last executing test programs:

6.48858198s ago: executing program 3 (id=3909):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x2d, 0x2, 0x9, 0xf4, 0x0, 0x6, 0x4002, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x6}, 0x10002, 0x20000000000000, 0x2, 0x3, 0x3a8dc0000, 0x2, 0x3, 0x0, 0x80000000})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x99, 0x0, &(0x7f0000000280)="63ec33c9e9b966af106ef27773dd86000000000000005031793553a3375377f59f5e128cfcfcb492172ad9d50b58f06969b98da56de52cafb8d93e60be858a305280db26e0fc7e801c215655c338e7e414c1e049350c19845f01558241e617743ebf0a99c561a083991a381f1ce0aa0a97917c732c8b1ebb754e7e83b2a06077411d9cd177cb242e1d0acf1adcaa774bf410b41fb10c11c04e", 0x0, 0x2, 0x0, 0x0, 0x35, 0x0, 0x0, 0x7, 0x0, 0xb}, 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10)

6.318414914s ago: executing program 3 (id=3911):
socket$kcm(0xa, 0x3, 0x73)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x74}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x4dc40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000001140), 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000300)=[0x0], 0x0, 0x3c, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x19, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x3}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8902, &(0x7f0000000080))
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000003000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)

6.008705582s ago: executing program 3 (id=3917):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x18, 0x84, 0x0, 'b'}], 0x18, 0x10000120}, 0x880)

5.172531132s ago: executing program 0 (id=3932):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xf, 0x3, 0x6}]}]}, {0x0, [0x4f, 0x0, 0x61, 0x5f]}}, &(0x7f0000000680)=""/183, 0x36, 0xb7, 0x1, 0xf, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x6, 0x8, 0x10000, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0xc1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd0}, @ldst={0x2, 0x3, 0x1, 0x8, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @jmp={0x5, 0x1, 0xa, 0x8, 0x2, 0xfffffffffffffff0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x22, &(0x7f0000000440)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x0, 0xcaa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[r3, 0xffffffffffffffff, r6], &(0x7f0000000a80)=[{0x2, 0x5, 0x0, 0xa}, {0x5, 0x1, 0x10, 0x4}, {0x0, 0x1, 0xd}, {0x3, 0x5, 0x5, 0x5}, {0x1, 0x3, 0x0, 0x8}], 0x10, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f4aab81, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x9, 0x1, 0x8, 0x9}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0xfffffffd, 0x42, &(0x7f0000000300)=""/66, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xa, 0x7fffffff, 0x95}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x4, 0xe, 0x7}, {0x4, 0x1, 0x8}, {0x1, 0x1, 0x10, 0x1}], 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

4.956336598s ago: executing program 3 (id=3934):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe00fffffffe", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.835482811s ago: executing program 0 (id=3937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27355}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

4.782583212s ago: executing program 2 (id=3938):
r0 = socket$kcm(0x2, 0x3, 0x106) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
close(r6) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r8 = socket$kcm(0x2b, 0x1, 0x0) (async)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000003000000a1b900000300000002420000", @ANYRES32=r6, @ANYBLOB="0700000000833700"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000005000000010000000200"/28], 0x50)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r8) (async)
openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) (async)
r12 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r12, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, <r13=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r11}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000000900000000000007000000000000005f612e5f2106d110"], 0x0, 0x30, 0x0, 0x1}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r13}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) (async)
setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000001c0), 0x45) (async)
close(r8)

4.728086253s ago: executing program 3 (id=3939):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000410000"], 0xffdd)

4.664217035s ago: executing program 0 (id=3940):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x4}, 0x11, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000700)="7d56b8b0b165c9e837fdc5b7419c73b92b7b5c00100a748503dcbdf9ad827ea19f6b468c4e8667e4bb34d460ed868bfa9e01c68a639f29d0276c734822274d4919b3d68c5a963f2e6b24e36c824b5c35d95de77c3af8e2a8036047718011f39c9be38162720bce2b182b94ca03db11c9a0b01d10541a5784fa033afd0eb522c0bd6c236bb3784e1230e6c0309fd52206581e9f9ff6184e6311a66578f891bff0cc334a67a4b3b69ba127eee7cf5e2f71dd6a26cd395c4fdc9cf697130326428d5ca643315704f3ccc43a89da370f7b", 0x1, r3}, 0x38) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x2, 0x7, 0x9, 0x1800, r4, 0x5, '\x00', 0x0, r3, 0x4, 0x3, 0x1, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%ps    \x00'}, 0x20) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x2, 0x0, 0x0, 0x10001, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x407fff}, 0xffffffffffffffff, 0x0, r1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x227c, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r6}, 0x38) (async)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async)
openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x82042, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f0ffffff9500"/24], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50)

4.538667208s ago: executing program 1 (id=3941):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x76}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x22, 0x80000, 0xfffffffe, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r5, r4})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r4, 0x6, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x2, 0x2, 0x3, 0xe}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}], 0x10, 0x7fff}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})
bpf$MAP_CREATE(0x0, 0x0, 0x48)

3.758020387s ago: executing program 2 (id=3942):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x18, 0x84, 0x0, 'b'}], 0x18, 0x10000120}, 0x880)

3.593498302s ago: executing program 1 (id=3943):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000300004000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000800850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x6400, 0x0, 0x0}, 0x50)

3.342510328s ago: executing program 1 (id=3944):
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x3, 0xc2b6, 0x7, 0x0, 0x1, 0xa6a, 0x0, 0x2000000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
socket$kcm(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000009e4f2d75f23b43599886b15054f5e02f982ea400000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x641b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x50}, 0x28)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4040040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a0001", 0x37}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)

2.726833353s ago: executing program 2 (id=3945):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x4, 0x3, 0xa}, {0x3, 0x1, 0x1}]}, 0x94)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x8a, 0x4, 0x9, 0x13, 0x0, 0x3, 0x1c08, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x18a, 0x2}, 0x300, 0xffffffffffffff37, 0x9, 0x4, 0x1c20, 0x7, 0x9, 0x0, 0xffffff81, 0x0, 0x5}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x1, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4d3f}, 0x18342, 0x8, 0x0, 0x1, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0xc, 0x8d, 0x9, 0xff, 0x0, 0x4, 0x90212, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x4}, 0x2000, 0xfffffffffffffff8, 0x5, 0x5, 0xffff, 0xa265, 0x9, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000002a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x20000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfdef)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0x1}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040), 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x891a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, &(0x7f0000000000), 0x8)
sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x500, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x24000044)

627.032554ms ago: executing program 1 (id=3946):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xf, 0x3, 0x6}]}]}, {0x0, [0x4f, 0x0, 0x61, 0x5f]}}, &(0x7f0000000680)=""/183, 0x36, 0xb7, 0x1, 0xf, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x6, 0x8, 0x10000, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0xc1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd0}, @ldst={0x2, 0x3, 0x1, 0x8, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @jmp={0x5, 0x1, 0xa, 0x8, 0x2, 0xfffffffffffffff0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x22, &(0x7f0000000440)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x0, 0xcaa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[r3, 0xffffffffffffffff, r6], &(0x7f0000000a80)=[{0x2, 0x5, 0x0, 0xa}, {0x5, 0x1, 0x10, 0x4}, {0x0, 0x1, 0xd}, {0x3, 0x5, 0x5, 0x5}, {0x1, 0x3, 0x0, 0x8}], 0x10, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f4aab81, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x9, 0x1, 0x8, 0x9}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0xfffffffd, 0x42, &(0x7f0000000300)=""/66, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xa, 0x7fffffff, 0x95}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x4, 0xe, 0x7}, {0x4, 0x1, 0x8}, {0x1, 0x1, 0x10, 0x1}], 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

550.747566ms ago: executing program 2 (id=3947):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000300020006000a0000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a00000fcff", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010)

550.415946ms ago: executing program 0 (id=3948):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r2, @ANYRES8=r2], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x19}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xfffffffffffffdff, r0, 0x9)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

526.366647ms ago: executing program 3 (id=3949):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x40}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)
r7 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x8d008000, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000400), 0x12) (async)
write$cgroup_pid(r9, &(0x7f0000000400), 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50)
socket$kcm(0x29, 0x0, 0x0) (async)
socket$kcm(0x29, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

416.032529ms ago: executing program 1 (id=3950):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x11, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000005b40)=""/4110, 0x100e}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000100)=""/12, 0xc}], 0x4}, 0x40000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x1a, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x83}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x6, 0xffffffffffffffff, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x0, 0x2, 0x8001, 0x40, 0xffffffffffffffff, 0xffff117e, '\x00', 0x0, r2, 0x5, 0x1, 0x1}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040)
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
close(r6)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
close(r6)

415.732769ms ago: executing program 2 (id=3951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

337.057051ms ago: executing program 0 (id=3952):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20000000}, 0x94)

243.768894ms ago: executing program 2 (id=3953):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, 0x0, 0x300060c1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x0, [{@loopback, 0xe}, {@private=0xa010102, 0x7fffffff}, {@loopback, 0xaa}, {@local, 0xffffffff}, {@rand_addr=0x64010100, 0x2}, {@local, 0xfffffff8}, {@local, 0x45a}]}, @timestamp_addr={0x44, 0x4, 0x54, 0x1, 0xf}]}}}], 0x50}, 0x4008804)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
sendmsg$kcm(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)="5ac8e8f520e9229b134bbf6c0ab4e46139e510f869cbc323ac3fb8d70e823552f782bdac2e5a44befa24274a2fb2e703d7ad1bb587a5b060321642f9f6cba4926828a2224a388e9348cb36daf63fe43c8741ed6c0b04a191483e4ef508487e6b6b71bbadd10d4e05dc676e94612134c129104aa4fa6b14b868232cd413af22f10119d4f309bbddb8d9be8098528d5a69b18763f31c438eaa9996f9ca447d4441e05eb96bf8c1eef8", 0xa8}, {&(0x7f0000000780)="316a374d3594ce3b51b381d04ab90d92d0ab03ca394bba025090bed1a3f0e4ce48ac4cb1b92e0275b1c812f696", 0x2d}, {&(0x7f00000007c0)="f263e1", 0x3}, {&(0x7f0000000900)="8b3095ada55eb5e74912257ee6a04f25dae1f3b39feb5a742c45f9edfe41f8348b926dfe1a60c67bdca496e6214d7d303b99bf527cac8a90ba0add740e24f72028b26fde28c7e3f91bd788cc97135ae970c7caeffba3573368105b896df03aa6", 0x60}, {&(0x7f0000000980)="c4801ff55e8873488a61360e12dc949b6253391da0320efd480ee17863cda774a0b53c6451fece42d10a0ebd3191a444c1c827939b6596f5fd7574dfea1aa57599ec7055593ba26d948e5404f1c404617bd449caa0", 0x55}, {&(0x7f0000000a00)="493babaf821ef17bf518f14b57a0e817d5d30eb1e74de286c5d223e1ca9964fa0b178524190ff6b8cd31f780bafa72b19e3a143e91a5e01c920b846710cd5f63344c8e5a22e913646e7ce6ddc164751d504eda200bef3229c072718222ffdcbb64b9734608f66837d7e18e1c57c71a3fca36b37a9e3b979cedc5e5deb79c305ce87b372bebcca5316de7a40684c0e0e456f5cbec66f9f18c555c7ea59b5e88133ec616358a129e957d1059ef", 0xac}, {&(0x7f0000000ac0)="e7c570ac07085bef870f18474dd5e4a02e65740991d6fbd2b48484ee4c685f9f19b12d701b5d73c5114064d8e9a309d6dcc4075c063fee3dd29e058722b7c2b0c5a8e4784b8d05cf2c1b494da26b9b3598383820bd2c94e74e9a09689196d748a6ec2e7733f16f8afc8097a93a89a595f160533e7a22a2fab39314d7ff48382dc51b", 0x82}, {&(0x7f0000000b80)="3564b3f024e1e95fa3e6ce8561c02b16586598ead76fc35e269166b2f08eb63fe286dc2fa7fc268074bb2eba9a958fbb7fc55b2beaae6a82a24f3147f3b2ef081543471cb9a82b472aea97c6439570fe35a18b285abf69d5c285e5dda99a34652e617d6e43637eb34887b243c6573c2c78978f9f32b41166efad8407f9de163c106c055135696ace1cdb4d70e60768e1929ac9eea170dec32a797b8650b3f13acc70ba2431300f7f06723d1427d6", 0xae}, {&(0x7f0000000c40)="10e2a4390748d2057b92a274d861467607b82ccd425dba8bc81d3932991f1f88bd5b94ad3a3fac2adfe4bff96f473399c12f4aa1d32608c4a4d491b5cea6db0099e42b", 0x43}], 0x9}, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000079107747000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000004000000c3000000000500139500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c)
r8 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000240), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000003800000121f", 0x2e}], 0x1}, 0x0)

191.692815ms ago: executing program 0 (id=3954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0xc00, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc)
r6 = socket$kcm(0x2, 0x200000000000006, 0x0)
recvmsg$kcm(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)}, 0x40)
socket$kcm(0x29, 0x5, 0x0)

0s ago: executing program 1 (id=3955):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000040000010852000008441030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdfc}, 0x94)

kernel console output (not intermixed with test programs):

55][T12940] delete_channel: no stack
[  487.468522][T12915] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2443'.
[  487.516418][T12939] Ÿë
: port 1(hsr_slave_0) entered blocking state
[  487.541040][T12939] Ÿë
: port 1(hsr_slave_0) entered disabled state
[  487.550494][T12939] hsr_slave_0: entered allmulticast mode
[  487.562418][T12939] hsr_slave_0: left allmulticast mode
[  487.570740][T12941] netlink: 'syz.1.2448': attribute type 10 has an invalid length.
[  487.709020][T12941] team0 (unregistering): Port device team_slave_0 removed
[  487.736644][T12941] team0 (unregistering): Port device team_slave_1 removed
[  487.820876][T12952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2449'.
[  487.850922][T12948] netlink: 'syz.2.2449': attribute type 3 has an invalid length.
[  487.898054][T12948] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2449'.
[  488.203646][T12761] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  488.227882][T12761] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  488.254982][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2455'.
[  488.296889][T12761] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  488.326973][T12761] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  488.677439][T12761] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.777440][T12979] netlink: 'syz.2.2460': attribute type 10 has an invalid length.
[  488.837076][T12761] 8021q: adding VLAN 0 to HW filter on device team0
[  488.847185][T12978] delete_channel: no stack
[  488.892696][T10059] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.899970][T10059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.955609][T10059] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.962830][T10059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.207278][T12992] netlink: 'syz.2.2464': attribute type 2 has an invalid length.
[  489.362233][T13000] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2465'.
[  489.509691][T13001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2465'.
[  489.976906][T13021] netlink: 'syz.3.2470': attribute type 10 has an invalid length.
[  490.051551][T13020] delete_channel: no stack
[  490.060774][T12761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.359607][T12761] veth0_vlan: entered promiscuous mode
[  490.472808][T12761] veth1_vlan: entered promiscuous mode
[  490.509207][T12761] veth0_macvtap: entered promiscuous mode
[  490.541954][T13027] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2468'.
[  490.632220][T13027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.800470][T12761] veth1_macvtap: entered promiscuous mode
[  490.888146][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.916740][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.955321][T12761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.981158][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.013603][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.033927][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.064051][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.098286][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.118754][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.157716][T12761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.197885][T12761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.208706][T12761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.229553][T12761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.259609][T12761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.494295][T10046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.526019][T10046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.616998][T13057] netlink: 'syz.3.2478': attribute type 10 has an invalid length.
[  491.619183][T10046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.661202][T10046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.672849][T13056] delete_channel: no stack
[  491.963737][T13066] C: renamed from team_slave_0
[  492.272739][T13066] netlink: 'syz.3.2479': attribute type 3 has an invalid length.
[  492.344355][T13066] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2479'.
[  492.386076][T13066] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  493.462007][T13085] netlink: 'syz.1.2481': attribute type 2 has an invalid length.
[  493.482694][T13085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2481'.
[  494.845386][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  494.893952][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  494.902615][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  494.911256][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  494.920095][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  494.931323][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  495.424959][T13109] netlink: 'syz.1.2486': attribute type 10 has an invalid length.
[  495.450899][T13108] delete_channel: no stack
[  496.092078][T13127] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2488'.
[  496.167253][T13128] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2488'.
[  496.278461][T10048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.629986][T10048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.924436][T10048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.991713][ T5780] Bluetooth: hci1: command tx timeout
[  497.140007][T10048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.745135][T13163] netlink: 'syz.2.2496': attribute type 10 has an invalid length.
[  498.195826][T13114] chnl_net:caif_netlink_parms(): no params data found
[  498.860649][T13114] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.874065][T13114] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.881371][T13114] bridge_slave_0: entered allmulticast mode
[  498.899948][T13114] bridge_slave_0: entered promiscuous mode
[  499.006307][T13114] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.061296][ T5780] Bluetooth: hci1: command tx timeout
[  499.074428][T13114] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.100114][T13114] bridge_slave_1: entered allmulticast mode
[  499.108548][T13114] bridge_slave_1: entered promiscuous mode
[  499.315743][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.378869][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.609103][T13114] team0: Port device team_slave_0 added
[  499.626984][T13114] team0: Port device team_slave_1 added
[  499.717663][T13204] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  499.733734][T13204] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  499.862276][T13205] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  499.886122][T13205] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  499.968696][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.999512][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.052676][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.096868][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.128514][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.209088][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.274332][T13218] netlink: 'syz.0.2509': attribute type 10 has an invalid length.
[  500.461442][T13218] team0 (unregistering): Port device team_slave_0 removed
[  500.501996][T13218] team0 (unregistering): Port device team_slave_1 removed
[  500.635287][T13216] delete_channel: no stack
[  500.750129][T13114] hsr_slave_0: entered promiscuous mode
[  500.784149][T13114] hsr_slave_1: entered promiscuous mode
[  500.803537][T13114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  500.811181][T13114] Cannot create hsr debugfs directory
[  501.136778][ T5780] Bluetooth: hci1: command tx timeout
[  501.337039][T10048] hsr_slave_0: left promiscuous mode
[  501.360088][T10048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.385264][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.408499][T10048] batman_adv: batadv0: Interface deactivated: vlan1
[  501.429096][T10048] batman_adv: batadv0: Removing interface: vlan1
[  501.449422][T10048] batadv0: left allmulticast mode
[  501.463668][T10048] batadv0: left promiscuous mode
[  501.468926][T10048] bridge0: port 4(batadv0) entered disabled state
[  501.490343][T10048] dummy0: left allmulticast mode
[  501.495470][T10048] dummy0: left promiscuous mode
[  501.504102][T10048] bridge0: port 3(dummy0) entered disabled state
[  501.532778][T10048] bridge_slave_0: left allmulticast mode
[  501.538625][T10048] bridge_slave_0: left promiscuous mode
[  501.548989][T10048] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.622472][T10048] veth1_macvtap: left promiscuous mode
[  501.628556][T10048] veth0_macvtap: left promiscuous mode
[  501.634567][T10048] veth0_vlan: left promiscuous mode
[  501.718735][T13255] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2514'.
[  502.018711][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  502.025793][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  503.216326][ T5780] Bluetooth: hci1: command tx timeout
[  504.974478][T13253] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2514'.
[  506.112632][T13272] netlink: 'syz.0.2518': attribute type 10 has an invalid length.
[  506.140161][T13271] delete_channel: no stack
[  506.194484][T13277] sit0: left promiscuous mode
[  506.653317][T13281] sit0: entered promiscuous mode
[  507.404737][T13303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2523'.
[  507.461940][T13114] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  507.474555][T13114] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  507.517805][T13114] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  507.559008][T13114] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  507.788524][T13114] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.839549][T13114] 8021q: adding VLAN 0 to HW filter on device team0
[  507.876062][T13317] netlink: 'syz.1.2528': attribute type 1 has an invalid length.
[  507.897450][T10048] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.904807][T10048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.922536][T13317] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2528'.
[  508.007030][T10048] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.014325][T10048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.789085][T13114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.999774][T13114] veth0_vlan: entered promiscuous mode
[  509.045127][T13114] veth1_vlan: entered promiscuous mode
[  509.159693][T13114] veth0_macvtap: entered promiscuous mode
[  509.198210][T13114] veth1_macvtap: entered promiscuous mode
[  509.280559][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  509.323770][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.353623][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  509.386214][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.432274][T13114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  509.551175][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  509.570219][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.580926][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  509.606225][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.619138][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  509.633328][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.685969][T13114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.728965][T13114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.815010][T13114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.834655][T13114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.853538][T13114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.867070][T10049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.923514][T10049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.966881][T10049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.978774][T10049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.638045][T13417] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2553'.
[  511.915450][T13417] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2553'.
[  512.545764][T13428] netlink: 'syz.0.2555': attribute type 25 has an invalid length.
[  512.610247][T13428] netlink: 'syz.0.2555': attribute type 10 has an invalid length.
[  512.924052][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  512.933210][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  512.942592][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  512.960479][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  512.969329][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  512.978492][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  513.019037][T10054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.180746][T13446] netlink: 'syz.1.2559': attribute type 10 has an invalid length.
[  513.242687][T13446] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2559'.
[  513.284221][T13446] hsr0: entered promiscuous mode
[  513.296343][T13446] bridge0: port 3(hsr0) entered blocking state
[  513.320016][T13446] bridge0: port 3(hsr0) entered disabled state
[  513.333799][T13446] hsr0: entered allmulticast mode
[  513.341899][T13446] hsr_slave_0: entered allmulticast mode
[  513.367061][T13446] hsr_slave_1: entered allmulticast mode
[  513.389206][T13446] bridge0: port 3(hsr0) entered blocking state
[  513.395645][T13446] bridge0: port 3(hsr0) entered forwarding state
[  513.426657][T13444] netlink: 'syz.0.2558': attribute type 10 has an invalid length.
[  513.447390][T13444] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.455887][T13444] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.605418][T10054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.780202][T10054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.050949][T10054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.867866][T13437] chnl_net:caif_netlink_parms(): no params data found
[  515.142281][ T5088] Bluetooth: hci0: command tx timeout
[  515.588304][T13498] sit0: entered allmulticast mode
[  515.635982][T13499] sit0: entered promiscuous mode
[  516.309567][T13437] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.317046][T13437] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.325319][T13437] bridge_slave_0: entered allmulticast mode
[  516.333208][T13437] bridge_slave_0: entered promiscuous mode
[  516.346413][T13522] netlink: 'syz.1.2571': attribute type 3 has an invalid length.
[  516.411912][T13522] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2571'.
[  516.422229][T13437] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.443721][T13437] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.451094][T13437] bridge_slave_1: entered allmulticast mode
[  516.512579][T13437] bridge_slave_1: entered promiscuous mode
[  516.838454][T13524] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2571'.
[  517.004404][T13437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.155840][T13437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.221939][ T5088] Bluetooth: hci0: command tx timeout
[  517.361755][T13437] team0: Port device team_slave_0 added
[  517.695051][T13437] team0: Port device team_slave_1 added
[  518.117241][T13437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.144080][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.223546][T13437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.481207][T13437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.498912][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.583500][T13437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.794408][T13558] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2576'.
[  518.823917][T13558] hsr_slave_0: left promiscuous mode
[  518.902932][T13558] hsr_slave_1: left promiscuous mode
[  519.087492][T13437] hsr_slave_0: entered promiscuous mode
[  519.145556][T13437] hsr_slave_1: entered promiscuous mode
[  519.153733][T13437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.164488][T13437] Cannot create hsr debugfs directory
[  519.301323][ T5088] Bluetooth: hci0: command tx timeout
[  519.564174][T13574] sit0: entered allmulticast mode
[  519.589402][T13576] sit0: entered promiscuous mode
[  520.325407][T10054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.333160][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.353148][T10054] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  520.371042][T10054] batman_adv: batadv0: Removing interface: virt_wifi0
[  520.385607][T10054] batman_adv: batadv0: Interface deactivated: vlan1
[  520.396432][T10054] batman_adv: batadv0: Removing interface: vlan1
[  520.404883][T10054] dummy0: left allmulticast mode
[  520.409893][T10054] dummy0: left promiscuous mode
[  520.421919][T10054] bridge0: port 2(dummy0) entered disabled state
[  520.431751][T10054] batadv0: left allmulticast mode
[  520.442640][T10054] batadv0: left promiscuous mode
[  520.448159][T10054] bridge0: port 3(batadv0) entered disabled state
[  520.482357][T10054] bridge_slave_0: left allmulticast mode
[  520.493761][T10054] bridge_slave_0: left promiscuous mode
[  520.499638][T10054] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.556490][T10054] veth1_macvtap: left promiscuous mode
[  520.562141][T10054] veth0_macvtap: left promiscuous mode
[  520.584782][T10054] veth1_vlan: left promiscuous mode
[  520.590229][T10054] veth0_vlan: left promiscuous mode
[  521.387008][ T5088] Bluetooth: hci0: command tx timeout
[  522.047546][T13611] netlink: 'syz.1.2587': attribute type 29 has an invalid length.
[  522.117682][T13611] netlink: 'syz.1.2587': attribute type 29 has an invalid length.
[  522.316975][T13616] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2589'.
[  522.349424][T13616] hsr_slave_0: left promiscuous mode
[  522.397924][T13616] hsr_slave_1: left promiscuous mode
[  523.468803][T13652] FAULT_INJECTION: forcing a failure.
[  523.468803][T13652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.508858][T13652] CPU: 0 PID: 13652 Comm: syz.0.2603 Not tainted syzkaller #0
[  523.516430][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  523.526555][T13652] Call Trace:
[  523.529881][T13652]  <TASK>
[  523.532867][T13652]  dump_stack_lvl+0x18c/0x250
[  523.537630][T13652]  ? show_regs_print_info+0x20/0x20
[  523.542962][T13652]  ? load_image+0x420/0x420
[  523.547559][T13652]  ? __might_fault+0xaa/0x120
[  523.552312][T13652]  ? __lock_acquire+0x7eb0/0x7eb0
[  523.557419][T13652]  should_fail_ex+0x394/0x4c0
[  523.562186][T13652]  _copy_from_user+0x2f/0xe0
[  523.566856][T13652]  ___sys_sendmsg+0x1c7/0x360
[  523.571627][T13652]  ? __sys_sendmsg+0x2b0/0x2b0
[  523.576528][T13652]  __se_sys_sendmsg+0x1d0/0x2c0
[  523.581454][T13652]  ? perf_trace_preemptirq_template+0x269/0x330
[  523.587770][T13652]  ? __x64_sys_sendmsg+0x80/0x80
[  523.592802][T13652]  ? lockdep_hardirqs_on+0x98/0x150
[  523.598169][T13652]  do_syscall_64+0x55/0xb0
[  523.602660][T13652]  ? clear_bhb_loop+0x40/0x90
[  523.607409][T13652]  ? clear_bhb_loop+0x40/0x90
[  523.612156][T13652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.618139][T13652] RIP: 0033:0x7fcda3d9e1d9
[  523.622660][T13652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.642865][T13652] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  523.651452][T13652] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  523.659594][T13652] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000007
[  523.667811][T13652] RBP: 00007fcda4d42090 R08: 0000000000000000 R09: 0000000000000000
[  523.675849][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.684070][T13652] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  523.692129][T13652]  </TASK>
[  523.816818][T13437] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  523.849397][T13437] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  523.880363][T13437] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  523.911876][T13437] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  524.450546][T13437] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.547592][T13437] 8021q: adding VLAN 0 to HW filter on device team0
[  524.588031][T10050] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.595320][T10050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.641571][T10050] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.648843][T10050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.725435][T13685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2601'.
[  524.755587][T13685] hsr_slave_0: left promiscuous mode
[  524.774815][T13685] hsr_slave_1: left promiscuous mode
[  524.803283][T13685] bridge0: port 3(hsr0) entered disabled state
[  524.867292][T13685] hsr0 (unregistering): left allmulticast mode
[  524.873911][T13685] bridge0: port 3(hsr0) entered disabled state
[  525.231760][T13437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.300012][T13437] veth0_vlan: entered promiscuous mode
[  525.317016][T13437] veth1_vlan: entered promiscuous mode
[  525.357009][T13437] veth0_macvtap: entered promiscuous mode
[  525.368660][T13437] veth1_macvtap: entered promiscuous mode
[  525.397474][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.408783][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.420343][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.443777][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.463738][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.490097][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.503328][T13437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.528734][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.544080][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.560396][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.571911][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.582146][T13437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.592972][T13437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.611256][T13437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.623371][T13437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.636912][T13437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.645879][T13437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.659117][T13437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.781890][T10054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.803542][T10054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.841788][T10054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.850760][T10054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.664705][T13737] netlink: 'syz.3.2607': attribute type 10 has an invalid length.
[  526.952202][T13737] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.070245][T13737] team0: Port device bond0 added
[  527.102361][T13742] netlink: 'syz.2.2610': attribute type 10 has an invalid length.
[  527.491362][T13741] delete_channel: no stack
[  527.797991][T13742] team0 (unregistering): Port device team_slave_0 removed
[  527.839344][T13742] team0 (unregistering): Port device team_slave_1 removed
[  528.733743][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.744002][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.753758][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.763638][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.773368][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.783221][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.792886][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.802835][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.812569][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  528.822371][T13788] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  529.594271][T13800] syzkaller0: entered promiscuous mode
[  529.603688][T13800] syzkaller0: entered allmulticast mode
[  533.843313][T13848] netlink: 'syz.1.2650': attribute type 2 has an invalid length.
[  533.851400][T13848] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2650'.
[  534.209494][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2656'.
[  534.227330][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2656'.
[  534.430996][T13865] netlink: 'syz.1.2655': attribute type 10 has an invalid length.
[  535.572356][T13885] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2664'.
[  535.621117][T13885] net_ratelimit: 1974 callbacks suppressed
[  535.621138][T13885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  535.750670][T13890] netlink: 'syz.2.2666': attribute type 10 has an invalid length.
[  536.072503][T13898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  536.079964][T13898] IPv6: NLM_F_CREATE should be set when creating new route
[  536.087339][T13898] IPv6: NLM_F_CREATE should be set when creating new route
[  536.094686][T13898] IPv6: NLM_F_CREATE should be set when creating new route
[  536.766520][T13905] pim6reg1: entered promiscuous mode
[  536.771951][T13905] pim6reg1: entered allmulticast mode
[  539.246158][T13919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2676'.
[  539.307301][T13919] netlink: 'syz.3.2676': attribute type 12 has an invalid length.
[  539.335692][T13919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2676'.
[  539.368404][T13919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2676'.
[  539.591998][T13919] netlink: 'syz.3.2676': attribute type 10 has an invalid length.
[  539.609147][T13919] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.619363][T13919] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.712789][T13919] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.720857][T13919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.731427][T13919] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.739732][T13919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.818865][T13919] team0: Port device bridge0 added
[  540.001776][T13932] netlink: 'syz.0.2680': attribute type 10 has an invalid length.
[  541.769905][T13964] -1: renamed from syzkaller0
[  541.930323][T13967] netlink: 'syz.2.2691': attribute type 10 has an invalid length.
[  541.950852][T13966] delete_channel: no stack
[  542.120387][T13971] FAULT_INJECTION: forcing a failure.
[  542.120387][T13971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.153557][T13971] CPU: 1 PID: 13971 Comm: syz.1.2693 Not tainted syzkaller #0
[  542.161158][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  542.171278][T13971] Call Trace:
[  542.174645][T13971]  <TASK>
[  542.177966][T13971]  dump_stack_lvl+0x18c/0x250
[  542.182740][T13971]  ? show_regs_print_info+0x20/0x20
[  542.188428][T13971]  ? load_image+0x420/0x420
[  542.193007][T13971]  ? __lock_acquire+0x7eb0/0x7eb0
[  542.198905][T13971]  ? snprintf+0xe9/0x140
[  542.203395][T13971]  should_fail_ex+0x394/0x4c0
[  542.208680][T13971]  _copy_to_user+0x2f/0xa0
[  542.213422][T13971]  simple_read_from_buffer+0xe7/0x150
[  542.219136][T13971]  proc_fail_nth_read+0x1e8/0x260
[  542.224464][T13971]  ? proc_fault_inject_write+0x360/0x360
[  542.230176][T13971]  ? fsnotify_perm+0x271/0x5e0
[  542.235005][T13971]  ? proc_fault_inject_write+0x360/0x360
[  542.240828][T13971]  vfs_read+0x298/0x990
[  542.245069][T13971]  ? kernel_read+0x1e0/0x1e0
[  542.249750][T13971]  ? __fget_files+0x28/0x460
[  542.254399][T13971]  ? __fget_files+0x3fc/0x460
[  542.259303][T13971]  ? __fdget_pos+0x2a3/0x330
[  542.263938][T13971]  ? ksys_read+0x74/0x260
[  542.268321][T13971]  ksys_read+0x151/0x260
[  542.272602][T13971]  ? vfs_write+0x9a0/0x9a0
[  542.277059][T13971]  ? lockdep_hardirqs_on+0x98/0x150
[  542.282294][T13971]  do_syscall_64+0x55/0xb0
[  542.286742][T13971]  ? clear_bhb_loop+0x40/0x90
[  542.291448][T13971]  ? clear_bhb_loop+0x40/0x90
[  542.296158][T13971]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.302086][T13971] RIP: 0033:0x7f7369f5ea0e
[  542.306533][T13971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  542.326432][T13971] RSP: 002b:00007f736aecdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  542.335262][T13971] RAX: ffffffffffffffda RBX: 00007f736aece6c0 RCX: 00007f7369f5ea0e
[  542.343265][T13971] RDX: 000000000000000f RSI: 00007f736aece0a0 RDI: 0000000000000006
[  542.351260][T13971] RBP: 00007f736aece090 R08: 0000000000000000 R09: 0000000000000000
[  542.359264][T13971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.367294][T13971] R13: 00007f736a226038 R14: 00007f736a225fa0 R15: 00007fffda216be8
[  542.375314][T13971]  </TASK>
[  544.836517][T14008] netlink: 'syz.2.2705': attribute type 2 has an invalid length.
[  544.854480][T14008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2705'.
[  545.472665][T14030] netlink: 'syz.1.2713': attribute type 10 has an invalid length.
[  545.521697][T14030] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2713'.
[  545.650521][T14037] netlink: 'syz.1.2713': attribute type 10 has an invalid length.
[  545.683609][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2713'.
[  545.900602][T14040] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2717'.
[  546.002830][T14044] FAULT_INJECTION: forcing a failure.
[  546.002830][T14044] name failslab, interval 1, probability 0, space 0, times 0
[  546.063737][T14044] CPU: 1 PID: 14044 Comm: syz.0.2719 Not tainted syzkaller #0
[  546.071297][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  546.081410][T14044] Call Trace:
[  546.084742][T14044]  <TASK>
[  546.087719][T14044]  dump_stack_lvl+0x18c/0x250
[  546.092463][T14044]  ? show_regs_print_info+0x20/0x20
[  546.097722][T14044]  ? load_image+0x420/0x420
[  546.102293][T14044]  ? __lock_acquire+0x7eb0/0x7eb0
[  546.107856][T14044]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  546.114619][T14044]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  546.121913][T14044]  should_fail_ex+0x394/0x4c0
[  546.126745][T14044]  should_failslab+0x9/0x20
[  546.131437][T14044]  slab_pre_alloc_hook+0x59/0x300
[  546.136551][T14044]  ? bpf_test_init+0x9f/0x140
[  546.141282][T14044]  ? bpf_test_init+0x9f/0x140
[  546.146095][T14044]  __kmem_cache_alloc_node+0x53/0x250
[  546.151538][T14044]  ? bpf_test_init+0x9f/0x140
[  546.156371][T14044]  __kmalloc+0xa7/0x240
[  546.161046][T14044]  bpf_test_init+0x9f/0x140
[  546.165613][T14044]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  546.171040][T14044]  ? __lock_acquire+0x7eb0/0x7eb0
[  546.176120][T14044]  ? dev_put+0x80/0x80
[  546.180238][T14044]  ? dev_put+0x80/0x80
[  546.184343][T14044]  bpf_prog_test_run+0x31f/0x390
[  546.189320][T14044]  __sys_bpf+0x49d/0x890
[  546.193603][T14044]  ? bpf_link_show_fdinfo+0x560/0x560
[  546.199019][T14044]  ? lock_chain_count+0x20/0x20
[  546.203982][T14044]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  546.210350][T14044]  __x64_sys_bpf+0x7c/0x90
[  546.214800][T14044]  do_syscall_64+0x55/0xb0
[  546.219250][T14044]  ? clear_bhb_loop+0x40/0x90
[  546.223966][T14044]  ? clear_bhb_loop+0x40/0x90
[  546.228674][T14044]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.234699][T14044] RIP: 0033:0x7fcda3d9e1d9
[  546.239141][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.258782][T14044] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  546.267234][T14044] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  546.275234][T14044] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  546.283408][T14044] RBP: 00007fcda4d42090 R08: 0000000000000000 R09: 0000000000000000
[  546.291434][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.299432][T14044] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  546.307475][T14044]  </TASK>
[  546.499341][T14053] bridge0: port 3(batadv0) entered blocking state
[  546.509826][T14053] bridge0: port 3(batadv0) entered disabled state
[  546.563973][T14053] batadv0: entered allmulticast mode
[  546.570522][T14053] batadv0: entered promiscuous mode
[  546.594771][T14053] bridge0: port 3(batadv0) entered blocking state
[  546.601389][T14053] bridge0: port 3(batadv0) entered forwarding state
[  546.637532][T14055] netlink: 'syz.0.2723': attribute type 10 has an invalid length.
[  546.656361][T14055] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2723'.
[  546.918136][T14062] netlink: 'syz.1.2726': attribute type 10 has an invalid length.
[  546.926472][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2726'.
[  547.040106][T14068] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2727'.
[  547.052181][T10024] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  547.061999][T10024] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  548.078313][T14082] C: renamed from team_slave_0
[  548.086396][T14082] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2732'.
[  548.594552][T14109] netlink: 'syz.1.2742': attribute type 10 has an invalid length.
[  549.165804][T14116] FAULT_INJECTION: forcing a failure.
[  549.165804][T14116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.215075][T14116] CPU: 1 PID: 14116 Comm: syz.1.2745 Not tainted syzkaller #0
[  549.222657][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  549.232750][T14116] Call Trace:
[  549.236075][T14116]  <TASK>
[  549.239045][T14116]  dump_stack_lvl+0x18c/0x250
[  549.243778][T14116]  ? show_regs_print_info+0x20/0x20
[  549.249025][T14116]  ? load_image+0x420/0x420
[  549.253593][T14116]  ? __might_fault+0xaa/0x120
[  549.258343][T14116]  ? __lock_acquire+0x7eb0/0x7eb0
[  549.263436][T14116]  should_fail_ex+0x394/0x4c0
[  549.268184][T14116]  _copy_from_iter+0x1cd/0x1290
[  549.273094][T14116]  ? rep_movs_alternative+0x4a/0x90
[  549.278350][T14116]  ? copyout_mc+0x70/0x70
[  549.282753][T14116]  ? copyout_mc+0x70/0x70
[  549.287143][T14116]  ? __virt_addr_valid+0x10c/0x380
[  549.292308][T14116]  ? page_copy_sane+0x16a/0x270
[  549.297253][T14116]  copy_page_from_iter+0x7b/0x100
[  549.302338][T14116]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  549.308217][T14116]  tun_get_user+0xc99/0x3d30
[  549.312875][T14116]  ? aa_file_perm+0x3e3/0xee0
[  549.317644][T14116]  ? rcu_read_unlock+0xa0/0xa0
[  549.322494][T14116]  ? tun_get+0x1c/0x2e0
[  549.326715][T14116]  ? __lock_acquire+0x7eb0/0x7eb0
[  549.331811][T14116]  ? tun_get+0x1c/0x2e0
[  549.336020][T14116]  tun_chr_write_iter+0x119/0x200
[  549.341098][T14116]  vfs_write+0x474/0x9a0
[  549.345390][T14116]  ? file_end_write+0x250/0x250
[  549.350284][T14116]  ? __fget_files+0x3fc/0x460
[  549.355003][T14116]  ? __fdget_pos+0x1d8/0x330
[  549.359634][T14116]  ? ksys_write+0x74/0x260
[  549.364090][T14116]  ksys_write+0x151/0x260
[  549.368459][T14116]  ? __ia32_sys_read+0x90/0x90
[  549.373257][T14116]  ? lockdep_hardirqs_on+0x98/0x150
[  549.378492][T14116]  do_syscall_64+0x55/0xb0
[  549.382936][T14116]  ? clear_bhb_loop+0x40/0x90
[  549.387641][T14116]  ? clear_bhb_loop+0x40/0x90
[  549.392353][T14116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.398286][T14116] RIP: 0033:0x7f7369f9e1d9
[  549.402729][T14116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.422366][T14116] RSP: 002b:00007f736aece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  549.430819][T14116] RAX: ffffffffffffffda RBX: 00007f736a225fa0 RCX: 00007f7369f9e1d9
[  549.438909][T14116] RDX: 000000000000ffdd RSI: 00002000000002c0 RDI: 0000000000000004
[  549.446903][T14116] RBP: 00007f736aece090 R08: 0000000000000000 R09: 0000000000000000
[  549.454930][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  549.462929][T14116] R13: 00007f736a226038 R14: 00007f736a225fa0 R15: 00007fffda216be8
[  549.470939][T14116]  </TASK>
[  549.874246][T14132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2751'.
[  550.141186][T14141] netlink: 'syz.2.2755': attribute type 10 has an invalid length.
[  550.206051][T14140] delete_channel: no stack
[  550.640810][T14152] netlink: 'syz.3.2760': attribute type 3 has an invalid length.
[  550.665799][T14152] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2760'.
[  553.520403][T14165] netlink: 'syz.3.2766': attribute type 10 has an invalid length.
[  554.315876][T14165] team0 (unregistering): Port device team_slave_0 removed
[  554.361851][T14165] team0 (unregistering): Port device team_slave_1 removed
[  554.381457][T14164] delete_channel: no stack
[  554.399840][T14165] team0 (unregistering): Port device bond0 removed
[  554.420091][T14165] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.427774][T14165] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.453189][T14165] team0 (unregistering): Port device bridge0 removed
[  554.481469][T14170] netlink: 'syz.2.2767': attribute type 39 has an invalid length.
[  554.569343][T14170] hsr_slave_1 (unregistering): left promiscuous mode
[  554.618033][T14173] syzkaller0: entered promiscuous mode
[  554.628249][T14173] syzkaller0: entered allmulticast mode
[  555.466472][T14213] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2783'.
[  555.877974][T14223] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2786'.
[  556.075993][T14223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.186491][T14223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.236966][T14223] bond0 (unregistering): Released all slaves
[  556.269001][T14234] netlink: 'syz.2.2790': attribute type 25 has an invalid length.
[  556.278943][T14234] netlink: 'syz.2.2790': attribute type 10 has an invalid length.
[  556.434618][T14239] netlink: 'syz.2.2792': attribute type 1 has an invalid length.
[  556.506636][T14242] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2793'.
[  556.534546][T14243] netlink: 'syz.0.2794': attribute type 29 has an invalid length.
[  556.542828][T14243] netlink: 'syz.0.2794': attribute type 29 has an invalid length.
[  556.606040][T14246] pimreg0: tun_chr_ioctl cmd 35111
[  556.624137][T14247] pimreg0: tun_chr_ioctl cmd 35111
[  556.637536][T14245] pimreg0: tun_chr_ioctl cmd 1074025673
[  556.695398][T14249] netlink: 'syz.2.2796': attribute type 10 has an invalid length.
[  556.719676][T14249] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.731608][T14249] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.202743][T14266] netlink: 'syz.2.2803': attribute type 10 has an invalid length.
[  557.242485][T14264] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2802'.
[  557.591130][T14276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2807'.
[  558.957180][T14301] netlink: 'syz.1.2815': attribute type 10 has an invalid length.
[  558.985244][T14300] delete_channel: no stack
[  559.131480][T14309] netlink: 'syz.2.2817': attribute type 3 has an invalid length.
[  559.139667][T14309] netlink: 'syz.2.2817': attribute type 5 has an invalid length.
[  559.148476][T14309] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2817'.
[  561.268025][T14331] delete_channel: no stack
[  561.304763][T14336] validate_nla: 1 callbacks suppressed
[  561.304805][T14336] netlink: 'syz.3.2828': attribute type 29 has an invalid length.
[  561.340415][T14336] netlink: 'syz.3.2828': attribute type 29 has an invalid length.
[  561.642638][T14344] netlink: 'syz.3.2832': attribute type 10 has an invalid length.
[  561.734860][T14352] netlink: 'syz.1.2833': attribute type 27 has an invalid length.
[  561.742770][T14352] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2833'.
[  561.768538][T14344] bond0: (slave hsr_slave_1): Enslaving as an active interface with an up link
[  562.065256][T14359] netlink: 'syz.2.2842': attribute type 153 has an invalid length.
[  562.091740][T14359] netlink: 'syz.2.2842': attribute type 1 has an invalid length.
[  562.112848][T14359] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.2842'.
[  562.153344][T14366] netlink: 'syz.3.2835': attribute type 10 has an invalid length.
[  562.674240][T14377] netlink: 'syz.0.2839': attribute type 10 has an invalid length.
[  562.683262][T14375] delete_channel: no stack
[  562.708460][T14382] FAULT_INJECTION: forcing a failure.
[  562.708460][T14382] name failslab, interval 1, probability 0, space 0, times 0
[  562.732155][T14382] CPU: 1 PID: 14382 Comm: syz.2.2840 Not tainted syzkaller #0
[  562.739723][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  562.749830][T14382] Call Trace:
[  562.753155][T14382]  <TASK>
[  562.756160][T14382]  dump_stack_lvl+0x18c/0x250
[  562.760897][T14382]  ? show_regs_print_info+0x20/0x20
[  562.766146][T14382]  ? load_image+0x420/0x420
[  562.770744][T14382]  should_fail_ex+0x394/0x4c0
[  562.775482][T14382]  should_failslab+0x9/0x20
[  562.780037][T14382]  slab_pre_alloc_hook+0x59/0x300
[  562.785108][T14382]  ? __lock_acquire+0x7eb0/0x7eb0
[  562.790195][T14382]  kmem_cache_alloc_node+0x5e/0x310
[  562.795464][T14382]  ? __alloc_skb+0x103/0x2c0
[  562.800126][T14382]  __alloc_skb+0x103/0x2c0
[  562.804604][T14382]  netlink_sendmsg+0x66a/0xbf0
[  562.809444][T14382]  ? netlink_getsockopt+0x590/0x590
[  562.814700][T14382]  ? apparmor_socket_sendmsg+0x8e/0x330
[  562.820299][T14382]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  562.825644][T14382]  ? security_socket_sendmsg+0x80/0xa0
[  562.831157][T14382]  ? netlink_getsockopt+0x590/0x590
[  562.836421][T14382]  ____sys_sendmsg+0x61b/0x980
[  562.841254][T14382]  ? __asan_memset+0x22/0x40
[  562.845903][T14382]  ? __sys_sendmsg_sock+0x30/0x30
[  562.850993][T14382]  ? __import_iovec+0x5f2/0x850
[  562.855916][T14382]  ? import_iovec+0x73/0xa0
[  562.860485][T14382]  ___sys_sendmsg+0x2a6/0x360
[  562.865220][T14382]  ? __sys_sendmsg+0x2b0/0x2b0
[  562.870060][T14382]  ? __lock_acquire+0x7eb0/0x7eb0
[  562.875167][T14382]  __se_sys_sendmsg+0x1d0/0x2c0
[  562.880078][T14382]  ? __x64_sys_sendmsg+0x80/0x80
[  562.885085][T14382]  ? syscall_enter_from_user_mode+0x2e/0x80
[  562.891041][T14382]  do_syscall_64+0x55/0xb0
[  562.895506][T14382]  ? clear_bhb_loop+0x40/0x90
[  562.900236][T14382]  ? clear_bhb_loop+0x40/0x90
[  562.904975][T14382]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  562.910926][T14382] RIP: 0033:0x7f12c919e1d9
[  562.915393][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.935078][T14382] RSP: 002b:00007f12ca08b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  562.943561][T14382] RAX: ffffffffffffffda RBX: 00007f12c9425fa0 RCX: 00007f12c919e1d9
[  562.951616][T14382] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000007
[  562.959645][T14382] RBP: 00007f12ca08b090 R08: 0000000000000000 R09: 0000000000000000
[  562.967669][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.975691][T14382] R13: 00007f12c9426038 R14: 00007f12c9425fa0 R15: 00007ffd65799f28
[  562.983725][T14382]  </TASK>
[  563.359134][T14389] netlink: 'syz.1.2843': attribute type 10 has an invalid length.
[  563.459606][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  563.468138][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  563.544964][T14400] netlink: 'syz.2.2850': attribute type 10 has an invalid length.
[  563.590623][T14398] delete_channel: no stack
[  564.393283][T14428] delete_channel: no stack
[  565.730402][T14464] delete_channel: no stack
[  565.979930][T14475] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2873'.
[  566.519765][T14494] validate_nla: 4 callbacks suppressed
[  566.519806][T14494] netlink: 'syz.0.2881': attribute type 29 has an invalid length.
[  566.545730][T14495] netlink: 'syz.3.2882': attribute type 21 has an invalid length.
[  566.578927][T14495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2882'.
[  566.643352][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2882'.
[  566.673859][T14494] netlink: 'syz.0.2881': attribute type 29 has an invalid length.
[  566.725569][T14497] netlink: 'syz.1.2883': attribute type 10 has an invalid length.
[  566.758906][T14496] delete_channel: no stack
[  567.695311][T14523] syzkaller0: entered promiscuous mode
[  567.700886][T14523] syzkaller0: entered allmulticast mode
[  567.755957][T14525] netlink: 'syz.1.2895': attribute type 10 has an invalid length.
[  567.839853][T14524] delete_channel: no stack
[  570.742704][T14552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2903'.
[  570.760837][T14551] netlink: 'syz.1.2903': attribute type 12 has an invalid length.
[  570.774085][T14551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2903'.
[  570.811018][T14551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2903'.
[  571.124058][T14566] netlink: 'syz.0.2908': attribute type 10 has an invalid length.
[  571.166576][T14563] delete_channel: no stack
[  571.218043][T14570] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2912'.
[  571.457112][T14578] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2915'.
[  571.624685][T14586] netlink: 'syz.1.2918': attribute type 10 has an invalid length.
[  571.893239][T14597] netlink: 'syz.3.2922': attribute type 10 has an invalid length.
[  571.935010][T14596] delete_channel: no stack
[  571.993352][T14599] FAULT_INJECTION: forcing a failure.
[  571.993352][T14599] name failslab, interval 1, probability 0, space 0, times 0
[  572.033562][T14599] CPU: 1 PID: 14599 Comm: syz.0.2923 Not tainted syzkaller #0
[  572.041121][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  572.051234][T14599] Call Trace:
[  572.054568][T14599]  <TASK>
[  572.057550][T14599]  dump_stack_lvl+0x18c/0x250
[  572.062288][T14599]  ? sctp_sendmsg+0x1519/0x27b0
[  572.067189][T14599]  ? ___sys_sendmsg+0x2a6/0x360
[  572.072108][T14599]  ? show_regs_print_info+0x20/0x20
[  572.077361][T14599]  ? load_image+0x420/0x420
[  572.081944][T14599]  should_fail_ex+0x394/0x4c0
[  572.086695][T14599]  should_failslab+0x9/0x20
[  572.091267][T14599]  slab_pre_alloc_hook+0x59/0x300
[  572.096354][T14599]  ? sctp_add_bind_addr+0x8c/0x360
[  572.101519][T14599]  __kmem_cache_alloc_node+0x53/0x250
[  572.107008][T14599]  ? sctp_add_bind_addr+0x8c/0x360
[  572.112177][T14599]  kmalloc_trace+0x2a/0xe0
[  572.116666][T14599]  sctp_add_bind_addr+0x8c/0x360
[  572.121669][T14599]  sctp_copy_local_addr_list+0x31b/0x4e0
[  572.127365][T14599]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  572.133145][T14599]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  572.139269][T14599]  ? sctp_v6_is_any+0x64/0x70
[  572.144014][T14599]  ? sctp_copy_one_addr+0x8c/0x350
[  572.149190][T14599]  sctp_bind_addr_copy+0xb3/0x3c0
[  572.154361][T14599]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  572.160748][T14599]  sctp_connect_new_asoc+0x2f9/0x6a0
[  572.166124][T14599]  ? __sctp_connect+0xd80/0xd80
[  572.171122][T14599]  ? __local_bh_enable_ip+0x13a/0x1c0
[  572.176586][T14599]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  572.182192][T14599]  ? security_sctp_bind_connect+0x89/0xb0
[  572.187977][T14599]  sctp_sendmsg+0x1519/0x27b0
[  572.192727][T14599]  ? sctp_getsockopt+0xb60/0xb60
[  572.197727][T14599]  ? aa_af_perm+0x330/0x330
[  572.202301][T14599]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  572.208779][T14599]  ? sock_rps_record_flow+0x19/0x3f0
[  572.214120][T14599]  ? inet_sendmsg+0xce/0x2a0
[  572.218759][T14599]  ? inet_send_prepare+0x250/0x250
[  572.223922][T14599]  ____sys_sendmsg+0x61b/0x980
[  572.228762][T14599]  ? __sys_sendmsg_sock+0x30/0x30
[  572.233840][T14599]  ? __import_iovec+0x5f2/0x850
[  572.238764][T14599]  ? import_iovec+0x73/0xa0
[  572.243335][T14599]  ___sys_sendmsg+0x2a6/0x360
[  572.248084][T14599]  ? __sys_sendmsg+0x2b0/0x2b0
[  572.252938][T14599]  ? trace_call_bpf+0xc3/0x6c0
[  572.257785][T14599]  __se_sys_sendmsg+0x1d0/0x2c0
[  572.262707][T14599]  ? __x64_sys_sendmsg+0x80/0x80
[  572.267741][T14599]  ? lockdep_hardirqs_on+0x98/0x150
[  572.272999][T14599]  do_syscall_64+0x55/0xb0
[  572.277466][T14599]  ? clear_bhb_loop+0x40/0x90
[  572.282195][T14599]  ? clear_bhb_loop+0x40/0x90
[  572.286933][T14599]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  572.292891][T14599] RIP: 0033:0x7fcda3d9e1d9
[  572.297398][T14599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.317077][T14599] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.325594][T14599] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  572.333630][T14599] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  572.341659][T14599] RBP: 00007fcda4d42090 R08: 0000000000000000 R09: 0000000000000000
[  572.349686][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  572.357749][T14599] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  572.365803][T14599]  </TASK>
[  572.585486][T14609] netlink: 154936 bytes leftover after parsing attributes in process `syz.0.2927'.
[  572.641462][T14607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2926'.
[  572.666984][T14611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.674357][T14611] IPv6: NLM_F_CREATE should be set when creating new route
[  572.681716][T14611] IPv6: NLM_F_CREATE should be set when creating new route
[  572.689075][T14611] IPv6: NLM_F_CREATE should be set when creating new route
[  572.948531][T14616] netlink: 'syz.3.2930': attribute type 21 has an invalid length.
[  572.963740][T14616] netlink: 'syz.3.2930': attribute type 30 has an invalid length.
[  573.500434][T14623] netlink: 'syz.3.2933': attribute type 10 has an invalid length.
[  573.528429][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2931'.
[  573.565365][T14622] delete_channel: no stack
[  573.571464][T14620] netlink: 'syz.0.2931': attribute type 12 has an invalid length.
[  573.580791][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2931'.
[  573.613121][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2931'.
[  573.828392][T14629] netlink: 'syz.2.2935': attribute type 4 has an invalid length.
[  574.277034][T14657] netlink: 'syz.3.2942': attribute type 1 has an invalid length.
[  574.293758][T14657] netlink: 'syz.3.2942': attribute type 2 has an invalid length.
[  574.301670][T14657] netlink: 'syz.3.2942': attribute type 2 has an invalid length.
[  574.545266][T14662] delete_channel: no stack
[  575.773647][T14628] Bluetooth: hci4: command 0x0406 tx timeout
[  575.818997][T14692] geneve0: entered promiscuous mode
[  575.896896][T14692] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  575.935098][T14694] delete_channel: no stack
[  576.151672][T14706] __nla_validate_parse: 2 callbacks suppressed
[  576.151694][T14706] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2958'.
[  576.669632][T14730] validate_nla: 13 callbacks suppressed
[  576.669653][T14730] netlink: 'syz.3.2967': attribute type 10 has an invalid length.
[  576.741436][T14729] delete_channel: no stack
[  577.027769][T14739] netlink: 'syz.2.2969': attribute type 2 has an invalid length.
[  577.036975][T14739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2969'.
[  577.761867][T14749] netlink: 'syz.3.2975': attribute type 1 has an invalid length.
[  577.783678][T14749] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2975'.
[  577.972836][T14756] sctp: [Deprecated]: syz.0.2977 (pid 14756) Use of struct sctp_assoc_value in delayed_ack socket option.
[  577.972836][T14756] Use struct sctp_sack_info instead
[  578.137798][T14763] netlink: 'syz.0.2977': attribute type 46 has an invalid length.
[  578.183851][T14763] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2977'.
[  578.213200][T14759] netlink: 'syz.2.2978': attribute type 1 has an invalid length.
[  578.262107][T14759] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2978'.
[  578.284189][T14768] netlink: 'syz.1.2979': attribute type 10 has an invalid length.
[  578.373895][T14765] delete_channel: no stack
[  578.568988][T14778] bridge0: port 3(batadv0) entered blocking state
[  578.589238][T14778] bridge0: port 3(batadv0) entered disabled state
[  578.599397][T14778] batadv0: entered allmulticast mode
[  578.610816][T14778] batadv0: entered promiscuous mode
[  578.696696][T14780] FAULT_INJECTION: forcing a failure.
[  578.696696][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.717837][T10023] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  578.727368][T10023] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  578.737878][T14780] CPU: 0 PID: 14780 Comm: syz.3.2983 Not tainted syzkaller #0
[  578.745528][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  578.755651][T14780] Call Trace:
[  578.758990][T14780]  <TASK>
[  578.761974][T14780]  dump_stack_lvl+0x18c/0x250
[  578.766728][T14780]  ? show_regs_print_info+0x20/0x20
[  578.771992][T14780]  ? load_image+0x420/0x420
[  578.776577][T14780]  ? __lock_acquire+0x7eb0/0x7eb0
[  578.781696][T14780]  should_fail_ex+0x394/0x4c0
[  578.786486][T14780]  _copy_from_user+0x2f/0xe0
[  578.791157][T14780]  bpf_test_init+0xde/0x140
[  578.795747][T14780]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  578.801202][T14780]  ? __lock_acquire+0x7eb0/0x7eb0
[  578.806307][T14780]  ? __fget_files+0x37e/0x460
[  578.811073][T14780]  ? dev_put+0x80/0x80
[  578.815240][T14780]  ? dev_put+0x80/0x80
[  578.819393][T14780]  bpf_prog_test_run+0x31f/0x390
[  578.824429][T14780]  __sys_bpf+0x49d/0x890
[  578.828745][T14780]  ? bpf_link_show_fdinfo+0x560/0x560
[  578.834206][T14780]  ? lock_chain_count+0x20/0x20
[  578.839128][T14780]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  578.845198][T14780]  __x64_sys_bpf+0x7c/0x90
[  578.849701][T14780]  do_syscall_64+0x55/0xb0
[  578.854189][T14780]  ? clear_bhb_loop+0x40/0x90
[  578.858961][T14780]  ? clear_bhb_loop+0x40/0x90
[  578.863706][T14780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  578.869676][T14780] RIP: 0033:0x7f0da1f9e1d9
[  578.874154][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.893829][T14780] RSP: 002b:00007f0da2f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  578.902312][T14780] RAX: ffffffffffffffda RBX: 00007f0da2225fa0 RCX: 00007f0da1f9e1d9
[  578.910345][T14780] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  578.918391][T14780] RBP: 00007f0da2f44090 R08: 0000000000000000 R09: 0000000000000000
[  578.926424][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.934446][T14780] R13: 00007f0da2226038 R14: 00007f0da2225fa0 R15: 00007ffc1ad8a1e8
[  578.942494][T14780]  </TASK>
[  579.102112][T14790] netlink: 'syz.0.2988': attribute type 10 has an invalid length.
[  579.120443][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2988'.
[  579.470152][T14803] netlink: 'syz.1.2992': attribute type 10 has an invalid length.
[  579.516515][T14802] delete_channel: no stack
[  579.568841][T14806] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2994'.
[  579.716298][T14808] netlink: 'syz.3.2994': attribute type 10 has an invalid length.
[  579.813177][T14808] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  580.066254][T14814] netlink: 2767 bytes leftover after parsing attributes in process `syz.0.2995'.
[  581.680045][T14839] netlink: 'syz.1.3004': attribute type 10 has an invalid length.
[  581.785335][T14836] delete_channel: no stack
[  581.821568][T14847] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3008'.
[  582.412704][T14855] netlink: 'syz.0.3019': attribute type 10 has an invalid length.
[  582.462444][T14854] delete_channel: no stack
[  582.757473][T14865] netlink: 2767 bytes leftover after parsing attributes in process `syz.2.3011'.
[  584.005960][T14869] syzkaller0: entered promiscuous mode
[  584.012209][T14869] syzkaller0: entered allmulticast mode
[  584.824756][T14883] delete_channel: no stack
[  587.018999][T14880] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3020'.
[  587.028725][T14884] netlink: 'syz.3.3022': attribute type 10 has an invalid length.
[  587.039238][T14893] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3025'.
[  587.331795][T14902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3030'.
[  587.351795][T14902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3030'.
[  587.365049][T14902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3030'.
[  587.871222][T14919] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3036'.
[  587.923500][T14918] netlink: 'syz.1.3035': attribute type 10 has an invalid length.
[  588.123862][T14915] delete_channel: no stack
[  588.599637][T14924] netlink: 'syz.1.3039': attribute type 39 has an invalid length.
[  589.107445][T14936] netlink: 'syz.1.3043': attribute type 21 has an invalid length.
[  589.244693][T14936] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3043'.
[  589.341912][T14944] netlink: 'syz.3.3047': attribute type 10 has an invalid length.
[  589.365172][T14943] delete_channel: no stack
[  589.605122][T14956] netlink: 'syz.0.3057': attribute type 10 has an invalid length.
[  589.860839][T14956] macvlan0: entered promiscuous mode
[  589.868201][T14956] macvlan0: entered allmulticast mode
[  589.927408][T14956] veth1_vlan: entered allmulticast mode
[  589.967856][T14956] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  590.239881][T14965] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  590.562456][T14971] netlink: 'syz.0.3054': attribute type 10 has an invalid length.
[  591.096859][T14980] netlink: 'syz.1.3059': attribute type 10 has an invalid length.
[  591.111185][T14986] netlink: 'syz.3.3060': attribute type 25 has an invalid length.
[  591.120180][T14979] delete_channel: no stack
[  591.126946][T14986] netlink: 'syz.3.3060': attribute type 10 has an invalid length.
[  591.174904][T14990] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3061'.
[  591.267655][T14990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.308369][T14990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.332379][T14990] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  591.631936][T14990] bond0 (unregistering): Released all slaves
[  592.166893][T15014] validate_nla: 1 callbacks suppressed
[  592.166914][T15014] netlink: 'syz.2.3070': attribute type 10 has an invalid length.
[  592.278674][T15012] delete_channel: no stack
[  592.289176][T15016] netlink: 'syz.1.3071': attribute type 10 has an invalid length.
[  592.316862][T15016] bridge0: port 3(batadv0) entered disabled state
[  592.328630][T15016] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.342315][T15016] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.720055][T15031] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3076'.
[  592.968954][T15032] netlink: 'syz.0.3077': attribute type 9 has an invalid length.
[  593.009934][T15032] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.3077'.
[  593.530053][T15044] netlink: 'syz.0.3081': attribute type 10 has an invalid length.
[  593.584344][T15042] delete_channel: no stack
[  595.184526][T15063] syzkaller0: entered promiscuous mode
[  595.190249][T15063] syzkaller0: entered allmulticast mode
[  595.473600][T15080] netlink: 'syz.1.3093': attribute type 10 has an invalid length.
[  595.601245][T15079] delete_channel: no stack
[  595.984716][T15088] netlink: 'syz.0.3094': attribute type 10 has an invalid length.
[  596.080729][T15088] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.088110][T15088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.095888][T15088] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.103188][T15088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.266511][ T5088] Bluetooth: hci2: command 0x0406 tx timeout
[  596.366707][T15088] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  601.453332][T15113] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3101'.
[  601.944315][T15153] netlink: 'syz.2.3104': attribute type 10 has an invalid length.
[  601.991113][T15152] delete_channel: no stack
[  602.234888][T15168] netlink: 'syz.1.3110': attribute type 25 has an invalid length.
[  602.256289][T15168] netlink: 'syz.1.3110': attribute type 9 has an invalid length.
[  602.272496][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3110'.
[  602.923048][T15163] delete_channel: no stack
[  603.033256][T15170] syzkaller0: entered promiscuous mode
[  603.039430][T15170] syzkaller0: entered allmulticast mode
[  603.586573][T15200] netlink: 'syz.2.3119': attribute type 10 has an invalid length.
[  603.652930][T15199] delete_channel: no stack
[  604.708684][T15217] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3124'.
[  604.726398][T15217] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  607.316776][T15227] netlink: 'syz.0.3129': attribute type 10 has an invalid length.
[  607.376565][T15226] delete_channel: no stack
[  607.668185][T15236] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3134'.
[  607.859213][T15241] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3135'.
[  608.062261][T15243] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3136'.
[  608.077986][T15243] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  608.122211][T15245] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3144'.
[  608.357942][T15254] netlink: 'syz.0.3138': attribute type 2 has an invalid length.
[  608.366285][T15254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3138'.
[  608.492010][T15257] netlink: 'syz.1.3140': attribute type 10 has an invalid length.
[  608.567567][T15256] delete_channel: no stack
[  608.632863][T15264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3141'.
[  609.726488][T15267] netlink: 'syz.1.3142': attribute type 10 has an invalid length.
[  611.952405][T15279] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3146'.
[  612.107126][T15287] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3148'.
[  612.160955][T15293] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3150'.
[  612.355624][T15296] FAULT_INJECTION: forcing a failure.
[  612.355624][T15296] name failslab, interval 1, probability 0, space 0, times 0
[  612.397654][T15296] CPU: 1 PID: 15296 Comm: syz.1.3151 Not tainted syzkaller #0
[  612.405216][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  612.417844][T15296] Call Trace:
[  612.421250][T15296]  <TASK>
[  612.424227][T15296]  dump_stack_lvl+0x18c/0x250
[  612.428943][T15296]  ? sctp_sendmsg+0x1519/0x27b0
[  612.433916][T15296]  ? ___sys_sendmsg+0x2a6/0x360
[  612.440107][T15296]  ? show_regs_print_info+0x20/0x20
[  612.445353][T15296]  ? load_image+0x420/0x420
[  612.449925][T15296]  should_fail_ex+0x394/0x4c0
[  612.454649][T15296]  should_failslab+0x9/0x20
[  612.459194][T15296]  slab_pre_alloc_hook+0x59/0x300
[  612.464251][T15296]  ? sctp_add_bind_addr+0x8c/0x360
[  612.469394][T15296]  __kmem_cache_alloc_node+0x53/0x250
[  612.474804][T15296]  ? sctp_add_bind_addr+0x8c/0x360
[  612.479944][T15296]  kmalloc_trace+0x2a/0xe0
[  612.484504][T15296]  sctp_add_bind_addr+0x8c/0x360
[  612.489490][T15296]  sctp_copy_local_addr_list+0x31b/0x4e0
[  612.495169][T15296]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  612.500930][T15296]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  612.507035][T15296]  ? sctp_v6_is_any+0x64/0x70
[  612.511781][T15296]  ? sctp_copy_one_addr+0x8c/0x350
[  612.516931][T15296]  sctp_bind_addr_copy+0xb3/0x3c0
[  612.522072][T15296]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  612.528442][T15296]  sctp_connect_new_asoc+0x2f9/0x6a0
[  612.533764][T15296]  ? __sctp_connect+0xd80/0xd80
[  612.538651][T15296]  ? __local_bh_enable_ip+0x13a/0x1c0
[  612.544066][T15296]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  612.549732][T15296]  ? security_sctp_bind_connect+0x89/0xb0
[  612.555490][T15296]  sctp_sendmsg+0x1519/0x27b0
[  612.560209][T15296]  ? sctp_getsockopt+0xb60/0xb60
[  612.565184][T15296]  ? aa_af_perm+0x330/0x330
[  612.569724][T15296]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  612.576172][T15296]  ? sock_rps_record_flow+0x19/0x3f0
[  612.581487][T15296]  ? inet_sendmsg+0xce/0x2a0
[  612.586110][T15296]  ? inet_send_prepare+0x250/0x250
[  612.591249][T15296]  ____sys_sendmsg+0x61b/0x980
[  612.596055][T15296]  ? __sys_sendmsg_sock+0x30/0x30
[  612.601116][T15296]  ? __import_iovec+0x5f2/0x850
[  612.606008][T15296]  ? import_iovec+0x73/0xa0
[  612.610557][T15296]  ___sys_sendmsg+0x2a6/0x360
[  612.615280][T15296]  ? get_pid_task+0x20/0x1e0
[  612.619913][T15296]  ? __sys_sendmsg+0x2b0/0x2b0
[  612.624737][T15296]  ? __lock_acquire+0x7eb0/0x7eb0
[  612.629816][T15296]  __se_sys_sendmsg+0x1d0/0x2c0
[  612.634724][T15296]  ? __x64_sys_sendmsg+0x80/0x80
[  612.639714][T15296]  ? lockdep_hardirqs_on+0x98/0x150
[  612.644943][T15296]  do_syscall_64+0x55/0xb0
[  612.649402][T15296]  ? clear_bhb_loop+0x40/0x90
[  612.654102][T15296]  ? clear_bhb_loop+0x40/0x90
[  612.658805][T15296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  612.664737][T15296] RIP: 0033:0x7f7369f9e1d9
[  612.669181][T15296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.688812][T15296] RSP: 002b:00007f736aece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  612.697255][T15296] RAX: ffffffffffffffda RBX: 00007f736a225fa0 RCX: 00007f7369f9e1d9
[  612.705258][T15296] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  612.713255][T15296] RBP: 00007f736aece090 R08: 0000000000000000 R09: 0000000000000000
[  612.721261][T15296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.729264][T15296] R13: 00007f736a226038 R14: 00007f736a225fa0 R15: 00007fffda216be8
[  612.737294][T15296]  </TASK>
[  612.757708][T15302] netlink: 'syz.3.3154': attribute type 33 has an invalid length.
[  612.771155][T15302] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3154'.
[  612.828272][T15303] netlink: 'syz.3.3154': attribute type 33 has an invalid length.
[  612.880522][T15303] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3154'.
[  615.903787][T15320] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3160'.
[  616.214301][T15327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3163'.
[  616.566570][T15343] FAULT_INJECTION: forcing a failure.
[  616.566570][T15343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  616.605429][T15343] CPU: 0 PID: 15343 Comm: syz.3.3168 Not tainted syzkaller #0
[  616.612976][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  616.623092][T15343] Call Trace:
[  616.626417][T15343]  <TASK>
[  616.629512][T15343]  dump_stack_lvl+0x18c/0x250
[  616.634247][T15343]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  616.640467][T15343]  ? show_regs_print_info+0x20/0x20
[  616.645851][T15343]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  616.652178][T15343]  should_fail_ex+0x394/0x4c0
[  616.656932][T15343]  _copy_from_user+0x2f/0xe0
[  616.661589][T15343]  ___sys_sendmsg+0x1c7/0x360
[  616.666365][T15343]  ? __sys_sendmsg+0x2b0/0x2b0
[  616.671255][T15343]  __se_sys_sendmsg+0x1d0/0x2c0
[  616.676184][T15343]  ? perf_trace_preemptirq_template+0x269/0x330
[  616.682489][T15343]  ? __x64_sys_sendmsg+0x80/0x80
[  616.687596][T15343]  ? lockdep_hardirqs_on+0x98/0x150
[  616.692945][T15343]  do_syscall_64+0x55/0xb0
[  616.697415][T15343]  ? clear_bhb_loop+0x40/0x90
[  616.702147][T15343]  ? clear_bhb_loop+0x40/0x90
[  616.706922][T15343]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.712887][T15343] RIP: 0033:0x7f0da1f9e1d9
[  616.717369][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.737041][T15343] RSP: 002b:00007f0da2f44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  616.745612][T15343] RAX: ffffffffffffffda RBX: 00007f0da2225fa0 RCX: 00007f0da1f9e1d9
[  616.753653][T15343] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000007
[  616.761685][T15343] RBP: 00007f0da2f44090 R08: 0000000000000000 R09: 0000000000000000
[  616.769724][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.777750][T15343] R13: 00007f0da2226038 R14: 00007f0da2225fa0 R15: 00007ffc1ad8a1e8
[  616.785801][T15343]  </TASK>
[  616.843597][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3170'.
[  617.695129][T15357] netlink: 'syz.3.3171': attribute type 4 has an invalid length.
[  617.714595][T15360] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3173'.
[  617.744984][T15355] syz.1.3169 (15355) used obsolete PPPIOCDETACH ioctl
[  618.028200][T15366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3175'.
[  619.429674][T15394] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3186'.
[  621.859525][T14628] Bluetooth: hci1: command 0x0406 tx timeout
[  624.004979][T15432] netlink: 'syz.0.3195': attribute type 10 has an invalid length.
[  624.083714][T15431] delete_channel: no stack
[  624.372932][T15434] netlink: 'syz.3.3196': attribute type 2 has an invalid length.
[  624.381836][T15434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'.
[  624.435398][T15413] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3191'.
[  624.577244][T15439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3198'.
[  624.838687][T15445] netlink: 'syz.2.3201': attribute type 10 has an invalid length.
[  624.866355][T15445] macvlan0: entered promiscuous mode
[  624.883749][T15445] macvlan0: entered allmulticast mode
[  624.898186][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  624.904857][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  625.517093][T15473] FAULT_INJECTION: forcing a failure.
[  625.517093][T15473] name failslab, interval 1, probability 0, space 0, times 0
[  625.539643][T15473] CPU: 1 PID: 15473 Comm: syz.1.3217 Not tainted syzkaller #0
[  625.547206][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  625.557333][T15473] Call Trace:
[  625.560660][T15473]  <TASK>
[  625.563649][T15473]  dump_stack_lvl+0x18c/0x250
[  625.568397][T15473]  ? show_regs_print_info+0x20/0x20
[  625.573921][T15473]  ? load_image+0x420/0x420
[  625.578595][T15473]  ? __might_sleep+0xe0/0xe0
[  625.583284][T15473]  ? __lock_acquire+0x7eb0/0x7eb0
[  625.588374][T15473]  should_fail_ex+0x394/0x4c0
[  625.593130][T15473]  should_failslab+0x9/0x20
[  625.597689][T15473]  slab_pre_alloc_hook+0x59/0x300
[  625.602756][T15473]  ? kvmalloc_node+0x70/0x180
[  625.607489][T15473]  ? kvmalloc_node+0x70/0x180
[  625.612212][T15473]  __kmem_cache_alloc_node+0x53/0x250
[  625.617651][T15473]  ? kvmalloc_node+0x70/0x180
[  625.622376][T15473]  __kmalloc_node+0xa6/0x240
[  625.627016][T15473]  kvmalloc_node+0x70/0x180
[  625.631563][T15473]  bpf_test_run_xdp_live+0x1c2/0x1b30
[  625.636979][T15473]  ? 0xffffffffa0004a00
[  625.641166][T15473]  ? 0xffffffffa0004a00
[  625.645371][T15473]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  625.651324][T15473]  ? xdp_convert_md_to_buff+0x330/0x330
[  625.656973][T15473]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  625.663258][T15473]  ? _copy_from_user+0xa5/0xe0
[  625.668081][T15473]  ? bpf_test_init+0x119/0x140
[  625.672899][T15473]  ? xdp_convert_md_to_buff+0x5b/0x330
[  625.678417][T15473]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  625.683838][T15473]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  625.691081][T15473]  ? dev_put+0x80/0x80
[  625.695198][T15473]  ? dev_put+0x80/0x80
[  625.699301][T15473]  bpf_prog_test_run+0x31f/0x390
[  625.704273][T15473]  __sys_bpf+0x49d/0x890
[  625.708543][T15473]  ? bpf_link_show_fdinfo+0x560/0x560
[  625.713955][T15473]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  625.720152][T15473]  __x64_sys_bpf+0x7c/0x90
[  625.724602][T15473]  do_syscall_64+0x55/0xb0
[  625.729068][T15473]  ? clear_bhb_loop+0x40/0x90
[  625.733770][T15473]  ? clear_bhb_loop+0x40/0x90
[  625.738481][T15473]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.744423][T15473] RIP: 0033:0x7f7369f9e1d9
[  625.748865][T15473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.768586][T15473] RSP: 002b:00007f736aece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  625.777032][T15473] RAX: ffffffffffffffda RBX: 00007f736a225fa0 RCX: 00007f7369f9e1d9
[  625.785031][T15473] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  625.793031][T15473] RBP: 00007f736aece090 R08: 0000000000000000 R09: 0000000000000000
[  625.801030][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.809032][T15473] R13: 00007f736a226038 R14: 00007f736a225fa0 R15: 00007fffda216be8
[  625.817055][T15473]  </TASK>
[  625.944184][T15461] syzkaller0: tun_chr_ioctl cmd 1074025688
[  626.051215][T15478] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3211'.
[  627.830439][T15475] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3210'.
[  628.375470][T15504] netlink: 'syz.3.3220': attribute type 10 has an invalid length.
[  628.399738][T15504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3220'.
[  628.981376][T15526] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3229'.
[  630.582010][T15521] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3228'.
[  631.278454][T15558] netlink: 'syz.2.3237': attribute type 9 has an invalid length.
[  631.303636][T15558] netlink: 144304 bytes leftover after parsing attributes in process `syz.2.3237'.
[  631.478875][T15561] netlink: 'syz.2.3237': attribute type 9 has an invalid length.
[  631.507981][T15561] netlink: 176456 bytes leftover after parsing attributes in process `syz.2.3237'.
[  631.709729][T15567] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3241'.
[  631.884417][T15578] netlink: 'syz.0.3244': attribute type 21 has an invalid length.
[  631.921304][T15577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.948429][T15577] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.032173][T15577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.094483][T15577] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.150371][T15603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3251'.
[  633.201067][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  633.631874][T15622] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3259'.
[  633.719699][T15628] netlink: 'syz.0.3260': attribute type 3 has an invalid length.
[  633.730218][T15628] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3260'.
[  634.048382][T15634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.085841][T15634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.632479][T15634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.649853][T15634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.808921][T15649] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3266'.
[  635.260595][T15663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3273'.
[  635.611370][T15673] netlink: 'syz.3.3276': attribute type 10 has an invalid length.
[  635.638515][T15672] delete_channel: no stack
[  635.765358][T15675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3277'.
[  635.955423][T15682] netlink: 'syz.0.3280': attribute type 21 has an invalid length.
[  635.963880][T15682] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  635.971776][T15682] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3280'.
[  636.243082][T15695] netlink: 'syz.0.3286': attribute type 39 has an invalid length.
[  636.453617][T15699] netlink: 'syz.1.3287': attribute type 13 has an invalid length.
[  636.461584][T15699] netlink: 'syz.1.3287': attribute type 58 has an invalid length.
[  636.494820][T15699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3287'.
[  636.621430][T15705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3289'.
[  636.786756][T15713] netlink: 'syz.3.3293': attribute type 10 has an invalid length.
[  636.836191][T15712] delete_channel: no stack
[  636.957958][T15716] netlink: 'syz.0.3294': attribute type 17 has an invalid length.
[  637.110754][T15724] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3297'.
[  637.218089][T14628] Bluetooth: hci0: command 0x0406 tx timeout
[  637.435452][T15737] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3303'.
[  637.452086][T15739] netlink: 'syz.1.3304': attribute type 10 has an invalid length.
[  637.575135][T15738] delete_channel: no stack
[  637.684413][T15743] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  637.948545][T15756] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3311'.
[  638.317340][T15765] netlink: 'syz.3.3314': attribute type 25 has an invalid length.
[  638.333906][T15765] netlink: 'syz.3.3314': attribute type 10 has an invalid length.
[  638.495817][T15773] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3315'.
[  638.606217][T15774] netlink: 'syz.1.3318': attribute type 10 has an invalid length.
[  638.912394][T15782] netlink: 'syz.1.3322': attribute type 10 has an invalid length.
[  638.938970][T15781] delete_channel: no stack
[  639.117136][T15785] syzkaller0: entered promiscuous mode
[  639.125239][T15785] syzkaller0: entered allmulticast mode
[  639.330018][T15792] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3325'.
[  640.658939][T15815] netlink: 'syz.3.3333': attribute type 29 has an invalid length.
[  643.049031][T15815] netlink: 'syz.3.3333': attribute type 29 has an invalid length.
[  643.783197][T15835] netlink: 'syz.3.3341': attribute type 21 has an invalid length.
[  643.792523][T15835] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3341'.
[  643.819210][T15835] sit0: entered allmulticast mode
[  645.105200][T15860] netlink: 'syz.2.3348': attribute type 29 has an invalid length.
[  645.140962][T15860] netlink: 'syz.2.3348': attribute type 29 has an invalid length.
[  645.434075][T15869] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3353'.
[  646.231538][T15897] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3365'.
[  646.249759][T15895] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3364'.
[  646.318397][T15901] netlink: 'syz.2.3366': attribute type 10 has an invalid length.
[  646.326836][T15901] bridge_slave_1: left allmulticast mode
[  646.332676][T15901] bridge_slave_1: left promiscuous mode
[  646.339479][T15901] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.868327][T15916] netlink: 'syz.2.3370': attribute type 25 has an invalid length.
[  646.892241][T15916] netlink: 'syz.2.3370': attribute type 10 has an invalid length.
[  648.732368][T15964] netlink: 'syz.3.3388': attribute type 10 has an invalid length.
[  648.756022][T15964] bridge_slave_1: left allmulticast mode
[  648.762065][T15964] bridge_slave_1: left promiscuous mode
[  648.797749][T15964] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.819040][T15965] netlink: 'syz.1.3386': attribute type 1 has an invalid length.
[  648.843828][T15965] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3386'.
[  649.938806][T16000] netlink: 'syz.1.3400': attribute type 10 has an invalid length.
[  649.961348][T16000] bridge_slave_1: left allmulticast mode
[  649.975922][T16000] bridge_slave_1: left promiscuous mode
[  649.992640][T16000] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.293739][T16012] FAULT_INJECTION: forcing a failure.
[  650.293739][T16012] name failslab, interval 1, probability 0, space 0, times 0
[  650.313692][T16012] CPU: 0 PID: 16012 Comm: syz.1.3407 Not tainted syzkaller #0
[  650.321253][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  650.331354][T16012] Call Trace:
[  650.334691][T16012]  <TASK>
[  650.337649][T16012]  dump_stack_lvl+0x18c/0x250
[  650.342362][T16012]  ? show_regs_print_info+0x20/0x20
[  650.347594][T16012]  ? load_image+0x420/0x420
[  650.352149][T16012]  ? __might_sleep+0xe0/0xe0
[  650.356771][T16012]  ? __lock_acquire+0x7eb0/0x7eb0
[  650.361830][T16012]  should_fail_ex+0x394/0x4c0
[  650.366547][T16012]  should_failslab+0x9/0x20
[  650.371097][T16012]  slab_pre_alloc_hook+0x59/0x300
[  650.376155][T16012]  kmem_cache_alloc_lru+0x4d/0x2b0
[  650.381305][T16012]  ? sock_alloc_inode+0x28/0xc0
[  650.386200][T16012]  sock_alloc_inode+0x28/0xc0
[  650.390918][T16012]  ? sockfs_init_fs_context+0xb0/0xb0
[  650.396330][T16012]  new_inode_pseudo+0x63/0x1d0
[  650.401128][T16012]  __sock_create+0x12d/0x940
[  650.405748][T16012]  ? lock_chain_count+0x20/0x20
[  650.410640][T16012]  mptcp_subflow_create_socket+0x10c/0xad0
[  650.416485][T16012]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  650.422667][T16012]  ? lockdep_hardirqs_on+0x98/0x150
[  650.427898][T16012]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  650.433744][T16012]  ? mptcp_setsockopt+0xdfd/0x3370
[  650.438911][T16012]  __mptcp_nmpc_sk+0x157/0x720
[  650.443706][T16012]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  650.450499][T16012]  mptcp_setsockopt+0xe05/0x3370
[  650.455471][T16012]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  650.461654][T16012]  ? pm_nl_exit_net+0x230/0x230
[  650.466527][T16012]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  650.472720][T16012]  ? sock_common_setsockopt+0x64/0xc0
[  650.478124][T16012]  ? sock_common_recvmsg+0x190/0x190
[  650.483452][T16012]  do_sock_setsockopt+0x175/0x1a0
[  650.488514][T16012]  ? __fdget+0x180/0x210
[  650.492803][T16012]  __x64_sys_setsockopt+0x182/0x200
[  650.498057][T16012]  do_syscall_64+0x55/0xb0
[  650.502538][T16012]  ? clear_bhb_loop+0x40/0x90
[  650.507254][T16012]  ? clear_bhb_loop+0x40/0x90
[  650.511968][T16012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.517910][T16012] RIP: 0033:0x7f7369f9e1d9
[  650.522374][T16012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.542020][T16012] RSP: 002b:00007f736aece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  650.550725][T16012] RAX: ffffffffffffffda RBX: 00007f736a225fa0 RCX: 00007f7369f9e1d9
[  650.558723][T16012] RDX: 000000000000004b RSI: 0000000000000029 RDI: 000000000000000a
[  650.566741][T16012] RBP: 00007f736aece090 R08: 0000000000000004 R09: 0000000000000000
[  650.574759][T16012] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  650.582767][T16012] R13: 00007f736a226038 R14: 00007f736a225fa0 R15: 00007fffda216be8
[  650.590798][T16012]  </TASK>
[  650.634559][T16012] socket: no more sockets
[  651.147723][T16027] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3413'.
[  652.574944][T16049] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3417'.
[  654.728676][T16079] delete_channel: no stack
[  655.705901][T16080] netlink: 'syz.0.3430': attribute type 10 has an invalid length.
[  656.320489][T16110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3440'.
[  656.406649][T16111] netlink: 'syz.3.3440': attribute type 12 has an invalid length.
[  656.435125][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3440'.
[  656.509279][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3440'.
[  656.705048][T16116] netlink: 'syz.1.3443': attribute type 10 has an invalid length.
[  656.753115][T16117] FAULT_INJECTION: forcing a failure.
[  656.753115][T16117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.771314][T16117] CPU: 0 PID: 16117 Comm: syz.2.3442 Not tainted syzkaller #0
[  656.778856][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  656.788975][T16117] Call Trace:
[  656.792286][T16117]  <TASK>
[  656.795253][T16117]  dump_stack_lvl+0x18c/0x250
[  656.799968][T16117]  ? show_regs_print_info+0x20/0x20
[  656.805196][T16117]  ? load_image+0x420/0x420
[  656.809744][T16117]  ? __lock_acquire+0x7eb0/0x7eb0
[  656.814815][T16117]  should_fail_ex+0x394/0x4c0
[  656.819567][T16117]  _copy_from_user+0x2f/0xe0
[  656.824203][T16117]  __copy_msghdr+0x388/0x560
[  656.828856][T16117]  ___sys_sendmsg+0x214/0x360
[  656.833581][T16117]  ? __sys_sendmsg+0x2b0/0x2b0
[  656.838396][T16117]  ? ktime_get+0x7f/0x280
[  656.842779][T16117]  __se_sys_sendmsg+0x1d0/0x2c0
[  656.847670][T16117]  ? perf_trace_preemptirq_template+0x269/0x330
[  656.854035][T16117]  ? __x64_sys_sendmsg+0x80/0x80
[  656.859026][T16117]  ? lockdep_hardirqs_on+0x98/0x150
[  656.864260][T16117]  do_syscall_64+0x55/0xb0
[  656.868706][T16117]  ? clear_bhb_loop+0x40/0x90
[  656.873419][T16117]  ? clear_bhb_loop+0x40/0x90
[  656.878131][T16117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  656.884066][T16117] RIP: 0033:0x7f12c919e1d9
[  656.888517][T16117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.908162][T16117] RSP: 002b:00007f12ca08b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  656.916700][T16117] RAX: ffffffffffffffda RBX: 00007f12c9425fa0 RCX: 00007f12c919e1d9
[  656.924720][T16117] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000007
[  656.932751][T16117] RBP: 00007f12ca08b090 R08: 0000000000000000 R09: 0000000000000000
[  656.940765][T16117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.948769][T16117] R13: 00007f12c9426038 R14: 00007f12c9425fa0 R15: 00007ffd65799f28
[  656.956797][T16117]  </TASK>
[  657.094872][T16115] delete_channel: no stack
[  657.123800][T16125] netlink: 'syz.0.3445': attribute type 4 has an invalid length.
[  657.812907][T16151] netlink: 'syz.0.3454': attribute type 10 has an invalid length.
[  657.845198][T16149] delete_channel: no stack
[  658.508657][T16169] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  658.543640][T16169] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  658.739230][T16176] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3464'.
[  658.750530][T16176] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3464'.
[  658.888930][T16180] netlink: 'syz.0.3466': attribute type 10 has an invalid length.
[  658.906889][T16179] delete_channel: no stack
[  659.239558][T16195] netlink: 'syz.3.3469': attribute type 6 has an invalid length.
[  659.274740][T16203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3473'.
[  659.287155][T16203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3473'.
[  659.300833][T16201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3473'.
[  659.470572][T16210] netlink: 'syz.3.3476': attribute type 10 has an invalid length.
[  659.540948][T16207] delete_channel: no stack
[  660.329813][T16238] netlink: 'syz.3.3487': attribute type 10 has an invalid length.
[  660.360647][T16237] delete_channel: no stack
[  660.503339][T16244] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.3488'.
[  661.159259][T16269] netlink: 'syz.0.3499': attribute type 10 has an invalid length.
[  661.191318][T16267] delete_channel: no stack
[  661.400149][T16277] FAULT_INJECTION: forcing a failure.
[  661.400149][T16277] name failslab, interval 1, probability 0, space 0, times 0
[  661.427358][T16277] CPU: 0 PID: 16277 Comm: syz.0.3502 Not tainted syzkaller #0
[  661.434910][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  661.445106][T16277] Call Trace:
[  661.448434][T16277]  <TASK>
[  661.451406][T16277]  dump_stack_lvl+0x18c/0x250
[  661.456157][T16277]  ? show_regs_print_info+0x20/0x20
[  661.461385][T16277]  ? load_image+0x420/0x420
[  661.465941][T16277]  ? __might_sleep+0xe0/0xe0
[  661.470767][T16277]  ? __lock_acquire+0x7eb0/0x7eb0
[  661.476574][T16277]  should_fail_ex+0x394/0x4c0
[  661.481302][T16277]  should_failslab+0x9/0x20
[  661.485850][T16277]  slab_pre_alloc_hook+0x59/0x300
[  661.490917][T16277]  ? kvmalloc_node+0x70/0x180
[  661.495629][T16277]  ? kvmalloc_node+0x70/0x180
[  661.500337][T16277]  __kmem_cache_alloc_node+0x53/0x250
[  661.505789][T16277]  ? kvmalloc_node+0x70/0x180
[  661.510510][T16277]  __kmalloc_node+0xa6/0x240
[  661.516796][T16277]  kvmalloc_node+0x70/0x180
[  661.521335][T16277]  bpf_test_run_xdp_live+0x1c2/0x1b30
[  661.526736][T16277]  ? trace_call_bpf+0xc3/0x6c0
[  661.531531][T16277]  ? 0xffffffffa0004a00
[  661.535718][T16277]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  661.541656][T16277]  ? xdp_convert_md_to_buff+0x330/0x330
[  661.547248][T16277]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  661.553430][T16277]  ? lockdep_hardirqs_on+0x98/0x150
[  661.558671][T16277]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  661.564945][T16277]  ? bpf_prog_test_run_xdp+0x7b4/0x1140
[  661.570644][T16277]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  661.576074][T16277]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  661.583326][T16277]  ? dev_put+0x80/0x80
[  661.587454][T16277]  ? dev_put+0x80/0x80
[  661.591590][T16277]  bpf_prog_test_run+0x31f/0x390
[  661.596565][T16277]  __sys_bpf+0x49d/0x890
[  661.600838][T16277]  ? bpf_link_show_fdinfo+0x560/0x560
[  661.606254][T16277]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  661.612454][T16277]  __x64_sys_bpf+0x7c/0x90
[  661.616905][T16277]  do_syscall_64+0x55/0xb0
[  661.621368][T16277]  ? clear_bhb_loop+0x40/0x90
[  661.626093][T16277]  ? clear_bhb_loop+0x40/0x90
[  661.630804][T16277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  661.636737][T16277] RIP: 0033:0x7fcda3d9e1d9
[  661.641179][T16277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.660829][T16277] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  661.669301][T16277] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  661.677310][T16277] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  661.685318][T16277] RBP: 00007fcda4d42090 R08: 0000000000000000 R09: 0000000000000000
[  661.693318][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.701320][T16277] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  661.709332][T16277]  </TASK>
[  662.085189][T16296] netlink: 'syz.3.3510': attribute type 10 has an invalid length.
[  662.122199][T16295] delete_channel: no stack
[  662.270483][T16303] netlink: 'syz.2.3513': attribute type 13 has an invalid length.
[  662.297495][T16303] netlink: 'syz.2.3513': attribute type 58 has an invalid length.
[  662.313100][T16303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3513'.
[  663.396136][T16317] netlink: 'syz.0.3519': attribute type 10 has an invalid length.
[  663.418334][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3519'.
[  663.596529][T16325] netlink: 'syz.0.3522': attribute type 10 has an invalid length.
[  663.620325][T16322] netlink: 'syz.3.3521': attribute type 10 has an invalid length.
[  663.640904][T16324] delete_channel: no stack
[  663.662485][T16322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3521'.
[  663.703317][T16323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3521'.
[  663.815171][T16328] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.3523'.
[  664.337936][T16348] netlink: 'syz.1.3528': attribute type 10 has an invalid length.
[  664.513946][T16358] netlink: 2220 bytes leftover after parsing attributes in process `syz.3.3531'.
[  664.632439][T16363] netlink: 'syz.2.3532': attribute type 10 has an invalid length.
[  664.659828][T16362] delete_channel: no stack
[  665.657601][T16398] netlink: 'syz.3.3542': attribute type 10 has an invalid length.
[  665.678677][T16395] delete_channel: no stack
[  666.199822][ T5088] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  666.686383][T16420] netlink: 'syz.2.3552': attribute type 10 has an invalid length.
[  666.711736][T16419] delete_channel: no stack
[  666.780580][T16422] netlink: 'syz.1.3551': attribute type 10 has an invalid length.
[  666.809316][T16425] netlink: 'syz.2.3553': attribute type 3 has an invalid length.
[  666.819731][T16425] netlink: 'syz.2.3553': attribute type 8 has an invalid length.
[  666.827794][T16425] netlink: 'syz.2.3553': attribute type 6 has an invalid length.
[  666.834526][T16422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3551'.
[  666.842753][T16425] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3553'.
[  666.868608][T16422] batman_adv: batadv0: Adding interface: vlan1
[  666.876250][T16422] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.927620][T16422] batman_adv: batadv0: Interface activated: vlan1
[  667.749542][T16439] netlink: 'syz.2.3559': attribute type 39 has an invalid length.
[  668.016120][T16450] netlink: 'syz.0.3563': attribute type 10 has an invalid length.
[  668.077485][T16443] delete_channel: no stack
[  668.323277][T16445] syzkaller0: entered promiscuous mode
[  668.329001][T16445] syzkaller0: entered allmulticast mode
[  669.562871][T16480] delete_channel: no stack
[  670.316921][T16481] netlink: 'syz.0.3572': attribute type 10 has an invalid length.
[  672.396335][T16507] netlink: 'syz.3.3581': attribute type 10 has an invalid length.
[  672.425824][T16506] delete_channel: no stack
[  672.477894][T16505] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  672.528171][T16509] netlink: 'syz.2.3582': attribute type 10 has an invalid length.
[  672.550537][T16509] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.567673][T16509] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.579040][T16509] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.591473][T16509] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.690005][T16516] netlink: 'syz.3.3585': attribute type 25 has an invalid length.
[  672.698091][T16516] netlink: 'syz.3.3585': attribute type 10 has an invalid length.
[  672.819685][T16520] netlink: 'syz.1.3587': attribute type 10 has an invalid length.
[  673.267511][T16532] netlink: 'syz.0.3591': attribute type 10 has an invalid length.
[  673.309246][T16529] delete_channel: no stack
[  673.366349][T16540] netlink: 'syz.2.3594': attribute type 29 has an invalid length.
[  673.414138][T16540] netlink: 'syz.2.3594': attribute type 29 has an invalid length.
[  673.615117][T16550] netlink: 'syz.3.3598': attribute type 10 has an invalid length.
[  673.839239][T16563] netlink: 'syz.0.3603': attribute type 10 has an invalid length.
[  673.912502][T16561] delete_channel: no stack
[  675.098798][T16591] delete_channel: no stack
[  675.217448][T16599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3618'.
[  675.840024][T16617] netlink: 182744 bytes leftover after parsing attributes in process `syz.1.3624'.
[  675.987824][T16618] delete_channel: no stack
[  676.600153][T16646] delete_channel: no stack
[  676.934003][T16652] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3637'.
[  677.460262][T16663] FAULT_INJECTION: forcing a failure.
[  677.460262][T16663] name failslab, interval 1, probability 0, space 0, times 0
[  677.490913][T16663] CPU: 1 PID: 16663 Comm: syz.3.3642 Not tainted syzkaller #0
[  677.498499][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  677.508624][T16663] Call Trace:
[  677.511949][T16663]  <TASK>
[  677.514928][T16663]  dump_stack_lvl+0x18c/0x250
[  677.519672][T16663]  ? show_regs_print_info+0x20/0x20
[  677.524938][T16663]  ? load_image+0x420/0x420
[  677.529552][T16663]  ? __might_sleep+0xe0/0xe0
[  677.534295][T16663]  ? __lock_acquire+0x7eb0/0x7eb0
[  677.539391][T16663]  ? lock_chain_count+0x20/0x20
[  677.544319][T16663]  should_fail_ex+0x394/0x4c0
[  677.549062][T16663]  should_failslab+0x9/0x20
[  677.553623][T16663]  slab_pre_alloc_hook+0x59/0x300
[  677.558716][T16663]  kmem_cache_alloc_node+0x5e/0x310
[  677.563986][T16663]  ? __alloc_skb+0x103/0x2c0
[  677.568653][T16663]  __alloc_skb+0x103/0x2c0
[  677.573135][T16663]  netlink_sendmsg+0x66a/0xbf0
[  677.578053][T16663]  ? netlink_getsockopt+0x590/0x590
[  677.583314][T16663]  ? apparmor_socket_sendmsg+0x8e/0x330
[  677.588923][T16663]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  677.594280][T16663]  ? security_socket_sendmsg+0x80/0xa0
[  677.599845][T16663]  ? netlink_getsockopt+0x590/0x590
[  677.605120][T16663]  ____sys_sendmsg+0x61b/0x980
[  677.609965][T16663]  ? __asan_memset+0x22/0x40
[  677.614627][T16663]  ? __sys_sendmsg_sock+0x30/0x30
[  677.619714][T16663]  ? __import_iovec+0x5f2/0x850
[  677.624637][T16663]  ? import_iovec+0x73/0xa0
[  677.629215][T16663]  ___sys_sendmsg+0x2a6/0x360
[  677.633957][T16663]  ? __sys_sendmsg+0x2b0/0x2b0
[  677.638802][T16663]  ? ktime_get+0x7f/0x280
[  677.643223][T16663]  __se_sys_sendmsg+0x1d0/0x2c0
[  677.648139][T16663]  ? perf_trace_preemptirq_template+0x269/0x330
[  677.654465][T16663]  ? __x64_sys_sendmsg+0x80/0x80
[  677.659503][T16663]  ? lockdep_hardirqs_on+0x98/0x150
[  677.664766][T16663]  do_syscall_64+0x55/0xb0
[  677.669242][T16663]  ? clear_bhb_loop+0x40/0x90
[  677.673971][T16663]  ? clear_bhb_loop+0x40/0x90
[  677.678716][T16663]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  677.684718][T16663] RIP: 0033:0x7f0da1f9e1d9
[  677.689181][T16663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.708937][T16663] RSP: 002b:00007f0da2f44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.717413][T16663] RAX: ffffffffffffffda RBX: 00007f0da2225fa0 RCX: 00007f0da1f9e1d9
[  677.725524][T16663] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  677.733568][T16663] RBP: 00007f0da2f44090 R08: 0000000000000000 R09: 0000000000000000
[  677.741587][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.749606][T16663] R13: 00007f0da2226038 R14: 00007f0da2225fa0 R15: 00007ffc1ad8a1e8
[  677.757636][T16663]  </TASK>
[  677.804044][T16669] validate_nla: 12 callbacks suppressed
[  677.804065][T16669] netlink: 'syz.0.3644': attribute type 10 has an invalid length.
[  677.841169][T16666] delete_channel: no stack
[  678.328900][T16692] netlink: 'syz.3.3656': attribute type 10 has an invalid length.
[  678.388247][T16691] delete_channel: no stack
[  678.949516][T16711] netlink: 'syz.2.3661': attribute type 39 has an invalid length.
[  679.178965][T16713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3662'.
[  679.188477][T16713] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8
[  679.356201][T16721] netlink: 'syz.2.3667': attribute type 10 has an invalid length.
[  679.357667][T16719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3665'.
[  679.417343][T16720] delete_channel: no stack
[  680.233478][T16744] netlink: 'syz.3.3677': attribute type 10 has an invalid length.
[  680.263934][T16743] delete_channel: no stack
[  680.452919][T16747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  680.460354][T16747] IPv6: NLM_F_CREATE should be set when creating new route
[  680.498646][T16750] netlink: 'syz.3.3679': attribute type 9 has an invalid length.
[  680.544529][T16750] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3679'.
[  680.990821][T16757] FAULT_INJECTION: forcing a failure.
[  680.990821][T16757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.007049][T16757] CPU: 1 PID: 16757 Comm: syz.1.3682 Not tainted syzkaller #0
[  681.014601][T16757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  681.024725][T16757] Call Trace:
[  681.028109][T16757]  <TASK>
[  681.031099][T16757]  dump_stack_lvl+0x18c/0x250
[  681.035918][T16757]  ? show_regs_print_info+0x20/0x20
[  681.041182][T16757]  ? load_image+0x420/0x420
[  681.045764][T16757]  ? __might_fault+0xaa/0x120
[  681.050514][T16757]  ? __lock_acquire+0x7eb0/0x7eb0
[  681.055613][T16757]  should_fail_ex+0x394/0x4c0
[  681.060385][T16757]  _copy_from_user+0x2f/0xe0
[  681.065053][T16757]  ____sys_sendmsg+0x329/0x980
[  681.069899][T16757]  ? __sys_sendmsg_sock+0x30/0x30
[  681.075009][T16757]  ? __import_iovec+0x5f2/0x850
[  681.079953][T16757]  ? import_iovec+0x73/0xa0
[  681.084547][T16757]  ___sys_sendmsg+0x2a6/0x360
[  681.089310][T16757]  ? __sys_sendmsg+0x2b0/0x2b0
[  681.094195][T16757]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  681.100526][T16757]  __se_sys_sendmsg+0x1d0/0x2c0
[  681.105567][T16757]  ? __x64_sys_sendmsg+0x80/0x80
[  681.110631][T16757]  ? lockdep_hardirqs_on+0x98/0x150
[  681.115904][T16757]  do_syscall_64+0x55/0xb0
[  681.120386][T16757]  ? clear_bhb_loop+0x40/0x90
[  681.125118][T16757]  ? clear_bhb_loop+0x40/0x90
[  681.129855][T16757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.135816][T16757] RIP: 0033:0x7f7369f9e1d9
[  681.140290][T16757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.160053][T16757] RSP: 002b:00007f736aead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.168721][T16757] RAX: ffffffffffffffda RBX: 00007f736a226090 RCX: 00007f7369f9e1d9
[  681.176754][T16757] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000007
[  681.184873][T16757] RBP: 00007f736aead090 R08: 0000000000000000 R09: 0000000000000000
[  681.192897][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.200929][T16757] R13: 00007f736a226128 R14: 00007f736a226090 R15: 00007fffda216be8
[  681.208993][T16757]  </TASK>
[  681.907231][T16775] netlink: 'syz.2.3688': attribute type 10 has an invalid length.
[  681.959187][T16774] delete_channel: no stack
[  682.640845][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.673310][T16802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.716472][T16801] netlink: 'syz.3.3697': attribute type 12 has an invalid length.
[  682.733660][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.744838][T16802] netlink: 'syz.3.3697': attribute type 12 has an invalid length.
[  682.753046][T16802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.766711][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.777870][T16802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3697'.
[  682.909406][T16810] netlink: 'syz.2.3701': attribute type 10 has an invalid length.
[  682.970530][T16808] delete_channel: no stack
[  683.210963][T16820] netlink: 'syz.0.3706': attribute type 3 has an invalid length.
[  683.221979][T16820] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3706'.
[  686.338349][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  686.344922][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  686.473928][T16840] netlink: 'syz.0.3713': attribute type 10 has an invalid length.
[  686.514007][T16837] delete_channel: no stack
[  686.795961][T16847] syzkaller0: entered promiscuous mode
[  686.808612][T16847] syzkaller0: entered allmulticast mode
[  686.851614][T16853] sit0: entered allmulticast mode
[  687.111310][T16855] FAULT_INJECTION: forcing a failure.
[  687.111310][T16855] name failslab, interval 1, probability 0, space 0, times 0
[  687.127122][T16855] CPU: 1 PID: 16855 Comm: syz.3.3719 Not tainted syzkaller #0
[  687.134693][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  687.144809][T16855] Call Trace:
[  687.148142][T16855]  <TASK>
[  687.151158][T16855]  dump_stack_lvl+0x18c/0x250
[  687.155941][T16855]  ? show_regs_print_info+0x20/0x20
[  687.161219][T16855]  ? load_image+0x420/0x420
[  687.165788][T16855]  ? __might_sleep+0xe0/0xe0
[  687.170435][T16855]  ? __lock_acquire+0x7eb0/0x7eb0
[  687.175551][T16855]  should_fail_ex+0x394/0x4c0
[  687.180307][T16855]  should_failslab+0x9/0x20
[  687.184887][T16855]  slab_pre_alloc_hook+0x59/0x300
[  687.189968][T16855]  ? kvmalloc_node+0x70/0x180
[  687.194706][T16855]  ? kvmalloc_node+0x70/0x180
[  687.199439][T16855]  __kmem_cache_alloc_node+0x53/0x250
[  687.204881][T16855]  ? kvmalloc_node+0x70/0x180
[  687.209614][T16855]  __kmalloc_node+0xa6/0x240
[  687.214276][T16855]  kvmalloc_node+0x70/0x180
[  687.218844][T16855]  bpf_test_run_xdp_live+0x1e9/0x1b30
[  687.224295][T16855]  ? 0xffffffffa0004a00
[  687.228500][T16855]  ? 0xffffffffa0004a00
[  687.232711][T16855]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  687.238678][T16855]  ? xdp_convert_md_to_buff+0x330/0x330
[  687.244366][T16855]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  687.250671][T16855]  ? _copy_from_user+0xa5/0xe0
[  687.255489][T16855]  ? bpf_test_init+0x119/0x140
[  687.260315][T16855]  ? xdp_convert_md_to_buff+0x5b/0x330
[  687.265952][T16855]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  687.271387][T16855]  ? __lock_acquire+0x7eb0/0x7eb0
[  687.276510][T16855]  ? dev_put+0x80/0x80
[  687.280675][T16855]  ? dev_put+0x80/0x80
[  687.284809][T16855]  bpf_prog_test_run+0x31f/0x390
[  687.289811][T16855]  __sys_bpf+0x49d/0x890
[  687.294147][T16855]  ? bpf_link_show_fdinfo+0x560/0x560
[  687.299656][T16855]  ? lock_chain_count+0x20/0x20
[  687.304600][T16855]  __x64_sys_bpf+0x7c/0x90
[  687.309106][T16855]  do_syscall_64+0x55/0xb0
[  687.313672][T16855]  ? clear_bhb_loop+0x40/0x90
[  687.318404][T16855]  ? clear_bhb_loop+0x40/0x90
[  687.323143][T16855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  687.329131][T16855] RIP: 0033:0x7f0da1f9e1d9
[  687.333614][T16855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.353304][T16855] RSP: 002b:00007f0da2f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  687.361810][T16855] RAX: ffffffffffffffda RBX: 00007f0da2225fa0 RCX: 00007f0da1f9e1d9
[  687.369866][T16855] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  687.377903][T16855] RBP: 00007f0da2f44090 R08: 0000000000000000 R09: 0000000000000000
[  687.385948][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.393987][T16855] R13: 00007f0da2226038 R14: 00007f0da2225fa0 R15: 00007ffc1ad8a1e8
[  687.402079][T16855]  </TASK>
[  689.400891][T16850] sit0: entered promiscuous mode
[  689.433476][T16863] netlink: 'syz.3.3721': attribute type 10 has an invalid length.
[  689.527432][T16871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3725'.
[  690.637750][T16882] netlink: 'syz.1.3728': attribute type 2 has an invalid length.
[  690.646084][T16882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3728'.
[  690.829653][T16893] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3732'.
[  690.860237][T16893] openvswitch: netlink: Flow key attribute not present in set flow.
[  692.203545][T16927] netlink: 'syz.3.3744': attribute type 10 has an invalid length.
[  692.283148][T16925] delete_channel: no stack
[  692.422348][T16929] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3746'.
[  692.453810][T16929] openvswitch: netlink: Flow key attribute not present in set flow.
[  692.894402][T16954] netlink: 'syz.1.3755': attribute type 10 has an invalid length.
[  692.934523][T16953] delete_channel: no stack
[  693.860831][T16964] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3758'.
[  693.898236][T16964] openvswitch: netlink: Flow key attribute not present in set flow.
[  694.139675][T16968] netlink: 'syz.3.3759': attribute type 39 has an invalid length.
[  694.309348][T16968] bond0: (slave hsr_slave_1): Releasing backup interface
[  694.599890][T16982] netlink: 'syz.0.3764': attribute type 10 has an invalid length.
[  695.129285][T16992] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3768'.
[  695.284601][T16994] syzkaller0: entered promiscuous mode
[  695.290183][T16994] syzkaller0: entered allmulticast mode
[  697.242295][T17007] netlink: 'syz.2.3771': attribute type 10 has an invalid length.
[  699.587242][T17052] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3785'.
[  699.655677][T17052] hsr_slave_0: left promiscuous mode
[  700.932639][T17064] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3787'.
[  701.416439][T17067] netlink: 'syz.0.3797': attribute type 1 has an invalid length.
[  701.443467][T17067] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.3797'.
[  701.729004][T17072] netlink: 'syz.2.3790': attribute type 3 has an invalid length.
[  701.743840][T17072] netlink: 'syz.2.3790': attribute type 1 has an invalid length.
[  701.753009][T17072] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3790'.
[  701.788203][T17071] delete_channel: no stack
[  703.278888][T17078] TCP: TCP_TX_DELAY enabled
[  708.847477][T17147] netlink: 'syz.1.3812': attribute type 10 has an invalid length.
[  709.178797][T17152] netlink: 'syz.3.3814': attribute type 21 has an invalid length.
[  709.233608][T17152] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3814'.
[  709.312043][T17152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3814'.
[  709.362960][T17155] netlink: 'syz.2.3815': attribute type 25 has an invalid length.
[  709.382448][T17155] netlink: 'syz.2.3815': attribute type 10 has an invalid length.
[  709.884575][T17157] netlink: 'syz.0.3816': attribute type 10 has an invalid length.
[  709.965510][T17156] delete_channel: no stack
[  710.784427][T17166] netlink: 'syz.1.3817': attribute type 10 has an invalid length.
[  710.808633][T17168] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.3820'.
[  711.315572][T17163] delete_channel: no stack
[  711.586581][T17173] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3822'.
[  711.626511][T17173] openvswitch: netlink: Flow actions attr not present in new flow.
[  711.851661][T17176] netlink: 'syz.2.3823': attribute type 27 has an invalid length.
[  711.894178][T17176] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3823'.
[  712.790625][T17181] FAULT_INJECTION: forcing a failure.
[  712.790625][T17181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.835073][T17181] CPU: 1 PID: 17181 Comm: syz.2.3824 Not tainted syzkaller #0
[  712.842661][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  712.852784][T17181] Call Trace:
[  712.856149][T17181]  <TASK>
[  712.859156][T17181]  dump_stack_lvl+0x18c/0x250
[  712.863929][T17181]  ? show_regs_print_info+0x20/0x20
[  712.869192][T17181]  ? load_image+0x420/0x420
[  712.873802][T17181]  ? __might_fault+0xaa/0x120
[  712.878566][T17181]  ? __lock_acquire+0x7eb0/0x7eb0
[  712.883698][T17181]  should_fail_ex+0x394/0x4c0
[  712.888469][T17181]  _copy_from_user+0x2f/0xe0
[  712.893155][T17181]  __sys_bpf+0x23e/0x890
[  712.897477][T17181]  ? bpf_link_show_fdinfo+0x560/0x560
[  712.902998][T17181]  ? lock_chain_count+0x20/0x20
[  712.907972][T17181]  __x64_sys_bpf+0x7c/0x90
[  712.912497][T17181]  do_syscall_64+0x55/0xb0
[  712.917078][T17181]  ? clear_bhb_loop+0x40/0x90
[  712.921842][T17181]  ? clear_bhb_loop+0x40/0x90
[  712.926626][T17181]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.932624][T17181] RIP: 0033:0x7f12c919e1d9
[  712.937116][T17181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.956799][T17181] RSP: 002b:00007f12ca08b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  712.965292][T17181] RAX: ffffffffffffffda RBX: 00007f12c9425fa0 RCX: 00007f12c919e1d9
[  712.973322][T17181] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  712.981366][T17181] RBP: 00007f12ca08b090 R08: 0000000000000000 R09: 0000000000000000
[  712.989398][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.997425][T17181] R13: 00007f12c9426038 R14: 00007f12c9425fa0 R15: 00007ffd65799f28
[  713.005519][T17181]  </TASK>
[  713.261604][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3826'.
[  713.273701][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3826'.
[  713.295316][T17183] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3826'.
[  713.434485][T17183] tap0: tun_chr_ioctl cmd 2147767519
[  713.526977][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3826'.
[  713.592566][T17186] tap0: tun_chr_ioctl cmd 1074025673
[  713.616538][T17189] tap0: tun_chr_ioctl cmd 2147767519
[  713.931958][T17194] netlink: 'syz.1.3825': attribute type 1 has an invalid length.
[  714.016719][T17194] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3825'.
[  714.487441][T17201] netlink: 'syz.2.3829': attribute type 10 has an invalid length.
[  714.567670][T17200] delete_channel: no stack
[  715.077061][T17205] netlink: 'syz.2.3833': attribute type 10 has an invalid length.
[  715.166594][T17204] delete_channel: no stack
[  716.624760][T17223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  716.632326][T17223] IPv6: NLM_F_CREATE should be set when creating new route
[  716.639957][T17223] IPv6: NLM_F_CREATE should be set when creating new route
[  716.647449][T17223] IPv6: NLM_F_CREATE should be set when creating new route
[  717.796951][T17234] netlink: 'syz.0.3841': attribute type 10 has an invalid length.
[  717.830733][T17233] delete_channel: no stack
[  718.345508][T17239] netlink: 'syz.0.3843': attribute type 10 has an invalid length.
[  718.464878][T17241] __nla_validate_parse: 1 callbacks suppressed
[  718.464898][T17241] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3842'.
[  718.530625][T17238] delete_channel: no stack
[  718.543809][T17241] openvswitch: netlink: Flow actions attr not present in new flow.
[  721.550711][T17271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  721.558173][T17271] IPv6: NLM_F_CREATE should be set when creating new route
[  721.565780][T17271] IPv6: NLM_F_CREATE should be set when creating new route
[  721.573117][T17271] IPv6: NLM_F_CREATE should be set when creating new route
[  722.330701][T17275] syzkaller0: entered promiscuous mode
[  722.362194][T17275] syzkaller0: entered allmulticast mode
[  722.399831][T17281] netlink: 'syz.0.3855': attribute type 10 has an invalid length.
[  722.481033][T17280] delete_channel: no stack
[  728.372494][T17313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  728.379931][T17313] IPv6: NLM_F_CREATE should be set when creating new route
[  728.487389][T17319] netlink: 'syz.2.3865': attribute type 10 has an invalid length.
[  728.527353][T17318] delete_channel: no stack
[  728.789234][T17332] netlink: 'syz.2.3872': attribute type 21 has an invalid length.
[  728.813725][T17332] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3872'.
[  728.890797][T17336] netlink: 'syz.1.3873': attribute type 21 has an invalid length.
[  728.913228][T17336] netlink: 'syz.1.3873': attribute type 22 has an invalid length.
[  728.922152][T17336] netlink: 'syz.1.3873': attribute type 13 has an invalid length.
[  728.932963][T17336] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.3873'.
[  729.020332][T17342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3875'.
[  729.057806][T17342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3875'.
[  729.088907][T17343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3875'.
[  729.116291][T17342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3875'.
[  729.137829][T17344] netlink: 'syz.3.3874': attribute type 10 has an invalid length.
[  729.196723][T17342] netlink: 'syz.2.3875': attribute type 10 has an invalid length.
[  729.510057][T17353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3877'.
[  729.642782][T17357] netlink: 'syz.0.3879': attribute type 10 has an invalid length.
[  729.743000][T17356] delete_channel: no stack
[  729.915956][T17364] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3882'.
[  730.151702][T17358] netlink: 'syz.1.3880': attribute type 2 has an invalid length.
[  730.216153][T17358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3880'.
[  731.548657][T17395] netlink: 'syz.1.3889': attribute type 10 has an invalid length.
[  731.569622][T17394] delete_channel: no stack
[  731.779794][T17404] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.3890'.
[  732.970591][T17421] delete_channel: no stack
[  733.783986][T17439] validate_nla: 5 callbacks suppressed
[  733.784006][T17439] netlink: 'syz.2.3905': attribute type 21 has an invalid length.
[  733.800298][T17439] netlink: 'syz.2.3905': attribute type 22 has an invalid length.
[  733.808550][T17439] netlink: 'syz.2.3905': attribute type 13 has an invalid length.
[  733.986323][T17445] netlink: 'syz.3.3908': attribute type 3 has an invalid length.
[  733.996869][T17445] __nla_validate_parse: 3 callbacks suppressed
[  733.996888][T17445] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3908'.
[  734.026513][T17446] netlink: 'syz.1.3907': attribute type 10 has an invalid length.
[  734.049613][T17443] delete_channel: no stack
[  734.300037][T17450] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3910'.
[  734.309768][T17450] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.3910'.
[  734.415088][T17452] netlink: 'syz.3.3911': attribute type 10 has an invalid length.
[  734.428302][T17452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3911'.
[  734.441472][T17452] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  734.852869][T17473] netlink: 'syz.1.3921': attribute type 39 has an invalid length.
[  735.040280][T17479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3923'.
[  735.061233][T17479] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3923'.
[  735.636522][T17498] netlink: 'syz.1.3933': attribute type 10 has an invalid length.
[  735.646340][T17498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3933'.
[  736.135924][T17515] syzkaller0: entered promiscuous mode
[  736.141506][T17515] syzkaller0: entered allmulticast mode
[  736.150996][T17512] netlink: 'syz.2.3938': attribute type 22 has an invalid length.
[  736.160431][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'.
[  739.935927][T17548] netlink: 'syz.2.3945': attribute type 10 has an invalid length.
[  740.076250][T17553] netlink: 'syz.2.3947': attribute type 25 has an invalid length.
[  740.084340][T17553] netlink: 'syz.2.3947': attribute type 10 has an invalid length.
[  740.265042][T17559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3950'.
[  740.280076][T17559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3950'.
[  740.303614][T17559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3950'.
[  740.328712][T17559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3950'.
[  740.349371][T17559] netlink: 'syz.1.3950': attribute type 10 has an invalid length.
[  740.595306][T17557] netlink: 'syz.3.3949': attribute type 13 has an invalid length.
[  740.685843][T17557] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3949'.
[  740.725928][T17557] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  740.779925][T17565] netlink: 'syz.3.3949': attribute type 13 has an invalid length.
[  740.798339][T17565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3949'.
[  740.822068][T17571] ==================================================================
[  740.830217][T17571] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  740.838095][T17571] Write of size 56 at addr ffff88805e9a6510 by task syz.0.3954/17571
[  740.846245][T17571] 
[  740.848608][T17571] CPU: 0 PID: 17571 Comm: syz.0.3954 Not tainted syzkaller #0
[  740.856116][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  740.866305][T17571] Call Trace:
[  740.869627][T17571]  <TASK>
[  740.872598][T17571]  dump_stack_lvl+0x18c/0x250
[  740.877329][T17571]  ? read_lock_is_recursive+0x20/0x20
[  740.882765][T17571]  ? show_regs_print_info+0x20/0x20
[  740.888005][T17571]  ? load_image+0x420/0x420
[  740.892541][T17571]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  740.898035][T17571]  ? __virt_addr_valid+0x10c/0x380
[  740.903182][T17571]  ? __virt_addr_valid+0x10c/0x380
[  740.908326][T17571]  ? __virt_addr_valid+0x10c/0x380
[  740.913493][T17571]  print_report+0xa8/0x210
[  740.917962][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  740.923330][T17571]  kasan_report+0x117/0x150
[  740.927916][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  740.933144][T17571]  kasan_check_range+0x241/0x290
[  740.938149][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  740.943427][T17571]  __asan_memcpy+0x40/0x70
[  740.947916][T17571]  __bpf_get_stackid+0x6c7/0x900
[  740.952914][T17571]  bpf_get_stackid_pe+0x343/0x410
[  740.957991][T17571]  bpf_prog_e1579db1cbcc3ac0+0x30/0x40
[  740.963626][T17571]  bpf_overflow_handler+0x1fc/0x510
[  740.969006][T17571]  ? bpf_overflow_handler+0xde/0x510
[  740.974374][T17571]  ? tp_perf_event_destroy+0x20/0x20
[  740.979740][T17571]  ? __lock_acquire+0x135d/0x7eb0
[  740.984820][T17571]  ? __perf_event_account_interrupt+0x187/0x280
[  740.991111][T17571]  __perf_event_overflow+0x461/0x660
[  740.996460][T17571]  perf_swevent_overflow+0x274/0x340
[  741.001895][T17571]  ? perf_event_switch_output+0x790/0x790
[  741.007957][T17571]  ? rcu_is_watching+0x15/0xb0
[  741.012810][T17571]  perf_swevent_event+0x45c/0x570
[  741.017927][T17571]  ? perf_tp_event+0x1550/0x1550
[  741.022932][T17571]  ___perf_sw_event+0x4ab/0x730
[  741.027861][T17571]  ? ___perf_sw_event+0x19e/0x730
[  741.032932][T17571]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  741.039394][T17571]  ? __lock_acquire+0x1431/0x7eb0
[  741.044504][T17571]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  741.050614][T17571]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  741.057861][T17571]  ? lock_chain_count+0x20/0x20
[  741.062844][T17571]  __perf_sw_event+0x139/0x270
[  741.067653][T17571]  do_user_addr_fault+0x1242/0x12d0
[  741.072895][T17571]  ? rcu_is_watching+0x15/0xb0
[  741.077714][T17571]  exc_page_fault+0x64/0x100
[  741.082350][T17571]  asm_exc_page_fault+0x26/0x30
[  741.087241][T17571] RIP: 0010:strncpy_from_user+0x10b/0x2f0
[  741.093012][T17571] Code: 00 00 48 89 de e8 25 12 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48
[  741.112657][T17571] RSP: 0018:ffffc900041bfb50 EFLAGS: 00050246
[  741.118765][T17571] RAX: ffffffff846782cb RBX: 000000000000007f RCX: ffff88801e255a00
[  741.126875][T17571] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[  741.134881][T17571] RBP: ffffc900041bfd70 R08: ffff88801e255a00 R09: 0000000000000003
[  741.142887][T17571] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000
[  741.150889][T17571] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000
[  741.158900][T17571]  ? strncpy_from_user+0xeb/0x2f0
[  741.164071][T17571]  bpf_prog_load+0xc9e/0x1610
[  741.168797][T17571]  ? map_freeze+0x420/0x420
[  741.173354][T17571]  ? __might_fault+0xaa/0x120
[  741.178083][T17571]  ? __might_fault+0xc6/0x120
[  741.182794][T17571]  ? __might_fault+0xaa/0x120
[  741.187513][T17571]  ? bpf_lsm_bpf+0x9/0x10
[  741.191887][T17571]  ? security_bpf+0x7e/0xa0
[  741.196447][T17571]  __sys_bpf+0x5ba/0x890
[  741.200762][T17571]  ? bpf_link_show_fdinfo+0x560/0x560
[  741.206181][T17571]  ? lock_chain_count+0x20/0x20
[  741.211074][T17571]  __x64_sys_bpf+0x7c/0x90
[  741.215533][T17571]  do_syscall_64+0x55/0xb0
[  741.219988][T17571]  ? clear_bhb_loop+0x40/0x90
[  741.224733][T17571]  ? clear_bhb_loop+0x40/0x90
[  741.229540][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.235581][T17571] RIP: 0033:0x7fcda3d9e1d9
[  741.240054][T17571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.259787][T17571] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  741.268241][T17571] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  741.276382][T17571] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  741.284400][T17571] RBP: 00007fcda3e35888 R08: 0000000000000000 R09: 0000000000000000
[  741.292498][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  741.300570][T17571] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  741.308599][T17571]  </TASK>
[  741.311647][T17571] 
[  741.314013][T17571] Allocated by task 17571:
[  741.318488][T17571]  kasan_set_track+0x4e/0x70
[  741.323197][T17571]  __kasan_kmalloc+0x8f/0xa0
[  741.327814][T17571]  __kmalloc_node+0xb6/0x240
[  741.332438][T17571]  bpf_map_area_alloc+0x5e/0x110
[  741.337432][T17571]  prealloc_elems_and_freelist+0x86/0x1c0
[  741.343187][T17571]  stack_map_alloc+0x32b/0x4b0
[  741.348009][T17571]  map_create+0x877/0x12f0
[  741.352459][T17571]  __sys_bpf+0x651/0x890
[  741.356728][T17571]  __x64_sys_bpf+0x7c/0x90
[  741.361193][T17571]  do_syscall_64+0x55/0xb0
[  741.365652][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.371595][T17571] 
[  741.373956][T17571] Last potentially related work creation:
[  741.379736][T17571]  kasan_save_stack+0x3e/0x60
[  741.384466][T17571]  __kasan_record_aux_stack+0xaf/0xc0
[  741.389869][T17571]  call_rcu+0x153/0x900
[  741.394061][T17571]  __nf_register_net_hook+0x787/0x910
[  741.399460][T17571]  nf_register_net_hook+0xb2/0x190
[  741.404595][T17571]  nf_register_net_hooks+0x44/0x1b0
[  741.409821][T17571]  nf_ct_netns_do_get+0x213/0x5c0
[  741.414870][T17571]  nf_ct_netns_inet_get+0x3b/0x150
[  741.420183][T17571]  nf_conncount_init+0x127/0x380
[  741.425158][T17571]  ovs_ct_init+0x264/0x430
[  741.429741][T17571]  ovs_init_net+0x1e6/0x250
[  741.434304][T17571]  ops_init+0x391/0x640
[  741.438508][T17571]  setup_net+0x3b6/0xa20
[  741.442791][T17571]  copy_net_ns+0x361/0x530
[  741.447236][T17571]  create_new_namespaces+0x3ce/0x700
[  741.452559][T17571]  copy_namespaces+0x42a/0x4a0
[  741.457443][T17571]  copy_process+0x16f6/0x3da0
[  741.462143][T17571]  kernel_clone+0x24b/0x8a0
[  741.466668][T17571]  __x64_sys_clone+0x1b7/0x230
[  741.471459][T17571]  do_syscall_64+0x55/0xb0
[  741.475894][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.481816][T17571] 
[  741.484156][T17571] Second to last potentially related work creation:
[  741.490771][T17571]  kasan_save_stack+0x3e/0x60
[  741.495490][T17571]  __kasan_record_aux_stack+0xaf/0xc0
[  741.500897][T17571]  call_rcu+0x153/0x900
[  741.505078][T17571]  nf_unregister_net_hooks+0xcb/0x130
[  741.510470][T17571]  nf_defrag_ipv6_disable+0x95/0xe0
[  741.515727][T17571]  nf_ct_netns_put+0x375/0x520
[  741.520515][T17571]  nf_conncount_destroy+0x41/0x150
[  741.525696][T17571]  ovs_ct_exit_finish+0xa5/0x210
[  741.530684][T17571]  ovs_exit_net+0xed/0x7a0
[  741.535146][T17571]  cleanup_net+0x6f7/0xb00
[  741.539594][T17571]  process_scheduled_works+0xa60/0x1600
[  741.545169][T17571]  worker_thread+0xa5e/0xfe0
[  741.549782][T17571]  kthread+0x2fa/0x390
[  741.553874][T17571]  ret_from_fork+0x48/0x80
[  741.558441][T17571]  ret_from_fork_asm+0x11/0x20
[  741.563254][T17571] 
[  741.565607][T17571] The buggy address belongs to the object at ffff88805e9a6500
[  741.565607][T17571]  which belongs to the cache kmalloc-cg-64 of size 64
[  741.579787][T17571] The buggy address is located 16 bytes inside of
[  741.579787][T17571]  allocated 40-byte region [ffff88805e9a6500, ffff88805e9a6528)
[  741.593883][T17571] 
[  741.596225][T17571] The buggy address belongs to the physical page:
[  741.602664][T17571] page:ffffea00017a6980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e9a6
[  741.612839][T17571] memcg:ffff88801ea48a01
[  741.617096][T17571] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  741.624664][T17571] page_type: 0xffffffff()
[  741.629038][T17571] raw: 00fff00000000800 ffff88801884da00 ffffea0000c543c0 dead000000000002
[  741.637651][T17571] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88801ea48a01
[  741.646256][T17571] page dumped because: kasan: bad access detected
[  741.652702][T17571] page_owner tracks the page as allocated
[  741.658432][T17571] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5783, tgid 5783 (syz-executor), ts 227679198275, free_ts 227678734992
[  741.676868][T17571]  post_alloc_hook+0x1c1/0x200
[  741.681658][T17571]  get_page_from_freelist+0x2181/0x22a0
[  741.687230][T17571]  __alloc_pages+0x1f0/0x460
[  741.691844][T17571]  alloc_slab_page+0x5d/0x180
[  741.696546][T17571]  new_slab+0x87/0x2d0
[  741.700656][T17571]  ___slab_alloc+0xc5c/0x12f0
[  741.705355][T17571]  __kmem_cache_alloc_node+0x11f/0x250
[  741.710846][T17571]  kmalloc_trace+0x2a/0xe0
[  741.715296][T17571]  alloc_fdtable+0xca/0x2c0
[  741.719839][T17571]  dup_fd+0x747/0xa20
[  741.723857][T17571]  copy_files+0xaf/0x110
[  741.728128][T17571]  copy_process+0x157d/0x3da0
[  741.732827][T17571]  kernel_clone+0x24b/0x8a0
[  741.737361][T17571]  __x64_sys_clone+0x1b7/0x230
[  741.742156][T17571]  do_syscall_64+0x55/0xb0
[  741.746595][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.752525][T17571] page last free stack trace:
[  741.757213][T17571]  free_unref_page_prepare+0x7d7/0x8f0
[  741.762695][T17571]  free_unref_page+0x32/0x2e0
[  741.767395][T17571]  vfree+0x1a7/0x340
[  741.771402][T17571]  do_ip6t_get_ctl+0xf01/0x1220
[  741.776291][T17571]  nf_getsockopt+0x262/0x280
[  741.780908][T17571]  ipv6_getsockopt+0x233/0x2e0
[  741.785727][T17571]  do_sock_getsockopt+0x379/0x450
[  741.790788][T17571]  __x64_sys_getsockopt+0x1d6/0x280
[  741.796023][T17571]  do_syscall_64+0x55/0xb0
[  741.800460][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.806385][T17571] 
[  741.808752][T17571] Memory state around the buggy address:
[  741.814395][T17571]  ffff88805e9a6400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  741.822479][T17571]  ffff88805e9a6480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  741.830571][T17571] >ffff88805e9a6500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  741.838661][T17571]                                   ^
[  741.844060][T17571]  ffff88805e9a6580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  741.852330][T17571]  ffff88805e9a6600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  741.860412][T17571] ==================================================================
[  741.868504][T17571] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  741.875737][T17571] CPU: 0 PID: 17571 Comm: syz.0.3954 Not tainted syzkaller #0
[  741.883215][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  741.893294][T17571] Call Trace:
[  741.896596][T17571]  <TASK>
[  741.899579][T17571]  dump_stack_lvl+0x18c/0x250
[  741.904286][T17571]  ? show_regs_print_info+0x20/0x20
[  741.909513][T17571]  ? load_image+0x420/0x420
[  741.914075][T17571]  panic+0x2ca/0x720
[  741.918008][T17571]  ? __lock_acquire+0x7eb0/0x7eb0
[  741.923061][T17571]  ? bpf_jit_dump+0xd0/0xd0
[  741.927614][T17571]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  741.933539][T17571]  ? _raw_spin_unlock+0x40/0x40
[  741.938423][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  741.943569][T17571]  check_panic_on_warn+0x84/0xa0
[  741.948536][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  741.953677][T17571]  end_report+0x6f/0x130
[  741.957949][T17571]  kasan_report+0x128/0x150
[  741.962477][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  741.967727][T17571]  kasan_check_range+0x241/0x290
[  741.972696][T17571]  ? __bpf_get_stackid+0x6c7/0x900
[  741.978564][T17571]  __asan_memcpy+0x40/0x70
[  741.983039][T17571]  __bpf_get_stackid+0x6c7/0x900
[  741.988085][T17571]  bpf_get_stackid_pe+0x343/0x410
[  741.993480][T17571]  bpf_prog_e1579db1cbcc3ac0+0x30/0x40
[  741.999597][T17571]  bpf_overflow_handler+0x1fc/0x510
[  742.004869][T17571]  ? bpf_overflow_handler+0xde/0x510
[  742.010212][T17571]  ? tp_perf_event_destroy+0x20/0x20
[  742.015535][T17571]  ? __lock_acquire+0x135d/0x7eb0
[  742.020602][T17571]  ? __perf_event_account_interrupt+0x187/0x280
[  742.026883][T17571]  __perf_event_overflow+0x461/0x660
[  742.032204][T17571]  perf_swevent_overflow+0x274/0x340
[  742.037536][T17571]  ? perf_event_switch_output+0x790/0x790
[  742.043299][T17571]  ? rcu_is_watching+0x15/0xb0
[  742.048132][T17571]  perf_swevent_event+0x45c/0x570
[  742.053196][T17571]  ? perf_tp_event+0x1550/0x1550
[  742.058170][T17571]  ___perf_sw_event+0x4ab/0x730
[  742.063052][T17571]  ? ___perf_sw_event+0x19e/0x730
[  742.068191][T17571]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  742.074656][T17571]  ? __lock_acquire+0x1431/0x7eb0
[  742.079733][T17571]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  742.085747][T17571]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  742.093016][T17571]  ? lock_chain_count+0x20/0x20
[  742.097918][T17571]  __perf_sw_event+0x139/0x270
[  742.102708][T17571]  do_user_addr_fault+0x1242/0x12d0
[  742.107946][T17571]  ? rcu_is_watching+0x15/0xb0
[  742.112749][T17571]  exc_page_fault+0x64/0x100
[  742.117380][T17571]  asm_exc_page_fault+0x26/0x30
[  742.122247][T17571] RIP: 0010:strncpy_from_user+0x10b/0x2f0
[  742.128029][T17571] Code: 00 00 48 89 de e8 25 12 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48
[  742.147669][T17571] RSP: 0018:ffffc900041bfb50 EFLAGS: 00050246
[  742.153772][T17571] RAX: ffffffff846782cb RBX: 000000000000007f RCX: ffff88801e255a00
[  742.161770][T17571] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007
[  742.169789][T17571] RBP: ffffc900041bfd70 R08: ffff88801e255a00 R09: 0000000000000003
[  742.177788][T17571] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000
[  742.185784][T17571] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000
[  742.193812][T17571]  ? strncpy_from_user+0xeb/0x2f0
[  742.198879][T17571]  bpf_prog_load+0xc9e/0x1610
[  742.203595][T17571]  ? map_freeze+0x420/0x420
[  742.208131][T17571]  ? __might_fault+0xaa/0x120
[  742.212832][T17571]  ? __might_fault+0xc6/0x120
[  742.217526][T17571]  ? __might_fault+0xaa/0x120
[  742.222223][T17571]  ? bpf_lsm_bpf+0x9/0x10
[  742.226579][T17571]  ? security_bpf+0x7e/0xa0
[  742.231116][T17571]  __sys_bpf+0x5ba/0x890
[  742.235385][T17571]  ? bpf_link_show_fdinfo+0x560/0x560
[  742.240798][T17571]  ? lock_chain_count+0x20/0x20
[  742.245680][T17571]  __x64_sys_bpf+0x7c/0x90
[  742.250129][T17571]  do_syscall_64+0x55/0xb0
[  742.254569][T17571]  ? clear_bhb_loop+0x40/0x90
[  742.259361][T17571]  ? clear_bhb_loop+0x40/0x90
[  742.264076][T17571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.270025][T17571] RIP: 0033:0x7fcda3d9e1d9
[  742.274497][T17571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.295213][T17571] RSP: 002b:00007fcda4d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  742.303766][T17571] RAX: ffffffffffffffda RBX: 00007fcda4025fa0 RCX: 00007fcda3d9e1d9
[  742.311792][T17571] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  742.319814][T17571] RBP: 00007fcda3e35888 R08: 0000000000000000 R09: 0000000000000000
[  742.327824][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.335828][T17571] R13: 00007fcda4026038 R14: 00007fcda4025fa0 R15: 00007ffd11b6f258
[  742.343863][T17571]  </TASK>
[  742.347488][T17571] Kernel Offset: disabled
[  742.351837][T17571] Rebooting in 86400 seconds..