(team0) entered blocking state
[  607.014047][T16479] ¥: port 1(team0) entered disabled state
[  607.020382][T16479] team0: entered allmulticast mode
[  607.025763][T16479] team_slave_0: entered allmulticast mode
[  607.032134][T16479] team_slave_1: entered allmulticast mode
[  607.055954][T16479] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode
[  607.095850][T16479] team0: entered promiscuous mode
[  607.127486][T16479] team_slave_0: entered promiscuous mode
[  607.152903][T16479] team_slave_1: entered promiscuous mode
[  607.178502][T16479] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode
[  608.331328][T16527] netlink: 'syz.3.3009': attribute type 4 has an invalid length.
[  610.446824][T16579] netlink: 'syz.2.3021': attribute type 2 has an invalid length.
[  610.515170][T16579] netlink: 'syz.2.3021': attribute type 4 has an invalid length.
[  610.558343][T16579] __nla_validate_parse: 3 callbacks suppressed
[  610.558358][T16579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3021'.
[  611.185205][T16591] syz.2.3024[16591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  611.187340][T16591] syz.2.3024[16591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  611.256162][T16591] macsec0: entered promiscuous mode
[  611.297489][T16591] macsec0: entered allmulticast mode
[  611.313962][T16591] veth1_macvtap: entered allmulticast mode
[  611.813550][T16597] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3025'.
[  611.948071][T16597] openvswitch: netlink: IP tunnel dst address not specified
[  613.063175][T16609] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3029'.
[  616.462421][T16639] delete_channel: no stack
[  617.522288][T16658] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3041'.
[  617.688428][T16648] delete_channel: no stack
[  618.652572][T16660] -1: renamed from syzkaller0
[  618.821900][T16667] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3043'.
[  618.988371][T16672] netlink: 'syz.0.3043': attribute type 13 has an invalid length.
[  619.008328][T16672] netlink: 'syz.0.3043': attribute type 58 has an invalid length.
[  619.027755][T16672] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3043'.
[  619.993638][T16683] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3047'.
[  620.219920][T16688] netlink: 'syz.0.3048': attribute type 12 has an invalid length.
[  620.247949][T16688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3048'.
[  622.120289][T16705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'.
[  622.138824][T16705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'.
[  622.436477][T16711] bond0: left allmulticast mode
[  622.447910][T16711] bond_slave_0: left allmulticast mode
[  622.465278][T16711] bond_slave_1: left allmulticast mode
[  622.482684][T16711] mac80211_hwsim hwsim45 wlan1: left allmulticast mode
[  622.508748][T16711] bridge0: port 3(bond0) entered disabled state
[  622.537153][T16710] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3053'.
[  622.555894][T16711] bridge_slave_1: left allmulticast mode
[  622.570284][T16711] bridge_slave_1: left promiscuous mode
[  622.586966][T16711] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.608438][T16711] bridge_slave_0: left allmulticast mode
[  622.614128][T16711] bridge_slave_0: left promiscuous mode
[  622.620463][T16711] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.762978][T16717] netlink: 'syz.3.3056': attribute type 27 has an invalid length.
[  622.778761][T16717] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3056'.
[  622.803184][T16713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'.
[  622.818373][T16715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3061'.
[  622.829536][T16717] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  622.912978][T16717] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  623.057722][T16718] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  623.072955][T16717] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  623.105450][T16724] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  623.128878][T16718] netlink: 'syz.3.3056': attribute type 29 has an invalid length.
[  624.542168][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.548883][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  624.924786][T16746] netlink: 'syz.2.3065': attribute type 10 has an invalid length.
[  624.973769][T16746] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3065'.
[  625.253653][T16756] tun0: tun_chr_ioctl cmd 1074812117
[  625.826723][T16767] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3071'.
[  625.940492][T16773] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3075'.
[  626.599719][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  626.777192][T16794] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3081'.
[  627.417585][T16808] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3085'.
[  627.766036][T16831] netlink: 27127 bytes leftover after parsing attributes in process `syz.0.3093'.
[  628.043343][T16846] netlink: 'syz.3.3094': attribute type 6 has an invalid length.
[  628.075682][T16846] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3094'.
[  628.784455][T16855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'.
[  628.794455][T16855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'.
[  628.827495][T16855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'.
[  629.071892][T16867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'.
[  629.750379][T16934] Dead loop on virtual device ip6_vti0, fix it urgently!
[  632.060311][T16938] netlink: 'syz.3.3107': attribute type 29 has an invalid length.
[  632.845819][T16938] netlink: 'syz.3.3107': attribute type 29 has an invalid length.
[  632.887812][T16944] netlink: 'syz.3.3107': attribute type 29 has an invalid length.
[  634.280274][T16984] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.3118'.
[  634.464246][T16993] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3123'.
[  634.605601][T16993] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3123'.
[  634.735212][T16993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  635.146858][T17015] netlink: 'syz.3.3128': attribute type 2 has an invalid length.
[  635.242275][T17018] FAULT_INJECTION: forcing a failure.
[  635.242275][T17018] name failslab, interval 1, probability 0, space 0, times 0
[  635.256129][T17008] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3127'.
[  635.288452][T17018] CPU: 0 PID: 17018 Comm: syz.1.3129 Not tainted syzkaller #0
[  635.295962][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  635.306064][T17018] Call Trace:
[  635.309386][T17018]  <TASK>
[  635.312365][T17018]  dump_stack_lvl+0x18c/0x250
[  635.317101][T17018]  ? show_regs_print_info+0x20/0x20
[  635.322347][T17018]  ? load_image+0x420/0x420
[  635.326915][T17018]  ? __might_sleep+0xe0/0xe0
[  635.331577][T17018]  ? __lock_acquire+0x7d80/0x7d80
[  635.336661][T17018]  should_fail_ex+0x394/0x4c0
[  635.341395][T17018]  should_failslab+0x9/0x20
[  635.345948][T17018]  slab_pre_alloc_hook+0x59/0x300
[  635.351032][T17018]  ? bpf_insn_prepare_dump+0xb1/0x850
[  635.356448][T17018]  ? bpf_insn_prepare_dump+0xb1/0x850
[  635.361857][T17018]  __kmem_cache_alloc_node+0x53/0x250
[  635.367291][T17018]  ? bpf_insn_prepare_dump+0xb1/0x850
[  635.372732][T17018]  __kmalloc_node_track_caller+0xa4/0x230
[  635.378488][T17018]  ? aa_get_newest_label+0xfd/0x5c0
[  635.383727][T17018]  kmemdup+0x2b/0x70
[  635.387653][T17018]  bpf_insn_prepare_dump+0xb1/0x850
[  635.392894][T17018]  ? bpf_prog_attach_check_attach_type+0x440/0x440
[  635.399422][T17018]  ? bpf_lsm_capable+0x9/0x10
[  635.404132][T17018]  ? security_capable+0x89/0xb0
[  635.409010][T17018]  bpf_obj_get_info_by_fd+0x1893/0x3120
[  635.414584][T17018]  ? bpf_map_get_fd_by_id+0x330/0x330
[  635.419983][T17018]  ? get_pid_task+0x20/0x1e0
[  635.424614][T17018]  ? file_end_write+0x159/0x250
[  635.429496][T17018]  ? __might_fault+0xaa/0x120
[  635.434188][T17018]  ? __might_fault+0xc6/0x120
[  635.438884][T17018]  ? __might_fault+0xaa/0x120
[  635.443584][T17018]  ? bpf_lsm_bpf+0x9/0x10
[  635.447936][T17018]  ? security_bpf+0x7e/0xa0
[  635.452473][T17018]  __sys_bpf+0x7eb/0x890
[  635.456741][T17018]  ? bpf_link_show_fdinfo+0x390/0x390
[  635.462142][T17018]  ? lock_chain_count+0x20/0x20
[  635.467024][T17018]  __x64_sys_bpf+0x7c/0x90
[  635.471461][T17018]  do_syscall_64+0x55/0xb0
[  635.475901][T17018]  ? clear_bhb_loop+0x40/0x90
[  635.480614][T17018]  ? clear_bhb_loop+0x40/0x90
[  635.485321][T17018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  635.491242][T17018] RIP: 0033:0x7f0a9119e0d9
[  635.495685][T17018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.515320][T17018] RSP: 002b:00007f0a91f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  635.523750][T17018] RAX: ffffffffffffffda RBX: 00007f0a91425fa0 RCX: 00007f0a9119e0d9
[  635.531733][T17018] RDX: 0000000000000010 RSI: 0000200000002b00 RDI: 000000000000000f
[  635.539725][T17018] RBP: 00007f0a91f8a090 R08: 0000000000000000 R09: 0000000000000000
[  635.547736][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.555729][T17018] R13: 00007f0a91426038 R14: 00007f0a91425fa0 R15: 00007ffd41d518b8
[  635.563741][T17018]  </TASK>
[  635.860029][T17031] netlink: 'syz.3.3134': attribute type 29 has an invalid length.
[  635.888725][T17031] netlink: 'syz.3.3134': attribute type 29 has an invalid length.
[  636.474596][T17055] C: renamed from team_slave_0 (while UP)
[  636.543614][T17055] netlink: 'syz.1.3140': attribute type 1 has an invalid length.
[  636.570389][T17055] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  637.192049][T17072] netlink: 'syz.1.3144': attribute type 12 has an invalid length.
[  637.249153][T17072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3144'.
[  637.593928][T17076] netlink: 'syz.0.3145': attribute type 10 has an invalid length.
[  639.107471][T17076] team0 (unregistering): Port device team_slave_0 removed
[  639.174403][T17076] team0 (unregistering): Port device team_slave_1 removed
[  639.314457][T17096] netlink: 'syz.1.3150': attribute type 39 has an invalid length.
[  639.476006][T17098] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3152'.
[  639.548386][T17096] hsr_slave_1 (unregistering): left promiscuous mode
[  639.641627][T17106] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3153'.
[  639.653450][T17107] netlink: 'syz.0.3153': attribute type 29 has an invalid length.
[  639.673803][T17107] netlink: 'syz.0.3153': attribute type 29 has an invalid length.
[  639.689029][T17106] netlink: 'syz.0.3153': attribute type 29 has an invalid length.
[  640.716989][T17114] mac80211_hwsim hwsim38 .3ãc¤±: renamed from wlan1 (while UP)
[  641.312063][T17120] netlink: 'syz.3.3158': attribute type 10 has an invalid length.
[  641.352578][T17120] team0: Device ipvlan1 failed to register rx_handler
[  641.511382][T17124] netlink: 822 bytes leftover after parsing attributes in process `syz.3.3158'.
[  641.539478][T17124] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0
[  641.799533][T17156] netlink: 'syz.3.3168': attribute type 3 has an invalid length.
[  641.808798][T17156] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3168'.
[  642.346145][T17169] bridge0: port 1(hsr0) entered disabled state
[  642.352694][T17169] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.362091][T17169] bridge0: entered allmulticast mode
[  642.478327][T17175] netlink: 'syz.1.3171': attribute type 21 has an invalid length.
[  642.560035][T17176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  643.193695][T17189] netlink: 'syz.2.3177': attribute type 41 has an invalid length.
[  643.448580][T17192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.456004][T17192] IPv6: NLM_F_CREATE should be set when creating new route
[  643.495574][T17193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3178'.
[  645.049673][T17208] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3183'.
[  645.069313][T17211] netlink: 'syz.1.3185': attribute type 27 has an invalid length.
[  645.087998][T17211] netlink: 'syz.1.3185': attribute type 3 has an invalid length.
[  645.096399][T17208] netlink: zone id is out of range
[  645.097388][T17209] netlink: 'syz.0.3184': attribute type 9 has an invalid length.
[  645.113007][T17208] netlink: zone id is out of range
[  645.126006][T17209] netlink: 'syz.0.3184': attribute type 23 has an invalid length.
[  645.138297][T17212] netlink: 'syz.2.3183': attribute type 21 has an invalid length.
[  645.147459][T17209] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.3184'.
[  645.166785][T17208] netlink: zone id is out of range
[  645.172732][T17208] netlink: zone id is out of range
[  645.178363][T17212] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3183'.
[  645.187487][T17208] netlink: zone id is out of range
[  645.194215][T17212] netlink: 'syz.2.3183': attribute type 4 has an invalid length.
[  645.203985][T17208] netlink: zone id is out of range
[  645.234665][T17208] netlink: zone id is out of range
[  645.244695][T17208] netlink: zone id is out of range
[  645.257720][T17208] netlink: zone id is out of range
[  645.301261][T17211] syzkaller0: entered promiscuous mode
[  645.306783][T17211] syzkaller0: entered allmulticast mode
[  647.082036][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  647.258796][T17242] netlink: 'syz.2.3193': attribute type 1 has an invalid length.
[  647.266601][T17242] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3193'.
[  647.434447][T17252] netlink: 'syz.3.3196': attribute type 14 has an invalid length.
[  647.455937][T17252] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3196'.
[  647.667884][T17258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3197'.
[  647.701138][T17258] hsr_slave_0: left promiscuous mode
[  647.732142][T17258] hsr_slave_1: left promiscuous mode
[  648.089964][T17270] tun0: tun_chr_ioctl cmd 1074025678
[  648.097043][T17270] tun0: group set to 0
[  648.103174][T17271] tun0: tun_chr_ioctl cmd 1074025678
[  648.110394][T17271] tun0: group set to 0
[  648.114841][T17269] tun0: tun_chr_ioctl cmd 1074025673
[  648.206531][T17273] FAULT_INJECTION: forcing a failure.
[  648.206531][T17273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.220375][T17273] CPU: 0 PID: 17273 Comm: syz.2.3202 Not tainted syzkaller #0
[  648.227879][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  648.237970][T17273] Call Trace:
[  648.241272][T17273]  <TASK>
[  648.244229][T17273]  dump_stack_lvl+0x18c/0x250
[  648.248941][T17273]  ? show_regs_print_info+0x20/0x20
[  648.254171][T17273]  ? load_image+0x420/0x420
[  648.258703][T17273]  ? __might_fault+0xaa/0x120
[  648.263407][T17273]  ? __lock_acquire+0x7d80/0x7d80
[  648.268456][T17273]  ? __virt_addr_valid+0x10c/0x380
[  648.273598][T17273]  should_fail_ex+0x394/0x4c0
[  648.278321][T17273]  _copy_to_user+0x2f/0xa0
[  648.282757][T17273]  bpf_obj_get_info_by_fd+0x18e0/0x3120
[  648.288323][T17273]  ? bpf_map_get_fd_by_id+0x330/0x330
[  648.293719][T17273]  ? get_pid_task+0x20/0x1e0
[  648.298398][T17273]  ? file_end_write+0x159/0x250
[  648.303267][T17273]  ? __might_fault+0xaa/0x120
[  648.307965][T17273]  ? __might_fault+0xc6/0x120
[  648.312682][T17273]  ? __might_fault+0xaa/0x120
[  648.317371][T17273]  ? bpf_lsm_bpf+0x9/0x10
[  648.321731][T17273]  ? security_bpf+0x7e/0xa0
[  648.326252][T17273]  __sys_bpf+0x7eb/0x890
[  648.330516][T17273]  ? bpf_link_show_fdinfo+0x390/0x390
[  648.335922][T17273]  ? lock_chain_count+0x20/0x20
[  648.340809][T17273]  __x64_sys_bpf+0x7c/0x90
[  648.345246][T17273]  do_syscall_64+0x55/0xb0
[  648.349687][T17273]  ? clear_bhb_loop+0x40/0x90
[  648.354430][T17273]  ? clear_bhb_loop+0x40/0x90
[  648.359137][T17273]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  648.365059][T17273] RIP: 0033:0x7f5d2519e0d9
[  648.369506][T17273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.389133][T17273] RSP: 002b:00007f5d2606b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  648.397567][T17273] RAX: ffffffffffffffda RBX: 00007f5d25425fa0 RCX: 00007f5d2519e0d9
[  648.405561][T17273] RDX: 0000000000000010 RSI: 0000200000002b00 RDI: 000000000000000f
[  648.413565][T17273] RBP: 00007f5d2606b090 R08: 0000000000000000 R09: 0000000000000000
[  648.421579][T17273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.429563][T17273] R13: 00007f5d25426038 R14: 00007f5d25425fa0 R15: 00007fff7289b678
[  648.437575][T17273]  </TASK>
[  648.631019][T17283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3206'.
[  648.683186][T17289] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3207'.
[  648.766003][T17294] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3208'.
[  648.782148][T17294] net_ratelimit: 217 callbacks suppressed
[  648.782163][T17294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  648.869261][T17298] netlink: 'syz.2.3207': attribute type 21 has an invalid length.
[  648.924267][T17298] netlink: 'syz.2.3207': attribute type 6 has an invalid length.
[  648.951079][T17298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3207'.
[  649.299956][T17319] FAULT_INJECTION: forcing a failure.
[  649.299956][T17319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.313750][T17319] CPU: 1 PID: 17319 Comm: syz.2.3215 Not tainted syzkaller #0
[  649.321267][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  649.331363][T17319] Call Trace:
[  649.334684][T17319]  <TASK>
[  649.337646][T17319]  dump_stack_lvl+0x18c/0x250
[  649.342376][T17319]  ? show_regs_print_info+0x20/0x20
[  649.347635][T17319]  ? load_image+0x420/0x420
[  649.352192][T17319]  ? __lock_acquire+0x7d80/0x7d80
[  649.357272][T17319]  ? snprintf+0xe9/0x140
[  649.361584][T17319]  should_fail_ex+0x394/0x4c0
[  649.366303][T17319]  _copy_to_user+0x2f/0xa0
[  649.370763][T17319]  simple_read_from_buffer+0xe7/0x150
[  649.376191][T17319]  proc_fail_nth_read+0x1e8/0x260
[  649.381264][T17319]  ? proc_fault_inject_write+0x360/0x360
[  649.386980][T17319]  ? fsnotify_perm+0x271/0x5e0
[  649.391795][T17319]  ? proc_fault_inject_write+0x360/0x360
[  649.397469][T17319]  vfs_read+0x298/0x990
[  649.401669][T17319]  ? kernel_read+0x1e0/0x1e0
[  649.406267][T17319]  ? __fget_files+0x28/0x460
[  649.410875][T17319]  ? __fget_files+0x3fc/0x460
[  649.415568][T17319]  ? __fdget_pos+0x2a3/0x330
[  649.420170][T17319]  ? ksys_read+0x74/0x260
[  649.424539][T17319]  ksys_read+0x151/0x260
[  649.428821][T17319]  ? vfs_write+0x9a0/0x9a0
[  649.433262][T17319]  ? lockdep_hardirqs_on+0x98/0x150
[  649.438473][T17319]  do_syscall_64+0x55/0xb0
[  649.442909][T17319]  ? clear_bhb_loop+0x40/0x90
[  649.447629][T17319]  ? clear_bhb_loop+0x40/0x90
[  649.452375][T17319]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  649.458297][T17319] RIP: 0033:0x7f5d2515e90e
[  649.462735][T17319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  649.482365][T17319] RSP: 002b:00007f5d2606afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  649.490784][T17319] RAX: ffffffffffffffda RBX: 00007f5d2606b6c0 RCX: 00007f5d2515e90e
[  649.498761][T17319] RDX: 000000000000000f RSI: 00007f5d2606b0a0 RDI: 0000000000000005
[  649.506788][T17319] RBP: 00007f5d2606b090 R08: 0000000000000000 R09: 0000000000000000
[  649.514798][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.522786][T17319] R13: 00007f5d25426038 R14: 00007f5d25425fa0 R15: 00007fff7289b678
[  649.530813][T17319]  </TASK>
[  649.746302][T17331] netlink: 'syz.2.3219': attribute type 1 has an invalid length.
[  650.856918][T17365] syzkaller0: entered promiscuous mode
[  650.862778][T17365] syzkaller0: entered allmulticast mode
[  652.631163][T17380] C: renamed from team_slave_0
[  652.638708][T17380] __nla_validate_parse: 4 callbacks suppressed
[  652.638718][T17380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3234'.
[  652.750299][T17384] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3235'.
[  652.811728][T17386] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3236'.
[  653.141453][T17397] netlink: 'syz.3.3240': attribute type 21 has an invalid length.
[  653.168441][T17397] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3240'.
[  653.261152][T17400] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3241'.
[  653.765979][T17418] netlink: 'syz.2.3247': attribute type 10 has an invalid length.
[  654.020501][T17418] mac80211_hwsim hwsim38 .3ãc¤±: left promiscuous mode
[  654.057797][T17418] mac80211_hwsim hwsim38 .3ãc¤±: left allmulticast mode
[  654.127495][T17418] team0: Port device .3ãc¤± added
[  654.539924][T17436] netlink: 'syz.3.3251': attribute type 21 has an invalid length.
[  654.559370][T17436] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3251'.
[  654.583478][T17443] sit0: entered allmulticast mode
[  654.602226][T17435] syzkaller0: entered promiscuous mode
[  654.618011][T17435] syzkaller0: entered allmulticast mode
[  654.635135][T17429] netlink: 'syz.1.3250': attribute type 39 has an invalid length.
[  654.673642][T17429] macvlan0: entered promiscuous mode
[  654.679440][T17429] macvlan0: entered allmulticast mode
[  655.192291][T17464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  655.404687][T17468] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3261'.
[  655.989809][T17483] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3266'.
[  656.041443][T17483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  656.091969][T17487] netlink: 'syz.0.3267': attribute type 153 has an invalid length.
[  656.100161][T17487] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3267'.
[  656.830700][T17509] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3274'.
[  657.968599][T17537] netlink: 'syz.2.3283': attribute type 10 has an invalid length.
[  658.420481][T17549] netlink: 'syz.1.3287': attribute type 1 has an invalid length.
[  659.481647][T17567] __nla_validate_parse: 2 callbacks suppressed
[  659.481673][T17567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3292'.
[  659.517770][T17567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  659.702252][T17572] tun0: tun_chr_ioctl cmd 1074812117
[  660.015762][T17576] netlink: 'syz.1.3296': attribute type 17 has an invalid length.
[  660.260554][T17588] netlink: 'syz.1.3298': attribute type 27 has an invalid length.
[  660.294510][T17588] netlink: 'syz.1.3298': attribute type 28 has an invalid length.
[  660.314820][T17588] netlink: 'syz.1.3298': attribute type 29 has an invalid length.
[  660.341893][T17588] netlink: 'syz.1.3298': attribute type 30 has an invalid length.
[  660.387826][T17588] netlink: 'syz.1.3298': attribute type 31 has an invalid length.
[  660.395971][T17588] netlink: 'syz.1.3298': attribute type 32 has an invalid length.
[  660.403957][T17588] netlink: 'syz.1.3298': attribute type 33 has an invalid length.
[  660.412060][T17588] netlink: 'syz.1.3298': attribute type 35 has an invalid length.
[  660.420497][T17588] netlink: 'syz.1.3298': attribute type 37 has an invalid length.
[  660.438165][T17591] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3299'.
[  661.597928][T13533] syzkaller1: tun_net_xmit 90
[  661.622553][T17600] syzkaller1: tun_chr_ioctl cmd 1074025677
[  661.633001][T17600] syzkaller1: Linktype set failed because interface is up
[  661.897882][T16922] syzkaller1: tun_net_xmit 86
[  662.280231][T17617] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3310'.
[  662.299624][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'.
[  662.970771][T17628] tap0: tun_chr_ioctl cmd 1074025680
[  663.485219][T17645] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3319'.
[  664.679166][T17668] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3324'.
[  664.732530][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'.
[  664.758313][T17668] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3324'.
[  664.801763][T17671] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3326'.
[  665.041098][T17677] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3327'.
[  665.083049][T17677] openvswitch: netlink: Flow actions attr not present in new flow.
[  665.109346][T17676] validate_nla: 18 callbacks suppressed
[  665.109360][T17676] netlink: 'syz.3.3327': attribute type 3 has an invalid length.
[  665.130416][T17676] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3327'.
[  665.290359][T17688] netlink: 'syz.1.3332': attribute type 21 has an invalid length.
[  665.304299][T17688] IPv6: NLM_F_CREATE should be specified when creating new route
[  665.312622][T17688] IPv6: Can't replace route, no match found
[  665.442538][T17687] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  665.575247][T17691] netlink: 'syz.3.3333': attribute type 21 has an invalid length.
[  665.601087][T17693] netlink: 'syz.1.3334': attribute type 10 has an invalid length.
[  665.688070][T14539] Bluetooth: hci4: ISO packet for unknown connection handle 1854
[  666.357744][T17718] netlink: 'syz.1.3342': attribute type 2 has an invalid length.
[  666.602659][T17728] netlink: 'syz.1.3344': attribute type 21 has an invalid length.
[  666.637727][T17728] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3344'.
[  666.669436][T17728] netlink: 'syz.1.3344': attribute type 5 has an invalid length.
[  666.694502][T17728] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3344'.
[  667.250871][T17758] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3352'.
[  667.542728][T17774] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.3358'.
[  667.679708][T17776] netlink: 'syz.3.3360': attribute type 10 has an invalid length.
[  667.806272][T17776] wg1: entered promiscuous mode
[  667.815643][T17776] wg1: entered allmulticast mode
[  667.822574][T17776] team0: Device wg1 is of different type
[  668.320805][T17807] netlink: 'syz.0.3368': attribute type 17 has an invalid length.
[  668.510243][T17815] netlink: 'syz.1.3372': attribute type 6 has an invalid length.
[  668.681550][T17819] team0: Device veth1_macvtap failed to register rx_handler
[  669.079995][T17844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.162466][T17846] syz.1.3381[17846] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.162607][T17846] syz.1.3381[17846] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.183917][T17849] syz.1.3381[17849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  669.729463][T17860] __nla_validate_parse: 5 callbacks suppressed
[  669.729482][T17860] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3384'.
[  669.775979][T17860] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.3384'.
[  669.800162][T17860] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3384'.
[  669.811294][T17860] tc_dump_action: action bad kind
[  669.827889][T17862] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3384'.
[  669.933722][T17860] syzkaller0: entered promiscuous mode
[  669.958036][T17860] syzkaller0: entered allmulticast mode
[  670.424276][T17868] syzkaller0: entered promiscuous mode
[  670.457073][T17868] syzkaller0: entered allmulticast mode
[  672.677808][ T5792] Bluetooth: hci1: command 0x0406 tx timeout
[  672.711752][T17880] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3390'.
[  677.161965][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  678.476427][T17901] validate_nla: 1 callbacks suppressed
[  678.476439][T17901] netlink: 'syz.2.3397': attribute type 39 has an invalid length.
[  678.723014][T17912] netlink: 'syz.1.3398': attribute type 39 has an invalid length.
[  678.803776][T17912] veth0_macvtap: left promiscuous mode
[  679.060040][T17924] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3402'.
[  679.391914][T17937] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3405'.
[  680.187205][T17950] netlink: 'syz.2.3411': attribute type 29 has an invalid length.
[  680.223634][T17950] netlink: 'syz.2.3411': attribute type 29 has an invalid length.
[  680.241915][T17950] netlink: 'syz.2.3411': attribute type 29 has an invalid length.
[  680.300001][T17947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.338790][T17947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.370095][T17947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.388490][T17947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  681.328525][    C1] 
[  681.330920][    C1] ======================================================
[  681.337995][    C1] WARNING: possible circular locking dependency detected
[  681.345085][    C1] syzkaller #0 Not tainted
[  681.349539][    C1] ------------------------------------------------------
[  681.350956][T17981] netlink: 'syz.3.3420': attribute type 10 has an invalid length.
[  681.356563][    C1] kworker/1:3/13533 is trying to acquire lock:
[  681.356577][    C1] ffff8880317fc238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630
[  681.379495][    C1] 
[  681.379495][    C1] but task is already holding lock:
[  681.386895][    C1] ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: refill_obj_stock+0xef/0x6a0
[  681.395762][    C1] 
[  681.395762][    C1] which lock already depends on the new lock.
[  681.395762][    C1] 
[  681.406174][    C1] 
[  681.406174][    C1] the existing dependency chain (in reverse order) is:
[  681.415203][    C1] 
[  681.415203][    C1] -> #1 (stock_lock){-.-.}-{2:2}:
[  681.422452][    C1]        obj_cgroup_charge+0x10a/0x630
[  681.427945][    C1]        slab_pre_alloc_hook+0x2e2/0x300
[  681.433630][    C1]        __kmem_cache_alloc_node+0x53/0x250
[  681.439569][    C1]        __kmalloc_node+0xa6/0x240
[  681.444700][    C1]        bpf_map_kmalloc_node+0xbc/0x1b0
[  681.450360][    C1]        trie_update_elem+0x172/0xd60
[  681.455761][    C1]        bpf_map_update_value+0x64b/0x710
[  681.461492][    C1]        generic_map_update_batch+0x5de/0x800
[  681.467571][    C1]        bpf_map_do_batch+0x3f2/0x600
[  681.472985][    C1]        __sys_bpf+0x381/0x890
[  681.477781][    C1]        __x64_sys_bpf+0x7c/0x90
[  681.482745][    C1]        do_syscall_64+0x55/0xb0
[  681.487710][    C1]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.494151][    C1] 
[  681.494151][    C1] -> #0 (&trie->lock){-.-.}-{2:2}:
[  681.501465][    C1]        __lock_acquire+0x37ef/0x7d80
[  681.506856][    C1]        lock_acquire+0x19e/0x420
[  681.511915][    C1]        _raw_spin_lock_irqsave+0xb4/0x100
[  681.517768][    C1]        trie_delete_elem+0x94/0x630
[  681.523110][    C1]        bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  681.529116][    C1]        trace_call_bpf+0x333/0x6c0
[  681.534326][    C1]        perf_trace_run_bpf_submit+0x7a/0x1c0
[  681.540405][    C1]        perf_trace_lock_acquire+0x342/0x400
[  681.546400][    C1]        lock_acquire+0x3ef/0x420
[  681.551437][    C1]        mod_objcg_mlstate+0xad/0x320
[  681.556865][    C1]        drain_obj_stock+0x154/0x3a0
[  681.562173][    C1]        refill_obj_stock+0x1fc/0x6a0
[  681.567563][    C1]        memcg_slab_free_hook+0x123/0x200
[  681.573325][    C1]        kmem_cache_free+0xe1/0x290
[  681.578546][    C1]        delayed_put_pid+0xbe/0x130
[  681.583766][    C1]        rcu_core+0x9c1/0x17f0
[  681.588554][    C1]        handle_softirqs+0x27d/0x820
[  681.593848][    C1]        __irq_exit_rcu+0xd3/0x190
[  681.598967][    C1]        irq_exit_rcu+0x9/0x20
[  681.603744][    C1]        sysvec_apic_timer_interrupt+0xa4/0xc0
[  681.609922][    C1]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  681.616434][    C1]        queue_delayed_work_on+0x1ab/0x200
[  681.622281][    C1]        process_scheduled_works+0xa60/0x1600
[  681.628370][    C1]        worker_thread+0xa5e/0xfe0
[  681.633507][    C1]        kthread+0x2fa/0x390
[  681.638119][    C1]        ret_from_fork+0x48/0x80
[  681.643084][    C1]        ret_from_fork_asm+0x11/0x20
[  681.648399][    C1] 
[  681.648399][    C1] other info that might help us debug this:
[  681.648399][    C1] 
[  681.658639][    C1]  Possible unsafe locking scenario:
[  681.658639][    C1] 
[  681.666094][    C1]        CPU0                    CPU1
[  681.671468][    C1]        ----                    ----
[  681.676874][    C1]   lock(stock_lock);
[  681.680895][    C1]                                lock(&trie->lock);
[  681.687505][    C1]                                lock(stock_lock);
[  681.694028][    C1]   lock(&trie->lock);
[  681.698154][    C1] 
[  681.698154][    C1]  *** DEADLOCK ***
[  681.698154][    C1] 
[  681.706302][    C1] 5 locks held by kworker/1:3/13533:
[  681.711593][    C1]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  681.722596][    C1]  #1: ffffc90003217d00 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  681.735941][    C1]  #2: ffffffff8d131ec0 (rcu_callback){....}-{0:0}, at: rcu_core+0x951/0x17f0
[  681.744850][    C1]  #3: ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: refill_obj_stock+0xef/0x6a0
[  681.754128][    C1]  #4: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0
[  681.763479][    C1] 
[  681.763479][    C1] stack backtrace:
[  681.769387][    C1] CPU: 1 PID: 13533 Comm: kworker/1:3 Not tainted syzkaller #0
[  681.776950][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  681.787040][    C1] Workqueue: rcu_gp process_srcu
[  681.792024][    C1] Call Trace:
[  681.795324][    C1]  <IRQ>
[  681.798195][    C1]  dump_stack_lvl+0x18c/0x250
[  681.802897][    C1]  ? load_image+0x420/0x420
[  681.807425][    C1]  ? show_regs_print_info+0x20/0x20
[  681.812654][    C1]  ? print_circular_bug+0x12b/0x1a0
[  681.817903][    C1]  check_noncircular+0x2fc/0x400
[  681.822885][    C1]  ? print_deadlock_bug+0x5d0/0x5d0
[  681.828129][    C1]  ? lockdep_lock+0x195/0x230
[  681.832833][    C1]  ? _find_first_zero_bit+0xd6/0x100
[  681.838157][    C1]  __lock_acquire+0x37ef/0x7d80
[  681.843046][    C1]  ? perf_trace_buf_alloc+0x131/0x290
[  681.848435][    C1]  ? verify_lock_unused+0x140/0x140
[  681.853662][    C1]  ? perf_trace_lock_acquire+0x1a7/0x400
[  681.859323][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  681.865944][    C1]  lock_acquire+0x19e/0x420
[  681.870461][    C1]  ? trie_delete_elem+0x94/0x630
[  681.875424][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  681.882031][    C1]  ? read_lock_is_recursive+0x20/0x20
[  681.887432][    C1]  _raw_spin_lock_irqsave+0xb4/0x100
[  681.892745][    C1]  ? trie_delete_elem+0x94/0x630
[  681.897717][    C1]  ? _raw_spin_lock+0x40/0x40
[  681.902432][    C1]  trie_delete_elem+0x94/0x630
[  681.907267][    C1]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  681.912785][    C1]  trace_call_bpf+0x333/0x6c0
[  681.917482][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  681.922274][    C1]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[  681.928368][    C1]  perf_trace_run_bpf_submit+0x7a/0x1c0
[  681.933939][    C1]  perf_trace_lock_acquire+0x342/0x400
[  681.939419][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  681.946031][    C1]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  681.951862][    C1]  lock_acquire+0x3ef/0x420
[  681.956391][    C1]  ? mod_objcg_mlstate+0x8c/0x320
[  681.961443][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  681.968059][    C1]  ? read_lock_is_recursive+0x20/0x20
[  681.973482][    C1]  ? __lock_acquire+0x1262/0x7d80
[  681.978534][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  681.983322][    C1]  mod_objcg_mlstate+0xad/0x320
[  681.988196][    C1]  ? mod_objcg_mlstate+0x8c/0x320
[  681.993241][    C1]  ? mod_objcg_mlstate+0x8c/0x320
[  681.998283][    C1]  ? drain_obj_stock+0x3a0/0x3a0
[  682.003242][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  682.010458][    C1]  ? read_lock_is_recursive+0x20/0x20
[  682.015846][    C1]  ? verify_lock_unused+0x140/0x140
[  682.021085][    C1]  drain_obj_stock+0x154/0x3a0
[  682.025874][    C1]  refill_obj_stock+0x1fc/0x6a0
[  682.030761][    C1]  ? refill_obj_stock+0xef/0x6a0
[  682.035716][    C1]  ? obj_cgroup_charge+0x630/0x630
[  682.040853][    C1]  memcg_slab_free_hook+0x123/0x200
[  682.046070][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  682.051292][    C1]  ? delayed_put_pid+0xbe/0x130
[  682.056162][    C1]  kmem_cache_free+0xe1/0x290
[  682.060861][    C1]  delayed_put_pid+0xbe/0x130
[  682.065557][    C1]  ? free_pid+0x260/0x260
[  682.069906][    C1]  ? rcu_core+0x951/0x17f0
[  682.074337][    C1]  rcu_core+0x9c1/0x17f0
[  682.078607][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[  682.083830][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  682.089050][    C1]  ? mark_lock+0x94/0x320
[  682.093420][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  682.099418][    C1]  ? __bpf_trace_tasklet+0x160/0x160
[  682.104722][    C1]  ? lock_chain_count+0x20/0x20
[  682.109598][    C1]  handle_softirqs+0x27d/0x820
[  682.114392][    C1]  ? read_tsc+0x9/0x20
[  682.118479][    C1]  ? ktime_get+0x24b/0x280
[  682.122911][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  682.127700][    C1]  ? do_softirq+0x1a0/0x1a0
[  682.132245][    C1]  __irq_exit_rcu+0xd3/0x190
[  682.136899][    C1]  ? irq_exit_rcu+0x20/0x20
[  682.141431][    C1]  irq_exit_rcu+0x9/0x20
[  682.145681][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  682.151336][    C1]  </IRQ>
[  682.154282][    C1]  <TASK>
[  682.157240][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  682.163239][    C1] RIP: 0010:queue_delayed_work_on+0x1ab/0x200
[  682.169323][    C1] Code: 4d 85 ed 75 16 e8 a5 92 2f 00 eb 15 e8 9e 92 2f 00 e8 e9 2a 37 09 4d 85 ed 74 ea e8 8f 92 2f 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 04 06 00 00 00 00 41 c7 44 06
[  682.188953][    C1] RSP: 0018:ffffc90003217ae0 EFLAGS: 00000293
[  682.195040][    C1] RAX: ffffffff8157df91 RBX: 0000000000000000 RCX: ffff888022e43c00
[  682.203032][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  682.211026][    C1] RBP: ffffc90003217bb0 R08: ffffffff911ed52f R09: 1ffffffff223daa5
[  682.219041][    C1] R10: dffffc0000000000 R11: fffffbfff223daa6 R12: 1ffff110045c8801
[  682.227037][    C1] R13: 0000000000000200 R14: 1ffff92000642f60 R15: 0000000000000000
[  682.235029][    C1]  ? queue_delayed_work_on+0x1a1/0x200
[  682.240536][    C1]  ? delayed_work_timer_fn+0x80/0x80
[  682.245836][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  682.251082][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  682.256321][    C1]  ? srcu_reschedule+0xfd/0x170
[  682.261201][    C1]  ? process_scheduled_works+0x975/0x1600
[  682.266952][    C1]  process_scheduled_works+0xa60/0x1600
[  682.272551][    C1]  ? worker_attach_to_pool+0x370/0x370
[  682.278050][    C1]  ? assign_work+0x3cc/0x5d0
[  682.282665][    C1]  worker_thread+0xa5e/0xfe0
[  682.287287][    C1]  ? _raw_spin_unlock+0x40/0x40
[  682.292166][    C1]  ? __kthread_parkme+0x71/0x1c0
[  682.297131][    C1]  kthread+0x2fa/0x390
[  682.301222][    C1]  ? pr_cont_work+0x550/0x550
[  682.305920][    C1]  ? kthread_blkcg+0xd0/0xd0
[  682.310560][    C1]  ret_from_fork+0x48/0x80
[  682.315008][    C1]  ? kthread_blkcg+0xd0/0xd0
[  682.319635][    C1]  ret_from_fork_asm+0x11/0x20
[  682.324449][    C1]  </TASK>
[  682.480745][T17981] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.489479][T17981] bond0: entered promiscuous mode
[  682.494665][T17981] bond_slave_0: entered promiscuous mode
[  682.501794][T17981] bond_slave_1: entered promiscuous mode
[  682.514522][T17981] bond0: entered allmulticast mode
[  682.520122][T17981] bond_slave_0: entered allmulticast mode
[  682.526240][T17981] bond_slave_1: entered allmulticast mode
[  682.543992][T17981] team0: Port device bond0 added
[  685.961631][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  685.968107][ T1292] ieee802154 phy1 wpan1: encryption failed: -22