last executing test programs:

20.154273693s ago: executing program 4 (id=3085):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000021, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000007ac0000001400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xff, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x100000000002, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)

19.713182474s ago: executing program 4 (id=3088):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffcbb, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d000200142603600e12200005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290453f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4ee7b57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039200"/216, 0xd8}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

19.16472169s ago: executing program 4 (id=3091):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100)
write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x21, 0x2, 0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006408000000000001180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800e65d7e0a000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f00000000c0)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

17.88203947s ago: executing program 4 (id=3096):
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="65bd4b83516515fc1bd08e90aafea0174d183c8b7f16293028422ac119256a25ac2dbd53feb421de597c9f02b83e1d9746eb43f27fae9cc7c41ef58118da1b3aa076bd156bf79d03ba0e2408d6d4d36050d5afb9d5eef741f8485b377b7124490fe7df51"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0000000094feb3d94464a100eaffffffffffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000"], 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100))
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x10000129}, 0x0)

9.442044927s ago: executing program 3 (id=3138):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0xd001})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
socket$kcm(0x21, 0x7, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x4, 0xfd, 0x0, 0x91a, 0x1ecc39, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x2, @perf_bp={&(0x7f0000001540)}, 0xa428, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="99000000001c29de57afe85155304420070000"], &(0x7f00000015c0)='GPL\x00', 0x4, 0xc7, &(0x7f0000001600)=""/199, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900), 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)

8.180091886s ago: executing program 3 (id=3143):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x6df, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x3}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xa, 0x4}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x69, 0x25a0900b24aad455}]}, {0x0, [0x61, 0x5f, 0x0, 0x61, 0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x1, 0x9, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8200000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10000}, [@jmp={0x5, 0x0, 0xd, 0x8, 0x8, 0x80, 0xffffffffffffffff}, @ringbuf_query, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1ff}, @alu={0x7, 0x0, 0xd, 0x4, 0x6, 0xc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x42, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, r5], &(0x7f00000007c0)=[{0x0, 0x3, 0xc, 0xa}]}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r3, r0, 0x1, 0x4, 0x4}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x24, 0x0, 0x6, &(0x7f0000000180))
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x21, &(0x7f0000000100), 0x120)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x8, @remote, 0x80080000, 0x4}, 0x80, 0x0}, 0x24044051)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0), 0x4)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x5e0}, 0x50)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

5.363027798s ago: executing program 3 (id=3157):
r0 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x440000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) (async)
r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) (async)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4.605971694s ago: executing program 0 (id=3161):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async)

3.087311415s ago: executing program 1 (id=3168):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000d00000000000000000080000000000000", @ANYRES32, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020002010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b70400000000"], 0x0, 0x100}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}, 0x890) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x49c8, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000000000000000d883ea2360d14def1fa85ed6677c5e79608078df7699aa1bcce9a8d91eb0eebf4141bdd18819d724070a3ab02fc707433168e3f4131600074930"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x6, 0xf5, 0x5, 0x9, 0x0, 0x1, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x8}, 0x1192b, 0x8, 0xa, 0x4, 0x318, 0x8ebc, 0x9, 0x0, 0x93b1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000280), 0x0, 0x49, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0xffffffffffffff83, 0x0, &(0x7f0000000380), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0xc7}, 0x80)

2.931942802s ago: executing program 2 (id=3169):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
syz_clone(0x24070000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/142, 0x8e}], 0x2, &(0x7f0000000400)=""/178, 0xb2}, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x2}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

2.931744202s ago: executing program 0 (id=3170):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x4b, &(0x7f0000000000)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9e40902080006000000e8fe0ba1f1ffffff02001471b3dc48822603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55", 0xd8}], 0x1}, 0x0)

2.77405936s ago: executing program 0 (id=3171):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fd, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r2 = perf_event_open(&(0x7f00000000c0)={0xffbc2e2f4c42b2d1, 0x80, 0x1, 0xc, 0xf8, 0x3, 0x0, 0x4, 0x210, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x4, 0x40000, 0x1, 0x1, 0x41e, 0x9, 0x0, 0xec7, 0x0, 0x8}, 0x0, 0x4, r0, 0xb)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80000001)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4b, &(0x7f0000000000)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9e40902080006000000e8fe0ba1f1ffffff02001471b3dc48822603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55", 0xd8}], 0x1}, 0x0)

2.602610758s ago: executing program 2 (id=3172):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="184600000200000000000000000000009500000000000000183100000300000000000000ae9190af37fb9c9c2f5beb1fdf00000000183500"], &(0x7f0000000540)='GPL\x00', 0x5, 0x2b, &(0x7f0000000580)=""/43, 0x41100, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xa157}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x5, 0x84) (rerun: 32)
sendmsg$inet(r1, &(0x7f0000003340)={&(0x7f0000000c40)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000e00)="90", 0x1}], 0x1}, 0x240008c0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}, 0x20000000)
setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) (async, rerun: 32)
perf_event_open$cgroup(&(0x7f0000000600)={0x3, 0x80, 0x4, 0xf4, 0x5, 0x4, 0x0, 0x9, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0xd}, 0x900, 0x7fffffff, 0xfff, 0x3, 0x5, 0x9, 0x8, 0x0, 0x0, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x4) (rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xff, 0xdbc}, 0x481, 0x3, 0x0, 0x7, 0x8, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000040000000009500000000000000881332c091d1fd83fe5f806050cc05f88edfc4e83fd2d7a4bbf68e7bfc324b61c4897b075867305d9d0283380a231d7cde9546a0345bd93def75cc06bd1d3ab5df390c51f454dff8c63d80713154df4f970d34f7161f72e688b8cbbda41d6bb12a5cfcac8c5b6b7a79992b531760155b0394a18df45acca4c49dad1b02b4ae074defbd46cdc1d71f729ede18879f6c8128e4e1ac7c58ef3f02a1f9ca2f25ccbd2e2857b3602dd252555f2b75b173f5b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x58, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x1000, 0x0, 0x4, 0x9, 0x200000000000000, 0xffff0000, 0x5, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0xa, 0xffffffffffffffff, 0x9) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

2.55699014s ago: executing program 1 (id=3173):
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x20111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f700"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = socket$kcm(0xf, 0x3, 0x2)
r4 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
close(r6)
r7 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0xd, &(0x7f00000000c0), 0x4f)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r9, 0x4)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d2", 0xe}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3b, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="cf84db000000001c000000250a5e9a2cc91f6be7d51f883f9e5e89b9091442745d33b81d047de2c75b67f1d9c5efecbd4a1fb404b374177d559096fe6fd0072d2eb2996348d66afd2588edd5e6cc00424ee8d522471b4cf4f746eaacd814b95734e82d2aece63cb0fd5e84da89fd703ffa4cf03489df673d373ba5047e5b248d2bf8502f10313aefab7e4b85fa501686f5c73d2773a22a0c58f20547a6dc73c6e491e660d562bb6cb956310902000000c24d07cfa0d996ed49e16bae0f294f3d383be8816416bd6d926fed1dffd069d1de908fceb5f058261a2636f6e4937d6af300"/241, 0xf1}], 0x1, &(0x7f0000000640)}, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.503038513s ago: executing program 0 (id=3174):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090000000000000000000000711035000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810)
sendmsg$kcm(r1, &(0x7f0000003540)={&(0x7f00000002c0)=@ll={0x11, 0x7}, 0x80, &(0x7f0000002340)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="4d805b0223722e1e7cf9391d17a0ecc47d5b8171321a37150c00b3bd6623ddedcae2bc93bb8b6b4afcde9bef3b86cb3d023a613344d5a223a746b58adab649ebadb59331de8534fc48abd92d50e4dfa12020df47992f3ea55cae009fd56d7a6a8b03d9eac41b3b770a7bf40489ec2f7d226eedf176c43725576468", 0x7b}], 0x2, &(0x7f0000002380)=[{0x18, 0x1, 0x2, '\\'}, {0x1010, 0x113, 0x6, "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"}, {0x28, 0xca, 0x4, "5756f8a6179792bf055d69660f6533fe77a5bc"}, {0xa8, 0x687132b629e49e49, 0xffffffff, "700fb846143fa4f1025c8d3eb2276bf80ee8272db5e81a4d3af603b63d29ef7f1b36ca1bae16bb386a9c9a66285a6559ec7e1c61752c545eedbe2bfb9f709ee456e2d17365b5669d6f7abfb53ed37e773666c59691d9e10abdf5fee7f6d7e67ba104cbf8d7d580121272a2f7c039ee7a88b943714a91492eaa30751163996b3acf87441a8c3ac98c5a66348d007aab3235"}, {0x18, 0xa, 0xc, '\'\v'}, {0x38, 0x1, 0x8, "a1db1acdf35d92232396422619248c9da2bc9fa04ab1fb94ab8ff1730ecfb6d36ee87f05"}, {0x20, 0x0, 0x0, "3f4499cd1ac708d7d51e7b93f8c8a6"}, {0x48, 0x113, 0x7, "082850229306ae8f4e71c0e2167679cc28437fe10537fa81b26fea5bb4ae75b054b84037942d2e3322f35d425a8682914476"}], 0x11b0}, 0x20000085)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)

2.33184663s ago: executing program 1 (id=3175):
socket$kcm(0x21, 0x2, 0x2) (async)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ccd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='rdma.max\x00', 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000480)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r2, r0, 0x3f, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x28, 0x12)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x83, &(0x7f0000000000), 0x8)

2.180990488s ago: executing program 0 (id=3176):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64)
socket$kcm(0xa, 0x3, 0x73) (async, rerun: 64)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x2004b761) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40049409, 0x5)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

2.103298181s ago: executing program 3 (id=3177):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4}, 0x80, 0x0}, 0x20000810)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040))
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffffffb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c00000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4], 0x0, 0xffff0000, 0xae, &(0x7f0000000500)=""/174, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6ce1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x1c261100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700))

1.630621934s ago: executing program 1 (id=3178):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x4b, &(0x7f0000000000)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9e40902080006000000e8fe0ba1f1ffffff02001471b3dc48822603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55", 0xd8}], 0x1}, 0x0) (fail_nth: 2)

1.449032512s ago: executing program 2 (id=3179):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/197, 0xc5}], 0x5, &(0x7f0000000500)=""/72, 0x48}, 0x40002021)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.092598658s ago: executing program 3 (id=3180):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a603f00000f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r1 = socket$kcm(0x11, 0x20000000000000a, 0x300)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0xfffffffe, 0x6, 0x1, 0xfb, "45ffd22c17cf61b4b44d05cba57637336595d398124b5ec74ea3ced9cd41b7ac01fcc4e449d8540021a000122e44109147c7180d6726119d6564b75b94ca19", 0x22}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2, 0xfc}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="4d94f9350600"})
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000240000000000000000000000070000004014"], 0x48}, 0x200040c4)

1.007026403s ago: executing program 0 (id=3181):
socketpair(0x11, 0xa, 0x302, &(0x7f0000000000))

933.029006ms ago: executing program 2 (id=3182):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f0000000c00)='GPL\x00', 0x5, 0xfffffffffffffdf3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711877000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="2c00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00010124c87e0112e2c1f1c0c458cf10e21cb40c5f02e571533ca81b85978a58dbfab19e58551b6429256b25ebf9d875293e9e", 0x58}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x1}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000008000000050000000000000e0400000000000000000000002e2e5f00"], &(0x7f0000000c40)=""/4096, 0x30, 0x1000, 0x1}, 0x28)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d00000004000000040000000800000034400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff007341635dec000004292d948706c922000000000ab10acdcec8c1000000000000000000ddee2d4e2bf6c6a40002bbe9f9555258f5e4374c7af0664199be7b3432e0ee4d"], 0x50) (async)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d63"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffffff00000000080000001800000046080500000000000500005c858fb300", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018470000070000000000000000000000186000000200000000000000040000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x6, 0xbd, &(0x7f00000007c0)=""/189, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xc, 0x4, 0x10001}, 0x10, 0x18284, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r4, r4, r4]}, 0x94) (async)
close(r6) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x28, 0xffffbfff}, {0x6, 0x1, 0x0, 0x80007}]}) (async)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) (async)
write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)

680.682698ms ago: executing program 3 (id=3183):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2d, 'hugetlb'}, {0x2d, 'memory'}, {0x2b, 'cpu'}]}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r0, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0xfffffffffffffd00, 0x21, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xb, &(0x7f0000001340)=[{}, {}], 0x10, 0x10, &(0x7f0000001b80), &(0x7f00000013c0), 0x8, 0x76, 0x8, 0x8, &(0x7f0000001400)}}, 0x10)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={0xffffffffffffffff, 0x9, 0x30}, 0xc)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r0, 0x0, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)=r0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000180000001800000005000000020000000000000c02200000000000000000000d00000000eb612e3000"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8}, 0x94)
r13 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r13, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f0000000100)=r14, 0x4)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x10, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x5, 0x1, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000400)='GPL\x00', 0x1fe4, 0x1000, &(0x7f00000009c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @sk_msg, r12, 0x8, &(0x7f00000019c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)=[r15, r14, r14], &(0x7f0000001a40)=[{0x3, 0x3, 0xf, 0x8}, {0x3, 0x80002, 0x7}, {0x4, 0x5, 0x2, 0xc}, {0x2, 0x2, 0x5, 0x7}, {0x5, 0x5, 0x4, 0x1}, {0x4, 0x1, 0x4, 0xb}, {0x5, 0x5, 0x0, 0x4}, {0x0, 0x4, 0x7, 0x8}], 0x10, 0xffffe5ec}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r16=>0xffffffffffffffff})
recvmsg$unix(r16, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r17=>0xffffffffffffffff]}}], 0x18}, 0x0)
r18 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r18, 0x88, 0x64, &(0x7f00000009c0)=r17, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000001700), 0x8)
r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x87d, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x13, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0xd, 0xf, 0x7, 0x1}, @jmp={0x5, 0x1, 0x2, 0x1, 0xa, 0x100}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x21, &(0x7f0000000240)=""/33, 0x40f00, 0x8, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x0, 0x2, 0x2e, 0x7}, 0x10, r6, r0, 0x1, &(0x7f00000017c0)=[0xffffffffffffffff, r7, r8, r9, r11, r15, r17, 0xffffffffffffffff, r19, 0xffffffffffffffff], &(0x7f0000001800)=[{0x2, 0x5, 0x1, 0x3}], 0x10, 0x1}, 0x94)

645.73211ms ago: executing program 4 (id=3101):
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x1000000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000020000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

492.934447ms ago: executing program 1 (id=3185):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000740)="bd79b30b4237b1bbb2e179d2a9a44d054ece898f7a8578d75548701c718203701d4aaf001087318618b12b06bcc48b20c27f2d1a51afc7f6eb560d1ba399e5800c76623cb36d44cd635305c3beefc3a1329338c46b84b086a046c3c544993f41841d80a78482e4e1b82acf0faf4ca787a05011357083ee551875bb4bcedf935a7efc1fa1ff21dda59e9650ad80e79e12fad3a4f8c602cf75de66a8d6e8953e3ad5", &(0x7f0000000800)=""/74, 0xac18de909853c1b}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x28}, {&(0x7f0000000380)="6acca2599f342180e1f231bc1bfb6112dbedd8ff905e300b8d2396f5cc4e0851fbf167199180168bac5c71b2fb536876c9c5f21acb005779060dd6662621edb7c36291492432c34bb842159b8fd23d9e2e1c0a3ff08e6f70c8d6fe21a607dd6e7d8057d4ffbd81ce5315ed61c0fef9298b06e61a6d4f9387dd43cb367fbe7c3c9b38217375bbbee56b1d65452d4de55ff02f40d2bd7e82619457960085905c2701aebb720f81", 0xa6}], 0x2}, 0x0)
socket$kcm(0x29, 0xf, 0x0)

304.936746ms ago: executing program 2 (id=3186):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x10120)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10)

282.944517ms ago: executing program 4 (id=3187):
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdc0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x0, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0xfc, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000002, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000007f0000000000000018000000000000009500000000006354000085100000fcffffff950000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8410, 0x0, 0xc2ba, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYRES32=r4, @ANYBLOB="170000002ffff700005040e43cb149ba882eec", @ANYRES32=r12, @ANYRES64=0x0], 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
write$cgroup_netprio_ifpriomap(r10, 0x0, 0x12)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x1408, 0xff, 0x9, 0x4, 0x0, 0x145d, 0x1, 0x0, 0x80003f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

273.873497ms ago: executing program 1 (id=3188):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802840000004400002095000000002908060000080000000f0a2427008000005d0ada626d3c6c20d063eac3a7467101947d517bcef469e708351a4c525f79f8f59819c01799dba5e900e552d4b8069bc0018f506f834a63dc643788a88fe9fa3495575ea7cfb32298f3939d48ca7ddb3fdf6224e73269656dfc6e681cf4ab278fa8b0d59731083e763aaa595b301f97c2fc311a5426d60cebb31c8019b499a0c0fd83742893005d72e4805dbcd75339c8346c89d149b564981c308a5853e5de8fc13e9309050bb8ebf55d8eea9c083544bb9873248619d5d51ce11373dd09b0c02e02a285b2e175eb4a4b72"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="4eaa007a5938d5132711615ff436600567f6f4d61e45496f6063f2cf5c11338cd8c4557564eea0b4ed1a560a824a8e448e8cf37966a698d60147d4cc64531e26ce741789c45906681c305a37ad0e6ca35590f51d22be12495e32bb7c63054dcfe9cd2f5de0afc9535bb56853b7e1d8f7f33f0c5ae03ca4642132575fba8d6151190ceb301b4e673635a24dc5763f3e7c1e1d59361712ea5e7ca1fe5118c4f765fab544cefba70102ba07c3af01a2c4d016a8464bafd02a522790d696ffc3f306d4f08ef865fa63a2fdeb8d88bd902fd956e1e6c387e4ce878fac"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0xc000)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000009feef48bf1739e64000000557f57427b7fca8586f37bb1f877a0348271930f57bd5cc180810b3906cd0bcb7d4199f3f9929ab8b51639a1e3394014ef73d8a6486434b5e09e159b74adf714440ab683c9c6ab77594519f3a6b744f81c4cfdad56a6608103807abac091afaeb8ca497d4707a3d5974daedccc748ae1bbdedf9afd40ab6d1f93cbecf387c4f82673c0be962ef0874cecdbbdf802d33669f4"], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={0xffffffffffffffff, r6}, 0xc)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)}, 0x8001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

0s ago: executing program 2 (id=3189):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xffffffff}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="03000000000000000500000000000000", @ANYRES32=r3, @ANYBLOB="ff7fffff00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="00000000040000000200"/28], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000009c0)={&(0x7f0000000080)="a8f7304389f8", &(0x7f0000000440)=""/141, &(0x7f0000000680)="0a12f83f381e172f2b7d69761903b537e08b163512aaa83d70fb36bbe10163357c168c03cfe775af169b5f7f457fd775aa154ec3c7f5fbeb26352763f137399222a713eb645e33f8971f265eae3a1d56bced35fa3e8d42ea30a5728ed778c928dc814f8c240f972628e9597d77b0f98fbe23446527f0181f8dde2506b553880787ee7fcd8d0ef0191fffe0d911e84b2a5017020c5dde9eadc5ac5e6e9ac1", &(0x7f0000000740)="495f466fcec05f3683126bbcba08e869e5451a3a44139582f4ac50340732c099fa079e69ff8d44a397008f8e25843239ec301968d9f7564078ee215c31766e0c2bda0867f72439c4a81b3c6dc66e9a86615e379533e14edc4fd60b9a9a35cb187467e03afbaabfa78f00fa66330a5ccc2e04a45f9a7165e1662b0d7a0418c775573578c31c0ae5724c87484195f5617b2d06cc31eea179936d3ed8b1e9d54776eeb29154e03edad3c63a1288e131b4a5372945afe3f408a26f5091b19323121b50011844d12a4f26ae5aea972349f664e7f41212", 0x1, r6, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000eeffffffa96e429be35dad8316eafebab9fd2c22f2a1ef0dd71a6ea85b5e154d26bafd76d190ddd0a920297c18affef3f7c73a7316e1389ad90955b150ab4eece6ae21a1862ef889526b019a24e1485524d8ffb9913cd539c6076c144a36cd9fba5d52ac37fab547bb0af69eb9396baab635a1081c0c31a636b50650374bd7d3fbd18b04af778e97c3c4d49a849c"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10006, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000000880)='N', 0x1}], 0x1}, 0xc54)

kernel console output (not intermixed with test programs):

s in process `syz.0.2205'.
[  475.536019][T12140] netlink: 'syz.1.2214': attribute type 39 has an invalid length.
[  476.487232][T12162] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2220'.
[  476.554767][T12162] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  477.029917][T12176] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2225'.
[  478.261797][T12197] device veth1_macvtap left promiscuous mode
[  479.342187][T12210] netlink: 'syz.3.2236': attribute type 3 has an invalid length.
[  479.402988][T12210] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.2236'.
[  480.315673][ T4320] wlan1: Creating new IBSS network, BSSID 9a:cb:ac:0a:c6:95
[  480.360290][T12244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2247'.
[  481.455337][T12268] netlink: 'syz.0.2254': attribute type 11 has an invalid length.
[  481.554294][T12268] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.2254'.
[  481.705224][T12267] netlink: 'syz.0.2254': attribute type 11 has an invalid length.
[  481.759718][T12267] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.2254'.
[  481.912757][T12267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.975621][T12276] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.505957][T12334] dvmrp1: tun_chr_ioctl cmd 35636
[  484.654567][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2273'.
[  485.814796][T12356] netlink: 'syz.3.2278': attribute type 39 has an invalid length.
[  486.371447][T12369] netlink: 'syz.3.2284': attribute type 2 has an invalid length.
[  487.316601][T12391] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2291'.
[  487.907640][T12411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2299'.
[  489.155086][T12438] netlink: 'syz.3.2309': attribute type 10 has an invalid length.
[  489.192759][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2309'.
[  489.256128][T12438] device dummy0 entered promiscuous mode
[  489.303419][T12438] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  489.520539][T12443] device veth1_macvtap left promiscuous mode
[  489.871096][T12457] netlink: 'syz.1.2317': attribute type 9 has an invalid length.
[  489.924035][T12459] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.2316'.
[  490.134189][T12459] netlink: zone id is out of range
[  490.139768][T12459] netlink: zone id is out of range
[  490.345009][T12459] netlink: zone id is out of range
[  490.919486][T12491] netlink: 'syz.2.2324': attribute type 2 has an invalid length.
[  491.716149][ T7946] wlan1: Trigger new scan to find an IBSS to join
[  491.908888][T12517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2334'.
[  491.931014][T12517] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  492.105007][T12517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.204092][T12522] netlink: 'syz.3.2336': attribute type 39 has an invalid length.
[  492.612914][T12533] netlink: 'syz.0.2337': attribute type 17 has an invalid length.
[  492.630315][T12533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2337'.
[  492.645011][   T22] syzkaller0: tun_net_xmit 76
[  492.650826][T12533] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  492.864330][T12533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.950903][T12543] netlink: 'syz.2.2339': attribute type 41 has an invalid length.
[  493.109990][T12545] netlink: 'syz.3.2341': attribute type 10 has an invalid length.
[  493.170147][T12548] device syzkaller0 left promiscuous mode
[  493.252614][T12548] netlink: 'syz.1.2342': attribute type 29 has an invalid length.
[  493.996789][T12571] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2348'.
[  494.008428][T12571] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  494.753086][ T7283] wlan1: Trigger new scan to find an IBSS to join
[  495.560172][T12548] netlink: 'syz.1.2342': attribute type 29 has an invalid length.
[  495.571519][T12575] netlink: 'syz.0.2349': attribute type 10 has an invalid length.
[  496.177059][T12610] netlink: 'syz.1.2360': attribute type 10 has an invalid length.
[  496.200826][T12611] netlink: 'syz.4.2359': attribute type 1 has an invalid length.
[  496.232360][T12611] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2359'.
[  496.252798][T12610] device macvlan0 entered promiscuous mode
[  496.412102][T12610] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  496.549779][T12617] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2361'.
[  496.572741][T12617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  497.712791][ T7946] wlan1: Trigger new scan to find an IBSS to join
[  498.354932][T12674] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2377'.
[  498.411484][T12674] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  498.624124][ T7946] wlan1: Creating new IBSS network, BSSID 5e:1c:b6:25:9e:e4
[  499.720109][T12723] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2390'.
[  500.017025][T12733] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2394'.
[  500.080565][T12733] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  501.098206][T12760] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2403'.
[  501.314806][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.321179][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.609394][T12780] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2408'.
[  501.686300][T12780] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  502.500138][T12797] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.2416'.
[  502.528328][T12796] netlink: 'syz.2.2415': attribute type 10 has an invalid length.
[  502.634696][T12797] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2416'.
[  502.705218][T12796] team0: Port device macvlan0 removed
[  502.760792][T12796] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  503.235305][ T7283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  503.832350][T12816] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2420'.
[  503.882395][T12816] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  504.397328][T12827] sctp: [Deprecated]: syz.3.2424 (pid 12827) Use of struct sctp_assoc_value in delayed_ack socket option.
[  504.397328][T12827] Use struct sctp_sack_info instead
[  504.874953][T12842] netlink: 'syz.4.2431': attribute type 2 has an invalid length.
[  505.003120][T12842] netlink: 'syz.4.2431': attribute type 1 has an invalid length.
[  505.013505][T12838] delete_channel: no stack
[  505.062071][T12842] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2431'.
[  505.096004][T12850] netlink: 'syz.1.2429': attribute type 3 has an invalid length.
[  505.158408][T12850] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2429'.
[  505.273522][T12852] netlink: 'syz.1.2429': attribute type 21 has an invalid length.
[  505.281753][T12852] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2429'.
[  505.389660][T12859] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2434'.
[  505.419201][T12859] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  505.484571][T12852] netlink: 'syz.1.2429': attribute type 4 has an invalid length.
[  505.573936][T12852] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2429'.
[  505.871133][T12861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2436'.
[  506.112805][T12861] device hsr_slave_0 left promiscuous mode
[  506.146476][T12861] device hsr_slave_1 left promiscuous mode
[  506.472882][T12868] Q±6ã×\b‹¡Y­4��: renamed from lo
[  506.981638][T12892] netlink: 'syz.2.2445': attribute type 2 has an invalid length.
[  507.030621][T12892] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2445'.
[  507.199886][T12892] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check.
[  508.073925][T12915] netlink: 'syz.0.2449': attribute type 13 has an invalid length.
[  508.081824][T12915] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2449'.
[  508.259454][T12922] netlink: 'syz.2.2452': attribute type 29 has an invalid length.
[  508.286200][T12922] netlink: 'syz.2.2452': attribute type 29 has an invalid length.
[  508.298628][T12923] netlink: 'syz.2.2452': attribute type 29 has an invalid length.
[  508.329351][T12920] netlink: 'syz.1.2451': attribute type 10 has an invalid length.
[  508.362588][T12925] netlink: 'syz.2.2452': attribute type 29 has an invalid length.
[  508.431804][T12927] netlink: 'syz.2.2452': attribute type 29 has an invalid length.
[  508.453349][T12935] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2454'.
[  508.949611][T12945] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2456'.
[  509.061011][T12945] device hsr_slave_0 left promiscuous mode
[  509.101858][T12945] device hsr_slave_1 left promiscuous mode
[  509.394241][T12945] bridge0: port 3(hsr0) entered disabled state
[  509.516995][T12962] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2462'.
[  509.540304][T12963] Q±6ã×\b‹¡Y­4��: renamed from lo
[  509.639134][T12977] tap0: tun_chr_ioctl cmd 1074025677
[  509.654966][T12977] tap0: linktype set to 6
[  509.865944][T12989] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2467'.
[  509.931611][T12989] netlink: 'syz.3.2467': attribute type 10 has an invalid length.
[  509.948342][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2467'.
[  509.975907][T12989] device ipvlan1 entered promiscuous mode
[  510.009606][T12989] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  510.102774][ T4314] syzkaller0: tun_net_xmit 76
[  510.132885][   T22] syzkaller0: tun_net_xmit 76
[  510.270034][T12999] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  511.051158][T13026] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  511.067970][T13026] netlink: 'syz.1.2474': attribute type 4 has an invalid length.
[  511.123222][T13026] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2474'.
[  511.379641][T13032] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2477'.
[  511.779756][T13058] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2486'.
[  512.123919][T13068] __nla_validate_parse: 1 callbacks suppressed
[  512.127326][T13068] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2488'.
[  513.140176][T13090] validate_nla: 2 callbacks suppressed
[  513.140686][T13090] netlink: 'syz.3.2496': attribute type 1 has an invalid length.
[  513.157800][T13091] netlink: 'syz.3.2496': attribute type 1 has an invalid length.
[  513.516098][T13093] netlink: 'syz.0.2498': attribute type 21 has an invalid length.
[  513.561167][T13093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2498'.
[  513.652585][T13093] netlink: 'syz.0.2498': attribute type 4 has an invalid length.
[  513.697190][T13093] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2498'.
[  513.990354][T13106] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2501'.
[  514.028397][T13105] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2501'.
[  517.515675][T13145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2515'.
[  517.555382][T13146] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2515'.
[  517.574818][T13147] tap0: tun_chr_ioctl cmd 1074025677
[  517.585739][T13145] openvswitch: netlink: Message has 6 unknown bytes.
[  517.603046][T13147] tap0: linktype set to 6
[  517.608691][T13146] openvswitch: netlink: Message has 6 unknown bytes.
[  517.654767][T13151] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2517'.
[  518.240253][T13164] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2520'.
[  519.013951][T13178] netlink: 'syz.4.2524': attribute type 21 has an invalid length.
[  519.022090][T13178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2524'.
[  519.121805][T13174] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2525'.
[  519.186177][T13174] netlink: 'syz.1.2525': attribute type 21 has an invalid length.
[  519.303708][T13178] netlink: 'syz.4.2524': attribute type 3 has an invalid length.
[  519.311884][T13178] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2524'.
[  519.894104][T13207] netlink: 'syz.0.2535': attribute type 15 has an invalid length.
[  519.939838][T13207] netlink: 'syz.0.2535': attribute type 21 has an invalid length.
[  519.982601][T13207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2535'.
[  520.015248][T13207] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2535'.
[  521.848048][T13255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2549'.
[  522.369494][T13269] netlink: 'syz.1.2556': attribute type 11 has an invalid length.
[  523.361466][T13280] __nla_validate_parse: 1 callbacks suppressed
[  523.361483][T13280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2559'.
[  523.508056][T13285] netlink: 53775 bytes leftover after parsing attributes in process `syz.4.2561'.
[  523.650635][T13288] netlink: 53775 bytes leftover after parsing attributes in process `syz.4.2561'.
[  524.548538][T13318] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2573'.
[  524.628534][T13318] netlink: zone id is out of range
[  524.733099][T13318] netlink: zone id is out of range
[  524.846561][T13318] netlink: zone id is out of range
[  524.851801][T13318] netlink: zone id is out of range
[  524.925923][T13318] netlink: zone id is out of range
[  524.950585][T13318] netlink: zone id is out of range
[  524.978575][T13318] netlink: zone id is out of range
[  525.007447][T13318] netlink: zone id is out of range
[  525.058197][T13318] netlink: zone id is out of range
[  525.104130][T13318] netlink: zone id is out of range
[  526.044106][T13346] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2580'.
[  526.958648][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'.
[  526.995591][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'.
[  527.016882][T13375] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2586'.
[  527.034664][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'.
[  527.044979][T13375] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2586'.
[  527.356390][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.381542][T13384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.398964][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.470322][T13384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.041399][T13416] netlink: 'syz.0.2599': attribute type 1 has an invalid length.
[  529.111663][T13416] __nla_validate_parse: 3 callbacks suppressed
[  529.111683][T13416] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2599'.
[  530.754787][ T7946] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  532.132554][T13454] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2607'.
[  532.401243][T13458] netlink: 'syz.2.2607': attribute type 1 has an invalid length.
[  532.559887][T13458] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2607'.
[  532.863250][T13468] syz.3.2610 (13468) used obsolete PPPIOCDETACH ioctl
[  533.612262][T13492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2617'.
[  534.149011][T13498] netlink: 'syz.1.2620': attribute type 1 has an invalid length.
[  534.164314][T13498] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2620'.
[  534.471276][T13528] netlink: 'syz.2.2624': attribute type 13 has an invalid length.
[  534.499674][T13528] netlink: 'syz.2.2624': attribute type 14 has an invalid length.
[  534.529563][T13528] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2624'.
[  534.832845][T13539] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2628'.
[  534.922277][T13541] netlink: 'syz.0.2628': attribute type 1 has an invalid length.
[  535.197701][T13541] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2628'.
[  535.232586][ T4519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  535.363835][T13543] netlink: 'syz.2.2631': attribute type 10 has an invalid length.
[  535.622935][T13543] device nlmon0 entered promiscuous mode
[  535.644157][T13543] team0: Device nlmon0 is of different type
[  536.041185][T13562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2635'.
[  536.315460][T13569] netlink: 'syz.0.2637': attribute type 29 has an invalid length.
[  536.385404][T13569] netlink: 'syz.0.2637': attribute type 29 has an invalid length.
[  536.417404][T13571] netlink: 'syz.0.2637': attribute type 29 has an invalid length.
[  536.480098][T13570] netlink: 'syz.0.2637': attribute type 29 has an invalid length.
[  537.685978][T13605] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2647'.
[  537.824937][T13617] netlink: 'syz.0.2646': attribute type 7 has an invalid length.
[  539.526570][T13643] validate_nla: 1 callbacks suppressed
[  539.526589][T13643] netlink: 'syz.4.2657': attribute type 10 has an invalid length.
[  539.610192][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2657'.
[  539.650759][T13643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  539.679292][T13643] net_ratelimit: 139 callbacks suppressed
[  539.679312][T13643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  540.454497][T13660] netlink: 'syz.4.2663': attribute type 10 has an invalid length.
[  540.605078][T13660] team0: Device nlmon0 is of different type
[  540.656725][T13664] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2666'.
[  540.682164][T13666] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2666'.
[  540.997672][T13675] device syzkaller0 left promiscuous mode
[  541.067939][T13675] netlink: 'syz.0.2668': attribute type 16 has an invalid length.
[  541.098158][T13675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2668'.
[  541.116491][T13676] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0
[  541.238994][T13677] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2664'.
[  541.302157][T13678] netlink: 'syz.1.2664': attribute type 1 has an invalid length.
[  541.432614][T13678] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2664'.
[  542.167596][T13701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2674'.
[  542.911363][T13715] FAULT_INJECTION: forcing a failure.
[  542.911363][T13715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.988937][T13715] CPU: 1 PID: 13715 Comm: syz.0.2679 Not tainted syzkaller #0
[  542.996478][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  543.006573][T13715] Call Trace:
[  543.009883][T13715]  <TASK>
[  543.012843][T13715]  dump_stack_lvl+0x188/0x24e
[  543.017559][T13715]  ? show_regs_print_info+0x12/0x12
[  543.022799][T13715]  ? load_image+0x410/0x410
[  543.027350][T13715]  ? __lock_acquire+0x7c40/0x7c40
[  543.032427][T13715]  should_fail_ex+0x390/0x4c0
[  543.037158][T13715]  _copy_from_user+0x2c/0x170
[  543.041884][T13715]  ___sys_sendmsg+0x1c3/0x360
[  543.046610][T13715]  ? __sys_sendmsg+0x2a0/0x2a0
[  543.051414][T13715]  ? trace_call_bpf+0xbf/0x6b0
[  543.056228][T13715]  __se_sys_sendmsg+0x1c3/0x2b0
[  543.061103][T13715]  ? ct_nmi_exit+0x145/0x1c0
[  543.065718][T13715]  ? __x64_sys_sendmsg+0x80/0x80
[  543.070683][T13715]  ? lockdep_hardirqs_on+0x94/0x140
[  543.075904][T13715]  do_syscall_64+0x4c/0xa0
[  543.080339][T13715]  ? clear_bhb_loop+0x60/0xb0
[  543.085068][T13715]  ? clear_bhb_loop+0x60/0xb0
[  543.089780][T13715]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  543.095731][T13715] RIP: 0033:0x7f0d7bb9e159
[  543.100193][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.119827][T13715] RSP: 002b:00007f0d7c9e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.128302][T13715] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9e159
[  543.136322][T13715] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  543.144665][T13715] RBP: 00007f0d7c9e8090 R08: 0000000000000000 R09: 0000000000000000
[  543.152660][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.160663][T13715] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007fff0a936988
[  543.168664][T13715]  </TASK>
[  543.880061][T13720] netlink: 'syz.1.2681': attribute type 10 has an invalid length.
[  543.942547][T13731] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0
[  544.484881][T13741] netlink: 'syz.3.2687': attribute type 10 has an invalid length.
[  544.534993][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2687'.
[  544.579368][T13741] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  544.727184][T13743] netlink: 'syz.2.2690': attribute type 4 has an invalid length.
[  544.754171][T13743] netlink: 'syz.2.2690': attribute type 4 has an invalid length.
[  544.812899][T13743] netlink: 'syz.2.2690': attribute type 7 has an invalid length.
[  544.842903][T13743] netlink: 'syz.2.2690': attribute type 8 has an invalid length.
[  544.870470][T13743] netlink: 'syz.2.2690': attribute type 7 has an invalid length.
[  544.906441][T13743] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.2690'.
[  545.005275][T13749] netlink: 'syz.3.2692': attribute type 4 has an invalid length.
[  545.052471][T13749] netlink: 'syz.3.2692': attribute type 4 has an invalid length.
[  545.060543][T13749] netlink: 'syz.3.2692': attribute type 7 has an invalid length.
[  545.088604][T13749] netlink: 'syz.3.2692': attribute type 8 has an invalid length.
[  545.094054][T13752] FAULT_INJECTION: forcing a failure.
[  545.094054][T13752] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.125853][T13749] netlink: 'syz.3.2692': attribute type 7 has an invalid length.
[  545.161719][T13753] device netdevsim0 left promiscuous mode
[  545.170886][T13752] CPU: 1 PID: 13752 Comm: syz.0.2694 Not tainted syzkaller #0
[  545.173139][T13749] netlink: 125876 bytes leftover after parsing attributes in process `syz.3.2692'.
[  545.178373][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  545.178386][T13752] Call Trace:
[  545.178393][T13752]  <TASK>
[  545.178401][T13752]  dump_stack_lvl+0x188/0x24e
[  545.208733][T13752]  ? show_regs_print_info+0x12/0x12
[  545.213979][T13752]  ? load_image+0x410/0x410
[  545.218522][T13752]  ? __lock_acquire+0x7c40/0x7c40
[  545.223607][T13752]  should_fail_ex+0x390/0x4c0
[  545.228432][T13752]  _copy_from_user+0x2c/0x170
[  545.233153][T13752]  iovec_from_user+0x143/0x360
[  545.237975][T13752]  __import_iovec+0x6c/0x510
[  545.242617][T13752]  import_iovec+0x6f/0xa0
[  545.246991][T13752]  ___sys_sendmsg+0x252/0x360
[  545.251696][T13752]  ? __sys_sendmsg+0x2a0/0x2a0
[  545.256497][T13752]  ? trace_call_bpf+0xbf/0x6b0
[  545.261313][T13752]  __se_sys_sendmsg+0x1c3/0x2b0
[  545.266196][T13752]  ? ct_nmi_exit+0x145/0x1c0
[  545.270825][T13752]  ? __x64_sys_sendmsg+0x80/0x80
[  545.275832][T13752]  ? lockdep_hardirqs_on+0x94/0x140
[  545.281063][T13752]  do_syscall_64+0x4c/0xa0
[  545.285521][T13752]  ? clear_bhb_loop+0x60/0xb0
[  545.290232][T13752]  ? clear_bhb_loop+0x60/0xb0
[  545.294940][T13752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  545.300870][T13752] RIP: 0033:0x7f0d7bb9e159
[  545.305304][T13752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.324944][T13752] RSP: 002b:00007f0d7c9e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.333379][T13752] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9e159
[  545.341377][T13752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  545.349363][T13752] RBP: 00007f0d7c9e8090 R08: 0000000000000000 R09: 0000000000000000
[  545.357362][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.365438][T13752] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007fff0a936988
[  545.373466][T13752]  </TASK>
[  546.195407][T13782] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.2709'.
[  547.115269][T13798] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2703'.
[  547.986550][T13814] FAULT_INJECTION: forcing a failure.
[  547.986550][T13814] name failslab, interval 1, probability 0, space 0, times 0
[  548.049631][T13814] CPU: 1 PID: 13814 Comm: syz.3.2710 Not tainted syzkaller #0
[  548.057252][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  548.067344][T13814] Call Trace:
[  548.070650][T13814]  <TASK>
[  548.073606][T13814]  dump_stack_lvl+0x188/0x24e
[  548.078326][T13814]  ? show_regs_print_info+0x12/0x12
[  548.083554][T13814]  ? load_image+0x410/0x410
[  548.088109][T13814]  ? __might_sleep+0xd0/0xd0
[  548.092725][T13814]  ? __lock_acquire+0x7c40/0x7c40
[  548.097790][T13814]  ? verify_lock_unused+0x140/0x140
[  548.103049][T13814]  should_fail_ex+0x390/0x4c0
[  548.107786][T13814]  should_failslab+0x5/0x20
[  548.112348][T13814]  slab_pre_alloc_hook+0x59/0x300
[  548.117405][T13814]  ? __get_vm_area_node+0x122/0x330
[  548.122706][T13814]  __kmem_cache_alloc_node+0x4f/0x270
[  548.128116][T13814]  ? __get_vm_area_node+0x122/0x330
[  548.133375][T13814]  kmalloc_node_trace+0x22/0xe0
[  548.138258][T13814]  __get_vm_area_node+0x122/0x330
[  548.143356][T13814]  ? __local_bh_enable_ip+0x136/0x1c0
[  548.148783][T13814]  __vmalloc_node_range+0x357/0x1380
[  548.154121][T13814]  ? netlink_sendmsg+0x5ec/0xbd0
[  548.159111][T13814]  ? netlink_insert+0x28d/0x13b0
[  548.164101][T13814]  ? free_vm_area+0x50/0x50
[  548.168665][T13814]  ? netlink_sendmsg+0x5ec/0xbd0
[  548.173637][T13814]  vmalloc+0x75/0x80
[  548.177561][T13814]  ? netlink_sendmsg+0x5ec/0xbd0
[  548.182531][T13814]  netlink_sendmsg+0x5ec/0xbd0
[  548.187359][T13814]  ? netlink_getsockopt+0x550/0x550
[  548.192600][T13814]  ? apparmor_socket_sendmsg+0x8a/0x330
[  548.198197][T13814]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  548.203517][T13814]  ? security_socket_sendmsg+0x7c/0xa0
[  548.209021][T13814]  ? netlink_getsockopt+0x550/0x550
[  548.214250][T13814]  ____sys_sendmsg+0x5ed/0x9a0
[  548.219051][T13814]  ? __sys_sendmsg_sock+0x30/0x30
[  548.224108][T13814]  ? __import_iovec+0x306/0x510
[  548.229013][T13814]  ? import_iovec+0x6f/0xa0
[  548.233586][T13814]  ___sys_sendmsg+0x2a2/0x360
[  548.238307][T13814]  ? __sys_sendmsg+0x2a0/0x2a0
[  548.243125][T13814]  ? trace_call_bpf+0xbf/0x6b0
[  548.248041][T13814]  __se_sys_sendmsg+0x1c3/0x2b0
[  548.252936][T13814]  ? ct_nmi_exit+0x145/0x1c0
[  548.257579][T13814]  ? __x64_sys_sendmsg+0x80/0x80
[  548.262569][T13814]  ? lockdep_hardirqs_on+0x94/0x140
[  548.267849][T13814]  do_syscall_64+0x4c/0xa0
[  548.272310][T13814]  ? clear_bhb_loop+0x60/0xb0
[  548.277049][T13814]  ? clear_bhb_loop+0x60/0xb0
[  548.281768][T13814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  548.287718][T13814] RIP: 0033:0x7f7a3619e159
[  548.292172][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.311843][T13814] RSP: 002b:00007f7a3703b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  548.320299][T13814] RAX: ffffffffffffffda RBX: 00007f7a36426090 RCX: 00007f7a3619e159
[  548.328333][T13814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  548.336430][T13814] RBP: 00007f7a3703b090 R08: 0000000000000000 R09: 0000000000000000
[  548.344445][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.352454][T13814] R13: 00007f7a36426128 R14: 00007f7a36426090 R15: 00007ffddba2fc28
[  548.360480][T13814]  </TASK>
[  548.373158][T13820] syzkaller1: tun_chr_ioctl cmd 1074025677
[  548.432830][T13820] syzkaller1: linktype set to 786
[  548.914338][T13814] syz.3.2710: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  548.930800][T13814] CPU: 1 PID: 13814 Comm: syz.3.2710 Not tainted syzkaller #0
[  548.938318][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  548.948404][T13814] Call Trace:
[  548.951701][T13814]  <TASK>
[  548.954651][T13814]  dump_stack_lvl+0x188/0x24e
[  548.959356][T13814]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  548.965896][T13814]  ? show_regs_print_info+0x12/0x12
[  548.971142][T13814]  ? load_image+0x410/0x410
[  548.975689][T13814]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  548.982132][T13814]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  548.988665][T13814]  warn_alloc+0x242/0x330
[  548.993025][T13814]  ? __get_vm_area_node+0x122/0x330
[  548.998258][T13814]  ? zone_watermark_ok_safe+0x270/0x270
[  549.003840][T13814]  ? rcu_is_watching+0x11/0xa0
[  549.008732][T13814]  ? __get_vm_area_node+0x318/0x330
[  549.013960][T13814]  ? __local_bh_enable_ip+0x136/0x1c0
[  549.019358][T13814]  __vmalloc_node_range+0x37c/0x1380
[  549.024687][T13814]  ? netlink_insert+0x28d/0x13b0
[  549.029649][T13814]  ? free_vm_area+0x50/0x50
[  549.034174][T13814]  ? netlink_sendmsg+0x5ec/0xbd0
[  549.039309][T13814]  vmalloc+0x75/0x80
[  549.043253][T13814]  ? netlink_sendmsg+0x5ec/0xbd0
[  549.048219][T13814]  netlink_sendmsg+0x5ec/0xbd0
[  549.053012][T13814]  ? netlink_getsockopt+0x550/0x550
[  549.058234][T13814]  ? apparmor_socket_sendmsg+0x8a/0x330
[  549.063905][T13814]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  549.069211][T13814]  ? security_socket_sendmsg+0x7c/0xa0
[  549.074700][T13814]  ? netlink_getsockopt+0x550/0x550
[  549.079924][T13814]  ____sys_sendmsg+0x5ed/0x9a0
[  549.084732][T13814]  ? __sys_sendmsg_sock+0x30/0x30
[  549.089792][T13814]  ? __import_iovec+0x306/0x510
[  549.094691][T13814]  ? import_iovec+0x6f/0xa0
[  549.099230][T13814]  ___sys_sendmsg+0x2a2/0x360
[  549.103941][T13814]  ? __sys_sendmsg+0x2a0/0x2a0
[  549.108764][T13814]  ? trace_call_bpf+0xbf/0x6b0
[  549.113857][T13814]  __se_sys_sendmsg+0x1c3/0x2b0
[  549.118737][T13814]  ? ct_nmi_exit+0x145/0x1c0
[  549.123395][T13814]  ? __x64_sys_sendmsg+0x80/0x80
[  549.128383][T13814]  ? lockdep_hardirqs_on+0x94/0x140
[  549.133613][T13814]  do_syscall_64+0x4c/0xa0
[  549.138041][T13814]  ? clear_bhb_loop+0x60/0xb0
[  549.142733][T13814]  ? clear_bhb_loop+0x60/0xb0
[  549.147427][T13814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.153343][T13814] RIP: 0033:0x7f7a3619e159
[  549.157777][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.177404][T13814] RSP: 002b:00007f7a3703b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.185847][T13814] RAX: ffffffffffffffda RBX: 00007f7a36426090 RCX: 00007f7a3619e159
[  549.193844][T13814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  549.201835][T13814] RBP: 00007f7a3703b090 R08: 0000000000000000 R09: 0000000000000000
[  549.209839][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.217826][T13814] R13: 00007f7a36426128 R14: 00007f7a36426090 R15: 00007ffddba2fc28
[  549.225835][T13814]  </TASK>
[  549.263482][T13814] Mem-Info:
[  549.289022][T13814] active_anon:46208 inactive_anon:0 isolated_anon:0
[  549.289022][T13814]  active_file:20926 inactive_file:40143 isolated_file:0
[  549.289022][T13814]  unevictable:768 dirty:309 writeback:0
[  549.289022][T13814]  slab_reclaimable:21547 slab_unreclaimable:101076
[  549.289022][T13814]  mapped:39649 shmem:40770 pagetables:753
[  549.289022][T13814]  sec_pagetables:0 bounce:0
[  549.289022][T13814]  kernel_misc_reclaimable:0
[  549.289022][T13814]  free:1275821 free_pcp:11747 free_cma:0
[  549.432767][T13814] Node 0 active_anon:187632kB inactive_anon:0kB active_file:83704kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158596kB dirty:1236kB writeback:0kB shmem:164444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10740kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no
[  549.607682][T13814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  549.758680][T13814] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  549.840585][T13814] lowmem_reserve[]: 0 2527 2528 2528 2528
[  549.852525][T13814] Node 0 DMA32 free:1177440kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:195448kB inactive_anon:0kB active_file:83704kB inactive_file:160372kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:28724kB local_pcp:13976kB free_cma:0kB
[  549.917854][T13814] lowmem_reserve[]: 0 0 1 1 1
[  549.926576][T13848] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2717'.
[  549.947374][T13814] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  549.992791][T13848] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  550.057336][T13814] lowmem_reserve[]: 0 0 0 0 0
[  550.062175][T13814] Node 1 Normal free:3899884kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:7680kB free_cma:0kB
[  550.228735][T13814] lowmem_reserve[]: 0 0 0 0 0
[  550.269539][T13814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  550.317813][T13814] Node 0 DMA32: 3*4kB (UME) 719*8kB (UM) 992*16kB (UME) 286*32kB (UE) 412*64kB (U) 485*128kB (U) 201*256kB (UM) 60*512kB (UME) 27*1024kB (U) 8*2048kB (UME) 226*4096kB (UM) = 1171140kB
[  550.402564][T13814] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  550.462845][T13814] Node 1 Normal: 211*4kB (U) 46*8kB (UE) 23*16kB (UME) 34*32kB (UME) 16*64kB (UME) 7*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3899884kB
[  550.537894][T13814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.551779][T13814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  550.571878][T13814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.602136][T13814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  550.623822][T13814] 106886 total pagecache pages
[  550.628676][T13814] 0 pages in swap cache
[  550.664081][T13814] Free swap  = 124996kB
[  550.668327][T13814] Total swap = 124996kB
[  550.689237][T13814] 2097051 pages RAM
[  550.701477][T13814] 0 pages HighMem/MovableOnly
[  550.749949][T13814] 415226 pages reserved
[  550.780497][T13814] 0 pages cma reserved
[  551.006507][T13859] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2721'.
[  551.256258][T13859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.363298][T13859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.415603][T13859] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  551.444555][T13859] bond0 (unregistering): Released all slaves
[  551.663897][T13861] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2720'.
[  551.735168][T13872] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2724'.
[  551.808840][T13873] validate_nla: 8 callbacks suppressed
[  551.808882][T13873] netlink: 'syz.1.2723': attribute type 16 has an invalid length.
[  551.834662][T13873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2723'.
[  552.050679][T13879] netlink: 'syz.0.2726': attribute type 22 has an invalid length.
[  552.082029][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'.
[  552.108516][T13880] netlink: 'syz.0.2726': attribute type 22 has an invalid length.
[  552.126444][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'.
[  552.139014][T13888] netlink: 'syz.3.2727': attribute type 3 has an invalid length.
[  552.196902][T13888] netlink: 'syz.3.2727': attribute type 1 has an invalid length.
[  552.244029][T13888] netlink: 17891 bytes leftover after parsing attributes in process `syz.3.2727'.
[  552.484915][T13893] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2729'.
[  552.524607][T13893] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  552.666251][T13898] netlink: 'syz.2.2730': attribute type 10 has an invalid length.
[  552.697245][T13898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2730'.
[  552.725675][T13898] device ipvlan1 entered promiscuous mode
[  552.771722][T13898] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  555.152050][T13932] netlink: 'syz.0.2737': attribute type 11 has an invalid length.
[  555.170587][T13932] __nla_validate_parse: 1 callbacks suppressed
[  555.170606][T13932] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2737'.
[  555.238897][T13933] __sock_release: fasync list not empty!
[  555.293873][T13935] netlink: 'syz.2.2739': attribute type 19 has an invalid length.
[  555.304782][T13935] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2739'.
[  555.333666][T13931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.138698][T13962] syzkaller1: tun_chr_ioctl cmd 1074025677
[  556.177538][T13962] syzkaller1: linktype set to 786
[  557.065767][T13982] netlink: 'syz.1.2752': attribute type 4 has an invalid length.
[  557.103594][T13982] netlink: 'syz.1.2752': attribute type 4 has an invalid length.
[  557.142015][T13982] netlink: 'syz.1.2752': attribute type 7 has an invalid length.
[  557.151300][T13982] netlink: 'syz.1.2752': attribute type 8 has an invalid length.
[  557.188997][T13982] netlink: 'syz.1.2752': attribute type 7 has an invalid length.
[  557.225515][T13982] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.2752'.
[  559.569452][T14035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2766'.
[  559.601008][T14035] netlink: 'syz.0.2766': attribute type 10 has an invalid length.
[  559.669563][T14035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2766'.
[  559.711302][T14035] device team0 entered promiscuous mode
[  559.748108][T14035] device team_slave_1 entered promiscuous mode
[  559.767834][T14035] device geneve1 entered promiscuous mode
[  559.829260][T14035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  560.236147][T14046] syzkaller1: tun_chr_ioctl cmd 1074025677
[  560.265475][T14046] syzkaller1: linktype set to 786
[  561.527035][T14068] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2775'.
[  561.614207][T14068] netlink: zone id is out of range
[  561.662996][T14068] netlink: zone id is out of range
[  561.679919][T14077] netlink: 'syz.2.2780': attribute type 29 has an invalid length.
[  561.716265][T14068] netlink: zone id is out of range
[  561.740076][T14078] netlink: 'syz.2.2780': attribute type 29 has an invalid length.
[  561.773615][T14068] netlink: zone id is out of range
[  561.786600][T14072] netlink: 'syz.4.2776': attribute type 3 has an invalid length.
[  561.814385][T14081] device syzkaller0 entered promiscuous mode
[  561.816519][T14068] netlink: zone id is out of range
[  561.832659][T14072] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2776'.
[  561.859853][T14068] netlink: zone id is out of range
[  561.876408][T14068] netlink: zone id is out of range
[  561.894343][T14068] netlink: zone id is out of range
[  561.940389][T14068] netlink: zone id is out of range
[  562.114768][ T4395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  562.761528][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.768041][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.081530][T14119] netlink: 'syz.3.2790': attribute type 22 has an invalid length.
[  563.137596][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'.
[  563.517367][T14125] netlink: 'syz.2.2793': attribute type 2 has an invalid length.
[  563.543138][T14125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2793'.
[  563.653186][T14134] netlink: 'syz.3.2795': attribute type 9 has an invalid length.
[  563.715177][T14134] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2795'.
[  564.448214][T14167] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2803'.
[  564.951702][T14166] netlink: 'syz.1.2802': attribute type 10 has an invalid length.
[  566.041811][T14206] netlink: 'syz.3.2811': attribute type 3 has an invalid length.
[  566.056673][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2811'.
[  566.068474][T14206] netlink: 'syz.3.2811': attribute type 3 has an invalid length.
[  566.078279][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2811'.
[  566.090007][T14206] netlink: 'syz.3.2811': attribute type 3 has an invalid length.
[  566.099548][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2811'.
[  566.111671][T14206] netlink: 'syz.3.2811': attribute type 3 has an invalid length.
[  566.139845][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2811'.
[  566.164419][T14214] netlink: 'syz.4.2813': attribute type 3 has an invalid length.
[  566.200969][T14206] netlink: 'syz.3.2811': attribute type 3 has an invalid length.
[  566.245511][T14219] IPv6: NLM_F_CREATE should be specified when creating new route
[  566.255819][T14219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.263124][T14219] IPv6: NLM_F_CREATE should be set when creating new route
[  566.270474][T14219] IPv6: NLM_F_CREATE should be set when creating new route
[  566.277854][T14219] IPv6: NLM_F_CREATE should be set when creating new route
[  566.820054][T14233] __nla_validate_parse: 30 callbacks suppressed
[  566.820097][T14233] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2818'.
[  567.244535][T14222] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  570.474030][T14285] validate_nla: 30 callbacks suppressed
[  570.474049][T14285] netlink: 'syz.4.2834': attribute type 21 has an invalid length.
[  570.508144][T14285] netlink: 'syz.4.2834': attribute type 7 has an invalid length.
[  572.716856][T14346] netlink: 'syz.3.2844': attribute type 10 has an invalid length.
[  572.754310][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2844'.
[  572.796462][T14346] net_ratelimit: 14 callbacks suppressed
[  572.796479][T14346] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  572.899160][T14353] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2846'.
[  572.928168][T14353] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2846'.
[  573.237552][T14363] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2850'.
[  573.275819][T14366] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2849'.
[  573.297845][T14363] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  573.390918][T14371] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2851'.
[  573.407469][T14371] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check.
[  573.659223][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  574.047034][T14386] netlink: 'syz.4.2857': attribute type 1 has an invalid length.
[  574.102441][T14386] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2857'.
[  574.509019][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'.
[  574.568560][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'.
[  574.669482][T14400] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2860'.
[  575.023778][T14410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  575.105917][T14410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  575.657658][T14421] netlink: 'syz.3.2867': attribute type 10 has an invalid length.
[  575.695670][T14421] netlink: 'syz.3.2867': attribute type 22 has an invalid length.
[  575.926812][T14426] netlink: zone id is out of range
[  575.932033][T14426] netlink: zone id is out of range
[  576.016685][T14436] netlink: 'syz.3.2870': attribute type 21 has an invalid length.
[  576.038803][T14436] netlink: 'syz.3.2870': attribute type 6 has an invalid length.
[  576.086853][T14426] netlink: zone id is out of range
[  576.092146][T14426] netlink: zone id is out of range
[  576.251353][T14426] netlink: del zone limit has 4 unknown bytes
[  577.969788][T14500] netlink: 'syz.3.2885': attribute type 10 has an invalid length.
[  578.014455][T14500] __nla_validate_parse: 9 callbacks suppressed
[  578.014473][T14500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2885'.
[  578.059475][T14500] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  578.486041][T14508] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2887'.
[  579.153132][T14514] netlink: 'syz.1.2888': attribute type 39 has an invalid length.
[  579.395003][ T7276] wlan1: Creating new IBSS network, BSSID da:4d:66:ca:f8:f8
[  579.803360][T14520] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2889'.
[  579.826007][T14526] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2891'.
[  579.828276][T14533] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2892'.
[  580.690160][T14559] netlink: 'syz.2.2899': attribute type 10 has an invalid length.
[  580.704836][T14559] netlink: 'syz.2.2899': attribute type 22 has an invalid length.
[  580.713815][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'.
[  581.025139][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'.
[  581.117041][T14565] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2901'.
[  581.299644][T14565] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  581.584597][T14576] netlink: 'syz.3.2904': attribute type 9 has an invalid length.
[  581.637851][T14576] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2904'.
[  582.218737][T14601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  582.235585][T14601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  582.244379][T14601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  582.254521][T14601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  582.262754][T14601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  582.270365][T14601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  582.622336][ T7284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.835226][ T7284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.950288][ T7284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.085427][ T7284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.395206][T14599] chnl_net:caif_netlink_parms(): no params data found
[  583.926591][T14629] ¥: port 1(bond0) entered blocking state
[  583.941945][T14629] ¥: port 1(bond0) entered disabled state
[  583.963363][T14629] device bond0 entered promiscuous mode
[  583.972726][T14629] device bond_slave_0 entered promiscuous mode
[  583.993214][T14629] device bond_slave_1 entered promiscuous mode
[  584.032978][T14599] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.040136][T14599] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.083689][T14599] device bridge_slave_0 entered promiscuous mode
[  584.251003][T14643] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2914'.
[  584.262864][T14599] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.281054][T14599] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.316783][T14599] device bridge_slave_1 entered promiscuous mode
[  584.357918][ T4276] Bluetooth: hci3: command 0x0409 tx timeout
[  584.570244][T14599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.601351][T14599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.985324][T14599] team0: Port device team_slave_0 added
[  585.267016][T14599] team0: Port device team_slave_1 added
[  585.385083][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'.
[  585.424764][T14599] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.431871][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.505467][T14599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.619301][T14674] netlink: 'syz.1.2919': attribute type 4 has an invalid length.
[  585.641008][T14674] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2919'.
[  585.667450][T14599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.687713][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.759159][T14599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.780703][T14673] netlink: 'syz.0.2921': attribute type 1 has an invalid length.
[  586.156750][T14599] device hsr_slave_0 entered promiscuous mode
[  586.183248][T14599] device hsr_slave_1 entered promiscuous mode
[  586.432667][ T4276] Bluetooth: hci3: command 0x041b tx timeout
[  588.512527][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[  590.301065][T14723] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2929'.
[  590.345074][T14723] device hsr_slave_0 left promiscuous mode
[  590.405407][T14723] device hsr_slave_1 left promiscuous mode
[  590.415683][T14732] FAULT_INJECTION: forcing a failure.
[  590.415683][T14732] name failslab, interval 1, probability 0, space 0, times 0
[  590.482422][T14732] CPU: 1 PID: 14732 Comm: syz.0.2933 Not tainted syzkaller #0
[  590.489952][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  590.500046][T14732] Call Trace:
[  590.503359][T14732]  <TASK>
[  590.506335][T14732]  dump_stack_lvl+0x188/0x24e
[  590.511072][T14732]  ? show_regs_print_info+0x12/0x12
[  590.516309][T14732]  ? load_image+0x410/0x410
[  590.520954][T14732]  ? __might_sleep+0xd0/0xd0
[  590.525593][T14732]  ? __lock_acquire+0x7c40/0x7c40
[  590.530679][T14732]  should_fail_ex+0x390/0x4c0
[  590.535392][T14732]  should_failslab+0x5/0x20
[  590.539936][T14732]  slab_pre_alloc_hook+0x59/0x300
[  590.545018][T14732]  ? __get_vm_area_node+0x122/0x330
[  590.550250][T14732]  __kmem_cache_alloc_node+0x4f/0x270
[  590.555662][T14732]  ? __get_vm_area_node+0x122/0x330
[  590.560915][T14732]  kmalloc_node_trace+0x22/0xe0
[  590.565812][T14732]  __get_vm_area_node+0x122/0x330
[  590.570897][T14732]  __vmalloc_node_range+0x357/0x1380
[  590.576239][T14732]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.581868][T14732]  ? trace_event_raw_event_lock+0x230/0x230
[  590.587825][T14732]  ? aa_get_newest_label+0xf9/0x5b0
[  590.593077][T14732]  ? free_vm_area+0x50/0x50
[  590.593631][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[  590.597621][T14732]  ? end_current_label_crit_section+0x170/0x170
[  590.597658][T14732]  ? __lock_acquire+0x7c40/0x7c40
[  590.597694][T14732]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.620517][T14732]  __vmalloc+0x76/0x80
[  590.624613][T14732]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.630199][T14732]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.635602][T14732]  ? bpf_prog_alloc+0x13/0x1b0
[  590.640415][T14732]  bpf_prog_alloc+0x1c/0x1b0
[  590.645038][T14732]  bpf_prog_load+0x7d4/0x1530
[  590.649759][T14732]  ? map_freeze+0x390/0x390
[  590.654304][T14732]  ? __might_fault+0xa6/0x120
[  590.659180][T14732]  ? __might_fault+0xa6/0x120
[  590.663892][T14732]  ? __might_fault+0xc2/0x120
[  590.668594][T14732]  ? __might_fault+0xa6/0x120
[  590.673319][T14732]  ? bpf_lsm_bpf+0x5/0x10
[  590.677667][T14732]  ? security_bpf+0x7a/0xa0
[  590.682197][T14732]  __sys_bpf+0x5b8/0x780
[  590.686473][T14732]  ? bpf_link_show_fdinfo+0x380/0x380
[  590.691890][T14732]  ? lock_chain_count+0x20/0x20
[  590.696797][T14732]  __x64_sys_bpf+0x78/0x90
[  590.701248][T14732]  do_syscall_64+0x4c/0xa0
[  590.705687][T14732]  ? clear_bhb_loop+0x60/0xb0
[  590.710385][T14732]  ? clear_bhb_loop+0x60/0xb0
[  590.715084][T14732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  590.721017][T14732] RIP: 0033:0x7f0d7bb9e159
[  590.725460][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.745113][T14732] RSP: 002b:00007f0d7c9e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  590.753555][T14732] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9e159
[  590.761547][T14732] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  590.769540][T14732] RBP: 00007f0d7c9e8090 R08: 0000000000000000 R09: 0000000000000000
[  590.777536][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.785547][T14732] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007fff0a936988
[  590.793549][T14732]  </TASK>
[  590.813803][T14732] syz.0.2933: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  590.845339][T14732] CPU: 0 PID: 14732 Comm: syz.0.2933 Not tainted syzkaller #0
[  590.852847][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  590.862936][T14732] Call Trace:
[  590.866247][T14732]  <TASK>
[  590.869215][T14732]  dump_stack_lvl+0x188/0x24e
[  590.873958][T14732]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  590.880421][T14732]  ? show_regs_print_info+0x12/0x12
[  590.885666][T14732]  ? load_image+0x410/0x410
[  590.890226][T14732]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  590.896696][T14732]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  590.903254][T14732]  warn_alloc+0x242/0x330
[  590.907639][T14732]  ? __get_vm_area_node+0x122/0x330
[  590.912899][T14732]  ? zone_watermark_ok_safe+0x270/0x270
[  590.918488][T14732]  ? rcu_is_watching+0x11/0xa0
[  590.923302][T14732]  ? __get_vm_area_node+0x318/0x330
[  590.928551][T14732]  __vmalloc_node_range+0x37c/0x1380
[  590.933892][T14732]  ? trace_event_raw_event_lock+0x230/0x230
[  590.939848][T14732]  ? aa_get_newest_label+0xf9/0x5b0
[  590.945100][T14732]  ? free_vm_area+0x50/0x50
[  590.949640][T14732]  ? end_current_label_crit_section+0x170/0x170
[  590.955929][T14732]  ? __lock_acquire+0x7c40/0x7c40
[  590.960987][T14732]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.966567][T14732]  __vmalloc+0x76/0x80
[  590.970655][T14732]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.976226][T14732]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  590.981627][T14732]  ? bpf_prog_alloc+0x13/0x1b0
[  590.986420][T14732]  bpf_prog_alloc+0x1c/0x1b0
[  590.991038][T14732]  bpf_prog_load+0x7d4/0x1530
[  590.995754][T14732]  ? map_freeze+0x390/0x390
[  591.000288][T14732]  ? __might_fault+0xa6/0x120
[  591.004998][T14732]  ? __might_fault+0xa6/0x120
[  591.009696][T14732]  ? __might_fault+0xc2/0x120
[  591.014414][T14732]  ? __might_fault+0xa6/0x120
[  591.019126][T14732]  ? bpf_lsm_bpf+0x5/0x10
[  591.023511][T14732]  ? security_bpf+0x7a/0xa0
[  591.028050][T14732]  __sys_bpf+0x5b8/0x780
[  591.032328][T14732]  ? bpf_link_show_fdinfo+0x380/0x380
[  591.037744][T14732]  ? lock_chain_count+0x20/0x20
[  591.042635][T14732]  __x64_sys_bpf+0x78/0x90
[  591.047082][T14732]  do_syscall_64+0x4c/0xa0
[  591.051512][T14732]  ? clear_bhb_loop+0x60/0xb0
[  591.056214][T14732]  ? clear_bhb_loop+0x60/0xb0
[  591.060909][T14732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.066831][T14732] RIP: 0033:0x7f0d7bb9e159
[  591.071263][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.090886][T14732] RSP: 002b:00007f0d7c9e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  591.099326][T14732] RAX: ffffffffffffffda RBX: 00007f0d7be25fa0 RCX: 00007f0d7bb9e159
[  591.107335][T14732] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  591.115327][T14732] RBP: 00007f0d7c9e8090 R08: 0000000000000000 R09: 0000000000000000
[  591.123318][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.131307][T14732] R13: 00007f0d7be26038 R14: 00007f0d7be25fa0 R15: 00007fff0a936988
[  591.139307][T14732]  </TASK>
[  591.161830][T14732] Mem-Info:
[  591.165259][T14732] active_anon:6787 inactive_anon:0 isolated_anon:0
[  591.165259][T14732]  active_file:20926 inactive_file:40160 isolated_file:0
[  591.165259][T14732]  unevictable:768 dirty:131 writeback:0
[  591.165259][T14732]  slab_reclaimable:21359 slab_unreclaimable:100381
[  591.165259][T14732]  mapped:29635 shmem:1368 pagetables:646
[  591.165259][T14732]  sec_pagetables:0 bounce:0
[  591.165259][T14732]  kernel_misc_reclaimable:0
[  591.165259][T14732]  free:1314574 free_pcp:13492 free_cma:0
[  591.216553][T14732] Node 0 active_anon:27148kB inactive_anon:0kB active_file:83704kB inactive_file:160440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118540kB dirty:524kB writeback:0kB shmem:3936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no
[  591.260557][T14729] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2929'.
[  591.261402][T14732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  591.292752][T14731] netlink: 'syz.1.2932': attribute type 1 has an invalid length.
[  591.306743][T14732] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  591.335985][T14732] lowmem_reserve[]: 0 2527 2528 2528 2528
[  591.341807][T14732] Node 0 DMA32 free:1364556kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27248kB inactive_anon:0kB active_file:83704kB inactive_file:160440kB unevictable:1536kB writepending:524kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:13688kB local_pcp:432kB free_cma:0kB
[  591.419588][T14732] lowmem_reserve[]: 0 0 1 1 1
[  591.445882][T14732] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  591.599280][T14732] lowmem_reserve[]: 0 0 0 0 0
[  591.614940][T14740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2935'.
[  591.642636][T14732] Node 1 Normal free:3899884kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:7680kB free_cma:0kB
[  591.677508][T14740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2935'.
[  591.704485][T14732] lowmem_reserve[]: 0 0 0 0 0
[  591.709272][T14732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  591.736062][T14732] Node 0 DMA32: 905*4kB (UME) 1911*8kB (UME) 1030*16kB (UME) 1937*32kB (UME) 786*64kB (UME) 655*128kB (UME) 317*256kB (UM) 100*512kB (UM) 43*1024kB (UM) 17*2048kB (UME) 225*4096kB (UM) = 1364316kB
[  591.820838][T14732] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  591.842018][T14732] Node 1 Normal: 211*4kB (U) 46*8kB (UE) 23*16kB (UME) 34*32kB (UME) 16*64kB (UME) 7*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3899884kB
[  591.861451][T14732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  591.870861][T14743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2935'.
[  591.871713][T14732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  591.890157][T14732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  591.900438][T14732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  591.910410][T14732] 62450 total pagecache pages
[  591.916884][T14732] 0 pages in swap cache
[  591.921082][T14732] Free swap  = 124996kB
[  591.949186][T14732] Total swap = 124996kB
[  591.977075][T14732] 2097051 pages RAM
[  591.984345][T14732] 0 pages HighMem/MovableOnly
[  592.002795][T14732] 415226 pages reserved
[  592.017396][T14732] 0 pages cma reserved
[  592.069545][T14740] netlink: 'syz.3.2935': attribute type 21 has an invalid length.
[  592.089205][T14740] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2935'.
[  592.109286][T14740] netlink: 'syz.3.2935': attribute type 4 has an invalid length.
[  592.146051][T14740] netlink: 'syz.3.2935': attribute type 5 has an invalid length.
[  592.158822][T14740] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2935'.
[  592.170309][T14747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2935'.
[  592.249622][T14756] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  592.503567][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.521528][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.553822][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.561291][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.716171][ T7284] device veth1_macvtap left promiscuous mode
[  592.733759][ T7284] device veth0_macvtap left promiscuous mode
[  592.763436][ T7284] device veth1_vlan left promiscuous mode
[  592.769680][ T7284] device veth0_vlan left promiscuous mode
[  593.244659][ T7284] device geneve1 left promiscuous mode
[  593.258795][ T7284] team0 (unregistering): Port device geneve1 removed
[  593.490673][ T7284] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  593.767922][ T7284] device team_slave_1 left promiscuous mode
[  593.775026][ T7284] team0 (unregistering): Port device team_slave_1 removed
[  593.814514][ T7284] device @ left promiscuous mode
[  593.820624][ T7284] team0 (unregistering): Port device @ removed
[  593.858542][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.896751][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.166458][ T7284] bond0 (unregistering): Released all slaves
[  594.263267][T14769] netlink: 'syz.0.2941': attribute type 39 has an invalid length.
[  594.352257][T14774] netlink: 'syz.3.2943': attribute type 3 has an invalid length.
[  594.361793][T14774] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.2943'.
[  594.424519][T14599] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  594.471326][T14599] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  594.511499][T14599] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  594.564131][T14599] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  594.685954][T14778] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  594.741687][T14780] netlink: 'syz.3.2944': attribute type 1 has an invalid length.
[  594.798232][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2945'.
[  594.859067][T14778] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  595.093983][T14599] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.098202][T14790] netlink: 'syz.3.2948': attribute type 2 has an invalid length.
[  595.202585][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  595.219466][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  595.247733][T14599] 8021q: adding VLAN 0 to HW filter on device team0
[  595.333430][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  595.349505][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  595.375494][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.382766][ T5337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.426010][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  595.440508][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  595.474636][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.481898][ T5337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.521775][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  595.580561][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  595.635216][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  595.686358][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  595.776367][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  595.862979][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  595.903225][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  595.960818][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  596.013630][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  596.054001][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  596.130896][T14599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  596.173534][T14599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  596.183223][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  596.206268][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  596.578259][T14818] netlink: 'syz.4.2953': attribute type 39 has an invalid length.
[  597.251559][T14839] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  597.271390][T14839] __nla_validate_parse: 1 callbacks suppressed
[  597.271423][T14839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2959'.
[  597.299183][T14839] : renamed from caif0
[  597.359909][T14839] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  597.429491][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  597.438658][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  597.455495][T14599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.501120][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  597.515008][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  597.550740][T14599] device veth0_vlan entered promiscuous mode
[  597.568545][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  597.580332][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  597.596306][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  597.620199][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  597.666533][T14599] device veth1_vlan entered promiscuous mode
[  597.713274][ T7276] wlan1: Trigger new scan to find an IBSS to join
[  597.796655][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  597.818713][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  597.847371][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  597.877931][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  597.913458][T14599] device veth0_macvtap entered promiscuous mode
[  597.950904][T14599] device veth1_macvtap entered promiscuous mode
[  598.017363][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.051899][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.095677][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.150211][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.180753][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.207770][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.253915][T14599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.300393][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  598.321403][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  598.393379][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  598.418935][T14383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  598.464751][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.495440][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.542490][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.573435][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.614309][T14599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.635336][T14599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.662969][T14599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.699235][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  598.742726][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  598.764276][T14599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.799535][T14599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.851341][T14599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.874919][T14599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.153454][T14886] netlink: 'syz.3.2969': attribute type 39 has an invalid length.
[  599.181821][ T7284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.221084][ T7284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.272095][ T7276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.283561][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  599.311248][ T7276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.321236][T14893] netlink: 'syz.0.2971': attribute type 10 has an invalid length.
[  599.442716][T14893] device veth0_macvtap left promiscuous mode
[  600.160920][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  600.710783][T14928] netlink: 'syz.3.2976': attribute type 1 has an invalid length.
[  600.761746][T14224] wlan1: Creating new IBSS network, BSSID c2:41:c3:1d:26:82
[  600.803645][T14928] netlink: 'syz.3.2976': attribute type 1 has an invalid length.
[  600.811798][T14928] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2976'.
[  600.857484][T14929] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2975'.
[  602.133791][T14601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  602.144759][T14601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  602.161615][T14601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  602.186654][T14601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  602.194929][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  602.202655][T14601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  602.892943][T14955] chnl_net:caif_netlink_parms(): no params data found
[  603.153883][T14955] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.188387][T14955] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.207543][T14955] device bridge_slave_0 entered promiscuous mode
[  603.241482][T14955] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.272936][T14955] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.300176][T14955] device bridge_slave_1 entered promiscuous mode
[  603.390613][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.427567][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.560184][T14955] team0: Port device team_slave_0 added
[  603.704011][T14955] team0: Port device team_slave_1 added
[  603.998582][T14919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.045417][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.070398][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.153741][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.205877][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.230999][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.345856][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.387832][T14987] netlink: 'syz.0.2984': attribute type 10 has an invalid length.
[  604.589968][T14919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.679036][T14955] device hsr_slave_0 entered promiscuous mode
[  604.700198][T14955] device hsr_slave_1 entered promiscuous mode
[  604.716855][T14955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  604.736168][T14955] Cannot create hsr debugfs directory
[  604.805127][T14919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.941581][T14919] bond0: (slave netdevsim0): Releasing backup interface
[  605.633073][ T4276] Bluetooth: hci5: command 0x0409 tx timeout
[  606.437919][T15056] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2994'.
[  606.488605][T14955] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  606.518946][T14955] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  607.754332][ T4276] Bluetooth: hci5: command 0x041b tx timeout
[  607.769408][T15070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2997'.
[  608.304146][T15072] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2998'.
[  608.570757][T14955] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  608.613592][T14955] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  608.947356][T14955] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.113208][T15085] FAULT_INJECTION: forcing a failure.
[  609.113208][T15085] name failslab, interval 1, probability 0, space 0, times 0
[  609.144396][T15085] CPU: 0 PID: 15085 Comm: syz.3.3004 Not tainted syzkaller #0
[  609.151930][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.162016][T15085] Call Trace:
[  609.165328][T15085]  <TASK>
[  609.168288][T15085]  dump_stack_lvl+0x188/0x24e
[  609.173011][T15085]  ? show_regs_print_info+0x12/0x12
[  609.178254][T15085]  ? load_image+0x410/0x410
[  609.182801][T15085]  ? __lock_acquire+0x7c40/0x7c40
[  609.187871][T15085]  ? rcu_is_watching+0x11/0xa0
[  609.192677][T15085]  should_fail_ex+0x390/0x4c0
[  609.197427][T15085]  should_failslab+0x5/0x20
[  609.201963][T15085]  slab_pre_alloc_hook+0x59/0x300
[  609.207036][T15085]  kmem_cache_alloc_node+0x5a/0x310
[  609.212270][T15085]  ? perf_event_alloc+0x155/0x21e0
[  609.217429][T15085]  perf_event_alloc+0x155/0x21e0
[  609.222410][T15085]  ? _raw_spin_unlock+0x24/0x40
[  609.227305][T15085]  ? alloc_fd+0x590/0x640
[  609.231697][T15085]  __se_sys_perf_event_open+0x5dc/0x1ec0
[  609.237370][T15085]  ? lock_chain_count+0x20/0x20
[  609.242273][T15085]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  609.248047][T15085]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  609.253717][T15085]  do_syscall_64+0x4c/0xa0
[  609.258173][T15085]  ? clear_bhb_loop+0x60/0xb0
[  609.262882][T15085]  ? clear_bhb_loop+0x60/0xb0
[  609.267580][T15085]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  609.273501][T15085] RIP: 0033:0x7f7a3619e159
[  609.277944][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.297570][T15085] RSP: 002b:00007f7a3705c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  609.306037][T15085] RAX: ffffffffffffffda RBX: 00007f7a36425fa0 RCX: 00007f7a3619e159
[  609.314034][T15085] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180
[  609.322007][T15085] RBP: 00007f7a3705c090 R08: 0000000000000000 R09: 0000000000000000
[  609.329989][T15085] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  609.337976][T15085] R13: 00007f7a36426038 R14: 00007f7a36425fa0 R15: 00007ffddba2fc28
[  609.345981][T15085]  </TASK>
[  609.420250][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  609.435291][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  609.457350][T14955] 8021q: adding VLAN 0 to HW filter on device team0
[  609.517254][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  609.528285][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  609.543181][T14224] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.550328][T14224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.568543][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  609.577858][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  609.599015][T14224] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.606211][T14224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  609.624388][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  609.763896][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  609.799341][ T4276] Bluetooth: hci5: command 0x040f tx timeout
[  609.810379][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  609.917534][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  609.970563][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  609.990461][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  610.007979][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  610.038278][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  610.073746][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  610.092915][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  610.135388][T14919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.165108][T14919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.179089][T14919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.193234][T14919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.237575][T14919] device batadv0 left promiscuous mode
[  610.247227][T14919] bridge0: port 4(batadv0) entered disabled state
[  610.269104][T14919] device bridge_slave_1 left promiscuous mode
[  610.280796][T14919] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.294430][T14919] device bridge_slave_0 left promiscuous mode
[  610.300893][T14919] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.410083][T14919] device veth1_vlan left promiscuous mode
[  610.425909][T14919] device veth0_vlan left promiscuous mode
[  611.892408][ T4276] Bluetooth: hci5: command 0x0419 tx timeout
[  612.763704][T14919] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  613.073289][T14919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.116854][T14919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.341883][T14919] bond0 (unregistering): Released all slaves
[  613.430108][T14955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  613.441908][T14955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  613.456161][T15114] IPv6: Can't replace route, no match found
[  613.462217][T15107] netlink: 'syz.0.3008': attribute type 2 has an invalid length.
[  613.470947][T15107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3008'.
[  613.493351][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  613.519001][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  613.552794][T15134] netlink: 'syz.4.3013': attribute type 10 has an invalid length.
[  613.560677][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3013'.
[  613.594757][T15134] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  614.456028][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  614.472338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  614.486346][T14955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  614.535898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  614.548534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  614.590595][T14955] device veth0_vlan entered promiscuous mode
[  614.608574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  614.622243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  614.634171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  614.642311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  614.666363][T14955] device veth1_vlan entered promiscuous mode
[  614.724504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  614.740188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  614.749695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  614.766555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  614.784530][T14955] device veth0_macvtap entered promiscuous mode
[  614.807760][T15159] FAULT_INJECTION: forcing a failure.
[  614.807760][T15159] name failslab, interval 1, probability 0, space 0, times 0
[  614.822630][T15159] CPU: 1 PID: 15159 Comm: syz.3.3019 Not tainted syzkaller #0
[  614.830151][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  614.840238][T15159] Call Trace:
[  614.843546][T15159]  <TASK>
[  614.846496][T15159]  dump_stack_lvl+0x188/0x24e
[  614.851210][T15159]  ? show_regs_print_info+0x12/0x12
[  614.856428][T15159]  ? load_image+0x410/0x410
[  614.860957][T15159]  ? __might_sleep+0xd0/0xd0
[  614.865574][T15159]  ? __lock_acquire+0x7c40/0x7c40
[  614.870728][T15159]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  614.876751][T15159]  should_fail_ex+0x390/0x4c0
[  614.881575][T15159]  should_failslab+0x5/0x20
[  614.886106][T15159]  slab_pre_alloc_hook+0x59/0x300
[  614.891180][T15159]  ? ct_nmi_exit+0x145/0x1c0
[  614.895807][T15159]  kmem_cache_alloc_lru+0x49/0x2e0
[  614.900958][T15159]  ? __d_alloc+0x2e/0x6e0
[  614.905331][T15159]  __d_alloc+0x2e/0x6e0
[  614.909499][T15159]  ? d_alloc_pseudo+0xe/0x70
[  614.914149][T15159]  d_alloc_pseudo+0x19/0x70
[  614.918679][T15159]  alloc_file_pseudo+0xe0/0x200
[  614.923551][T15159]  ? alloc_empty_file_noaccount+0x80/0x80
[  614.929332][T15159]  ? bpf_lsm_perf_event_open+0x5/0x10
[  614.934750][T15159]  anon_inode_getfile+0xc1/0x1a0
[  614.939839][T15159]  __se_sys_perf_event_open+0xc2a/0x1ec0
[  614.945499][T15159]  ? __fget_files+0x3fc/0x460
[  614.950223][T15159]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  614.955882][T15159]  ? lockdep_hardirqs_on+0x94/0x140
[  614.961111][T15159]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  614.966842][T15159]  do_syscall_64+0x4c/0xa0
[  614.971287][T15159]  ? clear_bhb_loop+0x60/0xb0
[  614.976014][T15159]  ? clear_bhb_loop+0x60/0xb0
[  614.980728][T15159]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  614.986655][T15159] RIP: 0033:0x7f7a3619e159
[  614.991098][T15159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.010720][T15159] RSP: 002b:00007f7a3701a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  615.019160][T15159] RAX: ffffffffffffffda RBX: 00007f7a36426180 RCX: 00007f7a3619e159
[  615.027158][T15159] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180
[  615.035147][T15159] RBP: 00007f7a3701a090 R08: 0000000000000000 R09: 0000000000000000
[  615.043136][T15159] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  615.051143][T15159] R13: 00007f7a36426218 R14: 00007f7a36426180 R15: 00007ffddba2fc28
[  615.059148][T15159]  </TASK>
[  615.087609][T14955] device veth1_macvtap entered promiscuous mode
[  615.111327][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.122578][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.136107][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.147136][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.157387][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.169189][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.209029][T14955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.224298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  615.243440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  615.278442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  615.298678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  615.314313][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.332726][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.350221][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.361145][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.371804][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.382800][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.420874][T14955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.454743][T15167] netlink: 'syz.4.3021': attribute type 21 has an invalid length.
[  615.478269][T15167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3021'.
[  615.497685][T15170] netlink: 'syz.2.3020': attribute type 17 has an invalid length.
[  615.521365][T15170] netlink: 'syz.2.3020': attribute type 16 has an invalid length.
[  615.548406][T15170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3020'.
[  616.354547][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  616.383263][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  616.427027][T14955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.462014][T14955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.485490][T14955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.495211][T14955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.619203][T15190] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3025'.
[  616.723338][T13807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.731994][T13807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.823647][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  616.852618][T14224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.860514][T14224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.893668][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  617.258841][T15205] netlink: 'syz.2.3029': attribute type 2 has an invalid length.
[  617.286308][T15205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3029'.
[  617.496575][T15213] FAULT_INJECTION: forcing a failure.
[  617.496575][T15213] name failslab, interval 1, probability 0, space 0, times 0
[  617.568770][T15213] CPU: 0 PID: 15213 Comm: syz.4.3032 Not tainted syzkaller #0
[  617.576328][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  617.586438][T15213] Call Trace:
[  617.589755][T15213]  <TASK>
[  617.592727][T15213]  dump_stack_lvl+0x188/0x24e
[  617.597454][T15213]  ? show_regs_print_info+0x12/0x12
[  617.602815][T15213]  ? load_image+0x410/0x410
[  617.607387][T15213]  ? __might_sleep+0xd0/0xd0
[  617.612019][T15213]  ? __lock_acquire+0x7c40/0x7c40
[  617.617103][T15213]  should_fail_ex+0x390/0x4c0
[  617.621845][T15213]  should_failslab+0x5/0x20
[  617.626387][T15213]  slab_pre_alloc_hook+0x59/0x300
[  617.631462][T15213]  kmem_cache_alloc+0x56/0x2f0
[  617.636269][T15213]  ? __alloc_file+0x25/0x230
[  617.640908][T15213]  __alloc_file+0x25/0x230
[  617.645366][T15213]  alloc_empty_file+0x90/0x180
[  617.650179][T15213]  alloc_file+0x5b/0x5f0
[  617.654470][T15213]  alloc_file_pseudo+0x180/0x200
[  617.659536][T15213]  ? alloc_empty_file_noaccount+0x80/0x80
[  617.665314][T15213]  ? bpf_lsm_perf_event_open+0x5/0x10
[  617.670733][T15213]  anon_inode_getfile+0xc1/0x1a0
[  617.675724][T15213]  __se_sys_perf_event_open+0xc2a/0x1ec0
[  617.681407][T15213]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  617.687281][T15213]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  617.692972][T15213]  ? lockdep_hardirqs_on+0x94/0x140
[  617.698215][T15213]  ? __x64_sys_perf_event_open+0x1c/0xc0
[  617.703894][T15213]  do_syscall_64+0x4c/0xa0
[  617.708364][T15213]  ? clear_bhb_loop+0x60/0xb0
[  617.713092][T15213]  ? clear_bhb_loop+0x60/0xb0
[  617.717812][T15213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  617.723758][T15213] RIP: 0033:0x7f7b8199e159
[  617.728202][T15213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.747883][T15213] RSP: 002b:00007f7b7fbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  617.756446][T15213] RAX: ffffffffffffffda RBX: 00007f7b81c26090 RCX: 00007f7b8199e159
[  617.764510][T15213] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180
[  617.772610][T15213] RBP: 00007f7b7fbd5090 R08: 0000000000000000 R09: 0000000000000000
[  617.780628][T15213] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  617.788645][T15213] R13: 00007f7b81c26128 R14: 00007f7b81c26090 R15: 00007fffacd32eb8
[  617.796670][T15213]  </TASK>
[  618.089973][T15220] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.3036'.
[  618.112868][T15220] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.3036'.
[  618.152697][T15220] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.3036'.
[  618.587214][T15230] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3041'.
[  618.686250][T14601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  618.703270][T14601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  618.711326][T14601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  618.726669][T14601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  618.749175][T14601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  618.757771][T14601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  619.219181][T14224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.517150][T14224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.652577][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'.
[  619.738480][T15247] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  619.905415][T14224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.096229][T14224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.316532][T15231] chnl_net:caif_netlink_parms(): no params data found
[  620.382796][T15265] netlink: 'syz.4.3048': attribute type 2 has an invalid length.
[  620.398255][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3048'.
[  620.471139][T15231] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.496451][T15231] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.511720][T15231] device bridge_slave_0 entered promiscuous mode
[  620.521274][T15231] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.537851][T15231] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.549397][T15231] device bridge_slave_1 entered promiscuous mode
[  620.580932][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  620.600297][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.652329][T15231] team0: Port device team_slave_0 added
[  620.679742][T15231] team0: Port device team_slave_1 added
[  620.832966][T14601] Bluetooth: hci1: command 0x0409 tx timeout
[  621.148075][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.162566][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.198070][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.212348][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.219568][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.302653][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.506526][T15286] netlink: 'syz.0.3054': attribute type 13 has an invalid length.
[  621.522957][T15286] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3054'.
[  621.574928][T15231] device hsr_slave_0 entered promiscuous mode
[  621.620264][T15231] device hsr_slave_1 entered promiscuous mode
[  621.627897][T15231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  621.638390][T15231] Cannot create hsr debugfs directory
[  621.760674][T15289] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3054'.
[  622.296898][T15289] netlink: 'syz.0.3054': attribute type 10 has an invalid length.
[  622.328448][T15289] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3054'.
[  622.917365][T14601] Bluetooth: hci1: command 0x041b tx timeout
[  623.306767][T15325] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3062'.
[  623.773933][T15333] FAULT_INJECTION: forcing a failure.
[  623.773933][T15333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.848096][T15333] CPU: 1 PID: 15333 Comm: syz.1.3063 Not tainted syzkaller #0
[  623.855629][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  623.865713][T15333] Call Trace:
[  623.869011][T15333]  <TASK>
[  623.871963][T15333]  dump_stack_lvl+0x188/0x24e
[  623.876679][T15333]  ? show_regs_print_info+0x12/0x12
[  623.881990][T15333]  ? load_image+0x410/0x410
[  623.886523][T15333]  ? __lock_acquire+0x7c40/0x7c40
[  623.891579][T15333]  ? snprintf+0xe5/0x140
[  623.895880][T15333]  should_fail_ex+0x390/0x4c0
[  623.900612][T15333]  _copy_to_user+0x2c/0x130
[  623.905149][T15333]  simple_read_from_buffer+0xe3/0x150
[  623.910670][T15333]  proc_fail_nth_read+0x1a6/0x220
[  623.915786][T15333]  ? proc_fault_inject_write+0x310/0x310
[  623.921474][T15333]  ? fsnotify_perm+0x248/0x550
[  623.926286][T15333]  ? proc_fault_inject_write+0x310/0x310
[  623.931987][T15333]  vfs_read+0x2db/0x960
[  623.936196][T15333]  ? kernel_read+0x1e0/0x1e0
[  623.940841][T15333]  ? __fget_files+0x28/0x460
[  623.945484][T15333]  ? __fget_files+0x3fc/0x460
[  623.950207][T15333]  ? __fdget_pos+0x2ae/0x360
[  623.954835][T15333]  ? ksys_read+0x70/0x260
[  623.959216][T15333]  ksys_read+0x14d/0x260
[  623.963528][T15333]  ? vfs_write+0x9a0/0x9a0
[  623.967983][T15333]  ? lockdep_hardirqs_on+0x94/0x140
[  623.973213][T15333]  do_syscall_64+0x4c/0xa0
[  623.977650][T15333]  ? clear_bhb_loop+0x60/0xb0
[  623.982340][T15333]  ? clear_bhb_loop+0x60/0xb0
[  623.987040][T15333]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.992960][T15333] RIP: 0033:0x7f5bb355e98e
[  623.997402][T15333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  624.017037][T15333] RSP: 002b:00007f5bb4384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  624.025477][T15333] RAX: ffffffffffffffda RBX: 00007f5bb43856c0 RCX: 00007f5bb355e98e
[  624.033557][T15333] RDX: 000000000000000f RSI: 00007f5bb43850a0 RDI: 000000000000000e
[  624.041544][T15333] RBP: 00007f5bb4385090 R08: 0000000000000000 R09: 0000000000000000
[  624.049532][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.057528][T15333] R13: 00007f5bb3826038 R14: 00007f5bb3825fa0 R15: 00007ffdfc597908
[  624.065539][T15333]  </TASK>
[  624.194891][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.201347][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.510716][T15350] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3066'.
[  624.547955][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  624.652779][T15350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  624.819811][T15231] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  624.901764][T15231] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  624.987035][T15231] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  624.993915][T14601] Bluetooth: hci1: command 0x040f tx timeout
[  625.417577][T15231] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  625.975709][T14224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.020185][T14224] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.075630][T15384] netlink: 'syz.4.3073': attribute type 2 has an invalid length.
[  626.097537][T14224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.123169][T15384] netlink: 'syz.4.3073': attribute type 3 has an invalid length.
[  626.130979][T15384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3073'.
[  626.160262][T14224] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.268216][T14224] device veth0_macvtap left promiscuous mode
[  626.283394][T14224] device veth1_vlan left promiscuous mode
[  627.082780][T14601] Bluetooth: hci1: command 0x0419 tx timeout
[  628.209960][T15395] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3074'.
[  628.382644][T15231] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.414785][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  628.444818][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  628.516924][T15231] 8021q: adding VLAN 0 to HW filter on device team0
[  628.638103][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  628.664440][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  628.733616][T13807] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.740835][T13807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.826836][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  628.837069][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  628.885365][T13807] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.892717][T13807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.977222][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  629.017820][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  629.058701][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  629.154737][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  629.207570][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  629.259013][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  629.347582][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  629.380063][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  629.432991][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  629.471979][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  629.501531][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  629.547506][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  629.636477][T15231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  629.979675][T15422] netlink: 'syz.2.3080': attribute type 29 has an invalid length.
[  630.146692][T15428] can: request_module (can-proto-5) failed.
[  630.180605][T15422] netlink: 'syz.2.3080': attribute type 29 has an invalid length.
[  630.257680][T15435] netlink: 'syz.2.3080': attribute type 21 has an invalid length.
[  630.470568][T15429] netlink: 'syz.2.3080': attribute type 29 has an invalid length.
[  630.574923][T15446] netlink: 'syz.4.3085': attribute type 27 has an invalid length.
[  630.682898][T15444] delete_channel: no stack
[  630.804069][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  630.811585][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  630.826883][T15231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.917074][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  630.939481][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  630.999812][T15455] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3088'.
[  631.019755][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  631.056025][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  631.103491][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  631.134219][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  631.164310][T15231] device veth0_vlan entered promiscuous mode
[  631.174778][T15456] netlink: 'syz.1.3097': attribute type 27 has an invalid length.
[  631.210680][T15231] device veth1_vlan entered promiscuous mode
[  631.252947][T15454] delete_channel: no stack
[  631.314381][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  631.323910][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  631.371311][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  631.395392][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  631.445495][T15231] device veth0_macvtap entered promiscuous mode
[  631.469031][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  631.497668][T15231] device veth1_macvtap entered promiscuous mode
[  631.541776][T15467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3092'.
[  631.672151][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.722893][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.746112][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.812674][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.842478][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.876960][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.889082][T15231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.900418][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  631.941431][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  631.968715][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.988650][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.035733][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.072067][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.199949][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.210838][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.228830][T15231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  632.238948][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  632.274512][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  632.298075][T15231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.322302][T15231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.341772][T15231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.362490][T15231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  632.717249][T11872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.738245][T11872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.754963][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  632.807485][T13807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.832718][T13807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.899061][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  633.430382][T15486] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3098'.
[  634.142962][T15494] netlink: 'syz.3.3033': attribute type 5 has an invalid length.
[  634.265140][T15498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3103'.
[  634.362037][T15498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3103'.
[  634.405098][T15500] netlink: 'syz.0.3102': attribute type 27 has an invalid length.
[  634.459122][T15496] delete_channel: no stack
[  634.468742][T15499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3103'.
[  634.797329][T15509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3105'.
[  635.594321][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  635.603892][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  635.618193][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  635.649044][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  635.658575][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  635.666275][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  636.653244][T15516] chnl_net:caif_netlink_parms(): no params data found
[  637.042981][T15516] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.050228][T15516] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.083951][T15516] device bridge_slave_0 entered promiscuous mode
[  637.139104][T15516] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.168875][T15516] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.221305][T15516] device bridge_slave_1 entered promiscuous mode
[  637.271449][T15550] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3123'.
[  637.442336][T15516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.526286][T15516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.728443][T14601] Bluetooth: hci2: command 0x0409 tx timeout
[  637.740763][ T7944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.862201][T15516] team0: Port device team_slave_0 added
[  637.900667][T15559] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3117'.
[  637.955555][T15516] team0: Port device team_slave_1 added
[  638.204801][ T7944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.303346][T15564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3119'.
[  638.399978][T15569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3121'.
[  638.432247][ T7944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.488805][T15516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.502105][T15516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.546389][T15516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.571007][T15569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3121'.
[  638.661639][T15516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.669148][T15516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.714733][T15516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  638.739548][T15572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3121'.
[  638.996317][T15516] device hsr_slave_0 entered promiscuous mode
[  639.026631][T15516] device hsr_slave_1 entered promiscuous mode
[  639.053497][T15516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  639.071407][T15516] Cannot create hsr debugfs directory
[  639.478670][T15597] device syzkaller0 entered promiscuous mode
[  639.793192][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  641.882672][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[  642.001083][T15516] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  642.240566][T15516] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  642.285204][T15516] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  642.301860][T15516] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  642.875999][T15516] 8021q: adding VLAN 0 to HW filter on device bond0
[  643.305700][ T7944] team0: Port device wlan1 removed
[  643.367854][T15682] netlink: 'syz.1.3145': attribute type 10 has an invalid length.
[  643.402962][T15682] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3145'.
[  643.444586][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  643.461494][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  643.483893][T15516] 8021q: adding VLAN 0 to HW filter on device team0
[  643.615466][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  643.665055][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  643.703150][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.710500][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.772999][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  643.838114][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  643.870560][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  643.905036][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.912272][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  643.962508][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[  643.977286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  644.061686][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  644.151755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  644.191884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  644.243126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  644.298203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  644.342223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  644.391149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  644.409401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  644.420363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  644.442256][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  644.466719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  644.921115][T15717] IPv6: pim6reg1: Disabled Multicast RS
[  645.526326][T15729] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3158'.
[  645.786952][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  645.811121][T11872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  645.845572][T15516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  645.880926][ T7944] device bridge_slave_1 left promiscuous mode
[  645.888050][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.917355][ T7944] device bridge_slave_0 left promiscuous mode
[  645.937276][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.012747][ T7944] device veth0_macvtap left promiscuous mode
[  646.441654][ T7944] team0 (unregistering): Port device geneve1 removed
[  646.993106][ T7944] team0 (unregistering): Port device team_slave_1 removed
[  647.264127][ T7944] team0 (unregistering): Port device bridge0 removed
[  647.372004][T15767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3167'.
[  647.638981][T15781] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3170'.
[  647.651882][T15781] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  647.806540][T15785] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3171'.
[  647.817817][T15785] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  648.039854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  648.049559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  648.083879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  648.093364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  648.106127][T15516] device veth0_vlan entered promiscuous mode
[  648.123395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  648.142863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  648.156843][T15516] device veth1_vlan entered promiscuous mode
[  648.241304][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  648.251951][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  648.268142][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  648.281972][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  648.296985][T15516] device veth0_macvtap entered promiscuous mode
[  648.330113][T15802] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3175'.
[  648.348747][T15516] device veth1_macvtap entered promiscuous mode
[  648.369665][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  648.379780][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  648.409662][T15801] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3175'.
[  648.425200][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.446219][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.489303][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.528414][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.540052][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.550728][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.565599][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.577455][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.601197][T15516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.621982][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  648.659760][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  648.734387][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.761739][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.801271][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.838292][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.850074][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.919018][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.948147][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.975161][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.010762][T15516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  649.059570][T15818] FAULT_INJECTION: forcing a failure.
[  649.059570][T15818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.101065][T15807] netlink: 'syz.0.3176': attribute type 27 has an invalid length.
[  649.121990][T15818] CPU: 0 PID: 15818 Comm: syz.1.3178 Not tainted syzkaller #0
[  649.123424][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  649.129508][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  649.147595][T15818] Call Trace:
[  649.150937][T15818]  <TASK>
[  649.153907][T15818]  dump_stack_lvl+0x188/0x24e
[  649.158636][T15818]  ? show_regs_print_info+0x12/0x12
[  649.163868][T15818]  ? lockdep_hardirqs_on+0x94/0x140
[  649.169132][T15818]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  649.175361][T15818]  should_fail_ex+0x390/0x4c0
[  649.180095][T15818]  _copy_from_user+0x2c/0x170
[  649.184816][T15818]  iovec_from_user+0x143/0x360
[  649.186962][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  649.189621][T15818]  __import_iovec+0x6c/0x510
[  649.189687][T15818]  import_iovec+0x6f/0xa0
[  649.206677][T15818]  ___sys_sendmsg+0x252/0x360
[  649.211397][T15818]  ? __sys_sendmsg+0x2a0/0x2a0
[  649.216244][T15818]  ? __lock_acquire+0x7c40/0x7c40
[  649.221350][T15818]  __se_sys_sendmsg+0x1c3/0x2b0
[  649.226245][T15818]  ? __x64_sys_sendmsg+0x80/0x80
[  649.231247][T15818]  ? syscall_enter_from_user_mode+0x2a/0x80
[  649.237203][T15818]  do_syscall_64+0x4c/0xa0
[  649.241660][T15818]  ? clear_bhb_loop+0x60/0xb0
[  649.246370][T15818]  ? clear_bhb_loop+0x60/0xb0
[  649.251090][T15818]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  649.257047][T15818] RIP: 0033:0x7f5bb359e159
[  649.261506][T15818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.281157][T15818] RSP: 002b:00007f5bb4385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  649.289620][T15818] RAX: ffffffffffffffda RBX: 00007f5bb3825fa0 RCX: 00007f5bb359e159
[  649.297633][T15818] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  649.305640][T15818] RBP: 00007f5bb4385090 R08: 0000000000000000 R09: 0000000000000000
[  649.313647][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.321669][T15818] R13: 00007f5bb3826038 R14: 00007f5bb3825fa0 R15: 00007ffdfc597908
[  649.329698][T15818]  </TASK>
[  649.348486][T15516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.372480][T15516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.391575][T15516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.402491][T15516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.578448][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.603892][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.636623][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  649.683951][T13807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.711189][T13807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.744808][T13807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  649.870851][T15831] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3182'.
[  650.490539][T15851] ==================================================================
[  650.498747][T15851] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[  650.506605][T15851] Write of size 48 at addr ffff88801db3f710 by task syz.4.3187/15851
[  650.514708][T15851] 
[  650.517064][T15851] CPU: 1 PID: 15851 Comm: syz.4.3187 Not tainted syzkaller #0
[  650.524570][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.534651][T15851] Call Trace:
[  650.537954][T15851]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  650.540909][T15851]  dump_stack_lvl+0x188/0x24e
[  650.545647][T15851]  ? __lock_acquire+0x7c40/0x7c40
[  650.550707][T15851]  ? show_regs_print_info+0x12/0x12
[  650.555944][T15851]  ? load_image+0x410/0x410
[  650.560514][T15851]  ? __virt_addr_valid+0x467/0x540
[  650.565864][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  650.571019][T15851]  print_report+0xa8/0x210
[  650.575480][T15851]  kasan_report+0x10b/0x140
[  650.580025][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  650.585179][T15851]  kasan_check_range+0x235/0x290
[  650.590157][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  650.595299][T15851]  memcpy+0x3c/0x60
[  650.599135][T15851]  __bpf_get_stackid+0x6c9/0x920
[  650.604110][T15851]  bpf_get_stackid_pe+0x33f/0x400
[  650.609153][T15851]  bpf_prog_ee9fdca00c0e1e15+0x28/0x3d
[  650.614624][T15851]  bpf_overflow_handler+0x50b/0x790
[  650.619838][T15851]  ? bpf_overflow_handler+0xd9/0x790
[  650.625127][T15851]  ? perf_swevent_overflow+0x230/0x230
[  650.630600][T15851]  ? ct_irq_exit_irqson+0x113/0x170
[  650.635885][T15851]  ? __kernel_text_address+0x9/0x30
[  650.641173][T15851]  ? __perf_event_account_interrupt+0x187/0x280
[  650.647442][T15851]  __perf_event_overflow+0x457/0x630
[  650.652755][T15851]  perf_swevent_event+0x315/0x570
[  650.657811][T15851]  ? perf_tp_event+0xc10/0xc10
[  650.662598][T15851]  ? __lock_acquire+0x1465/0x7c40
[  650.667657][T15851]  ___perf_sw_event+0x498/0x6d0
[  650.672533][T15851]  ? ___perf_sw_event+0x184/0x6d0
[  650.677583][T15851]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  650.684019][T15851]  ? mark_lock+0x94/0x320
[  650.688392][T15851]  ? mark_lock+0x94/0x320
[  650.692739][T15851]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  650.698741][T15851]  ? lock_chain_count+0x20/0x20
[  650.703609][T15851]  __perf_sw_event+0x135/0x260
[  650.708397][T15851]  do_user_addr_fault+0x497/0xb20
[  650.713474][T15851]  ? trace_hardirqs_off_finish+0x86/0x180
[  650.719282][T15851]  exc_page_fault+0x60/0x100
[  650.723888][T15851]  ? __might_fault+0xa6/0x120
[  650.728587][T15851]  asm_exc_page_fault+0x22/0x30
[  650.733543][T15851] RIP: 0010:__get_user_4+0x1c/0x30
[  650.738676][T15851] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba
[  650.758304][T15851] RSP: 0018:ffffc900031e7d98 EFLAGS: 00050206
[  650.764397][T15851] RAX: 000000110e22fff6 RBX: ffff88807bb29c40 RCX: 6b5194b51128a200
[  650.772386][T15851] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0
[  650.780371][T15851] RBP: ffffc900031e7ed8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[  650.788367][T15851] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 00000000c004743e
[  650.796358][T15851] R13: ffff88807bb29d18 R14: ffff88807572a780 R15: 1ffff1100eae5525
[  650.804356][T15851]  ppp_ioctl+0x559/0x1b20
[  650.808781][T15851]  ? ppp_poll+0x250/0x250
[  650.813131][T15851]  ? __fget_files+0x28/0x460
[  650.817748][T15851]  ? bpf_lsm_file_ioctl+0x5/0x10
[  650.822716][T15851]  ? security_file_ioctl+0x7c/0xa0
[  650.827851][T15851]  ? ppp_poll+0x250/0x250
[  650.832212][T15851]  __se_sys_ioctl+0xfa/0x170
[  650.836852][T15851]  do_syscall_64+0x4c/0xa0
[  650.841302][T15851]  ? clear_bhb_loop+0x60/0xb0
[  650.845998][T15851]  ? clear_bhb_loop+0x60/0xb0
[  650.850697][T15851]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.856623][T15851] RIP: 0033:0x7fef64d9e159
[  650.861052][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.880698][T15851] RSP: 002b:00007fef65c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  650.889133][T15851] RAX: ffffffffffffffda RBX: 00007fef65025fa0 RCX: 00007fef64d9e159
[  650.897136][T15851] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a
[  650.905126][T15851] RBP: 00007fef64e3503b R08: 0000000000000000 R09: 0000000000000000
[  650.913129][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  650.921125][T15851] R13: 00007fef65026038 R14: 00007fef65025fa0 R15: 00007ffda7e26ea8
[  650.929119][T15851]  </TASK>
[  650.932156][T15851] 
[  650.934488][T15851] Allocated by task 15851:
[  650.938937][T15851]  kasan_set_track+0x4b/0x70
[  650.943564][T15851]  __kasan_kmalloc+0x8e/0xa0
[  650.948175][T15851]  __kmalloc_node+0xb2/0x240
[  650.952788][T15851]  bpf_map_area_alloc+0x47/0xe0
[  650.957652][T15851]  prealloc_elems_and_freelist+0x86/0x1c0
[  650.963396][T15851]  stack_map_alloc+0x386/0x510
[  650.968186][T15851]  map_create+0x524/0xff0
[  650.972538][T15851]  __sys_bpf+0x38b/0x780
[  650.976838][T15851]  __x64_sys_bpf+0x78/0x90
[  650.981283][T15851]  do_syscall_64+0x4c/0xa0
[  650.985733][T15851]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.991661][T15851] 
[  650.994003][T15851] Last potentially related work creation:
[  650.999731][T15851]  kasan_save_stack+0x3a/0x60
[  651.004436][T15851]  __kasan_record_aux_stack+0xb2/0xc0
[  651.009840][T15851]  call_rcu+0x14f/0x950
[  651.014029][T15851]  nf_unregister_net_hooks+0xc7/0x130
[  651.019499][T15851]  cleanup_net+0x58e/0xba0
[  651.023987][T15851]  process_one_work+0x8ab/0x1160
[  651.028941][T15851]  worker_thread+0xaf5/0x12a0
[  651.033635][T15851]  kthread+0x29d/0x330
[  651.037716][T15851]  ret_from_fork+0x1f/0x30
[  651.042216][T15851] 
[  651.044568][T15851] The buggy address belongs to the object at ffff88801db3f700
[  651.044568][T15851]  which belongs to the cache kmalloc-cg-64 of size 64
[  651.058719][T15851] The buggy address is located 16 bytes inside of
[  651.058719][T15851]  64-byte region [ffff88801db3f700, ffff88801db3f740)
[  651.071835][T15851] 
[  651.074166][T15851] The buggy address belongs to the physical page:
[  651.080634][T15851] page:ffffea000076cfc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1db3f
[  651.090808][T15851] memcg:ffff8880775b5e01
[  651.095057][T15851] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  651.102624][T15851] raw: 00fff00000000200 ffffea000195c500 dead000000000005 ffff888017442780
[  651.111256][T15851] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880775b5e01
[  651.119853][T15851] page dumped because: kasan: bad access detected
[  651.126278][T15851] page_owner tracks the page as allocated
[  651.132003][T15851] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4278, tgid 4278 (syz-executor), ts 86114788357, free_ts 86114384764
[  651.150305][T15851]  post_alloc_hook+0x173/0x1a0
[  651.155102][T15851]  get_page_from_freelist+0x206b/0x2180
[  651.160795][T15851]  __alloc_pages+0x1ec/0x4f0
[  651.165414][T15851]  alloc_slab_page+0x5d/0x180
[  651.170140][T15851]  new_slab+0x87/0x2d0
[  651.174233][T15851]  ___slab_alloc+0xbc5/0x1240
[  651.178928][T15851]  __kmem_cache_alloc_node+0x126/0x270
[  651.184496][T15851]  __kmalloc_node+0xa2/0x240
[  651.189134][T15851]  kvmalloc_node+0x6c/0x180
[  651.193670][T15851]  nf_hook_entries_grow+0x31a/0x760
[  651.198896][T15851]  nf_hook_entries_insert_raw+0x47/0x300
[  651.204555][T15851]  nf_nat_register_fn+0x1d9/0x540
[  651.209694][T15851]  iptable_nat_table_init+0x19f/0x2d0
[  651.215131][T15851]  xt_find_table_lock+0x220/0x360
[  651.220251][T15851]  xt_request_find_table_lock+0x22/0x100
[  651.225904][T15851]  do_ipt_get_ctl+0x6e2/0x11a0
[  651.230692][T15851] page last free stack trace:
[  651.235375][T15851]  free_unref_page_prepare+0x8e5/0x9e0
[  651.240855][T15851]  free_unref_page+0x2e/0x3f0
[  651.245547][T15851]  __vunmap+0x874/0xa40
[  651.249719][T15851]  do_ipt_get_ctl+0xe89/0x11a0
[  651.254499][T15851]  nf_getsockopt+0x25e/0x280
[  651.259130][T15851]  ip_getsockopt+0x19b/0x230
[  651.263920][T15851]  __sys_getsockopt+0x1b0/0x230
[  651.268799][T15851]  __x64_sys_getsockopt+0xb1/0xc0
[  651.273839][T15851]  do_syscall_64+0x4c/0xa0
[  651.278276][T15851]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  651.284216][T15851] 
[  651.286555][T15851] Memory state around the buggy address:
[  651.292201][T15851]  ffff88801db3f600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  651.300281][T15851]  ffff88801db3f680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  651.308352][T15851] >ffff88801db3f700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  651.316430][T15851]                                   ^
[  651.321816][T15851]  ffff88801db3f780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  651.329895][T15851]  ffff88801db3f800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  651.337964][T15851] ==================================================================
[  651.346053][T15851] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  651.353299][T15851] CPU: 1 PID: 15851 Comm: syz.4.3187 Not tainted syzkaller #0
[  651.360779][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  651.370859][T15851] Call Trace:
[  651.374158][T15851]  <TASK>
[  651.377108][T15851]  dump_stack_lvl+0x188/0x24e
[  651.381814][T15851]  ? memcpy+0x3c/0x60
[  651.385816][T15851]  ? show_regs_print_info+0x12/0x12
[  651.391033][T15851]  ? load_image+0x410/0x410
[  651.395594][T15851]  panic+0x2d3/0x710
[  651.399518][T15851]  ? bpf_jit_dump+0xd0/0xd0
[  651.404044][T15851]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  651.409959][T15851]  ? _raw_spin_unlock+0x40/0x40
[  651.414857][T15851]  ? print_memory_metadata+0x314/0x400
[  651.420347][T15851]  check_panic_on_warn+0x80/0xa0
[  651.425314][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  651.430446][T15851]  end_report+0x66/0x110
[  651.434723][T15851]  kasan_report+0x118/0x140
[  651.439253][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  651.444385][T15851]  kasan_check_range+0x235/0x290
[  651.449358][T15851]  ? __bpf_get_stackid+0x6c9/0x920
[  651.454493][T15851]  memcpy+0x3c/0x60
[  651.458328][T15851]  __bpf_get_stackid+0x6c9/0x920
[  651.463302][T15851]  bpf_get_stackid_pe+0x33f/0x400
[  651.468385][T15851]  bpf_prog_ee9fdca00c0e1e15+0x28/0x3d
[  651.473865][T15851]  bpf_overflow_handler+0x50b/0x790
[  651.479083][T15851]  ? bpf_overflow_handler+0xd9/0x790
[  651.484401][T15851]  ? perf_swevent_overflow+0x230/0x230
[  651.489881][T15851]  ? ct_irq_exit_irqson+0x113/0x170
[  651.495100][T15851]  ? __kernel_text_address+0x9/0x30
[  651.500318][T15851]  ? __perf_event_account_interrupt+0x187/0x280
[  651.506589][T15851]  __perf_event_overflow+0x457/0x630
[  651.511905][T15851]  perf_swevent_event+0x315/0x570
[  651.517049][T15851]  ? perf_tp_event+0xc10/0xc10
[  651.521840][T15851]  ? __lock_acquire+0x1465/0x7c40
[  651.526894][T15851]  ___perf_sw_event+0x498/0x6d0
[  651.531771][T15851]  ? ___perf_sw_event+0x184/0x6d0
[  651.536823][T15851]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  651.543260][T15851]  ? mark_lock+0x94/0x320
[  651.547637][T15851]  ? mark_lock+0x94/0x320
[  651.551992][T15851]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  651.557999][T15851]  ? lock_chain_count+0x20/0x20
[  651.562887][T15851]  __perf_sw_event+0x135/0x260
[  651.567685][T15851]  do_user_addr_fault+0x497/0xb20
[  651.572739][T15851]  ? trace_hardirqs_off_finish+0x86/0x180
[  651.578482][T15851]  exc_page_fault+0x60/0x100
[  651.583093][T15851]  ? __might_fault+0xa6/0x120
[  651.588009][T15851]  asm_exc_page_fault+0x22/0x30
[  651.592881][T15851] RIP: 0010:__get_user_4+0x1c/0x30
[  651.598120][T15851] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba
[  651.617763][T15851] RSP: 0018:ffffc900031e7d98 EFLAGS: 00050206
[  651.623867][T15851] RAX: 000000110e22fff6 RBX: ffff88807bb29c40 RCX: 6b5194b51128a200
[  651.631860][T15851] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0
[  651.639852][T15851] RBP: ffffc900031e7ed8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[  651.647839][T15851] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 00000000c004743e
[  651.655837][T15851] R13: ffff88807bb29d18 R14: ffff88807572a780 R15: 1ffff1100eae5525
[  651.663850][T15851]  ppp_ioctl+0x559/0x1b20
[  651.668206][T15851]  ? ppp_poll+0x250/0x250
[  651.672552][T15851]  ? __fget_files+0x28/0x460
[  651.677176][T15851]  ? bpf_lsm_file_ioctl+0x5/0x10
[  651.682136][T15851]  ? security_file_ioctl+0x7c/0xa0
[  651.687284][T15851]  ? ppp_poll+0x250/0x250
[  651.691642][T15851]  __se_sys_ioctl+0xfa/0x170
[  651.696258][T15851]  do_syscall_64+0x4c/0xa0
[  651.700696][T15851]  ? clear_bhb_loop+0x60/0xb0
[  651.705387][T15851]  ? clear_bhb_loop+0x60/0xb0
[  651.710079][T15851]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  651.716086][T15851] RIP: 0033:0x7fef64d9e159
[  651.721478][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.741105][T15851] RSP: 002b:00007fef65c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  651.749533][T15851] RAX: ffffffffffffffda RBX: 00007fef65025fa0 RCX: 00007fef64d9e159
[  651.757517][T15851] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a
[  651.765510][T15851] RBP: 00007fef64e3503b R08: 0000000000000000 R09: 0000000000000000
[  651.773495][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  651.781481][T15851] R13: 00007fef65026038 R14: 00007fef65025fa0 R15: 00007ffda7e26ea8
[  651.789475][T15851]  </TASK>
[  651.793093][T15851] Kernel Offset: disabled
[  651.797424][T15851] Rebooting in 86400 seconds..