last executing test programs:

7.751140366s ago: executing program 0 (id=2596):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.57622303s ago: executing program 0 (id=2599):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x2b, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, <r1=>0x0}, 0x40)
socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x38)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x25, 0x24, 0x0, @void, @void, @void, @value, r1}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r0, r0, 0x2, 0xc, 0x0, @void, @value=r0, @void, @void, r1}, 0x20)
r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0xfff, 0x5, 0x2000, r6, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1ff, '\x00', r8, r6, 0x0, 0x3, 0x3}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
bpf$ITER_CREATE(0xb, 0x0, 0x0)

7.387662065s ago: executing program 0 (id=2601):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0xfffffffffffffe49}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r2, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f9, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7)
socketpair(0x1d, 0x3, 0x3c48, &(0x7f0000001680))
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0)

7.092577682s ago: executing program 0 (id=2603):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001"], 0x50)
r2 = syz_clone(0x6202000, &(0x7f00000002c0)="b232fccc22fc9d055c306d06cff2e2c940df1b200d9c0fed9d69f392f0a76c", 0x1f, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="3dbb905e73ee8a4608e2a3f952593690dec7373bb0993c77818a3be431c47a96d61a8c057c46fb4a00c17119cdfa6bb4f855f8cfe3ef")
r3 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xb, 0x96, 0x1, 0x0, 0x5f, 0x0, 0x4dc578a75f055249, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x6, 0x7, 0x8, 0x0, 0xfff7, 0x0, 0x81, 0x0, 0x8000}, r2, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x42)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket$kcm(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x9, 0x8, 0x1}, 0x50)

6.238820134s ago: executing program 2 (id=2608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x22, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffe, 0x6, 0xcf4d, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x3, 0x800006, 0x1, 0xd}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1000, 0x2, 0x0, 0xfffff03c}, {0x3}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x22, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffe, 0x6, 0xcf4d, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x3, 0x800006, 0x1, 0xd}, 0x50) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r4}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
socket$kcm(0x2, 0x1, 0x84) (async)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1000, 0x2, 0x0, 0xfffff03c}, {0x3}]}) (async)

5.837564704s ago: executing program 3 (id=2611):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x51, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaf, 0xaf, 0xa, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x43, 0x2}, @func={0xb, 0x0, 0x0, 0xc, 0x7ff}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x9}, @union={0xb, 0x2, 0x0, 0x5, 0x1, 0x4, [{0xf, 0x3, 0x7}, {0x8, 0x4, 0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x43, 0x202c8b92bb14ecd}, @datasec={0x4, 0x2, 0x0, 0xf, 0x3, [{0x2, 0xa0, 0xfffffff7}, {0x5, 0x0, 0x7d}], "9c58a9"}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x5f, 0x5f, 0x2e, 0x61]}}, &(0x7f0000001c80)=""/232, 0xd2, 0xe8, 0x1, 0x2, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffffffff, '\x00', 0x0, r1, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_ext={0x1c, 0x4, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x16, &(0x7f0000000580)=""/22, 0x41000, 0x60, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28dfc, 0xffffffffffffffff, 0x0, &(0x7f0000001e40)=[r5, r2, r2], 0x0, 0x10, 0x6}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000000000000000000007000000071006"], 0x20}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000140))
openat$cgroup_subtree(r6, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={0x1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x8, 0x66, 0xff, 0xff, 0x0, 0x7, 0x422ec, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x2, 0x1, 0x9, 0x4, 0xe37, 0x1, 0x78b, 0x0, 0x0, 0x0, 0x3})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={r6, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xd57c7d011ecc4a58}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x40, '\x00', r9, 0x17, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x1, 0x4, 0x7ff, 0x400}, 0x10, 0x4cbe, 0xffffffffffffffff, 0x0, &(0x7f0000001900)=[r2, r6, r2, r6, r6, r6, r2, r11, r6], 0x0, 0x10, 0x7a}, 0x94)
recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102)

5.754761856s ago: executing program 2 (id=2612):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x9, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev}}}], 0x38}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffff0000, 0x2, 0x0, 0x102fd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1198c2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, <r6=>0x0, 0x1f, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000880)=r5)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f00000005c0)=[{0x30, 0x4a, 0x4, 0xfffff038}, {0x6, 0x0, 0xff, 0x8}, {0x1000, 0x0, 0x12, 0x4}, {0x0, 0xe, 0x8, 0x2}, {0xf8, 0xe, 0x3, 0x441}, {0x1, 0x8, 0x5, 0x100}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0xfd, &(0x7f0000000240), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000004c0)=r8)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0xb9}], 0x1, 0x0, 0x0, 0x6}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

5.429717074s ago: executing program 0 (id=2613):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x4048841)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e29, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x7, 0x9, 0x8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x60880, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace22001011"], 0xcfa4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000000000fd090000000000009520000200000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90)

5.222315519s ago: executing program 1 (id=2614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @exit, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x2, 0x1, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x8000})
sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x4d0}], 0x1}, 0x400c000)
sendmsg$sock(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r8}, 0xc)

5.091053232s ago: executing program 3 (id=2615):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a4000140030000f8246004fab94dcf5c0461c1d67f6f94007134cf6ee08000a4e408e8d8ef52a98516277ce06bbace8017cbec5c2ee5a7ce00000000001fb791643a5ee4ce1b14d6d930dfe1d9d322000000000000aebdb57a5025ccca9e00360db70107000040fad95667e006dcdf080000005ce3bb9ad809d5e1cace8198233060785943a16ce40bffece0b42af4000000e6ccd40dd6e4edef3d93450b3c7ef83d8dd2", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@func={0x4, 0x0, 0x0, 0xc, 0x5}, @fwd={0x3}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x4}, 0x28)

4.963501656s ago: executing program 2 (id=2616):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000094d3a44ddf8015bf00007919b8000000000095000000000000004efee215d2a50444acefb696e0e2aa617bf6f548792944979c32f2c43a443bc429dd94e1f496a9472ba6ad57e41e8ce87324dbce74ab494d95bbb0c1bec408cb6eee0485a5ae56495722fe69ba45d2"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x20200, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x400007ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073012200000000009500000000000000896833f9d28ad51793f62927525900e92e9ba62f2be7af3d0104cca1bb820f14c9cb2e7d711443151183851be8c96d0ea803fbd0491340d809c40d37ec22824e7acabc22be694778ef63ac095f497904d1c7f8bc9fe9f9bb7950efb892758fd3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
socketpair(0x21, 0x3, 0x2, &(0x7f0000000280))

4.718689032s ago: executing program 3 (id=2617):
mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

4.650994764s ago: executing program 2 (id=2618):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="a2b0665fbb5ad78842dfd4ff2a2c7955fe3bcd490d7075de56d836fb58659b381ccbbb55e74713d9046de2db36bd7611e919dfe6f898d9ce8c292969646e073b750f50417a4ea78b847eb294d970332aecde9bc6182ba91699c086af9d0c10fef0c6a4869c3d2f6fa40952aca20be7768a6eca14a5adcdcc990a87b6904f8efa6c37cdc876d35903019b264c36691a8bf7a796eeb8a5f7629676a3c2b6a00cc08df072f7a1f7bd93e964de6e9d7578c7834943ea0c6fb8be75851a14d1ae758d9d3854d6aa890ca692d06978ba91053ab61d96c62c577e845a27fdde1aa7f91262ff92f0fdde4e0463f4e08cf5111da3efe7260568a15a242815ee571f2d", 0xfe}, {&(0x7f0000002400)="5a9e72071a1a22781adbb1be8dd60bdb7cecf3487fa57a7d5ddd97683cdcae82d96d076420e31da60401e77faffd4c8c58a9bcfc875c48ef3a34a3301bfacc1f73d716eb14250d5376f9f22ddcc8ced93d4e2e", 0x53}], 0x5, &(0x7f0000002500)=[@ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x7, 0xd, "281eef07ce560c936ba714"}, @timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x46f}, {@private=0xa010102, 0x6}, {@local, 0x1}]}, @lsrr={0x83, 0x7, 0x83, [@broadcast]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x5, [0x7ff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1f, 0xe8, [@multicast1, @broadcast, @private=0xa010102, @broadcast, @multicast1, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0xd4, 0x3, 0x5, [{@local, 0xb23}, {@multicast2, 0x4}, {@empty, 0x80}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x10000}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbb}}], 0x118}, 0xc0) (async)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91124fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.548809286s ago: executing program 1 (id=2619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x2b, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, <r1=>0x0}, 0x40)
socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x38)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x25, 0x24, 0x0, @void, @void, @void, @value, r1}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r0, r0, 0x2, 0xc, 0x0, @void, @value=r0, @void, @void, r1}, 0x20)
r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0xfff, 0x5, 0x2000, r6, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1ff, '\x00', r8, r6, 0x0, 0x3, 0x3}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
bpf$ITER_CREATE(0xb, 0x0, 0x0)

4.335709701s ago: executing program 3 (id=2620):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0)

3.827485804s ago: executing program 1 (id=2621):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8043)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x8, 0x5}, {0x3}]}]}}, 0x0, 0x3e, 0x0, 0x8}, 0x28)
socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x18, 0x1, 0x6, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41)

3.534848321s ago: executing program 3 (id=2622):
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1e03})
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x18000)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104001b0000000000000000000000000d00000000020000000000000c02000000020000000000000e030000000000000000006100"], 0x0, 0x54}, 0x20)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
sendmsg$sock(r3, &(0x7f00000011c0)={&(0x7f0000000c40)=@can={0x1d, r4}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="0d9a9e542e829b877abafd86fe113354626d6830d6e0", 0x16}, {&(0x7f0000000d00)="39e838a3f237fa3766901d819f7b1f381b2af1ae414280d9b4372147ae6d2b74f12d19a3b0269348a8eb6b38821bc575f9", 0x31}, {&(0x7f0000000d40)="1ff65579bfec538e24956223245fb6713437b97223e302e868a8213f22d983bb32554223331f9171907d29b415371c3b7686bd5f", 0x34}, {&(0x7f0000000d80)="1d3b6c555702ea7ba8e3f267d2781f2baef333f643554a8e83", 0x19}, {&(0x7f0000000e00)="18da03926c34fd772b08fd9ace2a417fee46b88d5929cdbf5dc40794f3028da42c8db08e04a55b706b93437782598174d78493c4e9b717d0", 0x38}, {&(0x7f0000000e40)="da2a40acae24e2c38694b7052bf04a0bd09c75d70ecf64da4f448e90beed1c379934ae91d99bcd904c011f8513ef1a59b77e2203963cd342d44a9a8562382d3ac923783f13d5b06fe43e02b794d15ddef350bae8eb25c5af4dbbdcb25fd6a3d259436bec553e5a3de95a3d13d491569f52d3b902b3f097", 0x77}, {&(0x7f0000000f40)="dd8f4c2a54e91d227f92d674c62196f08645ae6150434774", 0x18}, {&(0x7f0000000f80)="c1f402b0c2599795b9004f117c7111dbe51e5c039f4b99cbbd1e3e198fac7a12", 0x20}], 0x8, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5766}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xe37}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xc0}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a400050001", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0xffffffff, 0x0, 0x1}, 0x50)

3.512604572s ago: executing program 1 (id=2623):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000002, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a}, 0xc84a, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x8001}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2c01c3, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000040))

3.354204916s ago: executing program 1 (id=2624):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x9, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev}}}], 0x38}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffff0000, 0x2, 0x0, 0x102fd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1198c2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, <r6=>0x0, 0x1f, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000880)=r5)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f00000005c0)=[{0x30, 0x4a, 0x4, 0xfffff038}, {0x6, 0x0, 0xff, 0x8}, {0x1000, 0x0, 0x12, 0x4}, {0x0, 0xe, 0x8, 0x2}, {0xf8, 0xe, 0x3, 0x441}, {0x1, 0x8, 0x5, 0x100}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0xfd, &(0x7f0000000240), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000004c0)=r8)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0xb9}], 0x1, 0x0, 0x0, 0x6}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

605.394775ms ago: executing program 2 (id=2625):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x280000, 0x4, 0x10009, 0xf033f71cfcbaa755}], 0x10, 0xfffffff6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x79, 0x41, &(0x7f0000000100)="5462086268cb51961f385a445ffc1aacdb70cd87eb793cd82d184919a73e076797c153c69e276165a48b9aa5d8cffa54d729aca813c02eee8eff91898ef1029264b3470c22ed8030d3c6441fab56d3a6f54183be343a98ec5815afbbbf6cf25930c60b85fc9ef6292b1cb5f757755f1a07b4f5ec26e7195215", &(0x7f0000000340)=""/65, 0x7, 0x0, 0xb, 0xe9, &(0x7f00000003c0)="71b980c30aeda0391c636b", &(0x7f0000000700)="1b5a06269c37446ca3211b085d29c2bcf2bb5d0dbb184c4050a3497862b3887f5f5e78c37ea6de1a62d1e293876a44d66df369a46644f0734c8154ab3ad4f667650f98ba936f30e8d9de947e71546f0578e31f10d30165f3bd8da00a8e63d302d2b01fc3cdf22c8e8dc4893c6e55dc4d8f7890b14d5206dde7ab0a6146629e0e643e83bc60a705efdb1036765479de09ac648dd261f94ad9c1e4c268b417934a9dd1f554677f4fa761c158e8034b152736016f7d38c747e5fc952715256e6ef0648362c3bc6d8b58c8ddadb34658dd8da47e6d9f2595318c11df3feb636b978ba4161d43171cdf3655", 0x6, 0x0, 0x6}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

603.918335ms ago: executing program 3 (id=2626):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r3}, 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x541b, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030025000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300)

325.794432ms ago: executing program 0 (id=2627):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4080)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r3})
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

211.494905ms ago: executing program 1 (id=2628):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0x51, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2100000000f3ea19030000000900000012100600", @ANYRES32, @ANYBLOB="3a1a000001f000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000010000000300"/28], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2}]}, 0x94)
r4 = socket$kcm(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x92, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000ac0)=r5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:*'], 0xa)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r10}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r12 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000100)=0x1, 0x12)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x7}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xf8a0, 0x98, &(0x7f00000008c0)=""/152, 0x40f00, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xa, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r2, r2, r2, r2, r2], 0x0, 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0xc8, 0xf0, &(0x7f0000000400)=""/240, 0x41100, 0x50, '\x00', r5, @fallback=0x1d, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x1, 0xff, 0xd66c}, 0x10, r1, r13, 0x0, &(0x7f0000000b00)=[r2], 0x0, 0x10, 0xffffff8b}, 0x94)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r15 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 2 (id=2629):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x2b, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, <r1=>0x0}, 0x40)
socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x38)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x25, 0x24, 0x0, @void, @void, @void, @value, r1}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r0, r0, 0x2, 0xc, 0x0, @void, @value=r0, @void, @void, r1}, 0x20)
r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0xfff, 0x5, 0x2000, r6, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1ff, '\x00', r8, r6, 0x0, 0x3, 0x3}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
bpf$ITER_CREATE(0xb, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ckopt+0x182/0x200
[  387.308190][T10906]  __vmalloc_node_range+0x129/0x1320
[  387.313587][T10906]  ? free_vm_area+0x50/0x50
[  387.318177][T10906]  vmalloc_user+0x74/0x80
[  387.322590][T10906]  ? xskq_create+0xbf/0x170
[  387.327140][T10906]  xskq_create+0xbf/0x170
[  387.331528][T10906]  xsk_init_queue+0xad/0x100
[  387.336182][T10906]  xsk_setsockopt+0x4c9/0x750
[  387.340923][T10906]  ? xsk_poll+0x670/0x670
[  387.345313][T10906]  ? __fget_files+0x28/0x460
[  387.349982][T10906]  ? aa_sock_opt_perm+0x74/0x100
[  387.355005][T10906]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  387.360603][T10906]  ? security_socket_setsockopt+0x7e/0xa0
[  387.366374][T10906]  ? xsk_poll+0x670/0x670
[  387.370762][T10906]  do_sock_setsockopt+0x175/0x1a0
[  387.375835][T10906]  ? __fdget+0x180/0x210
[  387.380132][T10906]  __x64_sys_setsockopt+0x182/0x200
[  387.385405][T10906]  do_syscall_64+0x55/0xb0
[  387.389901][T10906]  ? clear_bhb_loop+0x40/0x90
[  387.394739][T10906]  ? clear_bhb_loop+0x40/0x90
[  387.399464][T10906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  387.405397][T10906] RIP: 0033:0x7fd75df9e0d9
[  387.409857][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.429595][T10906] RSP: 002b:00007fd75ede1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  387.438058][T10906] RAX: ffffffffffffffda RBX: 00007fd75e225fa0 RCX: 00007fd75df9e0d9
[  387.446072][T10906] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  387.454088][T10906] RBP: 00007fd75e035024 R08: 0000000000000004 R09: 0000000000000000
[  387.462124][T10906] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  387.470157][T10906] R13: 00007fd75e226038 R14: 00007fd75e225fa0 R15: 00007ffec295b168
[  387.478220][T10906]  </TASK>
[  387.519797][T10906] Mem-Info:
[  387.523183][T10906] active_anon:17500 inactive_anon:0 isolated_anon:0
[  387.523183][T10906]  active_file:17330 inactive_file:40062 isolated_file:0
[  387.523183][T10906]  unevictable:768 dirty:32 writeback:0
[  387.523183][T10906]  slab_reclaimable:10407 slab_unreclaimable:94986
[  387.523183][T10906]  mapped:34130 shmem:11655 pagetables:567
[  387.523183][T10906]  sec_pagetables:0 bounce:0
[  387.523183][T10906]  kernel_misc_reclaimable:0
[  387.523183][T10906]  free:1330064 free_pcp:7319 free_cma:0
[  387.597414][T10906] Node 0 active_anon:71100kB inactive_anon:0kB active_file:69320kB inactive_file:160048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136520kB dirty:128kB writeback:0kB shmem:46084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11436kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no
[  387.694059][T10906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  387.736429][T10906] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  387.776060][T10906] lowmem_reserve[]: 0 2521 2522 2522 2522
[  387.782575][T10906] Node 0 DMA32 free:1410868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:74164kB inactive_anon:0kB active_file:69320kB inactive_file:159216kB unevictable:1536kB writepending:128kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:4216kB free_cma:0kB
[  387.823569][T10906] lowmem_reserve[]: 0 0 0 0 0
[  387.832823][T10906] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  387.869672][T10906] lowmem_reserve[]: 0 0 0 0 0
[  387.876855][T10906] Node 1 Normal free:3893020kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20000kB local_pcp:12416kB free_cma:0kB
[  387.916173][T10906] lowmem_reserve[]: 0 0 0 0 0
[  387.922104][T10906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  387.943494][T10906] Node 0 DMA32: 1374*4kB (UME) 857*8kB (UE) 517*16kB (UME) 1186*32kB (UME) 118*64kB (UME) 166*128kB (UME) 109*256kB (UME) 19*512kB (UME) 12*1024kB (UM) 3*2048kB (U) 309*4096kB (UM) = 1409104kB
[  387.981301][T10906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  387.995469][T10906] Node 1 Normal: 257*4kB (UM) 63*8kB (UME) 38*16kB (UME) 100*32kB (UME) 29*64kB (UME) 6*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893020kB
[  388.017320][T10906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  388.047492][T10906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  388.068817][T10906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  388.088402][T10906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  388.102966][T10906] 71572 total pagecache pages
[  388.107748][T10906] 0 pages in swap cache
[  388.128206][T10906] Free swap  = 124996kB
[  388.132582][T10906] Total swap = 124996kB
[  388.136800][T10906] 2097051 pages RAM
[  388.159600][T10906] 0 pages HighMem/MovableOnly
[  388.164400][T10906] 416955 pages reserved
[  388.178077][T10906] 0 pages cma reserved
[  390.212230][T10961] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1365'.
[  390.378753][T10970] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1369'.
[  390.391424][T10972] netlink: 'syz.3.1369': attribute type 21 has an invalid length.
[  390.401316][T10972] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1369'.
[  390.530450][T10979] netlink: 'syz.1.1371': attribute type 29 has an invalid length.
[  390.539619][T10979] netlink: 'syz.1.1371': attribute type 29 has an invalid length.
[  390.552424][T10979] netlink: 'syz.1.1371': attribute type 29 has an invalid length.
[  390.606100][T10984] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1370'.
[  390.744942][T10984] netlink: 'syz.2.1370': attribute type 1 has an invalid length.
[  390.763441][T10984] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1370'.
[  391.408053][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  391.638425][T11003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1377'.
[  391.696892][T11007] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  391.708986][T11007] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1378'.
[  391.727569][T11007] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1378'.
[  391.770074][T11006] netlink: 'syz.1.1379': attribute type 21 has an invalid length.
[  391.807711][T11006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'.
[  392.051171][T11013] sit0: entered promiscuous mode
[  395.664070][T11047] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1390'.
[  395.679624][T11047] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  395.688340][T11047] CPU: 0 PID: 11047 Comm: syz.3.1390 Not tainted syzkaller #0
[  395.695870][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.706154][T11047] Call Trace:
[  395.709475][T11047]  <TASK>
[  395.712446][T11047]  dump_stack_lvl+0x18c/0x250
[  395.717192][T11047]  ? show_regs_print_info+0x20/0x20
[  395.722456][T11047]  ? load_image+0x420/0x420
[  395.727046][T11047]  sysfs_warn_dup+0x8e/0xa0
[  395.731652][T11047]  sysfs_do_create_link_sd+0xc0/0x110
[  395.737083][T11047]  device_add_class_symlinks+0x1cf/0x240
[  395.742917][T11047]  device_add+0x4f9/0xc40
[  395.747402][T11047]  wiphy_register+0x1d99/0x2ac0
[  395.752542][T11047]  ? cfg80211_event_work+0x40/0x40
[  395.757719][T11047]  ? minstrel_ht_alloc+0x88a/0x990
[  395.763031][T11047]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  395.769288][T11047]  ieee80211_register_hw+0x2dd8/0x3b30
[  395.774913][T11047]  ? ieee80211_register_hw+0xfb1/0x3b30
[  395.780539][T11047]  ? ieee80211_tasklet_handler+0x20/0x20
[  395.786250][T11047]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  395.792327][T11047]  ? __debug_object_init+0xec/0x450
[  395.797649][T11047]  ? __asan_memset+0x22/0x40
[  395.802312][T11047]  ? __hrtimer_init+0x189/0x270
[  395.807225][T11047]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  395.813085][T11047]  ? mac80211_hwsim_free+0x220/0x220
[  395.818693][T11047]  ? rcu_is_watching+0x15/0xb0
[  395.823536][T11047]  ? kstrndup+0xbd/0x140
[  395.827852][T11047]  hwsim_new_radio_nl+0xdad/0x1a70
[  395.833062][T11047]  ? __nla_validate+0x50/0x50
[  395.837819][T11047]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  395.844232][T11047]  ? __nla_parse+0x40/0x50
[  395.848725][T11047]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  395.855239][T11047]  genl_family_rcv_msg_doit+0x21a/0x310
[  395.860977][T11047]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  395.866946][T11047]  ? bpf_lsm_capable+0x9/0x10
[  395.871689][T11047]  ? security_capable+0x89/0xb0
[  395.876831][T11047]  genl_rcv_msg+0x611/0x7a0
[  395.881402][T11047]  ? genl_bind+0x360/0x360
[  395.885871][T11047]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  395.892296][T11047]  netlink_rcv_skb+0x235/0x4c0
[  395.897130][T11047]  ? genl_bind+0x360/0x360
[  395.901615][T11047]  ? netlink_ack+0x1160/0x1160
[  395.906454][T11047]  ? __lock_acquire+0x7d80/0x7d80
[  395.911553][T11047]  ? down_read+0x1ac/0x2e0
[  395.916028][T11047]  genl_rcv+0x28/0x40
[  395.920061][T11047]  netlink_unicast+0x7b1/0x930
[  395.924979][T11047]  netlink_sendmsg+0x8d0/0xbf0
[  395.929819][T11047]  ? netlink_getsockopt+0x590/0x590
[  395.935088][T11047]  ? apparmor_socket_sendmsg+0x8e/0x330
[  395.940692][T11047]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  395.946046][T11047]  ? security_socket_sendmsg+0x80/0xa0
[  395.951557][T11047]  ? netlink_getsockopt+0x590/0x590
[  395.956817][T11047]  ____sys_sendmsg+0x61b/0x980
[  395.961683][T11047]  ? __asan_memset+0x22/0x40
[  395.966339][T11047]  ? __sys_sendmsg_sock+0x30/0x30
[  395.971415][T11047]  ? __import_iovec+0x5f2/0x850
[  395.976317][T11047]  ? import_iovec+0x73/0xa0
[  395.980871][T11047]  ___sys_sendmsg+0x2a6/0x360
[  395.985620][T11047]  ? __sys_sendmsg+0x2b0/0x2b0
[  395.990473][T11047]  ? trace_call_bpf+0xc3/0x6c0
[  395.995332][T11047]  __se_sys_sendmsg+0x1d0/0x2c0
[  396.000248][T11047]  ? perf_trace_preemptirq_template+0x269/0x330
[  396.006564][T11047]  ? __x64_sys_sendmsg+0x80/0x80
[  396.011579][T11047]  ? lockdep_hardirqs_on+0x98/0x150
[  396.016932][T11047]  do_syscall_64+0x55/0xb0
[  396.021392][T11047]  ? clear_bhb_loop+0x40/0x90
[  396.026111][T11047]  ? clear_bhb_loop+0x40/0x90
[  396.030850][T11047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.036796][T11047] RIP: 0033:0x7f80a279e0d9
[  396.041268][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.060945][T11047] RSP: 002b:00007f80a359f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.069429][T11047] RAX: ffffffffffffffda RBX: 00007f80a2a25fa0 RCX: 00007f80a279e0d9
[  396.077499][T11047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  396.085535][T11047] RBP: 00007f80a2835024 R08: 0000000000000000 R09: 0000000000000000
[  396.093566][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.101610][T11047] R13: 00007f80a2a26038 R14: 00007f80a2a25fa0 R15: 00007ffe986c9d58
[  396.109763][T11047]  </TASK>
[  396.121349][T11051] netlink: 'syz.2.1391': attribute type 3 has an invalid length.
[  396.137547][T11051] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1391'.
[  396.537599][T11065] netlink: 'syz.2.1393': attribute type 10 has an invalid length.
[  396.628504][T11065] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  398.327187][T11099] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1404'.
[  398.342413][T11099] openvswitch: netlink: Key type 29 is not supported
[  401.587626][T11144] netlink: 'syz.2.1417': attribute type 3 has an invalid length.
[  401.599894][T11144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1417'.
[  401.902891][T11154] veth1_to_bond: entered allmulticast mode
[  402.281377][T11161] netlink: 'syz.2.1422': attribute type 1 has an invalid length.
[  402.318095][T11161] netlink: 'syz.2.1422': attribute type 3 has an invalid length.
[  402.326278][T11161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1422'.
[  402.363514][T11162] netlink: 'syz.2.1422': attribute type 10 has an invalid length.
[  402.387712][T11162] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1422'.
[  402.778482][T11170] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1424'.
[  404.685225][T11207] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1437'.
[  405.002145][T11220] sctp: [Deprecated]: syz.3.1441 (pid 11220) Use of struct sctp_assoc_value in delayed_ack socket option.
[  405.002145][T11220] Use struct sctp_sack_info instead
[  405.012589][T11216] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1438'.
[  408.740345][T11251] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1448'.
[  408.808014][T11251] openvswitch: netlink: Key type 4112 is out of range max 32
[  409.137798][T11259] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1452'.
[  409.228050][T11259] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1452'.
[  410.494864][T11266] netlink: 'syz.2.1454': attribute type 2 has an invalid length.
[  410.555551][T11288] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1459'.
[  410.565294][T11266] netlink: 'syz.2.1454': attribute type 8 has an invalid length.
[  410.608335][T11266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1454'.
[  410.679154][T11269] netlink: 'syz.2.1454': attribute type 11 has an invalid length.
[  410.753452][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1462'.
[  410.788439][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'.
[  410.802274][T11296] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.1463'.
[  410.822149][T11297] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1462'.
[  411.653463][T11320] netlink: 'syz.1.1468': attribute type 10 has an invalid length.
[  411.663294][T11320] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  411.950056][T11332] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1471'.
[  412.536875][T11351] netlink: 'syz.0.1477': attribute type 3 has an invalid length.
[  413.662895][T11367] delete_channel: no stack
[  413.827379][T11380] __sock_release: fasync list not empty!
[  414.089031][T11385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  414.096901][T11385] IPv6: NLM_F_CREATE should be set when creating new route
[  414.105206][T11385] IPv6: NLM_F_CREATE should be set when creating new route
[  414.113293][T11385] IPv6: NLM_F_CREATE should be set when creating new route
[  414.465414][T11397] __nla_validate_parse: 9 callbacks suppressed
[  414.465439][T11397] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1491'.
[  415.277171][T11410] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1494'.
[  415.436566][T11414] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  415.454891][T11414] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1495'.
[  415.504213][T11414] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1495'.
[  416.043589][T11420] syzkaller0: entered promiscuous mode
[  416.072006][T11420] syzkaller0: entered allmulticast mode
[  428.176977][T11527] netlink: 'syz.3.1525': attribute type 46 has an invalid length.
[  428.193702][T11527] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1525'.
[  428.943807][T11553] dvmrp1: tun_chr_ioctl cmd 2148553947
[  430.128324][T11568] netlink: 'syz.3.1537': attribute type 10 has an invalid length.
[  431.276845][T11580] syzkaller0: entered promiscuous mode
[  431.298372][T11580] syzkaller0: entered allmulticast mode
[  434.034262][T11585] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1540'.
[  434.730623][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.742786][T11635] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.776925][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.793494][T11635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.807131][T11635] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  434.830155][T11635] batman_adv: batadv0: Removing interface: virt_wifi0
[  435.585761][T11657] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1562'.
[  437.663775][T11660] netlink: 'syz.3.1563': attribute type 2 has an invalid length.
[  437.671758][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'.
[  437.840769][T11681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1568'.
[  437.924522][T11687] netlink: 'syz.2.1571': attribute type 9 has an invalid length.
[  437.935754][T11687] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1571'.
[  437.959706][T11688] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1568'.
[  437.979818][T11685] netlink: 'syz.0.1570': attribute type 1 has an invalid length.
[  438.021064][T11681] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1568'.
[  438.038154][T11685] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1570'.
[  438.330822][T11687] û: renamed from bond_slave_0 (while UP)
[  438.390859][T11687] netlink: 'syz.2.1571': attribute type 9 has an invalid length.
[  438.428045][T11687] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1571'.
[  441.350617][T11719] netlink: 'syz.1.1579': attribute type 10 has an invalid length.
[  441.401261][T11719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'.
[  441.440687][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  442.297187][T11728] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1582'.
[  442.350055][T11727] netlink: 'syz.3.1581': attribute type 21 has an invalid length.
[  442.408684][T11727] netlink: 'syz.3.1581': attribute type 6 has an invalid length.
[  442.558432][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1581'.
[  445.181733][T11751] netlink: 'syz.0.1589': attribute type 4 has an invalid length.
[  445.200717][T11751] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1589'.
[  445.655149][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  445.668029][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  446.357108][T11780] netlink: 'syz.2.1598': attribute type 9 has an invalid length.
[  446.418081][T11780] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1598'.
[  446.448352][T11776] netlink: 'syz.1.1597': attribute type 21 has an invalid length.
[  446.470306][T11786] netlink: 'syz.1.1597': attribute type 1 has an invalid length.
[  446.488545][T11784] dvmrp1: tun_chr_ioctl cmd 21731
[  447.919587][T11797] netlink: 'syz.1.1603': attribute type 39 has an invalid length.
[  447.948613][T11797] macvlan0: entered promiscuous mode
[  447.955625][T11797] macvlan0: entered allmulticast mode
[  448.419197][T11802] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1604'.
[  448.448153][T11802] openvswitch: netlink: Flow key attr not present in new flow.
[  449.775958][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1612'.
[  450.497436][T11834] netlink: 'syz.0.1615': attribute type 1 has an invalid length.
[  450.560755][T11834] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1615'.
[  451.151820][T11842] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  451.178304][T11842] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  451.886112][T11856] netlink: 'syz.1.1622': attribute type 6 has an invalid length.
[  451.908036][T11856] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1622'.
[  452.459975][T11862] syzkaller0: entered promiscuous mode
[  452.496436][T11862] syzkaller0: entered allmulticast mode
[  455.785809][T11923] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1641'.
[  455.841051][T11923] netlink: 'syz.0.1641': attribute type 39 has an invalid length.
[  455.935800][ T5787] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  457.867038][T11935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1644'.
[  457.898722][T11935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.942730][T11946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  458.393245][T11957] syzkaller0: entered promiscuous mode
[  458.403538][T11957] syzkaller0: entered allmulticast mode
[  458.430324][T11961] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1648'.
[  458.559468][T11963] syz.0.1650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  458.616029][T11963] CPU: 0 PID: 11963 Comm: syz.0.1650 Not tainted syzkaller #0
[  458.623626][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.633757][T11963] Call Trace:
[  458.637102][T11963]  <TASK>
[  458.640107][T11963]  dump_stack_lvl+0x18c/0x250
[  458.644882][T11963]  ? show_regs_print_info+0x20/0x20
[  458.650171][T11963]  ? load_image+0x420/0x420
[  458.654790][T11963]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  458.661434][T11963]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  458.668034][T11963]  warn_alloc+0x246/0x340
[  458.672464][T11963]  ? __kmem_cache_alloc_node+0x1f2/0x250
[  458.678200][T11963]  ? kmalloc_trace+0x2a/0xe0
[  458.682885][T11963]  ? xskq_create+0x56/0x170
[  458.687489][T11963]  ? xsk_init_queue+0xad/0x100
[  458.692401][T11963]  ? zone_watermark_ok_safe+0x230/0x230
[  458.698108][T11963]  __vmalloc_node_range+0x129/0x1320
[  458.703554][T11963]  ? __kasan_slab_alloc+0x22/0x80
[  458.708684][T11963]  ? slab_post_alloc_hook+0x6a/0x4d0
[  458.714082][T11963]  ? free_vm_area+0x50/0x50
[  458.718693][T11963]  ? __kmem_cache_alloc_node+0x194/0x250
[  458.724421][T11963]  ? xskq_create+0x56/0x170
[  458.729058][T11963]  vmalloc_user+0x74/0x80
[  458.733490][T11963]  ? xskq_create+0xbf/0x170
[  458.738087][T11963]  xskq_create+0xbf/0x170
[  458.742537][T11963]  xsk_init_queue+0xad/0x100
[  458.747268][T11963]  xsk_setsockopt+0x4c9/0x750
[  458.752067][T11963]  ? xsk_poll+0x670/0x670
[  458.756523][T11963]  ? __fget_files+0x28/0x460
[  458.761212][T11963]  ? aa_sock_opt_perm+0x74/0x100
[  458.766245][T11963]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  458.771887][T11963]  ? security_socket_setsockopt+0x7e/0xa0
[  458.777706][T11963]  ? xsk_poll+0x670/0x670
[  458.782183][T11963]  do_sock_setsockopt+0x175/0x1a0
[  458.787354][T11963]  ? __fdget+0x180/0x210
[  458.791715][T11963]  __x64_sys_setsockopt+0x182/0x200
[  458.797038][T11963]  do_syscall_64+0x55/0xb0
[  458.801548][T11963]  ? clear_bhb_loop+0x40/0x90
[  458.806318][T11963]  ? clear_bhb_loop+0x40/0x90
[  458.811093][T11963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  458.817123][T11963] RIP: 0033:0x7fc79dd9e0d9
[  458.821632][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.841332][T11963] RSP: 002b:00007fc79ed11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.849851][T11963] RAX: ffffffffffffffda RBX: 00007fc79e025fa0 RCX: 00007fc79dd9e0d9
[  458.857934][T11963] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  458.865994][T11963] RBP: 00007fc79de35024 R08: 0000000000004a00 R09: 0000000000000000
[  458.874054][T11963] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  458.882116][T11963] R13: 00007fc79e026038 R14: 00007fc79e025fa0 R15: 00007ffccf4fb928
[  458.890238][T11963]  </TASK>
[  459.138721][T11963] Mem-Info:
[  459.143534][T11963] active_anon:7123 inactive_anon:0 isolated_anon:0
[  459.143534][T11963]  active_file:17330 inactive_file:40088 isolated_file:0
[  459.143534][T11963]  unevictable:768 dirty:27 writeback:0
[  459.143534][T11963]  slab_reclaimable:10417 slab_unreclaimable:96524
[  459.143534][T11963]  mapped:24294 shmem:1356 pagetables:555
[  459.143534][T11963]  sec_pagetables:0 bounce:0
[  459.143534][T11963]  kernel_misc_reclaimable:0
[  459.143534][T11963]  free:1333003 free_pcp:12583 free_cma:0
[  459.201232][T11963] Node 0 active_anon:28492kB inactive_anon:0kB active_file:69320kB inactive_file:160152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97176kB dirty:108kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no
[  459.284357][T11963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  459.334145][T11963] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  459.402509][T11963] lowmem_reserve[]: 0 2521 2522 2522 2522
[  459.412045][T11963] Node 0 DMA32 free:1424124kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28568kB inactive_anon:0kB active_file:69320kB inactive_file:159328kB unevictable:1536kB writepending:108kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:29660kB local_pcp:20224kB free_cma:0kB
[  459.452309][T11963] lowmem_reserve[]: 0 0 0 0 0
[  459.457511][T11963] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  459.488052][T11963] lowmem_reserve[]: 0 0 0 0 0
[  459.492881][T11963] Node 1 Normal free:3892528kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20536kB local_pcp:8120kB free_cma:0kB
[  459.524975][T11963] lowmem_reserve[]: 0 0 0 0 0
[  459.530131][T11963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  459.543432][T11963] Node 0 DMA32: 2729*4kB (UME) 2117*8kB (UME) 1507*16kB (UME) 613*32kB (UME) 232*64kB (UME) 255*128kB (UME) 139*256kB (UME) 43*512kB (UME) 28*1024kB (UM) 9*2048kB (UM) 293*4096kB (UM) = 1423900kB
[  459.572410][T11963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  459.592450][T11963] Node 1 Normal: 194*4kB (UM) 63*8kB (UME) 23*16kB (UME) 100*32kB (UME) 29*64kB (UME) 6*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3892528kB
[  459.611445][T11963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  459.621749][T11963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.631513][T11963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  459.641713][T11963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.654059][T11963] 58781 total pagecache pages
[  459.658974][T11963] 0 pages in swap cache
[  459.663172][T11963] Free swap  = 124996kB
[  459.671146][T11963] Total swap = 124996kB
[  459.675423][T11963] 2097051 pages RAM
[  459.679371][T11963] 0 pages HighMem/MovableOnly
[  459.684213][T11963] 416955 pages reserved
[  459.693222][T11963] 0 pages cma reserved
[  461.461546][T11976] netlink: 'syz.0.1653': attribute type 13 has an invalid length.
[  461.472111][T11976] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1653'.
[  461.494735][T11976] erspan0: refused to change device tx_queue_len
[  462.143958][T12002] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1661'.
[  462.449019][T12017] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1664'.
[  462.480935][T12018] netlink: 'syz.1.1666': attribute type 10 has an invalid length.
[  462.489168][T12018] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1666'.
[  462.525816][T12012] syzkaller0: entered promiscuous mode
[  462.534862][T12012] syzkaller0: entered allmulticast mode
[  464.129108][T12031] netlink: 'syz.2.1670': attribute type 13 has an invalid length.
[  464.390680][T12042] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1674'.
[  464.524700][T12047] netlink: 'syz.3.1675': attribute type 17 has an invalid length.
[  464.558082][T12047] netlink: 'syz.3.1675': attribute type 16 has an invalid length.
[  464.566067][T12047] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1675'.
[  465.272289][T12062] netlink: 'syz.0.1679': attribute type 9 has an invalid length.
[  465.298738][T12062] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1679'.
[  466.291691][T12099] netlink: 'syz.3.1689': attribute type 1 has an invalid length.
[  466.632222][T12108] netlink: 'syz.3.1690': attribute type 10 has an invalid length.
[  466.866965][T12114] netlink: 'syz.0.1693': attribute type 10 has an invalid length.
[  466.893422][T12114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1693'.
[  468.186914][T12139] netlink: 'syz.0.1700': attribute type 7 has an invalid length.
[  468.190077][T12137] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1699'.
[  468.204608][T12137] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  468.417071][T12151] netlink: 'syz.3.1702': attribute type 2 has an invalid length.
[  468.425470][T12151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'.
[  468.798132][T12162] tun0: tun_chr_ioctl cmd 1074812117
[  469.480115][T12181] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1711'.
[  470.104723][T12203] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1717'.
[  471.392730][T12234] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1726'.
[  473.547401][T12241] syzkaller0: entered promiscuous mode
[  473.579595][T12241] syzkaller0: entered allmulticast mode
[  475.827668][T12269] FAULT_INJECTION: forcing a failure.
[  475.827668][T12269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.841449][T12269] CPU: 0 PID: 12269 Comm: syz.3.1736 Not tainted syzkaller #0
[  475.848973][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.859096][T12269] Call Trace:
[  475.862435][T12269]  <TASK>
[  475.865409][T12269]  dump_stack_lvl+0x18c/0x250
[  475.870153][T12269]  ? show_regs_print_info+0x20/0x20
[  475.875409][T12269]  ? load_image+0x420/0x420
[  475.879978][T12269]  ? __might_fault+0xaa/0x120
[  475.884745][T12269]  ? __lock_acquire+0x7d80/0x7d80
[  475.889836][T12269]  should_fail_ex+0x394/0x4c0
[  475.894581][T12269]  _copy_from_user+0x2f/0xe0
[  475.899234][T12269]  ___sys_recvmsg+0x174/0x590
[  475.903987][T12269]  ? __sys_recvmsg+0x2a0/0x2a0
[  475.908846][T12269]  ? ksys_write+0x1d2/0x260
[  475.913529][T12269]  ? __fget_files+0x3fc/0x460
[  475.918381][T12269]  __x64_sys_recvmsg+0x21e/0x2f0
[  475.923383][T12269]  ? ___sys_recvmsg+0x590/0x590
[  475.928355][T12269]  ? lockdep_hardirqs_on+0x98/0x150
[  475.933622][T12269]  do_syscall_64+0x55/0xb0
[  475.938106][T12269]  ? clear_bhb_loop+0x40/0x90
[  475.942853][T12269]  ? clear_bhb_loop+0x40/0x90
[  475.947691][T12269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.953644][T12269] RIP: 0033:0x7f80a279e0d9
[  475.958113][T12269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.977784][T12269] RSP: 002b:00007f80a357e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  475.986354][T12269] RAX: ffffffffffffffda RBX: 00007f80a2a26090 RCX: 00007f80a279e0d9
[  475.994385][T12269] RDX: 0000000000010000 RSI: 0000200000000400 RDI: 0000000000000005
[  476.002410][T12269] RBP: 00007f80a357e090 R08: 0000000000000000 R09: 0000000000000000
[  476.010433][T12269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.018452][T12269] R13: 00007f80a2a26128 R14: 00007f80a2a26090 R15: 00007ffe986c9d58
[  476.026541][T12269]  </TASK>
[  478.277130][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.287548][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.306857][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.317332][T12309] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.328598][T12308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.340627][T12308] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1748'.
[  478.524961][T12311] netlink: 'syz.3.1749': attribute type 9 has an invalid length.
[  478.533657][T12311] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1749'.
[  478.973288][T12322] FAULT_INJECTION: forcing a failure.
[  478.973288][T12322] name failslab, interval 1, probability 0, space 0, times 0
[  478.987257][T12322] CPU: 1 PID: 12322 Comm: syz.2.1752 Not tainted syzkaller #0
[  478.994845][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  479.004954][T12322] Call Trace:
[  479.008278][T12322]  <TASK>
[  479.011256][T12322]  dump_stack_lvl+0x18c/0x250
[  479.015997][T12322]  ? lock_chain_count+0x20/0x20
[  479.020999][T12322]  ? show_regs_print_info+0x20/0x20
[  479.026275][T12322]  ? load_image+0x420/0x420
[  479.030873][T12322]  ? lockdep_hardirqs_on+0x98/0x150
[  479.036146][T12322]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  479.042373][T12322]  should_fail_ex+0x394/0x4c0
[  479.047112][T12322]  should_failslab+0x9/0x20
[  479.051678][T12322]  slab_pre_alloc_hook+0x59/0x300
[  479.056770][T12322]  ? netlink_dump+0xf8/0xec0
[  479.061395][T12322]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.067544][T12322]  kmem_cache_alloc_node+0x5e/0x310
[  479.072816][T12322]  ? __alloc_skb+0x103/0x2c0
[  479.077503][T12322]  __alloc_skb+0x103/0x2c0
[  479.081977][T12322]  netlink_dump+0x1ee/0xec0
[  479.086552][T12322]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  479.092685][T12322]  ? lock_chain_count+0x20/0x20
[  479.097605][T12322]  ? netlink_lookup+0x200/0x200
[  479.102534][T12322]  ? slab_free_freelist_hook+0x130/0x1a0
[  479.108228][T12322]  ? netlink_recvmsg+0x5e7/0xe60
[  479.113220][T12322]  ? kmem_cache_free+0xf8/0x290
[  479.118143][T12322]  netlink_recvmsg+0x693/0xe60
[  479.123016][T12322]  ? netlink_sendmsg+0xbf0/0xbf0
[  479.128018][T12322]  ? aa_af_perm+0x330/0x330
[  479.132608][T12322]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  479.137956][T12322]  ? security_socket_recvmsg+0x89/0xb0
[  479.143480][T12322]  ? netlink_sendmsg+0xbf0/0xbf0
[  479.148483][T12322]  ____sys_recvmsg+0x2bd/0x5d0
[  479.153315][T12322]  ? __sys_recvmsg_sock+0x50/0x50
[  479.158418][T12322]  ? import_iovec+0x73/0xa0
[  479.162985][T12322]  ___sys_recvmsg+0x214/0x590
[  479.167736][T12322]  ? __sys_recvmsg+0x2a0/0x2a0
[  479.172707][T12322]  ? ksys_write+0x1d2/0x260
[  479.177290][T12322]  ? __fget_files+0x3fc/0x460
[  479.182054][T12322]  __x64_sys_recvmsg+0x21e/0x2f0
[  479.187057][T12322]  ? ___sys_recvmsg+0x590/0x590
[  479.191994][T12322]  ? syscall_enter_from_user_mode+0x2e/0x80
[  479.197968][T12322]  do_syscall_64+0x55/0xb0
[  479.202450][T12322]  ? clear_bhb_loop+0x40/0x90
[  479.207187][T12322]  ? clear_bhb_loop+0x40/0x90
[  479.211934][T12322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.217898][T12322] RIP: 0033:0x7fd75df9e0d9
[  479.222373][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.242217][T12322] RSP: 002b:00007fd75ede1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  479.250715][T12322] RAX: ffffffffffffffda RBX: 00007fd75e225fa0 RCX: 00007fd75df9e0d9
[  479.258752][T12322] RDX: 0000000000010000 RSI: 0000200000000400 RDI: 0000000000000005
[  479.266776][T12322] RBP: 00007fd75ede1090 R08: 0000000000000000 R09: 0000000000000000
[  479.274807][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.282922][T12322] R13: 00007fd75e226038 R14: 00007fd75e225fa0 R15: 00007ffec295b168
[  479.290972][T12322]  </TASK>
[  479.395097][T12328] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  479.404397][T12328] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1754'.
[  479.582619][T12332] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1755'.
[  479.616433][T12332] openvswitch: netlink: Flow key attribute not present in set flow.
[  479.652545][T12330] netlink: 135056 bytes leftover after parsing attributes in process `syz.3.1756'.
[  479.667386][T12336] sctp: [Deprecated]: syz.0.1757 (pid 12336) Use of struct sctp_assoc_value in delayed_ack socket option.
[  479.667386][T12336] Use struct sctp_sack_info instead
[  480.065457][T12349] veth1_macvtap: left promiscuous mode
[  480.128697][T12349] macsec0: entered allmulticast mode
[  482.332831][T12390] FAULT_INJECTION: forcing a failure.
[  482.332831][T12390] name failslab, interval 1, probability 0, space 0, times 0
[  482.408130][T12390] CPU: 0 PID: 12390 Comm: syz.2.1774 Not tainted syzkaller #0
[  482.415694][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  482.425805][T12390] Call Trace:
[  482.429131][T12390]  <TASK>
[  482.432116][T12390]  dump_stack_lvl+0x18c/0x250
[  482.436859][T12390]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  482.443079][T12390]  ? show_regs_print_info+0x20/0x20
[  482.448366][T12390]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  482.454616][T12390]  should_fail_ex+0x394/0x4c0
[  482.459551][T12390]  should_failslab+0x9/0x20
[  482.464159][T12390]  slab_pre_alloc_hook+0x59/0x300
[  482.469283][T12390]  kmem_cache_alloc+0x5a/0x2c0
[  482.474116][T12390]  ? skb_clone+0x1eb/0x370
[  482.478603][T12390]  skb_clone+0x1eb/0x370
[  482.482925][T12390]  __netlink_deliver_tap+0x411/0x7f0
[  482.488295][T12390]  ? netlink_deliver_tap+0x2e/0x1b0
[  482.493562][T12390]  netlink_deliver_tap+0x19c/0x1b0
[  482.498744][T12390]  __netlink_sendskb+0x4b/0x90
[  482.503589][T12390]  netlink_dump+0xab3/0xec0
[  482.508161][T12390]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  482.514394][T12390]  ? netlink_lookup+0x200/0x200
[  482.519316][T12390]  ? slab_free_freelist_hook+0x130/0x1a0
[  482.525023][T12390]  ? netlink_recvmsg+0x5e7/0xe60
[  482.530062][T12390]  ? kmem_cache_free+0xf8/0x290
[  482.535023][T12390]  netlink_recvmsg+0x693/0xe60
[  482.539962][T12390]  ? netlink_sendmsg+0xbf0/0xbf0
[  482.544962][T12390]  ? aa_af_perm+0x330/0x330
[  482.549548][T12390]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  482.554907][T12390]  ? security_socket_recvmsg+0x89/0xb0
[  482.560435][T12390]  ? netlink_sendmsg+0xbf0/0xbf0
[  482.565534][T12390]  ____sys_recvmsg+0x2bd/0x5d0
[  482.570381][T12390]  ? __sys_recvmsg_sock+0x50/0x50
[  482.575487][T12390]  ? import_iovec+0x73/0xa0
[  482.580060][T12390]  ___sys_recvmsg+0x214/0x590
[  482.584808][T12390]  ? __sys_recvmsg+0x2a0/0x2a0
[  482.589655][T12390]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  482.595882][T12390]  ? __x64_sys_recvmsg+0xb1/0x2f0
[  482.600992][T12390]  ? __x64_sys_recvmsg+0x147/0x2f0
[  482.606155][T12390]  ? kasan_check_range+0x89/0x290
[  482.611340][T12390]  __x64_sys_recvmsg+0x21e/0x2f0
[  482.616426][T12390]  ? ___sys_recvmsg+0x590/0x590
[  482.621348][T12390]  ? syscall_enter_from_user_mode+0x2e/0x80
[  482.627307][T12390]  do_syscall_64+0x55/0xb0
[  482.631774][T12390]  ? clear_bhb_loop+0x40/0x90
[  482.636509][T12390]  ? clear_bhb_loop+0x40/0x90
[  482.641235][T12390]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.647188][T12390] RIP: 0033:0x7fd75df9e0d9
[  482.651693][T12390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.671353][T12390] RSP: 002b:00007fd75ede1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  482.679830][T12390] RAX: ffffffffffffffda RBX: 00007fd75e225fa0 RCX: 00007fd75df9e0d9
[  482.687855][T12390] RDX: 0000000000010000 RSI: 0000200000000400 RDI: 0000000000000005
[  482.695872][T12390] RBP: 00007fd75ede1090 R08: 0000000000000000 R09: 0000000000000000
[  482.703888][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.711902][T12390] R13: 00007fd75e226038 R14: 00007fd75e225fa0 R15: 00007ffec295b168
[  482.719953][T12390]  </TASK>
[  484.570097][T12419] __nla_validate_parse: 2 callbacks suppressed
[  484.570118][T12419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1783'.
[  486.006527][T12437] FAULT_INJECTION: forcing a failure.
[  486.006527][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.038074][T12437] CPU: 1 PID: 12437 Comm: syz.0.1787 Not tainted syzkaller #0
[  486.045640][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  486.055950][T12437] Call Trace:
[  486.059275][T12437]  <TASK>
[  486.062251][T12437]  dump_stack_lvl+0x18c/0x250
[  486.066986][T12437]  ? show_regs_print_info+0x20/0x20
[  486.072240][T12437]  ? load_image+0x420/0x420
[  486.076808][T12437]  ? __lock_acquire+0x7d80/0x7d80
[  486.081897][T12437]  ? snprintf+0xe9/0x140
[  486.086411][T12437]  should_fail_ex+0x394/0x4c0
[  486.091152][T12437]  _copy_to_user+0x2f/0xa0
[  486.095630][T12437]  simple_read_from_buffer+0xe7/0x150
[  486.101062][T12437]  proc_fail_nth_read+0x1e8/0x260
[  486.106129][T12437]  ? proc_fault_inject_write+0x360/0x360
[  486.111805][T12437]  ? fsnotify_perm+0x271/0x5e0
[  486.116676][T12437]  ? proc_fault_inject_write+0x360/0x360
[  486.122352][T12437]  vfs_read+0x298/0x990
[  486.126584][T12437]  ? kernel_read+0x1e0/0x1e0
[  486.131402][T12437]  ? __fget_files+0x28/0x460
[  486.136483][T12437]  ? __fget_files+0x3fc/0x460
[  486.141259][T12437]  ? __fdget_pos+0x2a3/0x330
[  486.145897][T12437]  ? ksys_read+0x74/0x260
[  486.150274][T12437]  ksys_read+0x151/0x260
[  486.154554][T12437]  ? vfs_write+0x9a0/0x9a0
[  486.159010][T12437]  ? lockdep_hardirqs_on+0x98/0x150
[  486.164248][T12437]  do_syscall_64+0x55/0xb0
[  486.168693][T12437]  ? clear_bhb_loop+0x40/0x90
[  486.173405][T12437]  ? clear_bhb_loop+0x40/0x90
[  486.178111][T12437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  486.184695][T12437] RIP: 0033:0x7fc79dd5e90e
[  486.189153][T12437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  486.208809][T12437] RSP: 002b:00007fc79eceffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  486.217272][T12437] RAX: ffffffffffffffda RBX: 00007fc79ecf06c0 RCX: 00007fc79dd5e90e
[  486.225277][T12437] RDX: 000000000000000f RSI: 00007fc79ecf00a0 RDI: 0000000000000006
[  486.233277][T12437] RBP: 00007fc79ecf0090 R08: 0000000000000000 R09: 0000000000000000
[  486.241297][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.249314][T12437] R13: 00007fc79e026128 R14: 00007fc79e026090 R15: 00007ffccf4fb928
[  486.257418][T12437]  </TASK>
[  487.530081][T12457] ±ÿÿÿÿa–ïD: renamed from lo
[  487.946443][T12473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1794'.
[  488.833203][T12486] netlink: 'syz.0.1803': attribute type 21 has an invalid length.
[  489.155654][T12486] syzkaller0: entered promiscuous mode
[  489.181974][T12486] syzkaller0: entered allmulticast mode
[  489.226108][T12497] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.1805'.
[  489.248457][T12500] netlink: 'syz.0.1803': attribute type 21 has an invalid length.
[  491.768049][T12505] netlink: 'syz.2.1814': attribute type 21 has an invalid length.
[  491.775993][T12505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1814'.
[  491.789485][T12506] netlink: 'syz.2.1814': attribute type 21 has an invalid length.
[  491.797380][T12506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1814'.
[  493.610254][T12539] delete_channel: no stack
[  493.892097][T12562] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1821'.
[  493.965957][T12562] netlink: 'syz.3.1821': attribute type 10 has an invalid length.
[  494.007583][T12562] netlink: 'syz.3.1821': attribute type 9 has an invalid length.
[  494.028967][T12562] netlink: 179280 bytes leftover after parsing attributes in process `syz.3.1821'.
[  494.104216][T12567] netlink: 'syz.1.1822': attribute type 1 has an invalid length.
[  494.114664][T12567] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1822'.
[  494.369025][T12575] sit0: entered promiscuous mode
[  494.590663][T12578] sit0: entered promiscuous mode
[  494.925140][T12583] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1827'.
[  495.179616][T12593] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1831'.
[  495.531682][T12606] netlink: set zone limit has 8 unknown bytes
[  495.609746][T12611] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1836'.
[  495.645604][T12611] netlink: 'syz.2.1836': attribute type 10 has an invalid length.
[  495.720744][T12615] netlink: 'syz.2.1836': attribute type 9 has an invalid length.
[  495.740565][T12615] netlink: 179280 bytes leftover after parsing attributes in process `syz.2.1836'.
[  495.863360][T12611] team0 (unregistering): Port device team_slave_0 removed
[  495.961095][T12611] team0 (unregistering): Port device team_slave_1 removed
[  496.094972][T12622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1840'.
[  496.989120][T12667] netlink: 'syz.1.1853': attribute type 10 has an invalid length.
[  497.005461][T12664] __nla_validate_parse: 1 callbacks suppressed
[  497.005482][T12664] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1852'.
[  497.074031][T12664] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1852'.
[  497.563962][T12680] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1856'.
[  497.599747][T12681] syzkaller0: entered promiscuous mode
[  497.608375][T12681] syzkaller0: entered allmulticast mode
[  497.628437][T12680] netlink: 'syz.0.1856': attribute type 10 has an invalid length.
[  497.654092][T12680] bridge0: port 1(team0) entered disabled state
[  497.759100][T12682] netlink: 'syz.0.1856': attribute type 9 has an invalid length.
[  497.766937][T12682] netlink: 179280 bytes leftover after parsing attributes in process `syz.0.1856'.
[  497.853846][T12680] bridge0: port 1(team0) entered disabled state
[  497.876134][T12680] C: left promiscuous mode
[  497.895252][T12680] C: left allmulticast mode
[  497.928744][T12680] team0 (unregistering): Port device C removed
[  497.944197][T12680] team_slave_1: left promiscuous mode
[  497.951224][T12680] team_slave_1: left allmulticast mode
[  497.966273][T12680] team0 (unregistering): Port device team_slave_1 removed
[  498.036495][T12680] team0 (unregistering): Port device netdevsim0 removed
[  498.058473][T12680] dummy0: left promiscuous mode
[  498.063617][T12680] dummy0: left allmulticast mode
[  498.089876][T12680] team0 (unregistering): Port device dummy0 removed
[  498.109993][T12680] geneve1: left promiscuous mode
[  498.117288][T12680] geneve1: left allmulticast mode
[  498.142405][T12680] team0 (unregistering): Port device geneve1 removed
[  498.285881][T12687] netlink: 'syz.1.1858': attribute type 9 has an invalid length.
[  498.305361][T12687] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1858'.
[  498.919210][T12702] netlink: 'syz.0.1863': attribute type 2 has an invalid length.
[  498.927579][T12702] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1863'.
[  499.165483][T12719] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1865'.
[  499.236345][T12719] raw_sendmsg: syz.1.1865 forgot to set AF_INET. Fix it!
[  499.772716][T12728] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1868'.
[  500.009001][T12734] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1869'.
[  500.387558][T12745] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1872'.
[  500.415395][T12740] sit0: left promiscuous mode
[  500.694152][T12748] netlink: 'syz.1.1872': attribute type 9 has an invalid length.
[  501.249501][T12746] sit0: entered promiscuous mode
[  501.414542][T12745] netlink: 'syz.1.1872': attribute type 10 has an invalid length.
[  501.569495][T12757] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  505.239576][T12802] sit0: left promiscuous mode
[  505.555455][T12803] sit0: entered promiscuous mode
[  506.934930][T12828] __nla_validate_parse: 2 callbacks suppressed
[  506.934976][T12828] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1897'.
[  507.085302][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  507.093235][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  507.230111][T12828] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  507.241970][T12828] CPU: 1 PID: 12828 Comm: syz.1.1897 Not tainted syzkaller #0
[  507.249523][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  507.259646][T12828] Call Trace:
[  507.262992][T12828]  <TASK>
[  507.265971][T12828]  dump_stack_lvl+0x18c/0x250
[  507.270713][T12828]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.276948][T12828]  ? show_regs_print_info+0x20/0x20
[  507.282217][T12828]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.288483][T12828]  sysfs_warn_dup+0x8e/0xa0
[  507.293043][T12828]  sysfs_do_create_link_sd+0xc0/0x110
[  507.298484][T12828]  device_add_class_symlinks+0x1cf/0x240
[  507.304198][T12828]  device_add+0x4f9/0xc40
[  507.308590][T12828]  wiphy_register+0x1d99/0x2ac0
[  507.313616][T12828]  ? cfg80211_event_work+0x40/0x40
[  507.318798][T12828]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.325029][T12828]  ieee80211_register_hw+0x2dd8/0x3b30
[  507.330562][T12828]  ? ieee80211_register_hw+0xfb1/0x3b30
[  507.336168][T12828]  ? ieee80211_tasklet_handler+0x20/0x20
[  507.341836][T12828]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  507.347781][T12828]  ? __debug_object_init+0xec/0x450
[  507.353024][T12828]  ? __asan_memset+0x22/0x40
[  507.357651][T12828]  ? __hrtimer_init+0x189/0x270
[  507.362546][T12828]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  507.368317][T12828]  ? mac80211_hwsim_free+0x220/0x220
[  507.373645][T12828]  ? rcu_is_watching+0x15/0xb0
[  507.378450][T12828]  ? kstrndup+0xbd/0x140
[  507.382737][T12828]  hwsim_new_radio_nl+0xdad/0x1a70
[  507.387899][T12828]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  507.393765][T12828]  ? mark_lock+0x94/0x320
[  507.398137][T12828]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  507.404499][T12828]  ? lockdep_hardirqs_on+0x98/0x150
[  507.409736][T12828]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.415922][T12828]  ? lockdep_hardirqs_on+0x98/0x150
[  507.421160][T12828]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.427449][T12828]  genl_family_rcv_msg_doit+0x21a/0x310
[  507.433033][T12828]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  507.438964][T12828]  ? bpf_lsm_capable+0x9/0x10
[  507.443679][T12828]  ? security_capable+0x89/0xb0
[  507.448569][T12828]  genl_rcv_msg+0x611/0x7a0
[  507.453113][T12828]  ? genl_bind+0x360/0x360
[  507.457592][T12828]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  507.464131][T12828]  ? mark_lock+0x94/0x320
[  507.468503][T12828]  netlink_rcv_skb+0x235/0x4c0
[  507.473302][T12828]  ? genl_bind+0x360/0x360
[  507.477775][T12828]  ? netlink_ack+0x1160/0x1160
[  507.482587][T12828]  ? down_read+0x61/0x2e0
[  507.486966][T12828]  ? down_read+0x1ac/0x2e0
[  507.491424][T12828]  genl_rcv+0x28/0x40
[  507.495442][T12828]  netlink_unicast+0x7b1/0x930
[  507.500286][T12828]  netlink_sendmsg+0x8d0/0xbf0
[  507.505086][T12828]  ? netlink_getsockopt+0x590/0x590
[  507.510330][T12828]  ? netlink_getsockopt+0x590/0x590
[  507.515576][T12828]  ____sys_sendmsg+0x61b/0x980
[  507.520381][T12828]  ? __asan_memset+0x22/0x40
[  507.525009][T12828]  ? __sys_sendmsg_sock+0x30/0x30
[  507.530060][T12828]  ? __import_iovec+0x5f2/0x850
[  507.534958][T12828]  ? import_iovec+0x73/0xa0
[  507.539527][T12828]  ___sys_sendmsg+0x2a6/0x360
[  507.544238][T12828]  ? __sys_sendmsg+0x2b0/0x2b0
[  507.549077][T12828]  __se_sys_sendmsg+0x1d0/0x2c0
[  507.553960][T12828]  ? __x64_sys_sendmsg+0x80/0x80
[  507.558945][T12828]  ? syscall_enter_from_user_mode+0x2e/0x80
[  507.564872][T12828]  do_syscall_64+0x55/0xb0
[  507.569325][T12828]  ? clear_bhb_loop+0x40/0x90
[  507.574033][T12828]  ? clear_bhb_loop+0x40/0x90
[  507.578747][T12828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  507.584687][T12828] RIP: 0033:0x7f4ca799e0d9
[  507.589141][T12828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.608779][T12828] RSP: 002b:00007f4ca894f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.617228][T12828] RAX: ffffffffffffffda RBX: 00007f4ca7c25fa0 RCX: 00007f4ca799e0d9
[  507.625253][T12828] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  507.633252][T12828] RBP: 00007f4ca7a35024 R08: 0000000000000000 R09: 0000000000000000
[  507.641253][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.649250][T12828] R13: 00007f4ca7c26038 R14: 00007f4ca7c25fa0 R15: 00007ffd59ce5b68
[  507.657267][T12828]  </TASK>
[  507.818904][T12826] netlink: 'syz.3.1896': attribute type 9 has an invalid length.
[  507.838249][T12826] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1896'.
[  511.743277][T12864] team_slave_1: entered promiscuous mode
[  511.757927][T12864] team_slave_1: entered allmulticast mode
[  511.996368][T12880] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1911'.
[  512.024427][T12880] netlink: 'syz.2.1911': attribute type 10 has an invalid length.
[  512.034169][T12881] netlink: 'syz.2.1911': attribute type 10 has an invalid length.
[  512.347240][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.467624][T12898] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1915'.
[  512.562149][T12898] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  514.894596][T12929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'.
[  515.204300][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1930'.
[  515.317620][T12929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'.
[  515.342226][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1930'.
[  515.391828][T12934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'.
[  515.446808][T12944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1930'.
[  515.459652][T12936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1925'.
[  515.501841][T12946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1930'.
[  515.683706][T12951] tap0: tun_chr_ioctl cmd 2147767511
[  515.723650][T12951] __sock_release: fasync list not empty!
[  518.421708][T12960] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  518.455377][T12960] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  518.552459][T12972] netlink: 'syz.1.1936': attribute type 10 has an invalid length.
[  518.591950][T12970] netlink: 'syz.1.1936': attribute type 10 has an invalid length.
[  518.821059][T12980] netlink: 'syz.0.1939': attribute type 27 has an invalid length.
[  518.845666][T12980] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1939'.
[  518.945707][T12982] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.1940'.
[  519.039945][T12983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1938'.
[  519.127213][T12983] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  519.141688][T12983] CPU: 1 PID: 12983 Comm: syz.2.1938 Not tainted syzkaller #0
[  519.149241][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  519.159381][T12983] Call Trace:
[  519.162706][T12983]  <TASK>
[  519.165825][T12983]  dump_stack_lvl+0x18c/0x250
[  519.170559][T12983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  519.176775][T12983]  ? show_regs_print_info+0x20/0x20
[  519.182039][T12983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  519.188259][T12983]  sysfs_warn_dup+0x8e/0xa0
[  519.192841][T12983]  sysfs_do_create_link_sd+0xc0/0x110
[  519.198315][T12983]  device_add_class_symlinks+0x1cf/0x240
[  519.204018][T12983]  device_add+0x4f9/0xc40
[  519.208408][T12983]  wiphy_register+0x1d99/0x2ac0
[  519.213423][T12983]  ? cfg80211_event_work+0x40/0x40
[  519.218671][T12983]  ? minstrel_ht_alloc+0x88a/0x990
[  519.223855][T12983]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  519.230008][T12983]  ieee80211_register_hw+0x2dd8/0x3b30
[  519.235535][T12983]  ? ieee80211_register_hw+0xfb1/0x3b30
[  519.241155][T12983]  ? ieee80211_tasklet_handler+0x20/0x20
[  519.246856][T12983]  ? __debug_object_init+0xec/0x450
[  519.252120][T12983]  ? __asan_memset+0x22/0x40
[  519.256775][T12983]  ? __hrtimer_init+0x189/0x270
[  519.261688][T12983]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  519.267495][T12983]  ? mac80211_hwsim_free+0x220/0x220
[  519.272957][T12983]  ? rcu_is_watching+0x15/0xb0
[  519.277792][T12983]  ? kstrndup+0xbd/0x140
[  519.282117][T12983]  hwsim_new_radio_nl+0xdad/0x1a70
[  519.287298][T12983]  ? __nla_validate+0x50/0x50
[  519.292073][T12983]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  519.298456][T12983]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  519.304774][T12983]  ? __nla_parse+0x40/0x50
[  519.309256][T12983]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  519.315672][T12983]  genl_family_rcv_msg_doit+0x21a/0x310
[  519.321307][T12983]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  519.327282][T12983]  ? bpf_lsm_capable+0x9/0x10
[  519.332020][T12983]  ? security_capable+0x89/0xb0
[  519.336935][T12983]  genl_rcv_msg+0x611/0x7a0
[  519.341513][T12983]  ? genl_bind+0x360/0x360
[  519.345981][T12983]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  519.352369][T12983]  ? lockdep_hardirqs_on+0x98/0x150
[  519.357637][T12983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  519.363865][T12983]  netlink_rcv_skb+0x235/0x4c0
[  519.368684][T12983]  ? genl_bind+0x360/0x360
[  519.373161][T12983]  ? netlink_ack+0x1160/0x1160
[  519.378005][T12983]  ? __lock_acquire+0x7d80/0x7d80
[  519.383117][T12983]  ? down_read+0x1ac/0x2e0
[  519.387605][T12983]  genl_rcv+0x28/0x40
[  519.391658][T12983]  netlink_unicast+0x7b1/0x930
[  519.396504][T12983]  netlink_sendmsg+0x8d0/0xbf0
[  519.401340][T12983]  ? netlink_getsockopt+0x590/0x590
[  519.406601][T12983]  ? apparmor_socket_sendmsg+0x8e/0x330
[  519.412210][T12983]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  519.417572][T12983]  ? security_socket_sendmsg+0x80/0xa0
[  519.423186][T12983]  ? netlink_getsockopt+0x590/0x590
[  519.428471][T12983]  ____sys_sendmsg+0x61b/0x980
[  519.433313][T12983]  ? __asan_memset+0x22/0x40
[  519.437977][T12983]  ? __sys_sendmsg_sock+0x30/0x30
[  519.443085][T12983]  ? __import_iovec+0x5f2/0x850
[  519.448049][T12983]  ? import_iovec+0x73/0xa0
[  519.452627][T12983]  ___sys_sendmsg+0x2a6/0x360
[  519.457369][T12983]  ? __sys_sendmsg+0x2b0/0x2b0
[  519.462221][T12983]  ? trace_call_bpf+0xc3/0x6c0
[  519.467038][T12983]  ? trace_call_bpf+0xc3/0x6c0
[  519.471873][T12983]  ? trace_call_bpf+0xc3/0x6c0
[  519.476743][T12983]  __se_sys_sendmsg+0x1d0/0x2c0
[  519.481646][T12983]  ? perf_trace_preemptirq_template+0x269/0x330
[  519.487982][T12983]  ? __x64_sys_sendmsg+0x80/0x80
[  519.493014][T12983]  ? lockdep_hardirqs_on+0x98/0x150
[  519.498304][T12983]  do_syscall_64+0x55/0xb0
[  519.502780][T12983]  ? clear_bhb_loop+0x40/0x90
[  519.507514][T12983]  ? clear_bhb_loop+0x40/0x90
[  519.512262][T12983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.518231][T12983] RIP: 0033:0x7fd75df9e0d9
[  519.522750][T12983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.542682][T12983] RSP: 002b:00007fd75edc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.551164][T12983] RAX: ffffffffffffffda RBX: 00007fd75e226090 RCX: 00007fd75df9e0d9
[  519.559209][T12983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  519.567238][T12983] RBP: 00007fd75e035024 R08: 0000000000000000 R09: 0000000000000000
[  519.575283][T12983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.583350][T12983] R13: 00007fd75e226128 R14: 00007fd75e226090 R15: 00007ffec295b168
[  519.591401][T12983]  </TASK>
[  520.405581][T12986] netlink: 'syz.1.1941': attribute type 10 has an invalid length.
[  521.824645][T13031] netlink: 3890 bytes leftover after parsing attributes in process `syz.3.1953'.
[  522.235323][T13034] netlink: 'syz.1.1956': attribute type 11 has an invalid length.
[  522.279306][T13034] netlink: 'syz.1.1956': attribute type 2 has an invalid length.
[  522.287176][T13034] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1956'.
[  522.560351][T13050] netlink: 'syz.2.1960': attribute type 3 has an invalid length.
[  522.590227][T13050] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1960'.
[  522.679165][T13051] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1960'.
[  522.734434][T13051] netlink: del zone limit has 4 unknown bytes
[  525.990429][T13054] netlink: 'syz.3.1961': attribute type 10 has an invalid length.
[  526.464155][T13076] netlink: 'syz.3.1968': attribute type 6 has an invalid length.
[  526.474085][T13076] netlink: 'syz.3.1968': attribute type 1 has an invalid length.
[  526.483658][T13076] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1968'.
[  526.580939][T13083] netlink: 'syz.0.1971': attribute type 21 has an invalid length.
[  526.607737][T13083] netlink: 'syz.0.1971': attribute type 1 has an invalid length.
[  526.626821][T13081] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1970'.
[  526.678218][T13081] openvswitch: netlink: IP tunnel dst address not specified
[  526.744146][T13085] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1972'.
[  526.774426][T13085] ksmbd: Unknown IPC event: 0, ignore.
[  527.190854][T13096] netlink: 'syz.3.1976': attribute type 10 has an invalid length.
[  527.203563][T13096] netlink: 'syz.3.1976': attribute type 10 has an invalid length.
[  527.212951][T13096] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1976'.
[  527.249636][T13096] openvswitch: netlink: Message has 4 unknown bytes.
[  527.929392][T13122] 
@0Ù: renamed from bridge_slave_0 (while UP)
[  528.079970][T13128] netlink: 'syz.2.1984': attribute type 21 has an invalid length.
[  528.103235][T13128] netlink: 'syz.2.1984': attribute type 7 has an invalid length.
[  528.138088][T13129] netlink: 'syz.2.1984': attribute type 21 has an invalid length.
[  530.579617][T13181] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2002'.
[  531.647433][T13214] validate_nla: 3 callbacks suppressed
[  531.647454][T13214] netlink: 'syz.2.2012': attribute type 5 has an invalid length.
[  531.718344][T13214] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  531.726280][T13214] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2012'.
[  531.774415][T13216] netlink: 'syz.2.2012': attribute type 5 has an invalid length.
[  531.794255][T13216] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  531.858466][T13216] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2012'.
[  532.249568][T13229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2016'.
[  532.298864][T13229] bridge_slave_0: entered allmulticast mode
[  532.707316][T13242] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2022'.
[  532.741435][T13245] netlink: 'syz.2.2020': attribute type 21 has an invalid length.
[  532.769951][T13245] netlink: 14518 bytes leftover after parsing attributes in process `syz.2.2020'.
[  533.388015][T13254] netlink: 'syz.3.2026': attribute type 10 has an invalid length.
[  533.412199][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2026'.
[  533.438436][T13254] bond0: entered promiscuous mode
[  533.443993][T13254] bond_slave_0: entered promiscuous mode
[  533.552481][T13254] bond_slave_1: entered promiscuous mode
[  533.609714][T13254] veth1_to_bridge: entered promiscuous mode
[  533.640779][T13254] bridge0: port 1(bond0) entered blocking state
[  533.678964][T13254] bridge0: port 1(bond0) entered disabled state
[  533.722801][T13254] bond0: entered allmulticast mode
[  533.818193][T13254] bond_slave_0: entered allmulticast mode
[  533.827109][T13254] bond_slave_1: entered allmulticast mode
[  533.859322][T13254] veth1_to_bridge: entered allmulticast mode
[  534.802302][T13290] netlink: 'syz.0.2035': attribute type 19 has an invalid length.
[  534.814013][T13290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2035'.
[  535.058613][T13297] netlink: 'syz.0.2038': attribute type 21 has an invalid length.
[  535.066604][T13297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2038'.
[  535.263824][T13304] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2039'.
[  535.373807][T13308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2040'.
[  536.620248][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.630843][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.640932][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.650906][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.661025][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.671208][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.681490][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.692059][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.702178][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.712338][T13335] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  536.865511][T13343] netlink: 'syz.3.2051': attribute type 39 has an invalid length.
[  537.737562][T13352] __nla_validate_parse: 1 callbacks suppressed
[  537.737607][T13352] netlink: 195944 bytes leftover after parsing attributes in process `syz.2.2052'.
[  539.246578][T13345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2051'.
[  539.538879][T13364] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2053'.
[  539.590149][T13363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2054'.
[  539.618550][T13363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2054'.
[  539.889817][T13373] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.135883][T13376] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2058'.
[  541.068651][T13395] netlink: 'syz.3.2066': attribute type 10 has an invalid length.
[  544.575127][T13416] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2071'.
[  546.112231][T13459] syz.1.2080: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  546.153751][T13459] CPU: 1 PID: 13459 Comm: syz.1.2080 Not tainted syzkaller #0
[  546.161354][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.172302][T13459] Call Trace:
[  546.175703][T13459]  <TASK>
[  546.178721][T13459]  dump_stack_lvl+0x18c/0x250
[  546.183537][T13459]  ? show_regs_print_info+0x20/0x20
[  546.188842][T13459]  ? load_image+0x420/0x420
[  546.193460][T13459]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  546.200003][T13459]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  546.206636][T13459]  warn_alloc+0x246/0x340
[  546.211188][T13459]  ? stack_trace_save+0xaa/0x100
[  546.216279][T13459]  ? zone_watermark_ok_safe+0x230/0x230
[  546.221966][T13459]  ? kasan_set_track+0x5f/0x70
[  546.226816][T13459]  ? kasan_set_track+0x4e/0x70
[  546.231665][T13459]  ? __kasan_kmalloc+0x8f/0xa0
[  546.236568][T13459]  ? xsk_init_queue+0xad/0x100
[  546.241612][T13459]  ? xsk_setsockopt+0x4c9/0x750
[  546.246555][T13459]  ? do_sock_setsockopt+0x175/0x1a0
[  546.251843][T13459]  ? __x64_sys_setsockopt+0x182/0x200
[  546.257333][T13459]  __vmalloc_node_range+0x129/0x1320
[  546.262882][T13459]  ? free_vm_area+0x50/0x50
[  546.267969][T13459]  vmalloc_user+0x74/0x80
[  546.272400][T13459]  ? xskq_create+0xbf/0x170
[  546.277009][T13459]  xskq_create+0xbf/0x170
[  546.281454][T13459]  xsk_init_queue+0xad/0x100
[  546.286158][T13459]  xsk_setsockopt+0x4c9/0x750
[  546.290952][T13459]  ? xsk_poll+0x670/0x670
[  546.295413][T13459]  ? __fget_files+0x28/0x460
[  546.300152][T13459]  ? aa_sock_opt_perm+0x74/0x100
[  546.305231][T13459]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  546.310892][T13459]  ? security_socket_setsockopt+0x7e/0xa0
[  546.316729][T13459]  ? xsk_poll+0x670/0x670
[  546.321164][T13459]  do_sock_setsockopt+0x175/0x1a0
[  546.326278][T13459]  ? __fdget+0x180/0x210
[  546.330653][T13459]  __x64_sys_setsockopt+0x182/0x200
[  546.335968][T13459]  do_syscall_64+0x55/0xb0
[  546.340475][T13459]  ? clear_bhb_loop+0x40/0x90
[  546.345255][T13459]  ? clear_bhb_loop+0x40/0x90
[  546.350038][T13459]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.356210][T13459] RIP: 0033:0x7f4ca799e0d9
[  546.360721][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.380918][T13459] RSP: 002b:00007f4ca890d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  546.389457][T13459] RAX: ffffffffffffffda RBX: 00007f4ca7c26180 RCX: 00007f4ca799e0d9
[  546.397525][T13459] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  546.405598][T13459] RBP: 00007f4ca7a35024 R08: 0000000000000004 R09: 0000000000000000
[  546.413660][T13459] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  546.421755][T13459] R13: 00007f4ca7c26218 R14: 00007f4ca7c26180 R15: 00007ffd59ce5b68
[  546.429897][T13459]  </TASK>
[  546.483470][T13459] Mem-Info:
[  546.490511][T13459] active_anon:11327 inactive_anon:0 isolated_anon:0
[  546.490511][T13459]  active_file:17414 inactive_file:40122 isolated_file:0
[  546.490511][T13459]  unevictable:768 dirty:98 writeback:0
[  546.490511][T13459]  slab_reclaimable:10897 slab_unreclaimable:97643
[  546.490511][T13459]  mapped:29618 shmem:1361 pagetables:578
[  546.490511][T13459]  sec_pagetables:0 bounce:0
[  546.490511][T13459]  kernel_misc_reclaimable:0
[  546.490511][T13459]  free:1329952 free_pcp:9887 free_cma:0
[  546.568733][T13459] Node 0 active_anon:45340kB inactive_anon:0kB active_file:69656kB inactive_file:160288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122012kB dirty:396kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11628kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no
[  546.602016][T13459] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  546.633160][T13459] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  546.660853][T13459] lowmem_reserve[]: 0 2521 2522 2522 2522
[  546.666834][T13459] Node 0 DMA32 free:1409136kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45304kB inactive_anon:0kB active_file:69656kB inactive_file:159456kB unevictable:1536kB writepending:396kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:21336kB local_pcp:8388kB free_cma:0kB
[  546.706795][T13459] lowmem_reserve[]: 0 0 0 0 0
[  546.711961][T13459] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  546.743739][T13459] lowmem_reserve[]: 0 0 0 0 0
[  546.748742][T13459] Node 1 Normal free:3894088kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18976kB local_pcp:11904kB free_cma:0kB
[  546.791483][T13459] lowmem_reserve[]: 0 0 0 0 0
[  546.796506][T13459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  546.812466][T13459] Node 0 DMA32: 1186*4kB (UE) 1671*8kB (UME) 1465*16kB (UME) 780*32kB (UME) 427*64kB (UME) 294*128kB (UME) 141*256kB (UM) 44*512kB (UM) 38*1024kB (UM) 16*2048kB (UM) 280*4096kB (UME) = 1408656kB
[  546.833144][T13459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  546.845569][T13459] Node 1 Normal: 256*4kB (UM) 63*8kB (UME) 37*16kB (UME) 116*32kB (UME) 36*64kB (UME) 7*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3894088kB
[  546.865367][T13459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  546.885128][T13459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  546.896478][T13459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  546.914097][T13459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  546.924062][T13459] 58897 total pagecache pages
[  546.936134][T13459] 0 pages in swap cache
[  546.940774][T13459] Free swap  = 124996kB
[  546.945087][T13459] Total swap = 124996kB
[  546.953407][T13459] 2097051 pages RAM
[  546.957412][T13459] 0 pages HighMem/MovableOnly
[  546.962636][T13459] 416955 pages reserved
[  546.966955][T13459] 0 pages cma reserved
[  548.762351][T13486] macvlan1: entered promiscuous mode
[  548.784623][T13486] macvlan1: entered allmulticast mode
[  549.036727][T13495] netlink: 'syz.3.2090': attribute type 6 has an invalid length.
[  549.085405][T13495] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2090'.
[  550.430678][T13518] netlink: 'syz.1.2095': attribute type 8 has an invalid length.
[  550.443597][T13518] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2095'.
[  550.988153][T13530] netlink: 'syz.1.2099': attribute type 2 has an invalid length.
[  551.129027][T13534] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2100'.
[  551.284054][T13538] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2101'.
[  551.309278][T13538] net_ratelimit: 3320 callbacks suppressed
[  551.309318][T13538] openvswitch: netlink: Flow key attribute not present in set flow.
[  551.528615][T13543] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2103'.
[  552.332096][T13575] netlink: 167692 bytes leftover after parsing attributes in process `syz.0.2111'.
[  552.993165][ T5787] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  553.232667][T13595] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2116'.
[  554.655473][T13618] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2123'.
[  554.754209][T13624] netlink: 'syz.3.2123': attribute type 10 has an invalid length.
[  554.795596][T13624] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2123'.
[  555.332199][T13637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2130'.
[  555.466874][T13637] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2130'.
[  555.488293][T13637] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  555.610191][T13647] netlink: 'syz.1.2131': attribute type 6 has an invalid length.
[  555.681089][T13647] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2131'.
[  555.779353][T13644] TCP: TCP_TX_DELAY enabled
[  556.252306][T13656] sit0: entered allmulticast mode
[  557.413137][T13677] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2139'.
[  557.434485][T13681] netlink: 'syz.3.2140': attribute type 10 has an invalid length.
[  557.450563][T13681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2140'.
[  557.467177][T13681] bond0: left allmulticast mode
[  557.473964][T13681] bond_slave_0: left allmulticast mode
[  557.482725][T13681] bond_slave_1: left allmulticast mode
[  557.489556][T13681] veth1_to_bridge: left allmulticast mode
[  557.496203][T13681] bridge0: port 1(bond0) entered disabled state
[  557.510312][T13681] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  558.554418][T13705] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2146'.
[  558.632780][T13698] netlink: 'syz.3.2145': attribute type 20 has an invalid length.
[  558.666241][T13705] netlink: zone id is out of range
[  558.736089][T13705] netlink: zone id is out of range
[  558.743860][T13703] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2145'.
[  558.832436][T13705] netlink: zone id is out of range
[  558.879564][T13705] netlink: zone id is out of range
[  558.903542][T13705] netlink: zone id is out of range
[  558.957274][T13705] netlink: zone id is out of range
[  558.985805][T13705] netlink: zone id is out of range
[  559.031754][T13705] netlink: zone id is out of range
[  559.037010][T13705] netlink: zone id is out of range
[  559.089034][T13700] can: request_module (can-proto-0) failed.
[  559.885705][T13717] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.2149'.
[  560.116434][T13717] syzkaller0: entered promiscuous mode
[  560.123371][T13717] syzkaller0: entered allmulticast mode
[  560.205278][T13729] netlink: 13662 bytes leftover after parsing attributes in process `syz.1.2152'.
[  562.730596][T13729] netlink: 'syz.1.2152': attribute type 10 has an invalid length.
[  562.739106][T13729] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2152'.
[  562.749256][T13737] netlink: 'syz.2.2154': attribute type 10 has an invalid length.
[  562.757160][T13737] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2154'.
[  562.767981][T13737] hsr0: entered promiscuous mode
[  563.564861][T13766] netlink: 'syz.0.2163': attribute type 3 has an invalid length.
[  563.587071][T13766] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2163'.
[  563.621064][T13766] net_ratelimit: 42 callbacks suppressed
[  563.621086][T13766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  563.977639][T13774] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2165'.
[  563.989069][T13774] openvswitch: netlink: Flow key attribute not present in set flow.
[  564.126701][T13778] netlink: 'syz.3.2167': attribute type 3 has an invalid length.
[  564.145643][T13778] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2167'.
[  565.521991][T13808] netlink: 'syz.2.2179': attribute type 4 has an invalid length.
[  565.592935][T13808] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2179'.
[  565.656092][T13813] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2181'.
[  566.790849][T13845] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  566.801100][T13845] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  567.147095][T13859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2194'.
[  571.547170][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  571.553641][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  572.903030][T13923] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2205'.
[  573.034317][T13923] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  573.084428][T13923] CPU: 0 PID: 13923 Comm: syz.0.2205 Not tainted syzkaller #0
[  573.092002][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  573.102124][T13923] Call Trace:
[  573.105454][T13923]  <TASK>
[  573.108430][T13923]  dump_stack_lvl+0x18c/0x250
[  573.113178][T13923]  ? show_regs_print_info+0x20/0x20
[  573.118432][T13923]  ? load_image+0x420/0x420
[  573.123036][T13923]  sysfs_warn_dup+0x8e/0xa0
[  573.127607][T13923]  sysfs_do_create_link_sd+0xc0/0x110
[  573.133062][T13923]  device_add_class_symlinks+0x1cf/0x240
[  573.138788][T13923]  device_add+0x4f9/0xc40
[  573.143194][T13923]  wiphy_register+0x1d99/0x2ac0
[  573.148237][T13923]  ? cfg80211_event_work+0x40/0x40
[  573.153419][T13923]  ? minstrel_ht_alloc+0x88a/0x990
[  573.158630][T13923]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  573.164787][T13923]  ieee80211_register_hw+0x2dd8/0x3b30
[  573.170340][T13923]  ? ieee80211_register_hw+0xfb1/0x3b30
[  573.175960][T13923]  ? ieee80211_tasklet_handler+0x20/0x20
[  573.181669][T13923]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  573.187645][T13923]  ? __debug_object_init+0xec/0x450
[  573.192930][T13923]  ? __asan_memset+0x22/0x40
[  573.197580][T13923]  ? __hrtimer_init+0x189/0x270
[  573.202492][T13923]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  573.208291][T13923]  ? mac80211_hwsim_free+0x220/0x220
[  573.213619][T13923]  ? rcu_is_watching+0x15/0xb0
[  573.218433][T13923]  ? kstrndup+0xbd/0x140
[  573.222744][T13923]  hwsim_new_radio_nl+0xdad/0x1a70
[  573.227916][T13923]  ? __nla_validate+0x50/0x50
[  573.232673][T13923]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  573.239083][T13923]  ? __nla_parse+0x40/0x50
[  573.243664][T13923]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  573.250081][T13923]  genl_family_rcv_msg_doit+0x21a/0x310
[  573.255726][T13923]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  573.261713][T13923]  ? bpf_lsm_capable+0x9/0x10
[  573.266456][T13923]  ? security_capable+0x89/0xb0
[  573.271377][T13923]  genl_rcv_msg+0x611/0x7a0
[  573.275939][T13923]  ? genl_bind+0x360/0x360
[  573.280410][T13923]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  573.286802][T13923]  ? mark_lock+0x94/0x320
[  573.291221][T13923]  netlink_rcv_skb+0x235/0x4c0
[  573.296041][T13923]  ? genl_bind+0x360/0x360
[  573.300506][T13923]  ? netlink_ack+0x1160/0x1160
[  573.305338][T13923]  ? down_read+0x61/0x2e0
[  573.309735][T13923]  ? down_read+0x1ac/0x2e0
[  573.314214][T13923]  genl_rcv+0x28/0x40
[  573.318279][T13923]  netlink_unicast+0x7b1/0x930
[  573.323133][T13923]  netlink_sendmsg+0x8d0/0xbf0
[  573.327956][T13923]  ? netlink_getsockopt+0x590/0x590
[  573.333214][T13923]  ? netlink_getsockopt+0x590/0x590
[  573.338475][T13923]  ____sys_sendmsg+0x61b/0x980
[  573.343350][T13923]  ? __asan_memset+0x22/0x40
[  573.348113][T13923]  ? __sys_sendmsg_sock+0x30/0x30
[  573.353183][T13923]  ? __import_iovec+0x5f2/0x850
[  573.358372][T13923]  ? import_iovec+0x73/0xa0
[  573.363025][T13923]  ___sys_sendmsg+0x2a6/0x360
[  573.367787][T13923]  ? __sys_sendmsg+0x2b0/0x2b0
[  573.372630][T13923]  ? perf_trace_preemptirq_template+0xac/0x330
[  573.378915][T13923]  __se_sys_sendmsg+0x1d0/0x2c0
[  573.383824][T13923]  ? __x64_sys_sendmsg+0x80/0x80
[  573.388835][T13923]  ? syscall_enter_from_user_mode+0x2e/0x80
[  573.394787][T13923]  do_syscall_64+0x55/0xb0
[  573.399279][T13923]  ? clear_bhb_loop+0x40/0x90
[  573.404024][T13923]  ? clear_bhb_loop+0x40/0x90
[  573.408751][T13923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.414691][T13923] RIP: 0033:0x7fc79dd9e0d9
[  573.419149][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.438914][T13923] RSP: 002b:00007fc79eccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  573.447400][T13923] RAX: ffffffffffffffda RBX: 00007fc79e026180 RCX: 00007fc79dd9e0d9
[  573.455419][T13923] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  573.463433][T13923] RBP: 00007fc79de35024 R08: 0000000000000000 R09: 0000000000000000
[  573.471521][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.479773][T13923] R13: 00007fc79e026218 R14: 00007fc79e026180 R15: 00007ffccf4fb928
[  573.487925][T13923]  </TASK>
[  573.652866][T13928] sit0: left promiscuous mode
[  574.019576][T13921] netlink: 'syz.2.2206': attribute type 10 has an invalid length.
[  574.264644][T13933] sit0: entered promiscuous mode
[  575.433822][T13964] netlink: 'syz.0.2221': attribute type 10 has an invalid length.
[  575.692041][T13970] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2222'.
[  579.570693][T14000] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2238'.
[  579.694244][T14002] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2228'.
[  580.179904][T14026] sit0: left promiscuous mode
[  580.376828][T14028] netlink: 'syz.3.2239': attribute type 21 has an invalid length.
[  580.447500][T14026] sit0: entered promiscuous mode
[  580.767452][T14048] netlink: 'syz.2.2243': attribute type 29 has an invalid length.
[  580.798310][T14048] netlink: 'syz.2.2243': attribute type 29 has an invalid length.
[  580.834099][T14048] netlink: 'syz.2.2243': attribute type 29 has an invalid length.
[  580.859249][T14048] netlink: 'syz.2.2243': attribute type 29 has an invalid length.
[  580.902327][T14048] netlink: 'syz.2.2243': attribute type 29 has an invalid length.
[  582.869779][T14076] netlink: 'syz.1.2250': attribute type 10 has an invalid length.
[  582.972700][T14078] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2250'.
[  583.954752][T14105] netlink: 160520 bytes leftover after parsing attributes in process `syz.3.2257'.
[  584.570842][T14119] netlink: 'syz.1.2262': attribute type 4 has an invalid length.
[  584.588151][T14119] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2262'.
[  589.859325][T14143] ±ÿ: renamed from lo (while UP)
[  593.404224][T14182] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2282'.
[  593.617212][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'.
[  593.653108][T14185] sit0: left promiscuous mode
[  594.115243][T14198] netlink: 'syz.3.2288': attribute type 19 has an invalid length.
[  594.138022][T14198] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2288'.
[  594.435788][T14209] netlink: 'syz.3.2290': attribute type 3 has an invalid length.
[  594.464897][T14209] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2290'.
[  594.911819][T14221] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  595.016963][T14218] delete_channel: no stack
[  595.873408][T14214] veth1_vlan (unregistering): left allmulticast mode
[  596.255291][T14233] sit0: left promiscuous mode
[  598.346355][T14252] netlink: 'syz.3.2303': attribute type 21 has an invalid length.
[  598.386427][T14259] netlink: 148924 bytes leftover after parsing attributes in process `syz.3.2303'.
[  598.421565][T14259] openvswitch: netlink: Key type 29 is not supported
[  598.757088][T14263] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  598.965764][T14269] netlink: 'syz.3.2307': attribute type 21 has an invalid length.
[  601.400591][T14330] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2324'.
[  601.579318][T14330] openvswitch: netlink: Flow actions attr not present in new flow.
[  601.789728][T14336] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2326'.
[  602.169011][T14351] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2326'.
[  602.178755][T14351] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2326'.
[  602.974786][T14380] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2338'.
[  602.988914][T14380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  605.483509][T14380] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2338'.
[  605.694147][T14390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2339'.
[  606.158290][T14397] netlink: 'syz.0.2342': attribute type 10 has an invalid length.
[  606.171613][T14397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2342'.
[  606.410221][T14407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2344'.
[  606.421122][T14406] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2346'.
[  607.651765][T14439] netlink: 'syz.3.2354': attribute type 64 has an invalid length.
[  607.661390][T14441] netlink: 'syz.0.2355': attribute type 21 has an invalid length.
[  607.687997][T14441] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2355'.
[  607.697309][T14441] netlink: 'syz.0.2355': attribute type 4 has an invalid length.
[  607.769632][T14441] netlink: 'syz.0.2355': attribute type 5 has an invalid length.
[  607.777561][T14441] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2355'.
[  608.420332][T14465] netlink: 'syz.0.2361': attribute type 1 has an invalid length.
[  608.461285][T14465] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2361'.
[  609.185995][T14479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  609.197259][T14479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  609.205909][T14479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  609.244228][T14479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  609.259492][T14479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  609.285613][T14479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  609.627524][T14486] netlink: 'syz.3.2366': attribute type 39 has an invalid length.
[  610.745535][T14505] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2372'.
[  611.106735][T14476] chnl_net:caif_netlink_parms(): no params data found
[  611.221852][T14476] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.234905][T14476] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.243201][T14476] bridge_slave_0: entered allmulticast mode
[  611.251450][T14476] bridge_slave_0: entered promiscuous mode
[  611.261752][T14476] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.269159][T14476] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.276444][T14476] bridge_slave_1: entered allmulticast mode
[  611.284383][T14476] bridge_slave_1: entered promiscuous mode
[  611.321549][T14476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.335303][T14476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.398606][ T5787] Bluetooth: hci4: command tx timeout
[  611.443066][ T6124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.535148][T14476] team0: Port device team_slave_0 added
[  611.594331][ T6124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.612639][T14476] team0: Port device team_slave_1 added
[  611.782680][ T6124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.822332][T14476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.837303][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.868828][T14476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.886284][T14476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.896064][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.949177][T14476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.074280][T14533] netlink: 'syz.3.2378': attribute type 29 has an invalid length.
[  612.146450][T14476] hsr_slave_0: entered promiscuous mode
[  612.165413][T14476] hsr_slave_1: entered promiscuous mode
[  612.216103][T14533] netlink: 'syz.3.2378': attribute type 29 has an invalid length.
[  612.345076][T14546] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2381'.
[  613.299416][T14563] netlink: 'syz.3.2385': attribute type 9 has an invalid length.
[  613.326173][T14563] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2385'.
[  613.477976][T14479] Bluetooth: hci4: command tx timeout
[  613.928198][T14587] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2388'.
[  614.002989][T14587] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2388'.
[  614.496079][T14585] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2388'.
[  614.553178][T14476] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  614.783793][T14595] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2388'.
[  614.866489][T14476] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  614.882925][T14476] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  615.011312][T14476] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  615.339365][T14614] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2392'.
[  615.452191][T14612] netlink: 'syz.0.2393': attribute type 9 has an invalid length.
[  615.504374][T14476] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.513893][T14612] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2393'.
[  615.567543][T14479] Bluetooth: hci4: command tx timeout
[  615.753315][T14476] 8021q: adding VLAN 0 to HW filter on device team0
[  615.993562][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.000864][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.070751][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.078259][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.468413][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.476219][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  617.496650][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.505265][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  617.530541][ T6124] veth1_macvtap: left allmulticast mode
[  617.536752][ T6124] veth1_macvtap: left promiscuous mode
[  617.543445][ T6124] veth0_macvtap: left promiscuous mode
[  617.649069][T14479] Bluetooth: hci4: command tx timeout
[  619.729739][T14476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.909932][T14476] veth0_vlan: entered promiscuous mode
[  619.962083][T14476] veth1_vlan: entered promiscuous mode
[  620.086018][T14476] veth0_macvtap: entered promiscuous mode
[  620.115246][T14476] veth1_macvtap: entered promiscuous mode
[  620.246647][T14476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  620.278977][T14476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.301912][T14476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.322612][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.365888][T14476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.382662][T14476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.394501][T14476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  620.410752][T14476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  620.424063][T14476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.437160][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.448920][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.491455][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.524230][T14476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.544582][T14476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.560061][T14476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.578182][T14476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.596069][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.624098][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.634051][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.653328][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.673810][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.698962][T14670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2404'.
[  620.890955][ T6124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.931648][ T6124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.081293][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.114062][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.289893][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  622.302017][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  622.310706][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  622.321601][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  622.339540][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  622.347132][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  624.443948][T14479] Bluetooth: hci1: command tx timeout
[  624.784665][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.010450][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.613676][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.906143][T14707] __nla_validate_parse: 58 callbacks suppressed
[  625.906168][T14707] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2413'.
[  625.977612][T14707] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  626.168090][T14690] chnl_net:caif_netlink_parms(): no params data found
[  626.437962][T14724] netlink: 'syz.2.2418': attribute type 9 has an invalid length.
[  626.457318][T14724] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2418'.
[  626.535896][T14479] Bluetooth: hci1: command tx timeout
[  626.691653][T14729] netlink: 'syz.0.2416': attribute type 9 has an invalid length.
[  626.707924][T14729] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2416'.
[  626.983081][T14737] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2421'.
[  627.120801][T14690] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.149307][T14690] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.185748][T14690] bridge_slave_0: entered allmulticast mode
[  627.200203][T14690] bridge_slave_0: entered promiscuous mode
[  627.309289][T14690] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.328861][T14690] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.350252][T14690] bridge_slave_1: entered allmulticast mode
[  627.363747][T14690] bridge_slave_1: entered promiscuous mode
[  627.409182][T14757] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2423'.
[  627.420437][T14757] netlink: 'syz.0.2423': attribute type 39 has an invalid length.
[  627.686008][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  627.895176][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  627.997963][T14757] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2423'.
[  628.091878][T14757] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2423'.
[  628.107407][T14763] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2423'.
[  628.244522][T14690] team0: Port device team_slave_0 added
[  628.363533][T14690] team0: Port device team_slave_1 added
[  628.502357][T14776] netlink: 'syz.2.2427': attribute type 9 has an invalid length.
[  628.542543][T14776] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2427'.
[  628.586954][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  628.598903][T14479] Bluetooth: hci1: command tx timeout
[  628.615558][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.643406][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  628.694788][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  628.718751][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.764988][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.783528][T14783] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2429'.
[  628.828257][T14781] netlink: 'syz.0.2428': attribute type 16 has an invalid length.
[  629.162442][T14690] hsr_slave_0: entered promiscuous mode
[  629.173524][T14690] hsr_slave_1: entered promiscuous mode
[  629.189461][T14690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  629.210755][T14690] Cannot create hsr debugfs directory
[  629.962907][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  629.969636][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  630.400988][   T49] hsr_slave_0: left promiscuous mode
[  630.439356][   T49] hsr_slave_1: left promiscuous mode
[  630.449090][   T49] bridge_slave_1: left allmulticast mode
[  630.465383][   T49] bridge_slave_1: left promiscuous mode
[  630.475807][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.570813][   T49] veth1_macvtap: left allmulticast mode
[  630.580410][   T49] veth1_macvtap: left promiscuous mode
[  630.587092][   T49] veth0_macvtap: left promiscuous mode
[  630.593567][   T49] veth1_vlan: left allmulticast mode
[  630.599923][   T49] veth1_vlan: left promiscuous mode
[  630.605524][   T49] veth0_vlan: left promiscuous mode
[  630.677893][T14479] Bluetooth: hci1: command tx timeout
[  631.496054][   T49] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  631.945156][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.954357][   T49] bond_slave_1 (unregistering): left promiscuous mode
[  632.001470][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  632.011331][   T49] bond_slave_0 (unregistering): left promiscuous mode
[  632.081300][   T49] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  632.091113][   T49] veth1_to_bridge (unregistering): left promiscuous mode
[  632.237487][   T49] bond0 (unregistering): Released all slaves
[  632.439249][T14836] bridge0: port 1(ip6gretap0) entered blocking state
[  632.447661][T14836] bridge0: port 1(ip6gretap0) entered disabled state
[  632.456543][T14836] ip6gretap0: entered allmulticast mode
[  632.464384][T14836] ip6gretap0: entered promiscuous mode
[  632.474706][T14836] bridge0: port 1(ip6gretap0) entered blocking state
[  632.482048][T14836] bridge0: port 1(ip6gretap0) entered forwarding state
[  632.503957][T14833] ip6gretap0: left allmulticast mode
[  632.510374][T14833] ip6gretap0: left promiscuous mode
[  632.516252][T14833] bridge0: port 1(ip6gretap0) entered disabled state
[  632.559089][T14851] __nla_validate_parse: 1 callbacks suppressed
[  632.559121][T14851] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2440'.
[  632.985127][T14690] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  633.016366][T14690] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  633.056685][T14690] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  633.093312][T14690] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  633.335874][T14690] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.409583][T14690] 8021q: adding VLAN 0 to HW filter on device team0
[  633.445313][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.452691][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.492893][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.500191][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.265359][T14905] netlink: 'syz.0.2451': attribute type 7 has an invalid length.
[  634.294315][T14905] netlink: 'syz.0.2451': attribute type 1 has an invalid length.
[  634.323403][T14905] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2451'.
[  634.384779][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.555742][T14690] veth0_vlan: entered promiscuous mode
[  634.595026][T14690] veth1_vlan: entered promiscuous mode
[  634.866206][T14690] veth0_macvtap: entered promiscuous mode
[  634.962939][T14927] netlink: 'syz.1.2455': attribute type 2 has an invalid length.
[  635.056765][T14927] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2455'.
[  635.118557][T14690] veth1_macvtap: entered promiscuous mode
[  635.372228][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.432703][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.463757][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.497822][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.561754][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.581876][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  635.605078][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.627588][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  635.667591][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.707796][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  635.727789][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.756689][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.995785][T14690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.033322][T14690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.058059][T14690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.085540][T14690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.409564][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.417592][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.531025][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.543816][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.623763][T14967] netlink: 'syz.0.2463': attribute type 2 has an invalid length.
[  636.657096][T14967] netlink: 'syz.0.2463': attribute type 1 has an invalid length.
[  636.700557][T14967] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2463'.
[  637.438821][T14985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2464'.
[  637.717392][T14984] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2465'.
[  638.434072][T15003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2469'.
[  638.459176][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'.
[  638.693286][T15009] netlink: 'syz.1.2471': attribute type 27 has an invalid length.
[  638.777581][T15009] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2471'.
[  638.981547][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  639.000804][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  639.013451][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  639.045028][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  639.067254][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  639.086564][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  640.413112][T15051] netlink: 'syz.1.2476': attribute type 3 has an invalid length.
[  640.428109][T15051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2476'.
[  640.784132][T15055] Dead loop on virtual device ip6_vti0, fix it urgently!
[  641.162658][T14479] Bluetooth: hci2: command tx timeout
[  642.207384][ T6126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.508935][ T6126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.649163][ T6126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.805024][ T6126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.931593][T15011] chnl_net:caif_netlink_parms(): no params data found
[  643.212055][T15011] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.219644][T15011] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.227349][T15011] bridge_slave_0: entered allmulticast mode
[  643.235639][T15011] bridge_slave_0: entered promiscuous mode
[  643.241752][T14479] Bluetooth: hci2: command tx timeout
[  643.287412][T15011] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.304808][T15011] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.336852][T15011] bridge_slave_1: entered allmulticast mode
[  643.350720][T15011] bridge_slave_1: entered promiscuous mode
[  643.524153][T15011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.605575][T15011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.861930][T15088] sit0: entered promiscuous mode
[  645.076060][T15011] team0: Port device team_slave_0 added
[  645.114722][T15011] team0: Port device team_slave_1 added
[  645.318573][T14479] Bluetooth: hci2: command tx timeout
[  645.412400][T15011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  645.430121][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.539666][T15011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  645.615944][T15011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.657926][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  645.752167][T15011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.397833][T14479] Bluetooth: hci2: command tx timeout
[  648.239867][T15132] netlink: 'syz.1.2490': attribute type 4 has an invalid length.
[  648.248145][T15132] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2490'.
[  648.449329][T15011] hsr_slave_0: entered promiscuous mode
[  648.456285][T15011] hsr_slave_1: entered promiscuous mode
[  648.464292][T15011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  648.488011][T15011] Cannot create hsr debugfs directory
[  648.494247][T15147] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0
[  648.508281][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.874419][T15190] netlink: 'syz.2.2499': attribute type 1 has an invalid length.
[  651.908728][T15190] netlink: 'syz.2.2499': attribute type 3 has an invalid length.
[  651.926288][T15190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2499'.
[  652.025930][T15193] netlink: 'syz.3.2500': attribute type 29 has an invalid length.
[  653.103784][T15193] netlink: 'syz.3.2500': attribute type 29 has an invalid length.
[  653.112369][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2500'.
[  653.721014][T15212] netlink: 'syz.2.2505': attribute type 10 has an invalid length.
[  653.915731][T15214] macsec0: entered promiscuous mode
[  653.930751][T15214] macsec0: entered allmulticast mode
[  653.936147][T15214] veth1_macvtap: entered allmulticast mode
[  654.105139][T15217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2507'.
[  654.379008][T15217] bond0 (unregistering): (slave 
1
0û): Releasing backup interface
[  654.475858][T15217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  654.552250][T15217] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  654.622604][T15217] bond0 (unregistering): Released all slaves
[  654.906533][T15011] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  655.018606][T15011] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  655.113960][T15011] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  655.185451][T15011] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  656.059646][T15245] netlink: 'syz.1.2511': attribute type 29 has an invalid length.
[  656.098598][T15245] netlink: 'syz.1.2511': attribute type 29 has an invalid length.
[  656.146391][T15245] netlink: 'syz.1.2511': attribute type 29 has an invalid length.
[  656.209123][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.216627][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  656.342668][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  656.358511][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.396522][ T6126] bridge_slave_1: left allmulticast mode
[  656.412667][ T6126] bridge_slave_1: left promiscuous mode
[  656.439347][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.754611][ T6126] veth1_vlan: left allmulticast mode
[  656.760862][ T6126] veth1_vlan: left promiscuous mode
[  656.768558][ T6126] veth0_vlan: left promiscuous mode
[  657.664732][ T6126] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  658.167710][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  658.562146][ T6126] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  658.572218][ T6126] bond0 (unregistering): Released all slaves
[  658.694290][T15254] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2511'.
[  658.707459][T15258] netlink: 'syz.1.2511': attribute type 29 has an invalid length.
[  658.886929][T15011] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.945022][T15274] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.2514'.
[  658.955013][T15011] 8021q: adding VLAN 0 to HW filter on device team0
[  659.013066][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.020362][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.082005][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.089446][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.156152][T15278] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2515'.
[  660.092881][T15011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  660.305959][T15011] veth0_vlan: entered promiscuous mode
[  661.323608][T15011] veth1_vlan: entered promiscuous mode
[  661.471780][T15011] veth0_macvtap: entered promiscuous mode
[  661.581740][T15011] veth1_macvtap: entered promiscuous mode
[  661.700261][T15335] netlink: 'syz.2.2525': attribute type 2 has an invalid length.
[  661.732274][T15335] netlink: 'syz.2.2525': attribute type 8 has an invalid length.
[  661.753916][T15335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2525'.
[  661.783036][T15011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.827938][T15011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.875199][T15011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.906025][T15011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.951376][T15011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  661.972637][T15011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  661.985048][T15011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.998890][T15011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.009835][T15011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.026491][T15011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.038599][T15011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.058124][T15011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.065773][T15340] netlink: 'syz.2.2525': attribute type 11 has an invalid length.
[  662.084426][T15335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2525'.
[  662.128734][T15011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.137531][T15011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.146690][T15011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.157292][T15011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.304184][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.323933][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.416660][T15355] netlink: 'syz.2.2529': attribute type 33 has an invalid length.
[  662.438955][ T6130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.447033][T15355] netlink: 'syz.2.2529': attribute type 3 has an invalid length.
[  662.456002][ T6130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.465981][T15355] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2529'.
[  664.351491][T15388] netlink: 'syz.3.2538': attribute type 29 has an invalid length.
[  664.403674][T15388] netlink: 'syz.3.2538': attribute type 3 has an invalid length.
[  664.429743][T15388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2538'.
[  665.075658][T15410] netlink: 'syz.3.2547': attribute type 2 has an invalid length.
[  665.099441][T15410] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.2547'.
[  665.607048][T15417] C: renamed from team_slave_0 (while UP)
[  665.639208][T15417] netlink: 'syz.0.2549': attribute type 3 has an invalid length.
[  665.655376][T15417] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2549'.
[  665.784782][T15429] netlink: 'syz.0.2552': attribute type 12 has an invalid length.
[  665.796701][T15429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2552'.
[  665.985356][T15436] netlink: 146556 bytes leftover after parsing attributes in process `syz.2.2556'.
[  666.257454][T15440] syzkaller0: entered promiscuous mode
[  672.406847][T15482] netlink: 15974 bytes leftover after parsing attributes in process `syz.2.2569'.
[  672.427035][T15490] bridge_slave_1: left allmulticast mode
[  672.447934][T15490] bridge_slave_1: left promiscuous mode
[  672.453820][T15490] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.478565][T15490] bridge_slave_0: left allmulticast mode
[  672.484308][T15490] bridge_slave_0: left promiscuous mode
[  672.513509][T15490] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.563973][T15495] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2572'.
[  672.756306][T15505] validate_nla: 1 callbacks suppressed
[  672.756319][T15505] netlink: 'syz.3.2574': attribute type 21 has an invalid length.
[  672.780603][T15505] netlink: 'syz.3.2574': attribute type 1 has an invalid length.
[  672.790186][T15505] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2574'.
[  673.226570][T15514] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2577'.
[  673.327081][T15517] netlink: 'syz.0.2577': attribute type 1 has an invalid length.
[  673.354887][T15517] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2577'.
[  673.475040][T15523] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2581'.
[  673.595123][T15528] ƒ: renamed from tunl0 (while UP)
[  673.669887][T15530] netlink: 'syz.2.2584': attribute type 9 has an invalid length.
[  673.691815][T15530] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2584'.
[  673.857940][T15533] netlink: 'syz.2.2584': attribute type 9 has an invalid length.
[  673.886619][T15533] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2584'.
[  673.897372][T15536] netlink: 'syz.3.2581': attribute type 39 has an invalid length.
[  674.380429][T15546] netlink: 'syz.0.2587': attribute type 1 has an invalid length.
[  674.622016][T15553] netlink: 'syz.0.2589': attribute type 11 has an invalid length.
[  674.662731][T15555] IPv6: Can't replace route, no match found
[  674.677902][T15553] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.2589'.
[  674.732261][T15553] sctp: [Deprecated]: syz.0.2589 (pid 15553) Use of int in maxseg socket option.
[  674.732261][T15553] Use struct sctp_assoc_value instead
[  675.554185][T15578] netlink: 'syz.3.2600': attribute type 10 has an invalid length.
[  675.617483][T15578] team0: Port device wlan1 added
[  675.631829][T15577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.649014][T15583] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2601'.
[  675.970313][T15594] netlink: 'syz.0.2603': attribute type 21 has an invalid length.
[  676.007162][T15594] netlink: 'syz.0.2603': attribute type 1 has an invalid length.
[  677.932248][T15629] validate_nla: 1 callbacks suppressed
[  677.932270][T15629] netlink: 'syz.3.2615': attribute type 21 has an invalid length.
[  678.270048][T15622] syzkaller0: entered promiscuous mode
[  678.298258][T15622] syzkaller0: entered allmulticast mode
[  678.386964][T15636] netlink: 'syz.2.2618': attribute type 3 has an invalid length.
[  678.438546][T15636] __nla_validate_parse: 2 callbacks suppressed
[  678.438566][T15636] netlink: 123472 bytes leftover after parsing attributes in process `syz.2.2618'.
[  682.397408][T15664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2626'.
[  682.440110][T15664] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  682.512275][T15661] netlink: 'syz.2.2625': attribute type 10 has an invalid length.
[  682.565208][T15660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  683.106099][    C1] 
[  683.106108][    C1] ================================
[  683.106115][    C1] WARNING: inconsistent lock state
[  683.106138][    C1] syzkaller #0 Not tainted
[  683.106148][    C1] --------------------------------
[  683.106154][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  683.106162][    C1] syz.1.2628/15669 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  683.106183][    C1] ffff88807501f5a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  683.106241][    C1] {INITIAL USE} state was registered at:
[  683.106248][    C1]   lock_acquire+0x19e/0x420
[  683.106271][    C1]   _raw_spin_lock+0x2e/0x40
[  683.106303][    C1]   htab_lock_bucket+0x17d/0x300
[  683.106323][    C1]   htab_lru_map_update_elem+0x2be/0x990
[  683.106343][    C1]   bpf_map_update_value+0x64b/0x710
[  683.106361][    C1]   map_update_elem+0x586/0x710
[  683.106380][    C1]   __sys_bpf+0x6b5/0x890
[  683.106399][    C1]   __x64_sys_bpf+0x7c/0x90
[  683.106416][    C1]   do_syscall_64+0x55/0xb0
[  683.106436][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  683.106462][    C1] irq event stamp: 1840
[  683.106469][    C1] hardirqs last  enabled at (1839): [<ffffffff81d491da>] seqcount_lockdep_reader_access+0x10a/0x190
[  683.106499][    C1] hardirqs last disabled at (1840): [<ffffffff8a8cb3b3>] exc_debug+0x73/0x140
[  683.106525][    C1] softirqs last  enabled at (1792): [<ffffffff88bb43b4>] netlink_insert+0x1094/0x1390
[  683.106552][    C1] softirqs last disabled at (1790): [<ffffffff8878c94f>] release_sock+0x2f/0x1c0
[  683.106584][    C1] 
[  683.106584][    C1] other info that might help us debug this:
[  683.106590][    C1]  Possible unsafe locking scenario:
[  683.106590][    C1] 
[  683.106594][    C1]        CPU0
[  683.106598][    C1]        ----
[  683.106602][    C1]   lock(&htab->lockdep_key);
[  683.106615][    C1]   <Interrupt>
[  683.106618][    C1]     lock(&htab->lockdep_key);
[  683.106633][    C1] 
[  683.106633][    C1]  *** DEADLOCK ***
[  683.106633][    C1] 
[  683.106637][    C1] no locks held by syz.1.2628/15669.
[  683.106646][    C1] 
[  683.106646][    C1] stack backtrace:
[  683.106651][    C1] CPU: 1 PID: 15669 Comm: syz.1.2628 Not tainted syzkaller #0
[  683.106670][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  683.106689][    C1] Call Trace:
[  683.106696][    C1]  <#DB>
[  683.106704][    C1]  dump_stack_lvl+0x18c/0x250
[  683.106732][    C1]  ? show_regs_print_info+0x20/0x20
[  683.106764][    C1]  ? print_usage_bug+0x43d/0x6a0
[  683.106791][    C1]  ? verify_lock_unused+0x15/0x140
[  683.106820][    C1]  lock_acquire+0x2c2/0x420
[  683.106851][    C1]  ? htab_lock_bucket+0x17d/0x300
[  683.106878][    C1]  ? read_lock_is_recursive+0x20/0x20
[  683.106924][    C1]  _raw_spin_lock+0x2e/0x40
[  683.106953][    C1]  ? htab_lock_bucket+0x17d/0x300
[  683.106976][    C1]  htab_lock_bucket+0x17d/0x300
[  683.107005][    C1]  ? htab_lru_map_delete_node+0x770/0x770
[  683.107031][    C1]  ? look_up_lock_class+0x75/0x140
[  683.107061][    C1]  ? verify_lock_unused+0x15/0x140
[  683.107087][    C1]  ? jhash+0x34e/0x740
[  683.107114][    C1]  htab_lru_map_delete_elem+0x19f/0x640
[  683.107147][    C1]  ? htab_lru_map_update_elem+0x990/0x990
[  683.107172][    C1]  ? perf_callchain+0x220/0x220
[  683.107194][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  683.107223][    C1]  bpf_prog_69bf374aa003a95d+0x46/0x4a
[  683.107247][    C1]  bpf_overflow_handler+0x1fc/0x510
[  683.107284][    C1]  ? bpf_overflow_handler+0xde/0x510
[  683.107313][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  683.107339][    C1]  ? lock_release+0xb5/0x8c0
[  683.107373][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  683.107403][    C1]  __perf_event_overflow+0x461/0x660
[  683.107437][    C1]  perf_swevent_event+0x319/0x570
[  683.107467][    C1]  ? perf_tp_event+0x1550/0x1550
[  683.107508][    C1]  perf_bp_event+0x319/0x430
[  683.107541][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  683.107610][    C1]  ? lock_acquire+0x2c2/0x420
[  683.107645][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  683.107728][    C1]  notifier_call_chain+0x18f/0x380
[  683.107764][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  683.107794][    C1]  atomic_notifier_call_chain+0xda/0x180
[  683.107825][    C1]  notify_die+0x145/0x1a0
[  683.107856][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  683.107895][    C1]  ? rcu_is_watching+0x15/0xb0
[  683.107927][    C1]  notify_debug+0x2e/0x50
[  683.107963][    C1]  exc_debug+0xde/0x140
[  683.107991][    C1]  asm_exc_debug+0x1e/0x40
[  683.108011][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  683.108038][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  683.108055][    C1] RSP: 0018:ffffc900123d7958 EFLAGS: 00050206
[  683.108072][    C1] RAX: ffffffff842fd001 RBX: 000000000000fe33 RCX: 000000000000fcb3
[  683.108086][    C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc9000322e180
[  683.108100][    C1] RBP: ffffc900123d7a90 R08: ffffc9000323de32 R09: 1ffff92000647bc6
[  683.108114][    C1] R10: dffffc0000000000 R11: fffff52000647bc7 R12: ffffc9000322e000
[  683.108129][    C1] R13: 00002000000001c0 R14: ffffc900123d7c18 R15: 1ffff9200247af83
[  683.108155][    C1]  ? _copy_from_iter+0x211/0x1290
[  683.108194][    C1]  </#DB>
[  683.108200][    C1]  <TASK>
[  683.108205][    C1]  _copy_from_iter+0x242/0x1290
[  683.108236][    C1]  ? __rwlock_init+0x150/0x150
[  683.108269][    C1]  ? copyout_mc+0x70/0x70
[  683.108293][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  683.108326][    C1]  ? _raw_spin_unlock+0x28/0x40
[  683.108355][    C1]  ? find_vmap_area+0xfc/0x110
[  683.108385][    C1]  ? __check_object_size+0x4fc/0xa40
[  683.108412][    C1]  netlink_sendmsg+0x76b/0xbf0
[  683.108446][    C1]  ? netlink_getsockopt+0x590/0x590
[  683.108471][    C1]  ? apparmor_socket_sendmsg+0x8e/0x330
[  683.108498][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  683.108524][    C1]  ? security_socket_sendmsg+0x80/0xa0
[  683.108549][    C1]  sock_write_iter+0x2dc/0x420
[  683.108577][    C1]  ? sock_read_iter+0x3f0/0x3f0
[  683.108616][    C1]  ? common_file_perm+0x198/0x1f0
[  683.108656][    C1]  vfs_write+0x474/0x9a0
[  683.108700][    C1]  ? file_end_write+0x250/0x250
[  683.108735][    C1]  ? __fget_files+0x3fc/0x460
[  683.108777][    C1]  ? __fdget_pos+0x1d8/0x330
[  683.108802][    C1]  ? ksys_write+0x74/0x260
[  683.108834][    C1]  ksys_write+0x151/0x260
[  683.108867][    C1]  ? __ia32_sys_read+0x90/0x90
[  683.108901][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  683.108934][    C1]  do_syscall_64+0x55/0xb0
[  683.108954][    C1]  ? clear_bhb_loop+0x40/0x90
[  683.108976][    C1]  ? clear_bhb_loop+0x40/0x90
[  683.109001][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  683.109022][    C1] RIP: 0033:0x7f560af9e0d9
[  683.109039][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  683.109056][    C1] RSP: 002b:00007f560bf51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  683.109075][    C1] RAX: ffffffffffffffda RBX: 00007f560b225fa0 RCX: 00007f560af9e0d9
[  683.109089][    C1] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 000000000000000b
[  683.109102][    C1] RBP: 00007f560b035024 R08: 0000000000000000 R09: 0000000000000000
[  683.109114][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  683.109125][    C1] R13: 00007f560b226038 R14: 00007f560b225fa0 R15: 00007ffe63d90748
[  683.109160][    C1]  </TASK>
[  691.401789][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  691.409628][ T1293] ieee802154 phy1 wpan1: encryption failed: -22