last executing test programs:

2.71320961s ago: executing program 1 (id=5690):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0)
socket$kcm(0x2, 0x1, 0x84)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4)
recvmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1)

2.636506961s ago: executing program 4 (id=5692):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400400446b9bbc7a46e3988285dcdf12f21308", 0x66}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00"], 0x0, 0x4}, 0x94)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.494287404s ago: executing program 2 (id=5695):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000000)=""/48}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x4000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext={0x7e, 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x500, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)

2.431981636s ago: executing program 1 (id=5696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.347182828s ago: executing program 0 (id=5697):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"})
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xbfAj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88\xff\xff\xff\xff\xff\xff\xff\xff\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x8e\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\f\x00\x00\x00\x00\x00\x00\x00\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x40880)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.346804098s ago: executing program 4 (id=5699):
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40841)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0x4044454)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)
r0 = socket$kcm(0xa, 0x3, 0x3a)
recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x110, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)

2.017000795s ago: executing program 1 (id=5700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000300000004000100"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.957215277s ago: executing program 2 (id=5702):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x13, 0x3, 0x0, 0x0, 0x300, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02083b00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.917088708s ago: executing program 0 (id=5703):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x4}, 0x0, 0x32, 0x43a1bd77, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8000000000000010, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)

1.916812337s ago: executing program 4 (id=5704):
perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd9, 0x10001}, 0x0, 0x80000, 0x0, 0x0, 0x6, 0x8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010)

1.673251133s ago: executing program 0 (id=5705):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x32, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
close(r2)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})

1.643278823s ago: executing program 1 (id=5707):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x4, r0}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=""/133, 0x85}, 0x40000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x59, 0x59, 0xb, [@float={0xf, 0x0, 0x0, 0x10, 0x4}, @datasec={0xe, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x8}, {0x3, 0x7d, 0x7}, {0x2, 0x3, 0x1}], "14"}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x3}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x0, 0x51, 0x61, 0x61, 0x61]}}, &(0x7f0000000440)=""/64, 0x7f, 0x40, 0x1, 0x0, 0x10000}, 0x28)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
socket$kcm(0xa, 0x6, 0x0)

1.642881854s ago: executing program 4 (id=5708):
perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open$cgroup(0x0, r4, 0xe, r1, 0x0)

1.399905259s ago: executing program 3 (id=5709):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xe0ffffff}, 0x80, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x804)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)

1.393519469s ago: executing program 0 (id=5719):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(0x3)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)

1.154698804s ago: executing program 0 (id=5710):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/10], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0xf, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000340), 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@bloom_filter={0x1e, 0x0, 0xb, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f0000000080)=""/144}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)
r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0x2, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x5, @perf_config_ext={0x3, 0x10}, 0x0, 0x5840a26e, 0x8, 0x5, 0x8, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x7ff}, r1, 0x4, r0, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001200)={0x3, 0x80, 0x1, 0x6, 0x0, 0xc, 0x0, 0x7, 0xb090, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x43f75d07c2d94bd, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x8080, 0x2, 0x5, 0x7, 0x7, 0x400, 0x3, 0x0, 0x6, 0x0, 0x27d})
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0)

1.154287634s ago: executing program 4 (id=5711):
r0 = socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
sendmsg$unix(r2, 0x0, 0x2000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x22, 0x2, 0x21)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, 0x0, 0x101d0)
ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"})

1.151723384s ago: executing program 3 (id=5712):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

839.837531ms ago: executing program 3 (id=5713):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"})
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xbfAj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88\xff\xff\xff\xff\xff\xff\xff\xff\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x8e\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\f\x00\x00\x00\x00\x00\x00\x00\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x40880)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

838.601021ms ago: executing program 0 (id=5724):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x13, 0x3, 0x0, 0x0, 0x300, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02083b00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

837.614451ms ago: executing program 2 (id=5714):
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0xa, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x7, 0x0, 0x6, 0x0, 0x7f, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
sendmsg$inet(r3, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r3})
recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, 0x0, 0x8014)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

837.160341ms ago: executing program 4 (id=5715):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x40810)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x10100)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x27, 0x22, 0x0, &(0x7f0000000240)="1901000000000000040000000800d783fa282c7753efc8b16bbd9f63b9e541ed1a01", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x28000000)

740.421973ms ago: executing program 3 (id=5716):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x180c1)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x90802, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x7, 0x0, &(0x7f0000000180)="00050000000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

730.851684ms ago: executing program 1 (id=5717):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x33, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x40049409, 0x5)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02120009020000", 0x7}], 0x1}, 0x0)

491.483079ms ago: executing program 2 (id=5718):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000300000004000100"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

322.016332ms ago: executing program 3 (id=5720):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

286.575833ms ago: executing program 1 (id=5721):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2fa}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b", 0x3b}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r3 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x118888, 0x0, 0xfffffffc, 0x9, 0xb0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)

106.190787ms ago: executing program 2 (id=5722):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0)
socket$kcm(0x21, 0x0, 0x2)
socket$kcm(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000e30000000000961349dd3ab44f58ce7092fe78e1fcbddffc3655255ab791f5c2e8a80c9c6ad8", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000081)

734.76µs ago: executing program 2 (id=5723):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(0x3)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)

0s ago: executing program 3 (id=5725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

kernel console output (not intermixed with test programs):

n process `syz.1.3130'.
[  472.681401][T13718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3134'.
[  473.557115][T13736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3145'.
[  473.587239][T13736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3145'.
[  474.794877][T13772] netlink: 'syz.0.3156': attribute type 2 has an invalid length.
[  474.802673][T13772] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3156'.
[  475.660718][T13755] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3150'.
[  481.785199][T13839] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3173'.
[  481.979004][T13860] syz.3.3178[13860] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  481.979161][T13860] syz.3.3178[13860] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.529491][T13892] netlink: 'syz.4.3188': attribute type 2 has an invalid length.
[  483.568204][T13888] device syzkaller0 entered promiscuous mode
[  483.575390][T13892] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3188'.
[  483.599867][T13894] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3187'.
[  483.826576][T13894] netlink: 'syz.3.3187': attribute type 10 has an invalid length.
[  483.853948][T13894] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3187'.
[  488.688651][T13942] netlink: 'syz.1.3200': attribute type 2 has an invalid length.
[  488.697007][T13942] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3200'.
[  489.957923][T13951] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3202'.
[  489.967334][T13953] netlink: 'syz.1.3202': attribute type 10 has an invalid length.
[  489.975685][T13953] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3202'.
[  490.306790][T13967] device syzkaller0 entered promiscuous mode
[  491.946581][T13970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3209'.
[  491.961221][T13972] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3210'.
[  491.975960][T13973] netlink: 'syz.4.3210': attribute type 10 has an invalid length.
[  491.995323][T13973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3210'.
[  492.030222][T13982] netlink: 'syz.2.3212': attribute type 2 has an invalid length.
[  492.039508][T13982] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3212'.
[  492.457184][T13988] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3215'.
[  492.569845][T13988] netlink: 'syz.2.3215': attribute type 10 has an invalid length.
[  492.586742][T13988] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3215'.
[  493.205317][T14013] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3225'.
[  493.265674][T14015] device syzkaller0 entered promiscuous mode
[  495.023208][T14020] netlink: 'syz.4.3225': attribute type 10 has an invalid length.
[  495.031952][T14020] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3225'.
[  495.064553][T14030] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3229'.
[  495.085137][T14032] netlink: 'syz.2.3229': attribute type 10 has an invalid length.
[  495.093022][T14032] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3229'.
[  495.266463][ T4272] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  496.391357][T14073] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3243'.
[  496.449258][T14073] netlink: 'syz.2.3243': attribute type 10 has an invalid length.
[  496.462260][T14073] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3243'.
[  496.502678][T14079] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3244'.
[  496.584856][T14081] netlink: 'syz.4.3244': attribute type 10 has an invalid length.
[  496.603007][T14081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3244'.
[  498.524716][T14122] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3260'.
[  498.613679][T14126] netlink: 'syz.0.3260': attribute type 10 has an invalid length.
[  498.621698][T14126] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3260'.
[  499.576254][T14145] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3267'.
[  499.703759][T14145] netlink: 'syz.1.3267': attribute type 10 has an invalid length.
[  501.366123][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  501.372702][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  502.302403][T14199] __nla_validate_parse: 1 callbacks suppressed
[  502.302459][T14199] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3282'.
[  502.425216][T14199] netlink: 'syz.3.3282': attribute type 10 has an invalid length.
[  502.453718][T14199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3282'.
[  502.662462][T14211] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3297'.
[  504.220479][T14211] netlink: 'syz.0.3297': attribute type 10 has an invalid length.
[  504.228606][T14211] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3297'.
[  506.702134][T14263] netlink: 'syz.0.3301': attribute type 2 has an invalid length.
[  506.710689][T14263] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3301'.
[  506.864131][T14266] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3302'.
[  506.960313][T14269] netlink: 'syz.2.3302': attribute type 10 has an invalid length.
[  506.984076][T14269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3302'.
[  509.085094][T14283] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3317'.
[  509.109644][T14287] netlink: 'syz.0.3317': attribute type 10 has an invalid length.
[  509.117930][T14287] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3317'.
[  509.453754][T14303] device syzkaller0 entered promiscuous mode
[  509.589021][T14307] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3313'.
[  509.990021][T14314] netlink: 'syz.3.3316': attribute type 2 has an invalid length.
[  510.023895][T14314] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3316'.
[  510.383376][T14326] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3322'.
[  510.501549][T14326] netlink: 'syz.3.3322': attribute type 10 has an invalid length.
[  510.552473][T14326] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3322'.
[  510.714032][T14337] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3326'.
[  511.103709][T14353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  511.111585][T14353] IPv6: NLM_F_CREATE should be set when creating new route
[  511.119174][T14353] IPv6: NLM_F_CREATE should be set when creating new route
[  511.126683][T14353] IPv6: NLM_F_CREATE should be set when creating new route
[  511.144326][T14347] device syzkaller0 entered promiscuous mode
[  511.328984][T14359] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3331'.
[  511.656787][T14363] netlink: 'syz.1.3332': attribute type 2 has an invalid length.
[  511.686775][T14363] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3332'.
[  512.262981][T14368] delete_channel: no stack
[  515.254920][T14407] device syzkaller0 entered promiscuous mode
[  515.267094][T14407] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  515.448930][T14416] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3344'.
[  515.509411][T14417] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3345'.
[  515.644402][ T4272] Bluetooth: hci0: ISO packet for unknown connection handle 255
[  516.040052][T14430] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3362'.
[  517.375570][T14453] device syzkaller0 entered promiscuous mode
[  518.090312][T14462] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3363'.
[  518.568971][T14484] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3369'.
[  519.771955][T14513] device syzkaller0 entered promiscuous mode
[  519.784874][T14510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.792340][T14510] IPv6: NLM_F_CREATE should be set when creating new route
[  519.800001][T14510] IPv6: NLM_F_CREATE should be set when creating new route
[  519.807492][T14510] IPv6: NLM_F_CREATE should be set when creating new route
[  519.892663][T14514] delete_channel: no stack
[  519.974997][ T4272] Bluetooth: hci4: ISO packet for unknown connection handle 255
[  520.184404][T14525] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3386'.
[  520.254625][T14529] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3388'.
[  520.323005][T14529] netlink: 'syz.1.3388': attribute type 10 has an invalid length.
[  520.344026][T14529] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3388'.
[  520.398515][T14537] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3389'.
[  520.662115][T14550] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3402'.
[  520.741692][T14546] delete_channel: no stack
[  520.820878][T14550] netlink: 'syz.0.3402': attribute type 10 has an invalid length.
[  520.837306][T14550] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3402'.
[  521.346973][ T4272] Bluetooth: hci2: ISO packet for unknown connection handle 255
[  522.963024][T14598] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3405'.
[  522.989491][T14608] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3407'.
[  523.029518][T14610] netlink: 'syz.1.3407': attribute type 10 has an invalid length.
[  523.054024][T14610] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3407'.
[  523.082865][T14615] delete_channel: no stack
[  525.001520][T14664] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3421'.
[  525.140825][T14664] netlink: 'syz.3.3421': attribute type 10 has an invalid length.
[  525.152951][T14664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3421'.
[  525.340913][T14679] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3424'.
[  525.411849][T14678] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3433'.
[  525.456385][T14680] delete_channel: no stack
[  525.513653][T14678] netlink: 'syz.0.3433': attribute type 10 has an invalid length.
[  525.521645][T14678] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3433'.
[  526.719768][T14717] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3437'.
[  527.529741][T14736] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3442'.
[  527.609200][T14739] netlink: 'syz.3.3442': attribute type 10 has an invalid length.
[  527.620739][T14739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3442'.
[  527.691164][T14745] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3445'.
[  528.102662][T14759] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3451'.
[  528.304244][T14763] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3453'.
[  528.652636][T14768] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3464'.
[  528.864624][T14773] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3458'.
[  528.939627][T14773] netlink: 'syz.2.3458': attribute type 10 has an invalid length.
[  528.949218][T14773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3458'.
[  529.172187][T14781] device syzkaller0 entered promiscuous mode
[  531.359904][T14810] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3470'.
[  531.730953][T14834] __nla_validate_parse: 1 callbacks suppressed
[  531.730985][T14834] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3474'.
[  531.780005][T14837] device syzkaller0 entered promiscuous mode
[  533.167195][T14834] netlink: 'syz.4.3474': attribute type 10 has an invalid length.
[  533.175194][T14834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3474'.
[  535.343155][T14865] device syzkaller0 entered promiscuous mode
[  536.927373][T14875] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3485'.
[  536.936927][T14876] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3486'.
[  537.098251][T14892] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3489'.
[  537.195384][T14892] netlink: 'syz.3.3489': attribute type 10 has an invalid length.
[  537.203493][T14892] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3489'.
[  538.122690][T14912] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3495'.
[  539.033000][T14928] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3501'.
[  539.052297][T14929] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3503'.
[  539.089966][T14927] device syzkaller0 entered promiscuous mode
[  540.734142][T14934] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3505'.
[  540.743971][T14938] netlink: 'syz.3.3505': attribute type 10 has an invalid length.
[  540.751820][T14938] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3505'.
[  541.351061][T14960] device syzkaller0 entered promiscuous mode
[  544.898121][T14978] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3517'.
[  544.910035][T14983] netlink: 'syz.0.3517': attribute type 10 has an invalid length.
[  544.942183][T14983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3517'.
[  544.960787][T14989] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3520'.
[  545.353539][T15004] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3525'.
[  545.517310][T15009] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3528'.
[  545.785077][T15010] device syzkaller0 entered promiscuous mode
[  545.932430][T15021] sctp: [Deprecated]: syz.3.3532 (pid 15021) Use of int in max_burst socket option deprecated.
[  545.932430][T15021] Use struct sctp_assoc_value instead
[  547.554642][T15024] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3533'.
[  547.564599][T15028] netlink: 'syz.2.3533': attribute type 10 has an invalid length.
[  547.572427][T15028] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3533'.
[  547.785258][T15040] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3536'.
[  547.815937][T15038] netlink: 'syz.2.3546': attribute type 1 has an invalid length.
[  547.843840][T15038] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.3546'.
[  548.389323][T15063] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3544'.
[  550.341662][T15126] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3565'.
[  551.503109][T15160] netlink: 'syz.4.3575': attribute type 29 has an invalid length.
[  551.522775][T15160] netlink: 'syz.4.3575': attribute type 29 has an invalid length.
[  551.562079][T15163] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3576'.
[  551.574398][T15164] netlink: 'syz.4.3575': attribute type 29 has an invalid length.
[  552.363994][T15183] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3581'.
[  552.473343][T15183] netlink: 'syz.1.3581': attribute type 10 has an invalid length.
[  552.487463][T15183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3581'.
[  553.212209][T15197] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3585'.
[  554.745525][T15231] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3595'.
[  554.807035][T15232] netlink: 'syz.2.3595': attribute type 10 has an invalid length.
[  554.835294][T15232] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3595'.
[  556.603933][T15253] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3600'.
[  556.921074][T15271] netlink: 'syz.3.3605': attribute type 1 has an invalid length.
[  556.948492][T15271] netlink: 62739 bytes leftover after parsing attributes in process `syz.3.3605'.
[  556.983360][T15273] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3604'.
[  557.244742][T15284] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3609'.
[  557.342217][T15287] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3621'.
[  557.360764][T15284] netlink: 'syz.3.3609': attribute type 10 has an invalid length.
[  557.371433][T15284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3609'.
[  557.399961][T15290] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3611'.
[  558.566859][T15307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3616'.
[  559.102114][T15330] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3624'.
[  559.142137][T15330] netlink: 'syz.4.3624': attribute type 10 has an invalid length.
[  559.158016][T15330] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3624'.
[  559.900664][T15345] netlink: 'syz.0.3637': attribute type 10 has an invalid length.
[  560.262311][T15362] netlink: 'syz.0.3635': attribute type 1 has an invalid length.
[  560.361525][T15372] netlink: 'syz.3.3640': attribute type 6 has an invalid length.
[  561.140572][T15392] netlink: 'syz.4.3645': attribute type 10 has an invalid length.
[  561.586064][T15413] netlink: 'syz.1.3653': attribute type 1 has an invalid length.
[  561.615269][T15413] __nla_validate_parse: 12 callbacks suppressed
[  561.615285][T15413] netlink: 62739 bytes leftover after parsing attributes in process `syz.1.3653'.
[  561.970563][T15431] netlink: 'syz.4.3660': attribute type 6 has an invalid length.
[  561.992473][T15431] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3660'.
[  562.033314][T15436] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3663'.
[  562.116103][T15436] netlink: 'syz.1.3663': attribute type 10 has an invalid length.
[  562.133928][T15436] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3663'.
[  562.602426][T15445] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3666'.
[  562.816716][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  562.823196][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  563.147364][ T4272] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  563.176381][T15463] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3673'.
[  563.476494][T15471] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3677'.
[  564.229311][T15471] netlink: 'syz.1.3677': attribute type 10 has an invalid length.
[  564.245278][T15471] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3677'.
[  564.440709][T15486] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3682'.
[  564.483015][T15490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3683'.
[  564.514355][T15495] netlink: 'syz.1.3681': attribute type 6 has an invalid length.
[  564.714863][T15503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  565.596512][T15523] netlink: 'syz.1.3693': attribute type 10 has an invalid length.
[  566.759123][T15562] netlink: 'syz.2.3704': attribute type 6 has an invalid length.
[  566.783863][T15562] __nla_validate_parse: 5 callbacks suppressed
[  566.783880][T15562] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3704'.
[  566.885004][T15569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3717'.
[  566.905646][T15569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  566.974721][T15575] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3708'.
[  566.991123][T15577] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3709'.
[  567.075357][T15575] netlink: 'syz.4.3708': attribute type 10 has an invalid length.
[  567.086522][T15575] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3708'.
[  567.978540][T15607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3722'.
[  568.369445][T15607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.601153][T15617] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3723'.
[  568.667668][T15614] netlink: 'syz.0.3723': attribute type 10 has an invalid length.
[  568.683925][T15614] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3723'.
[  568.708280][T15623] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3726'.
[  568.913426][T15628] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3727'.
[  568.953448][T15634] netlink: 'syz.0.3728': attribute type 6 has an invalid length.
[  570.666072][T15680] netlink: 'syz.3.3752': attribute type 10 has an invalid length.
[  571.897561][T15704] cgroup: fork rejected by pids controller in /syz3
[  571.899999][T15706] __nla_validate_parse: 3 callbacks suppressed
[  571.900041][T15706] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3760'.
[  572.103888][T15710] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3762'.
[  572.567164][T15720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  572.575938][T15720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  572.584944][T15720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  572.599029][T15720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  572.607032][T15720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  572.615399][T15720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  572.742551][ T4375] device .*! left promiscuous mode
[  572.902684][T15718] chnl_net:caif_netlink_parms(): no params data found
[  573.035991][T15718] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.043287][T15718] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.059914][T15718] device bridge_slave_0 entered promiscuous mode
[  573.089741][T15718] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.097286][T15718] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.106045][T15718] device bridge_slave_1 entered promiscuous mode
[  573.149938][T15718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.162987][T15718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.220588][T15718] team0: Port device team_slave_0 added
[  573.229866][T15718] team0: Port device team_slave_1 added
[  573.270760][T15718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.279100][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.308279][T15718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.329949][T15718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.337614][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.364711][T15718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.442859][T15718] device hsr_slave_0 entered promiscuous mode
[  573.449971][T15718] device hsr_slave_1 entered promiscuous mode
[  573.456692][T15718] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  573.464294][T15718] Cannot create hsr debugfs directory
[  574.122730][T15718] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  574.135350][T15718] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  574.147353][T15718] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  574.158566][T15718] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  574.274027][T15718] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.311444][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  574.321486][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  574.345710][T15718] 8021q: adding VLAN 0 to HW filter on device team0
[  574.358804][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  574.368784][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  574.378745][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.385922][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.425730][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  574.439413][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  574.448621][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  574.460913][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.468115][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.478309][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  574.502933][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  574.515069][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  574.526526][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  574.535627][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  574.546589][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  574.555723][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  574.576546][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  574.595329][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  574.615916][T15718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  574.643086][T15718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  574.650421][T15720] Bluetooth: hci3: command 0x0409 tx timeout
[  574.661179][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  574.675285][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  574.965707][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  574.973267][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  574.996535][T15718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.019330][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  575.030964][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  575.056216][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  575.064964][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  575.074266][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  575.082214][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  575.097194][T15718] device veth0_vlan entered promiscuous mode
[  575.133359][T15718] device veth1_vlan entered promiscuous mode
[  575.172434][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  575.185390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  575.194040][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  575.202781][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  575.222945][T15718] device veth0_macvtap entered promiscuous mode
[  575.236916][T15718] device veth1_macvtap entered promiscuous mode
[  575.258164][T15718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.269149][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  575.285227][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  575.293788][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  575.302555][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  575.321936][T15718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  575.332742][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  575.342296][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  575.360918][T15718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.383555][T15718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.392300][T15718] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.402581][T15718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.543278][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.564147][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.592490][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  575.624415][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.632296][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.659790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  576.528821][T15809] netlink: 'syz.0.3777': attribute type 7 has an invalid length.
[  576.725478][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  576.833169][T15817] netlink: 'syz.1.3783': attribute type 7 has an invalid length.
[  577.559063][T15830] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3776'.
[  577.739638][ T4375] device vlan0 left promiscuous mode
[  577.748709][ T4375] �: port 1(vlan0) entered disabled state
[  577.776842][ T4375] device hsr_slave_0 left promiscuous mode
[  577.783401][ T4375] device hsr_slave_1 left promiscuous mode
[  577.799342][ T4375] device veth1_macvtap left promiscuous mode
[  577.807094][ T4375] device veth0_macvtap left promiscuous mode
[  577.815387][ T4375] device veth0_vlan left promiscuous mode
[  577.834790][T15842] sctp: [Deprecated]: syz.0.3782 (pid 15842) Use of struct sctp_assoc_value in delayed_ack socket option.
[  577.834790][T15842] Use struct sctp_sack_info instead
[  578.803856][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  580.884093][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[  582.744515][T15862] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3791'.
[  582.759746][T15872] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3794'.
[  583.904530][T15908] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3805'.
[  584.309523][T15921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3808'.
[  584.470875][T15930] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3810'.
[  585.420457][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3821'.
[  585.454646][T15961] netlink: 'syz.3.3821': attribute type 12 has an invalid length.
[  585.474386][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3821'.
[  585.679195][T15965] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3823'.
[  585.792692][T15965] netlink: 'syz.1.3823': attribute type 10 has an invalid length.
[  585.809068][T15965] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3823'.
[  586.536587][T15969] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3824'.
[  586.881707][T15985] netlink: 'syz.3.3825': attribute type 7 has an invalid length.
[  586.907716][T15980] netlink: 'syz.0.3837': attribute type 10 has an invalid length.
[  587.430880][T16000] netlink: 'syz.1.3845': attribute type 10 has an invalid length.
[  587.801301][T16007] cgroup: fork rejected by pids controller in /syz4
[  588.090593][T16020] __nla_validate_parse: 6 callbacks suppressed
[  588.090629][T16020] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3846'.
[  588.966519][T16029] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3849'.
[  589.266793][T16035] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3853'.
[  589.289244][T16039] netlink: 'syz.1.3853': attribute type 10 has an invalid length.
[  589.307210][T16039] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3853'.
[  589.646528][T16045] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3854'.
[  589.737378][   T11] device .*! left promiscuous mode
[  589.770522][T16049] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3866'.
[  590.027519][T16056] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3857'.
[  590.271004][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  590.281225][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  590.290835][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  590.298926][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  590.317423][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  590.327169][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  591.598934][T16096] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3865'.
[  591.851307][T16096] netlink: 'syz.0.3865': attribute type 10 has an invalid length.
[  591.893925][T16096] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3865'.
[  592.286346][T16103] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3869'.
[  592.400076][T16065] chnl_net:caif_netlink_parms(): no params data found
[  592.428427][T15720] Bluetooth: hci1: command 0x0409 tx timeout
[  592.936781][T16065] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.963636][T16065] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.993231][T16065] device bridge_slave_0 entered promiscuous mode
[  593.082657][T16065] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.097081][T16065] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.122562][T16065] device bridge_slave_1 entered promiscuous mode
[  593.285762][T16065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.351581][T16065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.407286][T16065] team0: Port device team_slave_0 added
[  593.426748][T16065] team0: Port device team_slave_1 added
[  593.511899][T16065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.519841][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.551694][T16065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.567526][T16065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.600982][T16065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.663917][T16065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.676968][T16146] sctp: [Deprecated]: syz.1.3877 (pid 16146) Use of struct sctp_assoc_value in delayed_ack socket option.
[  593.676968][T16146] Use struct sctp_sack_info instead
[  593.730554][T16149] __nla_validate_parse: 2 callbacks suppressed
[  593.730588][T16149] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3886'.
[  593.898135][T16065] device hsr_slave_0 entered promiscuous mode
[  593.954353][T16065] device hsr_slave_1 entered promiscuous mode
[  593.974265][T16065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  593.995452][T16065] Cannot create hsr debugfs directory
[  594.060580][T16158] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3880'.
[  594.200997][T16162] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3881'.
[  594.384966][T16162] netlink: 'syz.1.3881': attribute type 10 has an invalid length.
[  594.407294][T16162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3881'.
[  594.483834][T15720] Bluetooth: hci1: command 0x041b tx timeout
[  595.443713][T16065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  595.452882][T16065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  595.466840][T16065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  595.480512][T16065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  595.558758][T16065] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.585839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  595.598476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  595.609685][T16065] 8021q: adding VLAN 0 to HW filter on device team0
[  595.621232][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  595.638598][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  595.647134][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.654264][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.662020][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  595.695764][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  595.710200][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  595.719225][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.726403][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.748453][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  595.772879][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  595.787964][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  595.804337][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  595.814105][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  595.854859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  595.866318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  595.889147][T16065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  595.902652][T16065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  595.919861][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  595.929988][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  595.941262][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  595.951025][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  595.962680][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  596.331296][   T11] device vlan0 left promiscuous mode
[  596.356839][   T11] �: port 1(vlan0) entered disabled state
[  596.366406][   T11] device veth0_to_team left promiscuous mode
[  596.372582][   T11] ��
: port 1(veth0_to_team) entered disabled state
[  596.394611][   T11] device hsr_slave_0 left promiscuous mode
[  596.401064][   T11] device hsr_slave_1 left promiscuous mode
[  596.420599][   T11] device veth1_macvtap left promiscuous mode
[  596.427271][   T11] device veth0_macvtap left promiscuous mode
[  596.433442][   T11] device veth0_vlan left promiscuous mode
[  596.563986][T15720] Bluetooth: hci1: command 0x040f tx timeout
[  597.333252][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  597.341443][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  597.353024][T16065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.784721][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  597.797109][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  597.820923][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  597.831256][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  597.841922][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  597.851865][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  597.863979][T16065] device veth0_vlan entered promiscuous mode
[  597.881098][T16065] device veth1_vlan entered promiscuous mode
[  597.910409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  597.921658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  597.930395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  597.941867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  597.953239][T16065] device veth0_macvtap entered promiscuous mode
[  597.965108][T16065] device veth1_macvtap entered promiscuous mode
[  597.979145][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  597.991263][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.002573][T16065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.011729][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  598.020750][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  598.028848][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  598.037832][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  598.048922][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.059598][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.071019][T16065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.078880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  598.088070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  598.100378][T16065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.109634][T16065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.118660][T16065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.127421][T16065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.186094][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.207672][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.216640][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  598.233368][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.242170][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.251809][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  598.530809][T16251] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3901'.
[  598.645008][T15720] Bluetooth: hci1: command 0x0419 tx timeout
[  598.814396][T16263] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3896'.
[  598.870243][T16262] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3898'.
[  598.932593][T16260] netlink: 'syz.1.3896': attribute type 10 has an invalid length.
[  598.962453][T16260] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3896'.
[  599.262412][T16273] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3902'.
[  599.405046][T16275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3903'.
[  600.296785][T16294] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3910'.
[  600.900199][T16306] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3913'.
[  601.008395][T16306] netlink: 'syz.1.3913': attribute type 10 has an invalid length.
[  601.023892][T16306] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3913'.
[  601.368644][T16316] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3917'.
[  601.591394][T16324] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3919'.
[  601.918473][T16331] device syzkaller0 entered promiscuous mode
[  604.540442][T16349] __nla_validate_parse: 1 callbacks suppressed
[  604.540453][T16349] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3926'.
[  604.562580][T16357] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3929'.
[  604.582991][T16361] netlink: 'syz.3.3929': attribute type 10 has an invalid length.
[  604.593439][T16361] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3929'.
[  604.616124][T16370] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3932'.
[  605.465601][T16404] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3944'.
[  605.532566][T16404] netlink: 'syz.2.3944': attribute type 10 has an invalid length.
[  605.547709][T16404] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3944'.
[  605.566290][T16407] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3945'.
[  606.033126][T16417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3948'.
[  608.252849][T16452] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3959'.
[  608.352995][T16456] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3960'.
[  608.419305][T16452] netlink: 'syz.0.3959': attribute type 10 has an invalid length.
[  609.090594][T16477] netlink: zone id is out of range
[  609.096543][T16477] netlink: zone id is out of range
[  609.107252][T16477] netlink: zone id is out of range
[  609.128627][T16477] netlink: del zone limit has 4 unknown bytes
[  609.440569][T15720] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  609.801560][T16492] device syzkaller0 entered promiscuous mode
[  609.847975][T16494] __nla_validate_parse: 4 callbacks suppressed
[  609.848010][T16494] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3975'.
[  609.891811][T16494] netlink: 'syz.1.3975': attribute type 10 has an invalid length.
[  609.901046][T16494] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3975'.
[  612.874886][T16512] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3980'.
[  612.889598][T16543] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3990'.
[  612.899503][T16544] netlink: 'syz.0.3990': attribute type 10 has an invalid length.
[  612.926322][T16544] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3990'.
[  612.943894][T16548] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3991'.
[  614.151770][T16586] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3999'.
[  615.423264][T16607] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4004'.
[  615.433425][T16608] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4005'.
[  615.458341][T16609] netlink: 'syz.2.4004': attribute type 10 has an invalid length.
[  615.469702][T16609] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4004'.
[  615.489877][T16619] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4007'.
[  616.082594][T16646] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4018'.
[  616.308525][T16655] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4021'.
[  616.389680][T16655] netlink: 'syz.3.4021': attribute type 10 has an invalid length.
[  616.423839][T16655] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4021'.
[  616.532620][T16664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4023'.
[  616.647154][T16670] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4035'.
[  616.808423][T16670] netlink: 'syz.2.4035': attribute type 10 has an invalid length.
[  616.844715][T16670] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4035'.
[  617.907453][T16703] device bridge_slave_0 entered promiscuous mode
[  618.786621][T16724] netlink: 'syz.1.4040': attribute type 10 has an invalid length.
[  621.618212][T16741] __nla_validate_parse: 5 callbacks suppressed
[  621.618259][T16741] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4045'.
[  621.880840][T16751] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4059'.
[  624.247382][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  624.254670][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  625.460127][T16784] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4057'.
[  625.483640][T16791] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4058'.
[  628.924685][T16810] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4065'.
[  628.939197][T16816] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4066'.
[  628.969934][T16841] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4071'.
[  629.871610][T16851] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4074'.
[  629.990749][T15720] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  630.269265][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'.
[  630.317374][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'.
[  630.350222][T16865] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4080'.
[  630.382020][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'.
[  630.422049][T16865] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4080'.
[  630.471089][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'.
[  634.643720][T16937] __nla_validate_parse: 5 callbacks suppressed
[  634.643757][T16937] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4098'.
[  635.176212][T16952] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4102'.
[  635.533136][T16956] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4103'.
[  635.979624][T16966] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4107'.
[  636.201386][T16973] device syzkaller0 entered promiscuous mode
[  638.180542][T16979] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4111'.
[  638.203614][T16992] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4115'.
[  638.264640][T16992] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4115'.
[  638.752386][T17002] device syzkaller0 entered promiscuous mode
[  639.244364][T17016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4121'.
[  641.023137][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.058789][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.072112][T17036] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.083098][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.099045][T17036] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.109719][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.121194][T17036] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4126'.
[  641.301343][T17042] delete_channel: no stack
[  641.353308][T17048] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4128'.
[  641.470150][T17056] device syzkaller0 entered promiscuous mode
[  641.476916][T17056] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  641.497306][T17051] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4131'.
[  641.968028][T17071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4138'.
[  642.470469][T17091] netlink: 'syz.3.4143': attribute type 29 has an invalid length.
[  643.922948][T17091] netlink: 'syz.3.4143': attribute type 29 has an invalid length.
[  644.198146][T17104] netlink: 'syz.2.4148': attribute type 1 has an invalid length.
[  644.216788][T17104] netlink: 'syz.2.4148': attribute type 4 has an invalid length.
[  644.585327][T17127] netlink: 'syz.0.4153': attribute type 11 has an invalid length.
[  645.046341][T17119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.201999][T17153] __nla_validate_parse: 18 callbacks suppressed
[  646.202031][T17153] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4160'.
[  646.519708][T17167] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4165'.
[  646.945397][T17165] device syzkaller0 entered promiscuous mode
[  647.183214][T15720] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  647.572564][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.594284][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.614558][T15720] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  647.618133][T17195] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.688068][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.753629][T17195] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.804262][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'.
[  647.813403][T17195] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4173'.
[  648.900354][T17210] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4177'.
[  649.886875][T17230] device syzkaller0 entered promiscuous mode
[  652.899163][T17256] __nla_validate_parse: 1 callbacks suppressed
[  652.899180][T17256] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4193'.
[  653.089734][T17260] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4204'.
[  653.621643][T17283] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4199'.
[  656.196033][T17296] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4202'.
[  657.101871][T17316] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4209'.
[  657.132923][T17319] device syzkaller0 entered promiscuous mode
[  657.143922][T17319] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  657.464767][T15720] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  657.589243][T17343] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4217'.
[  659.260372][T17364] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4225'.
[  659.527716][T17375] device syzkaller0 entered promiscuous mode
[  659.546271][T17375] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  659.664331][T17384] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4230'.
[  663.040705][T17408] netlink: 'syz.1.4236': attribute type 29 has an invalid length.
[  663.056696][T17408] netlink: 'syz.1.4236': attribute type 29 has an invalid length.
[  663.088204][T17408] netlink: 'syz.1.4236': attribute type 29 has an invalid length.
[  663.281245][T17415] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4249'.
[  663.521210][T17424] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4243'.
[  663.572553][T17426] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4244'.
[  664.148000][T17443] device syzkaller0 entered promiscuous mode
[  664.679378][T17455] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4256'.
[  664.776603][T17460] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4258'.
[  664.985801][T17465] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4260'.
[  665.041347][T17471] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4271'.
[  665.335011][T17481] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4274'.
[  665.482876][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4265'.
[  665.496269][T17485] tc_dump_action: action bad kind
[  665.573022][T17489] device syzkaller0 entered promiscuous mode
[  665.732215][T17497] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4270'.
[  665.852018][ T4272] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  668.825198][T17518] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4278'.
[  668.845608][T17522] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4280'.
[  668.908478][T17546] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4285'.
[  670.161331][ T4272] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  670.220565][T17577] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4296'.
[  670.359862][T17583] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4299'.
[  670.772118][T17592] device syzkaller0 entered promiscuous mode
[  670.780872][T17595] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4302'.
[  672.369323][T17630] netlink: 'syz.4.4308': attribute type 4 has an invalid length.
[  677.192303][T17614] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4315'.
[  677.218898][T17639] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4312'.
[  677.575259][T17662] netlink: 'syz.3.4324': attribute type 10 has an invalid length.
[  677.583378][T17662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4324'.
[  677.599048][T17662] batman_adv: batadv0: Adding interface: virt_wifi0
[  677.616273][T17662] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.713960][T17662] batman_adv: batadv0: Interface activated: virt_wifi0
[  678.203566][T17682] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4328'.
[  678.630096][T17693] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4333'.
[  678.738961][T17694] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4332'.
[  681.483797][T17711] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  681.695928][T17732] netlink: 'syz.1.4343': attribute type 6 has an invalid length.
[  681.702207][T17711] device syzkaller0 entered promiscuous mode
[  681.714502][T17732] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4343'.
[  681.734940][T17726] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4342'.
[  681.946782][T17739] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4346'.
[  682.612711][T17743] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4347'.
[  682.624050][T17743] netlink: zone id is out of range
[  682.629685][T17743] netlink: zone id is out of range
[  682.636992][T17743] netlink: zone id is out of range
[  682.642541][T17743] netlink: zone id is out of range
[  682.650182][T17743] netlink: zone id is out of range
[  682.657723][T17743] netlink: zone id is out of range
[  682.663173][T17743] netlink: zone id is out of range
[  682.673236][T17743] netlink: zone id is out of range
[  682.679301][T17743] netlink: zone id is out of range
[  682.685648][T17743] netlink: zone id is out of range
[  683.838418][T17737] syz.0.4345 (17737) used obsolete PPPIOCDETACH ioctl
[  683.953211][T17750] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4350'.
[  684.136753][T17756] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4351'.
[  684.805970][T17780] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4356'.
[  685.686274][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  685.692734][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  686.443825][T17818] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4371'.
[  686.493290][T17822] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4369'.
[  686.579149][T17827] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4372'.
[  686.915294][T17839] delete_channel: no stack
[  686.920572][T17839] delete_channel: no stack
[  686.934671][T17838] delete_channel: no stack
[  687.612588][T17857] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4384'.
[  687.635132][T17857] net_ratelimit: 83 callbacks suppressed
[  687.635269][T17857] netlink: zone id is out of range
[  687.656102][T17857] netlink: zone id is out of range
[  687.673848][T17857] netlink: zone id is out of range
[  687.679179][T17857] netlink: zone id is out of range
[  687.690632][T17861] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4386'.
[  687.708911][T17857] netlink: zone id is out of range
[  687.714863][T17857] netlink: zone id is out of range
[  687.720152][T17857] netlink: zone id is out of range
[  687.726242][T17857] netlink: zone id is out of range
[  687.731533][T17857] netlink: zone id is out of range
[  687.739603][T17857] netlink: zone id is out of range
[  690.776620][T17871] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4391'.
[  690.871432][ T4272] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  690.915951][T17877] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4390'.
[  695.106686][T17914] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4403'.
[  695.343076][ T4272] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  695.633299][T17936] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4410'.
[  695.658952][T17938] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4411'.
[  696.439513][T17965] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4418'.
[  696.840506][T17970] can: request_module (can-proto-0) failed.
[  696.927581][T17984] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4427'.
[  697.103283][T17989] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4429'.
[  697.611847][T18007] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.4431'.
[  697.907850][T18009] netlink: 'syz.2.4432': attribute type 3 has an invalid length.
[  697.943601][T18009] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4432'.
[  698.003928][T15720] Bluetooth: hci3: command 0x0406 tx timeout
[  698.208029][T18015] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4433'.
[  700.897976][T18052] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4445'.
[  700.918873][T18054] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4447'.
[  701.224805][T18071] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4451'.
[  702.617777][T18103] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4462'.
[  702.757572][T18105] netlink: 'syz.1.4463': attribute type 10 has an invalid length.
[  702.772053][T18105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4463'.
[  703.281135][T18115] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4467'.
[  703.320327][T18119] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4468'.
[  703.389719][T15720] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  704.434303][T15720] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  704.539420][T15720] Bluetooth: hci1: Unknown advertising packet type: 0x1000
[  704.578138][T18153] netlink: 'syz.3.4478': attribute type 3 has an invalid length.
[  704.664473][T18153] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4478'.
[  704.699205][T18158] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4480'.
[  704.801835][T18163] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4481'.
[  705.016906][T15720] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  706.126569][T18197] device syzkaller0 entered promiscuous mode
[  706.178065][T18199] __nla_validate_parse: 1 callbacks suppressed
[  706.178090][T18199] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4496'.
[  706.326654][T18211] netlink: 'syz.0.4499': attribute type 3 has an invalid length.
[  706.420875][T18215] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4501'.
[  708.392622][T18225] netlink: 'syz.0.4503': attribute type 4 has an invalid length.
[  708.415829][T18239] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4507'.
[  708.688873][T18253] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4511'.
[  709.105517][T15720] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  709.560527][T18287] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4523'.
[  710.380186][T18298] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4525'.
[  710.481104][T18300] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4526'.
[  710.777840][T18313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4530'.
[  713.081822][T18313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4530'.
[  713.368547][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  714.389376][T18342] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4539'.
[  714.550635][T18352] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4543'.
[  714.651831][T18357] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4544'.
[  718.462471][T18394] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4558'.
[  718.514621][T18392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4557'.
[  718.636529][T18396] netlink: 'syz.0.4559': attribute type 10 has an invalid length.
[  719.023828][T18417] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4567'.
[  719.254635][T18422] netlink: 'syz.3.4568': attribute type 25 has an invalid length.
[  719.262802][T18422] netlink: 'syz.3.4568': attribute type 29 has an invalid length.
[  719.451890][T18432] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4572'.
[  719.768716][T18442] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4576'.
[  720.250052][T18466] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4585'.
[  720.311725][T18469] netlink: 'syz.1.4583': attribute type 3 has an invalid length.
[  720.344012][T18469] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4583'.
[  720.388043][ T4272] Bluetooth: hci3: unexpected event 0x12 length: 151 > 8
[  720.765818][T18476] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4589'.
[  721.419066][T18495] netlink: 'syz.1.4594': attribute type 10 has an invalid length.
[  721.462292][T18494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4595'.
[  721.672077][T18501] netlink: 'syz.3.4598': attribute type 21 has an invalid length.
[  721.701267][T18501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4598'.
[  721.725614][T18507] netlink: 'syz.4.4597': attribute type 29 has an invalid length.
[  722.306582][T18521] netlink: 'syz.2.4602': attribute type 3 has an invalid length.
[  722.538237][T18529] net_ratelimit: 332 callbacks suppressed
[  722.538270][T18529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  722.641129][T18529] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  722.679173][T18529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  722.781393][T18537] netlink: 'syz.1.4609': attribute type 10 has an invalid length.
[  723.222102][T18553] netlink: 'syz.3.4614': attribute type 10 has an invalid length.
[  723.693625][T18553] team0: Port device macvlan0 added
[  724.125848][T18579] mac80211_hwsim hwsim134 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  724.335189][T18589] __nla_validate_parse: 8 callbacks suppressed
[  724.335225][T18589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4628'.
[  724.722823][ T4272] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5
[  724.907477][T18606] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4633'.
[  728.600107][T18631] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4644'.
[  729.359390][T18647] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4648'.
[  729.538427][T18650] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4649'.
[  729.594482][ T4272] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  729.602516][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  729.612522][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0
[  729.620119][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  729.630209][ T4272] Workqueue: hci2 hci_rx_work
[  729.635019][ T4272] Call Trace:
[  729.638366][ T4272]  <TASK>
[  729.641385][ T4272]  dump_stack_lvl+0x188/0x24e
[  729.646163][ T4272]  ? show_regs_print_info+0x12/0x12
[  729.651422][ T4272]  ? load_image+0x410/0x410
[  729.656026][ T4272]  sysfs_create_dir_ns+0x26a/0x290
[  729.661218][ T4272]  ? __lock_acquire+0x7bd0/0x7bd0
[  729.666285][ T4272]  ? sysfs_warn_dup+0xa0/0xa0
[  729.671008][ T4272]  ? do_raw_spin_unlock+0x11d/0x230
[  729.676254][ T4272]  kobject_add_internal+0x617/0xca0
[  729.681544][ T4272]  kobject_add+0x160/0x230
[  729.686028][ T4272]  ? kobject_init+0x1c0/0x1c0
[  729.690849][ T4272]  ? __raw_spin_lock_init+0x41/0x100
[  729.696166][ T4272]  ? klist_children_get+0x50/0x50
[  729.701286][ T4272]  ? get_device_parent+0x121/0x3e0
[  729.706443][ T4272]  device_add+0x470/0x1050
[  729.710903][ T4272]  hci_conn_add_sysfs+0xd1/0x1e0
[  729.715936][ T4272]  le_conn_complete_evt+0xf69/0x1560
[  729.721326][ T4272]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  729.727602][ T4272]  ? bt_info+0x180/0x180
[  729.731884][ T4272]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  729.737608][ T4272]  ? mutex_unlock+0x10/0x10
[  729.742149][ T4272]  ? skb_pull_data+0xec/0x1f0
[  729.746954][ T4272]  hci_le_conn_complete_evt+0x183/0x440
[  729.752575][ T4272]  ? hci_remote_host_features_evt+0x230/0x230
[  729.758679][ T4272]  hci_event_packet+0x7b3/0x1290
[  729.763670][ T4272]  ? __lock_acquire+0x7bd0/0x7bd0
[  729.768734][ T4272]  ? bis_list+0x280/0x280
[  729.773092][ T4272]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  729.779040][ T4272]  ? kcov_remote_start+0x4b0/0x7e0
[  729.784256][ T4272]  ? nf_ct_resolve_clash+0x572/0x68f
[  729.789578][ T4272]  ? hci_send_to_monitor+0x9c/0x4a0
[  729.794845][ T4272]  hci_rx_work+0x3eb/0xd40
[  729.799318][ T4272]  ? _raw_spin_unlock+0x40/0x40
[  729.804235][ T4272]  ? process_one_work+0x7b4/0x1160
[  729.809550][ T4272]  process_one_work+0x8ab/0x1160
[  729.814610][ T4272]  ? worker_detach_from_pool+0x240/0x240
[  729.820268][ T4272]  ? _raw_spin_lock_irq+0x86/0xf0
[  729.825346][ T4272]  ? _raw_spin_lock_irq+0xb7/0xf0
[  729.830410][ T4272]  ? _raw_spin_lock_irqsave+0x100/0x100
[  729.835995][ T4272]  ? wq_worker_running+0x97/0x190
[  729.841057][ T4272]  worker_thread+0xaf5/0x12a0
[  729.845862][ T4272]  kthread+0x29d/0x330
[  729.850017][ T4272]  ? worker_clr_flags+0x1a0/0x1a0
[  729.855071][ T4272]  ? kthread_blkcg+0xd0/0xd0
[  729.859701][ T4272]  ret_from_fork+0x1f/0x30
[  729.864230][ T4272]  </TASK>
[  729.869972][ T4272] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  729.883274][ T4272] Bluetooth: hci2: failed to register connection device
[  731.291224][T18688] netlink: 'syz.0.4660': attribute type 19 has an invalid length.
[  731.327861][T18688] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.4660'.
[  731.492820][T18693] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4662'.
[  731.911504][T18705] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4668'.
[  732.018207][T18710] netlink: 'syz.2.4670': attribute type 2 has an invalid length.
[  732.053167][T18710] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.4670'.
[  733.101384][T18747] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4680'.
[  733.567320][T18768] netlink: 'syz.1.4687': attribute type 10 has an invalid length.
[  733.588226][T18768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4687'.
[  733.623178][T18768] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  733.700132][T18773] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4689'.
[  733.919281][T18778] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.4690'.
[  734.554288][T18789] netlink: 'syz.3.4695': attribute type 1 has an invalid length.
[  734.570904][T18789] netlink: 'syz.3.4695': attribute type 3 has an invalid length.
[  734.580306][T18793] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4697'.
[  734.580530][T18789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4695'.
[  734.703737][T18787] delete_channel: no stack
[  735.066051][T18811] netlink: 'syz.1.4703': attribute type 2 has an invalid length.
[  735.096343][T18811] device 0 entered promiscuous mode
[  735.280685][T18817] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4704'.
[  741.206515][T18851] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4713'.
[  742.011168][T18887] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4726'.
[  742.051540][ T4272] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  742.068219][T18892] netlink: 'syz.3.4727': attribute type 16 has an invalid length.
[  742.089011][T18892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4727'.
[  742.104640][T18892] netlink: 'syz.3.4727': attribute type 10 has an invalid length.
[  742.560661][T18908] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4731'.
[  743.689085][T18934] netlink: 'syz.0.4737': attribute type 4 has an invalid length.
[  743.696746][T18932] device syzkaller0 entered promiscuous mode
[  743.717532][T18934] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4737'.
[  743.933211][T18941] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4741'.
[  744.211403][T18948] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4744'.
[  744.639731][T18971] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4751'.
[  745.633137][T18994] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4760'.
[  745.988399][T19007] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.4763'.
[  746.282043][T19013] device wlan1 entered promiscuous mode
[  746.472980][T19022] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4768'.
[  746.518875][T19023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  746.526797][T19023] IPv6: NLM_F_CREATE should be set when creating new route
[  746.534442][T19023] IPv6: NLM_F_CREATE should be set when creating new route
[  746.542364][T19023] IPv6: NLM_F_CREATE should be set when creating new route
[  746.681587][T19026] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4771'.
[  747.136166][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  747.142593][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  747.301414][T19035] netlink: 'syz.3.4773': attribute type 10 has an invalid length.
[  747.330217][T19035] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.338882][T19035] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.388670][T19035] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.396428][T19035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.405879][T19035] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.413509][T19035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.455526][T19035] team0: Port device bridge0 added
[  747.477957][T19034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4773'.
[  747.494251][T19038] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4774'.
[  747.635499][T19045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4776'.
[  749.334219][ T4272] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  751.002758][ T4272] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3
[  751.106029][T19092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4788'.
[  751.341675][T19105] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4791'.
[  751.488595][T19111] netlink: 'syz.2.4793': attribute type 39 has an invalid length.
[  751.828118][T19119] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4796'.
[  751.886451][T19123] netlink: 'syz.3.4798': attribute type 21 has an invalid length.
[  751.896993][T19123] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4798'.
[  751.907491][T19123] netlink: 'syz.3.4798': attribute type 4 has an invalid length.
[  751.915982][T19123] netlink: 'syz.3.4798': attribute type 5 has an invalid length.
[  751.925302][T19123] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4798'.
[  752.864294][T19146] delete_channel: no stack
[  752.941673][T19148] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4806'.
[  753.881324][T19166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4812'.
[  755.140389][T19182] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4818'.
[  755.192331][T19193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  755.214485][T19193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  755.447095][T19198] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4825'.
[  755.787340][T19213] netlink: 'syz.0.4830': attribute type 10 has an invalid length.
[  755.952504][T19213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4830'.
[  756.212483][T19222] netlink: 'syz.3.4833': attribute type 10 has an invalid length.
[  756.227719][T19222] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4833'.
[  756.242735][T19222] device hsr0 entered promiscuous mode
[  756.251029][T19222] bridge0: port 3(hsr0) entered blocking state
[  756.259507][T19222] bridge0: port 3(hsr0) entered disabled state
[  756.309010][T19222] bridge0: port 3(hsr0) entered blocking state
[  756.315957][T19222] bridge0: port 3(hsr0) entered forwarding state
[  756.335811][T19229] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.4837'.
[  756.370467][T19229] openvswitch: netlink: Flow actions attr not present in new flow.
[  756.530321][T19237] mac80211_hwsim hwsim133 ������: renamed from wlan0
[  756.727850][T19242] netlink: 'syz.3.4840': attribute type 2 has an invalid length.
[  756.837383][T19250] __nla_validate_parse: 3 callbacks suppressed
[  756.837430][T19250] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4844'.
[  756.966084][T19254] netlink: 'syz.2.4842': attribute type 10 has an invalid length.
[  756.978396][T19254] netlink: 'syz.2.4842': attribute type 19 has an invalid length.
[  757.002668][T19254] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.4842'.
[  757.123643][T15720] Bluetooth: hci3: command 0x0406 tx timeout
[  757.235974][T19262] netlink: 'syz.3.4848': attribute type 1 has an invalid length.
[  757.268811][T19262] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4848'.
[  757.516646][T19273] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4852'.
[  758.185477][T19295] netlink: 'syz.1.4858': attribute type 11 has an invalid length.
[  758.249679][T19295] netlink: 184220 bytes leftover after parsing attributes in process `syz.1.4858'.
[  758.681373][T19310] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4863'.
[  758.905110][T19314] netlink: 'syz.1.4865': attribute type 10 has an invalid length.
[  758.931207][T19314] device hsr0 entered promiscuous mode
[  759.369740][T19335] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4872'.
[  759.541388][T19341] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4874'.
[  759.682285][T19341] netlink: 'syz.0.4874': attribute type 10 has an invalid length.
[  759.780439][T19341] �: port 1(vlan0) entered disabled state
[  759.840967][T19345] netlink: 'syz.1.4875': attribute type 10 has an invalid length.
[  760.134262][T19352] netlink: 'syz.4.4877': attribute type 39 has an invalid length.
[  760.351406][T19354] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4878'.
[  760.401091][T19354] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  760.873118][T19364] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4882'.
[  761.260821][T19363] device wlan1 left promiscuous mode
[  761.346257][T19379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  761.361908][T19379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  762.551225][T19303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  763.037786][T19404] __nla_validate_parse: 1 callbacks suppressed
[  763.037832][T19404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4892'.
[  763.639780][T19419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4898'.
[  764.017129][T15720] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  764.110238][T19434] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4904'.
[  764.132724][T15720] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28
[  764.140919][T15720] Bluetooth: hci1: Unable to find connection with handle 0x0000
[  764.719381][T15720] Bluetooth: hci4: unexpected event 0x17 length: 15 > 6
[  764.939650][T19463] delete_channel: no stack
[  765.716505][T19478] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4916'.
[  765.812473][T19489] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4917'.
[  766.479783][T19498] netlink: 'syz.2.4921': attribute type 1 has an invalid length.
[  766.495271][T19498] netlink: 'syz.2.4921': attribute type 3 has an invalid length.
[  766.503276][T19498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4921'.
[  767.041345][T19514] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4923'.
[  767.298116][T19523] device wg2 entered promiscuous mode
[  767.830614][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4929'.
[  768.280913][T19547] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4933'.
[  768.835085][T19564] netlink: 'syz.3.4941': attribute type 25 has an invalid length.
[  768.857021][T19564] netlink: 'syz.3.4941': attribute type 29 has an invalid length.
[  768.874562][T19566] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4942'.
[  768.887344][T19567] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4941'.
[  770.196972][T15720] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  770.320633][T19611] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4953'.
[  770.977277][T15720] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13
[  773.414428][T19665] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4969'.
[  773.618458][T19669] device syzkaller0 entered promiscuous mode
[  773.691462][T19687] netlink: 'syz.0.4973': attribute type 4 has an invalid length.
[  773.720803][T19687] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4973'.
[  773.960391][T19694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4974'.
[  775.771869][T19681] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4971'.
[  775.781515][T19704] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4977'.
[  775.976924][T19713] netlink: 'syz.2.4980': attribute type 10 has an invalid length.
[  776.259806][T19724] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4983'.
[  776.280195][T19726] netlink: 'syz.1.4984': attribute type 27 has an invalid length.
[  776.317506][T19726] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4984'.
[  776.872905][T19745] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4990'.
[  776.960344][T19748] netlink: 'syz.4.4991': attribute type 1 has an invalid length.
[  777.004968][T19752] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4993'.
[  777.410929][T19765] device ip6gretap0 left promiscuous mode
[  777.445959][T19765] bridge0: port 2(ip6gretap0) entered disabled state
[  777.495237][T19765] device bridge_slave_0 left promiscuous mode
[  777.502755][T19765] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.833967][T19774] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4999'.
[  777.924965][T19772] netlink: 'syz.4.4998': attribute type 39 has an invalid length.
[  777.951302][T19772] device veth0_macvtap left promiscuous mode
[  777.993412][T19775] netlink: 'syz.3.5000': attribute type 10 has an invalid length.
[  778.020450][T19775] device team0 entered promiscuous mode
[  778.033756][T19775] device team_slave_0 entered promiscuous mode
[  778.051484][T19775] device team_slave_1 entered promiscuous mode
[  778.064434][T19775] device macvlan0 entered promiscuous mode
[  778.074570][T19775] device bridge0 entered promiscuous mode
[  778.106767][T19775] bridge0: port 4(team0) entered blocking state
[  778.124986][T19775] bridge0: port 4(team0) entered disabled state
[  778.169581][T19775] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  778.592502][T19789] netlink: 'syz.3.5003': attribute type 10 has an invalid length.
[  778.614050][T19789] __nla_validate_parse: 1 callbacks suppressed
[  778.615675][T19789] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5003'.
[  778.713271][T19795] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  778.783132][T19795] netlink: 'syz.0.5005': attribute type 21 has an invalid length.
[  778.812571][T19795] netlink: 'syz.0.5005': attribute type 4 has an invalid length.
[  778.831781][T19795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5005'.
[  779.088419][T19805] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5009'.
[  779.497755][T19817] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5015'.
[  779.517991][T19813] netlink: 'syz.1.5013': attribute type 7 has an invalid length.
[  779.746499][T19824] device wlan1 entered promiscuous mode
[  780.065816][T19837] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5021'.
[  780.238410][T19841] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.5023'.
[  780.504995][T19851] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5028'.
[  780.600006][T19854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5030'.
[  780.657818][T19860] netlink: 'syz.0.5029': attribute type 10 has an invalid length.
[  780.684796][T19860] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5029'.
[  781.326293][T19860] device vlan0 left promiscuous mode
[  781.331922][T19860] �: port 1(vlan0) entered disabled state
[  781.498955][T19870] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5033'.
[  783.084142][T19931] netlink: 'syz.4.5052': attribute type 16 has an invalid length.
[  783.649948][T19943] __nla_validate_parse: 4 callbacks suppressed
[  783.649982][T19943] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5054'.
[  784.822785][T19977] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5066'.
[  785.074475][T19983] netlink: 'syz.0.5067': attribute type 12 has an invalid length.
[  785.093799][T19983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5067'.
[  785.425356][T20027] netlink: 'syz.4.5068': attribute type 10 has an invalid length.
[  785.433251][T20027] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5068'.
[  786.821265][T20013] can: request_module (can-proto-0) failed.
[  787.091022][T20077] IPv6: Can't replace route, no match found
[  787.165963][T20082] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5076'.
[  788.035527][T20102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5081'.
[  788.270142][T20110] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.278338][T20110] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.397572][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5085'.
[  788.661698][T20119] device bridge_slave_1 left promiscuous mode
[  788.671690][T20119] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.713836][T20119] device bridge_slave_0 left promiscuous mode
[  788.720208][T20119] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.780942][T20123] netlink: 'syz.1.5089': attribute type 29 has an invalid length.
[  788.910867][T20123] netlink: 'syz.1.5089': attribute type 29 has an invalid length.
[  788.919747][T20124] netlink: 'syz.1.5089': attribute type 29 has an invalid length.
[  788.930076][T20127] netlink: 'syz.1.5089': attribute type 29 has an invalid length.
[  789.180689][T20124] netlink: 'syz.1.5089': attribute type 29 has an invalid length.
[  789.532765][T20137] netlink: 'syz.1.5091': attribute type 46 has an invalid length.
[  789.553743][T20137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5091'.
[  789.671554][T20142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5092'.
[  790.383338][T20154] netlink: 'syz.1.5095': attribute type 10 has an invalid length.
[  790.394105][T20154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5095'.
[  790.430062][T20154] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  790.593381][T20158] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5097'.
[  790.750790][T20162] device pim6reg1 entered promiscuous mode
[  791.594471][T20175] netlink: 'syz.2.5103': attribute type 29 has an invalid length.
[  791.995576][T20175] netlink: 'syz.2.5103': attribute type 29 has an invalid length.
[  792.158391][T20181] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5105'.
[  792.504631][T20191] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.5110'.
[  792.674518][T20191] netlink: 'syz.2.5110': attribute type 3 has an invalid length.
[  792.714725][T20201] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5108'.
[  792.719076][T20191] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5110'.
[  792.735229][T20201] device hsr_slave_0 left promiscuous mode
[  792.757760][T20201] device hsr_slave_1 left promiscuous mode
[  793.018865][T20209] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5113'.
[  793.096244][T20210] netlink: 'syz.3.5115': attribute type 10 has an invalid length.
[  793.120922][T20210] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5115'.
[  793.151288][T20210] device bond0 entered promiscuous mode
[  793.171779][T20210] device bond_slave_0 entered promiscuous mode
[  793.182411][T20210] device bond_slave_1 entered promiscuous mode
[  793.192226][T20210] bridge0: port 4(bond0) entered blocking state
[  793.201795][T20210] bridge0: port 4(bond0) entered disabled state
[  793.221627][T20210] bridge0: port 4(bond0) entered blocking state
[  793.228398][T20210] bridge0: port 4(bond0) entered forwarding state
[  793.437035][T20218] netlink: 'syz.0.5118': attribute type 10 has an invalid length.
[  793.488903][T15720] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  793.496747][T15720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  793.506552][T15720] CPU: 0 PID: 15720 Comm: kworker/u5:0 Not tainted syzkaller #0
[  793.514248][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  793.524356][T15720] Workqueue: hci2 hci_rx_work
[  793.529105][T15720] Call Trace:
[  793.532423][T15720]  <TASK>
[  793.535400][T15720]  dump_stack_lvl+0x188/0x24e
[  793.540146][T15720]  ? show_regs_print_info+0x12/0x12
[  793.545400][T15720]  ? load_image+0x410/0x410
[  793.550005][T15720]  sysfs_create_dir_ns+0x26a/0x290
[  793.555187][T15720]  ? __lock_acquire+0x7bd0/0x7bd0
[  793.560271][T15720]  ? sysfs_warn_dup+0xa0/0xa0
[  793.565017][T15720]  ? do_raw_spin_unlock+0x11d/0x230
[  793.570275][T15720]  kobject_add_internal+0x617/0xca0
[  793.575547][T15720]  kobject_add+0x160/0x230
[  793.580047][T15720]  ? kobject_init+0x1c0/0x1c0
[  793.584800][T15720]  ? __raw_spin_lock_init+0x41/0x100
[  793.590128][T15720]  ? klist_children_get+0x50/0x50
[  793.595201][T15720]  ? get_device_parent+0x121/0x3e0
[  793.600394][T15720]  device_add+0x470/0x1050
[  793.604882][T15720]  hci_conn_add_sysfs+0xd1/0x1e0
[  793.609874][T15720]  le_conn_complete_evt+0xf69/0x1560
[  793.615261][T15720]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  793.621574][T15720]  ? bt_info+0x180/0x180
[  793.625905][T15720]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  793.631778][T15720]  ? mutex_unlock+0x10/0x10
[  793.636329][T15720]  ? skb_pull_data+0xec/0x1f0
[  793.641065][T15720]  hci_le_conn_complete_evt+0x183/0x440
[  793.646688][T15720]  ? hci_remote_host_features_evt+0x230/0x230
[  793.652808][T15720]  hci_event_packet+0x7b3/0x1290
[  793.657823][T15720]  ? asm_sysvec_call_function_single+0x16/0x20
[  793.664119][T15720]  ? bis_list+0x280/0x280
[  793.668525][T15720]  ? kcov_remote_start+0x1b1/0x7e0
[  793.673693][T15720]  ? hci_send_to_monitor+0x9c/0x4a0
[  793.678960][T15720]  hci_rx_work+0x3eb/0xd40
[  793.683471][T15720]  ? process_one_work+0x7b4/0x1160
[  793.688638][T15720]  process_one_work+0x8ab/0x1160
[  793.693668][T15720]  ? worker_detach_from_pool+0x240/0x240
[  793.699334][T15720]  ? _raw_spin_lock_irq+0x86/0xf0
[  793.704425][T15720]  ? _raw_spin_lock_irq+0xb7/0xf0
[  793.709510][T15720]  ? _raw_spin_lock_irqsave+0x100/0x100
[  793.715134][T15720]  ? wq_worker_running+0x97/0x190
[  793.720227][T15720]  worker_thread+0xaf5/0x12a0
[  793.725008][T15720]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  793.730998][T15720]  kthread+0x29d/0x330
[  793.735114][T15720]  ? worker_clr_flags+0x1a0/0x1a0
[  793.740191][T15720]  ? kthread_blkcg+0xd0/0xd0
[  793.744839][T15720]  ret_from_fork+0x1f/0x30
[  793.749353][T15720]  </TASK>
[  793.767244][T15720] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  793.781245][T15720] Bluetooth: hci2: failed to register connection device
[  793.865612][T20225] netlink: 'syz.1.5121': attribute type 10 has an invalid length.
[  793.888903][T20225] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  794.089933][T20238] netlink: 'syz.0.5124': attribute type 21 has an invalid length.
[  794.641473][T20265] __nla_validate_parse: 5 callbacks suppressed
[  794.641521][T20265] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5134'.
[  794.888102][T20270] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5136'.
[  794.911769][T20270] netlink: 'syz.2.5136': attribute type 39 has an invalid length.
[  794.949071][T20273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5137'.
[  795.121377][T20281] syzkaller0: tun_chr_ioctl cmd 1074025692
[  795.530236][T20295] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.5145'.
[  795.553268][T20297] netlink: 'syz.1.5146': attribute type 21 has an invalid length.
[  795.579522][T20297] IPv6: NLM_F_CREATE should be specified when creating new route
[  795.618827][T20297] IPv6: Can't replace route, no match found
[  795.677915][T20301] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.5146'.
[  795.861921][T20303] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.5147'.
[  795.894211][T20303] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  796.418539][T20316] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5150'.
[  796.706788][T20327] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5154'.
[  796.752618][T20331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5155'.
[  797.083062][T20341] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5159'.
[  797.526041][T20354] netlink: 'syz.0.5163': attribute type 10 has an invalid length.
[  797.752711][T20362] netlink: 'syz.4.5165': attribute type 21 has an invalid length.
[  797.770718][T20362] netlink: 'syz.4.5165': attribute type 4 has an invalid length.
[  797.780766][T20362] netlink: 'syz.4.5165': attribute type 5 has an invalid length.
[  799.486061][T20413] bridge0: port 4(bond0) entered disabled state
[  799.493480][T20413] bridge0: port 3(hsr0) entered disabled state
[  799.500551][T20413] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.508419][T20413] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.671355][T20425] __nla_validate_parse: 9 callbacks suppressed
[  799.671400][T20425] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5184'.
[  799.796444][T20417] device syzkaller0 entered promiscuous mode
[  801.961510][T20446] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5189'.
[  801.983164][T20462] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5192'.
[  801.995416][T20462] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  802.332419][T20471] netlink: 'syz.0.5196': attribute type 2 has an invalid length.
[  802.365694][T20471] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5196'.
[  802.836320][T20488] netlink: 'syz.4.5202': attribute type 29 has an invalid length.
[  802.855700][T20488] netlink: 'syz.4.5202': attribute type 29 has an invalid length.
[  802.894788][T20492] netlink: 'syz.4.5202': attribute type 29 has an invalid length.
[  802.952394][T20488] netlink: 'syz.4.5202': attribute type 29 has an invalid length.
[  802.987612][T20488] netlink: 'syz.4.5202': attribute type 29 has an invalid length.
[  803.017707][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5204'.
[  803.085133][T20494] netlink: 'syz.0.5204': attribute type 23 has an invalid length.
[  803.093154][T20494] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5204'.
[  803.319121][T20501] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5207'.
[  803.489027][T20510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5209'.
[  803.614844][T20513] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5211'.
[  803.756823][T20518] netlink: 'syz.1.5213': attribute type 10 has an invalid length.
[  803.849810][T20523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5215'.
[  803.880778][T20523] netlink: 'syz.0.5215': attribute type 12 has an invalid length.
[  804.035709][T20533] netlink: 'syz.1.5216': attribute type 1 has an invalid length.
[  804.076420][T20532] delete_channel: no stack
[  804.755803][T20559] __nla_validate_parse: 3 callbacks suppressed
[  804.755826][T20559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5224'.
[  804.779208][T20559] openvswitch: netlink: Message has 6 unknown bytes.
[  805.027912][T20564] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5226'.
[  805.234156][T20569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5228'.
[  806.101970][T20591] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5234'.
[  806.162613][T20595] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5235'.
[  806.239616][T20591] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5234'.
[  806.706383][T20605] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.5236'.
[  806.966903][T20612] device syzkaller0 entered promiscuous mode
[  807.192607][T20617] syzkaller0: tun_chr_ioctl cmd 1074025692
[  807.385660][T20617] validate_nla: 5 callbacks suppressed
[  807.385779][T20617] netlink: 'syz.3.5241': attribute type 10 has an invalid length.
[  807.538543][T20617] device bridge_slave_1 left promiscuous mode
[  807.584654][T20617] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.641097][T20617] device bridge_slave_1 entered promiscuous mode
[  807.711941][T20646] delete_channel: no stack
[  807.715628][T20638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5246'.
[  807.779971][T20643] netlink: 'syz.1.5247': attribute type 10 has an invalid length.
[  808.420862][T20647] �: renamed from pim6reg1
[  808.567465][T20658] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5250'.
[  808.577267][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  808.583696][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  808.651078][T20660] netlink: 'syz.3.5252': attribute type 3 has an invalid length.
[  808.742845][T20660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.756186][T20660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.790828][T20660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  808.823279][T20660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  808.856360][T20660] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  808.888118][T20660] batman_adv: batadv0: Removing interface: virt_wifi0
[  809.359433][T20685] sock: sock_set_timeout: `syz.1.5256' (pid 20685) tries to set negative timeout
[  809.512306][T20688] netlink: 'syz.1.5256': attribute type 13 has an invalid length.
[  809.530528][T20688] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5256'.
[  809.550570][T20688] netlink: 'syz.1.5256': attribute type 13 has an invalid length.
[  809.565509][T20685] netlink: 'syz.1.5256': attribute type 10 has an invalid length.
[  809.921973][T20696] netlink: 'syz.0.5260': attribute type 10 has an invalid length.
[  809.956174][T20701] __nla_validate_parse: 1 callbacks suppressed
[  809.956208][T20701] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5262'.
[  811.149770][T20728] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5267'.
[  811.466386][T20735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5269'.
[  811.512300][T20737] netlink: 'syz.3.5271': attribute type 5 has an invalid length.
[  812.522032][T20748] netlink: 'syz.4.5270': attribute type 17 has an invalid length.
[  812.573746][T20748] netlink: 'syz.4.5270': attribute type 16 has an invalid length.
[  812.602228][T20748] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5270'.
[  812.744479][T20753] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5275'.
[  813.334662][T20786] netlink: 'syz.3.5280': attribute type 27 has an invalid length.
[  815.869778][T20786] bond0: (slave bond_slave_0): Releasing backup interface
[  815.877866][T20786] device bond_slave_0 left promiscuous mode
[  815.922022][T20791] syzkaller0: tun_chr_ioctl cmd 1074025692
[  816.130959][T20803] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5284'.
[  816.155791][T20802] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5283'.
[  816.392833][T20809] netlink: 'syz.1.5286': attribute type 5 has an invalid length.
[  816.580293][T20818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5289'.
[  816.665963][T20822] netlink: 'syz.3.5292': attribute type 10 has an invalid length.
[  816.763955][T20822] device batadv_slave_0 entered promiscuous mode
[  816.801480][T20822] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  816.875107][T20830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5293'.
[  816.920242][T20830] netlink: 'syz.1.5293': attribute type 10 has an invalid length.
[  817.002108][T20830] IPv6: ADDRCONF(NETDEV_CHANGE): Q�6�`Ҙ: link becomes ready
[  817.087762][T20830] netlink: 'syz.1.5293': attribute type 10 has an invalid length.
[  817.137769][T20830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5293'.
[  817.222477][T20830] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  817.302582][T20837] netlink: 'syz.4.5295': attribute type 41 has an invalid length.
[  817.325157][T20844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5296'.
[  817.434046][T20838] netlink: 'syz.0.5291': attribute type 17 has an invalid length.
[  817.465488][T20838] netlink: 'syz.0.5291': attribute type 16 has an invalid length.
[  817.514151][T20838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5291'.
[  817.630645][T20853] syzkaller0: tun_chr_ioctl cmd 1074025692
[  817.951879][T20855] device syzkaller0 entered promiscuous mode
[  817.990992][T20863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5312'.
[  818.166593][T20868] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5303'.
[  821.016525][T20874] netlink: 'syz.4.5304': attribute type 5 has an invalid length.
[  821.026059][T20877] netlink: 'syz.1.5305': attribute type 2 has an invalid length.
[  822.171682][T20904] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5311'.
[  822.230236][T20907] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5314'.
[  822.260128][T20907] netlink: 'syz.2.5314': attribute type 10 has an invalid length.
[  822.287058][T20907] IPv6: ADDRCONF(NETDEV_CHANGE): Q�6�`Ҙ: link becomes ready
[  822.357339][T20907] netlink: 'syz.2.5314': attribute type 10 has an invalid length.
[  822.365753][T20907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5314'.
[  822.388741][T20907] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  822.602922][T20915] syzkaller0: tun_chr_ioctl cmd 1074025692
[  822.815502][T20923] netlink: 'syz.1.5313': attribute type 17 has an invalid length.
[  822.856293][T20923] netlink: 'syz.1.5313': attribute type 16 has an invalid length.
[  822.894833][T20923] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5313'.
[  823.254290][T20932] device syzkaller0 entered promiscuous mode
[  823.526911][T20940] netlink: 'syz.0.5320': attribute type 5 has an invalid length.
[  823.655835][T20952] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5322'.
[  827.938633][T20948] device syzkaller0 entered promiscuous mode
[  830.472418][T20968] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5328'.
[  830.492094][T20978] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5342'.
[  830.510240][T20993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5332'.
[  830.522279][T20994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5332'.
[  830.536673][T20994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  830.555029][T21006] netlink: 'syz.1.5337': attribute type 10 has an invalid length.
[  830.563700][T21006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5337'.
[  830.574851][T21006] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  830.833071][T21014] device syzkaller0 entered promiscuous mode
[  830.939018][T21020] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5355'.
[  834.635206][T21048] device syzkaller0 entered promiscuous mode
[  834.655390][T21056] netlink: 'syz.2.5349': attribute type 5 has an invalid length.
[  836.475388][T21062] netlink: 'syz.0.5353': attribute type 10 has an invalid length.
[  836.483234][T21062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5353'.
[  836.494338][T21062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  836.512151][T21065] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5356'.
[  836.790017][T21076] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5369'.
[  836.862501][T21084] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5357'.
[  836.881974][T21084] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  836.990761][T21081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5357'.
[  837.414476][T21095] device syzkaller0 entered promiscuous mode
[  837.423268][T21101] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5365'.
[  837.801644][T21110] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5378'.
[  841.306881][T21125] netlink: 'syz.2.5375': attribute type 10 has an invalid length.
[  841.335479][T21125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5375'.
[  841.366383][T21125] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  841.396108][T21128] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5384'.
[  843.939882][T21159] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5385'.
[  843.960075][T21158] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5396'.
[  844.602223][T21176] device syzkaller0 entered promiscuous mode
[  847.137584][T21184] netlink: 'syz.4.5391': attribute type 10 has an invalid length.
[  847.145544][T21184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5391'.
[  847.155678][T21187] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5404'.
[  847.167295][T21188] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5403'.
[  847.317623][T21202] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5407'.
[  847.632856][T21216] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5412'.
[  848.211443][T21232] netlink: 'syz.0.5409': attribute type 10 has an invalid length.
[  848.255029][T21232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5409'.
[  848.293209][T21232] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  848.554918][T21234] device syzkaller0 entered promiscuous mode
[  848.966009][T21251] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5417'.
[  849.251361][T21260] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5420'.
[  849.314207][T15720] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  849.788223][T21273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5434'.
[  849.837612][T21274] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5436'.
[  851.387579][T21324] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5441'.
[  851.728081][T21333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5445'.
[  851.780198][T21325] can: request_module (can-proto-0) failed.
[  851.786222][T21335] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.5444'.
[  852.571303][T21356] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5462'.
[  852.997664][T21371] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5458'.
[  853.087676][T15720] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  854.497666][T21404] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5478'.
[  854.869364][T21406] can: request_module (can-proto-0) failed.
[  854.973335][T21424] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5473'.
[  855.000707][T15720] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  855.225997][T21436] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.5477'.
[  855.779470][T21451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5483'.
[  856.068263][T15720] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  857.002628][T21473] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5491'.
[  857.040678][T15720] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  857.045822][T15720] Bluetooth: hci3: Unknown advertising packet type: 0x1000
[  857.313885][T21488] netlink: 'syz.4.5494': attribute type 3 has an invalid length.
[  857.355185][T21488] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5494'.
[  857.558119][T21483] can: request_module (can-proto-0) failed.
[  857.910366][T21493] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5507'.
[  858.737625][T21505] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5511'.
[  858.831495][T21512] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.5499'.
[  858.978295][T21518] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5501'.
[  859.989873][T21535] can: request_module (can-proto-0) failed.
[  860.367241][T21554] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.5515'.
[  860.459822][T21552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5517'.
[  861.574697][T21569] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5520'.
[  861.649247][T15720] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  862.292405][T21588] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5535'.
[  862.597608][T15720] Bluetooth: hci2: Unknown advertising packet type: 0x1000
[  862.700049][T21604] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.5529'.
[  862.762130][T21597] can: request_module (can-proto-0) failed.
[  862.827021][T21613] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5532'.
[  863.714274][T21612] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5542'.
[  864.103538][T15720] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5
[  864.272008][T21634] can: request_module (can-proto-0) failed.
[  864.361915][T21645] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5550'.
[  865.207661][T21666] netlink: 'syz.0.5540': attribute type 3 has an invalid length.
[  865.234190][T21666] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5540'.
[  865.405886][T15720] Bluetooth: hci4: Unknown advertising packet type: 0x1000
[  865.498287][T21663] can: request_module (can-proto-0) failed.
[  865.921852][T21692] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5551'.
[  867.022235][T21710] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5558'.
[  867.130306][T21699] can: request_module (can-proto-0) failed.
[  867.218952][T21716] netlink: 'syz.2.5560': attribute type 3 has an invalid length.
[  867.227088][T21716] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5560'.
[  867.995709][T15720] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  868.099213][T21733] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5576'.
[  870.015837][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  870.022211][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  871.297698][T15720] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  871.459263][T21755] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5583'.
[  871.812135][T21765] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5572'.
[  872.323623][T21775] netlink: 'syz.3.5575': attribute type 10 has an invalid length.
[  872.428038][T21775] team0: Device hsr_slave_0 is already a lower device of the team interface
[  872.591564][T21778] netlink: 'syz.1.5577': attribute type 3 has an invalid length.
[  872.623644][T21778] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5577'.
[  872.655767][T21786] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5591'.
[  872.668601][T21781] netlink: 'syz.4.5594': attribute type 10 has an invalid length.
[  872.730416][T21781] team0: Device hsr_slave_0 failed to register rx_handler
[  872.908678][T21793] netlink: 'syz.1.5596': attribute type 3 has an invalid length.
[  872.939888][T21793] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5596'.
[  873.323807][T21805] netlink: 'syz.3.5601': attribute type 3 has an invalid length.
[  873.331873][T21805] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5601'.
[  873.740172][T21823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5590'.
[  876.559120][T21835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5608'.
[  876.852706][T21843] netlink: 'syz.4.5595': attribute type 5 has an invalid length.
[  877.118562][T21851] netlink: 'syz.4.5614': attribute type 21 has an invalid length.
[  877.133844][T21851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5614'.
[  877.180400][T21856] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5605'.
[  877.217012][T21854] netlink: 'syz.2.5604': attribute type 10 has an invalid length.
[  877.406447][T21860] netlink: 'syz.0.5607': attribute type 3 has an invalid length.
[  877.434082][T21860] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5607'.
[  877.996819][T21882] netlink: 'syz.0.5616': attribute type 10 has an invalid length.
[  878.041957][T21880] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5618'.
[  880.691535][T21883] netlink: 'syz.2.5609': attribute type 17 has an invalid length.
[  880.699485][T21883] netlink: 'syz.2.5609': attribute type 16 has an invalid length.
[  880.707666][T21883] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5609'.
[  880.738064][T21888] netlink: 'syz.1.5617': attribute type 29 has an invalid length.
[  880.940474][T21900] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5621'.
[  881.003149][T21900] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5621'.
[  881.017109][T21900] IPv6: ADDRCONF(NETDEV_CHANGE): Q�6�`Ҙ: link becomes ready
[  881.046577][T21900] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  881.080619][T21901] netlink: 'syz.0.5630': attribute type 10 has an invalid length.
[  881.157183][T21911] netlink: 'syz.4.5622': attribute type 3 has an invalid length.
[  881.173816][T21911] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5622'.
[  881.233551][T21913] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5625'.
[  881.655348][T21928] netlink: 'syz.1.5628': attribute type 10 has an invalid length.
[  882.307280][T21937] netlink: 'syz.4.5631': attribute type 3 has an invalid length.
[  882.346842][T21937] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5631'.
[  882.534913][T21949] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5635'.
[  882.576871][T21950] netlink: 'syz.0.5632': attribute type 21 has an invalid length.
[  882.588616][T21950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5632'.
[  882.600790][T21941] netlink: 'syz.3.5645': attribute type 29 has an invalid length.
[  882.920687][T21961] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5642'.
[  882.971990][T21966] netlink: 'syz.2.5643': attribute type 10 has an invalid length.
[  883.051770][T21968] netlink: 'syz.4.5644': attribute type 10 has an invalid length.
[  883.067859][T21968] team0: Device hsr_slave_0 failed to register rx_handler
[  883.151301][T21974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5647'.
[  883.174643][T21974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5647'.
[  883.194986][T21974] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  883.312795][T21982] netlink: 'syz.1.5648': attribute type 3 has an invalid length.
[  883.321550][T21982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5648'.
[  883.822303][T21986] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5652'.
[  883.853807][T21987] netlink: 'syz.4.5654': attribute type 10 has an invalid length.
[  883.876837][T21990] netlink: 'syz.2.5651': attribute type 3 has an invalid length.
[  883.891102][T21990] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5651'.
[  883.961982][T21987] team0: Port device macvlan0 added
[  884.238008][T22002] netlink: 'syz.2.5656': attribute type 21 has an invalid length.
[  884.263505][T22002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5656'.
[  884.376718][T22010] netlink: 'syz.4.5660': attribute type 10 has an invalid length.
[  884.395164][T22010] team0: Device hsr_slave_0 failed to register rx_handler
[  884.462346][T22014] netlink: 'syz.0.5668': attribute type 3 has an invalid length.
[  884.732910][T22026] team0: Port device geneve1 added
[  884.766598][T22027] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  884.817120][T22027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  884.846613][T22027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  884.936602][T15720] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  885.455818][T22049] team0: Device hsr_slave_0 is already a lower device of the team interface
[  886.060123][T22071] IPv6: ADDRCONF(NETDEV_CHANGE): Q�6�`Ҙ: link becomes ready
[  886.081318][T22071] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  887.131171][T22095] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  887.228356][T22099] device geneve1 entered promiscuous mode
[  887.244346][T22099] team0: Port device geneve1 added
[  887.393222][T22111] __nla_validate_parse: 22 callbacks suppressed
[  887.393267][T22111] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5696'.
[  887.854751][T22123] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5700'.
[  888.047791][T22133] validate_nla: 11 callbacks suppressed
[  888.047826][T22133] netlink: 'syz.2.5702': attribute type 3 has an invalid length.
[  888.062090][T22133] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5702'.
[  888.131797][T22137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5706'.
[  888.162929][T22137] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5706'.
[  888.183489][T22137] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  888.203331][T22142] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.5708'.
[  888.235256][T22137] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5706'.
[  888.257264][T22137] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  888.300035][T22137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  888.645004][T22152] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5712'.
[  888.666162][T22154] netlink: 'syz.4.5711': attribute type 1 has an invalid length.
[  888.675885][T22154] netlink: 'syz.4.5711': attribute type 3 has an invalid length.
[  888.684613][T22154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5711'.
[  888.752959][T22153] delete_channel: no stack
[  889.047808][T22166] netlink: 'syz.4.5715': attribute type 10 has an invalid length.
[  889.090573][T22169] netlink: 'syz.0.5724': attribute type 3 has an invalid length.
[  889.091276][T22170] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5716'.
[  889.291615][T22033] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  889.528821][T22179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  889.565346][T22179] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  889.629786][T22179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  889.705640][T22183] netlink: 'syz.1.5721': attribute type 19 has an invalid length.
[  916.733584][ T9117] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2686 jiffies s: 171161 root: 0x1/.
[  916.752245][ T9117] rcu: blocking rcu_node structures (internal RCU debug):
[  916.764534][ T9117] Sending NMI from CPU 1 to CPUs 0:
[  916.769782][    C0] NMI backtrace for cpu 0
[  916.769793][    C0] CPU: 0 PID: 22189 Comm: syz.2.5723 Not tainted syzkaller #0
[  916.769808][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  916.769822][    C0] RIP: 0010:kasan_check_range+0x1b7/0x290
[  916.769940][    C0] Code: 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b 41 5c 41 5e 41 5f 5d <c3> 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 0f 85 89 00 00
[  916.769979][    C0] RSP: 0018:ffffc90000006d78 EFLAGS: 00000056
[  916.770021][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8163f3f4
[  916.770031][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e200f68
[  916.770039][    C0] RBP: ffffc90000006e88 R08: ffffffff8e200f6f R09: 1ffffffff1c401ed
[  916.770049][    C0] R10: dffffc0000000000 R11: fffffbfff1c401ee R12: 0000000000000000
[  916.770059][    C0] R13: 1ffff92000000dbc R14: 0000000000000000 R15: dffffc0000000000
[  916.770069][    C0] FS:  00007fae0020d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  916.770082][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  916.770092][    C0] CR2: 0000001b2fe14ff8 CR3: 0000000029ebe000 CR4: 00000000003506f0
[  916.770105][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  916.770114][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  916.770123][    C0] Call Trace:
[  916.770128][    C0]  <IRQ>
[  916.770133][    C0]  lock_acquire+0xd4/0x4a0
[  916.770158][    C0]  ? read_lock_is_recursive+0x10/0x10
[  916.770178][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  916.770225][    C0]  perf_event_output_forward+0xdf/0x2f0
[  916.770243][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  916.770261][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  916.770278][    C0]  ? perf_get_page_size+0x430/0x430
[  916.770298][    C0]  ? perf_event_output_forward+0x282/0x2f0
[  916.770316][    C0]  ? perf_event_output_forward+0xbe/0x2f0
[  916.770334][    C0]  ? perf_get_page_size+0x430/0x430
[  916.770352][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  916.770380][    C0]  __perf_event_overflow+0x457/0x630
[  916.770401][    C0]  perf_swevent_event+0x315/0x570
[  916.770421][    C0]  ? perf_tp_event+0xc10/0xc10
[  916.770439][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[  916.770480][    C0]  ? perf_swevent_event+0x4ba/0x570
[  916.770501][    C0]  perf_tp_event+0x36b/0xc10
[  916.770522][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  916.770542][    C0]  ? perf_tp_event+0xa8e/0xc10
[  916.770577][    C0]  ? kvm_sched_clock_read+0x14/0x40
[  916.770617][    C0]  ? sched_clock_cpu+0x6e/0x260
[  916.770659][    C0]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  916.770681][    C0]  perf_trace_preemptirq_template+0x268/0x320
[  916.770705][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  916.770727][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  916.770746][    C0]  ? __irq_exit_rcu+0x147/0x230
[  916.770781][    C0]  ? irq_exit_rcu+0x20/0x20
[  916.770796][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  916.770820][    C0]  trace_irq_enable_rcuidle+0xd3/0x140
[  916.770840][    C0]  trace_hardirqs_on+0x24/0x40
[  916.770855][    C0]  asm_sysvec_irq_work+0x16/0x20
[  916.770874][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  916.770933][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  916.770944][    C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000206
[  916.770956][    C0] RAX: 23b2068f0a090f00 RBX: 1ffff92000000ebc RCX: 23b2068f0a090f00
[  916.770967][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0
[  916.770977][    C0] RBP: ffffc90000007690 R08: ffff8880b8e3580b R09: 1ffff110171c6b01
[  916.770987][    C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246
[  916.770997][    C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001
[  916.771019][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  916.771032][    C0]  ? read_lock_is_recursive+0x10/0x10
[  916.771055][    C0]  __rcu_read_unlock+0x78/0xd0
[  916.771069][    C0]  is_bpf_text_address+0x27a/0x2a0
[  916.771106][    C0]  ? is_bpf_text_address+0x22/0x2a0
[  916.771120][    C0]  kernel_text_address+0x9c/0xd0
[  916.771137][    C0]  __kernel_text_address+0x9/0x30
[  916.771154][    C0]  unwind_get_return_address+0x49/0x80
[  916.771169][    C0]  ? stack_trace_save+0xf0/0xf0
[  916.771214][    C0]  arch_stack_walk+0xf2/0x140
[  916.771240][    C0]  stack_trace_save+0xa6/0xf0
[  916.771256][    C0]  ? stack_trace_snprint+0xe0/0xe0
[  916.771273][    C0]  ? ct_nmi_exit+0x145/0x1c0
[  916.771294][    C0]  kasan_set_track+0x4b/0x70
[  916.771310][    C0]  ? kasan_set_track+0x4b/0x70
[  916.771326][    C0]  ? kasan_save_free_info+0x27/0x40
[  916.771338][    C0]  ? ____kasan_slab_free+0x126/0x1f0
[  916.771355][    C0]  ? slab_free_freelist_hook+0x133/0x1b0
[  916.771370][    C0]  ? kmem_cache_free+0xf7/0x2a0
[  916.771384][    C0]  ? rcu_core+0x9a3/0x1740
[  916.771397][    C0]  ? handle_softirqs+0x291/0x910
[  916.771409][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  916.771421][    C0]  ? irq_exit_rcu+0x5/0x20
[  916.771432][    C0]  ? sysvec_apic_timer_interrupt+0xa0/0xc0
[  916.771448][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.771466][    C0]  ? __sanitizer_cov_trace_pc+0x58/0x60
[  916.771481][    C0]  ? __phys_addr+0x95/0x170
[  916.771522][    C0]  ? ___cache_free+0x16/0x160
[  916.771535][    C0]  ? qlist_free_all+0x76/0xe0
[  916.771548][    C0]  ? kasan_quarantine_reduce+0x144/0x160
[  916.771561][    C0]  ? __kasan_slab_alloc+0x1e/0x80
[  916.771578][    C0]  ? slab_post_alloc_hook+0x4b/0x490
[  916.771591][    C0]  ? __kmem_cache_alloc_node+0x19d/0x270
[  916.771605][    C0]  ? kmalloc_trace+0x26/0xe0
[  916.771652][    C0]  ? bpf_int_jit_compile+0x238/0xcb70
[  916.771688][    C0]  ? bpf_prog_select_runtime+0x48b/0x7d0
[  916.771701][    C0]  ? bpf_prog_load+0x1039/0x1530
[  916.771745][    C0]  ? __sys_bpf+0x5b8/0x780
[  916.771761][    C0]  ? __x64_sys_bpf+0x78/0x90
[  916.771777][    C0]  ? do_syscall_64+0x4c/0xa0
[  916.771790][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  916.771827][    C0]  ? percpu_ref_put+0x12/0x100
[  916.771843][    C0]  ? kmem_cache_free+0xf7/0x2a0
[  916.771856][    C0]  kasan_save_free_info+0x27/0x40
[  916.771869][    C0]  ____kasan_slab_free+0x126/0x1f0
[  916.771887][    C0]  slab_free_freelist_hook+0x133/0x1b0
[  916.771905][    C0]  ? proc_nr_files+0x50/0x50
[  916.771942][    C0]  ? rcu_core+0x9a3/0x1740
[  916.771956][    C0]  kmem_cache_free+0xf7/0x2a0
[  916.771973][    C0]  rcu_core+0x9a3/0x1740
[  916.771991][    C0]  ? rcu_core+0x931/0x1740
[  916.772008][    C0]  ? rcu_cpu_kthread_park+0x90/0x90
[  916.772022][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  916.772040][    C0]  ? lock_chain_count+0x20/0x20
[  916.772060][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.772080][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  916.772096][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.772121][    C0]  handle_softirqs+0x291/0x910
[  916.772137][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  916.772151][    C0]  ? do_softirq+0x210/0x210
[  916.772163][    C0]  ? hrtimer_interrupt+0x775/0x980
[  916.772182][    C0]  __irq_exit_rcu+0x13b/0x230
[  916.772195][    C0]  ? irq_exit_rcu+0x20/0x20
[  916.772213][    C0]  irq_exit_rcu+0x5/0x20
[  916.772225][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  916.772242][    C0]  </IRQ>
[  916.772247][    C0]  <TASK>
[  916.772251][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.772271][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60
[  916.772286][    C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> 0f 1f 80 00 00 00 00 48 8b 04 24 65 48 8b 15 c4 4d 80 7e 65 8b
[  916.772297][    C0] RSP: 0018:ffffc900057ef598 EFLAGS: 00000283
[  916.772309][    C0] RAX: ffffffff8139ebf5 RBX: 0000000076a12000 RCX: 0000000000080000
[  916.772319][    C0] RDX: ffffc900060c9000 RSI: 00000000000080c6 RDI: 00000000000080c7
[  916.772328][    C0] RBP: ffff888036626280 R08: ffff888036626140 R09: 00000000800c000a
[  916.772338][    C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888017441c80
[  916.772348][    C0] R13: dffffc0000000000 R14: 000000000000002e R15: ffff888017441c80
[  916.772362][    C0]  ? __phys_addr+0x95/0x170
[  916.772382][    C0]  __phys_addr+0x95/0x170
[  916.772399][    C0]  ? qlist_free_all+0x6b/0xe0
[  916.772411][    C0]  ___cache_free+0x16/0x160
[  916.772426][    C0]  qlist_free_all+0x76/0xe0
[  916.772441][    C0]  kasan_quarantine_reduce+0x144/0x160
[  916.772457][    C0]  __kasan_slab_alloc+0x1e/0x80
[  916.772475][    C0]  slab_post_alloc_hook+0x4b/0x490
[  916.772489][    C0]  ? slab_pre_alloc_hook+0x59/0x300
[  916.772504][    C0]  ? bpf_int_jit_compile+0x238/0xcb70
[  916.772518][    C0]  __kmem_cache_alloc_node+0x19d/0x270
[  916.772538][    C0]  ? bpf_int_jit_compile+0x238/0xcb70
[  916.772551][    C0]  kmalloc_trace+0x26/0xe0
[  916.772571][    C0]  bpf_int_jit_compile+0x238/0xcb70
[  916.772599][    C0]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  916.772622][    C0]  ? emit_bpf_dispatcher+0x1060/0x1060
[  916.772648][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  916.772667][    C0]  ? lock_chain_count+0x20/0x20
[  916.772686][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.772706][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  916.772722][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.772743][    C0]  bpf_prog_select_runtime+0x48b/0x7d0
[  916.772757][    C0]  ? bpf_obj_name_cpy+0x190/0x1d0
[  916.772775][    C0]  bpf_prog_load+0x1039/0x1530
[  916.772798][    C0]  ? map_freeze+0x390/0x390
[  916.772820][    C0]  ? __might_fault+0xa6/0x120
[  916.772862][    C0]  ? __might_fault+0xa6/0x120
[  916.772875][    C0]  ? __might_fault+0xc2/0x120
[  916.772888][    C0]  ? __might_fault+0xa6/0x120
[  916.772901][    C0]  ? bpf_lsm_bpf+0x5/0x10
[  916.772915][    C0]  ? security_bpf+0x7a/0xa0
[  916.772958][    C0]  __sys_bpf+0x5b8/0x780
[  916.772977][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[  916.773000][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  916.773025][    C0]  __x64_sys_bpf+0x78/0x90
[  916.773042][    C0]  do_syscall_64+0x4c/0xa0
[  916.773055][    C0]  ? clear_bhb_loop+0x60/0xb0
[  916.773067][    C0]  ? clear_bhb_loop+0x60/0xb0
[  916.773080][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  916.773098][    C0] RIP: 0033:0x7fadff39ce59
[  916.773111][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.773123][    C0] RSP: 002b:00007fae0020d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  916.773137][    C0] RAX: ffffffffffffffda RBX: 00007fadff615fa0 RCX: 00007fadff39ce59
[  916.773147][    C0] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[  916.773156][    C0] RBP: 00007fadff432e6f R08: 0000000000000000 R09: 0000000000000000
[  916.773164][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  916.773173][    C0] R13: 00007fadff616038 R14: 00007fadff615fa0 R15: 00007fff8c4bd698
[  916.773190][    C0]  </TASK>
[  917.939426][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  917.948785][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  917.957190][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  917.965989][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  917.975131][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  917.982480][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  918.253157][ T4272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  918.262348][ T4272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  918.270780][ T4272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  918.279152][ T4272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  918.288493][ T4272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  918.295919][ T4272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  920.033637][T15720] Bluetooth: hci5: command 0x0409 tx timeout
[  920.333647][T15720] Bluetooth: hci6: command 0x0409 tx timeout
[  922.083543][T15720] Bluetooth: hci5: command 0x041b tx timeout
[  922.433570][T15720] Bluetooth: hci6: command 0x041b tx timeout
[  924.183583][T15720] Bluetooth: hci5: command 0x040f tx timeout
[  924.483516][T15720] Bluetooth: hci6: command 0x040f tx timeout
[  926.283539][T15720] Bluetooth: hci5: command 0x0419 tx timeout
[  926.583592][T15720] Bluetooth: hci6: command 0x0419 tx timeout