last executing test programs:

2.192671659s ago: executing program 3 (id=4552):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x8000})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="eca300"/12, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x80000000000062af, 0x62f02, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1002, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
r6 = openat$cgroup_ro(r2, &(0x7f0000000e80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0x5, 0x7, 0xe1c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94)

2.15225221s ago: executing program 0 (id=4553):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xfdef}], 0x1}, 0x0)

2.027926144s ago: executing program 1 (id=4554):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0xffff, 0x43a1bd76, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x8b, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000840), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f0008000000", @ANYRES32], &(0x7f0000000580)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}], 0x10, 0x58586df}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xff)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.82297509s ago: executing program 0 (id=4556):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510000002000000850000005500000095000000000000009500a50590ffffff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x47, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x11bb9526, 0x0, 0xffffffffffffffff, 0xfffffe00, '\x00', r1, r2, 0x2, 0x5, 0x2}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x400b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
syz_clone(0xe69d6eb614d5b6bc, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20440, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

1.703731434s ago: executing program 3 (id=4558):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb88", 0x29}], 0x1}, 0x60404)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000200000", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)

1.5277187s ago: executing program 0 (id=4560):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/17, @ANYRES32, @ANYBLOB="04000000010001000200"/28], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000080)="365d65477f54c1380155fcb199e5ea737798ebf40a63b3ac5658b92aefa377421c8012e147daf39986ac7ac582da831925cc620b5a31dbf2b04a392422c84023f50800f92dcbfd9eb48d954728f047f5ad4438f9743e49", &(0x7f0000000240)=""/134}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750", 0xd}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000011c0)={0xffffffffffffffff, r5})
sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)}], 0x2, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa6401010100000000800000000000000000000000070000004454fe737f00000100000008e000000200000005ac1414aa00008001ac1e0001000000087f00000100000005e000000200000001ac1e000100000006ac1414aa000000076401010000000005ffffffff00000008890f267f0000017f000001ac1e0101860b4bf95840c7e7a937fb00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414aa000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0xe0}, 0x20000410)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xd)

1.486557852s ago: executing program 3 (id=4561):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0xffffffff)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x4, 0xc}, 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40010)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)

1.254365869s ago: executing program 0 (id=4563):
r0 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014200000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.108308084s ago: executing program 1 (id=4564):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
socket$kcm(0xa, 0x3, 0x11)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

1.108028914s ago: executing program 2 (id=4565):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (fail_nth: 6)

1.105474794s ago: executing program 0 (id=4572):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0xffff, 0x43a1bd76, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x8b, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000840), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f0008000000", @ANYRES32], &(0x7f0000000580)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}], 0x10, 0x58586df}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xff)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

805.510673ms ago: executing program 3 (id=4566):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x8000})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="eca300"/12, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
r6 = openat$cgroup_ro(r2, &(0x7f0000000e80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0x5, 0x7, 0xe1c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94)

742.468766ms ago: executing program 2 (id=4567):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

631.181819ms ago: executing program 1 (id=4568):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x16, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0xffffff80}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

469.616475ms ago: executing program 2 (id=4569):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x40019)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

468.995055ms ago: executing program 1 (id=4570):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/17, @ANYRES32, @ANYBLOB="04000000010001000200"/28], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000080)="365d65477f54c1380155fcb199e5ea737798ebf40a63b3ac5658b92aefa377421c8012e147daf39986ac7ac582da831925cc620b5a31dbf2b04a392422c84023f50800f92dcbfd9eb48d954728f047f5ad4438f9743e49e674649d8750", &(0x7f0000000240)=""/134}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750", 0xd}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000011c0)={0xffffffffffffffff, r5})
sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)}], 0x2, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa6401010100000000800000000000000000000000070000004454fe737f00000100000008e000000200000005ac1414aa00008001ac1e0001000000087f00000100000005e000000200000001ac1e000100000006ac1414aa000000076401010000000005ffffffff00000008890f267f0000017f000001ac1e0101860b4bf95840c7e7a937fb00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414aa000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0xe0}, 0x20000410)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xd)

468.338585ms ago: executing program 3 (id=4571):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/17, @ANYRES32, @ANYBLOB="04000000010001000200"/28], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000080)="365d65477f54c1380155fcb199e5ea737798ebf40a63b3ac5658b92aefa377421c8012e147daf39986ac7ac582da831925cc620b5a31dbf2b04a392422c84023f50800f92dcbfd9eb48d954728f047f5ad4438f9743e49", &(0x7f0000000240)=""/134}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750", 0xd}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000011c0)={0xffffffffffffffff, r5})
sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)}], 0x2, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa6401010100000000800000000000000000000000070000004454fe737f00000100000008e000000200000005ac1414aa00008001ac1e0001000000087f00000100000005e000000200000001ac1e000100000006ac1414aa000000076401010000000005ffffffff00000008890f267f0000017f000001ac1e0101860b4bf95840c7e7a937fb00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414aa000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0xe0}, 0x20000410)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xd)

300.15595ms ago: executing program 2 (id=4573):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='syzkaller\x00', 0x3f000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)

279.136451ms ago: executing program 1 (id=4574):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40010)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_pressure(r4, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)

238.674772ms ago: executing program 2 (id=4575):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0xffffffff)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000001980)=0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40010)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
write$cgroup_type(r2, &(0x7f0000000180), 0x40001)

112.937516ms ago: executing program 3 (id=4576):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
socket$kcm(0x2, 0x922000000001, 0x106)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x6, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0, 0x11000000}, 0x240008c4)

75.033497ms ago: executing program 0 (id=4577):
r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x2, 0x6, 0x4, 0x9, 0x0, 0x4, 0x10840, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0xfffffffffffff80f}, 0x2200, 0xb4a, 0x2e, 0x2, 0x8, 0x200, 0x3, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x134fdd4, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40010)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000001000000000000002d0b000024240000", @ANYRES32=0x1, @ANYBLOB="188300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="009302c08e91fe8500fff300"/21], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='2\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_pressure(r5, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_type(r11, &(0x7f0000000180), 0x40010)
write$cgroup_type(r3, &(0x7f0000000180), 0x40001)

20.574269ms ago: executing program 2 (id=4578):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
socket$kcm(0xa, 0x3, 0x11)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

0s ago: executing program 1 (id=4579):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ease check.
[  467.647832][T14241] netlink: 'syz.3.3104': attribute type 3 has an invalid length.
[  467.675804][T14241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3104'.
[  468.385300][T14257] netlink: 'syz.2.3108': attribute type 10 has an invalid length.
[  468.393828][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3108'.
[  468.431946][T14257] bridge0: port 4(ipvlan1) entered blocking state
[  468.450074][T14257] bridge0: port 4(ipvlan1) entered disabled state
[  468.497589][T14257] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  468.635650][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'.
[  468.651733][T14261] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3110'.
[  469.755367][T14281] netlink: 'syz.2.3118': attribute type 3 has an invalid length.
[  469.770606][T14281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3118'.
[  471.152080][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'.
[  471.170488][T14300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3125'.
[  471.950797][   T51] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  471.971850][T14314] netlink: 'syz.2.3132': attribute type 3 has an invalid length.
[  472.035928][T14314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3132'.
[  473.372930][T14335] netlink: 'syz.0.3139': attribute type 10 has an invalid length.
[  473.390544][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3139'.
[  473.410070][T14335] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  473.761824][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'.
[  473.771563][T14347] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3143'.
[  474.436652][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3149'.
[  476.048878][T14394] netlink: 'syz.2.3162': attribute type 29 has an invalid length.
[  476.063646][T14394] netlink: 'syz.2.3162': attribute type 29 has an invalid length.
[  476.078095][T14395] netlink: 'syz.0.3161': attribute type 21 has an invalid length.
[  476.096647][T14395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3161'.
[  476.115060][T14395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3161'.
[  477.469950][T14417] netlink: 'syz.0.3172': attribute type 10 has an invalid length.
[  477.492658][T14417] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3172'.
[  477.958252][T14434] netlink: 'syz.0.3179': attribute type 3 has an invalid length.
[  477.972733][T14434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3179'.
[  478.724162][T14447] netlink: 'syz.3.3183': attribute type 10 has an invalid length.
[  478.732719][T14447] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3183'.
[  479.872485][T14480] netlink: 'syz.2.3196': attribute type 10 has an invalid length.
[  479.882495][T14480] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3196'.
[  480.205853][T14499] netlink: 'syz.2.3202': attribute type 10 has an invalid length.
[  480.225519][T14499] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3202'.
[  480.501756][   T51] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  481.220573][T14517] netlink: 'syz.2.3210': attribute type 10 has an invalid length.
[  481.237786][T14517] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3210'.
[  482.070774][T14540] netlink: 'syz.2.3219': attribute type 10 has an invalid length.
[  482.079177][T14540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3219'.
[  482.104598][T14540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  482.224990][T14547] netlink: 'syz.0.3220': attribute type 10 has an invalid length.
[  482.253254][T14547] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3220'.
[  483.605548][T14576] netlink: 'syz.1.3234': attribute type 10 has an invalid length.
[  483.623524][T14576] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3234'.
[  483.895413][T14582] netlink: 'syz.1.3238': attribute type 10 has an invalid length.
[  483.903654][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3238'.
[  483.928471][T14582] bridge0: port 4(ipvlan1) entered blocking state
[  483.955691][T14582] bridge0: port 4(ipvlan1) entered disabled state
[  484.081607][T14582] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  484.112028][T14586] netlink: 'syz.3.3239': attribute type 10 has an invalid length.
[  484.121147][T14586] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3239'.
[  485.033087][T14605] netlink: 'syz.3.3246': attribute type 10 has an invalid length.
[  485.055207][T14605] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3246'.
[  485.177699][T14608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3248'.
[  485.505481][T14608] hsr_slave_0: left promiscuous mode
[  485.542595][T14608] hsr_slave_1: left promiscuous mode
[  485.603352][T14608] bridge0: port 3(hsr0) entered disabled state
[  486.026580][T14608] hsr0 (unregistering): left allmulticast mode
[  486.033139][T14608] bridge0: port 3(hsr0) entered disabled state
[  486.357049][T14615] netlink: 'syz.3.3252': attribute type 10 has an invalid length.
[  486.366617][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3252'.
[  486.392700][T14615] bridge0: port 2(ipvlan1) entered blocking state
[  486.414473][T14615] bridge0: port 2(ipvlan1) entered disabled state
[  486.467500][T14615] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  486.809332][T14629] netlink: 'syz.3.3256': attribute type 27 has an invalid length.
[  486.819398][T14629] netlink: 'syz.3.3256': attribute type 3 has an invalid length.
[  486.829139][T14629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3256'.
[  486.842326][T14627] netlink: 'syz.0.3257': attribute type 10 has an invalid length.
[  486.861147][T14627] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3257'.
[  487.302509][T14640] netlink: 'syz.2.3260': attribute type 9 has an invalid length.
[  487.311240][T14640] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3260'.
[  487.970843][T14649] netlink: 'syz.0.3265': attribute type 10 has an invalid length.
[  487.985942][T14649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3265'.
[  487.999833][T14649] bridge0: port 4(ipvlan1) entered blocking state
[  488.017858][T14649] bridge0: port 4(ipvlan1) entered disabled state
[  488.081033][T14649] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  489.749949][T14688] validate_nla: 2 callbacks suppressed
[  489.749967][T14688] netlink: 'syz.3.3277': attribute type 10 has an invalid length.
[  489.767031][T14688] __nla_validate_parse: 2 callbacks suppressed
[  489.767047][T14688] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3277'.
[  489.862864][T14690] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  489.884344][T14690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3279'.
[  489.903381][T14690] bridge0: port 4(ipvlan1) entered blocking state
[  489.921572][T14690] bridge0: port 4(ipvlan1) entered disabled state
[  489.967511][T14690] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  490.570559][T14715] netlink: 'syz.3.3288': attribute type 3 has an invalid length.
[  490.587670][T14715] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3288'.
[  491.236804][T14723] netlink: 'syz.1.3290': attribute type 10 has an invalid length.
[  491.245821][T14723] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3290'.
[  491.459321][T14730] netlink: 'syz.3.3293': attribute type 9 has an invalid length.
[  491.478083][T14730] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3293'.
[  492.162109][T14746] netlink: 'syz.2.3299': attribute type 10 has an invalid length.
[  492.173054][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3299'.
[  492.189267][T14746] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  492.347380][T14752] netlink: 'syz.3.3301': attribute type 3 has an invalid length.
[  492.369166][T14752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3301'.
[  492.590605][T14754] netlink: 'syz.2.3303': attribute type 10 has an invalid length.
[  492.608558][T14754] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3303'.
[  494.096568][T14774] netlink: 'syz.0.3309': attribute type 9 has an invalid length.
[  494.105155][T14774] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3309'.
[  494.133658][T14779] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3310'.
[  495.056349][T14792] netlink: 'syz.1.3315': attribute type 3 has an invalid length.
[  495.081519][T14792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3315'.
[  499.737449][T14839] netlink: 'syz.1.3328': attribute type 3 has an invalid length.
[  499.754075][T14839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3328'.
[  500.508594][T14850] netlink: 'syz.2.3331': attribute type 10 has an invalid length.
[  500.529527][T14850] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3331'.
[  501.118032][T14864] netlink: 'syz.1.3345': attribute type 10 has an invalid length.
[  501.164112][T14864] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3345'.
[  501.718789][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.726213][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.140312][T14880] netlink: 'syz.1.3342': attribute type 3 has an invalid length.
[  502.205575][T14880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3342'.
[  503.408739][T14902] netlink: 'syz.0.3349': attribute type 10 has an invalid length.
[  503.417967][T14902] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3349'.
[  504.309873][T14917] netlink: 'syz.3.3356': attribute type 21 has an invalid length.
[  504.551440][T14932] FAULT_INJECTION: forcing a failure.
[  504.551440][T14932] name failslab, interval 1, probability 0, space 0, times 0
[  504.564496][T14932] CPU: 1 PID: 14932 Comm: syz.3.3361 Not tainted syzkaller #0
[  504.572117][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  504.582223][T14932] Call Trace:
[  504.585884][T14932]  <TASK>
[  504.588824][T14932]  dump_stack_lvl+0x18c/0x250
[  504.593511][T14932]  ? show_regs_print_info+0x20/0x20
[  504.598714][T14932]  ? load_image+0x420/0x420
[  504.603218][T14932]  ? __might_sleep+0xe0/0xe0
[  504.607815][T14932]  ? __lock_acquire+0x7d40/0x7d40
[  504.612843][T14932]  should_fail_ex+0x39d/0x4d0
[  504.617539][T14932]  should_failslab+0x9/0x20
[  504.622265][T14932]  slab_pre_alloc_hook+0x59/0x310
[  504.627323][T14932]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  504.633051][T14932]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  504.638800][T14932]  __kmem_cache_alloc_node+0x53/0x250
[  504.644183][T14932]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  504.649906][T14932]  __kmalloc+0xa4/0x230
[  504.654200][T14932]  tomoyo_realpath_from_path+0xe3/0x5d0
[  504.659844][T14932]  tomoyo_path_number_perm+0x248/0x620
[  504.665301][T14932]  ? tomoyo_path_number_perm+0x217/0x620
[  504.670962][T14932]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  504.676448][T14932]  ? ksys_write+0x1c4/0x260
[  504.680981][T14932]  ? __fget_files+0x28/0x4b0
[  504.685678][T14932]  ? __fget_files+0x28/0x4b0
[  504.690298][T14932]  security_file_ioctl+0x70/0xa0
[  504.695241][T14932]  __se_sys_ioctl+0x48/0x170
[  504.699834][T14932]  do_syscall_64+0x55/0xb0
[  504.704247][T14932]  ? clear_bhb_loop+0x40/0x90
[  504.708942][T14932]  ? clear_bhb_loop+0x40/0x90
[  504.713631][T14932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  504.719560][T14932] RIP: 0033:0x7f96a8f9ce59
[  504.723995][T14932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.743793][T14932] RSP: 002b:00007f96a9d72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  504.752300][T14932] RAX: ffffffffffffffda RBX: 00007f96a9215fa0 RCX: 00007f96a8f9ce59
[  504.760283][T14932] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  504.768252][T14932] RBP: 00007f96a9d72090 R08: 0000000000000000 R09: 0000000000000000
[  504.776221][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.784191][T14932] R13: 00007f96a9216038 R14: 00007f96a9215fa0 R15: 00007ffd58155e68
[  504.792262][T14932]  </TASK>
[  504.811263][T14932] ERROR: Out of memory at tomoyo_realpath_from_path.
[  505.091627][T14936] netlink: 'syz.3.3362': attribute type 10 has an invalid length.
[  505.102280][T14936] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3362'.
[  506.178178][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'.
[  507.663731][T14969] netlink: 'syz.2.3374': attribute type 10 has an invalid length.
[  507.673017][T14969] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3374'.
[  508.914051][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  511.804729][T15030] netlink: 'syz.0.3399': attribute type 39 has an invalid length.
[  512.025167][T15036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3400'.
[  514.400305][   T51] Bluetooth: hci2: ISO packet for unknown connection handle 8
[  514.615444][T15084] FAULT_INJECTION: forcing a failure.
[  514.615444][T15084] name failslab, interval 1, probability 0, space 0, times 0
[  514.642791][T15084] CPU: 0 PID: 15084 Comm: syz.1.3421 Not tainted syzkaller #0
[  514.651279][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  514.661562][T15084] Call Trace:
[  514.664864][T15084]  <TASK>
[  514.667819][T15084]  dump_stack_lvl+0x18c/0x250
[  514.672540][T15084]  ? show_regs_print_info+0x20/0x20
[  514.677853][T15084]  ? load_image+0x420/0x420
[  514.682384][T15084]  ? __might_sleep+0xe0/0xe0
[  514.687023][T15084]  ? __lock_acquire+0x7d40/0x7d40
[  514.692055][T15084]  should_fail_ex+0x39d/0x4d0
[  514.696741][T15084]  should_failslab+0x9/0x20
[  514.701245][T15084]  slab_pre_alloc_hook+0x59/0x310
[  514.706274][T15084]  ? tomoyo_encode+0x28b/0x540
[  514.711036][T15084]  ? tomoyo_encode+0x28b/0x540
[  514.715793][T15084]  __kmem_cache_alloc_node+0x53/0x250
[  514.721170][T15084]  ? tomoyo_encode+0x28b/0x540
[  514.726056][T15084]  __kmalloc+0xa4/0x230
[  514.730679][T15084]  tomoyo_encode+0x28b/0x540
[  514.735270][T15084]  tomoyo_realpath_from_path+0x592/0x5d0
[  514.740917][T15084]  tomoyo_path_number_perm+0x248/0x620
[  514.746387][T15084]  ? tomoyo_path_number_perm+0x217/0x620
[  514.752015][T15084]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  514.757646][T15084]  ? ksys_write+0x1c4/0x260
[  514.762172][T15084]  ? __fget_files+0x28/0x4b0
[  514.766758][T15084]  ? __fget_files+0x28/0x4b0
[  514.771401][T15084]  security_file_ioctl+0x70/0xa0
[  514.776346][T15084]  __se_sys_ioctl+0x48/0x170
[  514.780943][T15084]  do_syscall_64+0x55/0xb0
[  514.785447][T15084]  ? clear_bhb_loop+0x40/0x90
[  514.790119][T15084]  ? clear_bhb_loop+0x40/0x90
[  514.794802][T15084]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.800697][T15084] RIP: 0033:0x7fe5cfd9ce59
[  514.805134][T15084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.824739][T15084] RSP: 002b:00007fe5d0c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.833242][T15084] RAX: ffffffffffffffda RBX: 00007fe5d0015fa0 RCX: 00007fe5cfd9ce59
[  514.841209][T15084] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  514.849178][T15084] RBP: 00007fe5d0c36090 R08: 0000000000000000 R09: 0000000000000000
[  514.857145][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.865115][T15084] R13: 00007fe5d0016038 R14: 00007fe5d0015fa0 R15: 00007ffdbca0e038
[  514.873210][T15084]  </TASK>
[  514.922877][T15084] ERROR: Out of memory at tomoyo_realpath_from_path.
[  515.171633][T15097] netlink: 'syz.3.3424': attribute type 10 has an invalid length.
[  515.364593][T15097] bond0: (slave 
5
@ÿ): Releasing backup interface
[  515.649980][T15106] netlink: 'syz.1.3427': attribute type 39 has an invalid length.
[  516.840095][T15123] FAULT_INJECTION: forcing a failure.
[  516.840095][T15123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  516.898718][T15123] CPU: 1 PID: 15123 Comm: syz.1.3435 Not tainted syzkaller #0
[  516.906246][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  516.916326][T15123] Call Trace:
[  516.919631][T15123]  <TASK>
[  516.922589][T15123]  dump_stack_lvl+0x18c/0x250
[  516.927289][T15123]  ? show_regs_print_info+0x20/0x20
[  516.932592][T15123]  ? load_image+0x420/0x420
[  516.937108][T15123]  ? __might_fault+0xaa/0x120
[  516.941790][T15123]  ? __lock_acquire+0x7d40/0x7d40
[  516.946826][T15123]  should_fail_ex+0x39d/0x4d0
[  516.951513][T15123]  _copy_from_user+0x2f/0xe0
[  516.956114][T15123]  ___sys_recvmsg+0x176/0x590
[  516.960817][T15123]  ? __sys_recvmsg+0x2a0/0x2a0
[  516.965595][T15123]  ? ksys_write+0x1c4/0x260
[  516.970210][T15123]  ? __fget_files+0x43d/0x4b0
[  516.974901][T15123]  __x64_sys_recvmsg+0x20c/0x2e0
[  516.979850][T15123]  ? ___sys_recvmsg+0x590/0x590
[  516.984717][T15123]  ? lockdep_hardirqs_on+0x98/0x150
[  516.989944][T15123]  do_syscall_64+0x55/0xb0
[  516.994376][T15123]  ? clear_bhb_loop+0x40/0x90
[  516.999067][T15123]  ? clear_bhb_loop+0x40/0x90
[  517.003840][T15123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  517.009746][T15123] RIP: 0033:0x7fe5cfd9ce59
[  517.014164][T15123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.033876][T15123] RSP: 002b:00007fe5d0c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  517.042298][T15123] RAX: ffffffffffffffda RBX: 00007fe5d0015fa0 RCX: 00007fe5cfd9ce59
[  517.050365][T15123] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000004
[  517.058429][T15123] RBP: 00007fe5d0c36090 R08: 0000000000000000 R09: 0000000000000000
[  517.066404][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.074392][T15123] R13: 00007fe5d0016038 R14: 00007fe5d0015fa0 R15: 00007ffdbca0e038
[  517.082400][T15123]  </TASK>
[  518.409135][T15149] netlink: 'syz.2.3444': attribute type 39 has an invalid length.
[  519.902649][   T51] Bluetooth: hci3: ISO packet for unknown connection handle 19
[  521.667255][T15195] netlink: 'syz.3.3466': attribute type 29 has an invalid length.
[  521.675870][T15195] netlink: 'syz.3.3466': attribute type 29 has an invalid length.
[  523.212034][T15206] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3472'.
[  523.391909][   T51] Bluetooth: hci2: ISO packet for unknown connection handle 19
[  525.083057][T15228] netlink: 'syz.0.3479': attribute type 10 has an invalid length.
[  525.100274][T15228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3479'.
[  525.125603][T15228] bridge0: port 4(ipvlan1) entered blocking state
[  525.147627][T15228] bridge0: port 4(ipvlan1) entered disabled state
[  525.203868][T15228] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  525.923441][T15240] netlink: 'syz.0.3485': attribute type 13 has an invalid length.
[  525.960709][T15240] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3485'.
[  526.611731][T15240] erspan0: refused to change device tx_queue_len
[  526.829664][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 19
[  526.909271][T15256] netlink: 'syz.1.3491': attribute type 10 has an invalid length.
[  526.925743][T15256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3491'.
[  527.001182][T15256] bridge0: port 3(ipvlan1) entered blocking state
[  527.013646][T15256] bridge0: port 3(ipvlan1) entered disabled state
[  527.071981][T15256] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  528.148939][T15268] netlink: 'syz.3.3496': attribute type 10 has an invalid length.
[  528.160245][T15268] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3496'.
[  529.519279][T15293] netlink: 'syz.2.3506': attribute type 10 has an invalid length.
[  529.532522][T15293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3506'.
[  529.554256][T15293] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  529.594676][T15290] netlink: 'syz.3.3503': attribute type 10 has an invalid length.
[  529.602758][T15290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3503'.
[  529.642916][T15290] bridge0: port 2(ipvlan1) entered blocking state
[  529.655735][T15290] bridge0: port 2(ipvlan1) entered disabled state
[  529.694855][T15290] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  529.854575][   T51] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17
[  529.891708][T15299] netlink: 'syz.0.3509': attribute type 10 has an invalid length.
[  529.908905][T15299] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3509'.
[  530.070994][T15308] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3513'.
[  530.736835][T15322] netlink: 'syz.3.3519': attribute type 10 has an invalid length.
[  531.496726][T15328] netlink: 'syz.2.3522': attribute type 10 has an invalid length.
[  531.524275][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3522'.
[  531.541449][T15328] bridge0: port 4(ipvlan1) entered blocking state
[  531.575164][T15328] bridge0: port 4(ipvlan1) entered disabled state
[  531.622565][T15328] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  531.735274][T15333] netlink: 'syz.1.3523': attribute type 10 has an invalid length.
[  531.749265][T15333] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3523'.
[  532.821982][T15353] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3532'.
[  534.885059][T15389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3546'.
[  536.781932][T15425] netlink: 'syz.2.3560': attribute type 29 has an invalid length.
[  536.801734][T15425] netlink: 'syz.2.3560': attribute type 29 has an invalid length.
[  538.144581][T15447] netlink: 'syz.3.3567': attribute type 3 has an invalid length.
[  538.153263][T15447] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3567'.
[  538.276272][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  538.289165][T15449] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3569'.
[  538.353757][T15443] netlink: 'syz.2.3566': attribute type 10 has an invalid length.
[  538.362102][T15443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3566'.
[  538.405045][T15443] bridge0: port 4(ipvlan1) entered blocking state
[  538.418794][T15443] bridge0: port 4(ipvlan1) entered disabled state
[  538.486798][T15443] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  538.865625][T15460] netlink: 'syz.2.3571': attribute type 10 has an invalid length.
[  538.887875][T15460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3571'.
[  538.915816][T15460] bridge0: port 4(ipvlan1) entered blocking state
[  538.933330][T15460] bridge0: port 4(ipvlan1) entered disabled state
[  538.973544][T15460] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  539.100948][T15465] netlink: 'syz.3.3572': attribute type 10 has an invalid length.
[  539.154996][T15465] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3572'.
[  539.201194][T15467] FAULT_INJECTION: forcing a failure.
[  539.201194][T15467] name failslab, interval 1, probability 0, space 0, times 0
[  539.248099][T15467] CPU: 1 PID: 15467 Comm: syz.0.3573 Not tainted syzkaller #0
[  539.255625][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  539.265784][T15467] Call Trace:
[  539.269080][T15467]  <TASK>
[  539.272029][T15467]  dump_stack_lvl+0x18c/0x250
[  539.276736][T15467]  ? show_regs_print_info+0x20/0x20
[  539.282055][T15467]  ? load_image+0x420/0x420
[  539.286603][T15467]  should_fail_ex+0x39d/0x4d0
[  539.291314][T15467]  should_failslab+0x9/0x20
[  539.295857][T15467]  slab_pre_alloc_hook+0x59/0x310
[  539.300920][T15467]  kmem_cache_alloc+0x5a/0x2d0
[  539.305710][T15467]  ? __nf_conntrack_alloc+0x99/0x380
[  539.311032][T15467]  __nf_conntrack_alloc+0x99/0x380
[  539.316181][T15467]  init_conntrack+0x177/0xf10
[  539.320891][T15467]  ? early_drop+0x7f0/0x7f0
[  539.325422][T15467]  ? nf_conntrack_find_get+0x650/0x650
[  539.330903][T15467]  ? __siphash_unaligned+0x22e/0x3a0
[  539.336218][T15467]  nf_conntrack_in+0xc06/0x15c0
[  539.341117][T15467]  ? nf_ct_pernet+0x270/0x270
[  539.345828][T15467]  ? ip6t_do_table+0x1d9/0x1510
[  539.350711][T15467]  ? ip6t_alloc_initial_table+0x640/0x640
[  539.356469][T15467]  ? ipv6_defrag+0x2d6/0x3a0
[  539.361091][T15467]  ? ipv6_conntrack_in+0x20/0x20
[  539.366051][T15467]  nf_hook_slow+0xbd/0x200
[  539.370493][T15467]  __ip6_local_out+0x784/0x8a0
[  539.375279][T15467]  ? __ip6_local_out+0x60c/0x8a0
[  539.380228][T15467]  ? ip6_dst_hoplimit+0x350/0x350
[  539.385246][T15467]  ? __ip6_local_out+0x8a0/0x8a0
[  539.390170][T15467]  ? read_lock_is_recursive+0x20/0x20
[  539.395629][T15467]  ip6_local_out+0x2a/0x130
[  539.400129][T15467]  ? ip6_send_skb+0x10f/0x380
[  539.404817][T15467]  ip6_send_skb+0x1d5/0x380
[  539.409450][T15467]  udp_v6_send_skb+0xbbb/0x1860
[  539.414348][T15467]  udp_v6_push_pending_frames+0x133/0x220
[  539.420180][T15467]  udpv6_sendmsg+0xdfe/0x2390
[  539.424862][T15467]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  539.429718][T15467]  ? udp_v6_early_demux+0xf80/0xf80
[  539.434924][T15467]  ? __lock_acquire+0x1273/0x7d40
[  539.439958][T15467]  ? inet_send_prepare+0x5c/0x260
[  539.444977][T15467]  ? inet6_sendmsg+0x5f/0xd0
[  539.449565][T15467]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  539.454759][T15467]  ____sys_sendmsg+0x5ba/0x960
[  539.459535][T15467]  ? __asan_memset+0x22/0x40
[  539.464148][T15467]  ? __sys_sendmsg_sock+0x30/0x30
[  539.469179][T15467]  ? __import_iovec+0x3fa/0x850
[  539.474037][T15467]  ? import_iovec+0x73/0xa0
[  539.478543][T15467]  ___sys_sendmsg+0x2a6/0x360
[  539.483220][T15467]  ? get_pid_task+0x20/0x1e0
[  539.487893][T15467]  ? __sys_sendmsg+0x2a0/0x2a0
[  539.492745][T15467]  ? __lock_acquire+0x7d40/0x7d40
[  539.498045][T15467]  __se_sys_sendmsg+0x1c2/0x2b0
[  539.502898][T15467]  ? __x64_sys_sendmsg+0x80/0x80
[  539.507848][T15467]  ? lockdep_hardirqs_on+0x98/0x150
[  539.513074][T15467]  do_syscall_64+0x55/0xb0
[  539.517523][T15467]  ? clear_bhb_loop+0x40/0x90
[  539.522193][T15467]  ? clear_bhb_loop+0x40/0x90
[  539.526864][T15467]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  539.532753][T15467] RIP: 0033:0x7f314dd9ce59
[  539.537167][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.556792][T15467] RSP: 002b:00007f314ecf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  539.565203][T15467] RAX: ffffffffffffffda RBX: 00007f314e016090 RCX: 00007f314dd9ce59
[  539.573254][T15467] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007
[  539.581232][T15467] RBP: 00007f314ecf6090 R08: 0000000000000000 R09: 0000000000000000
[  539.589234][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.597283][T15467] R13: 00007f314e016128 R14: 00007f314e016090 R15: 00007ffce751ffd8
[  539.605259][T15467]  </TASK>
[  539.810404][T15478] netlink: 'syz.2.3578': attribute type 10 has an invalid length.
[  539.832120][T15478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3578'.
[  539.864922][T15478] bridge0: port 4(ipvlan1) entered blocking state
[  539.884741][T15478] bridge0: port 4(ipvlan1) entered disabled state
[  539.964904][T15478] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  540.077116][T15486] netlink: 'syz.0.3580': attribute type 3 has an invalid length.
[  540.091757][T15486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3580'.
[  540.696234][T15495] netlink: 'syz.3.3583': attribute type 10 has an invalid length.
[  540.713888][T15495] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3583'.
[  541.812922][T15500] netlink: 'syz.0.3593': attribute type 3 has an invalid length.
[  541.854272][T15500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3593'.
[  541.875232][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'.
[  541.889324][T15506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3586'.
[  542.549916][T15517] netlink: 'syz.3.3590': attribute type 10 has an invalid length.
[  542.582255][T15517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3590'.
[  542.619604][T15517] bridge0: port 2(ipvlan1) entered blocking state
[  542.646747][T15517] bridge0: port 2(ipvlan1) entered disabled state
[  542.736395][T15517] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  542.984010][T15522] netlink: 'syz.2.3592': attribute type 10 has an invalid length.
[  542.997267][T15522] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3592'.
[  544.165127][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'.
[  544.174706][T15542] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3601'.
[  544.468462][T15546] netlink: 'syz.2.3603': attribute type 3 has an invalid length.
[  544.484100][T15546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3603'.
[  544.585734][T15548] netlink: 'syz.1.3604': attribute type 10 has an invalid length.
[  544.601819][T15548] bridge0: port 3(ipvlan1) entered blocking state
[  544.610963][T15548] bridge0: port 3(ipvlan1) entered disabled state
[  544.649273][T15548] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  544.692515][T15550] netlink: 'syz.3.3605': attribute type 10 has an invalid length.
[  546.250992][T15577] netlink: 'syz.3.3614': attribute type 10 has an invalid length.
[  546.264022][T15577] __nla_validate_parse: 2 callbacks suppressed
[  546.264040][T15577] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3614'.
[  546.545433][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3616'.
[  546.583274][T15584] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3616'.
[  546.593808][T15583] netlink: 'syz.3.3617': attribute type 10 has an invalid length.
[  546.627642][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3617'.
[  546.640502][T15583] bridge0: port 2(ipvlan1) entered blocking state
[  546.660009][T15583] bridge0: port 2(ipvlan1) entered disabled state
[  546.707630][T15583] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  546.735720][T15580] netlink: 'syz.1.3615': attribute type 10 has an invalid length.
[  546.751631][T15580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3615'.
[  546.762296][T15580] bridge0: port 3(ipvlan1) entered blocking state
[  546.770269][T15580] bridge0: port 3(ipvlan1) entered disabled state
[  546.823590][T15580] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  546.972946][T15592] netlink: 'syz.3.3620': attribute type 3 has an invalid length.
[  546.987298][T15592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3620'.
[  547.664662][T15604] netlink: 'syz.0.3625': attribute type 10 has an invalid length.
[  547.677168][T15604] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3625'.
[  548.487944][T15614] netlink: 'syz.2.3629': attribute type 10 has an invalid length.
[  548.504147][T15614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3629'.
[  548.531558][T15614] bridge0: port 4(ipvlan1) entered blocking state
[  548.545481][T15614] bridge0: port 4(ipvlan1) entered disabled state
[  548.580702][T15614] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  548.687716][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'.
[  548.699845][T15619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3631'.
[  549.359476][T15627] netlink: 'syz.0.3635': attribute type 3 has an invalid length.
[  549.443500][T15625] netlink: 'syz.1.3634': attribute type 10 has an invalid length.
[  550.742889][T15643] netlink: 'syz.0.3641': attribute type 10 has an invalid length.
[  550.778503][T15643] bridge0: port 4(ipvlan1) entered blocking state
[  550.787415][T15643] bridge0: port 4(ipvlan1) entered disabled state
[  550.818077][T15643] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  551.408403][T15661] netlink: 'syz.0.3646': attribute type 10 has an invalid length.
[  551.430244][T15661] __nla_validate_parse: 5 callbacks suppressed
[  551.430264][T15661] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3646'.
[  551.602912][T15663] netlink: 'syz.0.3649': attribute type 3 has an invalid length.
[  551.616314][T15663] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3649'.
[  552.556629][T15677] netlink: 'syz.2.3654': attribute type 10 has an invalid length.
[  552.569983][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3654'.
[  552.581690][T15677] bridge0: port 4(ipvlan1) entered blocking state
[  552.599885][T15677] bridge0: port 4(ipvlan1) entered disabled state
[  552.653617][T15677] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  553.110836][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3658'.
[  553.122266][T15684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3658'.
[  553.281530][T15685] netlink: 'syz.0.3657': attribute type 10 has an invalid length.
[  553.293619][T15685] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3657'.
[  553.429010][T15691] netlink: 'syz.0.3661': attribute type 3 has an invalid length.
[  553.437513][T15691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3661'.
[  555.167837][T15710] netlink: 'syz.2.3667': attribute type 10 has an invalid length.
[  555.183825][T15710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3667'.
[  555.202067][T15710] bridge0: port 4(ipvlan1) entered blocking state
[  555.215672][T15710] bridge0: port 4(ipvlan1) entered disabled state
[  555.352654][T15710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  555.475957][T15715] netlink: 'syz.0.3669': attribute type 10 has an invalid length.
[  555.494113][T15715] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3669'.
[  555.627798][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3672'.
[  555.733338][T15724] netlink: 'syz.0.3673': attribute type 3 has an invalid length.
[  556.726696][T15744] netlink: 'syz.1.3681': attribute type 10 has an invalid length.
[  556.743984][T15744] __nla_validate_parse: 2 callbacks suppressed
[  556.744074][T15744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3681'.
[  556.798200][T15744] bridge0: port 3(ipvlan1) entered blocking state
[  556.812937][T15744] bridge0: port 3(ipvlan1) entered disabled state
[  556.860669][T15744] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  556.889325][T15747] netlink: 'syz.2.3682': attribute type 10 has an invalid length.
[  556.901711][T15747] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3682'.
[  557.574474][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'.
[  557.594258][T15757] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3686'.
[  557.624604][T15761] netlink: 'syz.0.3687': attribute type 3 has an invalid length.
[  557.644555][T15761] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3687'.
[  558.075267][T15773] netlink: 'syz.3.3691': attribute type 10 has an invalid length.
[  558.104221][T15773] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3691'.
[  558.885524][T15788] netlink: 'syz.0.3696': attribute type 10 has an invalid length.
[  558.901745][T15788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3696'.
[  558.923373][T15788] bridge0: port 4(ipvlan1) entered blocking state
[  558.930484][T15788] bridge0: port 4(ipvlan1) entered disabled state
[  558.946312][T15788] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  559.738774][T15790] FAULT_INJECTION: forcing a failure.
[  559.738774][T15790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.777243][T15790] CPU: 0 PID: 15790 Comm: syz.3.3698 Not tainted syzkaller #0
[  559.784774][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  559.795204][T15790] Call Trace:
[  559.798530][T15790]  <TASK>
[  559.801481][T15790]  dump_stack_lvl+0x18c/0x250
[  559.806195][T15790]  ? show_regs_print_info+0x20/0x20
[  559.811693][T15790]  ? load_image+0x420/0x420
[  559.817015][T15790]  ? __might_fault+0xaa/0x120
[  559.821899][T15790]  ? __lock_acquire+0x7d40/0x7d40
[  559.826962][T15790]  should_fail_ex+0x39d/0x4d0
[  559.831772][T15790]  _copy_from_user+0x2f/0xe0
[  559.836463][T15790]  ip_tunnel_siocdevprivate+0xc2/0x1f0
[  559.841953][T15790]  ? dev_ioctl+0x83c/0x1140
[  559.846499][T15790]  ? ip_tunnel_update+0xb10/0xb10
[  559.851566][T15790]  ? dev_ifsioc+0x958/0xc40
[  559.856126][T15790]  dev_ioctl+0x84c/0x1140
[  559.860498][T15790]  sock_ioctl+0x74c/0x7e0
[  559.864855][T15790]  ? sock_poll+0x3e0/0x3e0
[  559.869286][T15790]  ? bpf_lsm_file_ioctl+0x9/0x10
[  559.874940][T15790]  ? security_file_ioctl+0x80/0xa0
[  559.880054][T15790]  ? sock_poll+0x3e0/0x3e0
[  559.884476][T15790]  __se_sys_ioctl+0xfd/0x170
[  559.889072][T15790]  do_syscall_64+0x55/0xb0
[  559.893494][T15790]  ? clear_bhb_loop+0x40/0x90
[  559.898169][T15790]  ? clear_bhb_loop+0x40/0x90
[  559.902848][T15790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.908749][T15790] RIP: 0033:0x7f96a8f9ce59
[  559.913174][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.933243][T15790] RSP: 002b:00007f96a9d72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  559.941658][T15790] RAX: ffffffffffffffda RBX: 00007f96a9215fa0 RCX: 00007f96a8f9ce59
[  559.949711][T15790] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  559.957679][T15790] RBP: 00007f96a9d72090 R08: 0000000000000000 R09: 0000000000000000
[  559.965651][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.973631][T15790] R13: 00007f96a9216038 R14: 00007f96a9215fa0 R15: 00007ffd58155e68
[  559.981616][T15790]  </TASK>
[  559.992972][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'.
[  560.012677][T15792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3699'.
[  560.049904][T15794] netlink: 'syz.0.3700': attribute type 10 has an invalid length.
[  560.090452][T15794] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3700'.
[  560.253779][T15808] netlink: 'syz.1.3704': attribute type 3 has an invalid length.
[  561.109798][T15820] netlink: 'syz.0.3708': attribute type 10 has an invalid length.
[  561.135889][T15820] bridge0: port 4(ipvlan1) entered blocking state
[  561.151113][T15820] bridge0: port 4(ipvlan1) entered disabled state
[  561.191454][T15820] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  561.758228][T15831] netlink: 'syz.3.3713': attribute type 10 has an invalid length.
[  561.775243][T15831] __nla_validate_parse: 4 callbacks suppressed
[  561.775551][T15831] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3713'.
[  562.914458][T15844] netlink: 'syz.0.3718': attribute type 3 has an invalid length.
[  562.922473][T15844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3718'.
[  562.994319][T15849] netlink: 'syz.3.3720': attribute type 10 has an invalid length.
[  563.035871][T15849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3720'.
[  563.074279][T15849] bridge0: port 2(ipvlan1) entered blocking state
[  563.085744][T15849] bridge0: port 2(ipvlan1) entered disabled state
[  563.125940][T15849] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  563.175280][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.187054][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  563.711526][T15868] netlink: 'syz.1.3724': attribute type 10 has an invalid length.
[  563.724632][T15868] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3724'.
[  563.976733][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3727'.
[  563.988494][T15877] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3727'.
[  565.114976][T15886] netlink: 'syz.1.3732': attribute type 10 has an invalid length.
[  565.129079][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3732'.
[  565.152857][T15886] bridge0: port 3(ipvlan1) entered blocking state
[  565.166620][T15886] bridge0: port 3(ipvlan1) entered disabled state
[  565.196892][T15886] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  565.426933][T15896] netlink: 'syz.2.3736': attribute type 3 has an invalid length.
[  565.474350][T15896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3736'.
[  565.542428][T15899] netlink: 'syz.0.3737': attribute type 10 has an invalid length.
[  565.557818][T15899] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3737'.
[  566.580865][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3741'.
[  566.996226][T15920] netlink: 'syz.2.3748': attribute type 10 has an invalid length.
[  567.014265][T15920] __nla_validate_parse: 1 callbacks suppressed
[  567.014283][T15920] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3748'.
[  567.039537][T15922] netlink: 'syz.0.3747': attribute type 10 has an invalid length.
[  567.057695][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'.
[  567.076759][T15922] bridge0: port 4(ipvlan1) entered blocking state
[  567.100199][T15922] bridge0: port 4(ipvlan1) entered disabled state
[  567.180804][T15922] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  567.302719][T15927] netlink: 'syz.2.3750': attribute type 3 has an invalid length.
[  567.316800][T15927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3750'.
[  568.548466][T15945] netlink: 'syz.1.3758': attribute type 10 has an invalid length.
[  568.561934][T15945] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3758'.
[  568.729683][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3760'.
[  568.739017][T15954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3760'.
[  568.896715][T15957] netlink: 'syz.1.3761': attribute type 10 has an invalid length.
[  568.914826][T15957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3761'.
[  568.932174][T15957] bridge0: port 3(ipvlan1) entered blocking state
[  568.948326][T15957] bridge0: port 3(ipvlan1) entered disabled state
[  568.957862][T15957] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  569.054772][T15961] netlink: 'syz.2.3763': attribute type 3 has an invalid length.
[  569.074201][T15961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3763'.
[  570.152675][T15975] netlink: 'syz.0.3769': attribute type 10 has an invalid length.
[  570.165673][T15975] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3769'.
[  570.319655][T15985] netlink: 'syz.2.3772': attribute type 10 has an invalid length.
[  570.335046][T15985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3772'.
[  570.371100][T15985] bridge0: port 4(ipvlan1) entered blocking state
[  570.389709][T15985] bridge0: port 4(ipvlan1) entered disabled state
[  570.437599][T15985] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  571.673603][T16001] netlink: 'syz.3.3779': attribute type 3 has an invalid length.
[  572.154932][T16007] netlink: 'syz.0.3781': attribute type 10 has an invalid length.
[  572.170120][T16007] __nla_validate_parse: 3 callbacks suppressed
[  572.170167][T16007] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3781'.
[  572.505754][T16017] netlink: 'syz.1.3785': attribute type 10 has an invalid length.
[  572.533724][T16017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3785'.
[  572.561355][T16017] bridge0: port 3(ipvlan1) entered blocking state
[  572.585943][T16017] bridge0: port 3(ipvlan1) entered disabled state
[  572.621579][T16017] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  572.643737][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'.
[  572.654389][T16022] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3787'.
[  574.164420][T16036] netlink: 'syz.0.3792': attribute type 10 has an invalid length.
[  574.186351][T16036] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3792'.
[  574.213414][T16043] netlink: 'syz.1.3795': attribute type 3 has an invalid length.
[  574.229093][T16043] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3795'.
[  574.655554][T16055] netlink: 'syz.0.3798': attribute type 10 has an invalid length.
[  574.683981][T16055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3798'.
[  574.724235][T16055] bridge0: port 4(ipvlan1) entered blocking state
[  574.735326][T16055] bridge0: port 4(ipvlan1) entered disabled state
[  574.744937][T16055] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  575.041789][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'.
[  575.053319][T16062] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3801'.
[  576.126948][T16080] netlink: 'syz.0.3809': attribute type 3 has an invalid length.
[  576.135302][T16080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3809'.
[  576.231978][T16074] netlink: 'syz.2.3806': attribute type 10 has an invalid length.
[  576.629473][T16089] netlink: 'syz.2.3810': attribute type 10 has an invalid length.
[  576.641943][T16089] bridge0: port 4(ipvlan1) entered blocking state
[  576.659841][T16089] bridge0: port 4(ipvlan1) entered disabled state
[  576.695797][T16089] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  577.186106][T16102] __nla_validate_parse: 2 callbacks suppressed
[  577.186124][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3815'.
[  577.205373][T16102] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3815'.
[  577.438594][T16107] netlink: 'syz.1.3818': attribute type 10 has an invalid length.
[  577.451372][T16107] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3818'.
[  578.309799][T16116] netlink: 'syz.2.3821': attribute type 3 has an invalid length.
[  578.321835][T16116] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3821'.
[  578.694334][T16122] netlink: 'syz.3.3824': attribute type 10 has an invalid length.
[  578.702667][T16122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3824'.
[  578.734809][T16122] bridge0: port 2(ipvlan1) entered blocking state
[  578.764722][T16122] bridge0: port 2(ipvlan1) entered disabled state
[  578.829544][T16122] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  579.112139][T16130] netlink: 'syz.0.3827': attribute type 10 has an invalid length.
[  579.128746][T16130] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3827'.
[  579.153073][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3829'.
[  579.175474][T16134] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3829'.
[  580.302337][T16156] netlink: 'syz.0.3838': attribute type 3 has an invalid length.
[  580.311443][T16156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3838'.
[  580.856343][T16162] netlink: 'syz.1.3839': attribute type 10 has an invalid length.
[  580.868852][T16162] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3839'.
[  581.135088][T16171] netlink: zone id is out of range
[  581.140316][T16171] netlink: set zone limit has 8 unknown bytes
[  581.197843][T16171] netlink: 'syz.3.3842': attribute type 10 has an invalid length.
[  582.670773][T16194] netlink: 'syz.0.3852': attribute type 10 has an invalid length.
[  582.682450][T16194] __nla_validate_parse: 3 callbacks suppressed
[  582.682712][T16194] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3852'.
[  582.887413][T16198] netlink: 'syz.0.3853': attribute type 3 has an invalid length.
[  582.896556][T16198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3853'.
[  583.594770][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3857'.
[  583.610897][T16211] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3857'.
[  583.941002][T16218] netlink: 'syz.3.3861': attribute type 10 has an invalid length.
[  583.955665][T16218] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3861'.
[  584.649060][T16228] netlink: 'syz.1.3867': attribute type 3 has an invalid length.
[  584.679013][T16228] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3867'.
[  585.641673][T16242] netlink: 'syz.1.3871': attribute type 10 has an invalid length.
[  585.716471][T16242] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3871'.
[  585.769184][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3875'.
[  585.795973][T16250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3875'.
[  586.327274][T16259] netlink: 'syz.0.3879': attribute type 3 has an invalid length.
[  586.374099][T16259] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3879'.
[  587.098760][T16275] netlink: 'syz.1.3885': attribute type 10 has an invalid length.
[  587.846158][T16291] __nla_validate_parse: 1 callbacks suppressed
[  587.846175][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'.
[  587.861912][T16291] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3891'.
[  588.291156][T16298] netlink: 'syz.2.3894': attribute type 10 has an invalid length.
[  588.300502][T16298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3894'.
[  588.721584][T16304] netlink: 'syz.0.3897': attribute type 3 has an invalid length.
[  588.729756][T16304] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3897'.
[  590.308457][T16321] netlink: 'syz.3.3903': attribute type 10 has an invalid length.
[  590.329216][T16321] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3903'.
[  590.630677][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3907'.
[  590.658915][T16331] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3907'.
[  591.679024][T16341] netlink: 'syz.2.3912': attribute type 3 has an invalid length.
[  591.697356][T16341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3912'.
[  591.953022][T16350] netlink: 'syz.3.3915': attribute type 10 has an invalid length.
[  591.977522][T16350] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3915'.
[  592.618288][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'.
[  594.226345][T16384] netlink: 'syz.3.3926': attribute type 10 has an invalid length.
[  594.245518][T16384] __nla_validate_parse: 1 callbacks suppressed
[  594.245564][T16384] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3926'.
[  594.812416][T16391] netlink: 'syz.3.3929': attribute type 3 has an invalid length.
[  594.840319][T16391] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3929'.
[  595.777968][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'.
[  595.793412][T16413] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3936'.
[  595.810090][T16412] netlink: 'syz.2.3937': attribute type 10 has an invalid length.
[  595.830173][T16412] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3937'.
[  596.540466][T16430] netlink: 'syz.2.3943': attribute type 3 has an invalid length.
[  596.557721][T16430] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3943'.
[  596.854869][T16440] netlink: 'syz.1.3948': attribute type 10 has an invalid length.
[  596.872563][T16440] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3948'.
[  597.242781][T16450] netlink: 'syz.1.3951': attribute type 3 has an invalid length.
[  597.271304][T16450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3951'.
[  597.866914][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'.
[  597.879699][T16455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3953'.
[  598.927248][T16467] netlink: 'syz.3.3959': attribute type 10 has an invalid length.
[  599.079020][T16473] netlink: 'syz.2.3962': attribute type 3 has an invalid length.
[  599.895961][T16493] __nla_validate_parse: 2 callbacks suppressed
[  599.895984][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'.
[  599.914799][T16493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3969'.
[  600.463456][T16501] netlink: 'syz.1.3973': attribute type 10 has an invalid length.
[  600.488098][T16501] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3973'.
[  600.512336][T16499] ªªªªªª: renamed from vlan0 (while UP)
[  600.808347][T16514] netlink: 'syz.0.3978': attribute type 3 has an invalid length.
[  600.824100][T16514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3978'.
[  602.084346][T16526] netlink: 'syz.0.3984': attribute type 10 has an invalid length.
[  602.103267][T16526] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3984'.
[  602.280427][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3987'.
[  602.294503][T16534] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3987'.
[  602.961473][T16546] netlink: 'syz.1.3992': attribute type 3 has an invalid length.
[  602.978763][T16546] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3992'.
[  603.873103][T16560] netlink: 'syz.3.3997': attribute type 10 has an invalid length.
[  603.888110][T16560] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3997'.
[  604.326054][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'.
[  604.526236][T16579] netlink: 'syz.0.4006': attribute type 3 has an invalid length.
[  604.700773][T16583] netlink: 'syz.3.4008': attribute type 10 has an invalid length.
[  605.238338][T16593] netlink: 'syz.1.4011': attribute type 15 has an invalid length.
[  605.254123][T16593] netlink: 'syz.1.4011': attribute type 7 has an invalid length.
[  605.785316][T16613] __nla_validate_parse: 3 callbacks suppressed
[  605.785333][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'.
[  605.816536][T16613] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4019'.
[  605.875751][T16610] netlink: 'syz.3.4017': attribute type 10 has an invalid length.
[  605.884180][T16610] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4017'.
[  606.137175][T16620] netlink: 'syz.3.4022': attribute type 3 has an invalid length.
[  606.154497][T16620] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4022'.
[  607.060047][T16639] netlink: 'syz.1.4030': attribute type 10 has an invalid length.
[  607.072033][T16639] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4030'.
[  607.514945][T16654] netlink: 'syz.0.4037': attribute type 3 has an invalid length.
[  607.522941][T16654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4037'.
[  607.576457][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4035'.
[  607.598055][T16655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4035'.
[  608.276572][T16665] netlink: 'syz.0.4040': attribute type 10 has an invalid length.
[  608.291547][T16665] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4040'.
[  609.365303][T16686] netlink: 'syz.1.4048': attribute type 3 has an invalid length.
[  609.397391][T16686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4048'.
[  609.501468][T16689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  609.513902][T16689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  609.532811][T16689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  609.573108][T16689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  609.601612][T16689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  609.619670][T16689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  609.954550][T16698] netlink: 'syz.3.4050': attribute type 10 has an invalid length.
[  609.986334][T16698] team0: Port device geneve0 added
[  610.004485][T16696] netlink: 'syz.0.4049': attribute type 10 has an invalid length.
[  610.142150][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.278397][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.430807][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.534468][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.673618][T16687] chnl_net:caif_netlink_parms(): no params data found
[  610.808575][T16687] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.816299][T16687] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.823735][T16687] bridge_slave_0: entered allmulticast mode
[  610.832447][T16687] bridge_slave_0: entered promiscuous mode
[  610.842919][T16687] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.850829][T16687] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.858646][T16687] bridge_slave_1: entered allmulticast mode
[  610.866995][T16687] bridge_slave_1: entered promiscuous mode
[  610.907839][T16687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.922164][T16687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.669040][T16687] team0: Port device team_slave_0 added
[  611.686803][T16687] team0: Port device team_slave_1 added
[  611.692507][   T51] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  611.715677][   T51] Bluetooth: hci4: command tx timeout
[  611.769590][T16726] netlink: 'syz.3.4061': attribute type 10 has an invalid length.
[  611.782952][T16726] __nla_validate_parse: 4 callbacks suppressed
[  611.782993][T16726] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4061'.
[  611.918923][T16687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.933986][T16687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.969377][T16687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.985061][T16728] netlink: 'syz.0.4060': attribute type 3 has an invalid length.
[  612.011982][T16728] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4060'.
[  612.193357][T16687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.207003][T16687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.264283][T16687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.419790][T16687] hsr_slave_0: entered promiscuous mode
[  612.439733][T16687] hsr_slave_1: entered promiscuous mode
[  612.698301][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'.
[  612.712352][T16749] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4067'.
[  613.065934][T16759] netlink: 'syz.0.4070': attribute type 10 has an invalid length.
[  613.094107][T16759] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4070'.
[  613.794130][   T51] Bluetooth: hci4: command tx timeout
[  614.629109][T16782] netlink: 'syz.0.4077': attribute type 3 has an invalid length.
[  614.642146][T16782] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4077'.
[  614.666274][T16784] netlink: 'syz.3.4078': attribute type 10 has an invalid length.
[  614.686271][T16784] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4078'.
[  614.802213][T16795] netlink: 'syz.3.4080': attribute type 9 has an invalid length.
[  614.820753][T16795] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4080'.
[  614.830740][T16794] netlink: 'syz.3.4080': attribute type 9 has an invalid length.
[  614.845904][T16794] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4080'.
[  615.525193][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4081'.
[  615.792035][   T42] gretap0 (unregistering): left allmulticast mode
[  615.818809][   T42] gretap0 (unregistering): left promiscuous mode
[  615.839875][   T42] Ÿë
: port 1(gretap0) entered disabled state
[  615.860462][T16687] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  615.874806][   T51] Bluetooth: hci4: command tx timeout
[  615.887023][T16687] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  616.017084][T16687] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  616.040183][T16687] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  616.483806][T16812] netlink: 'syz.1.4087': attribute type 10 has an invalid length.
[  616.676417][T16816] netlink: 'syz.3.4088': attribute type 3 has an invalid length.
[  617.812502][T16687] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.938692][T16687] 8021q: adding VLAN 0 to HW filter on device team0
[  617.954215][   T51] Bluetooth: hci4: command tx timeout
[  618.081596][   T42] hsr_slave_0: left promiscuous mode
[  618.391923][   T42] hsr_slave_1: left promiscuous mode
[  618.410221][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.428354][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.469526][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.489668][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.509433][   T42] hsr0: left allmulticast mode
[  618.528835][   T42] bridge0: port 3(hsr0) entered disabled state
[  618.538067][   T42] bridge_slave_1: left allmulticast mode
[  618.543767][   T42] bridge_slave_1: left promiscuous mode
[  618.554608][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.578369][   T42] bridge_slave_0: left allmulticast mode
[  618.593924][   T42] bridge_slave_0: left promiscuous mode
[  618.599734][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.673132][   T42] veth1_macvtap: left promiscuous mode
[  618.681636][   T42] veth0_macvtap: left promiscuous mode
[  618.688504][   T42] veth1_vlan: left promiscuous mode
[  618.701595][   T42] veth0_vlan: left promiscuous mode
[  619.772606][   T42] team0 (unregistering): Port device team_slave_1 removed
[  619.815018][   T42] team0 (unregistering): Port device C removed
[  619.856354][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  619.899764][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  619.967831][   T42] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  620.219959][   T42] bond0 (unregistering): Released all slaves
[  620.318244][T16850] __nla_validate_parse: 3 callbacks suppressed
[  620.318259][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4097'.
[  620.336247][T16850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4097'.
[  620.345786][T16848] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  620.353657][T16848] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4096'.
[  620.397563][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.404748][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.426863][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.434062][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.614684][T16866] netlink: 'syz.0.4101': attribute type 3 has an invalid length.
[  620.622904][T16866] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4101'.
[  621.138004][T16687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.228326][T16687] veth0_vlan: entered promiscuous mode
[  621.258462][T16687] veth1_vlan: entered promiscuous mode
[  621.321616][T16687] veth0_macvtap: entered promiscuous mode
[  621.347167][T16687] veth1_macvtap: entered promiscuous mode
[  621.371414][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.384857][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.421977][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.439700][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.462302][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.484040][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.497036][T16687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.509276][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.520502][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.531035][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.541985][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.552559][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.565030][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.576855][T16687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.599430][T16687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.618919][T16687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.627989][T16687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.636890][T16687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.874298][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.903369][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.294280][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.302254][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.519716][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4107'.
[  622.542487][T16888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4107'.
[  622.743810][T16893] netlink: 'syz.1.4109': attribute type 10 has an invalid length.
[  622.752538][T16893] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4109'.
[  623.337143][T16689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  623.347185][T16689] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  623.355875][T16689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  623.370109][T16689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  623.379191][T16900] netlink: 'syz.1.4112': attribute type 3 has an invalid length.
[  623.396256][T16689] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  623.420550][T16689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  623.420617][T16900] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4112'.
[  624.430790][T16898] chnl_net:caif_netlink_parms(): no params data found
[  624.606217][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.612620][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  624.653746][ T1127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.700007][T16921] netlink: 'syz.0.4118': attribute type 10 has an invalid length.
[  624.708853][T16921] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4118'.
[  624.720098][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'.
[  624.855217][ T1127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.023047][ T1127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.061459][T16898] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.090680][T16898] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.098216][T16898] bridge_slave_0: entered allmulticast mode
[  625.118533][T16898] bridge_slave_0: entered promiscuous mode
[  625.148859][T16898] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.161667][T16898] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.181899][T16898] bridge_slave_1: entered allmulticast mode
[  625.202177][T16898] bridge_slave_1: entered promiscuous mode
[  625.477268][   T51] Bluetooth: hci1: command tx timeout
[  625.756014][ T1127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.845764][T16898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  625.865646][T16898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.911439][T16898] team0: Port device team_slave_0 added
[  625.927014][T16898] team0: Port device team_slave_1 added
[  626.105474][T16947] netlink: 'syz.2.4127': attribute type 3 has an invalid length.
[  626.134042][T16947] __nla_validate_parse: 1 callbacks suppressed
[  626.134076][T16947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4127'.
[  626.155073][T16898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.162088][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.197583][T16898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.273410][T16951] netlink: 'syz.1.4129': attribute type 10 has an invalid length.
[  626.298421][T16951] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4129'.
[  626.312179][T16898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.325200][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.356886][T16898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.540804][T16898] hsr_slave_0: entered promiscuous mode
[  626.620494][T16898] hsr_slave_1: entered promiscuous mode
[  626.655350][T16898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.689876][T16898] Cannot create hsr debugfs directory
[  627.120692][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'.
[  627.136900][T16974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4136'.
[  627.555191][   T51] Bluetooth: hci1: command tx timeout
[  628.256105][T16991] netlink: 'syz.1.4138': attribute type 10 has an invalid length.
[  628.282670][T16991] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4138'.
[  628.645605][T17004] netlink: 'syz.1.4144': attribute type 3 has an invalid length.
[  628.668734][T17004] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4144'.
[  628.737803][T16898] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  628.756414][T16898] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  628.772983][T16898] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  629.092880][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4146'.
[  629.103151][T17010] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4146'.
[  629.199877][T16898] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  629.634199][   T51] Bluetooth: hci1: command tx timeout
[  630.223681][T17026] netlink: 'syz.1.4150': attribute type 10 has an invalid length.
[  630.234370][T17026] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4150'.
[  630.286957][T16898] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.386573][T16898] 8021q: adding VLAN 0 to HW filter on device team0
[  630.815334][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.822522][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.900827][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.908073][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.063307][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4158'.
[  631.115952][T17066] netlink: 'syz.0.4157': attribute type 3 has an invalid length.
[  631.150552][ T1127] veth0_to_team: left allmulticast mode
[  631.157946][ T1127] veth0_to_team: left promiscuous mode
[  631.163889][ T1127] Ÿë
: port 1(veth0_to_team) entered disabled state
[  631.196533][ T1127] hsr_slave_0: left promiscuous mode
[  631.206224][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.216723][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.228918][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.236666][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.251651][ T1127] hsr0: left allmulticast mode
[  631.258727][ T1127] bridge0: port 3(hsr0) entered disabled state
[  631.272856][ T1127] bridge_slave_0: left allmulticast mode
[  631.282575][ T1127] bridge_slave_0: left promiscuous mode
[  631.290119][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.337216][ T1127] veth1_macvtap: left promiscuous mode
[  631.357187][ T1127] veth0_macvtap: left promiscuous mode
[  631.374493][ T1127] veth1_vlan: left promiscuous mode
[  631.386985][ T1127] veth0_vlan: left promiscuous mode
[  631.724300][   T51] Bluetooth: hci1: command tx timeout
[  632.031696][ T1127] team0 (unregistering): Port device geneve0 removed
[  632.482336][ T1127] team0 (unregistering): Port device team_slave_1 removed
[  632.529122][ T1127] team0 (unregistering): Port device team_slave_0 removed
[  632.577873][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.670401][ T1127] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  633.002003][ T1127] bond0 (unregistering): Released all slaves
[  633.113634][T17078] netlink: 'syz.2.4162': attribute type 10 has an invalid length.
[  633.122427][T17078] __nla_validate_parse: 2 callbacks suppressed
[  633.122443][T17078] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4162'.
[  633.142942][T17078] hsr0: entered promiscuous mode
[  633.149465][T17078] bridge0: port 3(hsr0) entered blocking state
[  633.174441][T17078] bridge0: port 3(hsr0) entered disabled state
[  633.180889][T17078] hsr0: entered allmulticast mode
[  633.187783][T17078] hsr_slave_0: entered allmulticast mode
[  633.194221][T17078] hsr_slave_1: entered allmulticast mode
[  633.202418][T17078] bridge0: port 3(hsr0) entered blocking state
[  633.208785][T17078] bridge0: port 3(hsr0) entered forwarding state
[  633.581664][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4170'.
[  633.618389][T17099] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4170'.
[  633.742405][T16898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  633.830399][T16898] veth0_vlan: entered promiscuous mode
[  633.858482][T16898] veth1_vlan: entered promiscuous mode
[  633.907696][T16898] veth0_macvtap: entered promiscuous mode
[  633.918530][T17108] netlink: 'syz.0.4173': attribute type 3 has an invalid length.
[  633.936756][T17108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4173'.
[  633.956963][T17107] netlink: 'syz.1.4174': attribute type 10 has an invalid length.
[  633.974122][T17107] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4174'.
[  633.987810][T16898] veth1_macvtap: entered promiscuous mode
[  634.051763][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  634.078504][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.090385][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  634.107149][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.123332][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  634.160305][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.172742][T16898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  634.214379][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  634.242177][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.269843][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  634.303944][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.340437][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  634.363982][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.395618][T16898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  634.418799][T16898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.443918][T16898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.452671][T16898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.479130][T16898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.702145][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.748688][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.812456][T17121] veth0_vlan: entered allmulticast mode
[  635.031960][T17122] veth0_vlan: left promiscuous mode
[  635.039573][T17122] veth0_vlan: entered promiscuous mode
[  635.068014][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.109094][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.539335][T17137] netlink: 'syz.1.4182': attribute type 10 has an invalid length.
[  635.563481][T17137] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4182'.
[  635.664497][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4183'.
[  635.673502][T17141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4183'.
[  635.989235][T17146] netlink: 'syz.1.4185': attribute type 3 has an invalid length.
[  636.007635][T17146] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4185'.
[  637.046458][T16689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  637.058239][T16689] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  637.066594][T16689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  637.092001][T16689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  637.100040][T16689] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  637.108088][T16689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  637.398116][T17161] chnl_net:caif_netlink_parms(): no params data found
[  638.309819][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.339131][T17172] netlink: 'syz.1.4192': attribute type 10 has an invalid length.
[  638.349899][T17172] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4192'.
[  638.410647][T17161] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.425260][T17161] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.441128][T17161] bridge_slave_0: entered allmulticast mode
[  638.449019][T17161] bridge_slave_0: entered promiscuous mode
[  638.459431][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'.
[  638.469738][T17180] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4195'.
[  638.511247][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.549290][T17161] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.569032][T17161] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.594613][T17161] bridge_slave_1: entered allmulticast mode
[  638.612267][T17161] bridge_slave_1: entered promiscuous mode
[  638.670963][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.769655][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.800254][T17190] netlink: 'syz.1.4199': attribute type 3 has an invalid length.
[  638.824962][T17190] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4199'.
[  638.879876][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.917652][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.092737][T17161] team0: Port device team_slave_0 added
[  639.154964][T16689] Bluetooth: hci2: command tx timeout
[  639.185401][T17161] team0: Port device team_slave_1 added
[  639.287965][T17202] netlink: 'syz.3.4204': attribute type 10 has an invalid length.
[  639.323529][T17202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4204'.
[  639.367994][T17202] hsr0: entered promiscuous mode
[  639.406724][T17202] bridge0: port 3(hsr0) entered blocking state
[  639.437046][T17202] bridge0: port 3(hsr0) entered disabled state
[  639.494771][T17202] hsr0: entered allmulticast mode
[  639.514114][T17202] hsr_slave_0: entered allmulticast mode
[  639.536025][T17202] hsr_slave_1: entered allmulticast mode
[  639.601194][T17202] bridge0: port 3(hsr0) entered blocking state
[  639.608163][T17202] bridge0: port 3(hsr0) entered forwarding state
[  639.970579][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.998601][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.035248][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  640.048838][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4205'.
[  640.061258][T17207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4205'.
[  640.115221][T17210] netlink: 'syz.2.4206': attribute type 10 has an invalid length.
[  640.152292][T17210] team0: Device hsr_slave_0 failed to register rx_handler
[  640.187922][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  640.195761][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.232499][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  640.376948][T17161] hsr_slave_0: entered promiscuous mode
[  640.389925][T17161] hsr_slave_1: entered promiscuous mode
[  640.402206][T17161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  640.410155][T17161] Cannot create hsr debugfs directory
[  641.234888][T16689] Bluetooth: hci2: command tx timeout
[  641.719631][T17225] netlink: 'syz.1.4212': attribute type 10 has an invalid length.
[  641.744297][T17225] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4212'.
[  641.791451][T17236] netlink: 'syz.3.4215': attribute type 3 has an invalid length.
[  641.809534][T17236] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4215'.
[  642.223883][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4221'.
[  643.315330][T16689] Bluetooth: hci2: command tx timeout
[  643.332694][T17276] netlink: 'syz.3.4224': attribute type 10 has an invalid length.
[  643.439268][ T1127] gretap0 (unregistering): left allmulticast mode
[  643.459962][ T1127] gretap0 (unregistering): left promiscuous mode
[  643.474247][ T1127] Ÿë
: port 1(gretap0) entered disabled state
[  643.537717][T17292] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  643.558212][T17292] __nla_validate_parse: 2 callbacks suppressed
[  643.558259][T17292] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4226'.
[  644.073957][T17309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4232'.
[  644.213852][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4233'.
[  644.222962][T17314] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4233'.
[  644.513874][T17319] netlink: 'syz.3.4234': attribute type 10 has an invalid length.
[  644.522445][T17319] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4234'.
[  645.402101][T16689] Bluetooth: hci2: command tx timeout
[  645.605243][ T1127] hsr_slave_0: left promiscuous mode
[  645.619418][ T1127] hsr_slave_1: left promiscuous mode
[  645.637219][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  645.645270][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  645.653561][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  645.671554][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.683178][ T1127] hsr0: left allmulticast mode
[  645.696232][ T1127] bridge0: port 3(hsr0) entered disabled state
[  645.733005][ T1127] bridge_slave_1: left allmulticast mode
[  645.740186][ T1127] bridge_slave_1: left promiscuous mode
[  645.756156][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.770315][ T1127] bridge_slave_0: left allmulticast mode
[  645.789534][ T1127] bridge_slave_0: left promiscuous mode
[  645.804727][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.869106][ T1127] veth1_macvtap: left promiscuous mode
[  645.880023][ T1127] veth1_vlan: left promiscuous mode
[  645.891409][ T1127] veth0_vlan: left promiscuous mode
[  646.790314][ T1127] team0 (unregistering): Port device team_slave_1 removed
[  646.836231][ T1127] team0 (unregistering): Port device team_slave_0 removed
[  646.891489][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.940152][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  647.266601][ T1127] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  647.275599][ T1127] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  647.287401][ T1127] bond0 (unregistering): Released all slaves
[  647.396075][T17343] netlink: 'syz.1.4242': attribute type 3 has an invalid length.
[  647.404084][T17343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4242'.
[  647.413260][T17345] netlink: 'syz.3.4243': attribute type 10 has an invalid length.
[  647.421597][T17345] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4243'.
[  647.441073][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4247'.
[  647.463892][T17358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4247'.
[  647.547637][T17161] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  647.578565][T17161] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  647.628345][T17161] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  647.653551][T17161] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  647.947109][T17161] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.001098][T17161] 8021q: adding VLAN 0 to HW filter on device team0
[  648.042695][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.049965][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.078999][T17377] netlink: 'syz.3.4254': attribute type 21 has an invalid length.
[  648.095812][T17377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4254'.
[  648.139508][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.146749][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  648.208022][T17380] netlink: 'syz.1.4255': attribute type 3 has an invalid length.
[  648.430183][T17384] netlink: 'syz.2.4256': attribute type 10 has an invalid length.
[  649.043190][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.161909][T17161] veth0_vlan: entered promiscuous mode
[  649.201761][T17161] veth1_vlan: entered promiscuous mode
[  649.300864][T17161] veth0_macvtap: entered promiscuous mode
[  649.335997][T17161] veth1_macvtap: entered promiscuous mode
[  649.375531][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.414312][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.425288][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.454011][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.484082][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.503710][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.521935][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  649.586699][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.602388][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.618659][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.630709][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.647538][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.667867][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.688900][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  649.712776][T17161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.723283][T17161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.771588][T17161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.785463][T17161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.881647][T17426] netlink: 'syz.2.4265': attribute type 10 has an invalid length.
[  649.912114][T17426] __nla_validate_parse: 5 callbacks suppressed
[  649.912540][T17426] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4265'.
[  650.063121][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.097601][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.174461][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.182333][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.202650][T17442] netlink: 'syz.3.4268': attribute type 3 has an invalid length.
[  650.244307][T17442] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4268'.
[  650.375974][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4271'.
[  650.414224][T17449] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4271'.
[  651.197032][T17471] netlink: 'syz.1.4276': attribute type 10 has an invalid length.
[  651.216288][T17471] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4276'.
[  651.412505][T17483] netlink: 'syz.2.4279': attribute type 29 has an invalid length.
[  651.454327][T17483] netlink: 'syz.2.4279': attribute type 29 has an invalid length.
[  651.822860][T17497] netlink: 'syz.1.4286': attribute type 3 has an invalid length.
[  651.859520][T17497] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4286'.
[  651.916002][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4287'.
[  651.934227][T17500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4287'.
[  652.397285][T17513] netlink: 'syz.0.4290': attribute type 10 has an invalid length.
[  652.406793][T17513] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4290'.
[  652.417822][T17513] hsr0: entered promiscuous mode
[  652.427535][T17513] bridge0: port 3(hsr0) entered blocking state
[  652.437390][T17513] bridge0: port 3(hsr0) entered disabled state
[  652.469845][T17513] hsr0: entered allmulticast mode
[  652.499920][T17513] hsr_slave_0: entered allmulticast mode
[  652.520058][T17513] hsr_slave_1: entered allmulticast mode
[  652.580395][T17513] bridge0: port 3(hsr0) entered blocking state
[  652.587775][T17513] bridge0: port 3(hsr0) entered forwarding state
[  653.569307][T17553] netlink: 'syz.1.4302': attribute type 3 has an invalid length.
[  653.601411][T17553] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4302'.
[  653.673082][T17546] netlink: 'syz.0.4299': attribute type 10 has an invalid length.
[  653.896860][T17560] FAULT_INJECTION: forcing a failure.
[  653.896860][T17560] name failslab, interval 1, probability 0, space 0, times 0
[  653.911505][T17560] CPU: 1 PID: 17560 Comm: syz.3.4303 Not tainted syzkaller #0
[  653.919023][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.929107][T17560] Call Trace:
[  653.932406][T17560]  <TASK>
[  653.935358][T17560]  dump_stack_lvl+0x18c/0x250
[  653.940074][T17560]  ? show_regs_print_info+0x20/0x20
[  653.945393][T17560]  ? load_image+0x420/0x420
[  653.949940][T17560]  should_fail_ex+0x39d/0x4d0
[  653.954671][T17560]  should_failslab+0x9/0x20
[  653.959203][T17560]  slab_pre_alloc_hook+0x59/0x310
[  653.964266][T17560]  ? nf_ct_ext_add+0x1ab/0x440
[  653.969059][T17560]  ? nf_ct_ext_add+0x1ab/0x440
[  653.973848][T17560]  __kmem_cache_alloc_node+0x53/0x250
[  653.979259][T17560]  ? nf_ct_ext_add+0x1ab/0x440
[  653.984059][T17560]  __kmalloc_node_track_caller+0xa2/0x230
[  653.989816][T17560]  krealloc+0x86/0x120
[  653.993911][T17560]  nf_ct_ext_add+0x1ab/0x440
[  653.998546][T17560]  init_conntrack+0x69c/0xf10
[  654.003255][T17560]  ? early_drop+0x7f0/0x7f0
[  654.007797][T17560]  ? nf_conntrack_find_get+0x650/0x650
[  654.013289][T17560]  ? __siphash_unaligned+0x22e/0x3a0
[  654.018694][T17560]  nf_conntrack_in+0xc06/0x15c0
[  654.023580][T17560]  ? nf_ct_pernet+0x270/0x270
[  654.028262][T17560]  ? ip6t_do_table+0x1d9/0x1510
[  654.033113][T17560]  ? ip6t_alloc_initial_table+0x640/0x640
[  654.038835][T17560]  ? lockdep_hardirqs_on+0x98/0x150
[  654.044039][T17560]  ? ipv6_defrag+0x2d6/0x3a0
[  654.048625][T17560]  ? ipv6_conntrack_in+0x20/0x20
[  654.053595][T17560]  nf_hook_slow+0xbd/0x200
[  654.058014][T17560]  __ip6_local_out+0x784/0x8a0
[  654.062774][T17560]  ? __ip6_local_out+0x60c/0x8a0
[  654.067799][T17560]  ? ip6_dst_hoplimit+0x350/0x350
[  654.072830][T17560]  ? __ip6_local_out+0x8a0/0x8a0
[  654.077764][T17560]  ? read_lock_is_recursive+0x20/0x20
[  654.083275][T17560]  ip6_local_out+0x2a/0x130
[  654.087824][T17560]  ? ip6_send_skb+0x10f/0x380
[  654.092532][T17560]  ip6_send_skb+0x1d5/0x380
[  654.097086][T17560]  udp_v6_send_skb+0xbbb/0x1860
[  654.101983][T17560]  udp_v6_push_pending_frames+0x133/0x220
[  654.107719][T17560]  udpv6_sendmsg+0xdfe/0x2390
[  654.112499][T17560]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  654.117361][T17560]  ? udp_v6_early_demux+0xf80/0xf80
[  654.122756][T17560]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  654.128766][T17560]  ? inet_send_prepare+0x5c/0x260
[  654.133799][T17560]  ? inet6_sendmsg+0x5f/0xd0
[  654.138390][T17560]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  654.143590][T17560]  ____sys_sendmsg+0x5ba/0x960
[  654.148358][T17560]  ? lockdep_hardirqs_on+0x98/0x150
[  654.153553][T17560]  ? __sys_sendmsg_sock+0x30/0x30
[  654.158576][T17560]  ? ___sys_sendmsg+0x281/0x360
[  654.163428][T17560]  ___sys_sendmsg+0x2a6/0x360
[  654.168134][T17560]  ? __sys_sendmsg+0x2a0/0x2a0
[  654.172899][T17560]  ? perf_trace_preemptirq_template+0x269/0x330
[  654.179181][T17560]  __se_sys_sendmsg+0x1c2/0x2b0
[  654.184032][T17560]  ? __x64_sys_sendmsg+0x80/0x80
[  654.188984][T17560]  do_syscall_64+0x55/0xb0
[  654.193396][T17560]  ? clear_bhb_loop+0x40/0x90
[  654.198176][T17560]  ? clear_bhb_loop+0x40/0x90
[  654.202845][T17560]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  654.208737][T17560] RIP: 0033:0x7f25eb59ce59
[  654.213149][T17560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.232765][T17560] RSP: 002b:00007f25ec4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  654.241178][T17560] RAX: ffffffffffffffda RBX: 00007f25eb815fa0 RCX: 00007f25eb59ce59
[  654.249147][T17560] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007
[  654.257115][T17560] RBP: 00007f25ec4da090 R08: 0000000000000000 R09: 0000000000000000
[  654.265077][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  654.273128][T17560] R13: 00007f25eb816038 R14: 00007f25eb815fa0 R15: 00007ffdcfccdf68
[  654.281134][T17560]  </TASK>
[  655.189742][T17590] netlink: 'syz.2.4312': attribute type 10 has an invalid length.
[  655.224104][T17590] __nla_validate_parse: 3 callbacks suppressed
[  655.224123][T17590] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4312'.
[  655.309883][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4315'.
[  655.326709][T17597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4315'.
[  655.388193][T17605] netlink: 'syz.2.4319': attribute type 3 has an invalid length.
[  655.419977][T17605] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4319'.
[  656.429796][T17627] FAULT_INJECTION: forcing a failure.
[  656.429796][T17627] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.445469][T17627] CPU: 0 PID: 17627 Comm: syz.1.4327 Not tainted syzkaller #0
[  656.452981][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  656.463236][T17627] Call Trace:
[  656.466529][T17627]  <TASK>
[  656.469463][T17627]  dump_stack_lvl+0x18c/0x250
[  656.474151][T17627]  ? show_regs_print_info+0x20/0x20
[  656.479352][T17627]  ? load_image+0x420/0x420
[  656.483856][T17627]  ? __might_fault+0xaa/0x120
[  656.488536][T17627]  ? __lock_acquire+0x7d40/0x7d40
[  656.493649][T17627]  should_fail_ex+0x39d/0x4d0
[  656.498355][T17627]  _copy_to_user+0x2f/0xa0
[  656.502860][T17627]  ip_tunnel_siocdevprivate+0x162/0x1f0
[  656.508406][T17627]  ? dev_ioctl+0x83c/0x1140
[  656.512914][T17627]  ? ip_tunnel_update+0xb10/0xb10
[  656.517946][T17627]  ? dev_ifsioc+0x958/0xc40
[  656.522470][T17627]  dev_ioctl+0x84c/0x1140
[  656.526894][T17627]  sock_ioctl+0x74c/0x7e0
[  656.531263][T17627]  ? sock_poll+0x3e0/0x3e0
[  656.535692][T17627]  ? bpf_lsm_file_ioctl+0x9/0x10
[  656.540639][T17627]  ? security_file_ioctl+0x80/0xa0
[  656.545748][T17627]  ? sock_poll+0x3e0/0x3e0
[  656.550172][T17627]  __se_sys_ioctl+0xfd/0x170
[  656.554801][T17627]  do_syscall_64+0x55/0xb0
[  656.559215][T17627]  ? clear_bhb_loop+0x40/0x90
[  656.563888][T17627]  ? clear_bhb_loop+0x40/0x90
[  656.568589][T17627]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  656.574664][T17627] RIP: 0033:0x7fe5cfd9ce59
[  656.579086][T17627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.598788][T17627] RSP: 002b:00007fe5d0c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  656.607209][T17627] RAX: ffffffffffffffda RBX: 00007fe5d0015fa0 RCX: 00007fe5cfd9ce59
[  656.615185][T17627] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  656.623244][T17627] RBP: 00007fe5d0c36090 R08: 0000000000000000 R09: 0000000000000000
[  656.631391][T17627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.639359][T17627] R13: 00007fe5d0016038 R14: 00007fe5d0015fa0 R15: 00007ffdbca0e038
[  656.647348][T17627]  </TASK>
[  656.851049][T17630] netlink: 'syz.3.4328': attribute type 10 has an invalid length.
[  656.895939][T17630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4328'.
[  657.067786][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4333'.
[  657.080182][T17643] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4333'.
[  657.100061][T17641] netlink: 'syz.2.4334': attribute type 3 has an invalid length.
[  657.126695][T17641] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4334'.
[  657.769085][T17652] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4337'.
[  658.246924][T17668] netlink: 'syz.2.4343': attribute type 10 has an invalid length.
[  658.302222][T17668] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4343'.
[  658.340003][T17667] netlink: 'syz.1.4344': attribute type 10 has an invalid length.
[  658.635982][T17676] netlink: 'syz.2.4348': attribute type 10 has an invalid length.
[  658.797526][T17680] netlink: 'syz.2.4350': attribute type 3 has an invalid length.
[  659.786308][T17693] netlink: 'syz.1.4355': attribute type 10 has an invalid length.
[  659.886167][T17698] veth0_vlan: entered allmulticast mode
[  660.821093][T17705] veth0_vlan: left promiscuous mode
[  660.828423][T17705] veth0_vlan: entered promiscuous mode
[  660.838242][T17707] netlink: 'syz.3.4361': attribute type 3 has an invalid length.
[  660.874510][T17707] __nla_validate_parse: 6 callbacks suppressed
[  660.874561][T17707] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4361'.
[  661.022302][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4363'.
[  661.041602][T17718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4363'.
[  661.502426][T17727] netlink: 'syz.3.4368': attribute type 10 has an invalid length.
[  661.511640][T17727] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4368'.
[  661.692806][T17734] netlink: 'syz.2.4370': attribute type 3 has an invalid length.
[  661.716906][T17734] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4370'.
[  662.650506][T17747] netlink: 'syz.2.4375': attribute type 3 has an invalid length.
[  662.669756][T17747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4375'.
[  663.618941][T17760] netlink: 'syz.0.4380': attribute type 10 has an invalid length.
[  663.636405][T17760] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4380'.
[  663.803212][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4383'.
[  663.814518][T17768] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4383'.
[  664.222724][T17770] netlink: 'syz.2.4384': attribute type 10 has an invalid length.
[  664.231323][T17770] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4384'.
[  664.382408][T17776] netlink: 'syz.3.4387': attribute type 10 has an invalid length.
[  664.711070][T17787] netlink: 'syz.2.4392': attribute type 3 has an invalid length.
[  664.816403][T17792] netlink: 'syz.1.4391': attribute type 10 has an invalid length.
[  665.891456][T17804] netlink: 'syz.3.4397': attribute type 10 has an invalid length.
[  665.918944][T17804] __nla_validate_parse: 3 callbacks suppressed
[  665.918989][T17804] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4397'.
[  666.248248][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'.
[  666.266335][T17813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4401'.
[  666.561841][T17820] netlink: 'syz.1.4403': attribute type 10 has an invalid length.
[  666.581461][T17820] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4403'.
[  667.332009][T17836] netlink: 'syz.0.4408': attribute type 10 has an invalid length.
[  667.346069][T17836] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4408'.
[  667.364411][T17837] netlink: 'syz.2.4409': attribute type 3 has an invalid length.
[  667.373351][T17837] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4409'.
[  668.111515][T17840] netlink: 'syz.0.4419': attribute type 3 has an invalid length.
[  668.123437][T17840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4419'.
[  668.262425][T17842] netlink: 'syz.2.4410': attribute type 10 has an invalid length.
[  668.294302][T17842] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4410'.
[  669.016548][T17859] netlink: 'syz.2.4416': attribute type 3 has an invalid length.
[  669.027251][T17859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4416'.
[  669.054641][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4418'.
[  669.617153][T17869] netlink: 'syz.0.4420': attribute type 10 has an invalid length.
[  670.271089][T17887] netlink: 'syz.3.4425': attribute type 10 has an invalid length.
[  670.282389][T17888] netlink: 'syz.1.4426': attribute type 3 has an invalid length.
[  670.509580][T17890] ipvlan1: entered promiscuous mode
[  670.548853][T17890] ipvlan1: entered allmulticast mode
[  670.564313][T17890] veth0_vlan: entered allmulticast mode
[  670.619438][T17890] bridge0: port 4(ipvlan1) entered blocking state
[  670.640855][T17890] bridge0: port 4(ipvlan1) entered disabled state
[  670.717501][T17890] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  671.527081][T17900] __nla_validate_parse: 7 callbacks suppressed
[  671.527105][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4434'.
[  671.545699][T17900] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4434'.
[  671.643293][T17903] validate_nla: 1 callbacks suppressed
[  671.643356][T17903] netlink: 'syz.3.4435': attribute type 3 has an invalid length.
[  671.663168][T17903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4435'.
[  671.889980][T17906] netlink: 'syz.2.4437': attribute type 10 has an invalid length.
[  671.913066][T17906] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4437'.
[  672.068894][T17910] netlink: 'syz.0.4438': attribute type 10 has an invalid length.
[  672.077362][T17910] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4438'.
[  672.552715][T17921] netlink: 'syz.1.4442': attribute type 3 has an invalid length.
[  672.565671][T17921] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4442'.
[  673.298228][T17928] netlink: 'syz.2.4443': attribute type 10 has an invalid length.
[  673.307180][T17928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4443'.
[  673.319948][T17928] ipvlan1: entered promiscuous mode
[  673.327345][T17928] ipvlan1: entered allmulticast mode
[  673.358344][T17928] bridge0: port 4(ipvlan1) entered blocking state
[  673.366796][T17928] bridge0: port 4(ipvlan1) entered disabled state
[  673.408895][T17928] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  673.426290][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4445'.
[  673.446122][T17932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4445'.
[  673.927667][T17935] netlink: 'syz.3.4447': attribute type 10 has an invalid length.
[  673.936326][T17935] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4447'.
[  674.183672][T17942] netlink: 'syz.2.4448': attribute type 10 has an invalid length.
[  674.422296][T17948] netlink: 'syz.1.4451': attribute type 10 has an invalid length.
[  674.608738][T17950] netlink: 'syz.0.4462': attribute type 10 has an invalid length.
[  674.723169][T17954] netlink: 'syz.1.4453': attribute type 10 has an invalid length.
[  675.933223][T17976] veth0_vlan: left promiscuous mode
[  675.940193][T17976] veth0_vlan: entered promiscuous mode
[  676.554419][T17994] __nla_validate_parse: 12 callbacks suppressed
[  676.554437][T17994] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4479'.
[  677.452459][T18010] veth0_vlan: left promiscuous mode
[  677.488706][T18010] veth0_vlan: entered promiscuous mode
[  677.709215][T18018] validate_nla: 7 callbacks suppressed
[  677.709235][T18018] netlink: 'syz.2.4480': attribute type 10 has an invalid length.
[  677.738237][T18018] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4480'.
[  677.765572][T18021] netlink: 'syz.3.4481': attribute type 3 has an invalid length.
[  677.773540][T18021] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4481'.
[  677.973784][T18024] netlink: 'syz.1.4482': attribute type 10 has an invalid length.
[  677.993462][T18024] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4482'.
[  678.911695][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4492'.
[  678.927966][T18048] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4492'.
[  679.054087][T18046] netlink: 'syz.3.4491': attribute type 3 has an invalid length.
[  679.067245][T18046] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4491'.
[  679.997068][T18059] netlink: 'syz.0.4493': attribute type 10 has an invalid length.
[  680.005365][T18059] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4493'.
[  680.260950][T18063] netlink: 'syz.1.4496': attribute type 10 has an invalid length.
[  680.270522][T18063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4496'.
[  680.556877][T18079] netlink: 'syz.3.4503': attribute type 3 has an invalid length.
[  680.565561][T18079] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4503'.
[  681.832835][T18091] netlink: 'syz.2.4505': attribute type 10 has an invalid length.
[  681.871189][T18091] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4505'.
[  682.716396][T18099] netlink: 'syz.0.4508': attribute type 10 has an invalid length.
[  682.739156][T18099] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4508'.
[  683.028087][T18109] netlink: 'syz.0.4510': attribute type 10 has an invalid length.
[  683.037799][T18109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4510'.
[  683.140813][T18107] netlink: 'syz.2.4522': attribute type 10 has an invalid length.
[  683.168119][T18107] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4522'.
[  683.627050][T18118] netlink: 'syz.2.4516': attribute type 7 has an invalid length.
[  683.677917][T18116] netlink: 'syz.1.4515': attribute type 3 has an invalid length.
[  683.694007][T18116] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4515'.
[  683.837107][T18124] FAULT_INJECTION: forcing a failure.
[  683.837107][T18124] name failslab, interval 1, probability 0, space 0, times 0
[  683.857444][T18124] CPU: 0 PID: 18124 Comm: syz.2.4519 Not tainted syzkaller #0
[  683.864967][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  683.875141][T18124] Call Trace:
[  683.878460][T18124]  <TASK>
[  683.881513][T18124]  dump_stack_lvl+0x18c/0x250
[  683.886222][T18124]  ? show_regs_print_info+0x20/0x20
[  683.891442][T18124]  ? load_image+0x420/0x420
[  683.895966][T18124]  ? rtnl_stats_get_parse+0x2b4/0x9a0
[  683.901375][T18124]  ? verify_lock_unused+0x140/0x140
[  683.906608][T18124]  ? rtnl_bridge_notify+0x250/0x250
[  683.911838][T18124]  should_fail_ex+0x39d/0x4d0
[  683.916550][T18124]  should_failslab+0x9/0x20
[  683.921078][T18124]  slab_pre_alloc_hook+0x59/0x310
[  683.926138][T18124]  kmem_cache_alloc+0x5a/0x2d0
[  683.930926][T18124]  ? skb_clone+0x1eb/0x370
[  683.935376][T18124]  skb_clone+0x1eb/0x370
[  683.939644][T18124]  __netlink_deliver_tap+0x41c/0x830
[  683.944971][T18124]  ? netlink_deliver_tap+0x2e/0x1b0
[  683.950201][T18124]  netlink_deliver_tap+0x19c/0x1b0
[  683.955353][T18124]  __netlink_sendskb+0x4b/0x90
[  683.960158][T18124]  netlink_dump+0xa75/0xe50
[  683.964710][T18124]  ? netlink_lookup+0x200/0x200
[  683.969689][T18124]  ? slab_free_freelist_hook+0x130/0x1a0
[  683.975357][T18124]  ? netlink_recvmsg+0x5e7/0xe60
[  683.980323][T18124]  ? kmem_cache_free+0xf8/0x270
[  683.985213][T18124]  netlink_recvmsg+0x693/0xe60
[  683.990028][T18124]  ? netlink_sendmsg+0xbf0/0xbf0
[  683.994998][T18124]  ? aa_af_perm+0x330/0x330
[  683.999516][T18124]  ? __lock_acquire+0x1273/0x7d40
[  684.004564][T18124]  ? verify_lock_unused+0x140/0x140
[  684.009791][T18124]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  684.015100][T18124]  ? security_socket_recvmsg+0x89/0xb0
[  684.020670][T18124]  ? netlink_sendmsg+0xbf0/0xbf0
[  684.025644][T18124]  ____sys_recvmsg+0x2ce/0x5e0
[  684.030449][T18124]  ? __sys_recvmsg_sock+0x50/0x50
[  684.035508][T18124]  ? import_iovec+0x73/0xa0
[  684.040036][T18124]  ___sys_recvmsg+0x216/0x590
[  684.044870][T18124]  ? __sys_recvmsg+0x2a0/0x2a0
[  684.049659][T18124]  ? ksys_write+0x1c4/0x260
[  684.054194][T18124]  ? __fget_files+0x43d/0x4b0
[  684.058907][T18124]  __x64_sys_recvmsg+0x20c/0x2e0
[  684.063894][T18124]  ? ___sys_recvmsg+0x590/0x590
[  684.068781][T18124]  ? lockdep_hardirqs_on+0x98/0x150
[  684.074013][T18124]  do_syscall_64+0x55/0xb0
[  684.078546][T18124]  ? clear_bhb_loop+0x40/0x90
[  684.083245][T18124]  ? clear_bhb_loop+0x40/0x90
[  684.087945][T18124]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  684.093867][T18124] RIP: 0033:0x7feab0b9ce59
[  684.098298][T18124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.118022][T18124] RSP: 002b:00007feab1b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  684.126463][T18124] RAX: ffffffffffffffda RBX: 00007feab0e15fa0 RCX: 00007feab0b9ce59
[  684.134463][T18124] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000004
[  684.142454][T18124] RBP: 00007feab1b0f090 R08: 0000000000000000 R09: 0000000000000000
[  684.150445][T18124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  684.158458][T18124] R13: 00007feab0e16038 R14: 00007feab0e15fa0 R15: 00007fffb82f4da8
[  684.166469][T18124]  </TASK>
[  684.671129][T18137] netlink: 'syz.2.4524': attribute type 3 has an invalid length.
[  684.710696][T18137] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4524'.
[  685.783504][T18151] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4530'.
[  685.865016][T18154] netlink: 'syz.1.4529': attribute type 10 has an invalid length.
[  685.873741][T18154] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4529'.
[  686.038118][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.044630][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.125898][T18164] netlink: 'syz.3.4533': attribute type 10 has an invalid length.
[  686.135193][T18164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4533'.
[  686.240515][T18164] team0: Port device geneve0 added
[  686.512071][T18174] netlink: 'syz.3.4538': attribute type 3 has an invalid length.
[  686.523896][T18174] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4538'.
[  686.682936][T18178] netlink: 'syz.2.4539': attribute type 3 has an invalid length.
[  686.910101][T18181] __nla_validate_parse: 1 callbacks suppressed
[  686.910148][T18181] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4540'.
[  687.259633][T18189] FAULT_INJECTION: forcing a failure.
[  687.259633][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  687.319453][T18189] CPU: 1 PID: 18189 Comm: syz.0.4543 Not tainted syzkaller #0
[  687.327006][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  687.337099][T18189] Call Trace:
[  687.340388][T18189]  <TASK>
[  687.343346][T18189]  dump_stack_lvl+0x18c/0x250
[  687.348044][T18189]  ? show_regs_print_info+0x20/0x20
[  687.353257][T18189]  ? load_image+0x420/0x420
[  687.357788][T18189]  ? __might_fault+0xaa/0x120
[  687.362481][T18189]  ? __lock_acquire+0x7d40/0x7d40
[  687.367534][T18189]  should_fail_ex+0x39d/0x4d0
[  687.372233][T18189]  _copy_from_user+0x2f/0xe0
[  687.376888][T18189]  ___sys_sendmsg+0x1c7/0x360
[  687.381583][T18189]  ? get_pid_task+0x20/0x1e0
[  687.386197][T18189]  ? __sys_sendmsg+0x2a0/0x2a0
[  687.391017][T18189]  ? __lock_acquire+0x7d40/0x7d40
[  687.396181][T18189]  __se_sys_sendmsg+0x1c2/0x2b0
[  687.401142][T18189]  ? __x64_sys_sendmsg+0x80/0x80
[  687.406137][T18189]  ? lockdep_hardirqs_on+0x98/0x150
[  687.411485][T18189]  do_syscall_64+0x55/0xb0
[  687.415917][T18189]  ? clear_bhb_loop+0x40/0x90
[  687.420603][T18189]  ? clear_bhb_loop+0x40/0x90
[  687.425321][T18189]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  687.431230][T18189] RIP: 0033:0x7f47f4b9ce59
[  687.435657][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.455295][T18189] RSP: 002b:00007f47f59a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  687.463729][T18189] RAX: ffffffffffffffda RBX: 00007f47f4e15fa0 RCX: 00007f47f4b9ce59
[  687.471720][T18189] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a
[  687.479697][T18189] RBP: 00007f47f59a9090 R08: 0000000000000000 R09: 0000000000000000
[  687.487669][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.495644][T18189] R13: 00007f47f4e16038 R14: 00007f47f4e15fa0 R15: 00007ffe3379b5f8
[  687.503660][T18189]  </TASK>
[  687.527522][T18188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4542'.
[  687.545685][T18188] bridge0: port 3(ipvlan1) entered blocking state
[  687.570652][T18188] bridge0: port 3(ipvlan1) entered disabled state
[  687.668545][T18188] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  687.785634][T18191] validate_nla: 2 callbacks suppressed
[  687.785645][T18191] netlink: 'syz.0.4544': attribute type 2 has an invalid length.
[  687.799407][T18191] netlink: 'syz.0.4544': attribute type 1 has an invalid length.
[  687.842553][T18191] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.4544'.
[  687.982021][T18199] netlink: 'syz.1.4547': attribute type 29 has an invalid length.
[  688.003274][T18199] netlink: 'syz.1.4547': attribute type 29 has an invalid length.
[  688.020367][T18199] netlink: 'syz.1.4547': attribute type 29 has an invalid length.
[  688.028846][T18201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4548'.
[  688.045469][T18199] netlink: 'syz.1.4547': attribute type 29 has an invalid length.
[  688.055863][T18199] netlink: 'syz.1.4547': attribute type 29 has an invalid length.
[  688.602074][T18221] netlink: 'syz.0.4553': attribute type 21 has an invalid length.
[  688.643143][T18221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4553'.
[  688.661630][T18221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4553'.
[  688.672323][T18223] netlink: 'syz.1.4554': attribute type 3 has an invalid length.
[  688.686423][T18223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4554'.
[  688.709415][T18219] netlink: 'syz.3.4552': attribute type 10 has an invalid length.
[  688.724307][T18219] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4552'.
[  689.577260][T18251] FAULT_INJECTION: forcing a failure.
[  689.577260][T18251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  689.590800][T18251] CPU: 1 PID: 18251 Comm: syz.2.4565 Not tainted syzkaller #0
[  689.598299][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  689.608466][T18251] Call Trace:
[  689.611770][T18251]  <TASK>
[  689.614716][T18251]  dump_stack_lvl+0x18c/0x250
[  689.619434][T18251]  ? show_regs_print_info+0x20/0x20
[  689.625181][T18251]  ? load_image+0x420/0x420
[  689.629789][T18251]  ? __lock_acquire+0x7d40/0x7d40
[  689.634841][T18251]  should_fail_ex+0x39d/0x4d0
[  689.639549][T18251]  _copy_to_user+0x2f/0xa0
[  689.643988][T18251]  put_user_ifreq+0x78/0xb0
[  689.648511][T18251]  sock_ioctl+0x77b/0x7e0
[  689.652869][T18251]  ? sock_poll+0x3e0/0x3e0
[  689.657327][T18251]  ? bpf_lsm_file_ioctl+0x9/0x10
[  689.662284][T18251]  ? security_file_ioctl+0x80/0xa0
[  689.667420][T18251]  ? sock_poll+0x3e0/0x3e0
[  689.671865][T18251]  __se_sys_ioctl+0xfd/0x170
[  689.676480][T18251]  do_syscall_64+0x55/0xb0
[  689.680922][T18251]  ? clear_bhb_loop+0x40/0x90
[  689.685616][T18251]  ? clear_bhb_loop+0x40/0x90
[  689.690315][T18251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  689.696242][T18251] RIP: 0033:0x7feab0b9ce59
[  689.700675][T18251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.720307][T18251] RSP: 002b:00007feab1b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  689.728749][T18251] RAX: ffffffffffffffda RBX: 00007feab0e15fa0 RCX: 00007feab0b9ce59
[  689.736747][T18251] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  689.744920][T18251] RBP: 00007feab1b0f090 R08: 0000000000000000 R09: 0000000000000000
[  689.752919][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.760915][T18251] R13: 00007feab0e16038 R14: 00007feab0e15fa0 R15: 00007fffb82f4da8
[  689.768901][T18251]  </TASK>
[  689.791419][T18250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4572'.
[  690.071488][T18254] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4566'.
[  690.799249][T18277] ==================================================================
[  690.807366][T18277] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[  690.815217][T18277] Write of size 32 at addr ffff888023e8f310 by task syz.0.4577/18277
[  690.823288][T18277] 
[  690.825615][T18277] CPU: 1 PID: 18277 Comm: syz.0.4577 Not tainted syzkaller #0
[  690.833077][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  690.843160][T18277] Call Trace:
[  690.846452][T18277]  <TASK>
[  690.849390][T18277]  dump_stack_lvl+0x18c/0x250
[  690.854083][T18277]  ? __lock_acquire+0x7d40/0x7d40
[  690.859135][T18277]  ? show_regs_print_info+0x20/0x20
[  690.864348][T18277]  ? load_image+0x420/0x420
[  690.868863][T18277]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  690.874343][T18277]  ? __virt_addr_valid+0x18c/0x540
[  690.879469][T18277]  ? __virt_addr_valid+0x469/0x540
[  690.884594][T18277]  print_report+0xa8/0x210
[  690.889020][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  690.894156][T18277]  kasan_report+0x117/0x150
[  690.898684][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  690.903819][T18277]  kasan_check_range+0x241/0x290
[  690.908769][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  690.913986][T18277]  __asan_memcpy+0x40/0x70
[  690.918443][T18277]  __bpf_get_stackid+0x6bf/0x900
[  690.923488][T18277]  bpf_get_stackid_pe+0x2f0/0x410
[  690.928607][T18277]  bpf_prog_63958b2bb0b64835+0x33/0x48
[  690.934060][T18277]  bpf_overflow_handler+0x1fc/0x510
[  690.939256][T18277]  ? bpf_overflow_handler+0xde/0x510
[  690.944551][T18277]  ? tp_perf_event_destroy+0x20/0x20
[  690.949835][T18277]  ? perf_trace_preemptirq_template+0xac/0x330
[  690.955993][T18277]  ? __perf_event_account_interrupt+0x187/0x280
[  690.962232][T18277]  __perf_event_overflow+0x447/0x630
[  690.967518][T18277]  perf_swevent_event+0x319/0x570
[  690.972539][T18277]  ? perf_tp_event+0x1520/0x1520
[  690.977471][T18277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  690.983363][T18277]  ___perf_sw_event+0x4a7/0x730
[  690.988212][T18277]  ? ___perf_sw_event+0x199/0x730
[  690.993230][T18277]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  690.999651][T18277]  ? kvm_sched_clock_read+0x11/0x20
[  691.004941][T18277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  691.010937][T18277]  ? lapic_next_event+0x11/0x20
[  691.015798][T18277]  ? clockevents_program_event+0x230/0x310
[  691.021619][T18277]  ? lock_chain_count+0x20/0x20
[  691.026472][T18277]  __perf_sw_event+0x139/0x270
[  691.031233][T18277]  do_user_addr_fault+0x123e/0x12c0
[  691.036439][T18277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  691.042420][T18277]  ? rcu_is_watching+0x15/0xb0
[  691.047362][T18277]  exc_page_fault+0x64/0x100
[  691.051950][T18277]  asm_exc_page_fault+0x26/0x30
[  691.056797][T18277] RIP: 0033:0x7ffe337b0a21
[  691.061206][T18277] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[  691.080809][T18277] RSP: 002b:00007f47f59a8ff0 EFLAGS: 00010203
[  691.086868][T18277] RAX: 002d433cb23e0fa0 RBX: 00007ffe337ac0b0 RCX: 0000000000000018
[  691.094839][T18277] RDX: 000000002d9fb8a4 RSI: 00007f47f59a90b0 RDI: 7fffffffffffffff
[  691.102806][T18277] RBP: 00007f47f59a9030 R08: 00000000000002b2 R09: 0000000000745992
[  691.110788][T18277] R10: 00000166fbdf233c R11: 0000000000021360 R12: 0000000000000010
[  691.118764][T18277] R13: 00007f47f4e16038 R14: 00007ffe337ac080 R15: 0000000000021360
[  691.126742][T18277]  </TASK>
[  691.129755][T18277] 
[  691.132081][T18277] Allocated by task 18277:
[  691.136480][T18277]  kasan_set_track+0x4e/0x70
[  691.141154][T18277]  __kasan_kmalloc+0x8f/0xa0
[  691.145832][T18277]  __kmalloc_node+0xb4/0x230
[  691.150425][T18277]  bpf_map_area_alloc+0x5e/0x110
[  691.155359][T18277]  prealloc_elems_and_freelist+0x86/0x1c0
[  691.161070][T18277]  stack_map_alloc+0x33a/0x4c0
[  691.165825][T18277]  map_create+0x877/0x12f0
[  691.170229][T18277]  __sys_bpf+0x651/0x890
[  691.174487][T18277]  __x64_sys_bpf+0x7c/0x90
[  691.178888][T18277]  do_syscall_64+0x55/0xb0
[  691.183292][T18277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  691.189179][T18277] 
[  691.191491][T18277] The buggy address belongs to the object at ffff888023e8f300
[  691.191491][T18277]  which belongs to the cache kmalloc-cg-64 of size 64
[  691.205653][T18277] The buggy address is located 16 bytes inside of
[  691.205653][T18277]  allocated 40-byte region [ffff888023e8f300, ffff888023e8f328)
[  691.219628][T18277] 
[  691.221945][T18277] The buggy address belongs to the physical page:
[  691.228359][T18277] page:ffffea00008fa3c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e8f
[  691.238502][T18277] memcg:ffff88802f569601
[  691.242725][T18277] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  691.250276][T18277] page_type: 0xffffffff()
[  691.254608][T18277] raw: 00fff00000000800 ffff888017c4da00 ffffea00017de300 dead000000000002
[  691.263206][T18277] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802f569601
[  691.271788][T18277] page dumped because: kasan: bad access detected
[  691.278208][T18277] page_owner tracks the page as allocated
[  691.283911][T18277] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5775, tgid 5775 (syz-executor), ts 140767615591, free_ts 140757361666
[  691.302319][T18277]  post_alloc_hook+0x1c1/0x200
[  691.307092][T18277]  get_page_from_freelist+0x1951/0x19e0
[  691.312631][T18277]  __alloc_pages+0x1f0/0x460
[  691.317220][T18277]  alloc_slab_page+0x5d/0x160
[  691.321902][T18277]  new_slab+0x87/0x2d0
[  691.325971][T18277]  ___slab_alloc+0xc5d/0x12f0
[  691.330645][T18277]  __kmem_cache_alloc_node+0x19e/0x250
[  691.336099][T18277]  kmalloc_trace+0x2a/0xe0
[  691.340507][T18277]  alloc_fdtable+0xca/0x2c0
[  691.345016][T18277]  dup_fd+0x786/0xa50
[  691.348989][T18277]  copy_files+0xc3/0x120
[  691.353229][T18277]  copy_process+0x15ab/0x3dc0
[  691.357898][T18277]  kernel_clone+0x24b/0x8a0
[  691.362393][T18277]  __x64_sys_clone+0x1b7/0x230
[  691.367148][T18277]  do_syscall_64+0x55/0xb0
[  691.371556][T18277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  691.377443][T18277] page last free stack trace:
[  691.382106][T18277]  free_unref_page_prepare+0x7b2/0x8c0
[  691.387563][T18277]  free_unref_page+0x32/0x2e0
[  691.392234][T18277]  vfree+0x1a6/0x320
[  691.396214][T18277]  __do_replace+0x858/0x990
[  691.400712][T18277]  do_ip6t_set_ctl+0xb48/0xe10
[  691.405473][T18277]  nf_setsockopt+0x263/0x280
[  691.410054][T18277]  do_sock_setsockopt+0x175/0x1a0
[  691.415071][T18277]  __x64_sys_setsockopt+0x182/0x200
[  691.420260][T18277]  do_syscall_64+0x55/0xb0
[  691.424670][T18277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  691.430563][T18277] 
[  691.432876][T18277] Memory state around the buggy address:
[  691.438492][T18277]  ffff888023e8f200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  691.446543][T18277]  ffff888023e8f280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  691.454593][T18277] >ffff888023e8f300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  691.462663][T18277]                                   ^
[  691.468047][T18277]  ffff888023e8f380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  691.476127][T18277]  ffff888023e8f400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  691.484175][T18277] ==================================================================
[  691.492247][T18277] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  691.499433][T18277] CPU: 1 PID: 18277 Comm: syz.0.4577 Not tainted syzkaller #0
[  691.506881][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  691.516933][T18277] Call Trace:
[  691.520209][T18277]  <TASK>
[  691.523133][T18277]  dump_stack_lvl+0x18c/0x250
[  691.527814][T18277]  ? show_regs_print_info+0x20/0x20
[  691.533184][T18277]  ? load_image+0x420/0x420
[  691.537681][T18277]  panic+0x2dc/0x730
[  691.541577][T18277]  ? __lock_acquire+0x7d40/0x7d40
[  691.546598][T18277]  ? bpf_jit_dump+0xd0/0xd0
[  691.551099][T18277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  691.556988][T18277]  ? _raw_spin_unlock+0x40/0x40
[  691.561838][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  691.566943][T18277]  check_panic_on_warn+0x84/0xa0
[  691.571875][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  691.576985][T18277]  end_report+0x6f/0x130
[  691.581223][T18277]  kasan_report+0x128/0x150
[  691.585727][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  691.590878][T18277]  kasan_check_range+0x241/0x290
[  691.595820][T18277]  ? __bpf_get_stackid+0x6bf/0x900
[  691.600929][T18277]  __asan_memcpy+0x40/0x70
[  691.605432][T18277]  __bpf_get_stackid+0x6bf/0x900
[  691.610368][T18277]  bpf_get_stackid_pe+0x2f0/0x410
[  691.615394][T18277]  bpf_prog_63958b2bb0b64835+0x33/0x48
[  691.620885][T18277]  bpf_overflow_handler+0x1fc/0x510
[  691.626106][T18277]  ? bpf_overflow_handler+0xde/0x510
[  691.631394][T18277]  ? tp_perf_event_destroy+0x20/0x20
[  691.636671][T18277]  ? perf_trace_preemptirq_template+0xac/0x330
[  691.642825][T18277]  ? __perf_event_account_interrupt+0x187/0x280
[  691.649065][T18277]  __perf_event_overflow+0x447/0x630
[  691.654360][T18277]  perf_swevent_event+0x319/0x570
[  691.659385][T18277]  ? perf_tp_event+0x1520/0x1520
[  691.664314][T18277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  691.670206][T18277]  ___perf_sw_event+0x4a7/0x730
[  691.675055][T18277]  ? ___perf_sw_event+0x199/0x730
[  691.680072][T18277]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  691.686497][T18277]  ? kvm_sched_clock_read+0x11/0x20
[  691.691692][T18277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  691.697666][T18277]  ? lapic_next_event+0x11/0x20
[  691.702512][T18277]  ? clockevents_program_event+0x230/0x310
[  691.708330][T18277]  ? lock_chain_count+0x20/0x20
[  691.713178][T18277]  __perf_sw_event+0x139/0x270
[  691.717944][T18277]  do_user_addr_fault+0x123e/0x12c0
[  691.723135][T18277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  691.729114][T18277]  ? rcu_is_watching+0x15/0xb0
[  691.733884][T18277]  exc_page_fault+0x64/0x100
[  691.738475][T18277]  asm_exc_page_fault+0x26/0x30
[  691.743324][T18277] RIP: 0033:0x7ffe337b0a21
[  691.747746][T18277] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[  691.767370][T18277] RSP: 002b:00007f47f59a8ff0 EFLAGS: 00010203
[  691.773434][T18277] RAX: 002d433cb23e0fa0 RBX: 00007ffe337ac0b0 RCX: 0000000000000018
[  691.781424][T18277] RDX: 000000002d9fb8a4 RSI: 00007f47f59a90b0 RDI: 7fffffffffffffff
[  691.789398][T18277] RBP: 00007f47f59a9030 R08: 00000000000002b2 R09: 0000000000745992
[  691.797380][T18277] R10: 00000166fbdf233c R11: 0000000000021360 R12: 0000000000000010
[  691.805359][T18277] R13: 00007f47f4e16038 R14: 00007ffe337ac080 R15: 0000000000021360
[  691.813862][T18277]  </TASK>
[  691.817166][T18277] Kernel Offset: disabled
[  691.821502][T18277] Rebooting in 86400 seconds..